home

vpsetup.exe

VideoPad

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from dw6.ru.uptodown.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
3.57+

MD5:
bb998649a22f931ceb2f13aba877bf4f

SHA-1:
4669efa47d11f44a4b1a5848f7e11860fed963d4

SHA-256:
a87c50193124994fb2772815027359fd7be7d41db3fd91c1927df24c947019fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:47:44 AM UTC  (today)

File size:
4.6 MB (4,778,552 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\vpsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/19/2013 7:00:00 PM

Valid to:
8/7/2015 6:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/9/2013 11:05:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:/qycyRpOGVAcBGLSOiWI4EbDN5D3G+gWNpMh7UwG:/pcyR4GBGLSOu1DN5D3G+5NpkUt

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9995

Developed / compiled with:
Microsoft Visual C++

The file vpsetup.exe has been discovered within the following programs.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 3 URLs.

http://dw6.ru.uptodown.com/u2d/.../videopad-video-editor-3-57-en-win.exe

http://www.nch.com.au/.../vpsetup.exe

http://www.nchsoftware.com/.../vppsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.