vpsetup.exe

VideoPad

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from videopad-video-editor.sv.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
4.40

MD5:
c1f3a721074c4522d259e2c14008a0ea

SHA-1:
b8de1803cc5e7cc22dae40b4899d71bc83a281b4

SHA-256:
010619526714234b13b71e256284b786647c6f4a2ed03b7182dd0f1a1b8e55e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 6:02:45 AM UTC  (today)

File size:
5 MB (5,205,216 bytes)

Product version:
4.40

Copyright:
NCH Software

Original file name:
VideoPad.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\programs\vpsetup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
7/6/2015 1:00:00 AM

Valid to:
8/7/2017 12:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
1/24/2016 11:09:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:Q0MzwROEcPVpAtC2X9hti03yEnWVQnb7IgD8o7o++UyCIcVIU:PgwROZPVD2X9ht9iVQnb7IgD8bSPV

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 48, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 50, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9995

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file vpsetup.exe has been discovered within the following program.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 38 URLs.

http://videopad-video-editor.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmaeMpqSnmps=

http://www.nchsoftware.com/videopad/.../vpsetup.exe

http://www.nchsoftware.com/171E92C18EEE40A29D1749C505091DFC_SOPHOS_WARN_PROCEEDED_FLAG

https://doc-00-b0-docs.googleusercontent.com/docs/securesc/4tf5fsnps6et9m9osanr37uogf0tcdsk/r7oi50l69p4j1angf9u1sk3nqm60k2m6/1476028800000/.../18366349387029498333/0B95KsZbUzBd_OXMyWWZ2MDNWRjQ?e=download

http://relizua.com/.../go.php?url=aHR0cDovL3JlbGl6dWEuY29tL2Rvd25sb2FkL2ZpbGVzOC92cHNldHVwLmV4ZQ==

http://videopad-video-editor.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmqGKo5ykl5k=

https://d1ob5g40gc5b6g.cloudfront.net/26/259308/.../vpsetup.exe

http://videopad-video-editor.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmqGNp6ClmZc=

http://videopad-video-editor.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmaeLpKKjlJo=

http://www.centersharenew.com/gJe3yT cF0ATxV6m _vMkPwd9MNn5X0Zp3CH_jYIROWJs0tJkkczEkFl5kw05PiPl9OiNMhUJ2i8jjW6IgI9i0zhByfuPeuTOe1B8 R15yaOSDksLjPc2dghE_PocigAKFtvKsS1gXkZUI5kjTfXo7VJvQ8QhBnRg0rKyR8PDYtaVpxAfA1NzT6PCnrIFe6Ng2o7iz0M-G1wAAGRwXmtrh5zUIcAGHLiEg20POKANG2NnCEI4Sndd2yWYX7hflrWaiuwliNItryAQlPCE669WzksKjylIH66YDJd486Fk_nddXlBLGMlgLE5xDAs=

Latest 30 of 38 download URLs

Scan vpsetup.exe - Powered by Reason Core Security