home

vpsetup.exe

VideoPad

NCH Software

This is a setup and installation application. This is installed with VideoPad Video Editor. The file has been seen being downloaded from installs.innovativesys.co and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
3.51+

MD5:
3652aa38b42e7fda98aff0c61a07c8b4

SHA-1:
f7a09281b554cb756fc41b8e9a778606f57b1939

SHA-256:
f2b70e85f3f5b541abee899f99cd4c6213e75840bbea7c1ef175bf377b6cfa8f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 12:00:22 AM UTC  (today)

File size:
5.5 MB (5,800,504 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\vpsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 1:00:00 AM

Valid to:
8/8/2015 12:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 5:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:XKFBvzodLvTwbweNJzBV/ny20jjs42IN4SqMFUHVwf+tUZ3xs4z1Q8n:6jzKvBEBV/ya42IN4OyHV5tUxVn

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

The file vpsetup.exe has been discovered within the following program.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 7 URLs.

http://installs.innovativesys.co/.../videopad-video-editor-download-118701-3.51 Beta.exe&u={F8131B71-12F9-4BEB-B2DB-6B786628FEF5}

http://d.jdcdn.net/fas/.../videopad-video-editor-download-118701-3.51 Beta.exe

http://d6.jdcdn.net/fas/.../videopad-video-editor-download-118701-3.51 Beta.exe

http://software-files-a.cnet.com/s/software/13/77/92/.../vppsetup.exe

http://www.nch.com.au/.../vpsetup.exe

http://www.freshdevices.com/24197/.../vppsetup.exe

http://www.nchsoftware.com/.../vppsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.