home

vpsetup_v2.30.exe

NCH Software

This is a setup program which is used to install the application. This file is installed with the program VideoPad Video Editor. The file has been seen being downloaded from software.oldversion.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
VideoPad Video Editor

Version:
2.30+

MD5:
184b8a0fbd061d41d3d563de4699861a

SHA-1:
70fc5651c3496231dc689500c8a6d36c0881cc9a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 10:17:50 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Toolbar.Conduit (variant)
8.9482

File size:
3.6 MB (3,736,664 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
angol (ausztráliai)

Common path:
C:\Program Files\nch software\videopad\vpsetup_v2.30.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/25/2010 2:00:00 AM

Valid to:
8/4/2011 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
68C35978C8EC7147CF6D69A1E5F11396

File PE Metadata
Compilation timestamp:
3/15/2011 2:18:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:Z3oTtsLcgeWcxIC5lyEmlEv6JSIyR3nN6hdYqyiwBk0Ptps:Z7zeWJC509MMuo0A

Entry address:
0x2025

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, 6C, 0D, 00, 00, 53, 56, 57, 68, A0, 10, 40, 00, FF, 15, 18, 10, 40, 00, 68, B0, 10, 40, 00, 50, 89, 44, 24, 18, FF, 15, 48, 10, 40, 00, 33, DB, 3B, C3, 89, 44, 24, 0C, 75, 3D, 6A, 24, 68, C4, 10, 40, 00, 68, F0, 10, 40, 00, 53, FF, 15, 74, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, 30, 12, 40, 00, 53, 53, FF, 15, 6C, 10, 40, 00, FF, 74, 24, 10, FF, 15, 00, 10, 40, 00, 33, C0, 40, 5F, 5E, 5B, 8B, E5, 5D, C3, B8, 9C, 00, 00, 00, 8B, D0, 8D, 8C, 24, A8, 00, 00, 00, 88...
 
[+]

Entropy:
7.9978

Developed / compiled with:
Microsoft Visual C++

The file vpsetup_v2.30.exe has been discovered within the following programs.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup_v2.30.exe has been seen being distributed by the following 4 URLs.

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3NjkwNzAwMztzOjI6ImlkIjtpOjQxNTE7czo0OiJmaWxlIjtzOjY2OiJ2Mi4zMF92cHNldHVwLmV4ZXNLMVo3eWVVUVhkdXZRQ09acXNEdHFRX3QxMzI3MjkzNjE5X2V4dF92Mi4zMC5leGUiO3M6MzoidXJsIjtzOjQ3OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvdmlkZW9wYWQtMi0zMCI7czo0OiJwYXNzIjtzOjMyOiI2ZTQ2MDg2ZWM1NjRkZWFjMGNlZTUzMDc4OWZkNWNjOCI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3NDIwNTUzNDtzOjI6ImlkIjtpOjQxNTE7czo0OiJmaWxlIjtzOjY2OiJ2Mi4zMF92cHNldHVwLmV4ZXNLMVo3eWVVUVhkdXZRQ09acXNEdHFRX3QxMzI3MjkzNjE5X2V4dF92Mi4zMC5leGUiO3M6MzoidXJsIjtzOjQ2OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uZnIvd2luZG93cy92aWRlb3BhZC0yLTMwIjtzOjQ6InBhc3MiO3M6MzI6IjY2N2UwYmZlNjM4OTk4N2ZhYWU0ZWY5ZjFkMzE4NDY0Ijt9

http://downloads.hotdownloads.ru/.../vpsetup.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ0NDA4NTc3NTtzOjI6ImlkIjtpOjQxNTE7czo0OiJmaWxlIjtzOjY2OiJ2Mi4zMF92cHNldHVwLmV4ZXNLMVo3eWVVUVhkdXZRQ09acXNEdHFRX3QxMzI3MjkzNjE5X2V4dF92Mi4zMC5leGUiO3M6MzoidXJsIjtzOjQ3OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3MvdmlkZW9wYWQtMi0zMCI7czo0OiJwYXNzIjtzOjMyOiJhYjY3MjJiMzJhOTdlZGQ0OTNmZTQ0NGVmMGJjNjQyNiI7fQ==

Scan vpsetup_v2.30.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.