vpsetupes.exe

VideoPad

NCH Software

This is a setup program which is used to install the application. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad, software para edición de vídeo

Version:
3.37ES

MD5:
4a644c7d4022ef5747946c2be661ae75

SHA-1:
5d20668b29dd2864a9eb11d1fa6e70f5a4380246

SHA-256:
d1d38456ab8a4c8734bbbf6318b38025dc3040532b01c7159cc4cda5248edc8e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 11:37:32 AM UTC  (today)

File size:
5.5 MB (5,802,520 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\vpsetupes.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
5/19/2013 7:00:00 PM

Valid to:
8/7/2015 6:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 12:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:FKFBvzodLvTwbweNJzBV/ny20jjs42IN4SqMFUHVwf+BBklIIDUiTEEq:MjzKvBEBV/ya42IN4OyHV5BBkl5oEq

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

The file vpsetupes.exe has been seen being distributed by the following 43 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=beb7cc21334a919aa3c4c0fb204f58a0&upv=691b0c5ae8565e6a0f2fe16ca1d8e872&z=results&sk=0&abt=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA90C262F3276EAAD17FA4E625F3CB3FBB743F335B34304586EFD1F2F88E7680E6CD43BDC73DE9F47BE48CEA7855E70456FCC261437AD2D453B15D47D5F4D2DA4F449C739F2ACEA7A95FBE36A0C75384C764021596EE08A9C5B9E8B9BC6669D00A5119DD24855F7BBBE1748A49EE59FD7F9F6208E8032EC3869D57DC6BF4D46F017D5D59730BADB8719B7EBB922FE8438EDC2AD9D7E296A25E93A00991BB428F3F&h=465E03E4F286EC980D510D2FECC283BFE91872FE47962A8DE4770A8177E373AD&directdownload=1&f=78069&d=http://www.nchsoftware.com/videopad/.../vpsetup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=7ad58821b4d99e52c15ffe3e494fee49&upv=bd6e71dfe15f600ce741cc39fab49e3a&z=results&sk=0&abt=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA90C262F3276EAAD17FA4E625F3CB3FBB8D201B77CA0E530F42B05FEF9B2661C8AAA637BF821B33273932ECF61428E82374722C87A234B9E76E583DCB81F31FBD1B6D77477C037501FFA110181AC4E12B4D958E59398505E834D569C9E33E74CD9A73D7A5204C877D97B5C8B5255DD357ADCC481E8185AA2B4889238FD089A35AF2D98F2D2CF8822A0BCF7204EC73F24EDD0324321B858F73FACB43D37C6B9154&h=895594F229E786A60961A336FA7999FBE592CCEA6FB652975E7751B1F56ED326&directdownload=1&f=78069&d=http://www.nchsoftware.com/videopad/.../vpsetup.exe

http://global-shared-files-l3.softonic.com/5d2/066/.../file?nvb=20140622135933&nva=20140623020033&token=02064bcc32c80f1960699&id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=vpsetupES.exe

http://www.nchsoftware.com/.../vpsetup.exe

http://gsf-cf.softonic.com//5d2/066/.../file?id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1410920382&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EETBT~viML1XnNVl~FP9v7Y2VZ7rVskZDM8Cztz1b67UzX9fKf-sHV0gZ2t379IpvwipI9bCh73z9kxIGARq79NZKBMP6oNYbl6QFkJLNPbuv9CvJXy4~O54XYaA~pF6Kovba8Ue3JJVswfd7V8FAxf~cgU1eR6bzXsZK-e6~zI_&filename=vpsetup.exe

http://global-shared-files-l3.softonic.com/5d2/066/.../file?nvb=20140623003931&nva=20140623124031&token=0d3e6317464da71e72ba6&id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=vpsetupES.exe

http://gsf-cf.softonic.com//5d2/066/.../file?id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1409563499&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VlcHTYxlmh~g-TMLGpuj5dd9H8wXbhrOeXgDdfNRo-D5VSOq7acYw9SW4p9XcUYExlzksFO~dqPVpCqpI~mEY4geZ6a5WC7WBAi3Vg8a8ArhqQbBqLOI2eyl6j88565-ZqSXXmP8j92bLAXEfDya5bR-vmyNj4sEm7bXnah0~sc_&filename=vpsetup.exe

http://gsf-cf.softonic.com//5d2/066/.../file?id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1411101518&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MniwMKYSQgoFU5~N6F~8JQyZEyVp2jzCc8uqN12amQ6Ltq4a-q~pmN7O6ZNXKx645dz~mjfWqs0t6S33Z9fTJcpbpvsBr93dRi-tKSwXIRgVbbu17BUosoP-iL2034AEU4f~K~PqZjbY7FPHD1vB8qb5jIU5xTzYPc~mJJpXV6M_&filename=vpsetup.exe

http://global-shared-files-l3.softonic.com/5d2/066/.../file?nvb=20140610140313&nva=20140611020413&token=01833d11621186c95da21&id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=vpsetupES.exe

http://gsf-cf.softonic.com//5d2/066/.../file?id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1411137422&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CJRsU7PwEFqLS9pIzi2yb3Sd1eNl~sFVIh255bS2FeZ~jdGKx99zgSXIO0d-bwzcAcbUTZJjOhlLkWhApr30cVV~O2ZEqN7CmOEhxhckFI6pM3wbs6PP9hn87jGMYurp3Y~WqbuDoZSTyS5CMQGUfBpEbhUIEFRiqjPru-VPVvA_&filename=vpsetup.exe

http://global-shared-files-l3.softonic.com/5d2/066/.../file?nvb=20140620200850&nva=20140621080950&token=052583da799e35260d067&id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=vpsetupES.exe

http://videopad-video-editor.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvTH4EHzP0daucGfNi4 hWQ10G63 WtaA/WXUEVOrWyG/9NARtf3NUYC0tnqfQEMtvcAghHzaRTdRHKg/.../qaxCm8=

http://gsf-cf.softonic.com//5d2/066/.../file?id_file=78069&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1404406898&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=RTmp1r62vaJcua4C8c~3~ktzHGbppuqia9mbkEGhxf96GS1B2Yrm-Sx-8IrbGhW05~s-qFW2sUBePzw~odSi9C52cWxGWICcFY~G3TM1uCtlv~ZAlzkQdyzBwJvlCxMjsXsIl8RL413OTMA2plVwYXWYDW-fQ18MxIcbHz7pcs4_&filename=vpsetupES.exe

Latest 30 of 43 download URLs

Scan vpsetupes.exe - Powered by Reason Core Security