VirtualDubPortable_1.10.4_English.paf.exe

VirtualDub Portable

Rare Ideas, LLC

This is a portable setup version of the software. The portable version is a open source and free platform that has been modified so that a full setup/installation is not required. This is typically downloaded through the portableapps.com website. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
PortableApps.com  (signed by Rare Ideas, LLC)

Product:
VirtualDub Portable

Version:
1.10.4.0

MD5:
ab38d2d8940bd71ff3078bcc14dd53b1

SHA-1:
a0bb491fa91782829ce1e54e36af288615a8b7e4

SHA-256:
57a15181c3b19a96e3ab50a4493f68fa89bb62acf9dab90f71111e514b712878

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:03:48 PM UTC  (today)

File size:
3.1 MB (3,209,352 bytes)

Product version:
1.10.4.0

Copyright:
PortableApps.com Installer Copyright 2007-2012 PortableApps.com.

Trademarks:
PortableApps.com is a registered trademark of Rare Ideas, LLC.

Original file name:
VirtualDubPortable_1.10.4_English.paf.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\virtualdubportable_1.10.4_english.paf.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/14/2013 7:00:00 PM

Valid to:
2/15/2014 6:59:59 PM

Subject:
CN="Rare Ideas, LLC", O="Rare Ideas, LLC", STREET=PO Box 227, L=New York, S=NY, PostalCode=10009, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
03B4EBEA7AE80B259DFF94904506F5DA

File PE Metadata
Compilation timestamp:
2/24/2012 2:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:99NNV4bNuIQ4S1r4C761nsiHcGi8jZRnN8zglRR5J+17+WGX7E12Yv+VwKuOcT6:t2fS156lsH9k/8meCx7ElBKHv

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9936

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file VirtualDubPortable_1.10.4_English.paf.exe has been seen being distributed by the following 22 URLs.

http://dw.uptodown.com/dwn/tpfP4rWa9hmXvQ0zTJl0Vf-RhvNwJjxF27_1OaW5ch-mdP54o2MaYFt3MoH9vCygSuV6pgSA6sByvw9Ah2r3NmWqEWS7DOrae7v1FiDC9C0Fup31WtXlNsckwYENfCLd/Pa6YPgsdIzhlI0p-tO01a2CjlADczcPyoYY8x0HoCafcYW5tAKV_-IaGwWbvhwxCPNvuMn-_ZoGgfFNyWWW9CWevrNlN-bX8Jjc6yCm3M_p8hDYirphNxc-iHOMsNcH1/JSoqYm2M91zKQE4iYFG7cJ4ZR-SOzGPYA59KSn2ctB5hP9YAQcpRwehJRMbzzYI5n9msPtKg5eOsFsZzx5In58a1x24QsAZBspHzjblqCavY1LFE1e-78MJoKypGn6DC/.../

https://downloads.sourceforge.net/project/portableapps/.../VirtualDubPortable_1.10.4_English.paf.exe

https://dw.uptodown.com/dwn/VGCuDhaYzb9UI0EOh1PvuNVFdPU9NXs7IqMpmGcsE6tc1ayiVDp7LMgashm23Ws2a-2h4G8iA_BNT8y5Vp17p_fjByuhRSzjgsAHlTLCDQRkTXomLquTnNBuzptzmsIq/ghC-4uGbzRzvRZ7S6t4PIDK1uGKCzdhnG5kOE911JUA6srMlIqWRAPKUEOQBnuDcuIKm-BdiFwYX5nnzlQ243O3GgSxOB9SSpfq9SBMud7CZ5tu3KQ8VHqhaHc7Dtcfq/SXilJ7ib-JLy5Os_VtrngRN47G8NFgg5khO95o_lQbsVcJ2FbJ7QQqLMmUAE70t3x0x8x-MTg1sRgL2scijYXEPuNZOrVCfZ5o0YSHV9B-BZBXVnrhy0TiO5Unf8L-zk/.../

http://dw.uptodown.com/dwn/t9yNOnWeRzAS4IRRScLpwzSpr6XRIk2bwuGp9ihcvayKpCDfPmShVEP-6eR9c1dp7kEpaoH7WMvxcJgvJy430WI43n9NRFytlkGE-weLsMJgrxv2bjM13Xm6y91Etxgf/0bz_2h1BD54p3UVcBIRphKzie48TOSCe9WdMs7bZnSKus4fESS-ESizZmICTIXuFBR2f7iVTxyRRJk-0gz7seUAmN8_eJbkDGICTDnqh9hy21ZqIte7IAWE5KCpT6ybf/8NoX0bDTPrQBY_nw4uOP7zwzeB6PLGdpeBOIUmf2W1_JIRdz_5GWJ7QwsWAs65OR-JTpOLcy-cAjZ3Qj6rnpqmu5Zt_gH70CxRNtbDwW7VDpc_nWTm7FZG8eWZhzo-_A/.../

https://dw.uptodown.com/dwn/l_yYNMurRotLx7ox-TsO1LvioOViFT1hJXzWitaSPVSie3stBcvebXLTEtO6Cn-KPKxESzx_bVKfexcqVtWZqr0My5m-DOI336xe71jGk65tuLrpKY1x9EiJ_YJ9g8p8/nNTBnw4_0cyxvd-uOYjf4VPN4ZfmWicifJ9uKmEg853vvQEB5GS_OQZt1KI9UO2cNcHrGurMp7AM0sIn83ixsCXq4w2cYq0hP3hxIO0JNVXtp3d5SFJr4_XN_u5wSuiG/bIhxh2oZ_9k36TenWsk34--YC86KXY2VEDfVC4fd5qO70NCfHJ3EF8QcZa-Yatr4aD1kt5Vb5asjKU7jOi4Un4I4kR_IpsUHNBud1I9ScLbK6BB2gb8jeVTwOWl49gcm/.../

http://dw.uptodown.com/dwn/KO-qb9tYNNwmFZYNL44vJulWwdfKm8HmixxvrKcs1F2CWRE3v9JJ80t-9L1ydfuC9emPdqJlAoFYJ5NgOQmcNvxQNPQgJGheRqr7HoFdokqNYtYs7jKXHgUe-BkIDfVU/P3GgB_XTHDuR9_s07eaGkoT0f61zDxK2uahlXX47O9xitb--Qv5Qdx3wtR9kMGChV8J2dXfE2qrJyJ3_AYy9I62XFuvKy0HLehY5QvATcRbjLYgD5IlhKGCBsUGAjeyG/75_NwY16CB7xzTHh-a27WCefzExlJ6aN3cJw3kmGwnik59NyzwqZ9OxUV_kOWZOTPmuLlf2koPODaTXy1uvtyc3oBCPREabWX33Y-DFe2QOc3K9e4nHA1wc5IO7eYfz1/.../

https://dw.uptodown.com/dwn/57eoaknALz6fPvm55rdi8argOlQhmpOvrFdRAXTmTdh_h7lt_rAdyVTq34DS5Ho52vLWDQR4HzEl1wCMc6zgfUn3fKxa4h5BoOj7CxN308C9AhnvJM3inr-o-SeQ2pJY/vW3ZNDStx4KKYDgVo1-QWGubGE7j9muXf9hfJQoHQl0LcelTH2htVuN0eulwrUkMdGtXBNNOHNUkVHrEWd21zRSt2I_XFpP8hFt8xWxPXgP2FVrsy6wPBJ8vY9JE4caj/1IMBTh2UfjEhRML-bXEvCqV-IUUB82wx1-AfLo7IFxMNGSYo_n3Yl0-KKQO4wPJcxofLuhRIFbHVi3pUJxbkOtzZaLHcsX5xGECgifew1vkZl9EEnAAejZNiXHtowH1e/.../

https://dw.uptodown.com/dwn/5B5orB26SUIKcvkwEmW9b2kHJQ9L1pX4C9gWE1yGxDORSMsvzh7HItaM-j4_1tfaD-PsfYO9Kj6-knXZ8R3A1Q8fR-rnmUNnJ56Xjj_km2yXxcsq_rTs63C2-mAEYKfd/ojazVKxurE1hor0Nd2DAABiTMkQ3sHq0_zYIzzrrlIu3uSZQcTujxxZ7yljJewyAksKdSmB2CACH7CR4douZA55SFD94D3dI8n5BNHbTmA1eJVhpjeDGX6foM-rlOIa3/tSNe3XIcxlj36BiQBrawsh61qo97XY8jb0yJC9vvUTxCw33xlil_wM3fQ33H2a8zGIu6rT8MbUCYiHuPoxpD-XJnaH14duB_YBlvkF8yQdJvzYAxA4ZoamEQU7F5sFyF/.../

https://dw.uptodown.com/dwn/yXi8ZWJY2vZMEEeRf--n2gHjgIEv3QTpohAFRbds1i8gE09qWzlue_BVzM64oqcPRjiQZjLf608A6FILwzisnBcDo5Gb9Du2PS48SaRNeC0bp1egDZhdnMFmmugtQgaF/JslRpuwrqpi72Jgc6Blvi3kTXMX__OCUjJjIZba2dRReOu6GR1zqSfNUw3_Naiaq2lk-iYE2_Yh17FWT0tgg4q1Q1Th0OxyFAVaHkPMFYO4pSGKbjpN1oYm7Zzk1MrRr/xcDpwKjcju5Q3Q8gwxH42GoekzZANp8IGsv9-gkrA6Rx18z25a3c0RvvRKQrhm4L3FRB78N8Ei_ZlvQL7Q3JYqYO_tUEuHl1BF6pr0d-rFn2sRODDCOaOd7HidO4SQc4/.../

http://files.totalsoft.org/V/.../VirtualDubPortable_1.10.4_English.paf.exe

https://dw.uptodown.com/dwn/L7DZ8i3vUFIj0uGlfKw-si3BhICV8gsVQAZTmJefdjBlenc3QW6Cn-D9DGdG7gDy91F6aEDY0ZQuE4OHLYKDePljkaomIQU41PHmQMb_5Z1bRBs4yhospBNFEuWwb8Ts/Rf65MGtS_TSN1P03FgQSKFOSC0pxqXs08wXUUbxVbbqQwEkLIyZHy9DVTv72G0vW_J5jSSLSTxTcudOS7zbqwy-7DjfL0VgEu5xRaCAYPLTOeu2ujyL84lqw1d-HGppf/qKJQOwIhApNotmjH3-hDP7oc2M04kvyGWM71PfoR_ncKYrmnY3vHV52DXozAAowA5NJkJ8Hl8l_d3iOoWfwdD_yfQQfI0nBdl3N9aLvO4SmNE86AFHQk8Ou6rLbpulYl/.../

https://dw.uptodown.com/dwn/HizUZ5PpgOCRvNnrrtV4jgko11pS1GTgBdWHVzSevTaRjfNn_2nbBQSeVo5tQG2owF1pIfbXSynbmlvoHXmjr7XcGHe8i6vhVIZvaZg9H3mE6h-NKvvcqC8ay-3MFh5F/S1an0HAekiDlYTyjNA86VN8XsEB714qSiqG33nMlLoRxbtvlj8m4khamzbiqlhJ15tOHV-sqDdtn6Y-5f5QmpADw9cE_lji_Ttu9DQKoLDBqF8XhtsjS0FYxUORCIBJ8/dHsP1hl4jSk6do0MrIEDOr4QElj6cXTIicHdz_RUXrJN7sNICwlS49BHra5v9LDMeFG_KQqSWOK9qyckAs4mNjET5GCLg-xfByms7iaGjrUmbDEqr6MjyU1D5QTz_w81/.../

Scan VirtualDubPortable_1.10.4_English.paf.exe - Powered by Reason Core Security