home

debutsetup.exe

Debut

NCH Software

This is a self-extracting archive and installer. This is installed with Debut Video Capture Software. The file has been seen being downloaded from global-shared-files-l3.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Debut

Description:
Debut Video Capture Software

Version:
2.02

MD5:
1f8600cd06e077baa4314563639d1e62

SHA-1:
8fa19f6fed68e389cccc8e372e47a9ed1ca1305e

SHA-256:
5c4fd85ea698fc2f04dddda3fe34aad172d628d8e81c0a64fcf380e8053543ab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:46:07 AM UTC  (today)

File size:
1.5 MB (1,563,200 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\debutsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/19/2013 7:00:00 PM

Valid to:
8/7/2015 6:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/9/2013 11:05:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:jZH0lj1GV24euV9fEKlfRR6oZ9GKK9AstW6jAZ9wDh5LuPhhWIaMAaV81pMahaPi:lHA1qLfTcKlX9L56jAZUhlCHAS81pRYa

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9980

Developed / compiled with:
Microsoft Visual C++

The file debutsetup.exe has been discovered within the following program.

Debut Video Capture Software  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
20% remove it
 
Powered by Should I Remove It?

The file debutsetup.exe has been seen being distributed by the following 9 URLs.

http://global-shared-files-l3.softonic.com/8fa/19f/.../file?nvb=20141027012017&nva=20141027132117&token=0c1844e78954826d4f188&instance=softonic_es&filename=debutsetup.exe

http://gsf-cf.softonic.com//8fa/19f/.../file?id_file=64806&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1410777670&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KuxNQIRfdrD1oSSsYolMkS7w0V34ZogF0GxcmZjFdhtJPdMpaaywlYObgkK0lDK5q5LMPhVbW~C9WjnW1pYYAhUL5dcx7pEVb-S9dSQhL8Bnxa862Ac7EH3~JaE-SbxP~pRYAICgFFDtU-ptBly-4NIjvP9v2BLH8Jwgnz-lvRE_&filename=debutsetup.exe

http://www.vins.co.il/.../Debut-Video-Capture-Software

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=58707&url=http://www.nchsoftware.com/capture/debutsetup.exe&c=26d0TT7eavV83/xBYDhEQBqPXa1w/CUTAwaNhpz5ZsEINlz3ozvvxy 0rlHDEE0OGycnC4h8fpKLgCmfBn C2/gWTCvl79msZIHVjlwUHHLu5LYICHNzF9kbrI9IV2fEV2lU1apw TWElSH/ObpY8WECd75Md1No/29foyWVAzzFS0 0 pR/amlZ rOP/.../Z6Bxu5kEhEGNg

http://gsf-cf.softonic.com//8fa/19f/.../file?id_file=64806&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1410120812&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Tet1wxmLYody~iy05tugTBO5M17~Fy6i0amf15kH~YRQ6pEX2tUKox--KDajhTb2wQ6AGoM0SJ43DUFr63Z7MYxKuKGgfegTzhTnJGdWAwQrUmbt6TQVVek5TH5gBlbJaYgTFpWHFUi92O5dDIESn62UCD8ZeGEF~NPMYgQf8QE_&filename=debutsetup.exe

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=58707&url=http://www.nchsoftware.com/capture/debutsetup.exe&c=2dabP7fhNO Z3jqJIF2 WYrQUtygT5xOD/Kh1k6OoJ e2itlGITKl9qP/.../QzXsGjxMrnFZX5PTcX5mr0L6oL2v8grVPmHp1KJfiyWm9HwEE79AYt3fFJNkax7pl3mClnf69lpl2CJa67MoIH6rsHtzByP9mDQnnZ4WYDgCUENuL6jpy6pDQLNF iE0J3kjl9L8WFzgw

http://bg.softoware.net/get-debut-video-capture-software.html

http://gsf-cf.softonic.com/8fa/19f/.../debutsetup.exe

http://www.nchsoftware.com/.../debutsetup.exe

Scan debutsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.