home

debutsetup.exe

Debut

NCH Software

This is a self-extracting archive and installer. This is installed with Debut Video Capture Software. The file has been seen being downloaded from debut-video-capture.softonic.pl and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Debut

Description:
Debut Video Capture Software

Version:
2.22+

MD5:
4695e069d6062d0e081b4ea75ba0a705

SHA-1:
c62a66d76b66db88b571e0c0058cae571a67c6cf

SHA-256:
eea361b4eec6a1cbbe21df5a2e2c461a77135b0d80a13b035686566a3534196d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 12:17:11 PM UTC  (today)

File size:
1.5 MB (1,612,560 bytes)

Product version:
2.22+

Copyright:
NCH Software

Original file name:
Debut.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\debutsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/6/2015 2:00:00 AM

Valid to:
8/7/2017 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
10/15/2015 3:33:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:Vxfors/Dfx21CJXvK/AB0MD9gWj1+wIp0tRr7vTtfh2iJ:7asrfx2AJXvKo19gWj8t0tJJ

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 48, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 50, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file debutsetup.exe has been discovered within the following program.

Debut Video Capture Software  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
20% remove it
 
Powered by Should I Remove It?

The file debutsetup.exe has been seen being distributed by the following 6 URLs.

http://debut-video-capture.softonic.pl/download-tracker?th=1/.../eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imdU2SrQVWsYbQeCM1gbt5YZfmkog0daRtIPcOcBq2kpQin5hrbaqcudFX1wS0Er1Wf2YRn0Jp3YesQXFTJXz1UM=

&onid=13633&oid=3001-13633_4-10684791&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=14490273&mfgid=10012381&merid=10012381&ctype=dm&cval=NONE&devicetype=desktop&pguid=612ffa2b10357dc98ee9850f&viewguid=aQP@KJvQYdkKMzdyYMWYqGs66YLkA-eWCrtO&destUrl=http://files.downloadnow.com/s/software/14/49/02/.../debutsetup.exe

http://www.softportal.com/getsoft-26188-debut-video-capture-1.html

http://files.downloadnow.com/s/software/14/49/02/.../debutsetup.exe

http://www.nch.com.au/.../debutsetup.exe

http://www.nchsoftware.com/.../debutpsetup.exe

Scan debutsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.