home

debutsetup.exe

Debut

NCH Software

This is a setup and installation application. This file is installed with the program Debut Video Capture Software. The file has been seen being downloaded from fileshare1180.dfiles.eu and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Debut

Description:
Debut Video Capture Software

Version:
1.82

MD5:
b787e883f532f22eaf6bc83509f294f1

SHA-1:
a11320de8211b539317ffe10c9b15d6200e4c519

SHA-256:
4e87a6a2ed92185eb8ebeb280d65d124373969f5856e59608e46ffaefddf6533

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 12:44:17 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0606
7.2.353

File size:
1.5 MB (1,539,136 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 3:00:00 AM

Valid to:
8/8/2015 2:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
9/27/2012 2:51:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:q7H0Y5dFpKjBFfPS+XZwGKRxAs5Yx/Dx9WDZ6BuI1vhZ/8IKsL2+EhYnoiQoo8r3:mHB5tiBFCqNlx/DxmZo/JWsYorUjq

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 24, 10, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 14, 10, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9980

Developed / compiled with:
Microsoft Visual C++

The file debutsetup.exe has been discovered within the following programs.

ASUS Wireless Router RT-AC66U Manuals  by ASUS
8% remove it
Debut Video Capture Software  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
20% remove it
 
Powered by Should I Remove It?

The file debutsetup.exe has been seen being distributed by the following 49 URLs.

http://fileshare1180.dfiles.eu/auth-1485804584b959a2e25ade682f6fa8fe-91.233.160.2-100606127-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1480012486a046eb69e50c75a39e3ff4-93.175.162.231-47513851-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1469809347c634e07a453cd014d17069-83.9.144.104-2634998849-147221514-guest/.../debutsetup.exe

http://www.mediafire.com/download/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14788111755803a39c5b35effa98b523-83.21.34.19-35424094-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1480779551482fc4477ba412bfe7a103-83.20.14.224-54816125-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14774865629f803e36a5ff1f10f1365c-83.8.132.123-21641572-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-147594893808d5a0aa1cbdc58a7b1523-37.47.2.20-6269803-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1439972993444bb00d715c928e5a2f84-37.47.34.132-2235421378-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-146433636949acb84abddca62a9de8e5-37.248.93.188-2575534813-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1478869086e330bd2a69a68f871631f2-91.94.198.185-35905394-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14568521960d7586885e860f3f0e07f1-83.4.235.203-2484753986-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1475784995f14e3affadc7333c55f809-83.26.47.56-4591199-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-147661695733f0e0bef046fc6343d7bc-81.109.231.152-12976312-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14628076714e5c83e1ac6be6f4b6273a-31.1.2.48-2558102054-147221514-guest/.../debutsetup.exe

http://debut-video-capture.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtYBgkfBSGVUfFEc9RcKaBZW0TYDv06/trKymKL uRJPhYgJ2iA67X0lpo4ZzwYGyLR7zRdrmkahovPPLorgbeYLiQdcbTGejiBDaWo2/.../4V xTKlY56h65 CESZY=

http://fileshare1180.dfiles.eu/auth-14682212581c3c69f407dfe15c184fc9-83.29.145.153-2618235033-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1468236678c3d8accab2e42e4c43b675-217.96.196.173-2618381349-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1459668608d7cf93d670b937b590578c-89.229.221.127-2520364014-147221514-guest/.../debutsetup.exe

http://www.ranchsignbundle.com/WVl6OTRQV3cyVm05cFprOGxNa1pxWlhWV2ExcEtjR1Z2YVZwNGVFOHdVR1FsTWtac1VteFRiMVZEZDNJeVdWZ3pTREJ2SlRORUptTTlWRlZVTjBKbVIzRTJTMXBtZW5GYU1tMWpZVkIxUlVGS1F5VXlSbUpOSlRKQ1RtZ2xNa1pRWTNaRU5IQlpaV3NsTWtaUVdGVXlRbWgyWjBKcllVTXlNMVl4YTBaTFZFTnZUR2Q1V2xwa1UxcGhSMHAyTmpKUGR6TmFUbHBWU1VJNVFUUnpZVlZKTmtORWVtdEpOR04wWm5OMFFWUmFZamsxWkU1R2JESjZPREZLU1hnNU1IRm1NQ1ptWVd4c1ltRmphMTkxY213OVptbHNaWHB2YjIxekxtTnZiU1V5UmpRd05BPT0=

http://fileshare1180.dfiles.eu/auth-1466601616573b049c0fbd0443bb6665-83.4.32.116-2601173178-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1444322683bb5ac0a5e55214f28fcd57-188.121.22.47-2307482968-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14555245133c5e9bd1aa97f95858a7fa-78.159.88.223-2470754661-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-146521832308d4b8b775d694e9544453-91.207.185.0-2585639190-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14552379431e5f62600be1a801936ca7-83.27.58.135-2466760298-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1455367406b954ff0e29f9de7e2cd70c-83.10.128.207-2468514182-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1455566414acc8b99316bd4b173f45da-31.63.208.245-2471402393-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14574521666cc6c2888b3e34d991ba01-89.25.223.2-2492242024-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-1459582723de3fd2a68ef5bd244216ef-178.212.155.3-2519242472-147221514-guest/.../debutsetup.exe

http://fileshare1180.dfiles.eu/auth-14604798709cf0bf1cc2948803c22c15-159.205.87.1-2530567931-147221514-guest/.../debutsetup.exe

Latest 30 of 49 download URLs

Scan debutsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.