home

debutsetup.exe

NCH Software

This is a self-extracting archive and installer. This is installed with Debut Video Capture Software. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
Debut Video Capture Software

Version:
1.63

MD5:
0a0da9011e164aaa09c6d9a2bf37c46c

SHA-1:
bdcac2d1b9edb3b1faabb3dc49efb2f602cc1afb

SHA-256:
e3154748e5e92adac71d1aa44bb30c8ffcbadfc2aa4a8667ae33b3e115413490

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 3:58:07 AM UTC  (today)

File size:
797.1 KB (816,232 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\debutsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/28/2011 1:00:00 AM

Valid to:
8/3/2013 12:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
24523FA51F145E53F931EEE4A4CC7E4C

File PE Metadata
Compilation timestamp:
8/2/2011 5:57:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:zvoY+cXBXULm4Mq8ojnwC7bS67U51GU70M:zQZcXlULFdECxI51G

Entry address:
0x2025

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, 6C, 0D, 00, 00, 53, 56, 57, 68, A0, 10, 40, 00, FF, 15, 24, 10, 40, 00, 68, B0, 10, 40, 00, 50, 89, 44, 24, 18, FF, 15, 00, 10, 40, 00, 33, DB, 3B, C3, 89, 44, 24, 0C, 75, 3D, 6A, 24, 68, C4, 10, 40, 00, 68, F0, 10, 40, 00, 53, FF, 15, 74, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, 30, 12, 40, 00, 53, 53, FF, 15, 6C, 10, 40, 00, FF, 74, 24, 10, FF, 15, 34, 10, 40, 00, 33, C0, 40, 5F, 5E, 5B, 8B, E5, 5D, C3, B8, 9C, 00, 00, 00, 8B, D0, 8D, 8C, 24, A8, 00, 00, 00, 88...
 
[+]

Entropy:
7.9732

Developed / compiled with:
Microsoft Visual C++

The file debutsetup.exe has been discovered within the following program.

Debut Video Capture Software  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
20% remove it
 
Powered by Should I Remove It?

The file debutsetup.exe has been seen being distributed by the following 2 URLs.

http://filehippo.com/pl/download/file/.../

https://mail-attachment.googleusercontent.com/attachment?ui=2&ik=c38098d546&view=att&th=133832866c1fc7fa&attid=0.1&disp=safe&realattid=f_gunyapyn0&zw&saduie=AG9B_P8EEtEzkKPfGIiWY2skHuLR&sadet=1320758532569&sads=EZiZ750fi1FSnyyPq7P1DqoCRqo

Scan debutsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.