home

debutsetup_v1.49.exe

NCH Software

This is a setup program which is used to install the application. This is installed with Debut Video Capture Software. The file has been seen being downloaded from files.brothersoft.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
Debut Video Capture Software

Version:
1.49

MD5:
e7fc8de84f6b7e44636df22bc2434aea

SHA-1:
12a32c0d8cb5996a3e4e923146841850936fe7f8

SHA-256:
f184ef3e92b388cbc131618b5f394737b14bea7528b1ab7e5c77ce1a97923d8d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:49:37 PM UTC  (today)

File size:
435.2 KB (445,632 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\nch software\debut\debutsetup_v1.49.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
7/31/2008 2:00:00 AM

Valid to:
8/1/2010 1:59:59 AM

Subject:
CN=NCH Software, OU=Secure Application Development, O=NCH Software, L=Canberra, S=ACT, C=AU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4137AB6961BA34F584507F3F4AA6D7D2

File PE Metadata
Compilation timestamp:
11/16/2009 2:53:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:JKoqBY4bfZRPHWvqFt6Nrl3N+Yx+sdtJWBqn:JKoGY4zXHWvWkrnHJdP/

Entry address:
0x2021

Entry point:
55, 8D, 6C, 24, 88, 81, EC, C8, 0C, 00, 00, 53, 56, 57, 6A, 06, 33, DB, 53, FF, 15, 64, 10, 40, 00, 8D, 45, E0, 50, FF, 15, 24, 10, 40, 00, F6, 45, 0C, 01, 75, 06, 66, C7, 45, 10, 01, 00, 8D, 85, C0, F7, FF, FF, 50, 68, 04, 01, 00, 00, FF, 15, 28, 10, 40, 00, 53, FF, 15, 20, 10, 40, 00, 6A, 63, 8B, F0, 6A, 63, 56, FF, 15, 18, 10, 40, 00, 8B, F8, 57, 56, FF, 15, 30, 10, 40, 00, 57, 56, 89, 45, 68, FF, 15, 14, 10, 40, 00, 50, FF, 15, 04, 10, 40, 00, 8B, 35, 58, 10, 40, 00, 8B, 3D, 08, 10, 40, 00, 89, 45, 64...
 
[+]

Entropy:
7.9872  (probably packed)

The file debutsetup_v1.49.exe has been discovered within the following programs.

Debut Video Capture Software  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nch.com.au/index.html
20% remove it
 
Powered by Should I Remove It?

The file debutsetup_v1.49.exe has been seen being distributed by the following 2 URLs.

http://files.brothersoft.com/dvd_video/.../debutsetup.exe

http://www.nchsoftware.com/.../debutsetup.exe

Scan debutsetup_v1.49.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.