» atubecatcher.exe
Overview
Analysis
File Details
Downloads (37)

atubecatcher.exe

aTube Catcher

DS NET CORP SA DE CV

The application atubecatcher.exe, “aTube Catcher Setup ” by DS NET CORP SA DE CV has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This version of the installer will bundle the Ask.com Toolbar, a potentially unwanted web browser extension. The file has been seen being downloaded from d.baixakifiles2.com and multiple other hosts.

File name:

atubecatcher.exe

Publisher:

DsNET Corp (signed by DS NET CORP SA DE CV)

Product:

aTube Catcher

Description:

aTube Catcher Setup

MD5:

fa7ea0da7ba5ae82211f207b3ff3d1fd

SHA-1:

4d409389244f98a61df7d79add53bf4fade32773

SHA-256:

3cfa577e710fbd2dfae2eee10cba491d5a0fdc667e2a0f51ad090f8fa1169f79

Scanner detections:

2 / 68

Status:

Potentially unwanted

Explanation:

Bundles that Ask.com toolbar as a third-party offer, a web browser extension that may modify a user's search and home pages.

Analysis date:

11/5/2024 2:26:16 PM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Bundled.Toolbar.Ask (variant)

8.10335

Reason Heuristics

PUP.Optional.DsNET.Atube.Installer.Meta

15.4.25.13

File size:

16.3 MB (17,089,408 bytes)

Product version:

3.8

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\atubecatcher.exe

Digital Signature

Signed by:

DS NET CORP SA DE CV

Authority:

VeriSign, Inc.

Valid from:

7/10/2014 2:00:00 AM

Valid to:

7/11/2015 1:59:59 AM

Subject:

CN=DS NET CORP SA DE CV, O=DS NET CORP SA DE CV, L=BENITO JUAREZ, S=DISTRITOP FEDERAL, C=MX

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

159B1F7449919B3EBF8FF194D5D7C038

File PE Metadata

Compilation timestamp:

10/13/2013 10:19:32 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:4Bmw1grtply/x1u5qAxwiSU9lk5qt4s3Zo8r2a5UM:4Uwul+xuqjLwCsJyYUM

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file atubecatcher.exe has been seen being distributed by the following 37 URLs.

http://d.baixakifiles2.com/?ic_user_id=254&data=MlyxYJl8hp6 FEgJ7QI7qHuJjGb3yOqXh1khcp5shYEroMLdSmCxn5t5jgIwQpD3BYC7ubImzzO6se/ja bisggqzobWgU8oC2bu6T48cqi/MBOVIYFu5JMrUXuFOcCWomupchOfANty3/1wJyXP OPHx6GU3Fb9TA3Yj4Sp4ekSTjhgnlW5QTEbEuIVW7OARhP6re/u6O/DGc4tbSdgSAik0TG22Ir6aY8QoFM4FoaeOYcURtgIY/xdPiK3 84g2313h m KDcK6ygJq5SGsGRVwA4z 7nuXXZfZwPJzetXTlKa5yuaJiyEazzeO7KUE9KlMKhrDbXqW70ymn3ogMOFEL22eObSI5N29YksfzqXxlfhQpNYR89z27O3Cs4mq23QvOlukT/LmX75bg535nb1rbRwlnsl2CQe9N tvi5O W94JoH2ovbWng3Yhsj0DN9W63Rc0Gk/daUGqQStMBiVSoBp S8Yq6aIk54UQAYwdABm8dVmwGRxFhgh3DlkOz0Uiy6/G4Egz/ 7rnnvRkkB1jZe4WgQRNKfGDQ9Mm7Bh5kJq5XVXAS6Iyg ujKV9Y1rcSgv5yu aCZRLgsRW3lFmCi7NuOMXlMe/mMf078BUzIf47cumU/PUcZI 9NLUOdGHzu IXapP7e7msbKwDjfafc8Q0eb9xAY9X3dW/yzdwqKqlwBPJPxeQUzsE8iE/fek/.../qqK7quhjlcFD6E3Ko5cE2DkTB05EEN3UZjlHIAmWrrOO0ckG78NuHNOId9pjbljL pnOsKkwyQ0CgAwgnBV2LH2Loq 2z7hUg1FoF9eII90GdQwag2x7Z1ARbNI9 oJ kVUCQqU9l

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-75-91-410297.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-9-91-410298.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-95-9-410292.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-35-61-4102813.exe

http://www.baixakidownloadfiles8.com/nocache/programas/urls/iron/.../atube-catcher-63-41-4102017.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-4-91-4102961.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-71-81-4102941.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-72-71-4102991.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-63-31-4102902.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-11-02-4102921.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-22-71-4102941.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-33-1-4102941.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-9-02-4102991.exe

http://es.kioskea.net/download/.../download-1021-

temp:aTube_Catcher_3.8.7980.exe

http://d.baixakifiles2.com/?ic_user_id=254&data=jQ80CvMBsfFgNkVx596/CmLl8Sj7hQCqRvPA3gxT9IrB7yy2QVpWHLASyRExC59W3TaxS3Gw2sKcaBDluEUpcOn2g0WEuYHNbiLLn9gmoHams9zVoFItLytas 0pIGrMXSbKPoHM8OUN2ozWP2rAAoxm7CskM/KAjPUU1GJ8JJ/HcSCPB319HI4EwOIvnzyFUTAfcfL5wNS7Ne9jYPfTu7HDRye/Am8zE Os l3OZKf5tfqJELSXYMWAWNZnzvAuxLUlyktrJLNBfNnABwFEWELZEL5Jzt3p4zQmn5aDeqcV8hebNREGo6J6jYoR0qfYcIjPyHwWFoMx/lnMqBfBAykyH5f/DhmNxaFVHWAdfxzT99zx1LE7EJNEtriP59dqU7RNzMo3gSRu8x4MJve8qsF8OFmiYcAORM0clhEnlooXCPURvqRRY6fuNWwxJrC0PDo8/8Bjmt8PRv6hqMFauDIJgPHI/8jLEbXYAcTy4JUbTNdL5MOj376CrtrwImQ4ARb6Voi1v9tPsulnRQdgJbJYKXgZFLk6Jh8sIknAGBfrqMZ1h4EiMj1DxhG8YFTJ3f8FJCpF7pvX9B/.../hTknnQnzEijYB4Lb3iYe0cdhwhmzySTqYxzFMgRj3XE0qXkplwRJiBl M=&key=ODPwKo 0BbDQ6Iu g3kS7vKWD2vk7ejepJ5EtSqZi3eD51zvwmVCZs7LAwwNgp2QBH81ITIS0xkgaeanKL9Z10Nqpwjsj5OCBFKXpCPU7klphwrQOo5odlP9Nqx0ADT4k H1lQtwO9kfDO

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-85-61-4102921.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-82-41-410299.exe

http://gerenciador.nozebra.com.br/nocache/programas/urls/iron/.../atube-catcher-73-51-4102962.exe

http://d.baixakifiles2.com/?ic_user_id=254&data=b7T9MDe8cZM1aLA7jLwKbkFSQ 9U 0yzizZODHf64mQ 3uCqotEruc 2O4RTSjLDvXk6vl0uEvVoYoetRrNpi4QTEAuYjGpB3belmA4nlIHMDueDW2ba8kZuirECjTEDNQixZUH0nNQNyVismSo ovLtpJSD/XUsV9gin I3lk2jr3805vuRdOo8FRdHnKrp7wAyhg33yYmEx5K0nMttQsNJrFiGmQf7N5b1p7w9j6dfFj4CGx0pQf2giAnczTqB/r5L5Y9yp4kq9IOQS1xmk9Pr koU6X 2ZKmQlfbCc469a8WPvp3BawYFs6JYIFGtEzQ9NzPUqUvSTf2tURy2WObCTArL q5tBGf6BwnV0RgZG3LwCADnVSzcT6Uyt1dnDFkxhUcsNIRW0CNnkgKnR4kweEtDsZgb/jpMbBl1kNi1W/27demLFrO7zWUaE/X4SjWbnP1XlRrj4 TLbMuEIvYAuUQa0nCBS1J/xzem7lgiw43 5BmyLPy6dYn1rQE yQ03sRIbwJS8Ms8Ltu2L7LLtxZwrWEqtvV6 s4m635sKWBOB/OPoWcrBL4bY8ippH4nu7sS6qLUvQTj86w0vu0GniKha3F4xMyPmKyi7 1nMS68GveukDsoefqq2OqS2c6D9aCC8mYWO1dawtBwP6qytZmDpQgtxPprgR8e9sK760BiUEqAKHQSzPoto1eXPPcfNIuTfdTeMEg8//mhYT8AEzhbzvjtrIlmm27aH9ULKRXYBCIZe7xO9TfLEfIKQMbifzL2UP4vfCtork9x0T3fsnwxNcL3vCA=&key=kx3l xbK83E0HmrwkWnU/tpjrurhDhHyDsDcCB1lRPKyRy2wYt983zxm9rewwMm9pW1T0D8irk/.../T5MvOt8Q2XwsYxsXya2ZOVdTJpQJ1j4V2Cz6qy1gJ80Y6

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-12-02-4102902.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-84-61-4102803.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-51-21-4102813.exe

http://install.nznweb.com.br/nocache/programas/urls/iron/.../atube-catcher-83-91-4102992.exe

http://www.baixakidownloadfiles8.com/nocache/programas/urls/iron/.../atube-catcher-24-22-4102016.exe

http://gerenciador.baixaki.com.br/nocache/programas/urls/iron/.../atube-catcher-9-61-4102942.exe

http://get.atube.me/aTube_Catcher.exe

http://gerenciador.nznja.com.br/nocache/programas/urls/iron/.../atube-catcher-43-61-4102982.exe

http://gerenciador.nzs.com.br/nocache/programas/urls/iron/.../atube-catcher-32-81-4102803.exe

Latest 30 of 37 download URLs

Remove atubecatcher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.