atubecatcher.exe

aTube Catcher

DsNET Corp.

The application atubecatcher.exe by DsNET has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup program which is used to install the application. This version of the installer will bundle the Ask.com Toolbar, a potentially unwanted web browser extension. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
DsNET Corp  (signed by DsNET Corp.)

Product:
aTube Catcher

Version:
2.9.1347

MD5:
ba4e82626c7836c2a0b1b575e6a94810

SHA-1:
0ed8f79be8a59183af7a95f7fe3afdb61d55dd54

SHA-256:
a07f5f77019f20add9fd83c99d90bdd747b6c31069830b276da9e8b1663aaad5

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Bundles that Ask.com toolbar as a third-party offer, a web browser extension that may modify a user's search and home pages.

Analysis date:
4/18/2024 4:17:18 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
7.9264

Reason Heuristics
PUP.DsNET.aTube.Meta (M)
16.6.9.12

Rising Antivirus
PE:Trojan.VBInject!1.6546
23.00.65.131224

File size:
11.1 MB (11,681,632 bytes)

Product version:
2.9.1347

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\atubecatcher.exe

Digital Signature
Signed by:

Authority:
The USERTRUST Network

Valid from:
3/8/2011 1:00:00 AM

Valid to:
3/8/2014 12:59:59 AM

Subject:
CN=DsNET Corp., O=DsNET Corp., STREET=Plan de Ayala M3 L30, STREET=Mexico Revolucionario, L=Ecatepec, S=Mexico, PostalCode=55266, C=MX

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
009934C0F374A7790598E44428C2B46363

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:6t/lWcVs8TRaubBSNKdLyPKl7r91SWD/zoIA3Dw9bGJG+ETP9k7z2Iap1pdBa5nQ:6t4A9RaublyClV1SWD7+kdPEzIdBfFuu

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Code size:
23 KB (23,552 bytes)

The file atubecatcher.exe has been seen being distributed by the following 50 URLs.

https://dw.uptodown.com/dwn/xbTwupVjPhqGMEVVSUU0KNUzHSAyDFCD5yVjCmLIpc2jd4oLJFvKeH9-RsGgwyYPM_-QyShwI_5FFiPyra6BOyOqPqsjWddi6g-rJx8GlZx3m1CuJ1C0zRAsf5liAjy3/TCcqOQTex2a-0yBJc2if5oMXN1sHxZsfO_Caft4WQUteAdZ5ZBJfzClsgr9sP0Xv1O-0WeOwzdHVkT1qc9Yq26LJY0M13UBlCweM4yxQzw_bGUvwej4ca30tOmtq9JRS/m3yB7kMPucXjdJ2BQf4LmbzkbBa9_MsthgrgRUPGAd1a9ie9K259owJcSJsR0jiEiBu9WembiWUIopJoCD1O3IPKnjCjFyzoj2_k3GUFQgtXBYjtwc6Rrvm9FBz2q8vW/.../

https://dw.uptodown.com/dwn/6IBk6sLRdxK5dTt9FQVXrCjp27Kxm36iULCTUlmBtpDQagvm4_1fjrtDN2EbcT0Ow1TrxHgGu0UbC4Pv52SzEtG_9iDIdL7UG26rTtkXA5Xry_z-B5mb-wTOB5gZ-B78/haLfBiMRNj89GB2oGHQs0WyRiZDa9gehXtgm1CaBaN4OHxCCpbT7o4BzNXsOAbsCgDwJHheGa0FcPAtnQmCTPfMYP8GuUt1AlAk_qh1llcKCrNK2ZuWSg8HqrhJ2UEZE/1mJ6qhsnjgugTwzPYOY0yhxIQEWHfhtRdSP3EY26mleeLgitLSyPKdFuw8RkO98D_Dk8nDMFhqKpdyv9lwY0mtPFua38KuWiPZBg17V4JeaZEkZsRQ26Yeq_6TYyg-33/.../

http://es.kioskea.net/download/.../descargar-1021-atube-catcher

https://dw.uptodown.com/dwn/sdhYX6nzV0Q717JB-m8YNKn2v7DOJuNcAvTBU9oQ-7MuaXEy5a0M4Astgod3n_r0Hl0NruVzYo9nq_PaLynKICAQSKAlDIDHnflXJfKAQVw7ZmmnwEBVDBLaD37_-an_/fZtVml2PHOGxoGSsqgqPhO0rl8h0Md-c-vZsfLdJqzeUW_q7CedKBIrrkiWuPOQj-kFc9tui4eRw_9rVr3k3U6kElEke0gI5CTykPp7ILy_iTCkocbNLog-2Chi0ssLw/rojcXqcxKE8HmS37yaJhz9Bh9XSYbbQ6kLLBG0uc6F5_Ci3m-mxELU4nCuDOjIf8xd3uzxdGsX-Hl2VC0pfTDdN8fH0nzhmh1J-6siO_OMpodMP2ucaiGCZwNCfwppGQ/.../

https://dw.uptodown.com/dwn/GJCrDFi6LWdvesvEpK6lXQW6vQDD2SJa8NPqYId9b8HjkBIHAzZlDAjhGNFectLJZ4Xuzjct0NQBrptXtMKNZWMtPgJ8XbbWtTw52tuHrZ-g5aNnKnEPd6Rp1HkKNFsY/BGnwHT_26Z86n0tr1hn_5n1qbVIo_KQRw0AodQoTOvKSJMrIPS8sjQlnpu4MSK3a7b_aj5XfGWRaxiZTzWbvCGmyaP1onGmpeRY_85puO_uQyzru90hp7AF0t2dlg3dH/7W80oarWTDFzQeNr2FBi85-nNQgWi0XS2Ads8Z5n_eoojzHJu8Tmw2QL7C5HyoWXpXcjRS_3LuJdeHpIhIaY2YcExKGGWbnQeDlT63mgcJZlDqyRc7HjORU7aysmks0H/.../

ftp://falvarador/.../aTube_Catcher.exe

http://dw.it.uptodown.com/dl/1442425548/.../atube-catcher-2-9-1347-es-en-br-fr-de-it-cz-cat-win.exe

http://download1717.mediafire.com/kd481uu42xsg/.../aTubeCatcher.exe

https://dw.uptodown.com/dwn/-YgnSa87pBV_Z_XZcOna8QPqBWwpRy_tcqZQBzjn8KaC5NdSGkY23g2z2_spU44luveBi0Fht8N4hE2iu8E8yTWB4LreaDy5Ik0vs-vzpyQ_d8eD-MrYteV-o0vbtB5C/eyMTCZnhiOgDNEFZ3fJDcTMiAZ4mThnpbd1feV4-55asutwyOWGSe-wD1pegWjpoQkXvVcUE6DQbyFGolRRidI6EBm6-uXFnAI1CkHmf2RViIb9ijHUS_mndy4neoQBv/v0OA5uyjhcZgok6TtMf8TwXlJDguyo_UlJO5V-6Mp4M2i0TzbTKF38Xr5kJ92Dy_H7dnkriiI6GDuBcXjTlHHKfhdpZfKwYlS0PlBNlCbAQwXH3_mkA36R-xchAq9Obp/.../

http://download1717.mediafire.com/697zv949cvpg/.../aTubeCatcher.exe

https://dw.uptodown.com/dwn/WFYZQNHWMW-EHRFng0hVT-KeIssK14f54ExvlJQSQbUSRgTa7dkpxSlaUO7Gz46YHGAyV9_4OQw5C3EN0gQ8wqmjJIItUJ3A4L3C5oUxJrH9SW-cl85OaSlgOE8Go_Tu/ezJuLJ3_3KIRzcI7QrTDwd4S4L0dpoj5riDJMsp7heoSsT_X2lrQy-CtFEdThqYBCwiRu8vfz74o5nZ2MoSNe7ISq_Lqu76kidazkxJ9mTeniSqWl0vrDNV0MhnH-dSC/Sc3UshBC8qNmw24gWm08GBEodFEffnuX6OLwtA-Btuw29SgvI5UkgEPKeZ0hGXHu09zHea9qKyTZhG-CeijixC8j7TbcdjdBWvCxXBFrY4TS4OEKhzDzCzqff_nDLweM/.../

http://download1125.mediafire.com/kutqjbwj5xwg/.../aTubeCatcher.exe

https://dw.uptodown.com/dwn/jp3fZFnT9N4vmMguA2r0ChKVnXO7NpUiWdNbeFdYyzdS4pzhh06jYDQVJQE8mX26GqnyPiCajEmYG_3w8kfZLxFDkVZqPv8qXl5T4bNPt6kCEqWI4ABWvGo7RXPyw6WW/Y4IGZ8AIZ3I_CorTzuJKej0EjB3jD-Crw2JcHh5YVNngStHzv54EYuzmEr9Sta8nb-9zC2KnGrmcAUFkwFTCr1qazvTLt5OMxXHwVXSkn4ShzgdglE5hMHjhExSBg5qi/5DX8zbh2Kb8URfBMlTd5_MsN2Fh63unGVAxcto6AQhbZ7E_LX80H6hovbcSfRpzPJLpH32ew14XBQMZO0XL7tN8BLUtgKIWfGlNHites1lKJtlSJfkbcglvhoeeabHI-/.../

https://dw.uptodown.com/dwn/i2aduqBkuqydf5zirgCCmYS1OaV3dlFDUZ0s4Vd8-BxnahfTtprsYtyuR5FjoDoq6EmiM4O3so4JpsLSr-zdqisjLIF14z-qM0Kfh2F54XMKacZQLGUxNWOUZQVci818/4iEpMNMEWqsABMfOZPo33MXomaaVpIDxKEkUaaMmx-VDq9algEf25azzPd-t5_Xw3lFuWVGb_WweqdBzK2HwjEHDB95Wog6tXI6ArGbqfGQ8yTouczuVZCxzLvZ-7m-1/rcuWzO-73tTAB7URtlU9qRD1wwN8x1_MPbBKOXXI8B1Ffln1_fDK7h2aslXlD257U4g-7WtqOk8pujU9SZIIIEtBLUWsCAbm-gZzDK4vNnZ6pWVJD1QTqhumURb-pXKU/.../

http://download.atube.me/aTube_Catcher_Setup.exe

https://dw.uptodown.com/dwn/xcF_okjtCtCg42OojIktiz-LdKtuFPbA3o2JsW3of7LCCpQodQkwcveJUIqXzMOfPLd3UM7oYYIW3c2lymsQUB6Qw9uDmIGmwJCUPQ5cBebybkx2bDZViQyFdUyyxdFV/sZ2O_oNAxGinDvkar8EvmWeDGv4FH71c3FQ1bRKOGQ0Rb1gzMoi5nAWYGeJYVXbA6MFMPJZli0lKcqv9jqpz2UmsYCxNrXNlzbQhs_tnjkIzz1jW_5JJBNESqToa6HT3/ZHRcz5vJ0yaQCqerTAVcZKNC_SVxcbq8AM6ZwceP-vOlmrTq6yihi9oJjCA-l_fx6OpJqti4x17Favz8b-jg33bE6HwuDTD11s-yWsLwfRPOH0rrPcU0ezF-ElkLzNtP/.../

http://dw.uptodown.com/dwn/Pi_ZR-E0whjVPoJb26im5FHuVrb8i5oy8m9YcthnJ5yZbif58gn4SgMulbjq-OzDNRYxug4j8NG13pCTGmhFETJzpOnPG7gyq2OSmEPQfC-6WYzL8HU395xCzPplCd5c/uuZkNKf7uIhZq4xmmzKBn83R-40OM3NR7YzKNIXw5bzsI-gUAAz5Xsb57ttqT3ju38dkSP6F9dLmm95c9PBddgVkIJ-I4bNzr_AQfXp0sxZGIcf5jJDKVcmGyKm_09PC/w1qo6scAmYfT7FMGEUNxznJSa_WJrPl95q_vmCoBdE3toHnzsHp2OpQnWGIjWeyR0MUVUyWeF7qgZmZCJKaFXNmrQNQjQlOvY9qCaTX6BtFTy-9LeCZJf31D6HdMw5GQ/.../

https://dw.uptodown.com/dwn/FxsTzNDVE5DQeVQTDO-iBYywnESNLHwEqzxUOxtDweAKs2xVNYiC4YG-wH3df8J9O-a3Rwyn2aE_iL1Wihw4RwzGmUe-eybShyUsfktVBAPZZ_5OzJsaVFbJB--CqRG_/Pi5j6iU3yBiSB46c9oxPJTYh5T8jFWgYa2XEpwEP0SE9frGSiwRQnlPv62NCoimo9K5-AVjU9e5ObhJQM-uYAqhjg3hFHKUkkytq12EZ7lUAWjhzpTCxUvDVmE5EAanl/xOC8gXPehrUhAVBTkiGWU2OLgzT6aLheF2v4cRNPR6D7Y-8BPHi8pJ69btt7NqIJ1XF2LoT-QzczfeVW3QdW8ETwHkByeANL4qCVLi8kDgDh-u1exvdymTqR_RnUwsZT/.../

https://dw17.uptodown.com/dwn/OrgNFQZvHdUin8JEVlQDXO5TfTFuEWjnAGwR9mzBujQJjkZFYtmHpC85jATMLIb94cHug_V7OSZPT1RexJZRXwNEweR7xgclYXY9hn3w7zIbRjIqFKrMYe0IyZu4pikv/tkIel3efhQNIM36E6tNtqQqd82UI4YPC4qPQ4braZ4_WGSLqUotUFhlOvy94SEmgXRpGIx4GQ-HYi8vJMeKIdvCyQXvHdVXpj_tkhg6e5AvUi_yTshrK5HGrBTjX7Xn-/yn6M7fsr89fsZzdyT0ZztQkk_kIl79fU5AtvZgWayhc1wKK038W2rq2zGOE0km9A3GC1TR0wePjZBwJWwqFdRGdyS8VwcD4ro_a6IpJ9tM6SAOlmLYlAJBAsmuhZC_gN/.../atube-catcher-2-9-1347-es-en-br-fr-de-it-cz-cat-win.exe

https://dw.uptodown.com/dwn/D1L0qcZIBlAVz3_5XwkX3jIaqxxmpgIt593W26Y4A0iU5CkSO3FWxZWEiKeWAdhWEISleEDhlBmZw3MCw09podtXIeWbFSo4f_1-8oHO1KiYCaUU1uAAWZRIvprShTVH/2cvsw1z4yeFWZhNR_IKSdVvrbCqqGjdS1IULTMNvtXa45DjOfhnxqYT5jByPJilB54trOzr0pZh2tL8VVrBqawQgYvISYqo-WI15ADvLPKeOjXaUuZ4XGErlQvBy3acs/gGfChueBAd1c59mhkB8_OSNZS1Sx4wFg6QCwcp81_PrAzpUc8iZgnETyO3S_OTDWik38RI7O_60fEXPu31gGqcgdpnfDWZFqUqGGvo8Wg3K8zjNiTCF3ZeYOqsbRxyPz/.../

https://dw.uptodown.com/dwn/L7XcMxbd-ICB2e0_Tuf5kigXExXrdpIebVNq-Y0KN69EygKjxUNG87aU7YTPXKG7lwQzJOUwe9VesYPTXcAhqzRm9EYzdVRA3JDnMa1n7CqhzE5k0sldzXgfeBBrwhuN/bWUDQW1zKjcJDHg8qSFuMAxZrThACk490h4KeC4QujLBm41T5WHlnxAmmOlUboocFmAhORD5sfem_z6Ri6V6PHnVJxBimCXxorS6TE7H0Q6iTxN1GBO40eIDatffKA5s/xnaxMxNdjoBib7KEXNujzP3H6xcpAQcVamEm9FIoY8qit23bqek4rd1MxXvAkOK5cWD3wDhs92xUnMqXG1I0lE9IqVEP0EVemIJw4P_OKFFWEu7amF8v5vSt5S4H0BQr/.../

https://dw.uptodown.com/dwn/WX-sxgpvcf4C1AlMFUH22MyhvVUSdFXkj4Qog9mPoGm2tSjgf80hvm-Jm8L4XdTjZ4lDeqpBOaKTKXGhO01dV9N8hLxunTTuYY6qphCC1-mdIdQQ3JYqR7QdBLK1dw7Y/yHGgeHyqnjrX9KWs9924JIDX6VZY2alGllhMdT-haj6JlPLnoVTkbCHYIA5oNGqJemWqfCnj54tT0G_hMKNYgMr8Rzf3udGzvMOJD-xvjss6e_qDnGCecqyDms5h38Q0/t9gH9w7h9G6SWz_CCZrYO5KPRbkzupkn0ndfjXU3geH_avkaFJNCvSxX1fcfz1KcNMq8-jJY-Q1OmyRgVig1fCiAvbqYbOyocZXF0PjTxYzRqzFIDVBtDHUJ-OLIvYdW/.../

https://dw.uptodown.com/dwn/nq7JbkMd4gHUczmuXP0qaaA-WpDofVVCG3LaSqSFGiHfMuzmWBdNGzXrEhOoKqFoQcaYIijFHdNYWP-fPWRAA8uj6vW6EHdygo_vX_y0KS1O09IS826YTFMRDW52lk5s/W7yzo0z8SLFNHd2WBHJ6WqEW6xrFjkSeOUh4wged1ECYJLR2rzB9V6ENnkTSbc0G2lzLUn9N69dZGhYlVs2TROg5U3AJxOEVs_msxklYu5XusuIZ1HxHMHZ2kn4NL6mA/t6jihVeEBNEezG10gB6BJVFDAtnuX_f-iA4xWN1EwtMGwHJOc_eOaPx4UusfBrHYglt_qk2TrXMQOgprSy-TdE48tMXDKRDyVzosUjTmIBOgQsEF1hZSwWGGIL3iKa01/.../

http://download1717.mediafire.com/7mkn7ac57hwg/.../aTubeCatcher.exe

https://dw.uptodown.com/dwn/cMcxHYtxtp0bpiAcSXASFabn1lRJMh4nI-IVfrb_2nAL31qMphTlSHUA8JBeqoQnimQB1GXU_ZXR4CgOOdgT_P9pJymoLxQ8noUCyL7IQACJjgIjO3OAfR35aeW6HB8y/1YU745fb4HGRSDI4YDDizBnXMpbiuexU7YkkYUi0bNDEZ3uez9OTYy5IwetXXTZcC-9nJkJYvDFWQ6BvQizPrVOlzz63ip7X_JXBT6tOVBpQT5W8-XGKs1sFEbAqk3xC/dW8suf-8p9wZqpXKoyks5jUwU_f1P5b-N2t4s1ZfSI9JdqxD6kJIbdPM1uWc41-NkMorC4wCTJG6EUP7wO_3Qp1FbYQilD_heTeZOOwSAKD9MZBoRBQRDiOqQDjx_vsr/.../

https://dw.uptodown.com/dwn/3iJ59hcdTuHZxVx6OFdqvEzLggtWxC2VLz07N9esS6nbMbJy02szulIJE_NzMMdQ2dSAKfifGQReRg4ElgIJyEiNBM4kA2d5GpccGsh8guA6HKz7cdcFr9IeOi8txdPk/39e912Sxl0kmY1vXd96HLS-uAmX4--oeHe145SgaXBCHzvTti6woozPBqb_opJZTZ-Uvm1AWNdG810QnN-p85OjOZoZQii4y1LdKbtHSTEc7C_gAT7-clYyjojyw2G4D/opiq91xKK1SvLUsMMT6tYfJyRgwIDpj7cddWQtRqiD6lWRJW7xwSrVfb3Eez3c31jkt5x-MDB9hwFAxHY7BRrK-zeGhEaYGSJC3EY6Pnc_-4UsCHzoaxeXELd0xSKcLN/.../

https://dw.uptodown.com/dwn/GhGTWF7aOB1XtWs94EYMfGtKsNslcePrlRFhv45MXJc2MS7zimv-L8VLaGluiOSEDsG9ac77KkxQXTjtIsz2BBkvvcU9sXq7t25-BZ0djq6T446_RA6RFWDTMwL29aGp/QLfvPpU5S7rPgWSLcCRCoodA-Bj_zDFwOCs7fXmLVnDnRiXkycMpLpTOOvHG2yWt6BVUah0E0tqgBEx0SlAQo7MPbHh8eY_whsb-mUC5ty8HehWG6bYt9B7VRuKXnYLI/Mq-Id4w2yXn_8bQp3pHgNG3baYxyQlnSXJq6pEhoyrgF-lmT0RJ400FVc92hGYni_EAtHR1rbKV6pnbEkqB9bnWlyY-nMS1wPKxTxG9LCYYR2jeNLX4zDzpFN0YSjpwC/.../

https://dw.uptodown.com/dwn/nRp3EQlzvOXVJsM2-zDxTSnEDjC-_caqj6zGAKUWbuuLwc_xywX3Gv3A9Y1qraGxh73n4VnddPZBVPkp5_B5d-eY8eTZupKlT42SC-bFh0ydwtKD5h0-dvPYdT-rSsR3/SmL5La3fYjL59nR8oR0eINbCfFK8ytkjp2DSwcbKQDsL5bnNi7CJUNsXvAH-VURGgVocAgS5ZA8eEEYsKUCY15OR4JKSpYuw4_R_OAIQs2-jbpNMVExWAzguTbWXfqen/Xo4WupqGNikaxBcwnz32BtY-nNQ61sSLe1BqFk7EPpxYXWxumgQjGO8nNlemz86TCf6KRa-RnjGhUNA4HiZiw9CSRGz1lRt0fj_4z1IayISqws2oKBbY7NGOMmJOLUFC/.../

http://dw1.uptodown.com/dwn/-yDNbJp-TEo2bLUa3XlKKyFSjiW2WCFXl9-GCKCra1YOnq0A85EOt0XZb5vj6bff4kpFoQYXcLa8o5X7uH-xjgbcLeaU4NVcAPoYp1xwJSHtidGip57KmDG9eaiA3cGf/1ukmsoiBrt9u05rvkioyd_0ukdoaN_VV7_z7Qxfmt9DYbgz0Nb34kmohkxw2pckSfWoQKq12lrFgCSr4c9RXv6GsQvAdjcbUcUpEKLdb_I5Kd3NmJy4bIJmB9Kc7G3py/P4vN2VBE4gbJSPnUNqIFSWc8iIRmC02sIXgrnyzRELxeDZPYGQnDErmz_RHChSyyEAXGt1BI34DLvhcViciYa_EqG4GdwRtTQ0nWLbXS_jIDIw2YwpZJng6Z_5CvJS1p/.../atube-catcher-2-9-1347-es-en-br-fr-de-it-cz-cat-win.exe

http://download1083.mediafire.com/w0788d045kcg/.../aTubeCatcher.exe

Latest 30 of 99 download URLs

Remove atubecatcher.exe - Powered by Reason Core Security