home

mediaget_id2310657ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id2310657ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Banner LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
8820630507543b981ce5e194e5e65061

SHA-1:
c492db18fc1ff53d0a0fc825fed65eb5649091ee

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 11:58:04 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Banne
2016.0.2929

Baidu Antivirus
Adware.Win32.MediaGet
4.0.3.151110

Comodo Security
Application.Win32.MediaGet.G
23564

Dr.Web
Program.MediaGet.133
9.0.1.0314

ESET NOD32
Win32/MediaGet.AE potentially unwanted (variant)
9.12542

G Data
Win32.Adware.MediaGet
15.11.25

K7 AntiVirus
Unwanted-Program
13.212.17798

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.1142

Malwarebytes
PUP.Optional.MediaGet
v2015.11.10.03

Panda Antivirus
PUP/MediaGET
15.11.10.03

Qihoo 360 Security
Win32/Virus.e7d
1.0.0.1077

Reason Heuristics
PUP.MediaGet.Banner.Installer (M)
15.11.10.15

File size:
657.5 KB (673,312 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\mediaget_id2310657ids2s.exe

Digital Signature
Signed by:
Banner LLC

Authority:
COMODO CA Limited

Valid from:
3/26/2014 2:00:00 AM

Valid to:
3/26/2017 1:59:59 AM

Subject:
CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata
Compilation timestamp:
11/9/2015 2:57:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:6UlUg6tio6ygubMLD1Qja8dOixbXJmea6j77FlvO/h:6U60o6yTkDqjVOixdm8xlvkh

Entry address:
0x15FC80

Entry point:
60, BE, 00, B0, 51, 00, 8D, BE, 00, 60, EE, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
276 KB (282,624 bytes)

The file mediaget_id2310657ids2s.exe has been seen being distributed by the following 50 URLs.

http://sub2.bubblesmedia.ru/.../?link=v4harbmDcdZbXJM5DaiFrNfUDNRmlEtcXFuKUAJlS ZJBLAwButvxDcn8vVMuUkTczhbrATV8k33MqmqEsIWUxXQ5NIHQ31Y43Mbhzr7qJzNnjFgt5FrHMj5aRqUIOp8j8Ai9JwfsndObF2VqnNwe7bDsU49Oirn&param= DN8wWQFco4=&rid=3206

http://sub2.bubblesmedia.ru/sb/clk/s/1082/h/c1e74d/o/145/p/1266/.../0?a=1

http://ld.mediaget.com/index2.php?l=tr&r=ea6.net&f=wang-yu-kolsuz-kahraman-filmi&s=wang yu kolsuz kahraman filmi&bbls_client_id=227821853

http://sub2.bubblesmedia.ru/sb/clk/s/2027/o/145/.../0?a=1

http://sub2.bubblesmedia.ru/sb/clk/s/2134/h/00c127/o/145/p/957/.../0?a=1

http://mediaget.com/torrent.php?r=ucretsizpdfindir.com&s=Dikkat Vücudunuz Konusuyor (Ahmet Serif Izgören) Pdf Indir - Ücretsiz Pdf Indir,Pdf Kitaplar,E-Pub ve Pdf Indir,E-Book Download,Free Books&f=Dikkat Vücudunuz Konusuyor (Ahmet Serif Izgören) Pdf Indir - Ücretsiz Pdf Indir,Pdf Kitaplar,E-Pub ve Pdf Indir,E-Book Download,Free Books

http://sub2.bubblesmedia.ru/go/?link=m6Mu Kpk/YuWH6f0gUcZSbbrdE5GYYSHCRiOY4OEhn96cWMq1ifwXAxGPh1gevoDZqHb1AvKlq8TNfTpU/.../bBMpfsuLaSELZy0GrmbmCKAbBPlhV4jz6zByohRRnrkgX7nwWFrnjbAg=&param=ba6XWgihYYQ=&rid=1796&s=&r=nemo-crack.org&f=&cs=windows-1251&u=&fu=

http://li.ru/.../torr.php?r=hotcharts.ru

http://sub2.bubblesmedia.ru/go/?link=R5VJ 6s51xFFXR2ZrXs2rlsPig1xUuw9dM/HuF5na8nN3K1fsjrTq6MWvAv2BWvc2WLvgsVWV9CU2gr rs/Hleen0gq/baxUxUW/.../0rnI3L5QzVhi0TOHaVbV2q1eMipEaa4=&param=lQyaGjxIpkw=&rid=3221&r=fifasim.com

http://sub2.bubblesmedia.ru/sb/clk/s/706/h/9403d0/o/145/sub/0?a=1&f=Minecraft / [v1.8.3] RePack [2011]&u=http://.../Minecraft 183 PC RePackexe_1434916853.torrent

http://sub2.bubblesmedia.ru/sb/clk/s/2933/h/b477dd/o/145/p/1256/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=awdT fjDpMBS3avzKHYp MKOb9dvfIDMVvvxjhZ6VvhgRZZ32iaiNRSRjP3BB6z7LBlBwJom9zEXq0AifBDln4g/CsLRNo2xwQKEHKcG/a6CI4e7T s KsIuy2j8wihvGNaSyGEun1Hitk4=&param=weZCQNSl8No=&rid=3243&r=rutor.net&u=http://rutor.net/.../download.php?id=783&f=721_call_of_duty_.rar

http://ld.mediaget.com/index2.php?l=ru&r=skidows.ru&bbls_client_id=227046270&bbl=1&bbl_clk_id=142935-1447149538

http://sub2.bubblesmedia.ru/go/?link=lqkbCYEV/.../go7BXxr&param=nkqgMwbZPXk=&rid=1332&f=????????? [5 ?????: 1-12 ??????] (2015) SATRip ??????? ??????? [33.48 GB] :: MegaPeer.org

http://sub2.bubblesmedia.ru/go/?link=hmOb5i m26u6UP/siXhQC14dneAOjEHD6M/hX7XvP08ZEN1kc7qtwj9uOpKuu8ONqTu6m9JbEtSrNrtMQ2k3h5SN5/OCUz1UyrWvqvUJ1g9B75SV1a2Abcl9r4FgMSrAY9s6miR2u/zevjk=&param=rCclFt89rtw=&rid=3243&r=rutor.net&u=http://rutor.net/.../download.php?id=54845&f=Farming_Simulator_15_by_xatab.torrent

http://sub2.bubblesmedia.ru/sb/clk/s/2169/h/3d1bcb/o/145/.../0?a=1

http://goo.gl/5qTIr4

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?comment=o471|p|iprogMNsp|l100|e337|s353&r=al_progi.pp.ua

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?bbl_clk_id=463052-1447184595&bbl=1&f=Скачать мультфильм Уроки тетушки Совы. Весёлое новогоднее путешествие (2006) - Открытый торрент трекер Скачать торент с Fast torrent Скачать ф%u04

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?comment=o471|p|i23557|l139|e0|s805|k20151112160249&r=al_advmaker240x400.net

http://www.mmohelper.ru/go.php?http://sub2.admitlead.ru/sb/clk/s/536/h/2e04bc/o/471/.../mmodl?a=1&auto=1

http://mediaget.com/torrent.php?r=pc-torrents.com&u=http://pc-torrents.com/.../download.php?id=174

http://sub2.bubblesmedia.ru/go/?link=YRFUCXx djxKPX25Dr4VewDHIaQpnid1O3DTS0UvMaMH51ZLwMBfHbwqpUEDQowXwgXnvSR94LjiOtcxR6CTNGF1pikVATTg6qpJktlEeGow7GXu/HFkkob6eewfZg/P/R1m9kCaK6RxRRw=&param=JRumDjzkr2Y=&rid=3243&r=rutor.net&u=http://rutor.net/.../download.php?id=45623&f=need-for-speed-most-wanted_1109991041.torrent

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?comment=o471|p|i32377|l139|e0|s805|k2015111287121&r=al_advmaker240x400.net

http://sub2.bubblesmedia.ru/go/?link=hg9cW/b1BosoFjn BVC0gBhYyDfpJVj/k8BYZiFU jqOBQ jrZpYCfL8tLXDp784jjUsUsKbsRpmbuzdTV68b845miTbr1ILPXqpCxiOn KJKFbYaPKawtm791gNDuUYG7dCpQYamndYXJc=&param=HnrmOc6cZrw=&rid=3292&r=bestgamer.net&f=GTA San Andreas - ??????? ??????: ????????? ?????&u=/_ld/.../9338_TA_San_Andreas-.torrent

http://ld.mediaget.com/index2.php?comment=o471|p|i23557|l139|e0|s805|k2015111234525&r=al_advmaker240x400.net&bbls_client_id=227607161

http://ld.mediaget.com/index2.php?l=ru&u=http://torrent-games.net/load/.../-the-last-witch-hunter-2015-camrip&bbls_client_id=227214552&bbl=1&bbl_clk_id=417940-1447179349&use_f=1

http://sub2.admitlead.ru/sb/clk/s/637/h/1e906f/o/471/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=81oVbLERzzP7J0wDu0t9LChONgcDygepfshTJiuZKvfcKvp9zd2MR5ZRmAi2H28gfPzZNyz55eBC5D4E174cmXZS/.../PDxI7Qs XE iMmWgsW3ntmkzbnWNvMPTTAR6L TdAzbljevrcA==&param=Yqv0hx0Igh0=&rid=2779&s=????? "????????? ????" - ???????? ??????? - ?????? ?????? - ??????? fb2 - ??????, ?????? - ??????&r=litmir.me&f=????? "????????? ????" - ???????? ??????? - ?????? ?????? - ??????? fb2 - ??????, ?????? - ??????&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/go/?link=hsJkaDqHO7An/InJijhMsBrxhfHvRYTOUch/XKhAwnvjg4WjyR3Qsipp6RSRXZ16aeSBIzv3Z/KhYHFnGorDwGnBSgoO pEBuNSnOdK5xboR5yJES6xejPYu /PNwr9aqgREmJQccYRPMqs=&param=PUEwnh8SISs=&rid=3288&r=torrents-game.net&f=shogun-2-total-war&u=http://torrents-game.net/torrents/.../Shogun-2-Total-War.torrent

Latest 30 of 60 download URLs

Remove mediaget_id2310657ids2s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.