» mediaget_id2355365ids2s.exe
Overview
Analysis
File Details
Downloads (232)

mediaget_id2355365ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id2355365ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 9 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from ld.mediaget.com and multiple other hosts.

File name:

Publisher:

MediaGet LLC (signed by Banner LLC)

Product:

mediaget-installer Module

Description:

MediaGet installer

Version:

1.0

MD5:

45592feff6696e72f513adceb577b69b

SHA-1:

d3a2aab67efef8b23c647a96aa2cbb2506443901

SHA-256:

30d8f5da134b31bd6cbc20e8f0e16910ec653d2d35faa402a6cef6f967dd9493

Scanner detections:

9 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 9:33:05 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

APPL/MediaGet.Gen5

7.11.184.204

AVG

Banne

2015.0.3292

Dr.Web

Program.MediaGet.21

9.0.1.0316

ESET NOD32

Win32/MediaGet.AE (variant)

8.10712

G Data

Win32.Adware.MediaGet

14.11.24

Kaspersky

not-a-virus:Downloader.Win32.MediaGet

14.0.0.2957

Malwarebytes

PUP.Adware.MediaGet

v2014.11.12.02

Reason Heuristics

Optional.MediaGetApp.Installer.X

14.11.12.14

Sophos

MediaGet

4.98

File size:

482 KB (493,600 bytes)

Product version:

1.0

Original file name:

mediaget-installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Banner LLC

Authority:

COMODO CA Limited

Valid from:

3/26/2014 4:30:00 AM

Valid to:

3/26/2017 4:29:59 AM

Subject:

CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata

Compilation timestamp:

11/10/2014 6:04:56 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:qjB6hpEYFrKf9Dd1GNqtv+mD5ytv30bLc3ZfD:qjKpESK1D3GUNjkv30bYZfD

Entry address:

0x104580

Entry point:

60, BE, 00, 20, 4C, 00, 8D, BE, 00, F0, F3, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.9273

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

268 KB (274,432 bytes)

The file mediaget_id2355365ids2s.exe has been seen being distributed by the following 50 URLs.

http://ld.mediaget.com/index2.php?l=tr&fu=https://eaassets-a.akamaihd.net/Origin-Client-Download/origin/.../OriginThinSetup.exe&r=indiroyunu.com&f=fifa-2015&bbls_client_id=121071620

http://torr.mediaget.com/torr.php?r=torrent-oyun.com&f=the.forest.v0.11c.torrent&u=http://.../index.php?action=dlattach;topic=286858.0;attach=146300

http://sub2.bubblesmedia.ru/go/.../ncQ2CvtaSgS lpqmcB6rYXadgl9FNboK8pRQKP9EgHU9V8Sq9V4gApVVA3IN1kNYBe4cbIHIhi9PwnXoCbwsUufZXO7L9cV7 NjXTXJvn1IoaI77wq&param=7mBbvFbMKfs=&rid=1490&cc=1

http://ld.mediaget.com/index2.php?l=tr&fu=http://ftp.newaol.com/pub/.../counterstrikev15_demo.exe&r=indiroyunu.com&f=counter-strike-15&bbls_client_id=119753480

http://sub2.bubblesmedia.ru/go/?link=AI5iCI1v3yaD5urGU7VznRB60rKaq/ErPCBDr1IbHp8tjQBWb/fXlXvtWSzMWTq 2Ju8q1a35mPy3K6l0/.../kTtXu1sl8wk6G8fAUtfhatcK1mb3Ic=&param=ZN43p2MZ1PA=&rid=1435&s=???????? ????????? ??? ??????? ?????????? ?????????&r=hitsbox.info&f=???????? ????????? ??? ??????? ?????????? ?????????&cs=windows-1251&u=&fu=&cc=1

http://mediaget.com/torrent.php?r=novelasenvivo.com&s=Mi Corazon es tuyo Capitulo 145 Online | Novelas en Vivo&f=Mi Corazon es tuyo Capitulo 145 Online | Novelas en Vivo&cs=ISO-8859-1

http://torr.mediaget.com/torr.php?r=canisik.net&s=Gta vice City Full Indir – Tek Link&f=Gta vice City Full Indir – Tek Link

http://torr.mediaget.com/torr.php?r=canisik.net&s=Left 4 Dead 2 Full Indir /.../ Tek Link

http://torr.mediaget.com/torr.php?r=fileindir.com11&s=OFFICE 2010 Professional Plus VL (ORJI&f=OFFICE 2010 Professional Plus VL (ORJI

http://mediaget.com/torrent.php?r=piratatugafilmes.com&s=Doidos à Solta, de Novo , , , &f=Doidos à Solta, de Novo , , , &cs=UTF-8

http://sub2.bubblesmedia.ru/go/?link=UsccwLqofhUm6Ra/CQ8lfgA0EHfSf51rPoqbaOTeZjZRrAwowUYAPFhQ0k/.../WzDaI9GsUj bGW6troTgeD6kUkbyviuX7AMZCsGvpqXmG2dSqfU=&param=CoCVKhW4wT0=&rid=1752&s=NBA 2K14 [3DM] - FULL - Torrent indir - Hizli - Indir - Torrent Download&r=torrent-oyun.com&f=NBA 2K14 [3DM] - FULL - Torrent indir - Hizli - Indir - Torrent Download&cs=windows-1254&u=&fu=&cc=1

http://sub2.bubblesmedia.ru/go/?link=VaGnNOxLpmFenyUeDmnrSzQ8fpTgVT8fzvMB84BC93X3MLHbNezL8HZ2mOBG2uUFWUEkS8LUZo8MbQpwNfBt okEmm gOzXPkSHE JfsiAMVfsA49D7q9rOvicRMQCyMZNKoZwNqTB8fSCo=&param=UKb5zD/EYeA=&rid=2089&s=??????? ?????? ???? ????????? ????? 1,2,3,4 / Game of Thrones (2011) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&r=fast-torrent.ru&f=??????? ?????? ???? ????????? ????? 1,2,3,4 / Game of Thrones (2011) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&cs=utf-8&u=&fu=http://www.fast-torrent.ru/download/torrent/.../undefined.torrent&cc=1

http://sub2.bubblesmedia.ru/go/?link=/7RRNgxHwfdEWJkMe1sLzg6PNSp7DodZXODcFfHpQbOczIeq05UQxiAFz7Jjc8MVfP4CnU/.../tWvIb60RS5g1PTlsMuOfhJQ==&param=3kCEI0WRCr8=&rid=2544&f=Deliha 2014 Tek Par?a Full HD Izle | HD Film Denizi, Film Izle, HD Izle - Part 2&cc=2

http://sub2.bubblesmedia.ru/.../?link=r2A6NsiDkU6wfnlNVe5SGu8V6ummNkE6fERV1EmuZcVOzu4 7JWz9afCjROGAAKDUpRpjFZVdKEsl5jSOUnUEijivUYuPzK73K3me1dRtD4WamSgIFV8vb3 J r3VO 73MI j8BDFYp84A=&param=o7mFRHoosgE=&rid=1752&s=Battle For Middle-Earth II: The Rise Of The Witch King - FULL - Torrent indir&r=torrent-oyun.com&f=Battle For Middle-Earth II: The Rise Of The Witch King - FULL - Torrent indir&cs=windows-1254&u=&fu=&cc=1

http://sub2.bubblesmedia.ru/go/?link=DhIwpZE4KchjdLEblGNcXRfFnssYgVmfPdNaC93LxtaETQPdkNwzNGyQBcKac9SXiqAgpVO4/Kj/VDvncFTARKuGIfORbu5NqVPbmbDacY 1WbDz7FiGI0lbJn8OshBrrbJhQqXep4pOHcY=&param=kit9ZWzB2o0=&rid=2217&s=??????? LoviVkontakte 2.80 ??? Windows 7 ?????????&r=allprogs.com&f=??????? LoviVkontakte 2.80 ??? Windows 7 ?????????&cs=windows-1251&u=&fu=http://allprogs.com/uploads/.../setup_lvk_3217.rar&cc=2

http://sub2.bubblesmedia.ru/go/?link=Qp7ZvvmQhmXLRhx6vDlF470pRNF/roVcHBsOagG9 Bgp0Dj51M5bWp5jugh o7272GTMURo2O0ih4icCb/nQLqV4MVNdkuGDOqPb9GxErFKTK3x4rzGyotguVvWXNMb53jCeFJzMU4O4j0=&param=VPEbTP1gyv4=&rid=2089&s=??????? ????? ????? ???????? / Edge of Tomorrow (2014) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&r=fast-torrent.ru&f=??????? ????? ????? ???????? / Edge of Tomorrow (2014) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&cs=utf-8&u=&fu=http://www.fast-torrent.ru/download/torrent/.../undefined.torrent&cc=2

http://sub2.bubblesmedia.ru/go/?link=Qm4W/5sExuBin1DeCRDBqOY8rjNHi cWbuixBGk8b/HjWWVyJAqhCAbkUll3ujs5fCl2r0DxdTEeGHoDdIerWU25jMUBfBJYK3/ECbC7S2ZNViIALt5eIvx6E7NqevX/wJlFQ8V/.../Am rlg==&param=KDltSQAPHlo=&rid=2544&f=?alsin Sazlar 2014 720p Full HD Izle | HD Film Denizi, Film Izle, HD Izle&cc=1

http://sub2.bubblesmedia.ru/go/?link=3qXkfIqJK8SWZ32lk135mlk60h8vB/1NIjm/XCcI1/.../SYyJp6kbUJR gZyK gjDwy84=&param=ksKsxMDuSOw=&rid=1058&s=???? ????????? 5 ????? ???????? ?????? ? ??????? ???????? ??? ?????&r=oneline.tv&f=???? ????????? 5 ????? ???????? ?????? ? ??????? ???????? ??? ?????&cs=UTF-8&u=&cc=1

http://ld.mediaget.com/index3.php?reinstall=true&os=windows&bbls_client_id=121300250

http://sub2.bubblesmedia.ru/go/?link=ejs2dGmhCly9XgleHULpJdKvirnhKReTkLM6fZ7TabFyL1EsfICuIyQPUfo/6CkQpX5IsEKHpmGHJ2Aux0hBhFVA SeJYRf4cRAhMqt1ZunSOY3dtbIyWWnXBFtvdjl6AcTkEyddT/.../wXjqknSMc=&rid=322&s=O Av? Descarado, , , &r=piratatugafilmes.com&f=O Av? Descarado, , , &cs=UTF-8&u=

http://sub2.bubblesmedia.ru/go/?link=Hs3CZQcv3sVhx3J4RowvKQqcw5ryGDouZjGE7l6I9Y vJvZDykj/vGlQ7pyLV5t21J0jsqRR2yuB olImssFFvkegTi5TybxcU1Iz8d5FYH50oXEdfW98H84x0CU VnbTZt8zZChR/wtqV8=&param=K8A47GXMx08=&rid=1438&s=???????? 2: ?????????? ?????&r=torrent-film.net&f=???????? 2: ?????????? ?????&cs=windows-1251&u=http://torrent-film.netmagnet:&cc=1

http://sub2.bubblesmedia.ru/go/?link=d6tcr/RZh5WkDbhvRjut1rsq/.../l5odH4LolBIqlyWcurAzb6nIUPsrA==&param=dxEdlOARmYo=&rid=995&s=?? ????????? ? ????????? [2014, ?????????, HDTVRip (720p)] • , , , , , &r=riper.am&f=?? ????????? ? ????????? [2014, ?????????, HDTVRip (720p)] • , , , , , &cs=UTF-8&u=&cc=1

http://sub2.bubblesmedia.ru/go/?link=63L6zbTX5/ZOeqxuLMY5c0FZPfBGp0I3xIbBVXvdw1KBKHpQwmp Ux0YPxCvF4TCA2puRJjC90RnORQ8CKFpcvMjYm/sgilYvgPaKB6x8tLDVR96Yk4wK5yB35tBV7oPFFaABOETOwA2kW0=&param=way8ST9DThE=&rid=2089&s=??????? ?????????? ?????? / Dr. Seuss' The Lorax (2012) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&r=fast-torrent.ru&f=??????? ?????????? ?????? / Dr. Seuss' The Lorax (2012) - ???????? ??????? ?????? ??????? ?????? ? Fast torrent ??????? ?????? ????????? ??? ???????????&cs=utf-8&u=&fu=http://www.fast-torrent.ru/download/torrent/.../undefined.torrent&cc=1

http://mediaget.com/torrent.php?r=vtorrente&u=http://evrl.to/storage/.../&f=Far Cry 4 - Gold Edition [1.6.0] (2014) PC | RePack ?? R.G. Freedom

http://mediaget.com/torrent.php?r=saglamindir.net&s=Pes 2013 Crack Full Indir (0 Fix) &f=Pes 2013 Crack Full Indir (0 Fix)

http://sub2.bubblesmedia.ru/go/?link=uCYYdcpZI1VOEdN9kMWbASrep4P2NVyKYw i1gSvW9ELabPetWQlbgqD70j1RpKclfJtA7GF5/YP6Vw1SXpuuo8LQK3/.../Plua6HXB5H6JZvE1LSX2oxaQwvEiA4JNTMxkYTzwshImVIW S&param=vYoHNmMW76s=&rid=1490&cc=2

http://torr.mediaget.com/torr.php?r=lr7.net&s=Gta 5 indir /.../ Tek Link&f=Gta 5 indir /.../ Tek Link

http://sub2.bubblesmedia.ru/go/?link=7qWG6P6OZ2OQiV52S1CI 11evtr6RSSLnZA6e aJu559r1QQ8rdOTTngHgD0FccQmv8poUypJxi3hPAEQzf/.../VNqb7ISB25eSaPws0Z8=&param=C7dMI7rrsfI=&rid=1939&s=Recep Ivedik 4 35 Dk HD Izle Sans?rs?z | Yerli Komedi Filmleri Online Yerli Film Izle Yerli Filmler&r=yerlikomedi.net&f=Recep Ivedik 4 35 Dk HD Izle Sans?rs?z | Yerli Komedi Filmleri Online Yerli Film Izle Yerli Filmler&cs=UTF-8&u=&fu=&cc=1

http://sub2.bubblesmedia.ru/go/?link=AbOPctjqD9sepTKXH1ujDFb0NKcIUSEzOomAJ5t3Nsti7j7ZbiPLi/m5dpTkDVZf5FD8qvCWM6fB /kSuEsqigoQ cMeFIHltH2W7uOJYStJCcpeRyN1HiVj/vldzbCseLZe5onlagiNB/.../2suzPw==&param=mrFnerriOnU=&rid=1904&cc=1

http://sub2.bubblesmedia.ru/go/?link=TGTIGg47aNfi7e/yd/mzvIrsYU7yFc2YOBtOUb0Xvmj IvqlYOQ8IArzIsRe3VoK9mjq08K2DpZDI1Ls7SwAbuh2f43oUp26ebegxK XxBbebXIy6Gi3q2Ji805/vf6SyF11SFfBjB2htksr/.../e00=&rid=1873&f=Recep Ivedik 4 indir 2014 – Yerli Film Full indir&cc=1

Latest 30 of 232 download URLs

Remove mediaget_id2355365ids2s.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.