home

mediaget_id2501953ids2s.exe

mediaget-installer Module

Media Get LLC

The application mediaget_id2501953ids2s.exe, “MediaGet installer” by Media Get has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from download.besplatnyeprogrammy.ru and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Media Get LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
11f4823b59448ee126db709af0efee1d

SHA-1:
c749ff4fc0dc145866166426d13d6c1483f2f49d

SHA-256:
0a2624ad8186ea8e1d5f38b12ea64250fdaa5c35e23b2cd4ab3b9ffffc18c4ab

Scanner detections:
11 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 10:13:38 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/MediaGet.Gen5
7.11.130.56

AVG
Luhe.MediaGet.B
2015.0.3569

ESET NOD32
Win32/MediaGet (variant)
8.9399

G Data
Win32.Adware.MediaGet
14.2.24

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.4338

Malwarebytes
PUP.Adware.MediaGet
v2014.02.09.07

McAfee
Artemis!11F4823B5944
5600.7225

Qihoo 360 Security
Win32/Virus.Downloader.34d
1.0.0.1015

Reason Heuristics
Optional.Installer.MediaGet.X
14.2.9.7

Sophos
MediaGet
4.97

Trend Micro House Call
TROJ_GEN.F47V0208
7.2.40

File size:
849.8 KB (870,176 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mediaget_id2501953ids2s.exe

Digital Signature
Signed by:
Media Get LLC

Authority:
The USERTRUST Network

Valid from:
3/9/2011 4:00:00 AM

Valid to:
3/9/2014 3:59:59 AM

Subject:
CN=Media Get LLC, O=Media Get LLC, STREET=Sadovaya 53, L=Saint-Petersburg, S=Russia, PostalCode=190344, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
71D26D579AEE6A768F27CF3B6D4E9A91

File PE Metadata
Compilation timestamp:
2/8/2014 3:05:48 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:GhWvgubuuKk37zyXjNzvaNN33s1NAINNpcS3p:WWvgubTr0lvON3cNhsS5

Entry address:
0x1ABCD0

Entry point:
60, BE, 00, D0, 54, 00, 8D, BE, 00, 40, EB, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
380 KB (389,120 bytes)

The file mediaget_id2501953ids2s.exe has been seen being distributed by the following 31 URLs.

http://download.besplatnyeprogrammy.ru/MediaGet_Rus_Setup.exe

http://mediaget.com/torrent.php?r=filminndir.org&s=Vahsi Nehir 1994 türkçe &f=Vahsi Nehir 1994 türkçe

http://mediaget.com/download.php?ref_id=yandex&os=windows

http://sub2.bubblesmedia.ru/go/?link=Z1SO2keLh2Ep7Q3swLIt6kJRy7KMzQWfggJDrY4WK3tCN4MttPPQZ7GLf5an07nb9OfgsxlaUiQjJIL7W247ppDoGr2TUPJQPcgIhqW9P9tFDMgKt3UW45WoLd8S1fydD/xrrSlPDVk08DlAMrR9Z/JqwQ /OmHla/.../lVxTNbOV0q0=&param=TwekH31CXXI=&rid=1041&s=??????? ????????? &r=seria-online.ru&f=??????? ????????? &cs=UTF-8&u=

http://sub2.bubblesmedia.ru/go/?link=lN8YWQ9TzHK Y8ipkzwc8aNvs8eJPzO1JejNCEfE6qwVQJ4N/RrthFrl2Bni6Ti2UTCuBS01QaDuVg7lYgrkIGgt/.../5c=&rid=1533&s=ASIK HALIM KESEN - Ge? kaldin... by ST?DYO ATIK -eziler&r=yengevideo.com&f=ASIK HALIM KESEN - Ge? kaldin... by ST?DYO ATIK -eziler&cs=windows-1254&u=&fu=

http://ld.mediaget.com/index2.php?l=lv&r=gos-kino.ru&bbls_client_id=29494388&bbl=1

http://serversdownload.ru/MediaGet.exe

http://sub2.bubblesmedia.ru/go/?link=/HiF6dTw7zUEH6 gD9iaIdYPRUsy4yzcQB/gabShfrHqZTBUAKjIElBQSfF8K/.../hmZGr3qQsw7iLC11WeiZ6aUUi90iKm8O6JkQ8wO5E 0rwoMpyzSiwYUy8vA0fl RudakobQ3KMOynlNz9XTtR3Wxzw6gq8trFAuf Pjj2sEV&param=1COw1H9OvzY=&rid=1289&s=???????? ????? 3 ????? ???????? ??????&r=vsfilm.ru&f=???????? ????? 3 ????? ???????? ??????&cs=UTF-8&u=&fu=

http://ld.mediaget.com/index2.php?r=test64

http://ld.mediaget.com/index2.php?l=ru&r=oceanvideo.ru&f=u041fu043eu0434u0430u0440u0438-u043cu043du0435-u043du0435u043cu043du043eu0433u043e-u0442u0435u043fu043bu0430-2013-u0441u043cu043eu0442u0440u0435u0442u044c-u043eu043du043bu0430u0439u043d--oceanvideoru&s=?????? ??? ??????? ????? (2013) ???????? ?????? » OceanVideo.Ru&bbls_client_id=25507698&bbl=1

http://serversdownload.com/MediaGet.exe

http://ld.mediaget.com/index2.php?r=advmaker3

http://filmec-onlain.ru/go?http://.../torrent.php?r=filmec-onlain.ru&fu=&f=???????? ???

http://sub2.bubblesmedia.ru/go/?link=0LtZhVpLkQEBkGb/4a hmfMHdbXluA5yWHsQsZJrxtpQjsMoRQA7vqzDyoRtnDbQoL9FZ/9JWITSEWqFwzmxbb9Lm9xXtwP/.../jV4N5t8VuS9keo1nz1JQfl8MaJ4He EPFaprra3B6AZhQkDxbhh4X GG68iXz88RijiPXHi8F1s=&param=Y0 7hXwWuu8=&rid=1581&s=?????? ???????? ???? — ?????????? ?????????&r=bestfree.ru&f=?????? ???????? ???? — ?????????? ?????????&cs=UTF-8&u=&fu=

http://mediaget.com/download.php

http://sub2.bubblesmedia.ru/go/?link=wwWwrzvyIVz GHUc1Gm0BJodfUCryrhlL5ODyWM8WffJ ygC5VO4bOO2TLyaYReQbEhjETZS1STgZuiXRJvxgv7Ys7TOEE98Deft1qtNLvlyi1F64Tluv49d4pjZ5gj8q QizAcZLNen4Hlj5p0AHq IC0Yjh2mZM9qmVUieV8TVa5ieXt3LZNZe/jU=&param=IFIPXvfjfg8=&rid=1121&s=??? (2014), &r=my-cinema.net&f=??? (2014), &cs=UTF-8&u=http://my-cinema.net/.../0-0-0-7687-20&fu=

http://sub2.bubblesmedia.ru/go/?link=xS08HJRCVn6F3IKm2sET0O3mdHya1EsYifXViyCk5i59eyuOWAiZXaLFOLX4epfxEoOqSFS36MpBM7hbQ1HuYXWmm8DbCPW0cHqSRk9M3 TzW hJrbh49TsVChRinNJZMLAg7PL22kkeZ99QMwejSYUJeWjyGZsMJ/QlcVKaUkPYXb1sEYiYIH7Ls88=&param=ZwKU/hp73xA=&rid=1253&s=&r=filmoff.net&f=Ul7.SP1.6.1.7601.22556.x86.ru-MAX2014.iso.torrent&cs=windows-1251&u=http://filmoff.net/.../download.php?id=17068mget

http://mediaget.com/torrent.php?r=berkol.ru&fu=http://torrentoff.ru/.../SetupFile.zip&f=SetupFileRus

http://sub2.bubblesmedia.ru/go/?link=NNLOqIWoex4aDpjjS/s2yrV25TQBSaxRrU4ZH0H3Ubgd5pyYPN UAOh4KA1QaPB0MEq2qNkfdUBrOK/7GuiwlXq1vBRGhUVk9KSVmIlbUgXkWmA86oqlLeyYmJdenoewbT99W4f2/TPuihG4ony1jHA/.../ismQZkpPJ9hdpLwc=&param=khGG9XBsNZc=&rid=1215&s=&r=firebit.org&f=&cs=UTF-8&u=

http://mediaget.com/torrent.php?r=ea6.net&s=PES 2013 FULL Indir // Pes 2013 Indir full tek link | Kralhile&f=PES 2013 FULL Indir // Pes 2013 Indir full tek link | Kralhile

http://mediaget.com/torrent.php?r=teknomobil.org&s=Nero Indir&f=Nero Indir

http://ld.mediaget.com/index2.php?l=tr&r=turkcedublajfilmindir.org&f=rambo3-ndir-trke-dublaj-rambo-3-tek-link-indir-1080p-tdfi&s=Rambo 3 Indir Türkçe Dublaj, Rambo 3 Tek link indir 1080p - TDFI&bbls_client_id=27030630

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=tr&r=turkcedublajfilmindir.org&f=rambo3-ndir-trke-dublaj-rambo-3-tek-link-indir-1080p-tdfi&s=Rambo 3 Indir Türkçe Dublaj, Rambo 3 Tek link indir 1080p - TDFI

http://mediaget.com/torrent.php?r=turkcedublajfilmindir.org&s=Rambo 3 Indir Türkçe Dublaj, Rambo 3 Tek link indir 1080p - TDFI&f=Rambo 3 Indir Türkçe Dublaj, Rambo 3 Tek link indir 1080p - TDFI

http://ld.mediaget.com/index2.php?l=tr&r=turkcedublajfilmindir.org&f=rambolkkan-ndir-trke-dublaj-rambo-lk-kan-tek-link-indir-1080p-tdfi&s=Rambo: Ilk Kan Indir Türkçe Dublaj, Rambo: Ilk Kan Tek link indir 1080p - TDFI&bbls_client_id=27030630

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=tr&r=turkcedublajfilmindir.org&f=rambolkkan-ndir-trke-dublaj-rambo-lk-kan-tek-link-indir-1080p-tdfi&s=Rambo: Ilk Kan Indir Türkçe Dublaj, Rambo: Ilk Kan Tek link indir 1080p - TDFI

http://mediaget.com/torrent.php?r=turkcedublajfilmindir.org&s=Rambo: Ilk Kan Indir Türkçe Dublaj, Rambo: Ilk Kan Tek link indir 1080p - TDFI&f=Rambo: Ilk Kan Indir Türkçe Dublaj, Rambo: Ilk Kan Tek link indir 1080p - TDFI

http://mediaget.com/torrent.php?r=torrent-oyun.com&f=Thief-RELOADED.torrent &u=http://www.torrent-oyun.com/aksiyon/thief-(reloaded)-full-torrent-indir-torrent/.../?topicseen#new

http://ld.mediaget.com/index2.php?l=&r=katilimsiz.com&f=google-chrome-3201700102-final-tr-katu0131lu0131msu0131z-&s=Google Chrome 32.0.1700.102 Final TR - Katilimsiz &bbls_client_id=27846857&bbl=1

http://ld.mediaget.com/index3.php?reinstall=true&os=windows

Latest 30 of 31 download URLs

Remove mediaget_id2501953ids2s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.