home

mediaget_id2535657ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id2535657ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from ld.mediaget.com and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Banner LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
3656b495f39717d48b5770db40bb19e1

SHA-1:
9cf06edbee9d8dfd72d84add3af2164d25bc122d

SHA-256:
098005fe37efe2dcb26133aaae835d6655e3fbd60e95522b77b85c514f8f8175

Scanner detections:
11 / 68

Status:
Potentially unwanted

Analysis date:
5/9/2024 4:22:53 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/MediaGet.Gen5
7.11.153.232

AVG
Banne
2015.0.3449

Dr.Web
Program.MediaGet.21
9.0.1.0159

ESET NOD32
Win32/MediaGet (variant)
8.9912

G Data
Win32.Adware.MediaGet
14.6.24

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.3742

Malwarebytes
PUP.Adware.MediaGet
v2014.06.08.02

McAfee
Artemis!3656B495F397
5600.7105

Reason Heuristics
Optional.MediaGetApp.Installer.X
14.6.8.14

Sophos
MediaGet
4.98

Trend Micro House Call
TROJ_GEN.F47V0605
7.2.159

File size:
655 KB (670,752 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mediaget_id2535657ids2s.exe

Digital Signature
Signed by:
Banner LLC

Authority:
COMODO CA Limited

Valid from:
3/26/2014 3:00:00 AM

Valid to:
3/26/2017 3:59:59 AM

Subject:
CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata
Compilation timestamp:
6/5/2014 5:43:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:Pj1X5lRVe9YHgY6oGffIyfSB7GeqtvtRSKxwjeO/xOJOsg6NSTEM2:hRVeDrdaNeNtRSKxw8McS/2

Entry address:
0x15EE20

Entry point:
60, BE, 00, 90, 50, 00, 8D, BE, 00, 80, EF, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
348 KB (356,352 bytes)

The file mediaget_id2535657ids2s.exe has been seen being distributed by the following 42 URLs.

http://ld.mediaget.com/index2.php?l=ru&r=sewin.net&bbls_client_id=54132986

http://mediaget.com/torrent.php?r=filmodrom.net&u=link_FILE&f=NAME_FILE

http://torr.mediaget.com/torr.php?r=ea6.net&s= Internet Download Manager Full Indir (Crack Resimli Anlatim)&f= Internet Download Manager Full Indir (Crack Resimli Anlatim)

http://sub2.bubblesmedia.ru/go/?link=Vx7puJP fjIdIfXjc4/jKSfw1wQWdR oHLYiKsuyomD9cJG aOHEdoARBHRlxctBByVg0DMfh0lpfdNbAUrs/.../RpyKIekDWTgo3JdQ7mZcODsykgAWcWCRYozG8h5GLCeXCsp6tuqbsJvrXRQ==&param=GTAjmvt26CE=&rid=991&s=?????? ?????? ?????? (1 ?????) 1 ????? ???????? ?????? - 2014&r=nowfilms.ru&f=?????? ?????? ?????? (1 ?????) 1 ????? ???????? ?????? - 2014&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=Hr0SYFvldHC01QppuWNnYlGRVARBsWYVR1MLIo/UJvMBsqtLS0WTJI/kpvXM7XzFWs45lPsbPqC6nDdZnmffB/Jao1GXpMA2vTdsdNWuW/yK6v1v5KDkrpWd9aUxlqmVsbDpu7WWn3njrQfH8flJ/.../x945hQ=&rid=1350&s=????????? ? ???????? 2014 ???????? ?????? ?????? ????? ????????? ? ??????? ???????? ?????&r=mir-filmov.net&f=????????? ? ???????? 2014 ???????? ?????? ?????? ????? ????????? ? ??????? ???????? ?????&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/go/.../84RH70PPpsdFPiIa4sg==&param=zmav4OzL YQ=&rid=66&s=????? ???? 1-12 ?????? (2011) ???????? ??????&r=mguser_358554&f=????? ???? 1-12 ?????? (2011) ???????? ??????&cs=windows-1251

http://sub2.bubblesmedia.ru/go/?link=dawYTYTB97W0G/ZmltAio/S8Z5XYvlT9gcm1O2 tNxxht voWpHw6p4AYHelVrB3Oep6jqoCqR2BNriNh3whcEd/6GWzD lH876dJTkS1Jf g0q0BhYaXmFo9Fh1/jFeYW1N06b/.../k6Iq8=&rid=1841&s=Gurkan DEMIREZ - Baba Mrb (2014 yeni parca yeni klip )&r=vidyoskop.com&f=Gurkan DEMIREZ - Baba Mrb (2014 yeni parca yeni klip )&cs=windows-1254&u=&fu=

http://soft2k.com/descargar

http://sub2.bubblesmedia.ru/go/?link=ynk7bQkl8RL0WV53J5 SrMGD1pbKBVVWowgX6gFpFSER/.../RM7x4cpGYtX7V&param=23JOFmDLQ3E=&rid=1928&s=???????? ???? ??? ????? ?????? 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 ????? ???????? ?????? ????????? ? ??????? ????????&r=seezam.net&f=???????? ???? ??? ????? ?????? 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 ????? ???????? ?????? ????????? ? ??????? ????????&cs=windows-1251&u=&fu=

http://sub2.bubblesmedia.ru/go/?link=pyFeHaM28X30ecNdH6/6aqCje2 oKSTibhGlaHsIJ9G5k1E9RNoKlBGlFcvZ7fCbWbPHiQ PK/.../a92kx1 4PCHdv8JeSVibFHNOs4Rd1uaIRNcv1lO9JzC3gQwF3vTVKtnEBlAXafU3y0UPn6Jfb3unqjdKy8Py4aToRJdVvqZT60INpndIFHc=&param=85C3uVOWsdA=&rid=1201&s=?????????? ?????&r=kinyxa.ru&f=?????????? ?????&cs=UTF-8&u=&fu=

http://ld.mediaget.com/index2.php?r=advmaker300s_old

http://sub2.bubblesmedia.ru/go/?link=Y GgkRJ7YKx0h1eyTpXcGpFmzun5VFUbwxXPTHR4hdb5kdQSvYBc61qIYir2DnkGo0zQxmuAnQ/rTmPNfQeADwipuRUhkU6W0gtM7T2ADCbflsw9ZVfY7h85PaGaCOG1FlN4B5EphaT0u4JhQYneGavExc WZymucaG7DUE4HOtKvAE6G5Sz01eJgiw=&param=2pfqpYkVjEE=&rid=992&s=???????? (1 ?????, 34 ?????) /.../ Lazy Town (?????? ??????) [2004 - 2007, ????????, SATRip]&cs=UTF-8&u=

http://torr.mediaget.com/torr.php?r=fasttorrent&u=http://www.fast-torrent.ru/download/torrent/.../_untik.torrent&f=_untik.torrent

http://mediaget.com/torrent.php?r=tuslibrosgratis.net&s=Nueva York de Edward Rutherfurd Gratis | Descargar Libro Gratis Nueva York | Libros Gratis de Edward Rutherfurd,&f=Nueva York de Edward Rutherfurd Gratis | Descargar Libro Gratis Nueva York | Libros Gratis de Edward Rutherfurd,&cs=UTF-8

http://sub2.bubblesmedia.ru/go/.../XqvMGnFXm0t8iuUi41nBFJLq LqUfct5SLJFD1fDwZ0oEv9quuC71it74lssZSxWntffu6sspj680Ew=&param=jR9aC8FhSEs=&rid=1879&s=Batman:Arkham City full indir - full oyun - Oyun indir - Oyun download - Oyunindir eu&r=oyunindir.eu&f=Batman:Arkham City full indir - full oyun - Oyun indir - Oyun download - Oyunindir eu&cs=windows-1254&u=&fu=

http://ld.mediaget.com/index2.php?l=ru&r=doramakun.ru&bbls_client_id=54086102

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=ru&r=doramakun.ru

http://mediaget.com/torrent.php?r=doramakun.ru

http://www.mmohelper.ru/go.php?http://sub2.bubblesmedia.ru/sb/clk/s/1665/o/145/p/1266/.../0?a=1

http://ld.mediaget.com/index3.php?reinstall=true&os=windows&r=google&bbls_client_id=53381629

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index3.php?reinstall=true&os=windows&r=google

http://mediaget.com/download.php?ref_id=google&os=windows

http://ld.mediaget.com/index2.php?l=tr&r=hdfilmizlesek.org&f=hababam-su0131nu0131fu0131-&s=Hababam Sinifi &bbls_client_id=52614736&bbl=1

http://torr.mediaget.com/torr.php?rid=1281&s=Hababam Sinifi ?? Bu?uk – Film izle , , , , &r=hdfilmizlesek.org&f=Hababam Sinifi ?? Bu?uk – Film izle , , , , &cs=UTF-8&u=&bbl=1&bbls_client_id=52614736

http://sub2.bubblesmedia.ru/go/.../QLRHYRbL7fuj3FW lqrz8 J5KkXeKREPWlWs8fWiWgSZsg P2JVIRWx6mQjPq2slorxeskpbGxjCmK6 DbwcMJDaOLbcxQrpf0ow JLefkkcMj9 uRm1bHuWSIZw=&param=CYtv8zZ Xps=&rid=1281&s=Hababam Sinifi ?? Bu?uk – Film izle , , , , &r=hdfilmizlesek.org&f=Hababam Sinifi ?? Bu?uk – Film izle , , , , &cs=UTF-8&u=

http://ld.mediaget.com/index2.php?l=sv&r=gtavicecity.ru&bbls_client_id=54055681&bbl=1

http://torr.mediaget.com/torr.php?rid=1878&s=&r=gtavicecity.ru&f=&cs=UTF-8&u=&fu=&bbl=1&bbls_client_id=54055681

http://sub2.bubblesmedia.ru/go/?link=VH6Cn5XKHc0SFlsIl5l/h/ISNgiKEDaqH6taD4qyLKWTZQeff4ZTVEopPk/.../yoq0GUY5TwWQVzRyIBLc4khqReWV25pl80v91b8XhBFKfFkF9eb5tZKnIPzjOvj0JFPGXjP2YbUcIQUfUeAApjjRtEhufscEbSCA9IKT8&param=yFU42olHOFY=&rid=1878&s=&r=gtavicecity.ru&f=&cs=UTF-8&u=&fu=

http://ld.mediaget.com/index2.php?l=tr&r=forum.oyunceviri.com&f=grand-theft-auto--san-andreas--100-trke-yama&s=Grand Theft Auto – San Andreas – 0 Türkçe Yama&bbls_client_id=44569014

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?l=tr&r=forum.oyunceviri.com&f=grand-theft-auto--san-andreas--100-trke-yama&s=Grand Theft Auto – San Andreas – 0 Türkçe Yama

Latest 30 of 42 download URLs

Remove mediaget_id2535657ids2s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.