home

mediaget_id512985ids1s.exe

mediaget-installer Module

Media Get LLC

The application mediaget_id512985ids1s.exe, “MediaGet installer” by Media Get has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from mediaget.com and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Media Get LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
2c9868353431847ec1aacb06514dfa54

SHA-1:
a4393cb8f8258d355e23fa2d62bd8c9c6796af73

SHA-256:
912ae628e9b25143e60c98a52fde251a771f5b44d2f6b2b16fdad70791da671f

Scanner detections:
11 / 68

Status:
Potentially unwanted

Analysis date:
4/20/2024 12:30:36 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Downloader
7.1.1

Avira AntiVirus
APPL/Mediaget.AD.1
7.11.140.10

AVG
Luhe.MediaGet.B
2015.0.3521

Comodo Security
Application.Win32.MediaGet.A
18010

ESET NOD32
Win32/MediaGet (variant)
8.9610

G Data
Win32.Adware.MediaGet
14.3.24

Kaspersky
not-a-virus:Downloader.Win32.MediaGet
14.0.0.4099

Malwarebytes
PUP.Adware.MediaGet
v2014.03.29.06

Reason Heuristics
Optional.MediaGetApp.Installer.W
14.3.29.6

Sophos
MediaGet
4.98

Trend Micro House Call
TROJ_GEN.F47V0308
7.2.88

File size:
813.8 KB (833,312 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mediaget_id512985ids1s.exe

Digital Signature
Signed by:
Media Get LLC

Authority:
The USERTRUST Network

Valid from:
3/9/2011 2:00:00 AM

Valid to:
3/9/2014 1:59:59 AM

Subject:
CN=Media Get LLC, O=Media Get LLC, STREET=Sadovaya 53, L=Saint-Petersburg, S=Russia, PostalCode=190344, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
71D26D579AEE6A768F27CF3B6D4E9A91

File PE Metadata
Compilation timestamp:
3/5/2014 3:11:41 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:N63L8xpaUflhtoOSBrwLN733s1NlRWicSsC:7xpaUNht5l73cNjwSV

Entry address:
0x1A1CA0

Entry point:
60, BE, 00, 30, 54, 00, 8D, BE, 00, E0, EB, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
380 KB (389,120 bytes)

The file mediaget_id512985ids1s.exe has been seen being distributed by the following 50 URLs.

http://mediaget.com/torrent.php?r=zerx.ru2&s=terminator-5&f=terminator-5

http://sub2.bubblesmedia.ru/go/.../AvK2XZ6FUxc l83NElb0MXWS2W2yCl6y5zATGfTrMiwNVOVYnvTHVEjXZt3ejM3akB2D8bogG5tJu05TSvReKUH0U6aRug=&param=yhigsc9IHok=&rid=1155&s=&r=procsgame.ru&f=&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/.../?link=RJYC9gVbToClioIafyzBGmegrAAsVY0YxkvlX94FqySOti01AdvfxbGGeLnM0Aum3RXrpbNG v72NxDzZ3QCJz9TMJicKi3NYqCgfKW0ZtgM5QkRzuc3ZGsgBFmxCTjaOS5I68ysdkdQO4zl4znywAcVDyqt6gVTDx2DXPd6H8RWTW0hIsbJADVkeKo=&param=okpcDyIPcdA=&rid=146&s=Your Uninstaller PRO 7.5.2014.03 serial Rus&r=rsload.net&f=Your Uninstaller PRO 7.5.2014.03 serial Rus&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=O m4gg6ck0GK9udBcp4SlwUKrQeVHGYDV6LTf7F/nYtclbswo4AgC0L6zDzqZsCIz ampfcEIvQhnyFfidGPjhBaI1y2IPQgBdSLO/.../sEDFrzvX5PxY2z10Lcnh35xWhnz1iVUJVLoHQkqw=&param=jJvhSafOOuQ=&rid=1769&s=???? ? ???? ?????? ???????? (26 ?????)&r=online-serial.tv&f=???? ? ???? ?????? ???????? (26 ?????)&cs=windows-1251&u=&fu=

http://mediaget.software.informer.com/.../

http://sub2.bubblesmedia.ru/go/.../XNTgn1D23Uo02sneOicRVMiIO0l718Y=&param=Z7s7nZVFEOA=&rid=1770

http://sub2.bubblesmedia.ru/go/?link=X8n0hRbSBf99gI8s8yoGiDhCgJRCByGcpNZdoLoxPZkHqCPGChKFV9MnTnjCJR8W4JAH0LQvTV1DdIB15si6Q6hTh9ZAPfTo9K4l jNlcOkSVHGjYq4e10hFBhxyNjVNOxTVZa/ImOv1qMSPVWZ6HXwa8OiydjeHYEA33/.../ZZDW9ghjWzoV&param=714V9QAdku0=&rid=1144&s=&r=p-games.ru&f=&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=JPxYoGjd1A6ZxkJ4G9FmmMsLdltW7XGjrRA5XCyVDgEl3UT uw8uGot8HNkYkl6Ray/1Wxf1tT5t0ByhK/.../V1njvYQ2rZ7XzXLSN2UI ze13YGUP108mAnxbCKNMW1ef3ih&param=HsTVymsyUQc=&rid=1144&s=&r=p-games.ru&f=&cs=windows-1251&u=

http://mediaget.com/torrent.php?r=fasttorrent&u=http://www.fast-torrent.ru/download/torrent/.../Her.torrent&f=Her.torrent

http://sub2.bubblesmedia.ru/go/?link=xZEB1kGqPvaUZBUrEQW8QdZMZft9GmuxDbmx0BMrwOfz7eLp zVl0EXAsLjgAJFB21vu N/JkQkbd3CVOZayvXOZ65SQA11q6d76CmPiCaPrPcTuw0SCgKY8r tTL0DDeTnUhUFRkpzdUlucnB9HPiRLf2/.../0P44RpbHOA=&param=jAH47NZtaXE=&rid=1350&s=??? (2014)&r=mir-filmov.net&f=??? (2014)&cs=UTF-8&u=&fu=

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?r=clickunder3

http://sub2.bubblesmedia.ru/go/?link=mVGsOtueMY 6GW2Y1OvBhoSgEuhly CD1O CtwT/KJcvVxlRW5WzrC7tEh 9L6ObJywM3Q vbjHfsoCNwy08Qgk3MRyM02OBlfJwmmBTg2dIBcrNO1s4GJjqWmdHSuSOXQpfZAbm6OLB/.../y9Xh9qJ60dnApDKR68 pxsDNQR7z dsUUttyZqtM=&param=Pduok DsEiM=&rid=939&s=??????? ????????? Call of Duty 2 - ??? ????? 2&r=igrover.ru&f=??????? ????????? Call of Duty 2 - ??? ????? 2&cs=UTF-8&u=

http://sub2.bubblesmedia.ru/go/?link=fQ7FAsdWWmh1IzpAvqVPwWqyIwilXBDAcBX4nj8TUjtBPViXmeQfRYnnBfmijXtbXO8e5SFEpGez/.../AUT4RI=&rid=408&s=Fish (.doc .pdf) de Lundin Stephen Gratis | Descargar Libro Gratis Fish (.doc .pdf) | Libros Gratis de Lundin Stephen,&r=tuslibrosgratis.net&f=Fish (.doc .pdf) de Lundin Stephen Gratis | Descargar Libro Gratis Fish (.doc .pdf) | Libros Gratis de Lundin Stephen,&cs=UTF-8&u=

http://n-torrents.ru/go?http://media-get.ru/torrent.php?r=beemoporgru&u=http://n-torrents.ru/_ld/289/28972_DayZ.torrent&f=[N-Torrents.ru] DayZ: Standalone [v 0.42] (2014/.../???????) | RePack by SeregA-Lus

http://torr.mediaget.com/torr.php?r=lr7.net&s=Indir Digital Music Mentor Guitar Pro rar&f=Indir Digital Music Mentor Guitar Pro rar

http://ld.mediaget.com/index2.php?r=clickunder1

http://ld.mediaget.com/index2.php?r=advmaker3

http://sub2.bubblesmedia.ru/go/?link=gNz//lPihIt sL0VNu3HZAlzwG3OUqDnUR5FD9XkugVVkjx7vSJhLNTocCuBJLDF5LRtERB78P7qXvqC32jdS03tD33SG6Gos8Y4Qnutzz0T YAwRUlbC0lVgKnWB15IhagJkMlUE7N0dSGhTsL50qP43s4yntDW6hwPoqTgmS268MhXLTlHGepONuit&param=QWmhyvuuTVg=&rid=1752&s=BeamNG Drive Demo (En Ger?ek?i Ara? Fizikleri)&r=torrent-oyun.com&f=BeamNG Drive Demo (En Ger?ek?i Ara? Fizikleri)&cs=windows-1254&u=&fu=

http://mediaget.com/torrent.php?r=ea6.net&s=Euro Truck Simulator 2 Serial // Key // Ürün Anahtari&f=Euro Truck Simulator 2 Serial // Key // Ürün Anahtari

http://torr.mediaget.com/torr.php?r=ea6.net&s=cCa HOok V3.2 Indir // Cs Cca HoOk v3.2 Aim Hack Indir&f=cCa HOok V3.2 Indir // Cs Cca HoOk v3.2 Aim Hack Indir

http://sub2.bubblesmedia.ru/.../?link=X3ZytLsIuAFjWyrFIK4wB1m5EN0Sl0PQxj0kyJiYREGAmDIPip99e11C3Bdfd60uO1R8W3o46eo EANRAwwr7grNVPtLgesopgOdEXt779CyrTayKoTBW9E0Lp44HTeoYNBgmIhqsW KVkyKvX0A97DX3A45bVknJkn5a1m0uXTF8ZMlbcwHKgWH63 d&param= b4Y3 esEAQ=&rid=1278&s=&r=soft.oszone.net&f=&cs=windows-1251&u=

http://torr.mediaget.com/torr.php?r=ea6.net&s=GtA San AndreAs Indir / Tek Link /.../ Kralhile&f=GtA San AndreAs Indir / Tek Link /.../ Kralhile

http://ld.mediaget.com/index2.php?l=ru&u=http://.../download.php?tid=42382&r=pornoshara&f=_dani_danielstorrent&bbls_client_id=21785872

http://mg.bubblesmedia.ru/index.php?redirect_url=http://ld.mediaget.com/index2.php?l=ru&u=http://.../download.php?tid=42382&r=pornoshara&f=_dani_danielstorrent

http://mediaget.com/torrent.php?r=pornoshara&u=http://.../download.php?tid=42382&f=_Dani_Daniels.torrent

http://ld.mediaget.com/index2.php?l=ru&r=rsload.net&f=windows-loader-v222&s=Windows Loader v2.2.2&bbls_client_id=39228740&bbl=1

http://torr.mediaget.com/torr.php?rid=146&s=Windows Loader v2.2.2&r=rsload.net&f=Windows Loader v2.2.2&cs=windows-1251&u=&bbl=1&bbls_client_id=39228740

http://sub2.bubblesmedia.ru/go/?link=QuJAOSTDcJs3nDcKgkAN7/TBKGE2lrizX0xXA4yVWNzGDqUVSe3kyPRWm1vzad2pf1lWPd5LEpb81o0kVV 6sPbqDa 9MVFr92tq6e L9zJD0 L hHTQImSmeAFczQiiYsRelAtL6O/.../1dIABz7XQ=&param=XUKCMMvM0fs=&rid=146&s=Windows Loader v2.2.2&r=rsload.net&f=Windows Loader v2.2.2&cs=windows-1251&u=

http://ld.mediaget.com/index2.php?l=ru&r=kpnemo.ws&f=u0414u0435u0432u0443u0448u043au0438-u043au043eu0442u043eu0440u044bu0435-u043bu044eu0431u044fu0442-u0434u0435u0432u0443u0448u0435u043a-/-girls-who-like-girls-2001/dvdrip/700mb&s=???????, ??????? ????? ??????? / Girls Who Like Girls (2001/.../700Mb)&bbls_client_id=39228740&bbl=1

http://torr.mediaget.com/torr.php?rid=120&s=???????, ??????? ????? ??????? / Girls Who Like Girls (2001/.../700Mb)&r=kpnemo.ws&f=???????, ??????? ????? ??????? / Girls Who Like Girls (2001/.../700Mb)&cs=utf-8&bbl=1&bbls_client_id=39228740

Latest 30 of 51 download URLs

Remove mediaget_id512985ids1s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.