home

cherepashki-nindzya-teenage-mutant-ninja-turtles-tmnt-s01-2012-2013-web-dlriptorrent_id4541956ids1s.

mediaget-installer Module

Media Get LLC

The file cherepashki-nindzya-teenage-mutant-ninja-turtles-tmnt-s01-2012-2013-web-dlriptorrent_id4541956ids1s., “MediaGet installer” by Media Get has been detected as a potentially unwanted program by 17 anti-malware scanners. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Media Get LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
ac5737bd978fcc373cd6b56f91901b79

SHA-1:
798057e0add717899b8a2e336fe8a4b4d519c1a6

SHA-256:
921ab32d3776c2512988857e445d9496e7206075a7ac2fc0f8572de5ee2d00e0

Scanner detections:
17 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 3:35:33 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Generic.634929
995

Avira AntiVirus
APPL/Mediaget.AE
7.11.138.30

AVG
Luhe.MediaGet.B
2015.0.3473

Bitdefender
Adware.Generic.634929
1.0.20.680

Bkav FE
W32.Clod6ee.Trojan
1.3.0.4959

Comodo Security
Application.Win32.Mediaget.~GYT
17965

Emsisoft Anti-Malware
Adware.Generic.634929
8.14.05.16.02

ESET NOD32
Win32/MediaGet (variant)
8.9569

F-Secure
Adware.Generic.634929
11.2014-16-05_6

G Data
Adware.Generic.634929
14.5.24

IKARUS anti.virus
AdWare.SuspectCRC
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11510

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.3859

Malwarebytes
PUP.Adware.MediaGet
v2014.05.16.02

MicroWorld eScan
Adware.Generic.634929
15.0.0.408

Reason Heuristics
PUP.Optional.Installer.AA
14.5.16.2

Sophos
MediaGet
4.98

File size:
1.1 MB (1,175,840 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

Common path:
C:\users\{user}\downloads\cherepashki-nindzya-teenage-mutant-ninja-turtles-tmnt-s01-2012-2013-web-dlriptorrent_id4541956ids1s.exe

Digital Signature
Signed by:
Media Get LLC

Authority:
The USERTRUST Network

Valid from:
3/9/2011 4:00:00 AM

Valid to:
3/9/2014 3:59:59 AM

Subject:
CN=Media Get LLC, O=Media Get LLC, STREET=Sadovaya 53, L=Saint-Petersburg, S=Russia, PostalCode=190344, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
71D26D579AEE6A768F27CF3B6D4E9A91

File PE Metadata
Compilation timestamp:
10/17/2013 4:50:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:EargA1fuxJotth3SdVsNz33svQGHJiuese+BnUXHQwiDqcSrdd:EarpuUtgdez3BeiucinUXHQtDdShd

Entry address:
0x1F1680

Entry point:
60, BE, 00, 30, 59, 00, 8D, BE, 00, E0, E6, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
380 KB (389,120 bytes)

The file cherepashki-nindzya-teenage-mutant-ninja-turtles-tmnt-s01-2012-2013-web-dlriptorrent_id4541956ids1s. has been seen being distributed by the following 18 URLs.

http://sub2.bubblesmedia.ru/go/.../xBNuhEUPih4dtSGtXlBzTN E fPVbp1KIxofrefAYym4cNVBpz560lbXJZvuRLSSrolo2z4f5ipc8WUgu4a4d3QFWFtBRKQcXNLbMuIg256TAdl4 &param=RzKEzpkNrRM=&rid=1041&s=??????????????????. 8 ?????. 3 ?????. ???????? ?????? ????????? ?? ??????? ????? (S08E03)&r=seria-online.ru&f=??????????????????. 8 ?????. 3 ?????. ???????? ?????? ????????? ?? ??????? ????? (S08E03)&cs=UTF-8&u=

http://sub2.bubblesmedia.ru/go/?link=CDo2vVpypM0rAB OKQDq1wekK9Ehp3BIBm3kY1NrRCPOoRPJKpW/NLi9yyYHQz7j56yxdGhGnZx/zsqsG/WH0KCkJoJB84cO5kBMUeSe/litwHKkK 7DuUr1j6/ptoXTHqQW6rQJ/xSFUlAVecKgyD8Q76gvnFLbw2J0TZnwAAuYKKb8VZ5K1AC9&param=rHqhqzHSYxs=&rid=1083&s=&r=manytorrents.org&f=????????????? 2 / Grown Ups 2 (2013) HDRip | ?????? ????&cs=UTF-8&u=http://manytorrents.org/.../0-0-0-16451-20

http://ld.mediaget.com/index2.php?r=5_agava728

http://sub2.bubblesmedia.ru/go/.../42msnMvfgMqs=&param=Ph3IVG1ZS4k=&rid=991&s=???????? ?????????? (2013) ? ???????? ?????? ?????? ????????? ? ??????? ????????.&r=nowfilms.ru&f=???????? ?????????? (2013) ? ???????? ?????? ?????? ????????? ? ??????? ????????.&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=ze pC4R1OLYpOgAfdzB1G3NAP1XJ64ayMbQXTuMs1kltfi7OBBZs327GoiMDoWd4eZVmcHrNL89RkKTprfaKdZ5FLe/.../djB03ZiZ4 XHZ2jwCGIGgtmdq5GhQBRs562nJp9J9vtgBiY2OyRrTFdWAYXgUaMtA4xcA=&param=sQOoWrr4pF0=&rid=424&s=????????? ???????????&r=torrentom.com&f=????????? ???????????&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=Mt s5HDvhFw6SAWACsvacIcn5dtJVnZGiRRvO4wJsaYSfpbAh1u2alWFjF2ZDEiaM02YumRKdgc2djimnm38sXWwBJVmHJmTLYABa7Rm3r vr0mEKrH5Ur7U9AD5KoM8p/.../XxrxC6l4=&rid=146&s=Google Earth 7.1.2.2019 Pro patch&r=rsload.net&f=Google Earth 7.1.2.2019 Pro patch&cs=windows-1251&u=

http://ld.mediaget.com/index2.php?r=2_agava240

http://ld.mediaget.com/index2.php?r=2_rmbn

http://sub2.bubblesmedia.ru/go/?link=hzKrB/ZakgXw8C0n4xRsw49rvqkVIo2go7adxcTNOGeSBCV 2VlRZMG wRCN0D4eBD3OBtzeT1BHb/.../fQ3W43g=&param=tuMfs02ycc8=&rid=450&s=???????????? (2012)&r=xtreker.ru&f=???????????? (2012)&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=u2s67egVTQZZlbk3F8VLRDsXWsRj55im6ba2/0j570ypNH3wILbPgigtIFI6MKrTRlzQ1yNbcMPnD1MUTH 9S65OJeLfLeVx4REFWK01zXkpL2fJE9zPtGWA9JEgxky3xmIo1WnqStdeIoUGTRueFsoOUhFfwwQNSJ0/.../766JOk=&rid=991&s=????? "??????????" ?????????? ?????????.. ? ???????? ?????? ?????? ????????? ? ??????? ????????.&r=nowfilms.ru&f=????? "??????????" ?????????? ?????????.. ? ???????? ?????? ?????? ????????? ? ??????? ????????.&cs=windows-1251&u=

http://mediaget.com/torrent.php?r=rsload.net&s=Driver Genius Professional 12.0.0.1314 crack Rus&f=Driver Genius Professional 12.0.0.1314 crack Rus&cs=windows-1251

http://ld.mediaget.com/index2.php?l=ru&u=http://www.fast-torrent.ru/download/torrent/.../??????????. ??????, ?????????? ??? [01-08 ?? 08] (2013) SATRip ?? FilmRus.torrent&r=fasttorrent&f=stalingrad-pobeda-izmenivshaya-mir-01-08-iz-08-2013-satrip-ot-filmrustorrent

http://ld.mediaget.com/index2.php?l=ru&r=muzpoisk.net

http://mediaget.com/download.php?os=windows&ref_id=yandex

http://ld.mediaget.com/index2.php?l=ru&r=p-games.ru

http://i.mediaget.com/download.php

http://ld.mediaget.com/index2.php?r=5_clickunder

http://sub2.bubblesmedia.ru/go/?link=bH0EQM0UnButBjyW3lDTmxyGVfYcXlrNi0FYcFAik3bPqpwVzHWf3tmDOmZk0TLC0C6F/.../IDeqqwogA8SItIR7kjlZkKV eABTIZmqwLyUON2G2YrwIenrcxHBFQNP4nrU4h9SMvOydTTwi4KUmgP7m udxtP91us=&param=Es9j4IlEAT0=&rid=823&s=torrents.kg&r=torrents.kg&f=torrents.kg&cs=UTF-8&u=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.