» mediaget_id1318040ids2s.exe
Overview
Analysis
File Details
Downloads (291)

mediaget_id1318040ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id1318040ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.installads2.com and multiple other hosts.

File name:

Publisher:

MediaGet LLC (signed by Banner LLC)

Product:

mediaget-installer Module

Description:

MediaGet installer

Version:

1.0

MD5:

7dbf3fcae82fccfa964f1a09a1bc7bb9

SHA-1:

1bfc009919ff402c561884d0c9cd328ab1d3dfd4

SHA-256:

f3b24e47dcbcfaaaaefea6036200ead89bdb7f20f8f4d3c8030c7f3b82e78835

Scanner detections:

12 / 68

Status:

Potentially unwanted

Analysis date:

12/25/2024 4:21:24 PM UTC (today)

Scan engine

Detection

Engine version

AVG

Banne

2016.0.2950

Baidu Antivirus

Adware.Win32.MediaGet

4.0.3.151020

Bkav FE

W32.HfsAdware

1.3.0.7237

Comodo Security

Application.Win32.MediaGet.G

23449

Dr.Web

Program.MediaGet.133

9.0.1.0293

ESET NOD32

Win32/MediaGet.AE potentially unwanted (variant)

9.12436

G Data

Win32.Adware.MediaGet

15.10.25

K7 AntiVirus

Unwanted-Program

13.211.17590

Kaspersky

not-a-virus:HEUR:Downloader.Win32.MediaGet

14.0.0.1247

Malwarebytes

PUP.Optional.MediaGet

v2015.10.20.01

Reason Heuristics

PUP.MediaGet.Banner.Installer (M)

15.10.20.13

Sophos

MediaGet (PUA)

4.98

File size:

657.5 KB (673,312 bytes)

Product version:

1.0

Original file name:

mediaget-installer.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\mediaget_id1318040ids2s.exe

Digital Signature

Signed by:

Banner LLC

Authority:

COMODO CA Limited

Valid from:

3/26/2014 3:00:00 AM

Valid to:

3/26/2017 2:59:59 AM

Subject:

CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata

Compilation timestamp:

10/20/2015 1:39:55 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:jp/d1VH3rJ4Px2VRQB1Qja8dOixbXJmea6j77FlvO/G:j19oErUqjVOixdm8xlvkG

Entry address:

0x15FC30

Entry point:

60, BE, 00, B0, 51, 00, 8D, BE, 00, 60, EE, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

276 KB (282,624 bytes)

The file mediaget_id1318040ids2s.exe has been seen being distributed by the following 50 URLs.

http://www.installads2.com/torrent.php?&t1=freetorrent&is=Spore Complete Edition (PC REPACK) Torrent Download

http://mediaget.com/torrent.php?r=dosya.host17&s=marsli - the martian tek parca 720p hd izle | hd film izle, film izle, 720p film izle&f=marsli - the martian tek parca 720p hd izle | hd film izle, film izle, 720p film izle

http://sub2.bubblesmedia.ru/sb/clk/s/1204/h/9515b3/o/145/.../0?a=1&f=minecraft-indir-ndash-full

http://sub2.bubblesmedia.ru/sb/clk/s/1556/h/b8dba2/o/145/.../0?a=1&f=Minecraft 1.7.2 Full indir – Tek Link

http://www.installads.net/torrent.php?t1=torrentoyun&is=Football Manager 2015

http://mgshare.com/dl.php?id=2924413&ref_id=mguser_366062

http://soft2u.ru/link.php?to=http://sub2.bubblesmedia.ru/sb/clk/s/3070/h/3fcd0f/o/145/.../0?a=1

http://torr.mediaget.com/torr.php?r=fulloyunpazari.com&s=Battlefield 3 Full indir Tek Link Torrent | Oyun indir Gezginler&f=Battlefield 3 Full indir Tek Link Torrent | Oyun indir Gezginler

http://sub2.bubblesmedia.ru/go/?link=G3NxMqBcBX4PwqXTJRDRGwW5dkTBXJx4iN2N0538skqjyAmjIIY myUlhddfh0j8XAwBJa0wLs/e8WhRWv5WzxMXGRatUvftQoh4BbkpDDGHQk7jWzF0nAk ZGPfn1ErBd8rY9/.../VueR81I M747dLg v&param=4v0gY8lz1g4=&rid=3405

http://www.installads.net/download.php?id=258&is=Euro Truck Simulator 2 Full Türkçe Indir

http://ld.mediaget.com/index2.php?l=ru&r=vessoft.com&bbls_client_id=144368279

http://www.installadz1.com/indir.php?&t1=fullprogramlarust&is=Final Draft Full 9.0.8 Build 190 Senaryo Yazin

http://sub2.bubblesmedia.ru/sb/clk/s/1204/h/9515b3/o/145/.../0?a=1&f=fifa-15

http://sub2.bubblesmedia.ru/go/?link=IRazq6arrP xmP11WIXWtfsjT5jeHsrvZpFzK4tpJ53mRa8569dnP2SQ vfuLKxwda1BJPZ9jWxCLX8V9c X8DavO04IErVD7zggf P0AysV61F0JyMn5k3mj1ApAYWtMRvODX1Q/p4vcQ==&param=RccQLdfHZeo=&rid=1962&s=?????? ?????? ????? (2013) ??? ????? /.../ ?????? ????? ???? ??? ????? ?????? - ? - ??????? ?? ?????? 2015 ? HD ?????? - ???? ?????? ?? ????? ??????&cs=UTF-8&u=&fu=

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?bbl_clk_id=207690-1445512229&bbl=1&f=%u0421%u043A%u0430%u0447%u0430%u0442%u044C %u043C%u0443%u043B%u044C%u0442%u0444%u0438%u043B%u044C%u043C %u0421%u0435%u043C%u0435%u0439%u043A%u0430 %u043C%u043E%u043D%u0441%u0442%u0440%u043E%u0432 / The Boxtrolls (2014) - %u041E%u0442%u043A%u0440%u044B%u0442%u044B%u0439 %u0442%u043E%u0440%u0440%u0435%u043D%u0442 %u0442%u0440%u0435%u043A%u0435%u0440 %u0421%u043A%u0430%u0447%u0430%u0442%u044C %u0442%u043E%u0440%u0435%u043D%u0442 %u0441 Fast torrent %u0421%u043A%u0430%u0447%u0430%u0442%u044C %u0444%u0438%u043B%u044C%u043C%u044B %u0431%u0435%u0441%u043F%u043B%u0430%u0442%u043D%u043E %u0431%u0435%u0437 %u0440%u0435%u0433%u0438%u0441%u0442%u0440%u0430%u0446%u0438%u04

http://torr.mediaget.com/torr.php?r=filmzede.com&s=Arabalar 3 izle &f=Arabalar 3 izle

http://ld.mediaget.com/index2.php?l=ru&r=takelink.ru&f=u041fu0440u0435u0441u0442u0443u043fu043bu0435u043du0438u0435-u0438-u043du0430u043au0430u0437u0430u043du0438u0435-2007-dvdrip-u0441u043au0430u0447u0430u0442u044c-u0431u0435u0441u043fu043bu0430u0442u043du043e&s=???????????? ? ????????? (2007) DVDRip ??????? ?????????.&bbls_client_id=223308071&bbl=1&bbl_clk_id=428497-1446297090&use_f=1

http://sub2.bubblesmedia.ru/go/.../ASQGdyrKWNLddfPelaGdPhPG&param=JcOl8YGOu3M=&rid=3277

http://ld.mediaget.com/index2.php?l=ru&r=oneprog.ru&bbls_client_id=224715506&bbl=1&bbl_clk_id=67921-1446611858

http://sub2.bubblesmedia.ru/go/?link=VDKSg1XJ z2sFwLIdPrKbzrYePDLPoNP5XZsxV5ZloxpM QujF/WG6qjST150U8KFEkcR5bq9aj/UxiStoVie7MLFfy/89DHlQi6I4 o gsJAlODZF91h6RUMThdyDYu3ZHifh1CwsDdb9Q=&param=zVY85VRCa0w=&rid=3307&r=goldenshara.org&u=http://.../download.php?id=192520

http://www.installads.net/download.php?id=258&is=Pes 2015 Full Türkçe Indir

http://sub2.admitlead.ru/sb/clk/s/901/h/fceed1/o/471/.../0?my_affiliate_id=reklamtrk.com&f=BabamÇatliGökçenÇatliE&data_send_to_me=7C4B35976A71C2789AAA003B1D41C86100E31333_www.yazardefteri.net_manuel

http://ld.mediaget.com/index2.php?l=tr&r=fullucretsizindir.com&f=microsoft-toolkit-full-ndir-versiyon-253-office-ve-windows-etkinletirme-program&s=Microsoft Toolkit Full Indir versiyon 2.5.3 Office ve Windows Etkinlestirme Programi&bbls_client_id=225040336

http://goo.gl/6I9h81

http://ld.mediaget.com/index2.php?l=tr&fu=http://www.rockstargames.com/gta/.../gta8.zip&r=indiroyunu.com&f=gta-4-indir&bbls_client_id=223265547

http://sub2.bubblesmedia.ru/sb/clk/s/1771/h/42eda4/o/145/.../13?a=1&f=GTA Vice City

http://www.installadz1.com/indir.php?&t1=fullprogramlarust&is=Clash of Clans Apk Indir 2015 Türkçe 7.200.19 Mod Hile

http://free-torrent.org/bx15VJBgNM9y.php

http://sub2.bubblesmedia.ru/go/?link=SS1dYcXYvsRssRmDB 9d roFqnj5sWXpQMETIMIwYClcGURdkAMe2jhD16ZQ/bc9jF5U3ava 2ydrV6cJJhYs9ft145ogK8kWBzwAsvPmkKtb/KQrSlkRDwYSrSmEt/rcaOTYCPv08fAAr4=&param=pvBh2oBVuS0=&rid=3288&r=torrents-game.net&f=mount-and-blade-warband-warrior-edition&u=http://torrents-game.net/torrents/.../Warband-Warrior-Edition.torrent

http://mediaget.com/torrent.php?r=ucretsizpdfindir.com&s=Anafen Yayinlari 8. Sinif Matematik Soru Bankasi Pdf Indir - Ücretsiz Pdf Indir,Pdf Kitaplar,E-Pub ve Pdf Indir,E-Book Download,Free Books&f=Anafen Yayinlari 8. Sinif Matematik Soru Bankasi Pdf Indir - Ücretsiz Pdf Indir,Pdf Kitaplar,E-Pub ve Pdf Indir,E-Book Download,Free Books

Latest 30 of 291 download URLs

Remove mediaget_id1318040ids2s.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.