home

mediaget_id3249519ids2s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id3249519ids2s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Banner LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
b38a978d45d8074096fd1ced9a720f57

SHA-1:
ce7d3a4df719380df5a67f206cda7c3e835c751f

SHA-256:
deaed74cc16ebb04f1e4db8494281a026296cf048aa8ce7773063c0ad218d858

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
11/28/2024 7:44:15 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Banne
2016.0.2956

Baidu Antivirus
Adware.Win32.MediaGet
4.0.3.151014

Bkav FE
W32.HfsAdware
1.3.0.7237

Comodo Security
Application.Win32.MediaGet.G
23413

Dr.Web
Program.MediaGet.133
9.0.1.0287

ESET NOD32
Win32/MediaGet.AF potentially unwanted (variant)
9.12405

G Data
Win32.Adware.MediaGet
15.10.25

K7 AntiVirus
Unwanted-Program
13.210.17530

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.1277

Malwarebytes
PUP.Adware.MediaGet
v2015.10.14.12

Reason Heuristics
PUP.MediaGet.Banner.Installer (M)
15.10.14.12

Sophos
MediaGet (PUA)
4.98

File size:
657 KB (672,800 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mediaget_id3249519ids2s.exe

Digital Signature
Signed by:
Banner LLC

Authority:
COMODO CA Limited

Valid from:
3/26/2014 3:00:00 AM

Valid to:
3/26/2017 3:59:59 AM

Subject:
CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata
Compilation timestamp:
10/14/2015 2:07:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:o4oxybeyqOoFup1Qja8dOixbXJmea6j77FlvO/b:JMGepFupqjVOixdm8xlvkb

Entry address:
0x15FB20

Entry point:
60, BE, 00, B0, 51, 00, 8D, BE, 00, 60, EE, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
276 KB (282,624 bytes)

The file mediaget_id3249519ids2s.exe has been seen being distributed by the following 27 URLs.

http://sub2.bubblesmedia.ru/sb/clk/s/2132/h/d6d8ea/o/145/sub/0?a=1&fu=http://allprogs.com/uploads/.../MM26_RU_2314.rar

http://torr.mediaget.com/torr.php?r=ea6.net&s=porno turk dilinde&f=porno turk dilinde

http://sub2.bubblesmedia.ru/go/?link=8RLc7gDLZruinArWiyYJ22/SPMG2odvnFGt1YoG6/.../xMJEnvhZLmtgmETpJ3xQRr2WLzkeEfO1sZTDD6s1BvOaue5hyMwRS8bwnkhmQVsyJBzLlJhHdYgD8mPcBBAyWm3zZdbJZ9A4&param=LHUtGLUqXyI=&rid=1482&f=Rise Of Nations I - Full - Oyun indir - Download - Y?kle - Full Oyun

http://sub2.bubblesmedia.ru/go/.../U5 UDwAd3OVZL2ExKuzobPWlcy1KtVP1XBKoDvnZrfkOYXMC4VU3R0Rka3h8XZ9Obb5nl7mrlC z5v&param=EAeTyENJ3Ak=&rid=3357

http://mediaget.com/torrent.php?r=pc-torrents.com&uhttp://pc-torrents.com/.../download.php?id=236

http://mediaget.com/torrent.php?r=pc-torrent.ru&u=http://pc-torrent.net/.../download.php?id=38

http://ld.mediaget.com/index2.php?l=tr&r=toolbartr.com23&f=gta-san-andreas&bbls_client_id=185829187&bbl=1&bbl_clk_id=305728-1444828841&use_f=1

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?bbl_clk_id=295666-1444827923&bbl=1&f=Скачать сериал Клан Ювелиров сезон 1,2 (2015) - Открытый торрент трекер Скачать торент с Fast torrent Скачать фильмы бесплатно без регистрации&s=Ск%u04

http://sub2.admitlead.ru/sb/clk/s/197/h/058db8/o/471/.../0?a=1&u=

http://sub2.bubblesmedia.ru/go/?link=PzlkZC2up0dXEnBYfB7xWMamBgE8oR7xren23gqeW6h4QS8w/6th jPdG5OKdTMzzvFnGZQuvkQ6PjkJ/N3nvBjRDtWA CYHnFiP77JrSZV8ItN r9aEPKAIEmkR4DcfTlynkDeyBh5PnQ==&param=F2sqT17O5uE=&rid=1111&s=????????? ?????? ?????????? ??????? (2008) ??? ????? ?????? ????????/.../ ????????? ?????? 2008 ???????? ?????? ?????? ????????? ? ??? ???????????&r=serialx.org&f=????????? ?????? ?????????? ??????? (2008) ??? ????? ?????? ????????/.../ ????????? ?????? 2008 ???????? ?????? ?????? ????????? ? ??? ???????????&cs=UTF-8&u=

http://www.turbobitcdn2.com/down.php?is=Prison.Break.2.Sezon&t1=torrentdizindir2&t2=ozel

http://sub2.bubblesmedia.ru/sb/clk/s/1246/o/145/p/1249/.../zsr?a=1

http://mg.bubblesmedia.ru/index.php?redirect_url=http://ld.mediaget.com/.../ Love (2015) - Открытый торрент трекер Скачать торент с Fast torrent Скачать фильмы бесплатно без регистрации&s=Скачать фильм Лю%

http://sub2.bubblesmedia.ru/sb/clk/s/2451/o/145/.../0?a=1

http://sub2.bubblesmedia.ru/sb/clk/s/1783/h/75bf17/o/145/p/960/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=INE5A3KQEQ/.../Kx1Etpk9O7lZBvtAPB5IqhvHVj7U8muFtRoxSlkDFE4969AVObS8q3HBEHpaV uUMNVhkBBlTH4EaqbSx7 U10PVdlg0wfm0rcENTJz2QDOSILpGSE wIALQa8=&param=zgGUm8QRkOc=&rid=3169&r=full-torrent.org

http://sub2.bubblesmedia.ru/sb/clk/s/2698/h/150eb7/o/145/p/1263/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=jyU3mDbrMpH4lPpKoGId1wQC9tmcBVqy/.../Y4uNzJ2knxjhCsqfZ0zxGYu2eG2p xE21JMUjVpxaMOhf8JS5ddknStTNQZqFX89TNHfPewww3wZT0uhHIidgU7jwea0qhFSQw==&param=6w9oSBsGc8A=&rid=1740&s=?.?. ?????, ?.?. ????????, ?.?. ?????????? — ???????? ???????????? ???????? ????? ? ????????? ??????? ??????? ?????????&r=takelink.ru&f=?.?. ?????, ?.?. ????????, ?.?. ?????????? — ???????? ???????????? ???????? ????? ? ????????? ??????? ??????? ?????????&cs=windows-1251&u=&fu=

http://sub2.admitlead.ru/sb/clk/s/281/o/471/p/1501/.../0?a=1

http://goo.gl/LeyykJ

http://sub2.bubblesmedia.ru/.../?link=EXurdcpBQz9Svz52r6WslYBYSxKLVZkkQ6TUDoNGEqYBy3DpKHRYfBbYJ2UJK61CAnQ12l4JFxjvWQdH1JPVRmZt8IfIyFjJWeTF3hv9eDQ2l0kmsmglJoMr0ubPqK9VMbavnPnh bStQg==&param=dZtyVZ5TEwo=&rid=2779&s=????? "???????" - ???? ??? - ?????? ?????? - ??????? fb2 - ??????, ?????? - ??????&r=litmir.me&f=????? "???????" - ???? ??? - ?????? ?????? - ??????? fb2 - ??????, ?????? - ??????&cs=UTF-8&u=&fu=

http://ld.mediaget.com/index2.php?bbl_clk_id=124317-1444984985&bbl=1&r=torrentk.ru&bbls_client_id=217362604

http://sub2.bubblesmedia.ru/go/?link=NAb2/AvDkxWz4B4y/sgEhQwZnQSbdhCOYK N6Hz5ByqcnRGxpwOZN0SjtNGa027Q2HgS29DKx1htPw1etYCyPBSENxfsXXClFOCOtXGIeDC5lyXmb1E4Wgm4BkhivdxmjntKKXJcJQWdBKjsh/up9Lnd2yFBu5WT&param=/.../f9xBhhaA=&rid=3206

http://sub2.bubblesmedia.ru/sb/clk/s/3164/h/8231c4/o/145/.../0?a=1&f={Far Cry 4}

http://sub2.bubblesmedia.ru/sb/clk/s/2291/h/320e7a/o/145/.../0?a=1

http://www.installads.net/torrent.php?t1=torrentoyun&is=Football Manager 2015

http://sub2.bubblesmedia.ru/go/?link=Pgy79hPjQ1J5aRWW6uHvsWoUhMmhhHt22B8S//k8U1x K5vu16nVvEmBxZeqt9f27sHFQtcouWipgQ5ZCd88qA5Ao7sNmx4zE4Ya2C s117VfloBuN0r1HBICFexpT8NUv9uUmb zOlNThv7jlxk8/KLHv/Mi/GK&param=/nXYze0oi E=&rid=2350&f=??????? Horizon [Xbox 360] v2.7.9.0 ?? Daring Development Inc / ????????? ??? GTA 5 /.../PS3)

Remove mediaget_id3249519ids2s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.