home

mediaget_id821382ids1s.exe

mediaget-installer Module

Banner LLC

The application mediaget_id821382ids1s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 13 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts.
Publisher:
MediaGet LLC  (signed by Banner LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
2d26f8f463d1d0f81331c98af078adcb

SHA-1:
4afcdac3480a08b0ae9c9f330e27efcce779ac5b

SHA-256:
cb763eb81a5fc96379d277cfc83f6a70274c93085b623f7bf0ce6035c18503b7

Scanner detections:
13 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 6:37:21 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Banne
2016.0.2921

Baidu Antivirus
Adware.Win32.MediaGet
4.0.3.151118

Bkav FE
W32.HfsAdware
1.3.0.7383

Comodo Security
Application.Win32.MediaGet.G
23614

Dr.Web
Program.MediaGet.133
9.0.1.0322

ESET NOD32
Win32/MediaGet.AE potentially unwanted (variant)
9.12587

G Data
Win32.Adware.MediaGet
15.11.25

K7 AntiVirus
Unwanted-Program
13.212.17897

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
14.0.0.1101

Malwarebytes
PUP.Optional.MediaGet
v2015.11.18.05

Qihoo 360 Security
Win32/Virus.Downloader.34d
1.0.0.1077

Reason Heuristics
PUP.MediaGet.Banner.Installer (M)
15.11.18.17

Sophos
MediaGet (PUA)
4.98

File size:
657.5 KB (673,312 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mediaget_id821382ids1s.exe

Digital Signature
Signed by:
Banner LLC

Authority:
COMODO CA Limited

Valid from:
3/26/2014 4:00:00 AM

Valid to:
3/26/2017 3:59:59 AM

Subject:
CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata
Compilation timestamp:
11/17/2015 1:32:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:RvXNi7JrPOr+X54Qi7o1Qja8dOixbXJmea6j77FlvO/I:tXNi7JKS7GoqjVOixdm8xlvkI

Entry address:
0x15FCC0

Entry point:
60, BE, 00, B0, 51, 00, 8D, BE, 00, 60, EE, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
276 KB (282,624 bytes)

The file mediaget_id821382ids1s.exe has been seen being distributed by the following 50 URLs.

http://sub2.bubblesmedia.ru/sb/clk/s/1556/h/b8dba2/o/145/.../0?a=1&f=Left 4 Dead 2 Full Indir - Tek Link

http://sub2.bubblesmedia.ru/go/?link=JK/bDUPF8dJDskEGG7VMrAe/9Pll3yTuR18vjkB9/rp80yKFBe/FGL7ELCYSD5DIGJOGo9ArfE60m2J5bpftxWrSeFMW/fRISOsT/8HZ2jTjYhr8DSrPRtBFqafb9LnXNw1mF7Dz/PxH79o=&param=NrjbnRuYe3M=&rid=3357&r=vsetop.com&f=60 Seconds!&u=http://d.vsetop.com/download/.../60_Seconds_v1.103_Rus.rar

http://sub2.bubblesmedia.ru/sb/clk/s/3297/h/155973/o/145/p/1306/.../0?a=1

http://goo.gl/j3BejD

http://sub2.admitlead.ru/sb/clk/s/901/h/fceed1/o/471/.../0?my_affiliate_id=reklamtrk.com&f=1.SinifKimyaDersKitabiCevaplari&data_send_to_me=33DAA9FAE51631761CC8B1BD6E2683FBC49A262A_www.adasunucum.com_20112

http://ld.mediaget.com/index2.php?l=ru&r=al_relizua.com&comment=o471

http://sub2.bubblesmedia.ru/sb/clk/s/2015/h/c1e42e/o/145/.../0?a=1&f=Han Kanal Too Much TnT mod.rar

http://sub2.bubblesmedia.ru/go/?link=Z s7RDoRqiEiuuGUzRZ7qzWg8C/DIAx4qcZQsz4mNUMLunt8Oi3mVHmC6m53O8zvGyI4QLdOKuB3ZnGZ1uqaf3lkVHmgJI/MIsCLWGE5T2CTsKA73B6t5Q/.../nK0S9&param=5FCCvUgNMRA=&rid=731&s= 6164 - I Love Babies (USA)&r=decemuladores.com&f= 6164 - I Love Babies (USA)&cs=windows-1252&u=

http://sub2.bubblesmedia.ru/sb/clk/s/1082/h/c1e74d/o/145/p/1313/.../0?a=1

http://goo.gl/LeyykJ

http://ld.mediaget.com/index2.php?l=ru&r=real-game.net&bbls_client_id=228696385&bbl=1&bbl_clk_id=26858-1448233837

http://torr.mediaget.com/torr.php?r=fullucretsizindir.com&s=Microsoft Office 2010 Professional Plus 32x64 Bit Türkçe Full Indir Lisanslama Programlari Mevcut&f=Microsoft Office 2010 Professional Plus 32x64 Bit Türkçe Full Indir Lisanslama Programlari Mevcut

http://sub2.bubblesmedia.ru/sb/clk/s/706/h/9403d0/o/145/sub/0?a=1&f=World of Warcraft: The Burning Crusade[2.4.3] RUS ????????????&u=http://www.torrent-games.net/.../orld_of_he_Brusade.torrent

http://torr.mediaget.com/torr.php?r=ea6.net&s=house of saddam&f=house of saddam

http://sub2.admitlead.ru/sb/clk/s/877/h/0064ca/o/471/p/1507/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=CcHu49lPJ8flA9bDjEyq8D65MoAyoBXe2cxugRXYDsKfd0Q6/9qeFxmCv/Z5zsTCGIqmw7KuUbIL7VblgQ3vpjNL34oc2SNPjADrqgAjmRlgPMhg4BpUgwbD5hSZDVSWLlsMhc5fBYDrw0o=&param=XYjq4s0h4fA=&rid=3357&r=vsetop.com&f=Unturned&u=http://d.vsetop.com/download/.../Unturned_v3.12.3.0_Gold_Edition.rar

http://sub2.bubblesmedia.ru/sb/clk/s/1538/h/4587d6/o/145/sub/0?a=1&fu=http://.../print:page,1,6936-gori-ukrayinsk-karpati-ta-krimsk-gori.html

http://sub2.bubblesmedia.ru/sb/clk/s/2134/h/00c127/o/145/p/957/.../0?a=1

http://sub2.admitlead.ru/sb/clk/s/901/h/fceed1/o/471/.../0?my_affiliate_id=reklamtrk.com&f=TechnicLauncherCrackIndir(Hexit,Tekkit,Yogbox,BigDig...)15&data_send_to_me=69A4A743EC66AD8B839F0863CD78CA21855FCD01_www.indir13.com_20111

http://sub2.bubblesmedia.ru/go/?link=Yvr2uHY47yiY/STtqroafsPy51Bmqq7U/eqCXNEl9HLFHwzT ulSCTeBN73Z/S9ne9160QElEEBSj3/In5f/QbqKONOOxd0yL7vbvIgA0wUMayAtt9/yl4gQ8bYa/LdziZBJvDOmqodx5ko=&param=Q9zOkjqwTvA=&rid=3243&r=rutor.net&u=http://rutor.net/.../download.php?id=47697&f=Grand_Theft_Auto_San_Andreas.torrent

http://indir.gezginler.net/i/33676/.../

http://sub2.bubblesmedia.ru/sb/clk/s/1556/h/b8dba2/o/145/.../0?a=1&f=Gta 5 Pc Full indir – Tek Link

http://sub2.bubblesmedia.ru/go/?link=FKeasLD GxvOGMpQQe/v3nnwNo2TM5mLxNjMau15L1gijzoRf3EfCFEZ3gYghoh9MGHk/5o2Ydb/1kl/4huunqB8ARjuBrM2oRQrZwkyRNymI3h/u1NDDcbKVHLmNRfyy93e9GBc5nMZGA==&param=oBcwr3YvU1M=&rid=1961&s=??????? ?? ?????? - ????? ??????? (2015) ????????? ?????? ?? 1 1 ???????? ?????? ??? ????? ? ??????? ?????? /.../ ???????? ?????? ???? ??????&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/sb/clk/s/706/h/9403d0/o/145/sub/0?a=1&f=?????? ?????? ????? / Scouts Guide to the Zombie Apocalypse (2015) CAMRip&u=http://torrent-games.net/.../0-0-0-26015-20

http://www.indirgen.com/indirgit.php?id=6650&link=1

http://mg.bubblesmedia.ru/index.php?redirect_url=http://.../index2.php?comment=o471|p|i10890|l139|e0|s805|k20151120167194&r=al_advmaker240x400.net

http://torr.mediaget.com/torr.php?r=oyun-pazari.net&s=Euro Truck Simulator 2 Full indir Torrent - Oyun indir, Torrent Oyun indir, Full Oyun, Gezginler, Torrentle indir&f=Euro Truck Simulator 2 Full indir Torrent - Oyun indir, Torrent Oyun indir, Full Oyun, Gezginler, Torrentle indir

http://sub2.bubblesmedia.ru/sb/clk/s/2929/h/b0fdc6/o/145/p/1008/.../0?a=1

http://torr.mediaget.com/torr.php?r=ea6.net&s=kapat gozlerimi turkce dublaj izle&f=kapat gozlerimi turkce dublaj izle

http://ld.mediaget.com/index2.php?l=&r=katilimsiz.gen.trk&f=adu0131nu0131za-zel--all-u0130n-one--gncel-paylau015fu0131m-platformunuz-&bbls_client_id=229530008&bbl=1&bbl_clk_id=293015-1447859245&use_f=1

Latest 30 of 136 download URLs

Remove mediaget_id821382ids1s.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.