home

minecraft-164-indir-minecraft-full-indir_id1471328ids1s.exe

mediaget-installer Module

Banner LLC

The application minecraft-164-indir-minecraft-full-indir_id1471328ids1s.exe, “MediaGet installer” by Banner has been detected as a potentially unwanted program by 13 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from sub2.bubblesmedia.ru and multiple other hosts. While running, it connects to the Internet address sw90.ua-hosting.company on port 80 using the HTTP protocol.
Publisher:
MediaGet LLC  (signed by Banner LLC)

Product:
mediaget-installer Module

Description:
MediaGet installer

Version:
1.0

MD5:
c644c8e0b32fe71f0b1b3b6671a9a1ef

SHA-1:
e310569f6a157be323e06a9814f19ea7b7e530a4

SHA-256:
4d327810bc6c339948185c62e017894eb5a4014edb8fc47fa78efde9a8c042df

Scanner detections:
13 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 2:35:00 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/MediaGet.Gen5
7.11.159.114

AVG
Banne
2015.0.3419

Dr.Web
Program.MediaGet.21
9.0.1.0190

ESET NOD32
Win32/MediaGet (variant)
8.10068

G Data
Win32.Adware.MediaGet
14.7.24

IKARUS anti.virus
PUP.MediaGet
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.180.12657

Kaspersky
not-a-virus:Downloader.Win32.MediaGet
14.0.0.3589

Malwarebytes
PUP.Adware.MediaGet
v2014.07.09.06

McAfee
Artemis!C644C8E0B32F
5600.7075

Reason Heuristics
PUP.Installer.Banner.x
14.7.9.5

Sophos
MediaGet
4.98

Trend Micro House Call
Suspicious_GEN.F47V0707
7.2.190

File size:
656 KB (671,776 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2011 MediaGet LLC

Original file name:
mediaget-installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\minecraft-164-indir-minecraft-full-indir_id1471328ids1s.exe

Digital Signature
Signed by:
Banner LLC

Authority:
COMODO CA Limited

Valid from:
3/26/2014 2:00:00 AM

Valid to:
3/26/2017 1:59:59 AM

Subject:
CN=Banner LLC, O=Banner LLC, STREET="lit.A, pom. 7N, 21 Serebristy bul.", L=St.Petersburg, S=Russia, PostalCode=197341, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75D61BEBB47652BF2C5DF2DDF44F0E3A

File PE Metadata
Compilation timestamp:
7/7/2014 3:37:45 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:GoCgU5IzqxjPz4JEhA49SYYkqtvWRSKxwjeO/xOJmsg6NSTEgW:bFcsJEhAQSYENWRSKxw80cSLW

Entry address:
0x1632C0

Entry point:
60, BE, 00, D0, 50, 00, 8D, BE, 00, 40, EF, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
348 KB (356,352 bytes)

The file minecraft-164-indir-minecraft-full-indir_id1471328ids1s.exe has been seen being distributed by the following 50 URLs.

http://sub2.bubblesmedia.ru/go/?link=WoXWITDYzyg//voSSRKHJ8Tyhop QO6DdDy5Sgd nGoWplYCa16COAN2drSOpgm52f5Y7FCqvntPcxV3djljh2rO/.../ZeSBR0mWTAv1TDwhTpWFKeK9w==&param=qUQ3 MqXXYI=&rid=991&s=???? ? ????? 2 (2014) ???????? ?????? , ???????? ?????? ???? ? ????? 2 ? ??????? ????????&r=nowfilms.ru&f=???? ? ????? 2 (2014) ???????? ?????? , ???????? ?????? ???? ? ????? 2 ? ??????? ????????&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=kCtRKIDAydm63isNH8AhTd1B89AY5PmraXIcIaZONKDnsekFK9N4usOVZw03f/.../B2PbqBpU9nYsK bS9Vhg2lRNVKDX345ryGnDB1BtD9LwzI4qZxwvKd4NsYEW&param=LadVcO0fEcM=&rid=2194&s=Arsenal Besiktas Ma?i Canli izle 27 Agustos 2014 | Lig tv canli izle, Smart Spor izle, ma?i canli izle&r=e-smartlig.blogspot.com&f=Arsenal Besiktas Ma?i Canli izle 27 Agustos 2014 | Lig tv canli izle, Smart Spor izle, ma?i canli izle&cs=UTF-8&u=&fu=

http://torr.mediaget.com/torr.php?r=ea6.net&s=brigada&f=brigada

http://ld.mediaget.com/index2.php?l=ru&u=http://torrentsfiles.ru/_ld/.../8015_15006_Crack.Onl.torrent&r=beemoporgru&f=torrentsfilesru-need-for-speed-most-wanted-2-2012pcrusskij-nodvd&bbls_client_id=75972952

http://sub2.bubblesmedia.ru/go/?link=2jYz9kF0/g/hYLwZEM3r5k7xHvDHuRmrZtJuRjyKoBjFR2GJ5mleOpTOdX6QWMOxcfk6L/.../4 uT0jsLQp7WncgqTOI5L3tLHjGHYL1H86EPqYkLRDjfNmCMFpdlxuyyZLukSYpHipQrKLNIkQ&param=ZSn4lpXd7YU=&rid=1144&s=&r=p-games.ru&f=&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/?link=eIPEW29EOgx i nZPd7nSA/085gW9q1G0Ov/.../ccUzDQfhvsKAXyx62sVH1YZzdhkaPqVoO6ITzbE3H82mz6wJePR9QIGETbSBrg==&param=645QGgnrgEw=&rid=991&s=??????? ???????: ????????? 2014 ???????? ?????? , ????? ??????? ???????: ????????? ???????? ? ??????? ????????&r=nowfilms.ru&f=??????? ???????: ????????? 2014 ???????? ?????? , ????? ??????? ???????: ????????? ???????? ? ??????? ????????&cs=windows-1251&u=

http://mediaget.com/torrent.php?r=filmodrom.net&u=link_FILE&f=NAME_FILE

http://ld.mediaget.com/index3.php?reinstall=true&r=

http://sub2.bubblesmedia.ru/sb/clk/s/1366/o/145/p/1294/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=hrPlIDDEBiKIBvEHRzZSxmvHfiZVCfEVAgBEQWqURu2gCBjTw90DPt2CMsKROdtKqsghWnnoNUg0y/j0KYGPU2CMEa49LIoE6C0lXJrGqJc8wUklsLB04sX5UK7H0/.../AfrOzyivXDU6SdepPTifpAQzhU7W11WeZHjvVFvnxA==&param=qnfakfNT32c=&rid=991&s=?????? ?????? ?? ?????? 8,9 ????? ???????? ?????? - 31 ???? 2014&r=nowfilms.ru&f=?????? ?????? ?? ?????? 8,9 ????? ???????? ?????? - 31 ???? 2014&cs=windows-1251&u=

http://torr.mediaget.com/torr.php?r=fullhdizlesek.com&s=kizlik bozma online filmi izle, kizlik bozma full izle, türkçe dublaj izle, hd izle, direk izle, sinema seyret&f=kizlik bozma online filmi izle, kizlik bozma full izle, türkçe dublaj izle, hd izle, direk izle, sinema seyret

http://torr.mediaget.com/torr.php?r=hdfilmsarayizle.com&s=Evrim Transcendence Filmi Full Hd Izle Tek Parça Türkçe Dublaj&f=Evrim Transcendence Filmi Full Hd Izle Tek Parça Türkçe Dublaj

http://torr.mediaget.com/torr.php?r=hdfilmsarayizle.com&s=Yedinci Ogul - Seventh Son Full Hd Türkçe Dublaj Tek Parça Izle&f=Yedinci Ogul - Seventh Son Full Hd Türkçe Dublaj Tek Parça Izle

http://torr.mediaget.com/torr.php?r=hdfilmsarayizle.com&s=Maymunlar Cehennemi Safak Vakti Full Hd Izle 2014 - Part 2&f=Maymunlar Cehennemi Safak Vakti Full Hd Izle 2014 - Part 2

http://torr.mediaget.com/torr.php?r=hdfilmsarayizle.com&s=Transformers 4 Kayip Çag Filmi Full Hd Tek Parça 720p Izle - Part 2&f=Transformers 4 Kayip Çag Filmi Full Hd Tek Parça 720p Izle - Part 2

http://sub2.bubblesmedia.ru/go/?link=AI3UZzB45tt/MU vJX4e3/zp9K14Luks2BsBn5dD09Rxl ckyJsE9frHHZkmBuW88ZI/FNtNOBefUm KOqMwwL8tF mpdVVGB1qSP66WW 3y aPeE5XDZAELy2uYjdZyOu0CBO0OktWmA9Zd5F/u1QEbiwEmmttM/.../LXQiEHQKBAyFGl6lvwHo6Ug==&param=Ai6dloJTEJk=&rid=991&s=??????? ???????: ????????? 2014 ???????? ?????? , ????? ??????? ???????: ????????? ???????? ? ??????? ????????&r=nowfilms.ru&f=??????? ???????: ????????? 2014 ???????? ?????? , ????? ??????? ???????: ????????? ???????? ? ??????? ????????&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/go/.../n7mpHO0DU0swg87cNl0e1UDli eb39IAwelaVzTfJSuGpqKmkvQFC6aYTJZelUgC7M5 uEpi8ik5gQttND2AL9UATwQA1UcRWzWUF4oVd0CeM7aYRIXrlcW DVf288lX8IBPgUMbN1EhVlwOhIUgxT0sRTkcyIevt ngZ mEBd7qvjJb08WE4w==&param=JsE0JdBYLw4=&rid=921&s=???? ??????? (2011) ???????? ??????, ??????? ????? ???????&r=eritern.com&f=???? ??????? (2011) ???????? ??????, ??????? ????? ???????&cs=UTF-8&u=&fu=

http://sub2.bubblesmedia.ru/sb/clk/s/1932/o/145/.../0?a=1

http://sub2.bubblesmedia.ru/go/?link=gCHaaob66/sq09has19Ca/B3D EfJqMvekfQ4DnLCQ8QMIbVCYwPQLsxzTqI53hyfXGQ/.../i204LXg==&param=mKu08kcB23s=&rid=384&s=VerLos Indestructibles 3 | The Expendables 3 Online Latino Completa Gratis&r=xn--elseordelanillo-1qb.com&f=VerLos Indestructibles 3 | The Expendables 3 Online Latino Completa Gratis&cs=windows-1252&u=

http://torr.mediaget.com/torr.php?r=minecraftindir.us&s=Minecraft 1.7.8 indir - Minecraft Full indir&f=Minecraft 1.7.8 indir - Minecraft Full indir

http://mediaget.com/torrent.php?r=vessoft.com

http://ld.mediaget.com/index2.php?l=ru&r=webtorrent.org&f=the-sims-3-island-paradise-2013-pc-&s=the-sims-3-island-paradise-2013-pc-&bbls_client_id=82841816&bbl=1

http://sub2.bubblesmedia.ru/go/?link=fYzVqi0pBJhpM8fQPy6rKwfMOx oI0dtIXYtuIkYGi0B2cqkCtKRs9c5Xi7EsHNFvxmls5daxP3UQDxPeDbMI/GYzIfEuAoDKne1jGd88HmiHw8z/O76Ia hoG30TNmqysPudyfwF7Us/.../Uf p QE8RPffKrNozbMa&param=ijXopFMszEM=&rid=1226&s=Need For Speed Rivals - Full - Oyun indir - Download - Y?kle - Full Oyun indir Download&r=fulloyun.com&f=Need For Speed Rivals - Full - Oyun indir - Download - Y?kle - Full Oyun indir Download&cs=windows-1254&u=

http://sub2.bubblesmedia.ru/go/?link=9w7GH2gzwr21PVfudEpKAhQdQDcKD15Yl8Zc/K7VMHF9lIFI0bt4G00KKnlgqSt7EO/3NqzUiXce4eNhL0saVwr2oQ18t U9Bks gUM4PAtzLPUUXCmePIC3uTHHQXn05w9Z9iya8i 49q379FGXa Hc/.../bXJSJ59&param=aU60QUh9fJE=&rid=1955&s=True Blood 1. Sezon 1. B?l?m Izle , T?rk?e Altyazili Yabanci Dizi izle&r=dizisub.com&f=True Blood 1. Sezon 1. B?l?m Izle , T?rk?e Altyazili Yabanci Dizi izle&cs=UTF-8&u=&fu=

http://www.softsalad.ru/.../79567865c6711707812e90b2328d5f33

http://ld.mediaget.com/index2.php?l=en&r=filmseyretfull.net&f=salon-kitty-film-izle-full-izle-filmi-full-izle-direk-film-izle-dizi-izle-t&s=Salon Kitty | Film izle, Full izle, Filmi Full izle, Direk Film izle, Dizi izle, T&bbls_client_id=62578621&bbl=1

http://sub2.bubblesmedia.ru/go/?link=ix/iWv6Beu ZY7pmvzXU9aOLGR2ZooERej90ilgzVSIr9A3iUiW/.../F7DxwqaP8QIVSAkzWtJeRTtB9 cqnxOkBbwNCQ2FlH3uchZR5vDPdJcGI5thc68uag==&param=jQG1vuI7Ry8=&rid=991&s="?????? 2" ????? ???????? ??????.&r=nowfilms.ru&f="?????? 2" ????? ???????? ??????.&cs=windows-1251&u=

http://sub2.bubblesmedia.ru/sb/clk/s/1738/o/145/p/961/.../0?a=1

http://mediaget.com/torrent.php?r=ayakino.net&f=???????_????

http://sub2.bubblesmedia.ru/go/?link=bIMh8KiB2RocAomDajoDkxXWhukXSxX9SA2oaouGtwsKbyMO2wbuWcLpqEgFrfHQGFOVM/nL46ZiWm3bk/.../LiQ0sBRJMgJAVYmxpJSaaeASyxXe6Nbp3ScAgXQkmH20vdUiiwfvJw8riO72iUfJJoTthmPPQvqAvEmSOfXoCyHk9U=&param=QpgNZGTDZ3A=&rid=447&s=???????&r=miniigri.net&f=???????&cs=windows-1251&u=

Latest 30 of 155 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to sw90.ua-hosting.company  (91.215.156.143:80)

TCP (HTTP):
Connects to 163-172-220-89.rev.poneytelecom.eu  (163.172.220.89:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.