izle.exe

TOLGA KAPLAN

The executable izle.exe has been detected as malware by 19 anti-virus scanners.
Publisher:
TOLGA KAPLAN  (signed and verified)

Version:
1.0.0

MD5:
c2b770354405a0d7e8eecb1bebfa0937

SHA-1:
d87abe92430075245b9cae17a97ee3b276096b06

SHA-256:
b839f047ce9f7d4395d8348c357f5bb329dbf5ccb773dcd6314de21e31df1c50

Scanner detections:
19 / 68

Status:
Malware

Analysis date:
11/27/2024 12:07:07 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Heur.Jatif.32
5615282

AhnLab V3 Security
Malware/Win32.Generic
2015.06.02

avast!
MSIL:GenMalicious-DXM [Trj]
150531-1

AVG
Generic
2016.0.3091

Bitdefender
Gen:Heur.Jatif.32
1.0.20.760

Emsisoft Anti-Malware
Gen:Heur.Jatif.32
10.0.0.5366

ESET NOD32
MSIL/Bamgadin.E trojan
7.0.302.0

F-Prot
W32/A-3363ca5c
v6.4.7.1.166

F-Secure
Gen:Heur.Jatif.32
5.14.151

G Data
Gen:Heur.Jatif.32
15.6.25

Kaspersky
Trojan.MSIL.Agent
15.0.0.543

Malwarebytes
Trojan.Downloader
v2015.06.01.07

McAfee
Trojan.Artemis!C2B770354405
17.6.569.0

Microsoft Security Essentials
Threat.Undefined
1.199.1385.0

MicroWorld eScan
Gen:Heur.Jatif.32
16.0.0.456

Norman
Gen:Heur.Jatif.32
03.12.2014 13:20:04

Panda Antivirus
Trj/CI.A
15.06.01.07

Sophos
Mal/Generic-S
4.98

VIPRE Antivirus
Threat.4777568
40552

File size:
111.2 KB (113,904 bytes)

Product version:
1.0.0

Original file name:
hdplayer.exe

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\izle.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
6/27/2014 3:00:00 AM

Valid to:
6/28/2015 2:59:59 AM

Subject:
CN=TOLGA KAPLAN, O=TOLGA KAPLAN, STREET=mecidiye mah. dereboyu cad. lozan sok., STREET=akgun apart. no:15/3, L=istanbul, S=besiktas, PostalCode=34347, C=TR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0166B65038D61E5435B48204CAE4795A

File PE Metadata
Compilation timestamp:
6/30/2014 9:40:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:Lcyp2d6zFNSVDlx5bg1ZRz+C0lQg4P+741w5EBZRPbcIxYKLtDPSWdzYmXlj+FqL:92YXSd0RC741w5cDbgKJuDmXiq+xXmpn

Entry address:
0x1B3CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 78, A4, 6A, D7, 56, B7, C7, E8, DB, 70, 20, 24, EE, CE, BD, C1, AF, 0F, 7C, F5, 2A, C6, 87, 47, 13, 46, 30, A8, 01, 95, 46, FD, D8, 98, 80, 69, AF, F7, 44, 8B, B1, 5B, FF, FF, BE, D7, 5C, 89, 22, 11, 90, 6B, 93, 71, 98, FD, 8E, 43, 79, A6, 21, 08, B4, 49, 62, 25, 1E, F6, 40, B3, 40, C0, 51, 5A, 5E, 26, AA, C7...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
101 KB (103,424 bytes)

Remove izle.exe - Powered by Reason Core Security