» Couatl.exe
Overview
Analysis
File Details

Couatl.exe

Couatl Scripting Engine for FSX

VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C

File name:

Couatl.exe

Publisher:

Gamecentric (signed by VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C)

Product:

Couatl™ Scripting Engine for FSX

Version:

2.0.0.2081

MD5:

af9b7eee34e48b85162f345ac60dae16

SHA-1:

0671170d52b7b68c744fa02563498a6a56f07894

SHA-256:

8942ff84f4985c03bb2427410e3c70c435c3132c003e4b68b27a7764b7e7c0a0

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

12/26/2024 5:35:02 AM UTC (today)

Scan engine

Detection

Engine version

VIPRE Antivirus

Trojan.Win32.Packer.EnigmaProtector1.1X-1.3X

8857

File size:

1 MB (1,068,944 bytes)

Product version:

2.0

Original file name:

Couatl.exe

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\offline\is-q29f7.tmp

Digital Signature

Signed by:

VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C

Authority:

The USERTRUST Network

Valid from:

11/2/2010 9:00:00 PM

Valid to:

11/2/2012 8:59:59 PM

Subject:

CN=VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C, O=VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C, STREET=via Dostoevskij 2, L=San Giuliano Milanese, S=MI, PostalCode=20098, C=IT

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

01754D2519882C719A038EB49D21EDAA

File PE Metadata

Compilation timestamp:

2/18/2011 1:34:12 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:DQYgaiE0kRVn/GpUC/kbiEXTfWs7DKC79mBPgvtvSp2l:EBRE0c5DKAusggh3

Entry address:

0xEB32

Entry point:

55, 8B, EC, 83, C4, F0, B8, 00, 10, 40, 00, E8, 01, 00, 00, 00, 9A, 83, C4, 10, 8B, E5, 5D, E9, 56, 76, 49, 00, A0, E9, 1C, 66, 03, 99, 18, D3, 5E, 13, 3C, 44, 16, 24, E1, D3, 9B, A7, DC, 96, 75, FE, B0, BC, 0C, F1, E1, 88, 9A, FD, CA, 8D, 7C, 76, 13, 85, 6F, 32, 49, D7, DF, 46, 9C, 52, 38, 20, 98, AA, D0, 95, AF, 71, A1, FC, 46, F8, 03, E3, 1B, ED, 7E, 4A, 8E, 4F, EF, D4, E8, AA, 6D, B2, 91, 89, 67, 9E, BA, 80, 06, B0, 76, 72, 40, 63, D2, AC, 66, B3, 3F, 3A, 87, 61, 18, FD, FA, CF, 7D, 1E, E2, 2A, CA, EE... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

1 MB (1,085,440 bytes)

Scan Couatl.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.