home

peggle nights trainer.exe

The application peggle nights trainer.exe has been detected as a potentially unwanted program by 19 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from download1150.mediafire.com and multiple other hosts.
Version:
1.8.0.0

MD5:
f21a2e80c60a98f2e147986c4f546e00

SHA-1:
8389ea51384ab958097b4b373be4ef0fc4bf4586

SHA-256:
ecbe8366dc24bb0b2305bd46833fec26af84edc245ec41cd803ef6cabc166bfa

Scanner detections:
19 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 4:00:17 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
HackTool.CheatEngine
7.1.1

Avira AntiVirus
TR/Offend.A.2741
7.11.169.144

AVG
Skodna.GameHack
2017.0.2867

Baidu Antivirus
Hacktool.Win32.CheatEngine
4.0.3.16111

Clam AntiVirus
Trojan.Dropper-26973
0.98/21411

Comodo Security
ApplicUnwnt.Win32.HTool.A
19330

ESET NOD32
Win32/HackTool.CheatEngine.AB (variant)
10.10322

Fortinet FortiGate
Riskware/CheatEngine
1/11/2016

F-Prot
W32/Trojan2.NMHW
v6.4.7.1.166

F-Secure
Trojan:W32/Agent.DSOA
11.2016-11-01_2

Malwarebytes
HackTool.GamesCheat.Gen
v2016.01.11.02

McAfee
Artemis!F21A2E80C60A
5600.6523

Microsoft Security Essentials
Trojan:Win32/Bladi!rts
1.10904

NANO AntiVirus
Trojan.Win32.CheatEngine.ophtr
0.28.2.61861

Panda Antivirus
Trj/CI.A
16.01.11.02

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_SPNR.30DQ12
7.2.11

Trend Micro
TROJ_SPNR.30DQ12
10.465.11

VIPRE Antivirus
Trojan.Win32.Delf.abt
32586

File size:
686.8 KB (703,240 bytes)

Product version:
1.2

File type:
Executable application (Win32 EXE)

Language:
Olandese (Paesi Bassi)

Common path:
C:\users\{user}\downloads\peggle nights trainer.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:HEDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKtef:HmQGbvNvjkJPKuMlXF

Entry address:
0x93BBC

Entry point:
55, 8B, EC, 83, C4, F0, B8, 34, 39, 49, 00, E8, 18, 29, F7, FF, A1, F0, 9D, 49, 00, 8B, 00, E8, 60, 57, FC, FF, A1, F0, 9D, 49, 00, 8B, 00, C6, 40, 5B, 00, 8B, 0D, FC, 9C, 49, 00, A1, F0, 9D, 49, 00, 8B, 00, 8B, 15, CC, 36, 49, 00, E8, 55, 57, FC, FF, A1, F0, 9D, 49, 00, 8B, 00, E8, C9, 57, FC, FF, E8, 08, 06, F7, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
587.5 KB (601,600 bytes)

The file peggle nights trainer.exe has been seen being distributed by the following 2 URLs.

http://download1150.mediafire.com/r8y8r624ydcg/.../peggle nights trainer.exe

http://download1150.mediafire.com/zj7xq3rjzrwg/.../peggle nights trainer.exe

Remove peggle nights trainer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.