home

pixelmon.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.giftdeliverybinaries.com and multiple other hosts.
MD5:
a878f657b6877571c55ad69d084f95e3

SHA-1:
c331f9aafb5723b24f1624a87391055626b02242

SHA-256:
b6aa83318dfd7edf3e8b7562c425047c6eeeae1149335b3a55d053f66406c67b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/4/2025 2:57:32 AM UTC  (today)

File size:
227.5 MB (238,564,459 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\pixelmon.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6291456:1RUP/NutfshsZrcBaeal5G8LQdnrNoWI4QxNrF0fUvsK4:1WnsUm2aNG8SXUGfU0K4

Entry point:
50, 4B, 03, 04, 14, 00, 08, 08, 08, 00, B0, 25, 0F, 47, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 14, 00, 00, 00, 4D, 45, 54, 41, 2D, 49, 4E, 46, 2F, 4D, 41, 4E, 49, 46, 45, 53, 54, 2E, 4D, 46, BC, BD, D9, AE, A3, D8, B2, 36, 7A, BF, A5, FD, 0E, EB, 62, 49, FF, 39, B2, 56, D1, 63, B3, A5, 73, 41, 67, 03, 06, 8C, E9, ED, 9B, 12, 3D, 98, BE, 6F, 9E, FE, E0, 39, 33, B3, AA, B2, 6C, 97, 67, D5, D6, 2F, 65, 4E, 30, 9E, 99, 63, 30, 9A, 88, 2F, 22, BE, 88, 21, 39, 45, 12, 06, 6D, F7, 1F, 33, 68, DA, A4, 2C...
 
[+]

Entropy:
7.9967  (probably packed)

The file pixelmon.exe has been seen being distributed by the following 19 URLs.

http://www.giftdeliverybinaries.com/g7NPZTxD4DIU OXouKY6aD5FXyU_4znLlEo7CorYwitOeQ8x7_Z_g1bGuauXkVBYgJgYFlT0YQWjlDkPtmDJEWTrwo7mQ302KtY1xvGi89QujqlRQLLgpYu5HdrCWpo1dEy19JZoWc4RHk29oy6XoHJmuAb52s5az8YSWMtue_mS0WR9SG4GnAmt_qbhbWC9StiNP6arzE7CLkT8dk2zFFwH3ZWX2A==-G1QAAES3eV5Og6Ces OV6ijKQMkNDpwK8ijLA9l1j7ExXYPyJEhjEgnmpw9zDw_Etmx67N70PmNNzQ0vJVTKEBT6RZzjoQdbHQ==

http://www.capitalvaultsbits.com/5DOeOrWPnjTyhpdLDZQPH8ZzmlbPFwNKOIVZBnihV8QoZfbKdAtAlfGElpwph_JiZ_Yvxqy5fEcxJZBmWyUWywfpwr2fAwBOsmuV5xLzr6opKd3QkHP0Q2Zu5HrWmTY8sKEDKYoFc0qcjS5xYtC4jTgeH 8YQtzJHqwc5cF4fZ09wxDxAHmFj66Jo U_ymWs9ItXd6yi8wo5W 239C_Iz6HspjtfwA==-GywAAMRTFhsTs_KHH1DGAftqF3hd8LAxdq5DpJtrjPzAXnC4_rrZ5YNspw==

http://www.quickbitsdownloads.com/Rxwklul6HIygLq3QPg6EDcrFDEWV D8LqCklFh5uWNqhJ5Puhn9E25 oBQVhXmIPDBN_03D7i zWmGOBltOMz5KR5RmD8Uw4qQ_GJqcEhthn631sy5R7tzO3_894VeMKNXL9UR5WE5iozOe3YaVTpGGqP3TQMwizwr0bv13b 5dYLkwu3kqxZe1 VhqiW7dUtrfx Uv7P5hXhhmO9joyr7PuAdeCA==-GzIAAEQ3F5sGUzFUw0BB_4PChQ04cCmhp4Fw2Bg7VzRoPvMu0RbaLPY7CAthnzUWWfcQFg==

http://www.capitalvaultsbits.com/LHoIpffKpPHWwSKkbb4LadqrfJdA5z1qkIirdS7m2QwFBBkJHftXnW93FBa6T_fyfh7TbWPnb Dk64iEkboRLz1tMZEdShU5e_zTBBtjgci3X0vFOgrEeDRgOP5u7UPc6ragl_BvsUwZ16qAaF1B NGnA1DYUr6y3EKOMUDyxVjf 0_hFiOJp5aEGZ0wcaRhvcbyLxn7OVoD8pDasE19CaYmjWJ6pw==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.shareworldpackage.com/0XV4lBr 4MZQZTfVCI_eNzAwo3A30_1TsjEeCKlTY ndVeA5PPuyLiBjb ybXuzDXad6 um26vq37QcQU6eQludJhFU1zgRZrYfBXuCHr9riZB89O6ho6t2ktUQECoX8X0T9F7utfQVzhMK4hvMQfXNSHShFr6EgTtcw5_HS2zw__fs2caIHg6e7p3TZhMHcufe0vi Zrr5PEGxhjPVfGBC3Azvb8g==-GzIAAEQ3F5sGUzFUw0BB_4PChQ04cCmhp4Fw2Bg7VzRoPvMu0RbaLPY7CAthnzUWWfcQFg==

http://www.capitalvaultsbits.com/p1bkTkP0kotTrmRWuxKSPfFrlqiD0aJboL6lRGspoOmTZwqqTbX2cFSprV 0I WvOk2Maf8XMf_x9AZrloHYVHH07zrNHfnpSuV4 M pOK_oX1NX02d_Jm_4ZrqljFJx0h_9GiJa7Ee2MF s6mJI6V5AlT2nkKcNfzJ_92nFdcnPIFlbN8BTycFRmRKOfBQlJ1Tx2WQmBCt dE7fYLxfTml5_ivBWA==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.quickbitsdownloads.com/GqlXXz aSxXMP9vBqFpHP2pNtqzUCqE6CmeoJIxcQ5LDbeVuHRsjiBULmxWA R3NQr_09vXSpDU1OWrjWRqAFjD9tHj2tiEymh2MlUQ95oX_JfHmMrXULyWLzSBEEQnboTfNE1PHRYOc6EViHTDr4lWvrTnziRWu3pUEWxyk3XjWbt9_wRw0diuoS3uRNEZsmYR19Wy wwYg1uLZbylnUdF_DMe_Ag==-GzIAAEQ3F5sGUzFUw0BB_4PChQ04cCmhp4Fw2Bg7VzRoPvMu0RbaLPY7CAthnzUWWfcQFg==

http://www.capitalvaultsbits.com/aLfSOtGxQRN1FFSgXD7xtn5_DyTF6Gc_Fya7xrvshudlCEMiiuXsXXLEgJPUWA2sHk37WCM_h_4w7Hs7gCtQVH7dk4Ewg T1E8VYwi MD5 HGSBtbBXIBvFXn71T6VLVbdjDJdeOGFVFFvHcVZ74PKiGBOx1cCoW6zR85q5n8vd 8YdNeTVGEdohEnnZ_91ia_HOObLdfyRMqh4IP5mA7sXF3SxmYA==-GywAAMRTFhsTs_KHH1DGAftqF3hd8LAxdq5DpJtrjPzAXnC4_rrZ5YNspw==

http://www.capitalvaultsbits.com/T4i1G_98hn 1wx3S5cuo ktIiEgcSovO5fG_uMCs9RecFF6rARFSKjDtVisw258qgtkd2b41gvQ3ebpfo0Y jJwSf8plaEH QDhbm2wUIZdAOyO0Yx4KtPRIvLtC2Hx2ZPVhV9i0yvpANoUZoqwZNOrD6OutMaK6g8EA06BlOlNVTi1tVKsZKkOaT7AFG_LUqpZCkooGfqw5hw_08aoM8WAzREY gw==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.binariestownbest.com/_srKVYwspReiz_GgOg_owLo0cAK78M XiuEWvUlKNFa465v93HxsHBT3FyRkTB_NyOTSdy0CH3iGa1DbDMbtzIjU834BVQ kvmWv 8HQa5yLs2lzhuQP7uVUcbXWJbBCXYiTqk4PFeGHy9gfrTN_3A3OeMpdQYgRpqgQn15gEdz0PvHaVFfi9aP0VNB8EUuaFvuWFSLDBJrEQR0BH3eNzRmESOXCBQ==-G1QAAES3eV5Og6Ces OV6ijKQMkNDpwK8ijLA9l1j7ExXYPyJEhjEgnmpw9zDw_Etmx67N70PmNNzQ0vJVTKEBT6RZzjoQdbHQ==

http://www.capitalvaultsbits.com/mr4HCZy7H1YzI94gCzWKrgN1OwNFLtohUMpExxfJuxDrv jREiNKnfErhiZAPtEGmm cPgudp le1QSyPJSEvU2T9QOJQtraROEhCaXQRcf96747mcjU1 Tbez3nkhFqOFT4nYFeuTzohMkVhqrgopzQDb7JTmfYq_fvdRTBkr3T NEtHLrVicp49eCcTKtvfvB5Ubvimt6oslazO5thFTSOQ57uWg==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.capitalvaultsbits.com/DJhcJGjY0wiWfahWXFrliDDJ7_r01VeunsVlWa_ifIqYycae1heU67DTTskOfq4b6vWuifm6Il4SIkeH3yZYVaKRe0zsIeI8TdNEs9nYlAkwai5xEVCEd_gQswUV70Z2N89zHhb3dOJOYTrAhv3zUgqLsUmJMMMh1cyXha2co8TYxI0HFkNDbA vJzXIXDUzzKzgBVEPCAwBJJujUlG2xiHHhqqvZQ==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.capitalvaultsbits.com/uE6jMMOS3CBEnEsBli9ZFCCcYEd2VexPJmkcgwacVk6epgSjOs03pqPoPgdjDLYiSI3Cp5a2GrtQ8RAhHqQtatjscRAjprsPuqr3_74U5igNx8zetMwj5bqTcSkRKVqMYlSCB1FAGQawDfgVQqyQtFvJjvnbbU4cmUx2LkOoPkZFMeOZfSsPH2RSejj9yP741UThubFW3IqZaLUQzJOSLfyVhYGVvw==-GywAAMQNDq0gxOThC5RxwL7aBV4XPGyMnesQ6eYaIz wFxyuv252 SDbKQ==

http://www.capitalvaultsbits.com/OznOCasM_Nx0c9aLLLVGZmCzj3 hyEIJYSQb8 ynXrXHL9sYX nuD9M C4S14FdcViLYyN BcY0m16QsF_22V37CeY7f_Mc8A6wl5xglWAzcJBACVTp k_0rhcgvlEN3vrEr8GydNpTx5CcqN7sq5id9kTJRrXh1MWPsKKwSzG31oI3Zo5UjiQmcfw8Ul L8cK_JblT5jmTChtqTSPcaFChbiGiEVA==-GywAAMRTFhsTs_KHH1DGAftqF3hd8LAxdq5DpJtrjPzAXnC4_rrZ5YNspw==

http://www.capitalvaultsbits.com/4YCzN8ZGWdmc7kppwGnRpt90zodbTdu4tdbR7huAI2YJ5R2DvF4zA9C mN_ByjT6C5XPeYOU4OPax6Own4sLGt_8JQibaDwUTo2QPn3jqp_4tQGHeh BCPPEH1E7lKAO1ck3ChV5jteAcM9chONS0_FwjC2cVDt0oOkPmZSVCHx5j3CngyprqpYwf21HEcon5VrMZk0WBSCmH7_eFjJpiT95r0MLCw==-GywAAMRTFhsTs_KHH1DGAftqF3hd8LAxdq5DpJtrjPzAXnC4_rrZ5YNspw==

http://tutorials.pixelmon.net/wp-content/uploads/2016/.../pixelmon.exe

http://pixelmon.pl/.../Pixelmon.exe

http://download.nodecdn.net/containers/pixelmon/.../PixelmonLauncher-1.1.34.exe

http://cdn.omxcontent.com/?ic_user_id=872

Scan pixelmon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.