Gridinsoft Logo
File Icon

The visualboyadvance-m.exe (VisualBoyAdvance-M) File Analysis

Updated 1 month ago
Checked by Malaware Check
visualboyadvance-m.exe

Technical Analysis

File Name visualboyadvance-m.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.213.174
Database Version 2025-04-14 05:00:29 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
35,749,872
File Size (bytes)
2025-04-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fa715e85c8670f5a632ece8d729e8646
SHA1
7f570c10aaabf1452872a3a00a822af0abf8c04e
SHA256
a9067b396a05b416347a77897ff0b768338f7c2309aa4e1706aa992176a28bbe
SHA512
22d2ab58d67ae73565391ef7982eac7efc44c9dcf55feaeda4f324896006fb99c49a6989f8014e9a8cdf6e78b33478975b8ce507114e0df00279611b82d8a97e
ImpHash
870dac1761ab864861f93a0d3bec0f91

PE Analysis

Basic Information

▼
Icon
Hash: 6709ce9cd8a70a60a2d814880c81a81d
Fuzzy: ed8e9038040e05f3bce283e8b4bf0aa2
dHash: 00e88eb2b2b26002
Image Base 0x140000000
Entry Point 0x14155e468
Compilation Time 2024-09-15 05:57:37
Checksum 0x02218071 (Actual: 0x02218071)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 28 libraries
Exports 83 functions
Resources 63 Resources
Sections 6 Sections

Version Information

▼
Comments VisualBoyAdvance-M comes with NO WARRANTY. Use it at your own risk.
CompanyName http://visualboyadvance-m.org/
FileDescription VisualBoyAdvance-M
FileVersion 2.1.11
InternalName wxvbam
LegalCopyright Copyright © 2008-2019 VisualBoyAdvance-M development team
OriginalFilename VisualBoyAdvance-M.exe
ProductName VisualBoyAdvance-M
ProductVersion 2.1.11
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 23,942,204 bytes 23,942,656 bytes 6.61 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 034AB81CFB94FBD61FFB9E6EBAC90051
.rdata 0x016d7000 10,357,462 bytes 10,357,760 bytes 6.64 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0A460ADF7007E0E4F478D3D9AC3ADE95
.data 0x020b8000 28,534,432 bytes 372,224 bytes 4.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EBFC21FAE0AE1DDE1EACDC28167B9555
.pdata 0x03bef000 712,104 bytes 712,192 bytes 6.89 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1E628C4247A7B6062F1D682BF256F648
.rsrc 0x03c9d000 94,720 bytes 94,720 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4E6AD3A53538E29BE65057CAE604469A
.reloc 0x03cb5000 258,864 bytes 259,072 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 53BA8031E54144887750FB652945585F
Entropy Analysis Alert

4 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 63 (90,512 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 10 3,080 bytes
3.4%
RT_BITMAP 2 300 bytes
0.3%
RT_ICON 28 83,459 bytes
92.2%
RT_MENU 1 180 bytes
0.2%
RT_GROUP_CURSOR 10 200 bytes
0.2%
RT_GROUP_ICON 10 452 bytes
0.5%
RT_VERSION 1 1,016 bytes
1.1%
RT_MANIFEST 1 1,825 bytes
2%

Certificate Chain Analysis

▼
Certificate Information
Product VisualBoyAdvance-M
Description VisualBoyAdvance-M
File Version 2.1.11
Original Name VisualBoyAdvance-M.exe
Signing Date 05:57 AM 09/15/2024 (265 days ago)
Verification Status Signed
Signers Rafael Kitover; Sectigo Public Code Signing CA R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name wxvbam
Copyright Copyright © 2008-2019 VisualBoyAdvance-M development team
Certificate Chain Summary
Sectigo Public Code Signing CA R36 #1 Primary
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 62 1D 6D 0C 52 01 9E 3B 90 79 15 20 89 21 1C 0A
Rafael Kitover #2 Chain
Validity Period: 2023-01-06 00:00:00 → 2026-01-05 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 52 33 0A A6 81 F9 81 44 B9 5D 1E 91 C0 4A 22 25
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware