home

NO$GBA.EXE

No$gba

This is a setup program which is used to install the application.
Product:
No$gba

Description:
Nocash GBA Emulator

Version:
Windows version

MD5:
a36a4cc10d320b4194855e9f63b1dea1

SHA-1:
45ffb9b2dcb823c902ab736cd66049f0c8bd0913

SHA-256:
17bf7127c2ec8b8b7faa7a03bd188b1c432336fc43c8ea44517e270c8a9dcd6b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:26:18 PM UTC  (today)

File size:
163.5 KB (167,465 bytes)

Copyright:
Copyright © 2001,2002 Martin Korth

Original file name:
NO$GBA.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\no$gba-w.2.6a\no$gba.exe

File PE Metadata
Compilation timestamp:
11/29/2014 5:03:46 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:/cHpOY7gxhBcbjPcP5zXd9xoC+Lc2p17Cjl4wFw0IOBylVoOoqan35n8mV:/cHN7OHcbAFpoCABp0jPFw0RN7V

Entry address:
0xF92A0

Entry point:
60, BE, 2E, 80, 4D, 00, 8D, BE, D2, 8F, F2, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
136 KB (139,264 bytes)

The file NO$GBA.EXE has been discovered within the following programs.

BlingClock Timer  by D3BUG Software Ltd
www.blingclock.com
About 3% of users remove it
Project64 1.6  by Project64
Publisher's description - “Project64 is a Nintendo 64 emulator for Windows by Zilmar, Jabo, Tooie and Witten. Project64 or PJ64 dates back to its first public release Project64 v1.0 in May 26th 2001. Project64 is an emulator designed to emulate a Nintendo64 video game system on a Microsoft Windows based PC.”
www.pj64.net
About 7% of users remove it
 
Powered by Should I Remove It?

The file NO$GBA.EXE has been seen being distributed by the following 3 URLs.

temp:NO$GBA.EXE

http://s10014.abelhas.pt/File.aspx?e=rbI1MsM11rGWMYvHJTWQ5IHyS8PK-ZN6L8ja859zxkn5qmgWDDss6a5Fuv26geMuU705ty57ma1Vlfe__xX8Y4dBQ_qAwZSN4IMgh0Ng-iE_G3iaycXi09ouUIuCubM4dDHtq0R_yJHfArp-IJ59OQ&pv=2

http://download2121.mediafire.com/8pwg6384qpfg/.../NO$GBA.EXE

Scan NO$GBA.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.