home

visual-boy-advance-1-8-0-beta-3-32-bits.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
b4c2dbff64b3c5c637695f208a9ca66b

SHA-1:
83ffeebd6fbebf6b5761444d37bb8694a2829d45

SHA-256:
05a4b7f7db56dc876eda01a6d42f844e09279b2a1d6552fb6b7aa243a9aec86b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:20:17 PM UTC  (today)

File size:
644.3 KB (659,797 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\visual-boy-advance-1-8-0-beta-3-32-bits.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:CSWb3XxlsybV4O9Yz8p0DMOb+xUhFZDLZlCRq0+5P0K6EFcvETZUh:C7bnsyRnYz8e4lm5lCRqJaSDFq

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, D9, 3C, 53, 2D, 82, CB, F7, 0D, 17, 1B, 00, 00, AD, 47, 00, 00, 07, 00, 00, 00, 43, 4F, 50, 59, 49, 4E, 47, 9D, 5C, 5B, 73, DB, C8, 95, 7E, 1E, D6, F2, 3F, 74, E9, C5, 52, 15, CD, 19, 7B, 36, 97, 19, A5, A6, 8A, 92, 28, 8B, 89, 4C, 29, 24, 65, 47, 6F, 0B, 92, 4D, 11, 31, 08, 70, D1, 80, 34, FC, F7, FB, 9D, 4B, 37, 1A, BC, 38, D9, B8, 32, B1, 45, 02, A7, 4F, 9F, 3E, 97, EF, 5C, 5A, 3F, FC, 60, F0, E7, D3, F8, C9, 7C, 1A, 8E, 87, 93, C1, BD, 79, 7C, BA, BA, 1F, 5D, 1B...
 
[+]

The file visual-boy-advance-1-8-0-beta-3-32-bits.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/Jtb4ckkqSweXNgw_efWkERXIizq_dCt In7kOzRlOJP RfHQRFTXd7dcQEJ2jTfNUXWFiksrAKIYzWp9LRR S_m6qdmexWpGnN4X8_in6tzhPkkzIS30g2iH_m0lNeIo4sd6N7sRiX t93kJCTv0C bowiVvFbNgBG9fX7gSfCyJsAzUawONSlmlbYBdb3dx6vYF5ZxO5RcjU3dgcT4WsCdoWhmO aUtfkEAlwhm1fjQWhq_mWk8T_10K1a5y1YQJKi3qNQV3FedyWaxpau RlaX2b8vIAl1qH7Ijo2RtmGFm5krGfycmu7qHdpqObyDiDwQAOW_2cNGR5 STKaFHb5j uIp1C0BgFCUEB3yYHTFO7CWpmyJzjOhftfjbvKb U6DLVO_5veog3tYlRiXY6r6ArppQ1Gid4 9iG8BwIMI09GEAVP X2OqcnovmDUpSTrtOkTpqZ4YSdrRogUgB WWsBZrGowEJRW_7virkhQ2RK7AQLuCCPrvG_FCyHE9uUp7X3QWDRyw6yq3DoCi8WzqsYgAP4uthrNIHUYIBo4RLcndiAk=-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==-e

http://www.ranchmetabits.com/qeeadQdYgBlIsFrdgxyr1WXB T7GM0ScIjpdeC VpjOPV9bSZTyOW0eIe0jRptMeL6nkGqiMceJx8eRi3jULV1k1DJLToMcm_KAo1HL5Ccy2DPYGS2 EAfaLt_rw5dZs6MFsKkeKMsQaoQLlADKSs5xronZjpNH3rklCiU66RMGIbzIq6Ks=-G ECAGSwTez5YILoHNNKgDZM7iC0iKYUhYkcsLfFEPNJ7L1x4MkaIz LwJyyuc_bx5LO7RvvedxYc_PEjJ0SAGUGW2gJrlMO3pPjCZbK bANuuXGPDxMxl1HeV1Lu4kIzcIpdc1C dmGzZSZzxmeHj0_hBquZkl9BSkT7dO61gxLmHRdeIv5nxrVJd4LreDsTFYcu1npMwGMC742lobJRm HsI_8TlXBg5QiMXU4jS7iO9OcIkm3bvAOzUclrgNL61ivduleRHqJZy3flnRps1S35z2oc4BzN3YpKngeiBemNHhXuE4sX3sSpPVUFksq4AS3lbPqENcnjv5vi7oT0MYBpscsyrNMR8BV6gQgTs7oo0VvodNiVpWWS7pAARytI3rolpZe0nficx4H3z97rBVtEc9Q63TGl8SLDEPLiv5W6SC57BC5GM2KxFhZ38VYUe1yuQ4iNVgYj4nt8eGetnF_Z0ZQvAQy7FS8XOlXgQS6nnrLn wino0CJtc mNJWoHrgZ MmThVzwDMi7EzL5tu73LEi6F1Vu4tE0AJTv6sw22jBZ_KEVyT3lVV6L9PKG55LfWL_Q0dzTRr9YsDOV59WsXsrN9ioTbULhSTeSfdWmnkRmod1i920AfIwQvm2kM9g02gjKG3HIAxqRGLegz0Nrlly4cVw5OaSh_9Z8vfvH02ykWUdMI Yw3ThSQxWi5EFMxpWrdzeU 9yra2sYuIaxFAs7DYJjgG047XXCAxM53a d1LVqBm2iJ6IekDOf87l _ePDw==-e

http://www.ranchsendgift.com/bb7hVguI0YRUv30zt0x8 dV6fJQiB5EIv342 vq8pghYT83xsT3rbH5NmmeD_MX5plxpD5MJk4EnhpoebyxXcujp7_L0tIeWlTw6pBYC_CjR2pNQi7bn6bNmoC1OGLONcmSNyIpSvqTbEUyandyWf44tE5SQtwmk8Bn3j4zz78quDBcIciXzTtX5D_vnxdL AWNuYcfQleCgSGloNnc8 eZspoW1ew==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://dfw.coolrom.com/dlemu/14/2qXFizjYqYvcN-EhsFVGXw/.../

http://www.ranchsendgift.com/ZtRZmF_rt N87ms_hv5yHQnAZ2TxFFAtIRRWztpcn8QLSDo eyas0 s4kbrsjNHiRGc7vJ95VUK_Xwi5LEFVcR ah8EnbqIyZT_SlOpeD0jTVjJf ZLFW3BwqnqI95tPOPTxlUiqEqSMFegeEB8V_JRMeMTF0m DdB6uV9XctgvRJiDLMWiR1aiasbEPP5eSXoUA11c IuZK40l BX7lmNxiqJ0V4A==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/L4OgI8amAwv804TxVD8UFxPtcFVXYX_YQV5zU596wLG5zcvgHSuz6Wwrw_dgEgZnqS8Ybbl3D5XbGwP4WXbdZ2jK4F9vG2mJ6T5hE7YN AQtcyuHXDniJNWisN5tqUr0YvYz5ewRYr2ybnBLm8LaRMjKEIU7pL9 r6eg4VaBKj Cl9JZ7Lpxroq6I2gRBGCwieoWyPizR _63WghdXyafgAyoUGw2A==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/oMecZVqV4272y4xAM0lzNjED8jLWZ5wC43 3OrW49AmotWwEHAxnbMR8GxQCnQXkO4YKRZxpocoiBWOWGUM5_ee9RLsEC1dVjN7T2BCPEDcqtNgCqLk5MnX5jzZapb0ZUs359ZTZSxjoA1wpvzAVRSWPZOOP5yBCPr5L5Q6mlHh1GKDOsPcTCmqcPspgD_1xUPFoPimQZOpuTfBWlSKz3HZHhcT1BA==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/wckUwtVPePygYYzKAK3KAWGHQMioXxCIQPzunwimxIJEZsty7XV uEmtQiAQ6bWBQK2 utkktjI07 _n_VZyV9IdBNtG_eefiqiZvrgU 7p2_2QWiCyxNHDIpmj274tnIgRKq_Ph_dzorUkyU9uoGhqFm1mHrDJvyY4T05eNllHkS2FwmoiuC_oqxMUGMmXNR 3XXlQwUz0h6_Tj3J8R6bQ2LX8BSQ==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/aZcRz_vz_iv0rMOnCTd5U1G6yi2rvsOktRvlPdyUry_47Ua2TyN1o4NwJqu4VWMSm eXR28ljiDPJnZomG_6I jOmZmHJjDnxYVXevz8L__sZ5vPRnBUlpeSxKdCtsXNGilUgjQmunfT05_Moc ANXxl_Ac794fyJzyJZ4J C W1ido gF52B9Dc0yNN2oKML0ooGjmZpg8JRTUuhsPnAw0ZqYCI5A==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/1xOio9HgaAMexssSQTQIFAPO0ug2IVV37phXf02wMAlKkgK7bsXj_H_yYQrwzwx1yDLLx1rIE_JCJyVt2WZ6GSnzOMeHxId0Y4xBPtRboHqVunCvCZcyV7cET8VkZyM_8jyPefCPgEmhgsmpuP9vJS17tsr2xmo7Bu_4QCtrGZhZoyUzBq6 FWj8N_YfXInz3xZK7QRhwscjo4mzr2XaMDGjwkJxrg==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://dfw.coolrom.com/dlemu/14/BAqwlbjH8fjS29hcKE9vyA/.../

http://www.ranchsendgift.com/FIEYkgo RqTBNMh6vF Y91d4rHyRPoQAlyU_lusdq_Hl7qxHl5OTplDcmPwr rRLiWjQEflPsioovSMt875Lm4ljxBWZI3HvwIwBc43SnFwPPD Hzg_M1lMxiH2eIXezQAiZwZlpJPB2byw0rD4hq 0jzEu6ZKTwXlRDfoczEfCwIMlgPKYCYqlVmhK F3F9W3m2M ViZqq23_M9PR13B4KMbx gTQ==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/A0rA5Pemn6NykL4LtX6koBCD2qzieyrErYrB222JaTaLBCR1TLuhTPr K5zOf1GMKxXI7GCDk8gbwytYFsa3_njNnzELeS5__vO54am9Tilkagij7bIDVd3qnSrT1mBwNA6vLUtI6mYPPxm_nn_GvjTrn8SDPBHINNRJCGirJbXZi690mx ePjm4kaNw72MJXcPrPakfDOH10qI4nHXYT8f6hEeZ1XdS8Z4AL6BR9ZL0LcaBtT679d2wFSOl6_ctZWWiZ0yP4AjGS0dhJ Nj4T2XGPS9jccCvTbM70LamTw1Ht1ie rTOSBA02vp7vwU0t3fFo5_6RX805x1 OX0Oa0H03ILPaZxfGpL yGWF_60syDKKp2mQqTW2unVy2YkUcuIs6G8LmR eu54wGA_k5OOzLFTxId2iymHv76xm9CTXl1vV0DnkAZ46Mc5d11coHZFCexuA24nqQyhhcdvfG9urkvEtU0FhyreyBShiKwCieHV7nil7uhdNcFsi50tcHhL5Wb0hmrbhl687308fFDH1bIy4agaqDmL30X94zZyo6hroDc=-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==-e

http://www.ranchsendgift.com/ICL6VejypBU518bG1z3XeKdzxnareRWM8eoorHir8pMOGKZChn9O4fxBR7RNRadFw8SqCLhHP073wBQsXSE4Ob6BqJF0p 3L6LY uwjkRAI1KBsMzdkcfKl3sC9ac1NyU8UTQII9l2s66Ay8UXP9Wax0WeG6bmamvn87vjeheMIsGln4ApPv6VMimBnW9jYjhOpvjXuQW31OjN7ERmcxbJy 6jr8fQ==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

https://mega.nz/persistent/.../z5tgEJqb

https://mega.nz/temporary/.../z5tgEJqb

http://dfw.coolrom.com/dlemu/14/qtSYqeGvwDbt5hmVv9c68w/.../

http://www.ranchsendgift.com/jUx OzAt6PrChr5ozaSWklRwngODdcZmxFA5B98JnDtxYB 5NORbIRl37RNtNXPrAaBIokBu21c0r8RtjvsVZOii1ch3s7oLdu9PjH3pvEdukgNnDI9IKTUDrTJ8MuBCDDqNjx63Dy6EmrySNTIKfCtRLIBatKbRlndceJdtqid71U7U45EqPAesEgERKhLL7 35JdkdZdT0buQeBjON_4kvJREA8w==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/e_BjG6N4 Kp73YWDXD1dOsaH8c_1xfMuK8ES1i2NtjvtgrLfLCNriycXKaC0A27bGI3bVCZ0cfEDUbILRkh hcT wG2ldni8qD3VSpqly WRzPJ6sawz6Yomooyf7Z_RaCd0hffBWBTm_nyWxsogSa5YW9wbX78 luGlTs_s_Ds3EtkK1_JgxiqMpFYtP7Z71VAXDtn5bNZsSXCtVVWoAQO_9gFqXQ==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://dfw.coolrom.com/dlemu/14/rhAfdKDy8Z0bvWcJ4NANbQ/.../

http://dfw.coolrom.com/dlemu/14/nUAUoxCljYyY4PERvLq3Bw/.../

http://dfw.coolrom.com/dlemu/14/gAoBqtCKt3IDAyZP_0giYw/.../

http://www.ranchsendgift.com/B7fGCgz4yPMoYa5bjJVqeyZJmI1k_VqG6X9et9_d2TN9XzESqm5nftgMt6CdQE366aCTMFme_e0pzOYHz89bs3mwYPrWX0FVnhcfFl_BCVfqj5Sv28N1nfI dsCHTSE_RFgx7vK29sa2wCit8WLDOEBgsfr99MHqGESCy78axJ22wlMu99CTJAnXf0QRxhHrQzTLAVlJh9nFX7XM1EZJkU58MKSf5w==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/uKaMPMgC_iO2I9K3uKdIyB aBpmowRdi7WTW9zZMSSWQxm1ZOavY41WcGNnufdYgVyqatBaxNZkEE96qk6ILJFZ5v5aFSKtE28Fxx xP71kc5xy0SQ8o5T9SgGfQFQ_8WZMRzHVTqnBLMSA2GDPU1q216Rpik_s5LrJC8rNZD3548tuA21McS_Ye31ZvGyLVRb8V4f1ijS1arcoz_JMAGGmqrG OPA==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/hQlYhmUAAdaljUG2uO87 JRBw4bA01t5lUXRo766bsPqv3ePTQOqR9PeHFjsCPao7yKWs1vJlKjmtxFo_qLtf 7GU91BX_UxiAjZ4HC7Rk2wg_86cAtXC8 azOMGKDVHFDH4_TwXlBCW84IeSb13qnTvLp8oJNM_k_7aPs1hoWxIJHiGtmI1PjHC86zCZAARJFvkom8y2sHBjbWuD1rRQyznzMYssA==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/K1 oCSrtySDaY1FNBVbGFrM5YprtRn84I_6nIdJ0l0IK7jFRLq60XavQJy25KHyPewTmBblbN8yLOjnuMhOu97tBmpAc7BZBL j6RDsjHdyOGn1D9XZT7f07mkO9mwyLTy5w _v KUOUO791E4j5M4n5g_iIASXSFGJe7ckQaNC KuPcwBwsBIe3nPG0PXZexH Dhh2i5BXr0qplDFqysyBDlP1Tgg==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/LKEb4oLYAcTN8ZWxjZV8rPsK5Q5AObCEt2laptc uuvOGTQOdvqC69wvslkVdjvmUTRC f8oIfvej3UMkevQai_IHDUVKgQfLYaJiQA46megMWqKEAMH_M3WxtvEe1BvCHgJbZYRb7 reCrVzHcjZaSP53KvuOK0v27uGK6pvTY9c3Q7zsAr3qNRRy7tJucna4EXru27NeARfKmZrwnlZo7PUTQd4Q==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/gASjn68x_3fp8F8YB_WaLpQKA02XypCHC5eLyLDHpAclk8RBVx8 D5RfygrhiRK9DmEGRbtW8_4jsYWeEW3WJwrJB_Lz0 _mSQiBRQA0bKvqKtOYPRHg1v4akXLUv_tvToff0URUCL3Vy7QfAdKPBh9L4aezOAwCEut9fCwQ0sq5en5F8e637Jwbjc6P8MvKDEtBYqEA9Y1QpAhwukjYY6cEgsAjng==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://www.ranchsendgift.com/XIRRS_lHXjEAjGMfC3DNpnyPriwM8kAZ2EUmDaNqMaeCQCQ0swdKwKtWHaBWXhd ZK7RRpQOYzpQRbUya4OvbYfOTl3lGUCOzndCyQCujPriw5dLRAQpYFC9lEW8bXuzV5ybaXlc7JukPCh eJu9DzEwk5WNIKfTiyZNJwE0g3EkEyh4FWVtQ8BW9MeaaO_ZYlzAb_8h1zBm0HJ2cCSrVSfCZXNFmw==-G0gAAORtm0stOu3O6DuEBK2gggqUccC uslxdRA bIyd4xTpljVGvmfjvoebHBPUTfCR LlUdR22Mt5vmiFixgAtNeHXCQ==

http://download1.getuploader.com/g/57a5e92e-9f34-4307-b3ad-76dbb63022d0/rorudo/.../visualboy-advance-1-8-0-beta-3.zip

Latest 30 of 181 download URLs

Scan visual-boy-advance-1-8-0-beta-3-32-bits.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.