Safe
Game Boy Advance ROM file with 17-year submission history, zero engine detections, and 333 unique submitters — clean commodity software.
7c599c56849efeebeb…31057f71d4The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The evidence overwhelmingly supports a clean classification. The file is a legitimate game ROM, not executable code, with an extensive 17-year submission history showing consistent clean status across all major antivirus engines. The prevalence data (common_old, 333 submitters, 364 submissions) confirms this is a widely-known, widely-distributed file. Zero tier-1 engine detections, no external intelligence hits, and no behavioural alerts rule out any hidden threats. The unsigned status is expected for ROM files and poses no risk.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
0/60 reporting engines flagged malicious; tier1Malicious=0; 17 tier-1 engines silent (Avast, BitDefender, ESET, Kaspersky, Microsoft, Fortinet, etc.)
prevalence.classification='common_old' with 333 unique submitters, 364 submissions since 2009-06-15 — widely distributed commodity game
No sandbox behaviour data, no dropped children, no malicious host contacts, no external intel hits (CIRCL, MalwareBazaar, YARAify all false)
File is Game Boy Advance ROM (.gba, 16 MB) — not executable code; unsigned as expected for game cartridge dumps
No adversarial input flags, no triggered heuristics, no brand mismatch — clean metadata
- 17 tier-1 antivirus engines report clean (Avast, BitDefender, ESET, Kaspersky, Microsoft, Fortinet, Emsisoft, Ikarus, F-Secure, DrWeb, GData, Avira, AVG)
- Common_old prevalence classification with 333 unique submitters and 364 submissions since 2009
- Zero malicious or suspicious detections across all 60 reporting engines
- No external intelligence hits (CIRCL, MalwareBazaar, YARAify all negative)
- No sandbox behaviour alerts, no dropped children, no malicious host contacts
This file is safe to use. It is a well-known, widely-distributed Game Boy Advance ROM with a clean 17-year history and universal engine consensus. No further action is needed.
0 detections across 74 engines
How often this file shows up in the wild
Widely seen in the wild for a long time. High prior this is legitimate; isolated detections on common-old files are usually false positives.
Forensic fingerprint
- File name
- Pokemon - Smaragd-Edition (Germany).gba
- Size
- 16.00 MB
- MIME type
- (unknown)
- Detected type
- unknown
- SHA-256
- 7c599c56849efeebeb93bd71f714932ae4cdf980db51c9c1016b4431057f71d4
- MD5
- f793a854654b467211fc32c4062cb183
- SHA-1
- 61c2eb2b380b1a75f0c94b767a2d4c26cd7ce4e3
- First seen (VT)
- 6/15/2009, 3:29:09 PM
- Last analysis (VT)
- 6/19/2026, 7:43:45 AM
- First scan (MalwareTips)
- 6/27/2026, 6:49:53 PM
- Last scan (MalwareTips)
- 6/27/2026, 6:49:53 PM
- Community reputation
- +5trusted
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.