MalwareTipsTools

File scan report

Verdict Suspicious

Analyzed , 2 days ago

Is GameBooterZero.zip safe? Treat it as suspicious.

Seven of the 65 antivirus engines that checked it flag this rarely submitted game-booter archive with a shared 'Boxter' rule-based label, while fifteen major antivirus engines…

Read the whole reasonShow less

Why Suspicious? 7 antivirus engines flag it; nothing else confirms it.

Limited evidence · One sign points to a problem; nothing else confirms it.

Don't open or extract it until you know where it came from

Do not open or run this archive unless you obtained it from a source you trust and can compare its checksum against a published value. Keep your security software fully enabled and scan the system if anything from it has already been executed.

What to do now4 steps

Some signs point to a problem, but nothing confirms it is harmful. Treat it with caution.

What to do

  1. Don't open or extract it unless you're sure where it came from.

  2. Check where you got it: an unexpected attachment, a link someone sent you or a re-upload is a red flag.

  3. If you can't confirm where it came from, delete it. If you need the program, download it again from the publisher's own website.

If you already opened or extracted it

  1. Stop using it, run a full scan with your antivirus and watch for unexpected behavior or security alerts.

Not sure what to do?

Ask the MalwareTips community before you run it. If you already ran it, follow the cleanup guide.

Paste this report's link in your topic so helpers can see what was found.

Reads the latest antivirus results for this file's hash. Nothing is uploaded.

Antivirus results

7 of 65 flagged

  • Flagged 7
  • No detection 58
  • No result 10
FileGameBooterZero.zip1.8 MBSHA-256 042f36c08c4b…24a855
  • Code signing Not applicable
  • Test run Not run
  • First seen 22d ago
When we scanned it, 2 sources had submitted it to VirusTotal.

Chapter 02

Why we think so

5 points against it and 2 in its favour, checked against the scan evidence.

MT AI Engine · Verdict analysis

The reasoning behind this verdict

Analyst conclusion

Seven of the 65 antivirus engines that checked it flag this ZIP archive, but almost all of those labels come from a single scanning engine and its licensed copies, and fifteen major antivirus engines including Kaspersky, ESET and Avira returned nothing. The archive is unsigned, submitted by only two sources, first seen on Oct 16, 2026, and its contents were never unpacked in our analysis, so the evidence points both ways.

Where this verdict could be wrong2 caveats
  • Fifteen major antivirus engines, including Kaspersky, ESET, Avira and Fortinet, returned no detection at all, so the 'Boxter' labels may be a rule-based over-reaction by one scanning engine applied to an archive it could not fully unpack.
  • Nothing inside the archive was unpacked or inspected, so neither a clean inner file list nor a hostile one can be confirmed from this evidence.

These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.

6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source

Chapter 03

Technical details

7 of the 65 antivirus engines that checked it flag it.

Sources checked

Every check behind this verdict

6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.

SourceStatusResultChecked
Antivirus enginesVirusTotal · 75 enginesCompleteRisk signal: 7 of 65 engines flagged it · 10 gave no result Details for antivirus engines
Sandbox runVirusTotal sandboxesNot runNo sandbox run is recorded for this fileNo date recorded
Contacted hostsMalwareTips URL scannerNot neededNo sandbox run, so there were no contacted hosts to checkNo date recorded
Signature rulesYARAify community rules + MalwareTips rulesCompleteNo rule matched
Malware sample databaseabuse.ch MalwareBazaarCompleteNot listed
Known-software referenceCIRCL hashlookupCompleteNo match

Engines that flagged it 7

  • BitDefender (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
  • Emsisoft (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE (B)
  • GData (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
  • ArcabitCMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
  • CTXzip.unknown.boxter
  • MicroWorld-eScanCMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
  • VIPRECMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE

File fingerprint

Last analyzed
Nov 5, 2026, 5:10 PM UTC
SHA-256
042f36c08c4bb47ebd9b53bba50212a919e4fb8b46ca7ebac55499314c24a855
SHA-1
1768e40f541ec70b6399df4ef0ad378fd987d8dc
MD5
801e7c3ab376af0a4f500f1bd27c8153

About this file

GameBooterZero.zip is a ZIP file of 1.8 MB.

Type and size
ZIP · 1.8 MB
Signer
Not applicable
First seen
Oct 16, 2026On VirusTotal.
Submitted by
2 distinct sourcesRarely seen: few people have submitted this exact file.

First scanned

Chapter 04

Questions & answers

Short answers to the 6 questions people ask most about this file.

Is GameBooterZero.zip safe, or is it malware?
GameBooterZero.zip is rated Suspicious: some signs point to a problem, but nothing confirms it is harmful. 7 of the 65 antivirus engines that checked it flag it. Don't open or extract it unless you're sure where it came from. If you need what's inside, download it again from the original website.
What is GameBooterZero.zip?
GameBooterZero.zip is a ZIP archive, about 1.8 MB. VirusTotal first saw it on Oct 16, 2026.
How many antivirus engines detected GameBooterZero.zip?
7 of the 65 antivirus engines that checked it flag GameBooterZero.zip, including Bitdefender and CTX. We weigh which engines flagged it and what else the scan found, not just the count.
What should I do if I already opened or extracted GameBooterZero.zip?
No infection is confirmed: the rating is a caution, not a malware finding. 1) Check where it came from. If you can't confirm the source, delete it. 2) Run a full scan with your security software. 3) If the scan finds something, follow its removal steps and change passwords you typed on the device since then.
What is the SHA-256 hash of GameBooterZero.zip?
The SHA-256 fingerprint of GameBooterZero.zip is 042f36c08c4bb47ebd9b53bba50212a919e4fb8b46ca7ebac55499314c24a855, and its MD5 is 801e7c3ab376af0a4f500f1bd27c8153. Two files with the same SHA-256 are identical, so use it to check you have exactly this file, not just one with the same name.
How up to date is this analysis of GameBooterZero.zip?
This report reflects the scan on Nov 5, 2026. A file's fingerprint never changes, but antivirus engines keep learning, so a rating can change later. To get a newer result, scan the file again: we refresh the antivirus results when the saved ones are out of date.
Chapter 06

Community

Member reviews and reports for this exact file hash.

Other files people checked with the same name, and recent reports with the same rating. A matching name does not make two files the same: only the SHA-256 fingerprint identifies a file.

All file reports
This report and its SHA-256 fingerprint are public, so the next person who checks the same file gets an instant answer; documents and images are listed by type instead of their file name. A file we had not seen before is uploaded to VirusTotal, whose security partners and subscribers can download it; MalwareTips deletes its own copy after the scan. If you ran this file and are worried, scan your device with up-to-date security software.