File scan report
Verdict Suspicious
Is Game Booter Zero. zip safe? Treat it as suspicious.
Seven of the 65 antivirus engines that checked it flag this rarely submitted game-booter archive with a shared 'Boxter' rule-based label, while fifteen major antivirus engines…
Read the whole reasonShow less
Why Suspicious? 7 antivirus engines flag it; nothing else confirms it.
Limited evidence · One sign points to a problem; nothing else confirms it.
Do not open or run this archive unless you obtained it from a source you trust and can compare its checksum against a published value. Keep your security software fully enabled and scan the system if anything from it has already been executed.
What to do now4 steps
Some signs point to a problem, but nothing confirms it is harmful. Treat it with caution.
What to do
Don't open or extract it unless you're sure where it came from.
Check where you got it: an unexpected attachment, a link someone sent you or a re-upload is a red flag.
If you can't confirm where it came from, delete it. If you need the program, download it again from the publisher's own website.
If you already opened or extracted it
Stop using it, run a full scan with your antivirus and watch for unexpected behavior or security alerts.
Not sure what to do?
Ask the MalwareTips community before you run it. If you already ran it, follow the cleanup guide.
- Ask for free help on the MalwareTips forumWindows malware removal help, answered by volunteers. (opens malwaretips.com in a new tab)
- Remove malware from WindowsStep-by-step cleanup with free tools. (opens malwaretips.com in a new tab)
Paste this report's link in your topic so helpers can see what was found.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
7 of 65 flagged
- Flagged 7
- No detection 58
- No result 10
- Code signing Not applicable
- Test run Not run
- First seen 22d ago
Chapter 02
Why we think so
5 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Seven of the 65 antivirus engines that checked it flag this ZIP archive, but almost all of those labels come from a single scanning engine and its licensed copies, and fifteen major antivirus engines including Kaspersky, ESET and Avira returned nothing. The archive is unsigned, submitted by only two sources, first seen on Oct 16, 2026, and its contents were never unpacked in our analysis, so the evidence points both ways.
Seven of the 65 antivirus engines that checked it flagged this archive, which on its own sounds serious, but the labels collapse to one detection: a rule "Boxter" signature from a single scanning engine, echoed by the five other products that license that engine, plus one community engine calling the archive "zip.unknown.boxter". Fifteen major antivirus engines, among them Kaspersky, ESET, Avira, Avast, Fortinet and DrWeb, returned no detection, so there is no high-confidence agreement on a family. The file itself offers no benign anchor: it is a ZIP archive, so it carries no signature, has no publisher history, only two sources have ever submitted it, and it first appeared on Oct 16, 2026. No sandbox run exists and the archive was never unpacked in our analysis, so nothing is known about what it actually contains or what it would do if opened. With a single-engine rule on one side and a broad major silence on the other, the evidence is mixed rather than conclusive, and a game-booter archive from an unknown source is not something to run casually.
What We Detected
This is a ZIP archive of about 1.7 MB named after a game "booter" tool. Seven of the 65 antivirus engines that checked it flagged it, but the labels are not independent: BitDefender raised a rule-based detection on the archive and the five products that use the same scanning engine repeated the identical label, with one community engine adding its own "unknown boxter" tag. In practice that is one detection from a major antivirus engine and one minor one, not seven separate opinions.
On the other side, fifteen major antivirus engines — including Kaspersky, ESET, Avira, Avast, Fortinet and DrWeb — returned no detection at all. There is no MalwareBazaar listing, no community malware rule match, no known-good reference hit and no repository release match for these bytes.
Threat Behavior
Nothing was observed when it ran: the file was never executed in our sandbox, so there is no record of processes, files dropped or network connections. The contents of the archive were also never unpacked, which means the number and type of files inside — executables, loaders, documentation — are unknown to us. No reputation result for contacted hosts is available either. No complete contacted-host reputation result was available.
The name suggests a game booter, a category of tool that often ships with unwanted extras or is distributed through unofficial channels. The archive is unsigned, has essentially no reputation, and only two sources have ever submitted it since it was first seen on Oct 16, 2026.
What To Do Now
Treat this archive as unverified. If it did not come from a source you personally trust and did not arrive with a published checksum you can compare, do not open it. If you have already run something from it, scan the system with your security software kept fully enabled and review anything newly installed or newly started at logon.
Where this verdict could be wrong2 caveats
- Fifteen major antivirus engines, including Kaspersky, ESET, Avira and Fortinet, returned no detection at all, so the 'Boxter' labels may be a rule-based over-reaction by one scanning engine applied to an archive it could not fully unpack.
- Nothing inside the archive was unpacked or inspected, so neither a clean inner file list nor a hostile one can be confirmed from this evidence.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Fifteen major antivirus engines, including Kaspersky, ESET, Avira, Avast, Fortinet and DrWeb, returned no detection
- No malware-sharing database listing, no community malware rule match and no known-good reference conflict was found for these bytes
- One major antivirus engine applies a rule "Boxter" detection to the archive, and five products sharing that engine repeat the same label
- The archive carries no digital signature and no publisher history we can check
- It has been submitted by only two sources and was first seen on Oct 16, 2026, so there is no track record of legitimate distribution
- The contents of the archive were never unpacked, so what it holds and what it would run are unknown
- The name points to a game-booter tool, a category commonly distributed through unofficial channels
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
7 of the 65 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 7
- BitDefender (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- Emsisoft (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE (B)
- GData (major engine)CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- ArcabitCMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- CTXzip.unknown.boxter
- MicroWorld-eScanCMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- VIPRECMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
File fingerprint
- Last analyzed
- Nov 5, 2026, 5:10 PM UTC
- SHA-256
042f36c08c4bb47ebd9b53bba50212a919e4fb8b46ca7ebac55499314c24a855- SHA-1
1768e40f541ec70b6399df4ef0ad378fd987d8dc- MD5
801e7c3ab376af0a4f500f1bd27c8153
About this file
GameBooterZero.zip is a ZIP file of 1.8 MB.
- Type and size
- ZIP · 1.8 MB
- Signer
- Not applicable
- First seen
- Oct 16, 2026On VirusTotal.
- Submitted by
- 2 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
7 of 65 engines flagged this file
10 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
The 7 detections come from 2 independent scan engines: several vendors license the same engine, so their results are one vote.
- Tier-118 engines1flagged3 vendors sharing 1 engine
- Tier-234 engines2flagged4 vendors sharing 2 engines
- Low-trust13 engines0flagged
View all 75 engine results
- ArcabitMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- BitDefenderMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- CTXMalicious: zip.unknown.boxter
- EmsisoftMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE (B)
- GDataMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- MicroWorld-eScanMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- VIPREMalicious: CMD:Heur.BZC.PZQ.Boxter.231.2CFD5AEE
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is GameBooterZero.zip safe, or is it malware?
What is GameBooterZero.zip?
How many antivirus engines detected GameBooterZero.zip?
What should I do if I already opened or extracted GameBooterZero.zip?
What is the SHA-256 hash of GameBooterZero.zip?
How up to date is this analysis of GameBooterZero.zip?
Community
Member reviews and reports for this exact file hash.