File scan report
Verdict Safe
Is Bootstrap
Only 1 of the 69 antivirus engines that checked it flagged this executable with a generic machine-learning score, while major antivirus engines and completed observations from…
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
1 of 69 flagged
- Flagged 1
- No detection 68
- No result 6
- Code signing Unsigned
- Test run Completed
- First seen 10d ago
Chapter 02
Why we think so
4 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Trapmine alone flagged the executable, using a generic machine-learning label; none of the 18 reporting major antivirus engines detected it. Completed observations from the test run showed no high-risk techniques, injection targets, malicious sandbox result, or sample-attributed network activity, making the isolated detection likely a false positive.
All 18 reporting major antivirus engines returned no detection, and no engine identified a malware family. Five completed sandbox runs produced no malicious result, high-risk technique, named injection target, persistence indicator, file it created, or sample-attributed network contact. No MalwareBazaar entry or malware-specific YARA rule corroborates the isolated alert. The main uncertainties are that the executable is unsigned, recently observed, and submitted by only three sources; additionally, no complete contacted-host reputation result or our own static analysis is available.
What We Detected
Only 1 of the 69 antivirus engines that checked it flagged the executable. Trapmine supplied a generic machine-learning score rather than a named malware family, while all 18 reporting major antivirus engines returned no detection. No public sample-database entry or malware-specific community rule corroborated that alert.
Threat Behavior
Five completed sandbox runs recorded no malicious result, high-risk technique, named injection target, persistence indicator, file it created, or sample-attributed network activity. The executable was not packed and its code section did not have unusually high entropy. A complete contacted-host reputation check was not available, and our static analysis was not performed.
What To Do Now
The isolated alert is most consistent with a false positive. Because the executable is unsigned and recently observed, obtain it only from the game developer or another trusted distribution channel, keep security software enabled, and verify the SHA-256 hash before running it.
Where this verdict could be wrong2 caveats
- The executable is unsigned and has been submitted by only three sources, so its publisher and distribution channel cannot be established.
- A previous file sharing this import hash received a cautious assessment, although that hash can be shared by unrelated files built with the same framework.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Only 1 of the 69 antivirus engines that checked it flagged the file, using a generic machine-learning label.
- All 18 reporting major antivirus engines returned no detection.
- Five completed sandbox runs produced no malicious result or high-risk observed behavior.
- No malware-specific YARA rules, public sample-database entry, malicious file it created, packing, or high-entropy code were found.
- The executable is unsigned, so no verified publisher identity establishes its origin.
- It is recently observed and has only three known submitters.
- A complete reputation check for contacted hosts was not available, although the sandbox runs recorded no sample-attributed contacts.
- Our static analysis of the uploaded bytes was not available.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in 5 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 5isolated sandbox runs
- 13sandbox rule tags
- 2spawned processes
- 0network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was detonated in 5 sandboxes and its runtime behaviour was observed.
Sandbox verdicts
1- VT: CLEANclean
Techniques observed in the sandbox
13MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1012
- T1027· Obfuscated code
- T1027.002· Obfuscated code
- T1036
- T1070· Covers its tracks
- T1070.006· Covers its tracks
- T1071· Application protocol
- T1082· System recon
- T1083· Scans your files
- T1129· Loads modules
- T1553
- T1553.002
- T1574· Execution hijack
Observed activity
Processes started
2Programs the file ran, with their command lines.
DSClient.exe"C:\Users\<USER>\Desktop\DSClient.exe"DSClient.exe"C:\Users\user\Desktop\DSClient.exe"
Chapter 04
Technical details
1 of the 69 antivirus engines that checked it flags it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The saved verdict treats these detections as likely false positives.
- Trapminemalicious.moderate.ml.score
File fingerprint
- Last analyzed
- Oct 20, 2026, 8:24 PM UTC
- SHA-256
50bb2a7b22ae738db603b103eb4dbf911eb994a3638ce100ae10a8978b87205a- SHA-1
15bbe554ec8bd5482b00676e079b55f2153d48b8- MD5
4a9c19b10846cf8f2b628bdc461069c2
About this file
BootstrapPackagedGame-Win64-Shipping.exe says it is BootstrapPackagedGame, 376.1 kB.
- Claims to be
- BootstrapPackagedGameFrom the file's own version information, written by whoever built it.
- Original name
- BootstrapPackagedGame-Win64-Shipping.exeMatches the shared file name.
- Type and size
- Win32 EXE · 376.1 kB
- Signer
- UnsignedNo code signature.
- First seen
- Oct 16, 2026On VirusTotal.
- Submitted by
- 3 distinct sourcesRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 6.83 of 8
First scanned
Antivirus consensus
1 of 69 engines flagged this file
6 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-234 engines0flagged
- Low-trust17 engines1flagged
View all 75 engine results
- TrapmineMalicious: malicious.moderate.ml.score
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleNo result
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaNo result
- ZoneAlarmClean
- ZonerClean
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Barely seen in the wild and first surfaced recently. 1 antivirus detection make that low prevalence materially relevant, but rarity alone is not proof of malware.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is BootstrapPackagedGame-Win64-Shipping.exe safe?
What is BootstrapPackagedGame-Win64-Shipping.exe?
How many antivirus engines detected BootstrapPackagedGame-Win64-Shipping.exe?
What is the SHA-256 hash of BootstrapPackagedGame-Win64-Shipping.exe?
Is it safe to run BootstrapPackagedGame-Win64-Shipping.exe?
How up to date is this analysis of BootstrapPackagedGame-Win64-Shipping.exe?
Community
Member reviews and reports for this exact file hash.