File scan report
Verdict Safe
Is Bubble
Only Jiangmin flagged this older game archive with a generic label, while all major antivirus engines remained silent and the completed sandbox run found no malicious outcome.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Keep security protection enabled and use the archive only if it came from a source you trust. For added assurance, scan the extracted files individually before execution.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
1 of 66 flagged
- Flagged 1
- No detection 65
- No result 9
- Code signing Not applicable
- Test run Completed
- First seen 4y ago
Chapter 02
Why we think so
4 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
The single generic detection is confined to one less reliable engine, with none of the 66 antivirus engines that checked it providing major corroboration. One completed sandbox run launched the extracted game executable without a malicious verdict, although a defense-evasion mapping and unclassified extracted files warrant ordinary caution.
One of the 66 antivirus engines that checked it flagged the archive, and that finding came from Jiangmin as a generic HEQMK label. All 17 major antivirus engines that reported results were silent, creating a strong false-positive pattern. is a meaningful counter-signal, but it is isolated and lacks supporting detections or researcher-specific rules. Four extracted files have no saved verdict, and no complete contacted-host reputation result is available, so those areas remain unverified rather than clean.
What We Detected
Only 1 of the 66 antivirus engines that checked it flagged the archive. Jiangmin supplied the generic label Trojan.Generic.heqmk, while all 17 major antivirus engines that reported results produced no detection and no engine-family consensus formed.
Threat Behavior
One completed sandbox run extracted and launched BubbleGutsSim.exe without producing a malicious verdict. It recorded no persistence, process injection, or sample network contacts. The run did map T1562.001, associated with impairing defenses, but this was not corroborated by other hostile behavior. Four extracted files remain unclassified, and a complete host-reputation cross-check is unavailable.
What To Do Now
Keep security software enabled and obtain the archive from its original trusted distribution source. If its origin is uncertain, rescan the extracted executable and files before running them, particularly because the file it created verdict coverage is incomplete.
Where this verdict could be wrong3 caveats
- Jiangmin identified Trojan.Generic.heqmk, although no other engine corroborated that generic family label.
- The runtime mapping included T1562.001, which can indicate impairment of defenses, but the lone completed run produced no malicious verdict.
- Four extracted files lack saved verdicts, so their safety has not been independently established.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Only 1 of the 66 antivirus engines that checked it raised a detection, and it came from a less reliable engine.
- All 17 reporting major antivirus engines produced no detection.
- The completed sandbox run returned no malicious result.
- No persistence or process injection was recorded.
- No malware-specific researcher rules or malware-repository match corroborated the detection.
- Jiangmin reported a generic trojan label.
- The sandbox mapped behavior associated with impairing defenses.
- Four extracted files do not have saved classifications.
- No complete contacted-host reputation result is available.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 6sandbox rule tags
- 5spawned processes
- 0network contacts
- 10filesystem & mutex artifacts
Includes the sandbox verdicts, 6 mapped techniques, every process, file, registry and network entry and 4 dropped files.
Show the technical evidenceChapter 04
Technical details
1 of the 66 antivirus engines that checked it flags it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The saved verdict treats these detections as likely false positives.
- JiangminTrojan.Generic.heqmk
File fingerprint
- Last analyzed
- Oct 14, 2026, 11:52 AM UTC
- SHA-256
71662a93a48fe9a01492979a24928fc026a849377cff6bb9b878c034c3b5342f- SHA-1
d87287148475e017c9d5649b9d02d612c1ed4ba8- MD5
b2ac6fcc9807409439da608d0aa9e482
About this file
BubbleGutsSimulator.zip is a ZIP file of 27.9 MB.
- Type and size
- ZIP · 27.9 MB
- Signer
- Not applicable
- First seen
- Nov 15, 2021On VirusTotal.
- Submitted by
- 88 distinct sources
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is BubbleGutsSimulator.zip safe?
What is BubbleGutsSimulator.zip?
How many antivirus engines detected BubbleGutsSimulator.zip?
What is the SHA-256 hash of BubbleGutsSimulator.zip?
Is it safe to open or extract BubbleGutsSimulator.zip?
How up to date is this analysis of BubbleGutsSimulator.zip?
Community
Member reviews and reports for this exact file hash.