I got a virus warning on this game.

Confirmed, there's a virus bundled in this one, 21 hits on virustotal: https://www.virustotal.com/#/file/117d2827e4a393e7147a79ddc6c1fd90c633985bfa643996b4b8bcaf0e53937e/detection That, and it doesn't even start up when I tested in sandbox, just shows a blank white window. Could be it's entirely fake, could be sandbox, but I sure as hell am not going to test it outside one.

DARKSiDERS signature I guess, it safe if you want to delete it

The "malicious" exe in here seems to be for steam DRM since this game was released on steam in English (https://store.steampowered.com/app/942270/Kunoichi_Tsubaki/) and then "cracked" by DARKSiDERS (http://m2v.ru/?id=2327882&func=sub&name=Kunoichi.Tsubaki.Uncencored-DARKSiDERS), so in theory it is probably fine.

Looked a bit into this, the darksiders.exe is definitely suspicious and lights up like a Christmas tree on virustotal. While the game.exe is same size as the legit one, the hash (and as such, the contents) does not match. Normal RPGmaker MV Game.exe: https://www.virustotal.com/#/file/32eff0d212e5e514087911a4446bea3353ed19899d238de3321414efc37308ea/details Game.exe in this torrent: https://www.virustotal.com/#/file/71e509bf732f14b2766abd2834781e52c6db4e859f543c68570eb6265e7e648b/details It doesn't trigger any detections, so I'm not saying it's outright malicious, but it has been tampered with. The first time the tampered exe has been uploaded to virustotal is a day before the release of this torrent, take that as you will. Could be they had to change something to do the crack, could be anything. That said, if you're paranoid and want a certainly clean English version of the game, you could take the data files ("www" and "locales" folders) from this torrent as those contain the translation and use any other old RPGmaker MV exe, like the one from the trusted JP release ( https://sukebei.nyaa.si/view/2516599 ) which contains the aforementioned normal and known good RPGmaker game.exe that doesn't require any cracks to begin with. I did that and it works fine and I don't have to deal with whatever nasties may or may not lurk in this one.

The game was released on Steam two days before the upload here, which explains the recentness of both exes. As for the modification of the game.exe perhaps it could be for steam compatibility. I'm not saying it isn't possibly doing something funky but from what we've looked into it isn't outright malicious. For posterity I also looked at a few of the other uploads from this user and none of them contained anything particularly suspicious. Virustotal is not an end-all-be-all, and while it can be a good indicator many of the AVs used in it have false positives all day long, it's well known that scene cracks often trigger many antivirus warnings when they're new and have yet to be added to the whitelists of the various AVs. Take all this as you will. As with anything on the internet you should take your own precautionary measures as you see fit, the above user made a good suggestion for how to take the contents of the game and run them with known good RPG maker assets.

So, is this thing malicious or not?