File scan report
Verdict Safe
Is Village
This ZIP game-mod archive holds only web scripts and no programs. None of the 66 antivirus engines that checked it flagged it, and our static analysis found nothing hostile inside.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The archive can be used as a game mod if you trust where it came from. Keep your antivirus enabled while installing it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 66 flagged
- Flagged 0
- No detection 66
- No result 9
- Code signing Not applicable
- Test run Not run
- First seen 2d ago
Chapter 02
Why we think so
2 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Our static analysis found nine entries, none of them executable programs, plus three JavaScript files typical of an HTML5 game translation mod. No malware database or community rule matched it.
All 18 major antivirus engines and every other reporting engine returned clean results for the archive. Our static analysis opened it and found no executables, shortcuts, disguised or encrypted entries, and none of our static rules matched. The bundled scripts and their embedded links match HTML5 game code, such as font and gamepad handling. Malware databases and community rule sets have no record of the file. The archive was first seen on Oct 24, 2026, from a single submitter, and was not run in a sandbox, which limits confidence somewhat.
What We Detected
None of the 66 antivirus engines that checked it flagged this ZIP archive. Our static analysis found nine entries: no executable programs, no shortcuts, and three JavaScript files belonging to a browser-based game. No malware database or community rule matched it.
Threat Behavior
No observation from the test run is available. Statically, the scripts contain ordinary web links of the kind found in HTML5 game engines. None of our static rules matched, and nothing indicates downloading or running other programs.
What To Do Now
The archive appears to be a game translation mod. Only use mods from a source you trust, and keep your security software enabled when extracting and running game files.
Where this verdict could be wrong2 caveats
- The archive was submitted by a single source and first seen on Oct 24, 2026. No sandbox run exists, so the bundled JavaScript was only examined statically.
- One embedded link points to a raw IP address. Its reputation was not checked.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- No detections from any of the 75 engines, including all major antivirus engines
- The archive contains no executable programs, shortcuts or disguised files
- Our static analysis found no hostile patterns in the bundled scripts
- No matches in malware databases or community rule sets
- Submitted by a single source and first seen on Oct 24, 2026
- No sandbox run is available to confirm behaviour in the test run
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 66 antivirus engines that checked it flag it.
No risky structure found
We opened the uploaded ZIP archive in an isolated sandbox and read its structure without running it.
- thai_font.js1.8 KB · script
- thai_gamepad.js4.3 KB · script
- index.7594d.js2.4 MB · script
- FkLindoRegular.ttf80 KB
- index.html3.3 KB
- Image1.5 MB
- Image581 KB
- 0e7a402d3.9b00e.json11 KB
- 9253fb93-148e-4fcd-b95c-ecfc529cab53.13f2a.json238 KB
5 links found, 1 to a bare IP address. Only domains are shown; paths and query strings are never published.
Checked on Oct 24, 2026 while the file was uploaded. MalwareTips deleted its copy afterwards; VirusTotal keeps the uploaded file.
Sources checked
Every check behind this verdict
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 24, 2026, 1:28 AM UTC
- SHA-256
bf6ad54b9d1bcbe7ab51ed3deb500a46fb36874e1f8f5a8de40bb12313a274f8- SHA-1
f958552eb8b1201d8c36b3a456f9be6d11847bb4- MD5
e0f42f4caa95c6e08bd60396297d8e6d
About this file
VillageRhapsody_Mod_TH_By_MRT.zip is a ZIP file of 2.6 MB.
- Type and size
- ZIP · 2.6 MB
- Signer
- Not applicable
- First seen
- Oct 24, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is VillageRhapsody_Mod_TH_By_MRT.zip safe?
What is VillageRhapsody_Mod_TH_By_MRT.zip?
How many antivirus engines detected VillageRhapsody_Mod_TH_By_MRT.zip?
What is the SHA-256 hash of VillageRhapsody_Mod_TH_By_MRT.zip?
Is it safe to open or extract VillageRhapsody_Mod_TH_By_MRT.zip?
How up to date is this analysis of VillageRhapsody_Mod_TH_By_MRT.zip?
Community
Member reviews and reports for this exact file hash.