File scan report
Verdict Safe
Is Create Craft Season 6 1. 1. 0. mrpack safe? Yes, no threats found.
This Minecraft modpack archive shows no detections from 75 engines, no hostile findings in our static analysis, and a clean sandbox run, though its bundled mods come from third…
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
This modpack appears clean; install it only from a trusted modpack source and keep your security software active while playing.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 39 flagged
- Flagged 0
- No detection 39
- No result 36
- Code signing Not applicable
- Test run Completed
- First seen 5d ago
Chapter 02
Why we think so
2 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 39 antivirus engines that checked it flagged this modpack, and our static analysis found only ordinary mod files with no disguised or hidden entries. A sandbox run that opened the archive returned clean. The pack is very new, so download it only from a trusted modpack platform.
This file is a Modrinth-format Minecraft modpack, which is a ZIP archive holding Java mod files and configuration scripts. None of the 39 antivirus engines that checked it flagged it, and eight major engines that completed their scan reported it clean. Our static analysis inspected 47 entries and found no disguised files, path tricks, encryption or hostile scripts. The single sandbox run only listed the archive contents and returned clean. The main caveat is that the bundled mods are executable Java code from many authors, and the file is with no community history.
What We Detected
No engine flagged this modpack (0 of 75). Our static analysis found 47 archive entries, mostly Minecraft mod files and a few configuration scripts, with no disguised entries, no path traversal and no encryption. No public malware database or community rule matched the file.
Threat Behavior
One sandbox run opened the archive with standard archive tools and returned a clean result, with no high-risk techniques and no network contacts by the sample. The mods inside are Java code that runs when the game loads them, so their trustworthiness depends on where the pack came from.
What To Do Now
Install the pack through a reputable launcher or modpack site, keep your antivirus enabled, and avoid packs passed around through unofficial links or direct messages.
Where this verdict could be wrong2 caveats
- The modpack bundles 32 third-party Java mod files that run with full user privileges when the game launches; a malicious mod inside a pack would not necessarily be caught by an archive-level scan.
- The file is with a single submitter, so there is no community history yet, and several major engines timed out on this large archive.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 39 antivirus engines that checked it flagged the file
- Our static analysis found no hidden, disguised or hostile entries in the archive
- A sandbox run of the archive returned clean
- No match in public malware databases or community malware rules
- Bundles 32 third-party Java mod files that run with your user permissions when the game starts
- File with only one submission so far
7 sources checked · 6 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in 1 isolated test; no test environment rated what it did as risky.
Test run summary
Capture complete- 1isolated sandbox run
- 4sandbox rule tags
- 4spawned processes
- 0network contacts
- 3filesystem & mutex artifacts
What this file did when executed
This file was detonated in 1 sandbox and its runtime behaviour was observed.
Sandbox verdicts
1- VT: CLEANclean
Techniques observed in the sandbox
4MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1064
- T1518.001· Checks your AV
- T1543.002· Service install
- T1564.001· Hides artifacts
Observed activity
Processes started
4Programs the file ran, with their command lines.
exo-open/usr/bin/exo-open exo-open "/tmp/Create Craft Season 6 1.1.0.mrpack"exo-open/usr/bin/exo-open -engrampa/usr/bin/engrampa engrampa "/tmp/Create Craft Season 6 1.1.0.mrpack"7z/usr/lib/p7zip/7z l -slt -bd -y -- "/tmp/Create Craft Season 6 1.1.0.mrpack"
Files
3Files the file created, changed or deleted.
- Written
/root/.cache/dconf/user - Written
/var/log/auth.log.1.gz - Written
/var/log/kern.log.1.gz
Sandbox background — not the file
11The analysis machine's own processes and connections, recorded in every run.
- VM process
dbus-launch/usr/bin/dbus-launch dbus-launch --autolaunch=a39eb3ed78b7401fb6809ed0c562a5b1 --binary-syntax --close-stderr - VM process
sh/bin/sh sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log " - VM process
invoke-rc.d/usr/sbin/invoke-rc.d invoke-rc.d --quiet cups restart - VM process
runlevel/sbin/runlevel - VM process
systemctl/usr/bin/systemctl systemctl --quiet is-enabled cups.service - VM process
ls/usr/bin/ls ls /etc/rc[S2345].d/S[0-9][0-9]cups
Show all 11 entries for sandbox background — not the file
- VM process
systemctl/usr/bin/systemctl systemctl --quiet is-active cups.service - VM process
gzip/bin/gzip - VM process
sh/bin/sh sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog - VM process
rsyslog-rotate/usr/lib/rsyslog/rsyslog-rotate - VM process
systemctl/usr/bin/systemctl systemctl kill -s HUP rsyslog.service
Chapter 04
Technical details
None of the 39 antivirus engines that checked it flag it.
Programs inside
We opened the uploaded ZIP archive in an isolated sandbox and read its structure without running it. It contains programs. Our inspection reads the structure and the code of the first program; whether the programs are safe is judged by the antivirus and sandbox evidence.
- aeroworks-1.5.0.jar790 KB · program
- cbc_ballistics-1.3.0a-neoforge-1.21.1.jar298 KB · program
- coebetterfinder-1.0.2.jar102 KB · program
- corpse-neoforge-1.21.1-1.1.13.jar254 KB · program
- createbb-4.0.1.jar541 KB · program
- CreateNumismatics-1.0.19integration+neoforge-mc1.21.1.jar730 KB · program
- createpropulsion-nightly-1.1.5-6217f585.jar1.7 MB · program
- create_blueprint_antidupe-1.0.0.jar7.9 KB · program
- create_connected-1.3.3-mc1.21.1.jar6.8 MB · program
- cupboard-1.21.1-4.1.jar30 KB · program
- drivebywire-0.3.0.jar273 KB · program
- easy-villagers-neoforge-1.21.1-1.1.42.jar457 KB · program
3 links found. Only domains are shown; paths and query strings are never published.
Checked on Oct 21, 2026 while the file was uploaded. MalwareTips deleted its copy afterwards; VirusTotal keeps the uploaded file.
Sources checked
Every check behind this verdict
7 sources checked · 6 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 21, 2026, 12:55 AM UTC
- SHA-256
9480ece680a2610dabe68998fe96adc92ef865be2856e4d7c5f20285d6faede7- SHA-1
c9902dd19cf19b7c7d21bd2fc00137c5bd562b48- MD5
9d147c6f2bec92f98f17bf30d9b24c8f
About this file
Create Craft Season 6 1.1.0.mrpack is a ZIP file of 36.3 MB.
- Type and size
- ZIP · 36.3 MB
- Signer
- Not applicable
- First seen
- Oct 21, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 39 engines flagged this file
36 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-18 engines0flagged
- Tier-221 engines0flagged
- Low-trust10 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacNo result
- Antiy-AVLClean
- APEXNo result
- ArcabitNo result
- AvastNo result
- Avast-MobileClean
- AVGNo result
- AviraClean
- BitDefenderNo result
- BitDefenderFalxNo result
- BkavNo result
- CAT-QuickHealNo result
- ClamAVNo result
- CMCClean
- CrowdStrikeClean
- CTXNo result
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebNo result
- ElasticNo result
- EmsisoftNo result
- ESET-NOD32Clean
- F-SecureNo result
- FortinetClean
- GDataClean
- GoogleNo result
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminNo result
- K7AntiVirusClean
- K7GWNo result
- KasperskyNo result
- KingsoftClean
- LionicNo result
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaNo result
- RisingNo result
- SangforNo result
- SentinelOneClean
- SkyhighNo result
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSNo result
- TrendMicroNo result
- TrendMicro-HouseCallNo result
- TrustlookClean
- VaristNo result
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexNo result
- ZillyaNo result
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. That limits reputation evidence, but rarity alone is not proof of malware.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Create Craft Season 6 1.1.0.mrpack safe?
What is Create Craft Season 6 1.1.0.mrpack?
How many antivirus engines detected Create Craft Season 6 1.1.0.mrpack?
What is the SHA-256 hash of Create Craft Season 6 1.1.0.mrpack?
Is it safe to open or extract Create Craft Season 6 1.1.0.mrpack?
How up to date is this analysis of Create Craft Season 6 1.1.0.mrpack?
Community
Member reviews and reports for this exact file hash.