File scan report
Verdict Safe
Is fabric-
Zero detections across 75 engines, no sandbox malice, and no external-intel hits on a JAR.
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The evidence supports treating the file as safe for normal use; continue monitoring for emerging reputation data.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the project's own website.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Completed
- First seen 1mo ago
Chapter 02
Why we think so
0 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 63 antivirus engines that checked it returned clean. Sandbox execution produced no malicious verdict and no malicious files it created were dropped. The file is a rare, one-day-old JAR with no reputation history.
The complete absence of malicious detections from every engine tier, including 16 major antivirus engines reporting clean, is the strongest signal. Sandbox analysis surfaced one MITRE technique but returned no malicious verdict and no malicious files it created. External intelligence sources (CIRCL, MalwareBazaar, YARAify) also returned no hits. The file was first seen on Sep 1, 2026 and has no prior reputation, yet nothing in the evidence suggests malice.
What We Detected
75 antivirus engines scanned the JAR; none flagged it malicious or suspicious. 16 major antivirus engines explicitly returned clean. Sandbox execution logged one MITRE technique (T1543.002) but produced no malicious verdict and dropped only benign files.
Threat Behavior
No contacted domains, no malicious files it created, and no external-intel matches. The single MITRE technique appears related to process or service manipulation but lacks corroboration from sandbox verdicts or other signals.
What To Do Now
The file can be used with normal caution. Keep security software enabled and scan again after broader reputation data accumulates.
Where this verdict could be wrong1 caveat
- The sandbox's offensive-technique list contains T1543.002 (Create or Modify System Process) — single MITRE technique flagged but no sandbox verdict or other corroboration.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Zero malicious detections across 75 engines
- No malicious sandbox verdict
- No malicious files it created
- No external intelligence hits
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 5sandbox rule tags
- 1spawned processes
- 0network contacts
- 7filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
5MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1064
- T1082· System recon
- T1518.001· Checks your AV
- T1543.002· Service install
- T1564.001· Hides artifacts
Observed activity
Processes started
1Programs the file ran, with their command lines.
java/usr/bin/java -jar /tmp/sample.jar
Files
7Files the file created, changed or deleted.
- Written
/proc/3543/coredump_filter - Written
/tmp/hsperfdata_root/3543 - Written
/var/log/auth.log.1.gz - Written
/var/log/dpkg.log.1.gz - Written
/var/log/kern.log.1.gz - Written
/var/log/syslog.1.gz
Show all 7 entries for files
- Deleted
/tmp/hsperfdata_root/3543
Sandbox background — not the file
11The analysis machine's own processes and connections, recorded in every run.
- VM process
gzip/bin/gzip - VM process
sh/bin/sh sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log " - VM process
invoke-rc.d/usr/sbin/invoke-rc.d invoke-rc.d --quiet cups restart - VM process
runlevel/sbin/runlevel - VM process
systemctl/usr/bin/systemctl systemctl --quiet is-enabled cups.service - VM process
ls/usr/bin/ls ls /etc/rc[S2345].d/S[0-9][0-9]cups
Show all 11 entries for sandbox background — not the file
- VM process
systemctl/usr/bin/systemctl systemctl --quiet is-active cups.service - VM process
sh/bin/sh sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog - VM process
rsyslog-rotate/usr/lib/rsyslog/rsyslog-rotate - VM process
systemctl/usr/bin/systemctl systemctl kill -s HUP rsyslog.service - VM process
sh/bin/sh sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/mail.info/var/log/mail.warn/var/log/mail.err/var/log/mail.log/var/log/daemon.log/var/log/kern.log/var/log/auth.log/var/log/user.log/var/log/lpr.log/var/log/cron.log/var/log/debug/var/log/messages
Chapter 04
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Sep 1, 2026, 2:12 PM UTC
- SHA-256
da6d8cf67f6cb53e5d90fa9a74ff26348a82e600dcc9a54fe1b8319e81b53d46- SHA-1
f0feb69947b66604cf92a1628fdb69fb44d36a3d- MD5
c48e4aa76ca88e9354171a1460480971
About this file
fabric-api-0.116.8-1.21.1.jar is a JAR file of 18.8 MB.
- Type and size
- JAR · 18.8 MB
- Signer
- Not applicable
- First seen
- Sep 1, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 63 engines flagged this file
12 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-117 engines0flagged
- Tier-233 engines0flagged
- Low-trust13 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleNo result
- GridinsoftClean
- huorongClean
- IkarusNo result
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookClean
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is fabric-api-0.116.8-1.21.1.jar safe?
What is fabric-api-0.116.8-1.21.1.jar?
How many antivirus engines detected fabric-api-0.116.8-1.21.1.jar?
What is the SHA-256 hash of fabric-api-0.116.8-1.21.1.jar?
Is it safe to open or run fabric-api-0.116.8-1.21.1.jar?
How up to date is this analysis of fabric-api-0.116.8-1.21.1.jar?
Community
Member reviews and reports for this exact file hash.