File scan report
Verdict Safe
Is LUtils-
This Minecraft Fabric mod archive drew no detections from 75 antivirus engines, and our static analysis of its 27 class files found no hostile patterns.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The file appears safe to use as a Fabric mod. Obtain it from the project's official source and keep your antivirus enabled.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the project's own website.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 66 flagged
- Flagged 0
- No detection 66
- No result 9
- Code signing Not applicable
- Test run Not run
- First seen Today
Chapter 02
Why we think so
2 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 66 antivirus engines that checked it flagged this Java archive. No public malware database or community rule lists it. The file is rare and was first seen on Oct 27, 2026, and it has not been run in a sandbox.
None of the 66 antivirus engines that checked it flagged the archive, including all 18 major antivirus engines that reported on it. Our static analysis inflated all 27 class files and found no suspicious rule matches or decisive findings. It also found no disguised or encrypted entries. The archive describes itself as a Fabric mod for Minecraft, but that metadata comes from the author and is unverified. Reference databases and community rule sets returned no matches. Confidence is moderate rather than high because the file has a single submitter and no observation from the test run.
What We Detected
None of the 66 antivirus engines that checked it flagged this Java archive. Our static analysis opened all 27 compiled classes and found no suspicious rules, no embedded payload disguise and no malware-family YARA matches. The archive identifies itself as a Fabric mod named LUtils, version 0.5.0. That metadata is declared by the author and has not been verified.
Threat Behavior
No sandbox run is available, so we have no observation of what the mod does when it ran. Its contents look like ordinary game-modification code. No malware database or community rule set lists this file. The file is rare: it was first seen on Oct 27, 2026 and was submitted by one source.
What To Do Now
The available evidence supports using this mod. Download it only from the project's official release page, and rescan it if a newer copy differs.
Where this verdict could be wrong2 caveats
- The file was first seen on Oct 27, 2026 and was submitted by a single source. Malicious game mods can stay undetected for a while after release.
- No sandbox run observed what the mod does when Minecraft loads it, so behaviour in the test run is unconfirmed.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 66 antivirus engines that checked it flagged it, including all major antivirus engines that reported
- Our static analysis of all 27 class files found no hostile patterns
- No listing in public malware databases or community rule sets
- Rarely submitted file, first seen on Oct 27, 2026
- No observation from the test run of the mod is available
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 66 antivirus engines that checked it flag it.
Programs inside
We opened the uploaded Java archive in an isolated sandbox and read its structure without running it. It contains programs. Our inspection reads the structure and the code of the first program; whether the programs are safe is judged by the antivirus and sandbox evidence.
27 class files, 27 read. Identity is declared by the author and not verified.
- LUtils.class2.4 KB · program
- EntityMixin.class1.6 KB · program
- HandledScreenMixin.class2.1 KB · program
- WorldRendererMixin.class1.8 KB · program
- AutoDrool$EnchantPreference.class1.4 KB · program
- AutoDrool$ListMode.class1.2 KB · program
- AutoDrool$SwapInfo.class945 B · program
- AutoDrool.class17 KB · program
- AutoMapAlign.class5.0 KB · program
- AutoMapCopy.class5.8 KB · program
- BlockOutline.class12 KB · program
- Eloadra$hModes.class1.2 KB · program
Checked on Oct 27, 2026 while the file was uploaded. MalwareTips deleted its copy afterwards; VirusTotal keeps the uploaded file.
Sources checked
Every check behind this verdict
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 27, 2026, 2:01 PM UTC
- SHA-256
f7823037bc4cf5b73261ec3ef97c88dd9ea8b0c862987d7288edce29e3c618e3- SHA-1
21a513e085f1381290552abbe10ad1b629db746b- MD5
c4d3aca975049f63fa8375651b0ca9bf
About this file
LUtils-1.21.4-0.5.0.jar is a JAR file of 77.1 kB.
- Type and size
- JAR · 77.1 kB
- Signer
- Not applicable
- First seen
- Oct 27, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 66 engines flagged this file
9 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-235 engines0flagged
- Low-trust13 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookClean
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. That limits reputation evidence, but rarity alone is not proof of malware.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is LUtils-1.21.4-0.5.0.jar safe?
What is LUtils-1.21.4-0.5.0.jar?
How many antivirus engines detected LUtils-1.21.4-0.5.0.jar?
What is the SHA-256 hash of LUtils-1.21.4-0.5.0.jar?
Is it safe to open or run LUtils-1.21.4-0.5.0.jar?
How up to date is this analysis of LUtils-1.21.4-0.5.0.jar?
Community
Member reviews and reports for this exact file hash.