FTB App

How we got this result

1. Files checkedWe compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.10 of 10 official filesLast checked on 3 Nov 2026
2. Deep checkOur own tools read the code of each current file and look for what harmful code does, like stealing logins or running hidden programs.7 of 10 official filesLast checked on 3 Nov 2026
3. Passed Nothing harmful found in its 10 official files.Our checks look for known signs of harm. They cannot prove that a file is harmless.

At a glance

Download

Official files for Windows, macOS and Linux.

Fake sites

1 fake site found.

Privacy

Sends data. It sends data we could not identify.

Releases

Latest release on 11 Aug 2026.

Source and links

Source code

Public on GitHub

Official site

feed-the-beast.com

Official site

1 site uses its name to give other files. See Fake sites

Download page

feed-the-beast.com/ftb-app

Newest version

1.30.1, released on 11 Aug 2026

Account

A Microsoft account.

Ads

The app shows ads, says its site. It is also offered through Overwolf.

What we checked

A launcher runs on your computer like any program, and it downloads the game and its mods, so harmful code in it can steal your accounts or files.

Files checkedEach official file is downloaded on a separate machine, opened with every file inside it and never run. ClamAV, a free antivirus, and our YARA rules look for known signs of harm in all of it.

10 of its 10 official files, with every file inside them.Last checked on 3 Nov 2026

Deep checkOur own tools read the Java code in the files and look for what harmful code does, like stealing logins or running hidden programs. They read Java code only.

7 of its 10 official files. 3 hold no Java code: programs made for one system.

SignatureThe name of the company or person that signed the file. A file changed after signing loses its signature.

Signed by Feed The Beast Ltd.Our tool could not confirm the certificate chains

What we found

What its Java code can do. None of this is harmful by itself: many launchers and mods do the same.

Accepts connections from other computers

The code references server sockets or an embedded web server. Used by some tools for local web interfaces, profilers, or LAN features.In all 7 files whose Java code we read

An archive has a misleading name

A file is a zip or Java class data although its name says otherwise. Some file formats do this on purpose.In all 7 files whose Java code we read

Can connect to the internet

It has code that can go online, for example to check for updates, sign you in or download the game. What it sends is in Privacy.In all 7 files whose Java code we read

Can download and run new code

One class references both network APIs and class loading. This is the pattern of auto-updating loaders, but also of some harmful programs. Only the source of the downloaded data tells which.In all 7 files whose Java code we read

Can run scripts

References JavaScript, Groovy, Lua or similar engines. Programs use them for settings, add-ons or their interface.In all 7 files whose Java code we read

Contains code made for your system

Native libraries (.dll, .so, .dylib) run outside the Java sandbox. Used for speed, compression, audio, graphics or database engines.In all 7 files whose Java code we read

Creates code while it runs

The code can create or load pieces of code while it runs. Launchers load the game, its mod loaders and their own modules this way.In all 7 files whose Java code we read

Starts other programs

The code can start another program on your computer. Common reasons: opening a web link or a folder, reading hardware information, launching a helper tool.In all 7 files whose Java code we read

What we checked

A launcher can send information about you over the internet, such as your player name or your login.

Deep checkWe read the code and list each web address it can contact, and what it sends. We leave out code that is never used.

The Java code of all 7 files that hold some. See each file in Releases

Web addresses

api.feed-the-beast.com: Purpose not known.Sends: data we could not identify. The code sends something, but our checks cannot tell whatmaven.minecraftforge.net: Purpose not known.Sends: nothing about youAddress built while it runsThe code builds this address while it runs, so it is not written in the file.: Checks for a new version of the launcher.Sends: nothing about you

Also named in its codeAddresses written in its code that no code we read contacts: a link shown to you, a default setting, or code we could not follow.

api.adoptium.netapi.minecraftservices.comauth.xboxlive.comcdn.feed-the-beast.comedge.forgecdn.netgithub.comlaunchermeta.mojang.comlibraries.minecraft.netlogging.apache.orglogin.microsoftonline.commaven.neoforged.netmeta.fabricmc.netresources.download.minecraft.netsessionserver.mojang.comsupport.microsoft.comuser.auth.xboxlive.comwww.owasp.orgxml.apache.orgxsts.auth.xboxlive.com

How to know the official site

Official site

feed-the-beast.com

Files come from

download.overwolf.com and piston.feed-the-beast.com

Signed byThe name of the company or person that signed the file. A file changed after signing loses its signature.

Feed The Beast Ltd, on ftb-app-win-1.30.1-x64.exe

SHA-256A fingerprint of the file. The same fingerprint means the same file, byte for byte.

ftb-app-win-1.30.1-x64.exeb5c3bfb57f849ee62981a611ec91b2b53fe2e19f82a2ea75107a23716bce256fEvery official file and its SHA-256, in Releases

The 1 fake site we foundChecked on 2 Nov 2026

Of these, it gives a file with malware. Sites in one fold share their pages and their download.

If you downloaded a file from one of these sites

1. Drop the file in the Scanner. It tells you if it is an official file of FTB App or a file of these sites.
2. If it is not an official file and you have not opened it, delete it.
3. If you opened it: run a full scan with your antivirus. On Windows, the built-in one is Microsoft Defender, in the Windows Security app.
4. If you signed in to the launcher it installed: use "sign out everywhere" in your Microsoft security settings and change your Microsoft account password.
5. Get FTB App from its official site, feed-the-beast.com .