File scan report
Verdict Safe
Is valheim-
None of the 65 antivirus engines that checked it flagged this JAR, while the completed sandbox run found no offensive behavior or malicious runtime verdict.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The evidence supports normal use when the file came from its expected source. Keep security protection enabled and replace the file with an official copy if its origin cannot be verified.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the project's own website.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 65 flagged
- Flagged 0
- No detection 65
- No result 13
- Code signing Not applicable
- Test run Completed
- First seen 2y ago
Chapter 02
Why we think so
3 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
One completed sandbox run produced no malicious verdict or high-risk technique, though a file it created remains unclassified and no separate host-reputation check is available.
None of the 65 antivirus engines that checked it flagged the JAR, and there is no named malware-family consensus. The completed sandbox run recorded three routine discovery or file-hiding techniques but no high-risk behavior and no malicious verdict. The sample made no observed network contacts during that run; however, a separate host-reputation cross-check was not available. No malware-specific researcher rules or malware-repository match corroborated a threat. One dropped file lacks a saved classification, but missing child coverage is neutral and does not independently indicate risk.
What We Detected
None of the 65 antivirus engines that checked it flagged the JAR as malicious or suspicious. There was also no malware-family consensus, malware-repository match, or malware-specific researcher-rule match.
Threat Behavior
One completed sandbox run launched the file through Java and returned no malicious verdict. It recorded system-information discovery, security-software discovery, and hidden-file activity, all categorized here as techniques common in legitimate software; no high-risk behavior, persistence, process injection, or observed network contact appeared. One dropped file remains unclassified, and no separate host-reputation result is available.
What To Do Now
Use the file only if it came from the expected Valheim save-tool source, and keep security software enabled. If its origin is uncertain, verify the hash with the publisher or obtain a fresh copy from the official distribution channel.
Where this verdict could be wrong2 caveats
- The sandbox observed system and security-software discovery plus hidden-file activity, but these three techniques are routine and no high-risk behavior was recorded.
- One dropped file has no saved classification, so its nature remains unverified.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 65 antivirus engines that checked it flagged the file.
- All 18 major antivirus engines that reported a result returned no detection.
- The completed sandbox run produced no malicious verdict or high-risk behavior.
- No malware-specific researcher rules or malware-repository match were found.
- No malicious file it created was identified.
- One file created during execution has no saved classification.
- The file has only moderate observed prevalence rather than broad distribution.
- A separate reputation check for contacted hosts was not available, although the sandbox observed no network contacts.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 3sandbox rule tags
- 1spawned processes
- 0network contacts
- 3filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Sandbox verdicts
1- VT: CLEANclean
Techniques observed in the sandbox
3MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1082· System recon
- T1518.001· Checks your AV
- T1564.001· Hides artifacts
Observed activity
Processes started
1Programs the file ran, with their command lines.
java/usr/bin/java -jar /tmp/download.jar
Files
3Files the file created, changed or deleted.
- Written
/proc/3292/coredump_filter - Written
/tmp/hsperfdata_root/3292 - Deleted
/tmp/hsperfdata_root/3292
Chapter 04
Technical details
None of the 65 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 13, 2026, 2:16 PM UTC
- SHA-256
62c3d48b9fedae3c378ccd38a177843d54ccfa54af8b7710f350187424731828- SHA-1
cfc1b93c548482a131ee687fafcc76a58de8fdb9- MD5
dcef898a69a3a31ddb7b0afa030a815c
About this file
valheim-save-tools.jar is a JAR file of 2.5 MB.
- Type and size
- JAR · 2.5 MB
- Signer
- Not applicable
- First seen
- Jul 21, 2024On VirusTotal.
- Submitted by
- 6 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 65 engines flagged this file
13 of the 78 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-236 engines0flagged
- Low-trust11 engines0flagged
View all 78 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BaiduClean
- BitDefenderClean
- BitDefenderFalxNo result
- BitDefenderThetaClean
- BkavNo result
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CybereasonClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FireEyeClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MAXClean
- MaxSecureClean
- McAfeeClean
- McAfeeDNo result
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineNo result
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is valheim-save-tools.jar safe?
What is valheim-save-tools.jar?
How many antivirus engines detected valheim-save-tools.jar?
What is the SHA-256 hash of valheim-save-tools.jar?
Is it safe to open or run valheim-save-tools.jar?
How up to date is this analysis of valheim-save-tools.jar?
Community
Member reviews and reports for this exact file hash.