File scan report

Verdict Safe

Analyzed Aug 28, 20261 month ago

Is animatica-0.6.3+26.2.jar safe? Yes, no threats found.

No antivirus engine flagged the JAR; sandbox showed limited suspicious API calls without malicious verdict.

Moderate evidence · No engine flags it, but no publisher signature confirms who made it.

Open or run it as usual if it came from the official source

Good practice2 tips

We found nothing harmful in this file.

Run it only if it came from the project's own website.
Keep your security software and system updates switched on.

No scanner can promise a file is 100% safe.

Why we think so

Reads the latest antivirus results for this file's hash. Nothing is uploaded.

Antivirus results

0 of 65 flagged

Flagged 0
No detection 65
No result 10

Fileanimatica-0.6.3+26.2.jar117.4 kBSHA-256 6724b477f35b…4bfc88

Code signing Not applicable
Test run Completed
First seen 3mo ago

None of the 65 antivirus engines that checked it flag it.

Chapter 02

Why we think so

1 point against it and 3 in its favour, checked against the scan evidence.

Analyst conclusion

Zero detections across 75 engines and no malicious sandbox verdict despite three MITRE techniques. Medium prevalence and clean file it created results support a safe classification.

6 sources checked · 5 complete · 1 not needed or not applicable. See every source

Chapter 03

What it did in our test

It ran in our isolated test environment; no test environment rated what it did as risky.

Test run summary

Capture complete

15sandbox rule tags
3spawned processes
0network contacts
14filesystem & mutex artifacts

Runtime behaviour

What this file did when executed

This file was run in a sandbox and its runtime behaviour was observed.

Techniques observed in the sandbox

15

MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.

T1055· Process injection
T1059· Runs commands
T1064
T1074
T1082· System recon
T1105· Network file transfer
T1106
T1129· Loads modules
T1202
T1518.001· Checks your AV
T1543.002· Service install
T1562.001· Disables security
T1564· Hides artifacts
T1564.001· Hides artifacts
T1564.003· Hides artifacts

Observed activity

Processes started

3

Programs the file ran, with their command lines.

javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\<USER>\Desktop\runtime.jar"
cmd.exeC:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Program Files\Java\jre1.8.0_441\bin\java.exe" -javaagent:"C:\Users\user\AppData\Local\Temp\jartracer.jar" -jar "C:\Users\user\Desktop\sample.jar"" >> C:\cmdlinestart.log 2>&1
java.exe"C:\Program Files\Java\jre1.8.0_441\bin\java.exe" -javaagent:"C:\Users\user\AppData\Local\Temp\jartracer.jar" -jar "C:\Users\user\Desktop\sample.jar"

Files

14

Files the file created, changed or deleted.

WrittenC:\Users\<USER>\AppData\Local\Temp\hsperfdata_<USER>\4588
WrittenC:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
WrittenC:\ProgramData\Oracle\Java\.oracle_jre_usage\17dfc292991c8786.timestamp
WrittenC:\Users\user\AppData\Local\Temp\hsperfdata_user
WrittenC:\Users\user\AppData\Local\Temp\hsperfdata_user\6904
WrittenC:\cmdlinestart.log

Show all 14 entries

Written\Device\ConDrv\\Connect
Written/proc/3588/coredump_filter
Written/tmp/hsperfdata_root/3588
Written/var/log/auth.log.1.gz
Written/var/log/dpkg.log.1.gz
Written/var/log/kern.log.1.gz
Written/var/log/syslog.1.gz
Deleted/tmp/hsperfdata_root/3588

Sandbox background — not the file

12

The analysis machine's own processes and connections, recorded in every run.

VM processicacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
VM processconhost.exeC:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
VM processgzip/bin/gzip
VM processsh/bin/sh sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log "
VM processinvoke-rc.d/usr/sbin/invoke-rc.d invoke-rc.d --quiet cups restart
VM processrunlevel/sbin/runlevel

Show all 12 entries

VM processsystemctl/usr/bin/systemctl systemctl --quiet is-enabled cups.service
VM processls/usr/bin/ls ls /etc/rc[S2345].d/S[0-9][0-9]cups
VM processsystemctl/usr/bin/systemctl systemctl --quiet is-active cups.service
VM processsh/bin/sh sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog
VM processrsyslog-rotate/usr/lib/rsyslog/rsyslog-rotate
VM processsystemctl/usr/bin/systemctl systemctl kill -s HUP rsyslog.service

Dropped payload

Files this sample writes at runtime

This file drops 3 children at runtime. None are currently flagged malicious in our cache. 3 have no saved verdict and were not checked; that is missing coverage, not a finding.

3 not checked

dae4dac40b739eccac8d…234091Not checked
no saved verdict
55f38de247a2ad36b18d…472e00Not checked
no saved verdict
33649c86855ba0c0e57b…ec5982Not checked
no saved verdict

Chapter 04

Technical details

None of the 65 antivirus engines that checked it flag it.

SourceStatusResultChecked

Antivirus enginesVirusTotal · 75 enginesComplete0 of 65 engines flagged it · 10 gave no result DetailsAug 11, 2026

Sandbox runVirusTotal sandboxesCompleteRuntime behaviour was recorded DetailsAug 28, 2026

Contacted hostsMalwareTips URL scannerNot neededThe sandbox recorded no contacted hosts to check

Signature rulesYARAify community rules + MalwareTips rulesComplete1 MalwareTips behaviour rule DetailsAug 28, 2026

Malware sample databaseabuse.ch MalwareBazaarCompleteNot listedAug 28, 2026

Known-software referenceCIRCL hashlookupCompleteNo matchAug 28, 2026

File fingerprint

Last analyzed: Aug 28, 2026, 9:50 PM UTC

SHA-256: 6724b477f35b32b7bc878d73b7d56e6ab89b042cb863ed322c2bb9aa664bfc88
SHA-1: efca21138f620b0c103165b238e93a4ff9daccf0
MD5: 794c9f908f4d088916e78aaec87af26e

About this file

animatica-0.6.3+26.2.jar is a JAR file of 117.4 kB.

Type and size: JAR · 117.4 kB
Signer: Not applicable
First seen: Jul 12, 2026On VirusTotal.
Submitted by: 14 distinct sources

First scanned Aug 28, 2026

Antivirus consensus

0 of 65 engines flagged this file

0 malicious0 suspicious65 not flagged10 no result

10 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.

Tier-117 engines
0flagged
Tier-235 engines
0flagged
Low-trust13 engines
0flagged

No antivirus engine flagged this file.

View all 75 engine results

AcronisClean
AhnLab-V3Clean
AlibabaClean
alibabacloudClean
ALYacClean
Antiy-AVLClean
APEXNo result
ArcabitClean
AvastClean
Avast-MobileClean
AVGClean
AviraClean
BitDefenderClean
BitDefenderFalxNo result
BkavClean
CAT-QuickHealClean
ClamAVClean
CMCClean
CrowdStrikeClean
CTXClean
CylanceNo result
CynetClean
DeepInstinctNo result
DrWebClean
ElasticNo result
EmsisoftClean
ESET-NOD32Clean
F-SecureClean
FortinetClean
GDataClean
GoogleClean
GridinsoftClean
huorongClean
IkarusNo result
JiangminClean
K7AntiVirusClean
K7GWClean
KasperskyClean
KingsoftClean
LionicClean
MalwarebytesClean
MaxSecureClean
McAfeeDClean
MicrosoftClean
MicroWorld-eScanClean
NANO-AntivirusClean
PaloaltoNo result
PandaClean
RisingClean
SangforClean
SentinelOneClean
SkyhighClean
SophosClean
SUPERAntiSpywareClean
SymantecClean
SymantecMobileInsightNo result
TACHYONClean
tehtrisNo result
TencentClean
TrapmineNo result
TrellixENSClean
TrendMicroClean
TrendMicro-HouseCallClean
TrustlookClean
VaristClean
VBA32Clean
VIPREClean
VirITClean
ViRobotClean
WebrootClean
XcitiumClean
YandexClean
ZillyaClean
ZoneAlarmClean
ZonerClean

Rule-based evidence

Signatures and behavior heuristics

Low-severity pattern matches — worth noting but not on their own cause for alarm.

1 heuristic

MITRE ATT&CK profile

Defense evasion× 1

Behavior heuristics

Deterministic patterns derived from scan data and observed runtime behavior

ProcessInjection
T1055
low
VirusTotal's sandbox summary maps this run to MITRE T1055 (Process Injection), but no injected process of the sample's own was recorded (the analysis VM's own WMI adapter, crash handlers and Chrome updater are not counted). VirusTotal maps T1055 on about half of all files no engine flags, so the mapping alone is not evidence of injection.
Evidence
T1055 (sandbox MITRE mapping)

Prevalence

How widely this file has been seen

Moderate prevalence — neither rare nor common. No strong prior applies.

Medium

Unique uploaders

14

Moderate upload volume.

Total submissions

15

Includes repeat uploads by the same source.

First seen

4mo ago

Jul 12, 2026

Prevalence quadrant

Rare · New

Needs evidence-led scrutiny

Common · New

Just-released software

Rare · Old

Niche or internal tooling

Common · Old

Often established software

Chapter 05

Questions & answers

Short answers to the 6 questions people ask most about this file.

Is animatica-0.6.3+26.2.jar safe?

We found nothing harmful in animatica-0.6.3+26.2.jar. None of the 65 antivirus engines that checked it flag it. Run it only if it came from the project's own website.

What is animatica-0.6.3+26.2.jar?

animatica-0.6.3+26.2.jar is a Java program (JAR), about 117.4 kB. VirusTotal first saw it on Jul 12, 2026.

How many antivirus engines detected animatica-0.6.3+26.2.jar?

None of the 65 antivirus engines that checked it flag animatica-0.6.3+26.2.jar. That is a good sign, but not proof, so we also weigh who made it, how widely it is used and what it did in a test run.

What is the SHA-256 hash of animatica-0.6.3+26.2.jar?

The SHA-256 fingerprint of animatica-0.6.3+26.2.jar is 6724b477f35b32b7bc878d73b7d56e6ab89b042cb863ed322c2bb9aa664bfc88, and its MD5 is 794c9f908f4d088916e78aaec87af26e. Two files with the same SHA-256 are identical, so use it to check you have exactly this file, not just one with the same name.

Is it safe to open or run animatica-0.6.3+26.2.jar?

We found nothing harmful in animatica-0.6.3+26.2.jar. The main caveat is where you got it: attackers sometimes spread malware under the name of real software, so get it from the official website. If your own antivirus warns about it, check the source before you ignore the warning.

How up to date is this analysis of animatica-0.6.3+26.2.jar?

This report reflects the scan on Aug 28, 2026. A file's fingerprint never changes, but antivirus engines keep learning, so a rating can change later. To get a newer result, scan the file again: we refresh the antivirus results when the saved ones are out of date.

Is animatica-0.6.3+26.2.jar safe? Yes, no threats found.

Why we think so

The reasoning behind this verdict

What We Detected

Threat Behavior

What To Do Now

What it did in our test

Test run summary

What this file did when executed

Techniques observed in the sandbox

Observed activity

Processes started

Files

Sandbox background — not the file

Files this sample writes at runtime

Technical details

Every check behind this verdict

File fingerprint

About this file

0 of 65 engines flagged this file

Signatures and behavior heuristics

How widely this file has been seen

Questions & answers

Community

Is animatica-0.6.3+26.2.jar safe? Yes, no threats found.

What We Detected

Threat Behavior

What To Do Now

Test run summary

Techniques observed in the sandbox

Observed activity

Processes started

Files

Sandbox background — not the file

File fingerprint

About this file

Related file reports