CLEAN — virussign.com_afbf18e28d276a781909ab4a54686e30.vir

CLEAN — virussign.com_afbf18e28d276a781909ab4a54686e30.vir is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (21/100). 1 of 55 detection engines flagged it.

Identification

• SHA-256: 30084994b5f3129d6b70614fbb9e806675fcd57b53491b04ecb3aa8a043f0849
• SHA-1: 4a6a03b98bbf6e77e9dda5823f09a486641155a0
• MD5: afbf18e28d276a781909ab4a54686e30
• imphash: fc87ecabac0095eed5ebabfc52420750
• ssdeep: 1536:cCB5a3RROOPJ8R9srH38LGqVX4N4jI9Tzk+J:T5UvpPJAVLGqVX4N4jINj
• TLSH: T1B63CB3DD9D969E43D0B68E4BD109147F504AF1B3A3AC194D13C3E06AF7E10A7483A1BA
• Submitted as: virussign.com_afbf18e28d276a781909ab4a54686e30.vir
• File type: pe · Size: 118784 bytes
• Verdict: clean (21/100)

Source: VirusSign · first seen 2026-08-15T00:00:00.000Z · SHA-256 verified

Detections (1 of 55 engines)

• Emsisoft (Emergency Kit): Trojan.GenericKD.81099645

Why this verdict

The clean score of 21/100 is the fusion of 1 weighted signal:

• Embedded network infrastructure: 168.95.1.1, 8.8.8.8 - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded IP addresses

• 192.168.168.168
• 255.255.255.0
• 192.168.1.10
• 192.168.1.254
• 168.95.1.1
• 8.8.8.8

File paths

• D:\SCAN
• C:\SCAN
• C:\Program

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report