CLEAN — virussign.com_3f0dcac9b04be4f8e62d1c72ea957f70.vir

CLEAN — virussign.com_3f0dcac9b04be4f8e62d1c72ea957f70.vir is a zip sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (25/100). 1 of 51 detection engines flagged it.

Identification

• SHA-256: e064ea9faa7586f700ebbe95abab2041247a823e0579a4dc82f55b1cb5708dfd
• SHA-1: 91b7a725548bd4f22b4733b093df1a629ac9f14b
• MD5: 3f0dcac9b04be4f8e62d1c72ea957f70
• ssdeep: 98304:h0yt/r3fe4fFceKZ0M5Xxeq/eWCbZ6rS0JXWE7Sfhpo0TzNno4HYoiqIH3FjMbkM:3R3UJd0q/etodWE7J0HNnouGlH3FQP
• TLSH: T12D63336C530F26E6DB7355A09ACF389F8C5994D8A1F26484272067EEFBF092B10540DE
• Submitted as: virussign.com_3f0dcac9b04be4f8e62d1c72ea957f70.vir
• File type: zip · Size: 4927397 bytes
• Verdict: clean (25/100)

Source: VirusSign · first seen 2026-08-15T00:00:00.000Z · SHA-256 verified

Detections (1 of 51 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The clean score of 25/100 is the fusion of 2 weighted signals:

• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
• Archive contains executables: cases/chinese/zijing-xiufuju-v5/app/data/effects.js, cases/chinese/zijing-xiufuju-v5/app/data/levels.js, cases/chinese/zijing-xiufuju-v5/app/js/game.js, cases/english/cadence-macos/scripts/bootstrap.sh, cases/english/cadence-macos/scripts/build-macos-package.sh - static signal, weight 0.25, confidence 0.50

Archive contents (9 executables)

This zip carries 9 extracted members, each analyzed as its own sample:

• effects.js - 7e39f291dde72a49ddc72a75a4497ebddabf57e7ac33d0e8d82fa2f525880943
• levels.js - 7f9166e125d9df5ebe0a9977c5410ee8d41082d1d44e6368dbddb69571294490
• game.js - 8cafbe3f31da93360ac1a14f44ea61a250d473690b1884eea57c78adbc0f41e0
• test_tts_client.js - f6a0d11dbb78968f850cac8de0562ba96ee2be13ac93b7913b43d3e80e55762e
• app.js - 58cc5ad5c736b1719d3ae9d031254c36e7f77ae2ce946c2c43d295f3d0204915
• audio-worklet.js - eb7d0dbfa83a22afa1b21e10134fd2d3f36bc357162dfd11a96b4f890cd4e7ad
• engine.js - 19ccbb1c8f56982f21727853b3be231bc75f4b20e13b80dc07c735489953cf26
• game.js - 542d53fdd626da243dbc0d40d6de8d4f2e6f9697d31f8cea2c0301c9748c9c89
• levels-data.js - 995d6e6010b461f5d36b64c566d1f75142bf90514bd11a07a002892770a3a3dd

Embedded domains

• build-macos-package.sh
• install-local-models.sh
• manage.sh
• runtime.sh
• service.sh

File paths

• E:\~
• k:\T$
• j:\EG

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report