It's even in a bin (binary) file, so check the format... send me those bin files and I'll tell you...
Look at the files:zbblock/signatures/file.sig.bin

That's what we call a false positive, they just see there is a ".bin" file and automatically mark it as a potential threat, which is incorrect. Those files come with the zbblock library, there is nothing to be afraid of. I will take a look and see if those files are really needed, I will update this plugin soon.

Senior Developer.

I took a look at the issue, here is the results of my investigation:

Those files come with the zbblock library (file.sig, ib.sig, cook.sig), it contains signatures which is code to identify potential threats. Opcache converts those files into bin files to run faster and the scanner read those lines and thinks it is a threat (false positive), if you are having have trouble with your hosting provider to keep those bin files, maybe you need to blacklist those files in the php.ini file so they don't convert into bin files and they don't think you are a threat for their servers. If they don't need you to remove those files then just keep those files right there as there is nothing wrong with them, it is working as it should.

Senior Developer.