Analysis

  • max time kernel
    405s
  • max time network
    410s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20251231-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20251231-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/01/2026, 16:04

Errors

Reason
Machine shutdown

General

  • Target
    sample.exe
  • Size 5.5MB
  • Sample260107-th25tabx7b
  • SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Renames multiple (10783) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Modifies Control Panel 3 IoCs
  • Modifies data under HKEY_USERS 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\sample.exe
    "C:\Users\Admin\AppData\Local\Temp\sample.exe"
    1⤵
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies Control Panel
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2624
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5760
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe"
      1⤵
        PID:204
      • C:\Windows\system32\LogonUI.exe
        "LogonUI.exe" /flags:0x4 /state0:0xa38ee055 /state1:0x41c64e6d
        1⤵
          PID:4716

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              s_closereview_18.svg.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_closereview_18.svg.fbin
              • Size 736B
              • SHA256 036e89154f9374df21daf904c9b407be5216ce59f1bce1dc5cbd793e1e39b3ec
              • MD5 SHA1 SHA512

              bg_patterns_header.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_patterns_header.png.fbin
              • Size 720B
              • SHA256 25279dc8b27876723fd7a326095bf5deffa14130741ecdecf018f1a57d2351eb
              • MD5 SHA1 SHA512

              icons_retina.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png.fbin
              • Size 15KB
              • SHA256 3c4f45ada9ad4e2004ff07a7d25305d14ae8b32a7a0f19f911fc376ffec236c2
              • MD5 SHA1 SHA512 SSDEEP

              illustrations_retina.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations_retina.png.fbin
              • Size 19KB
              • SHA256 b302e92cdb7eea45bb0eb13e743d5a87d6ebccfbd8ad8d0c43b15c18cb42ac67
              • MD5 SHA1 SHA512 SSDEEP

              rhp_world_icon_hover.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\rhp_world_icon_hover.png.fbin
              • Size 416B
              • SHA256 1d58435b8f39b1dd4cf854bf80873107685b40d57282c6854bc831b5836f3e8c
              • MD5 SHA1 SHA512

              rhp_world_icon_hover.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover.png.fbin
              • Size 416B
              • SHA256 043304f2b4837f9fadda43e6316ed9f100b40082704402ec123c3c09feb1df76
              • MD5 SHA1 SHA512

              example_icons2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\example_icons2x.png.fbin
              • Size 1KB
              • SHA256 a3221323d60e954231e55ffd07995a0ce3fe6161588333e00af85a1c3e9f4b4f
              • MD5 SHA1 SHA512

              rhp_world_icon.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon.png.fbin
              • Size 416B
              • SHA256 15f1b8c56137b32a024f8d0faed91a0d5276bdf37186cd7a91d8f54ff6a1dab0
              • MD5 SHA1 SHA512

              rhp_world_icon_2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.fbin
              • Size 640B
              • SHA256 5786a719bd369b23efe1bea4fda3286d35de0640a35b537d5042a8613f25762e
              • MD5 SHA1 SHA512

              rhp_world_icon_hover_2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.fbin
              • Size 576B
              • SHA256 6d67dcf42233f158ebe8bf680ddf071ceada8ae088166b34164b72b662641a42
              • MD5 SHA1 SHA512

              example_icons.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png.fbin
              • Size 704B
              • SHA256 f80f86e0123b0ab66114f9c617c1615d43cfe90a58d66d5a41f566ac8e2dce1f
              • MD5 SHA1 SHA512

              icons_ie8.gif.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif.fbin
              • Size 7KB
              • SHA256 093279ec670e08807d9879843d00819c7794ef1cf84b10dfcfd23ce8ab9294cc
              • MD5 SHA1 SHA512 SSDEEP

              new_icons_retina.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png.fbin
              • Size 17KB
              • SHA256 7faaf48b557d45cdd0c8ef38c303daa8467bfa1c1129ef4d468c6000af03d815
              • MD5 SHA1 SHA512 SSDEEP

              icons.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.fbin
              • Size 7KB
              • SHA256 e8104a575b1807e2c20473e0ca6b8346a5289789c51e438fbd60672892ce09ce
              • MD5 SHA1 SHA512 SSDEEP

              illustrations.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png.fbin
              • Size 8KB
              • SHA256 4139d9674a8f15681e8703878b487b64e1987906233d3ddf85aa12ed49ce2276
              • MD5 SHA1 SHA512 SSDEEP

              bg_pattern_RHP.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png.fbin
              • Size 208B
              • SHA256 e63c2c689e71352fd7fe90f547461f3b7aeb981cefecbe62ab6b9510e4c937ae
              • MD5 SHA1 SHA512

              new_icons.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\new_icons.png.fbin
              • Size 8KB
              • SHA256 d9d8d5683a1ea5bc5c4ecc275048d249e401a1cd6897c72dfbc02e3a07a9eeac
              • MD5 SHA1 SHA512 SSDEEP

              ui-strings.js.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js.fbin
              • Size 848B
              • SHA256 ddf8d46ffb364f73ad792fdd457acda6138b5baabcd340ee2bcb3fb4f9a99382
              • MD5 SHA1 SHA512

              rhp_world_icon.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon.png.fbin
              • Size 464B
              • SHA256 1b1318d56adafca4a759214bdc293f6225bc071551fd4eebc2505a1aad2c0e55
              • MD5 SHA1 SHA512

              rhp_world_icon_hover_2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon_hover_2x.png.fbin
              • Size 576B
              • SHA256 19fdc1a56410fbad93303df0d4cf79eb92f6efb32f8520bdfbc05a81abb95da0
              • MD5 SHA1 SHA512

              rhp_world_icon_2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\themes\dark\rhp_world_icon_2x.png.fbin
              • Size 576B
              • SHA256 0f7389e0da1713d49eabd9bf1cfe43d9d9971a51de0cbdedf59b9d084cf3925e
              • MD5 SHA1 SHA512

              cstm_brand_preview2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\cstm_brand_preview2x.png.fbin
              • Size 4KB
              • SHA256 166030471c2db2067dfba041742e682031ebc85dc198c3daecb556fb2bdc90b6
              • MD5 SHA1 SHA512 SSDEEP

              bun.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\bun.png.fbin
              • Size 2KB
              • SHA256 56a20b5b3c5203dd542f390f35ae70a86eecad91c67113cbb09410ab4b384712
              • MD5 SHA1 SHA512

              cstm_brand_preview.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\cstm_brand_preview.png.fbin
              • Size 2KB
              • SHA256 c22887d1256f35e91b45ce44e0f3c1a491157fb6fa4c7ea882f61652bd4bc182
              • MD5 SHA1 SHA512

              ui-strings.js.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ui-strings.js.fbin
              • Size 1KB
              • SHA256 6d5400ef75796a21a9d6c15a3bbef9e643bf1303f2bf85c564896dee662ed427
              • MD5 SHA1 SHA512

              dd_arrow_small.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png.fbin
              • Size 320B
              • SHA256 c83fd8de7f7f3b776314da3d058950fad77a3560136419ff60489f93cd949c68
              • MD5 SHA1 SHA512

              dd_arrow_small2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.fbin
              • Size 416B
              • SHA256 f2f2022a265482f33dab8f89a103b7bc3a3a133dfa631a45b3b0ae608060ab2e
              • MD5 SHA1 SHA512

              share_icons2x.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.fbin
              • Size 2KB
              • SHA256 fd4c4d516d5b6c89e05908cf46f7e491746dfdd2abd5262d8948918aaef04aa0
              • MD5 SHA1 SHA512

              nub.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\nub.png.fbin
              • Size 1024B
              • SHA256 3a6754a3adc2cfa76aecd6579b42bd7ea314e447e668d3c8f2e9f12d2206edac
              • MD5 SHA1 SHA512

              share_icons.png.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\share_icons.png.fbin
              • Size 1KB
              • SHA256 c73612236498be061f005bea21514848d23402bca19dd68337dc5a77c8cfb081
              • MD5 SHA1 SHA512

              ui-strings.js.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.fbin
              • Size 864B
              • SHA256 9f820fdaf647f205ca3f4bc4ad4a202c589a904afddaf4f77d625932ab0e535c
              • MD5 SHA1 SHA512

              ui-strings.js.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ui-strings.js.fbin
              • Size 1KB
              • SHA256 eba72d6182a22072811be7274c9b834370ff13006d51bc83c32420559eff3c57
              • MD5 SHA1 SHA512

              main-selector.css.fbin

              • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\css\main-selector.css.fbin
              • Size 832B
              • SHA256 9f6ca907b687a8cdd276bc3389ac8bd792d781e0b3c381a24b230e1db7a280a1
              • MD5 SHA1 SHA512

              DisplayLanguageNames.en_GB.txt.fbin

              • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt.fbin
              • Size 33KB
              • SHA256 fc1a88bec868cd49f8c9366fc115f0ad1ca30a5528a0580326e10c4cc501554e
              • MD5 SHA1 SHA512 SSDEEP

              penkor.dll.fbin

              • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\penkor.dll.fbin
              • Size 2KB
              • SHA256 e474428e97ec349f046f93e794d41cf570b53f9292485dbae59be8945da8b5d8
              • MD5 SHA1 SHA512

              Cryptomining.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining.fbin
              • Size 1KB
              • SHA256 9c76ac49a73def1d7872283b67e52221e6fdfaf0b1b478f433defdd001a3bddc
              • MD5 SHA1 SHA512

              LICENSE.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\LICENSE.fbin
              • Size 34KB
              • SHA256 20f8664df79cb01e584f67e48d6fdd7344ade05b4165dc68205bcbf82e72bf25
              • MD5 SHA1 SHA512 SSDEEP

              Social.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Social.fbin
              • Size 384B
              • SHA256 9708df4bef0214d919d030d94453568ae98d6afdfda5c398fd46fa585a4a5111
              • MD5 SHA1 SHA512

              Entities.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Entities.fbin
              • Size 42KB
              • SHA256 86534bc6b69afaad16e0f8de0237845392e5691573b9003647fe74e1cbdcf1bf
              • MD5 SHA1 SHA512 SSDEEP

              LICENSE.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE.fbin
              • Size 96B
              • SHA256 e76661a98cb33e635f393ece1a3f4211ec595418bf31a5af1ed84f03d610f7b8
              • MD5 SHA1 SHA512

              Social.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Social.fbin
              • Size 3KB
              • SHA256 e698a1a702cf858e81007d16079860bfc5d5396d71724e3ef3c147e5e7026142
              • MD5 SHA1 SHA512

              Staging.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Staging.fbin
              • Size 16KB
              • SHA256 51278358abe68cc86316bc2607d9a9eb87ae9c972aad36a60c18dec902314b63
              • MD5 SHA1 SHA512 SSDEEP

              delegatedWebFeatures.sccd.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\delegatedWebFeatures.sccd.fbin
              • Size 17KB
              • SHA256 c69f3df742e174845ad80eee4f43234e2fa83796cf892f8165d0d5d6fee49c52
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Dev.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix.fbin
              • Size 52KB
              • SHA256 1445f5ba837811b8f2efdccdd0c033d98ec1020e7e5b3e999e32ab6cd0c8a6ef
              • MD5 SHA1 SHA512 SSDEEP

              Fingerprinting.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting.fbin
              • Size 1KB
              • SHA256 cb37bf3f9275cca97d1f452e4a76e28d4a88fde3c6e52b29070b9d633f727a9e
              • MD5 SHA1 SHA512

              TransparentAdvertisers.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers.fbin
              • Size 128B
              • SHA256 1406166747e422ce849f379ade890daa42fa3977278800dadd564acdecd87356
              • MD5 SHA1 SHA512

              Cryptomining.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining.fbin
              • Size 48B
              • SHA256 74b4515e3bfe3a695674aad3edc1f6ad379da135d04b044632184a59eaf9a149
              • MD5 SHA1 SHA512

              resources.pri.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\resources.pri.fbin
              • Size 3KB
              • SHA256 ad090348a5c9e828cf584eda9c362a4eb89af0c8441d601579ac04f534851869
              • MD5 SHA1 SHA512

              identity_helper.Sparse.Internal.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win10\identity_helper.Sparse.Internal.msix.fbin
              • Size 56KB
              • SHA256 377452479e66391c6cd791e65131148b897618ac7286558cf63de8b39d9cb2a9
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Canary.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Canary.msix.fbin
              • Size 53KB
              • SHA256 ddc6e8b30357389b18f22f08792d832bd23acd2809307b7aead222a3e93717db
              • MD5 SHA1 SHA512 SSDEEP

              preloaded_data.pb.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\preloaded_data.pb.fbin
              • Size 8KB
              • SHA256 2b38dc356d553543f0871579518c1ab36394005b063dbb21bb75d79181e35ae2
              • MD5 SHA1 SHA512 SSDEEP

              ad-selection-attestations.dat.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.DATA.fbin
              • Size 80B
              • SHA256 9640eaa589bdd8f799691849bdb3bc22d2c9f80b1e621c49dd2312620696cb67
              • MD5 SHA1 SHA512

              Edge.dat.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Edge.dat.DATA.fbin
              • Size 12KB
              • SHA256 67f0420ca9fe487637937e5386c268865720cd3bea4b3f962c7d9a7b55764000
              • MD5 SHA1 SHA512 SSDEEP

              manifest.json.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\MEIPreload\manifest.json.DATA.fbin
              • Size 256B
              • SHA256 5cab88d397cb441bfd8a97ef57a430d80d2800cf2f58543e749cca224746a431
              • MD5 SHA1 SHA512

              Analytics.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.fbin
              • Size 448B
              • SHA256 0ebb262e02d08d0bd6ddde77fcf0122544de4c070bf7a96f3bd084873e68cc33
              • MD5 SHA1 SHA512

              LogoBeta.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.fbin
              • Size 29KB
              • SHA256 a1cd052c9b783d253afb128827b29171ad831979c01a3a89cffe7f5e3b94d574
              • MD5 SHA1 SHA512 SSDEEP

              LogoCanary.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.fbin
              • Size 29KB
              • SHA256 fd74242ab1925ad4ab5eb1c445adbc0a5a21d0148211a066c666b4e7a72d51e9
              • MD5 SHA1 SHA512 SSDEEP

              SmallLogo.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.fbin
              • Size 15KB
              • SHA256 6ffb1a7082d88917496224cbc23c91e0a039e38d768d6b036f3b0b3f408cb7e9
              • MD5 SHA1 SHA512 SSDEEP

              SmallLogoDev.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.fbin
              • Size 14KB
              • SHA256 dc19c9f1712d6fe3396ea27c9a1b72c51426c85d094def544c673b00f0f60c2a
              • MD5 SHA1 SHA512 SSDEEP

              Analytics.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Analytics.fbin
              • Size 4KB
              • SHA256 8798c58f2f2bfe879714db2e86cc16e2bd2c007a228b9b0e3ff88244060751ac
              • MD5 SHA1 SHA512 SSDEEP

              Other.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other.fbin
              • Size 64B
              • SHA256 fbaab57b89fb476655c2c424714402e0e6ee971e0f0213df174020a085261b3a
              • MD5 SHA1 SHA512

              Fingerprinting.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting.fbin
              • Size 192B
              • SHA256 b41d631f866be5a61ef22c39c239265d0ebf580eaeea149f2e8b4fe1bf8b59fb
              • MD5 SHA1 SHA512

              Other.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.fbin
              • Size 112B
              • SHA256 3af66a86165e530ce1c52d97188be2ba5eaef6eeaba234f72fa253bdd1a212c1
              • MD5 SHA1 SHA512

              mf_trace.wprp.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\mf_trace.wprp.fbin
              • Size 12KB
              • SHA256 6a3503b326ae91d8c072538f30110e9d51aef72b5a4a91e253f1d9a55b1f117d
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Beta.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Beta.msix.fbin
              • Size 53KB
              • SHA256 094cbcacfd9cd21fac108eaea27008239fd0eb0f804b039ce84c4551e0cc30b0
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Canary.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Canary.msix.fbin
              • Size 53KB
              • SHA256 de62950a83a87261502d5e5cb0cf7d00201e2f26ae09d4435d582e0e8ef80703
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Stable.msix.fbin

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Stable.msix.fbin
              • Size 56KB
              • SHA256 f431781ebe89125d0e9b64355d30adf7974786ccbfec20515d9f31dbf65a9286
              • MD5 SHA1 SHA512 SSDEEP

              manifest.json.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\AdSelectionAttestationsPreloaded\manifest.json.DATA.fbin
              • Size 144B
              • SHA256 86c24b7e5b403f9bc66a3a941dd57833b4a56e4e95aa8f83027e372be5c94880
              • MD5 SHA1 SHA512

              EdgeWebView.dat.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\EdgeWebView.dat.DATA.fbin
              • Size 8KB
              • SHA256 fa4a059fc8a13e8f3167f71e3ebaf21e0ff95f42a8eb51a0b8c833537a8f21fe
              • MD5 SHA1 SHA512 SSDEEP

              external_extensions.json.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Extensions\external_extensions.json.DATA.fbin
              • Size 128B
              • SHA256 79f6b9fb0f73a077b10d5f473537d2d46edafd2c1e672591de72d806881fa1e7
              • MD5 SHA1 SHA512

              CompatExceptions.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.fbin
              • Size 720B
              • SHA256 7f1c1de314df79eaa07262484a90f4fbe51a1c1729efdf040b8d8f6596901156
              • MD5 SHA1 SHA512

              Entities.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.fbin
              • Size 68KB
              • SHA256 c5b5aefaf85a9b82926f80187b3c50712e9981f3709bd13dded3aa8f783fa692
              • MD5 SHA1 SHA512 SSDEEP

              manifest.json.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.fbin
              • Size 160B
              • SHA256 c84e752bcbda44880221da66a2a8841b680bc0cc0afb91200649045432a337ab
              • MD5 SHA1 SHA512

              Logo.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\Logo.png.DATA.fbin
              • Size 31KB
              • SHA256 bf7b39f7e5170abd6a277f78a492101b2d6f61cff9ba4f2f63326afba570351d
              • MD5 SHA1 SHA512 SSDEEP

              LogoDev.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\LogoDev.png.DATA.fbin
              • Size 29KB
              • SHA256 1ece301a05ec5f7884bbf1bf5f59fa2080594c1db8823661e2c84700a6e2a960
              • MD5 SHA1 SHA512 SSDEEP

              SmallLogoBeta.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.fbin
              • Size 14KB
              • SHA256 5c100e94de275cddbfd1a2d0c217167b4035f40f098c02dc1fc2529c455a27be
              • MD5 SHA1 SHA512 SSDEEP

              SmallLogoCanary.png.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.fbin
              • Size 14KB
              • SHA256 f822b3c5bf5a0102c6765423c322b7c28530391531a25ab8bbee8961da409870
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Beta.msix.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Beta.msix.DATA.fbin
              • Size 53KB
              • SHA256 633c5d2b0d3afefcfb3bc673683ceed4eb4137db650cf0c71d294917cd76b19d
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.Sparse.Dev.msix.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA.fbin
              • Size 53KB
              • SHA256 a48fde4aa9797c669c23ed6d112ccfdbadf3dc58e573170c31c76fbda37b6e2b
              • MD5 SHA1 SHA512 SSDEEP

              vk_swiftshader_icd.json.DATA.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\vk_swiftshader_icd.json.DATA.fbin
              • Size 128B
              • SHA256 4b0f008da0188cc8658cf05395a30e5e4a24c5472dc86782b3ee1916c0a20fd0
              • MD5 SHA1 SHA512

              Advertising.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Advertising.fbin
              • Size 24KB
              • SHA256 8c4f52886e55990dd15fca6902e11f609213c3d76aa9b05d6b502a9f226af2e2
              • MD5 SHA1 SHA512 SSDEEP

              Content.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Content.fbin
              • Size 6KB
              • SHA256 ba60eb008492d71bd7043f368e1a242c371ad78e1289f42f0e36e04bae8a90e3
              • MD5 SHA1 SHA512 SSDEEP

              Advertising.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Advertising.fbin
              • Size 2KB
              • SHA256 b3d361797a5bf251ec87bd3a8d700e83b1b127cc878d9ac3e2adaa89c67041c2
              • MD5 SHA1 SHA512

              Content.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Content.fbin
              • Size 64B
              • SHA256 17094e00f086fd5f452ac109a3b826de0456315a0cf2c463f66523c3cb77d5b9
              • MD5 SHA1 SHA512

              camera_mf_trace.wprp.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\edge_feedback\camera_mf_trace.wprp.fbin
              • Size 24KB
              • SHA256 fd1a404b93c0b82e96f679e53ecfdcd4c057ad0aede2f1b7b52d6649cea68521
              • MD5 SHA1 SHA512 SSDEEP

              identity_helper.exe.manifest.fbin

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe.manifest.fbin
              • Size 1KB
              • SHA256 10bedce7a104b8155b9fd157cc35d951012a4fb07a615e5ab96a1447edfa6627
              • MD5 SHA1 SHA512

              msvcp140.dll.fbin

              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll.fbin
              • Size 613KB
              • SHA256 3651f1ce33933aee5302b3519c9e4363426b34382aa233236d7bda890c47363b
              • MD5 SHA1 SHA512 SSDEEP

              msvcp140.dll.fbin

              • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll.fbin
              • Size 558KB
              • SHA256 2d70944c3de8d337b89f26f4938513c0248c73ea16c3fb76165e554c24b23076
              • MD5 SHA1 SHA512 SSDEEP

              vcruntime140.dll.fbin

              • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll.fbin
              • Size 95KB
              • SHA256 5daaa4c1730740f90d0a2d9e7b9e935255a9cdfc8716cda25bec8d23fb3cf7a9
              • MD5 SHA1 SHA512 SSDEEP

              win32_CopyNoDrop32x32.gif.fbin

              • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif.fbin
              • Size 176B
              • SHA256 de36906abe8000fdcd65bce6cb84aa4e0efe4ad4d213ba825a8a72276fca5a27
              • MD5 SHA1 SHA512

              vcruntime140_1.dll.fbin

              • Path C:\Program Files\Java\jre-1.8\bin\vcruntime140_1.dll.fbin
              • Size 36KB
              • SHA256 26813319dde0485bb206300e29a367194df9516aa3c4c4dea0878c2894cc82d2
              • MD5 SHA1 SHA512 SSDEEP

              WINWORD_F_COL.HXK.fbin

              • Path C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK.fbin
              • Size 144B
              • SHA256 bc632d7dcdfd6413e96f1d3836ff2a3738778ee410b09354ae5cee19e389a2f2
              • MD5 SHA1 SHA512

              concrt140.dll.fbin

              • Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll.fbin
              • Size 324KB
              • SHA256 84584093bc3307b96b961b67d2ded27e3753a184ebf4a046041fe1120e624265
              • MD5 SHA1 SHA512 SSDEEP

              vccorlib140.dll.fbin

              • Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll.fbin
              • Size 358KB
              • SHA256 dcd15bfaac8b6c40a68d9372367b92df07e9eb944a06b2a5ea2bd3fb002b553b
              • MD5 SHA1 SHA512 SSDEEP

              eqnedt32.exe.fbin

              • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe.fbin
              • Size 16B
              • SHA256 bf26cb86cf2aa03d8d25974cc6613569b42644499e4ca708c8aae2b10d361587
              • MD5 SHA1 SHA512

              SpreadsheetCompare_k_col.hxk.fbin

              • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\SpreadsheetCompare_k_col.hxk.fbin
              • Size 144B
              • SHA256 4d447ca97fdfc2df2095189d2a9337d229cb5a6093f623ba81da5f10dcf82896
              • MD5 SHA1 SHA512

              vcruntime140.dll.fbin

              • Path C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll.fbin
              • Size 83KB
              • SHA256 8eec080d3660e7981a2840b5ac5fc5a370d7f6c989d3269605d2a22470d17ed9
              • MD5 SHA1 SHA512 SSDEEP

              vlc.mo.fbin

              • Path C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo.fbin
              • Size 831KB
              • SHA256 88bb7fbbf37e242ba9bbab7e46ae06495be93b71ab4cca54e3d200389304257b
              • MD5 SHA1 SHA512 SSDEEP