Analysis

  • max time kernel
    149s
  • max time network
    120s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251231-en
  • resource tags

    arch:x64arch:x86image:win11-20251231-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    07/01/2026, 16:04

General

  • Target
    sample.exe
  • Size 5.5MB
  • Sample260107-th25tabx7b
  • SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • Renames multiple (10795) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\sample.exe
    "C:\Users\Admin\AppData\Local\Temp\sample.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    PID:4484
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3660

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          s_reject_18.svg.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reject_18.svg.fbin
          • Size 736B
          • SHA256 036e89154f9374df21daf904c9b407be5216ce59f1bce1dc5cbd793e1e39b3ec
          • MD5 SHA1 SHA512

          new_icons.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons.png.fbin
          • Size 8KB
          • SHA256 d9d8d5683a1ea5bc5c4ecc275048d249e401a1cd6897c72dfbc02e3a07a9eeac
          • MD5 SHA1 SHA512 SSDEEP

          illustrations_retina.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations_retina.png.fbin
          • Size 19KB
          • SHA256 b302e92cdb7eea45bb0eb13e743d5a87d6ebccfbd8ad8d0c43b15c18cb42ac67
          • MD5 SHA1 SHA512 SSDEEP

          rhp_world_icon.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon.png.fbin
          • Size 464B
          • SHA256 1b1318d56adafca4a759214bdc293f6225bc071551fd4eebc2505a1aad2c0e55
          • MD5 SHA1 SHA512

          rhp_world_icon_hover.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png.fbin
          • Size 416B
          • SHA256 043304f2b4837f9fadda43e6316ed9f100b40082704402ec123c3c09feb1df76
          • MD5 SHA1 SHA512

          rhp_world_icon.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png.fbin
          • Size 416B
          • SHA256 15f1b8c56137b32a024f8d0faed91a0d5276bdf37186cd7a91d8f54ff6a1dab0
          • MD5 SHA1 SHA512

          example_icons.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\example_icons.png.fbin
          • Size 704B
          • SHA256 f80f86e0123b0ab66114f9c617c1615d43cfe90a58d66d5a41f566ac8e2dce1f
          • MD5 SHA1 SHA512

          rhp_world_icon_hover.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png.fbin
          • Size 416B
          • SHA256 1d58435b8f39b1dd4cf854bf80873107685b40d57282c6854bc831b5836f3e8c
          • MD5 SHA1 SHA512

          rhp_world_icon_hover_2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover_2x.png.fbin
          • Size 576B
          • SHA256 6d67dcf42233f158ebe8bf680ddf071ceada8ae088166b34164b72b662641a42
          • MD5 SHA1 SHA512

          example_icons2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons2x.png.fbin
          • Size 1KB
          • SHA256 a3221323d60e954231e55ffd07995a0ce3fe6161588333e00af85a1c3e9f4b4f
          • MD5 SHA1 SHA512

          rhp_world_icon_2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.fbin
          • Size 640B
          • SHA256 5786a719bd369b23efe1bea4fda3286d35de0640a35b537d5042a8613f25762e
          • MD5 SHA1 SHA512

          rhp_world_icon_2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\themes\dark\rhp_world_icon_2x.png.fbin
          • Size 576B
          • SHA256 0f7389e0da1713d49eabd9bf1cfe43d9d9971a51de0cbdedf59b9d084cf3925e
          • MD5 SHA1 SHA512

          ui-strings.js.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js.fbin
          • Size 848B
          • SHA256 ddf8d46ffb364f73ad792fdd457acda6138b5baabcd340ee2bcb3fb4f9a99382
          • MD5 SHA1 SHA512

          bg_pattern_RHP.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png.fbin
          • Size 208B
          • SHA256 e63c2c689e71352fd7fe90f547461f3b7aeb981cefecbe62ab6b9510e4c937ae
          • MD5 SHA1 SHA512

          illustrations.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations.png.fbin
          • Size 8KB
          • SHA256 4139d9674a8f15681e8703878b487b64e1987906233d3ddf85aa12ed49ce2276
          • MD5 SHA1 SHA512 SSDEEP

          new_icons_retina.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\new_icons_retina.png.fbin
          • Size 17KB
          • SHA256 7faaf48b557d45cdd0c8ef38c303daa8467bfa1c1129ef4d468c6000af03d815
          • MD5 SHA1 SHA512 SSDEEP

          main.css.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main.css.fbin
          • Size 832B
          • SHA256 9f6ca907b687a8cdd276bc3389ac8bd792d781e0b3c381a24b230e1db7a280a1
          • MD5 SHA1 SHA512

          bg_patterns_header.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.fbin
          • Size 720B
          • SHA256 25279dc8b27876723fd7a326095bf5deffa14130741ecdecf018f1a57d2351eb
          • MD5 SHA1 SHA512

          icons.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons.png.fbin
          • Size 7KB
          • SHA256 e8104a575b1807e2c20473e0ca6b8346a5289789c51e438fbd60672892ce09ce
          • MD5 SHA1 SHA512 SSDEEP

          icons_ie8.gif.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons_ie8.gif.fbin
          • Size 7KB
          • SHA256 093279ec670e08807d9879843d00819c7794ef1cf84b10dfcfd23ce8ab9294cc
          • MD5 SHA1 SHA512 SSDEEP

          icons_retina.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\icons_retina.png.fbin
          • Size 15KB
          • SHA256 3c4f45ada9ad4e2004ff07a7d25305d14ae8b32a7a0f19f911fc376ffec236c2
          • MD5 SHA1 SHA512 SSDEEP

          ui-strings.js.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js.fbin
          • Size 1KB
          • SHA256 6d5400ef75796a21a9d6c15a3bbef9e643bf1303f2bf85c564896dee662ed427
          • MD5 SHA1 SHA512

          rhp_world_icon_hover_2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon_hover_2x.png.fbin
          • Size 576B
          • SHA256 19fdc1a56410fbad93303df0d4cf79eb92f6efb32f8520bdfbc05a81abb95da0
          • MD5 SHA1 SHA512

          dd_arrow_small.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\dd_arrow_small.png.fbin
          • Size 320B
          • SHA256 c83fd8de7f7f3b776314da3d058950fad77a3560136419ff60489f93cd949c68
          • MD5 SHA1 SHA512

          share_icons.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\share_icons.png.fbin
          • Size 1KB
          • SHA256 c73612236498be061f005bea21514848d23402bca19dd68337dc5a77c8cfb081
          • MD5 SHA1 SHA512

          bun.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\bun.png.fbin
          • Size 2KB
          • SHA256 56a20b5b3c5203dd542f390f35ae70a86eecad91c67113cbb09410ab4b384712
          • MD5 SHA1 SHA512

          cstm_brand_preview.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\cstm_brand_preview.png.fbin
          • Size 2KB
          • SHA256 c22887d1256f35e91b45ce44e0f3c1a491157fb6fa4c7ea882f61652bd4bc182
          • MD5 SHA1 SHA512

          ui-strings.js.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\ui-strings.js.fbin
          • Size 1KB
          • SHA256 eba72d6182a22072811be7274c9b834370ff13006d51bc83c32420559eff3c57
          • MD5 SHA1 SHA512

          dd_arrow_small2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png.fbin
          • Size 416B
          • SHA256 f2f2022a265482f33dab8f89a103b7bc3a3a133dfa631a45b3b0ae608060ab2e
          • MD5 SHA1 SHA512

          share_icons2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png.fbin
          • Size 2KB
          • SHA256 fd4c4d516d5b6c89e05908cf46f7e491746dfdd2abd5262d8948918aaef04aa0
          • MD5 SHA1 SHA512

          cstm_brand_preview2x.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.fbin
          • Size 4KB
          • SHA256 166030471c2db2067dfba041742e682031ebc85dc198c3daecb556fb2bdc90b6
          • MD5 SHA1 SHA512 SSDEEP

          nub.png.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\nub.png.fbin
          • Size 1024B
          • SHA256 3a6754a3adc2cfa76aecd6579b42bd7ea314e447e668d3c8f2e9f12d2206edac
          • MD5 SHA1 SHA512

          ui-strings.js.fbin

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js.fbin
          • Size 864B
          • SHA256 9f820fdaf647f205ca3f4bc4ad4a202c589a904afddaf4f77d625932ab0e535c
          • MD5 SHA1 SHA512

          DisplayLanguageNames.en_CA.txt.fbin

          • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt.fbin
          • Size 33KB
          • SHA256 fc1a88bec868cd49f8c9366fc115f0ad1ca30a5528a0580326e10c4cc501554e
          • MD5 SHA1 SHA512 SSDEEP

          penkor.dll.fbin

          • Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\penkor.dll.fbin
          • Size 2KB
          • SHA256 c82a3fb182ddcb395a09116b8d793b31493df8c1439ccbeb16875812f6adb499
          • MD5 SHA1 SHA512

          Cryptomining.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining.fbin
          • Size 1KB
          • SHA256 9c76ac49a73def1d7872283b67e52221e6fdfaf0b1b478f433defdd001a3bddc
          • MD5 SHA1 SHA512

          CompatExceptions.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\CompatExceptions.fbin
          • Size 720B
          • SHA256 7f1c1de314df79eaa07262484a90f4fbe51a1c1729efdf040b8d8f6596901156
          • MD5 SHA1 SHA512

          Fingerprinting.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting.fbin
          • Size 1KB
          • SHA256 cb37bf3f9275cca97d1f452e4a76e28d4a88fde3c6e52b29070b9d633f727a9e
          • MD5 SHA1 SHA512

          TransparentAdvertisers.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers.fbin
          • Size 128B
          • SHA256 1406166747e422ce849f379ade890daa42fa3977278800dadd564acdecd87356
          • MD5 SHA1 SHA512

          Advertising.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Advertising.fbin
          • Size 2KB
          • SHA256 b3d361797a5bf251ec87bd3a8d700e83b1b127cc878d9ac3e2adaa89c67041c2
          • MD5 SHA1 SHA512

          LICENSE.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\LICENSE.fbin
          • Size 96B
          • SHA256 e76661a98cb33e635f393ece1a3f4211ec595418bf31a5af1ed84f03d610f7b8
          • MD5 SHA1 SHA512

          identity_helper.Sparse.Canary.msix.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win10\identity_helper.Sparse.Canary.msix.fbin
          • Size 53KB
          • SHA256 1ba9986bf31de0f3d09cff6f69e9eb8f9ee289602ba858a0928afbde43e8e16c
          • MD5 SHA1 SHA512 SSDEEP

          identity_helper.Sparse.Stable.msix.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Stable.msix.fbin
          • Size 56KB
          • SHA256 9b759cd26917e11b12af5d58896477c13e09637364adae7bae7e9d906318db76
          • MD5 SHA1 SHA512 SSDEEP

          ad-selection-attestations.dat.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.DATA.fbin
          • Size 80B
          • SHA256 9640eaa589bdd8f799691849bdb3bc22d2c9f80b1e621c49dd2312620696cb67
          • MD5 SHA1 SHA512

          Edge.dat.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Edge.dat.DATA.fbin
          • Size 12KB
          • SHA256 67f0420ca9fe487637937e5386c268865720cd3bea4b3f962c7d9a7b55764000
          • MD5 SHA1 SHA512 SSDEEP

          EdgeWebView.dat.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\EdgeWebView.dat.DATA.fbin
          • Size 8KB
          • SHA256 fa4a059fc8a13e8f3167f71e3ebaf21e0ff95f42a8eb51a0b8c833537a8f21fe
          • MD5 SHA1 SHA512 SSDEEP

          external_extensions.json.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Extensions\external_extensions.json.DATA.fbin
          • Size 128B
          • SHA256 79f6b9fb0f73a077b10d5f473537d2d46edafd2c1e672591de72d806881fa1e7
          • MD5 SHA1 SHA512

          Content.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.fbin
          • Size 64B
          • SHA256 17094e00f086fd5f452ac109a3b826de0456315a0cf2c463f66523c3cb77d5b9
          • MD5 SHA1 SHA512

          LogoBeta.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.fbin
          • Size 29KB
          • SHA256 a1cd052c9b783d253afb128827b29171ad831979c01a3a89cffe7f5e3b94d574
          • MD5 SHA1 SHA512 SSDEEP

          LogoDev.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoDev.png.DATA.fbin
          • Size 29KB
          • SHA256 1ece301a05ec5f7884bbf1bf5f59fa2080594c1db8823661e2c84700a6e2a960
          • MD5 SHA1 SHA512 SSDEEP

          SmallLogoBeta.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.fbin
          • Size 14KB
          • SHA256 5c100e94de275cddbfd1a2d0c217167b4035f40f098c02dc1fc2529c455a27be
          • MD5 SHA1 SHA512 SSDEEP

          identity_helper.Sparse.Canary.msix.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Canary.msix.DATA.fbin
          • Size 53KB
          • SHA256 de62950a83a87261502d5e5cb0cf7d00201e2f26ae09d4435d582e0e8ef80703
          • MD5 SHA1 SHA512 SSDEEP

          identity_helper.Sparse.Dev.msix.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA.fbin
          • Size 52KB
          • SHA256 1445f5ba837811b8f2efdccdd0c033d98ec1020e7e5b3e999e32ab6cd0c8a6ef
          • MD5 SHA1 SHA512 SSDEEP

          Entities.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Entities.fbin
          • Size 68KB
          • SHA256 c5b5aefaf85a9b82926f80187b3c50712e9981f3709bd13dded3aa8f783fa692
          • MD5 SHA1 SHA512 SSDEEP

          Social.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social.fbin
          • Size 384B
          • SHA256 9708df4bef0214d919d030d94453568ae98d6afdfda5c398fd46fa585a4a5111
          • MD5 SHA1 SHA512

          Analytics.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics.fbin
          • Size 448B
          • SHA256 0ebb262e02d08d0bd6ddde77fcf0122544de4c070bf7a96f3bd084873e68cc33
          • MD5 SHA1 SHA512

          Cryptomining.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining.fbin
          • Size 48B
          • SHA256 74b4515e3bfe3a695674aad3edc1f6ad379da135d04b044632184a59eaf9a149
          • MD5 SHA1 SHA512

          Other.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.fbin
          • Size 112B
          • SHA256 3af66a86165e530ce1c52d97188be2ba5eaef6eeaba234f72fa253bdd1a212c1
          • MD5 SHA1 SHA512

          Staging.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Staging.fbin
          • Size 16KB
          • SHA256 51278358abe68cc86316bc2607d9a9eb87ae9c972aad36a60c18dec902314b63
          • MD5 SHA1 SHA512 SSDEEP

          delegatedWebFeatures.sccd.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\delegatedWebFeatures.sccd.fbin
          • Size 17KB
          • SHA256 c69f3df742e174845ad80eee4f43234e2fa83796cf892f8165d0d5d6fee49c52
          • MD5 SHA1 SHA512 SSDEEP

          camera_mf_trace.wprp.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\camera_mf_trace.wprp.fbin
          • Size 24KB
          • SHA256 fd1a404b93c0b82e96f679e53ecfdcd4c057ad0aede2f1b7b52d6649cea68521
          • MD5 SHA1 SHA512 SSDEEP

          identity_helper.Sparse.Beta.msix.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Beta.msix.fbin
          • Size 53KB
          • SHA256 ca6bff36779b1c934ca54289d68b7d63fc0618cfd0573665ff541aa91f89e235
          • MD5 SHA1 SHA512 SSDEEP

          identity_helper.Sparse.Stable.msix.fbin

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Stable.msix.fbin
          • Size 56KB
          • SHA256 f431781ebe89125d0e9b64355d30adf7974786ccbfec20515d9f31dbf65a9286
          • MD5 SHA1 SHA512 SSDEEP

          preloaded_data.pb.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\MEIPreload\preloaded_data.pb.fbin
          • Size 8KB
          • SHA256 2b38dc356d553543f0871579518c1ab36394005b063dbb21bb75d79181e35ae2
          • MD5 SHA1 SHA512 SSDEEP

          manifest.json.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\AdSelectionAttestationsPreloaded\manifest.json.DATA.fbin
          • Size 144B
          • SHA256 86c24b7e5b403f9bc66a3a941dd57833b4a56e4e95aa8f83027e372be5c94880
          • MD5 SHA1 SHA512

          manifest.json.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\MEIPreload\manifest.json.DATA.fbin
          • Size 256B
          • SHA256 5cab88d397cb441bfd8a97ef57a430d80d2800cf2f58543e749cca224746a431
          • MD5 SHA1 SHA512

          Content.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.fbin
          • Size 6KB
          • SHA256 ba60eb008492d71bd7043f368e1a242c371ad78e1289f42f0e36e04bae8a90e3
          • MD5 SHA1 SHA512 SSDEEP

          LICENSE.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.fbin
          • Size 34KB
          • SHA256 20f8664df79cb01e584f67e48d6fdd7344ade05b4165dc68205bcbf82e72bf25
          • MD5 SHA1 SHA512 SSDEEP

          Entities.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.fbin
          • Size 42KB
          • SHA256 86534bc6b69afaad16e0f8de0237845392e5691573b9003647fe74e1cbdcf1bf
          • MD5 SHA1 SHA512 SSDEEP

          manifest.json.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.fbin
          • Size 160B
          • SHA256 c84e752bcbda44880221da66a2a8841b680bc0cc0afb91200649045432a337ab
          • MD5 SHA1 SHA512

          Logo.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\Logo.png.DATA.fbin
          • Size 31KB
          • SHA256 bf7b39f7e5170abd6a277f78a492101b2d6f61cff9ba4f2f63326afba570351d
          • MD5 SHA1 SHA512 SSDEEP

          LogoCanary.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.fbin
          • Size 29KB
          • SHA256 fd74242ab1925ad4ab5eb1c445adbc0a5a21d0148211a066c666b4e7a72d51e9
          • MD5 SHA1 SHA512 SSDEEP

          SmallLogo.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.fbin
          • Size 15KB
          • SHA256 6ffb1a7082d88917496224cbc23c91e0a039e38d768d6b036f3b0b3f408cb7e9
          • MD5 SHA1 SHA512 SSDEEP

          SmallLogoCanary.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.fbin
          • Size 14KB
          • SHA256 f822b3c5bf5a0102c6765423c322b7c28530391531a25ab8bbee8961da409870
          • MD5 SHA1 SHA512 SSDEEP

          SmallLogoDev.png.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.fbin
          • Size 14KB
          • SHA256 dc19c9f1712d6fe3396ea27c9a1b72c51426c85d094def544c673b00f0f60c2a
          • MD5 SHA1 SHA512 SSDEEP

          resources.pri.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\resources.pri.DATA.fbin
          • Size 3KB
          • SHA256 ad090348a5c9e828cf584eda9c362a4eb89af0c8441d601579ac04f534851869
          • MD5 SHA1 SHA512

          identity_helper.Sparse.Beta.msix.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Beta.msix.DATA.fbin
          • Size 53KB
          • SHA256 685a9349aa28191c3a0733dc8e9b465c7ea47511abc68a366236699ae66d6f4a
          • MD5 SHA1 SHA512 SSDEEP

          vk_swiftshader_icd.json.DATA.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\vk_swiftshader_icd.json.DATA.fbin
          • Size 128B
          • SHA256 4b0f008da0188cc8658cf05395a30e5e4a24c5472dc86782b3ee1916c0a20fd0
          • MD5 SHA1 SHA512

          Advertising.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Advertising.fbin
          • Size 24KB
          • SHA256 8c4f52886e55990dd15fca6902e11f609213c3d76aa9b05d6b502a9f226af2e2
          • MD5 SHA1 SHA512 SSDEEP

          Analytics.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Analytics.fbin
          • Size 4KB
          • SHA256 8798c58f2f2bfe879714db2e86cc16e2bd2c007a228b9b0e3ff88244060751ac
          • MD5 SHA1 SHA512 SSDEEP

          Other.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Other.fbin
          • Size 64B
          • SHA256 fbaab57b89fb476655c2c424714402e0e6ee971e0f0213df174020a085261b3a
          • MD5 SHA1 SHA512

          Fingerprinting.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Fingerprinting.fbin
          • Size 192B
          • SHA256 b41d631f866be5a61ef22c39c239265d0ebf580eaeea149f2e8b4fe1bf8b59fb
          • MD5 SHA1 SHA512

          Social.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Social.fbin
          • Size 3KB
          • SHA256 e698a1a702cf858e81007d16079860bfc5d5396d71724e3ef3c147e5e7026142
          • MD5 SHA1 SHA512

          mf_trace.wprp.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\edge_feedback\mf_trace.wprp.fbin
          • Size 12KB
          • SHA256 6a3503b326ae91d8c072538f30110e9d51aef72b5a4a91e253f1d9a55b1f117d
          • MD5 SHA1 SHA512 SSDEEP

          stable.identity_helper.exe.manifest.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest.fbin
          • Size 1KB
          • SHA256 10bedce7a104b8155b9fd157cc35d951012a4fb07a615e5ab96a1447edfa6627
          • MD5 SHA1 SHA512

          identity_helper.Sparse.Dev.msix.fbin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Dev.msix.fbin
          • Size 53KB
          • SHA256 a48fde4aa9797c669c23ed6d112ccfdbadf3dc58e573170c31c76fbda37b6e2b
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140_1.dll.fbin

          • Path C:\Program Files\Java\jdk-1.8\bin\vcruntime140_1.dll.fbin
          • Size 36KB
          • SHA256 26813319dde0485bb206300e29a367194df9516aa3c4c4dea0878c2894cc82d2
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140.dll.fbin

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll.fbin
          • Size 95KB
          • SHA256 5daaa4c1730740f90d0a2d9e7b9e935255a9cdfc8716cda25bec8d23fb3cf7a9
          • MD5 SHA1 SHA512 SSDEEP

          win32_MoveNoDrop32x32.gif.fbin

          • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.fbin
          • Size 176B
          • SHA256 de36906abe8000fdcd65bce6cb84aa4e0efe4ad4d213ba825a8a72276fca5a27
          • MD5 SHA1 SHA512

          msvcp140.dll.fbin

          • Path C:\Program Files\Java\jre-1.8\bin\plugin2\msvcp140.dll.fbin
          • Size 558KB
          • SHA256 2d70944c3de8d337b89f26f4938513c0248c73ea16c3fb76165e554c24b23076
          • MD5 SHA1 SHA512 SSDEEP

          EXCEL_F_COL.HXK.fbin

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_F_COL.HXK.fbin
          • Size 144B
          • SHA256 bc632d7dcdfd6413e96f1d3836ff2a3738778ee410b09354ae5cee19e389a2f2
          • MD5 SHA1 SHA512

          Microsoft.Mashup.Client.Initialization.dll.fbin

          • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Initialization.dll.fbin
          • Size 16B
          • SHA256 bf26cb86cf2aa03d8d25974cc6613569b42644499e4ca708c8aae2b10d361587
          • MD5 SHA1 SHA512

          vccorlib140.dll.fbin

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vccorlib140.dll.fbin
          • Size 358KB
          • SHA256 dcd15bfaac8b6c40a68d9372367b92df07e9eb944a06b2a5ea2bd3fb002b553b
          • MD5 SHA1 SHA512 SSDEEP

          DatabaseCompare_k_col.hxk.fbin

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\DatabaseCompare_k_col.hxk.fbin
          • Size 144B
          • SHA256 4d447ca97fdfc2df2095189d2a9337d229cb5a6093f623ba81da5f10dcf82896
          • MD5 SHA1 SHA512

          concrt140.dll.fbin

          • Path C:\Program Files\Microsoft Office\root\vfs\System\concrt140.dll.fbin
          • Size 324KB
          • SHA256 84584093bc3307b96b961b67d2ded27e3753a184ebf4a046041fe1120e624265
          • MD5 SHA1 SHA512 SSDEEP

          msvcp140.dll.fbin

          • Path C:\Program Files\Microsoft Office\root\vfs\System\msvcp140.dll.fbin
          • Size 613KB
          • SHA256 3651f1ce33933aee5302b3519c9e4363426b34382aa233236d7bda890c47363b
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140.dll.fbin

          • Path C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll.fbin
          • Size 83KB
          • SHA256 8eec080d3660e7981a2840b5ac5fc5a370d7f6c989d3269605d2a22470d17ed9
          • MD5 SHA1 SHA512 SSDEEP

          vlc.mo.fbin

          • Path C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo.fbin
          • Size 771KB
          • SHA256 8c29cf0e48961b251d3fb874fc9e07258090417fb678a50704109a859518e9c4
          • MD5 SHA1 SHA512 SSDEEP