files with generic names like firmware.bin or those from unknown file upload sites (upload.ee, sendit.kiwi) unless verified.