lumma | 7d4f17d9c4809e6a6874e11c484f6c6b3b966dd5a33f9f09d9d3a3d600b4e355

Analysis

max time kernel
72s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2023 19:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Install_Auto.bat
Size

492B
MD5

e811b616f7c5dcbbd9d48d91c605a11e
SHA1

9a4b0fe213a789b54f559bd0dda3649738f72716
SHA256

7d4f17d9c4809e6a6874e11c484f6c6b3b966dd5a33f9f09d9d3a3d600b4e355
SHA512

57f9c415fe3f3cf35075c3c768175258719a2ea4345391c30a35bbc088fa856494079bf8cbaeea18f93f0b8ee39e7f4da4d68e59540a3d5e9e98f024181addc3

Score

10^/10

lumma discovery stealer

Malware Config

Signatures

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Blocklisted process makes network request 2 IoCs

Processes:

powershell.exe

flow pid process

2 3376 powershell.exe
16 3376 powershell.exe
Downloads MZ/PE file
Executes dropped EXE 5 IoCs

Processes:

SpotifySetup.exeSpotify.exeSpotify.exeSpotify.exeSpotify.exe

pid process

4948 SpotifySetup.exe
656 Spotify.exe
2120 Spotify.exe
2804 Spotify.exe
4632 Spotify.exe
Loads dropped DLL 6 IoCs

Processes:

Spotify.exeSpotify.exeSpotify.exe

pid process

2120 Spotify.exe
2120 Spotify.exe
2804 Spotify.exe
2804 Spotify.exe
4632 Spotify.exe
4632 Spotify.exe
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

flow	pid	process
2	3376	powershell.exe
16	3376	powershell.exe

pid	process
4948	SpotifySetup.exe
656	Spotify.exe
2120	Spotify.exe
2804	Spotify.exe
4632	Spotify.exe

pid	process
2120	Spotify.exe
2120	Spotify.exe
2804	Spotify.exe
2804	Spotify.exe
4632	Spotify.exe
4632	Spotify.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

powershell.exe

pid	process
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

powershell.exe

description pid process

Token: SeDebugPrivilege 3376 powershell.exe

description	pid	process
Token: SeDebugPrivilege	3376	powershell.exe

Suspicious use of WriteProcessMemory 22 IoCs

Processes:

cmd.exepowershell.exeexplorer.exeSpotifySetup.exeSpotify.exe

description	pid	process	target process
PID 3924 wrote to memory of 3376	3924	cmd.exe	powershell.exe
PID 3924 wrote to memory of 3376	3924	cmd.exe	powershell.exe
PID 3376 wrote to memory of 1960	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 1960	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 240	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 240	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 100	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 100	3376	powershell.exe	curl.exe
PID 3376 wrote to memory of 3680	3376	powershell.exe	explorer.exe
PID 3376 wrote to memory of 3680	3376	powershell.exe	explorer.exe
PID 828 wrote to memory of 4948	828	explorer.exe	SpotifySetup.exe
PID 828 wrote to memory of 4948	828	explorer.exe	SpotifySetup.exe
PID 828 wrote to memory of 4948	828	explorer.exe	SpotifySetup.exe
PID 4948 wrote to memory of 656	4948	SpotifySetup.exe	Spotify.exe
PID 4948 wrote to memory of 656	4948	SpotifySetup.exe	Spotify.exe
PID 4948 wrote to memory of 656	4948	SpotifySetup.exe	Spotify.exe
PID 3376 wrote to memory of 2120	3376	powershell.exe	Spotify.exe
PID 3376 wrote to memory of 2120	3376	powershell.exe	Spotify.exe
PID 3376 wrote to memory of 2120	3376	powershell.exe	Spotify.exe
PID 2120 wrote to memory of 2804	2120	Spotify.exe	Spotify.exe
PID 2120 wrote to memory of 2804	2120	Spotify.exe	Spotify.exe
PID 2120 wrote to memory of 2804	2120	Spotify.exe	Spotify.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Install_Auto.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3924

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -Command "&{[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12}; """"& { $((Invoke-WebRequest -UseBasicParsing 'https://raw.githubusercontent.com/amd64fox/SpotX/main/Install.ps1').Content)} -confirm_uninstall_ms_spoti -confirm_spoti_recomended_over -podcasts_off -cache_off -block_update_on -start_spoti -new_theme -adsections_off -lyrics_stat spotify """" | Invoke-Expression"
2⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3376

C:\Windows\system32\curl.exe
"C:\Windows\system32\curl.exe" -V
3⤵
PID:1960

C:\Windows\system32\curl.exe
"C:\Windows\system32\curl.exe" -s -w %{http_code} -o /dev/null https://download.scdn.co/upgrade/client/win32-x86/spotify_installer-1.2.7.1277.g2b3ce637-219.exe --retry 2 --ssl-no-revoke
3⤵
PID:240

C:\Windows\system32\curl.exe
"C:\Windows\system32\curl.exe" https://download.scdn.co/upgrade/client/win32-x86/spotify_installer-1.2.7.1277.g2b3ce637-219.exe -o C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe --progress-bar --retry 3 --ssl-no-revoke
3⤵
PID:100

C:\Windows\explorer.exe
"C:\Windows\explorer.exe" C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe
3⤵
PID:3680

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2120

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Spotify\User Data" --url=https://crashdump.spotify.com:443/ --annotation=platform=win32 --annotation=product=spotify --annotation=version=1.2.7.1277 --initial-client-data=0x468,0x46c,0x470,0x444,0x474,0x69843a38,0x69843a48,0x69843a54
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2804

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --disable-d3d11 --log-severity=disable --user-agent-product="Chrome/110.0.5481.104 Spotify/1.2.7.1277" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=1748 --field-trial-handle=1920,i,9754624063766736174,5471095146787014278,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
4⤵
PID:3464

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --log-severity=disable --user-agent-product="Chrome/110.0.5481.104 Spotify/1.2.7.1277" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3064 --field-trial-handle=1920,i,9754624063766736174,5471095146787014278,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
4⤵
PID:3428

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="Chrome/110.0.5481.104 Spotify/1.2.7.1277" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3080 --field-trial-handle=1920,i,9754624063766736174,5471095146787014278,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
4⤵
PID:1788

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/110.0.5481.104 Spotify/1.2.7.1277" --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --first-renderer-process --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3824 --field-trial-handle=1920,i,9754624063766736174,5471095146787014278,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
4⤵
PID:1120

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Suspicious use of WriteProcessMemory
PID:828

C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe
"C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe"
2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4948

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Spotify.exe
3⤵
- Executes dropped EXE
PID:656

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3652

C:\Windows\system32\werfault.exe
werfault.exe /hc /shared Global\3f4a13ec926b4a5cb22051025df59635 /t 3832 /p 3740
1⤵
PID:1644

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
PID:4792

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

T1102

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133237317557762941.txt
Filesize
76KB

MD5
40a3bfdbe8f5f9ce2ccb1b9e5bc64eef

SHA1
118d18bdd5f9e99dba89867f5aa9f1dfd5e63632

SHA256
ade8bb612d2fc4e155b67dbb2bf018ff24b41044ce7d5788e82f251286869f0c

SHA512
0f3f27c76ed7c429a49b9da12920cd55d24f55befcc9f7efccd94a64bfd9bbff13d6bd1b51e8ba41017f2b8cc47ddd91d72c159d828b75c385d7b1ce1ccab52f

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
Filesize
96B

MD5
56ba0ad7a5a3423613460adf8adc7e20

SHA1
cc5235a33c4389e36357c80bc56ea2169ec80038

SHA256
556ffd8227fb32e0e732395b0e8bf2f01b506792a4d1181d2ebfc66a0af6f34c

SHA512
81dd54fe4a355185997d0871d8299a88a2a9b409a53021e933642ffabf515b985959d17d615822cf2038d396f9fa03049c5c24880ca0bce687a0d1020d026b63

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index~RFe583c39.TMP
Filesize
48B

MD5
58ede6900e89164cd1d613648cd3f185

SHA1
0156436cf49010ac5ef23d23b332d568a5da422e

SHA256
38554a11ec59b268e9185dc1d8dd024195e3e4d15d5604a3b0fd8e8a876462d3

SHA512
c25c2949455ad89aafb7deb076a40836ec1af4047497efb05d56a99a05f6856fc8b634667b0d0b35b5346e57dae8d1181267560d6d027460c608d03f91ce4b69

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Network\TransportSecurity
Filesize
692B

MD5
bece213e6d73bd21649f6b7a8a1b45c5

SHA1
4872ba4d2d810442dfe431056495eb567426036d

SHA256
7878e644ad63dd9a8e242b42553cfd17c1c8bda673bbff091d06d8311c42516d

SHA512
15c9805b3ff11c8b41adf1967f8a91cbcfbf8b9a8b15652d9ea6dc86689b69e1e7b372d08168dc45d8b4bdebcf817435c8045f751619c53be6cf39afa1d40643

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Network\TransportSecurity
Filesize
692B

MD5
a38326ecfca030045c9432ee31044099

SHA1
cafbbda17aad435d0e639276919dc8b20d42e7ed

SHA256
a706faef41a3e71c1cbdcf60e75e138b072c6ffac919383156bc8d3adc873cfe

SHA512
a5d9cf41e25bc737d4c6e95e37ff39bdbcff8e529984af8fb57ceef99bf6253ea2e632c97b569e325e1b6a5667090d39a28d8137a0b005e66adb1d1c948b9006

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Network\TransportSecurity~RFe585176.TMP
Filesize
524B

MD5
d779ebba052a8ac91fc37c372e9ae1f3

SHA1
f02f51810e73f291c58a6310c3ea0a6c940d1303

SHA256
57d4dc9654780a0c210b2ffbfe76c820998ed14faf8b2764d1ff9d80a8d85aad

SHA512
9c749c7a9bc9a8afe5cdfaf10eea822286ccaca6193957cb10bada843156935bd84806e429fa8b6112e748394c9900916c643a438eb440da51c47eaff625a1b8

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Browser\Session Storage\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Spotify\LocalPrefs.json
Filesize
687B

MD5
d9315b34d9535365fa704b441b0642e9

SHA1
e9fe3eef53351e10bf62dbf369fce433654347e5

SHA256
ba3ebedf326ab1afcb82709a5b42517b6b53de8951cf9d1923d1acdee3b8a778

SHA512
374929e24eef6443466e0729bc5519e582ca6d71cf03b0061d4f1fbeb1a2cd566efe2541ce6bd88b748d58b967d8e086d9cf1e49a2ff214e40e1b7ab2fa2c25c

Download Submit
C:\Users\Admin\AppData\Local\Spotify\LocalPrefs.json~RFe57eacd.TMP
Filesize
484B

MD5
2b6b0c17ad243f85cc7a9408bcbcc982

SHA1
0caac47a19f68ab3fb3b84149ca0c156ec631a11

SHA256
5f39bbb7dd7c45177876184aa140f45ecb30993085927cf73b4de7f73336c0b7

SHA512
00637b2a0dab0e5d8293392b23828ff2834bac628f1f4baffc09668491928997a3dd4213b04962945f71aee619dbe095a711015e742b4d8792cdfa12f8df0f93

Download Submit
C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
Filesize
56B

MD5
d9c5eeffd8505ce9b102123dc0cfb17c

SHA1
a4af4b041348254b4748f416864718fdbfbbd01c

SHA256
564ba534643f86c70cef10247ba7495d7dac0b26a40913933c1d6e2880ef297a

SHA512
6f25cdb5a3d46a1d77b463abe40b385f3188f9f8f2e3af23d7e88d138805bbf1f9c60434e6c644b7b20c5323875ea1fb0b34074a5630322185677cd720aa6d5f

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe
Filesize
83.5MB

MD5
5e307b5182474dd37d18cd8ada1a0285

SHA1
4d70faf2e6e3b0b5a91ecf0470a42bb9afff44cf

SHA256
5f38b643d1adddd70ae034cb4dd6f567b267c04d7a77e51c6869718630cfee92

SHA512
e6e249218c46bce48c4e807ef88a81149d456f01e1234d9081525a5f8cb8c0689502315be2ee8c0f5b56572fa696a6474917f34e896f14b9b367feecd44f04da

Download Submit
C:\Users\Admin\AppData\Local\Temp\SpotX_Temp-2023-03-19_20-33-41\SpotifySetup.exe
Filesize
83.5MB

MD5
5e307b5182474dd37d18cd8ada1a0285

SHA1
4d70faf2e6e3b0b5a91ecf0470a42bb9afff44cf

SHA256
5f38b643d1adddd70ae034cb4dd6f567b267c04d7a77e51c6869718630cfee92

SHA512
e6e249218c46bce48c4e807ef88a81149d456f01e1234d9081525a5f8cb8c0689502315be2ee8c0f5b56572fa696a6474917f34e896f14b9b367feecd44f04da

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_rruf00q4.l1f.ps1
Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
Filesize
1.5MB

MD5
649488d28c18f3626f1f3dc9d51f64e8

SHA1
62972f8387d9f9ae9a3cf1ad92807915345d4828

SHA256
bd1c6f44ea8032a2fb5aae336d6b636e84aa46ed2103259f490eb15287b4a3a1

SHA512
af7f568956388410d8567254d508c8bf50e5a2044a590d85bfc03dffa8e98199bb604c66febd7f8d6a7903ee5e4429ef6cfffe8a297438c82d50f2b62cf514c0

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Apps\xpui.spa
Filesize
1.4MB

MD5
22788257f6e1fd3b50ab6d72752af278

SHA1
01af69d03bfd15104432ca3ff8502825d0af8aaf

SHA256
2d909edb23fdd4049bdfa8ec4da9d58c3eeb8191a5f8c0f56aba0266a2422119

SHA512
f8816d1f5dbd8094512ec036a4bc1ef5f25973127a3a54bb3bf1dbb9362c17e21c19d60f5f9f4466f91a37a0d1893568091c6e1e76e0cc8b08adc7f8f70951c5

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Apps\xpui.spa
Filesize
5.9MB

MD5
0c983ed94f5ca4c740a6cfec5c441c16

SHA1
b649a7c0b9e52a097e48dedb3fae189caf9ac735

SHA256
2f1e192d2542d1e1062a536d1c0179b846498b35f8ad9db0ec08f377720eb9d7

SHA512
ef37d15de454331b0b2954308e06e734ab9b59e2ee5e0cd4e0a9c66ad277c64298ce75e0acc7831cb8874bf126e2ff2ef28683d719b6047c81397ffb5758f8f7

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
Filesize
3.9MB

MD5
497dca87043d7c5d5bf8a81c61435642

SHA1
ec0b37632af422e18f507ca1188433efe629035c

SHA256
0fed010750b6eec9ed7f2d07551bd53a355d07dd10b5a6d90cd4b00cc4229329

SHA512
71f61c26dd9a54afd48aac109ef9e6bb986ffbee5d7dd8a5c83ca5eef60dffb033ef63ba740914d8a38ca1642e3b19976d7f4103d68206adfbc28d1ad2f1dd83

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
13dc9f455543556daaeed3b918992789

SHA1
5c3d8aea2499fa402bc5951dada102ebb776df68

SHA256
1fb2753dccaff558db3150b3bc87b9adf91cec85bb9001d7ca0ce1f7145437ba

SHA512
8ac3f52ffb36580564ab6a33d7dc639b367ca0b1ffd5f0c9162b146081527defa55826d758f8e0eb6898f2bb2d13f76fc6faa042c704cf1d0e9c5e1ca6036d42

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
13dc9f455543556daaeed3b918992789

SHA1
5c3d8aea2499fa402bc5951dada102ebb776df68

SHA256
1fb2753dccaff558db3150b3bc87b9adf91cec85bb9001d7ca0ce1f7145437ba

SHA512
8ac3f52ffb36580564ab6a33d7dc639b367ca0b1ffd5f0c9162b146081527defa55826d758f8e0eb6898f2bb2d13f76fc6faa042c704cf1d0e9c5e1ca6036d42

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
6b913160fbaba012204142aa1ab74fd4

SHA1
cf7878b2dac38f3c686a87ea9b3d99e9ed317162

SHA256
14ca88c3be66c7c693b0f3959a226578ff695c7c7d0dc47d4f161480b1a1d752

SHA512
85588ce6eba5a05eec652c5489842b6d3ca608e05e4dbb529551da8f064894992eedc0c7628d4a081d11a9f66132d5d3da25cb8ff09ccd3ac7d43968527bf7fe

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.4MB

MD5
dae697d738a75dcb1631523879967634

SHA1
7335edc473f11f160c1b139af6ed3ce8146a44f3

SHA256
efe3997693d8d2a83eab82bd1842c032e129951a37a620c8678c46c59c62275d

SHA512
404227e984a8cc52a195d14b4d46f212af40e406c8a0319c49a4177f451cd107dd1d8fcf033bdf0a1767c12cc5f1f31b343a89ef2e1226256dfdff6a819e7293

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
Filesize
599KB

MD5
d03d4c5ddcdbabe4666bc7a548d20ec6

SHA1
5055542c06e611e813de5c8ee98fde40b45e8fe7

SHA256
eb133cd63e7566b3314312704c194d61afcb1c642868f534d0c6a326f524cb0f

SHA512
163155b2ab0a6b9aeea5155f26467bc3660d13da3693592af3688cbe576ca49afdc655fb1fa372f8e2bff641e1c7c30a777dd344b393c552432104fea8578b75

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
Filesize
896KB

MD5
7e0df0c11087dbd96d7e3211b27db0c4

SHA1
adf7da811387b31c6a9ef01aba792c696dcd7838

SHA256
4ee1cfae48ed47a7ca5315c64659385283a57accc1bc9ae24c5fe3d2d28c2603

SHA512
e357f6aa9a2ab1f09ceed4dcad9c62a252ae31c5797ff135aa8907221465f3d3709aa950b6ea995d66f238b2539661554e8a76ad931de18f4c8e7f67bc44f469

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
1.1MB

MD5
7b49c99fe56efafc81f9b1cf64671a78

SHA1
93f33c050541258777804da7446ce431b1601adc

SHA256
f3602b4f12c9bb2ef69c475c85d29138794f92e89149eba2bf1265d29e68fe3c

SHA512
9ccb36a165d86ed746425303a94de511d53ee878f4cb489f9d72c49d8d1dc48605444aeffb52a60b21eb11cfdf04c1fd919328259b7b48ac2d22b2a02c90bc2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
Filesize
655B

MD5
e77e36c159d1f61e434f060683728c58

SHA1
3937b77f65640880a9c9a96c73a254f1dc04b3f2

SHA256
7a56aa4b4ff4d8a5084dee026a2fb8704fb259d9ce215542bf3b3fc2506fea60

SHA512
6ac5a648eedd2f81f2fa12f940b018e44dc440d002fff6307b2eaff904be15bb9b08bfe148c4d90376b1f9347ed182611ee8a58eae27444cda43a5aad3655009

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll
Filesize
3.9MB

MD5
497dca87043d7c5d5bf8a81c61435642

SHA1
ec0b37632af422e18f507ca1188433efe629035c

SHA256
0fed010750b6eec9ed7f2d07551bd53a355d07dd10b5a6d90cd4b00cc4229329

SHA512
71f61c26dd9a54afd48aac109ef9e6bb986ffbee5d7dd8a5c83ca5eef60dffb033ef63ba740914d8a38ca1642e3b19976d7f4103d68206adfbc28d1ad2f1dd83

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
Filesize
10.1MB

MD5
2c367970ac87a9275eeec5629bb6fc3d

SHA1
399324d1aeee5e74747a6873501a1ee5aac005ee

SHA256
17d57b17d12dc5cfbf06413d68a06f45ccf245f4abdf5429f30256977c4ed6de

SHA512
f788a0d35f9e4bebe641ee67fff14968b62891f52d05bf638cd2c845df87f2e107c42a32bbe62f389f05e5673fe55cbdb85258571e698325400705cd7b16db01

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
Filesize
372KB

MD5
2b1132fc8f12d4fa3ec68a3293f22d0a

SHA1
ac25afab91399f79e8e6138a0290f1513020571a

SHA256
b424b7ad12aee02a9de5b6b740ee962df760de6f0d1f04e353ce1269dbf7403a

SHA512
fef1c6b0ae2829b4aafd12d046aa9506c4df6d4be6165167cb13aaadd3682ef72746ee9aeda40b8acc56691888f36f1005b6b85d161a6b32c9a0fa7730753029

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libGLESv2.dll
Filesize
6.2MB

MD5
9933cb0b99c9651de7832d8fd05b1de0

SHA1
0e5ddbfbc1f0788a9fbc57e751c8b9ce7e8ec18b

SHA256
262e337d30ba6c9a64d357ac6511856dab4b546ed47114f509de6f37451134a0

SHA512
b6f061133a8f7b6edb3287a08e300fcae0b8cee41cee25facb81a4a297e8e3c0e17aa9348c35a6a5cfffaeeb2d8f2205fc7a1ff25a376c699769221cd4505de2

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
158.4MB

MD5
15529475ac91826af75d06b6c1ba1ecc

SHA1
3d8bc5e0e800e90ccfba6c6195843e0803b9fab4

SHA256
cd8602d1ce348d5ae2c301060992d1f12030101d820cfcca7c61a7b540ad4b91

SHA512
f43aca2adf5c3227867cac35493af60a31d9a00722f15a99e35bf3889ec74f6bc9451f1f60e1a0e52e85c04f0015ab3d8c0598ef9d33d3043f04636d8d054c9a

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
158.4MB

MD5
15529475ac91826af75d06b6c1ba1ecc

SHA1
3d8bc5e0e800e90ccfba6c6195843e0803b9fab4

SHA256
cd8602d1ce348d5ae2c301060992d1f12030101d820cfcca7c61a7b540ad4b91

SHA512
f43aca2adf5c3227867cac35493af60a31d9a00722f15a99e35bf3889ec74f6bc9451f1f60e1a0e52e85c04f0015ab3d8c0598ef9d33d3043f04636d8d054c9a

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
149.3MB

MD5
3193b0b2bc864fd5f8d4829823f6e121

SHA1
7bf48811cab3a95f92cf598ca34545cc818ea0d4

SHA256
766974654634a53acf8a470835f7fc23c2438a1df65d1cea1671a4fd98e68fbc

SHA512
c9325517abf50f4518f0dc11d0401b29cafc30c4a0d8e644032ced392cd7bcb617133320594138f3b73ccd9552ef5f1a742541f0b54879f5af1680f305121aed

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
141.4MB

MD5
9f6f98441f33c88a6e4d97fa107d0135

SHA1
2e34d00bf28a2129daf3e6f17720d9b6c7b1e43e

SHA256
7124877dde0124308e7f94adb738deac9f463fcdfae9d7859ad54923aeddaeb4

SHA512
4fda285aabf5b3be4dd36f5675016c272097d16f2b7e45580040a8faa97912f46673f189d64109f2a57210eaffa77f250d162195cccd36f6d156f5930d6bcdd9

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
116.6MB

MD5
40a6f3871ccda8b842f548ef59c4473b

SHA1
0a781f19ffdc1ad6cb7003eb4262ba6152bcc386

SHA256
5ecf1a712ec2e5ef9525964d93ae37bebd6c4122e1a352a53ef8d6450a8856a2

SHA512
77d2c2cde4e95f552d0e6161d31f8e0e1268fb406ae5c1db8997cc2cd1f4fa2c755250d3adb96a0b1fa7671dcfc68596096864e63e699b378a184c85ce513857

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
116.2MB

MD5
43d90e6cdbf3d617fead5958daed1010

SHA1
c3c83a5a792feb3f2ea7a6a37952d349daaa6209

SHA256
1edc7f0ea207bea0ecee71b6565aa9b3cf1fd7904cce904bed6275402081b0de

SHA512
8b533da09281acd2ae1a853e538d4fb65e751590d7c22a0eff74a6d9da89248b7448297a410187022f70b1b22a2d0c9ed8a46f7b848477e66faeb9871933e5e1

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
87.6MB

MD5
efbc2714d7173a3b9d586b7915952903

SHA1
29f33605aa8f60ae59f2a2627f7ecf8664a77a0b

SHA256
5ee436bc67b264453fc765c5afae7201b49e12f59a64e93ed34eee3f091ee6ac

SHA512
b2a270de43943f03b3644e1cfa1cc9110bb90089cd655a1b530a9e2edcbedbd367d67eaf9790383825db2e456c14eb5c0cca39734d620b009d8ea1a60122cc9a

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
115.2MB

MD5
19e510379b35b1c60cff44b245bfc6f2

SHA1
a25999ee06b0edf23cdf34093590f2ccdf71edb7

SHA256
8e5ed02d5536a0f7c23ae74a34acb7e43b075e224a7442dff22650409866721d

SHA512
a4c88e6fc72b7882c70f63f90d629d0089a144034dcd81b2abaebb2572f3e1d4a06bea9dcea7407b9f4ca83d19542190e95e776552fd26ec116e0f4e00e7030c

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libegl.dll
Filesize
372KB

MD5
2b1132fc8f12d4fa3ec68a3293f22d0a

SHA1
ac25afab91399f79e8e6138a0290f1513020571a

SHA256
b424b7ad12aee02a9de5b6b740ee962df760de6f0d1f04e353ce1269dbf7403a

SHA512
fef1c6b0ae2829b4aafd12d046aa9506c4df6d4be6165167cb13aaadd3682ef72746ee9aeda40b8acc56691888f36f1005b6b85d161a6b32c9a0fa7730753029

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
Filesize
6.2MB

MD5
9933cb0b99c9651de7832d8fd05b1de0

SHA1
0e5ddbfbc1f0788a9fbc57e751c8b9ce7e8ec18b

SHA256
262e337d30ba6c9a64d357ac6511856dab4b546ed47114f509de6f37451134a0

SHA512
b6f061133a8f7b6edb3287a08e300fcae0b8cee41cee25facb81a4a297e8e3c0e17aa9348c35a6a5cfffaeeb2d8f2205fc7a1ff25a376c699769221cd4505de2

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
Filesize
364KB

MD5
d3368f2e6b469fda055af7a24f4fdb02

SHA1
841573fc67ca72cd2f37a89d5c8007fa8de0c6f1

SHA256
81140417f3299086fc358f946c49b96d24bcaff0c09baa3292e24a8b361c0813

SHA512
96811790b03ed2044241aa9d62069bdfde1bdaa94457c2cb86befc4c29f4db966fb27a45d94349c0110d19d9060fbb916a48fcfe5a517052a4d4fb384cf5922c

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
Filesize
13KB

MD5
159d3901f386388df374566fb6fcd622

SHA1
7ef0b2b651a7bdcba44efafb5e67b922d447f198

SHA256
e531925d86eb4f14ff09675bebce21a5ab6301ab139052f0514752e8ea346a19

SHA512
c951416ccfca17a533719e00d244844469a35dd7c6b1b21ad24daa400881b265750d97039c7e7f37e5d058b92402b1a016ca57315adb89627e0692330bc3282f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
Filesize
7.3MB

MD5
d74731ce9b252737721129bb55970598

SHA1
18d25adbe1c2c808d71ead465281bfe3a1d637d0

SHA256
d9bc680a02d25144c143ff6825ae8f149c9abf85f3894e975de6befed28bea0c

SHA512
c64bc65632fa523c63bf3843374779d004626c7f121115234b48bcddd56fc731fd11b62c2934f3b6174e6a1df7feace46f9db5335c9add46e3fbc3bad5e72f09

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
Filesize
590KB

MD5
10409a90206eb4859d27095aebf4c392

SHA1
2a9aa6951c923ccb5ca25348e161ee8799985e7b

SHA256
2de3925cba036e1eec21eccd40c35e501958938cf9f96bd125e145ba12c446a2

SHA512
96d7d065ab39d9a1e7850eeb6d23df9da5b0f6e91ea5c6258a06cef3d39c5eeded3117e83cbc1d0a7b0ed73dc656ef0d2b50651bb99800902186b4f1fb1cfd8e

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
Filesize
4.3MB

MD5
4fed87a14384c86689d69875d0c6f9a6

SHA1
d315cc38b3703bc9935cd5d9604e6ff775243d2e

SHA256
203b35ef27ca4bdeb8e241b1b58318234460e5ffaeb030f598eacccf542b2552

SHA512
28614b9516c633a52391ebbb848994d6f23b2720d2e168351648a9625f581b2ae9274be892f1c891d982222ecbcfeb34f3c2d596f63231541eb4dd57bf14c9d7

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
Filesize
4.3MB

MD5
4fed87a14384c86689d69875d0c6f9a6

SHA1
d315cc38b3703bc9935cd5d9604e6ff775243d2e

SHA256
203b35ef27ca4bdeb8e241b1b58318234460e5ffaeb030f598eacccf542b2552

SHA512
28614b9516c633a52391ebbb848994d6f23b2720d2e168351648a9625f581b2ae9274be892f1c891d982222ecbcfeb34f3c2d596f63231541eb4dd57bf14c9d7

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader_icd.json
Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
Filesize
782KB

MD5
a7d7a64dd61f1b7772d4f3f2fa0e51ea

SHA1
55076ac2dbdae4677cac689af29a9ec0277aa2fe

SHA256
bf77cd8a299afdb7a259626423b31f4c4ee7674de5d57e1ba858f79d3ac8af15

SHA512
1940243ecda51d47aa69b0ae453d36a16d5ae1e22acc2dabce58058c5d0af4f9f4d17b09a95b25e2fc81f3b329dbb4d781c647d731c293ebd5207466dc261ec8

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
Filesize
782KB

MD5
a7d7a64dd61f1b7772d4f3f2fa0e51ea

SHA1
55076ac2dbdae4677cac689af29a9ec0277aa2fe

SHA256
bf77cd8a299afdb7a259626423b31f4c4ee7674de5d57e1ba858f79d3ac8af15

SHA512
1940243ecda51d47aa69b0ae453d36a16d5ae1e22acc2dabce58058c5d0af4f9f4d17b09a95b25e2fc81f3b329dbb4d781c647d731c293ebd5207466dc261ec8

Download Submit
\??\pipe\crashpad_2120_HNKGBLORZZRMQVIS
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/656-333-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/656-332-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/1120-499-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/1788-505-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/2120-548-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/2120-385-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/2804-397-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/2804-560-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/3376-133-0x0000025D35B90000-0x0000025D35BB2000-memory.dmp

Filesize
136KB

Download
memory/3376-149-0x0000025D50330000-0x0000025D50344000-memory.dmp

Filesize
80KB

Download
memory/3376-337-0x0000025D51190000-0x0000025D511A2000-memory.dmp

Filesize
72KB

Download
memory/3376-143-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-334-0x0000025D51320000-0x0000025D514E2000-memory.dmp

Filesize
1.8MB

Download
memory/3376-155-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-154-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-153-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-144-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-335-0x0000025D51A20000-0x0000025D51F48000-memory.dmp

Filesize
5.2MB

Download
memory/3376-150-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3376-336-0x0000025D50520000-0x0000025D5052A000-memory.dmp

Filesize
40KB

Download
memory/3376-148-0x0000025D502B0000-0x0000025D502D6000-memory.dmp

Filesize
152KB

Download
memory/3376-147-0x0000025D4FEE0000-0x0000025D4FEEA000-memory.dmp

Filesize
40KB

Download
memory/3376-146-0x0000025D4FEC0000-0x0000025D4FED6000-memory.dmp

Filesize
88KB

Download
memory/3376-145-0x0000025D4DCD0000-0x0000025D4DCE0000-memory.dmp

Filesize
64KB

Download
memory/3428-502-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/3464-434-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/4632-399-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/4632-457-0x0000000000400000-0x0000000001690000-memory.dmp

Filesize
18.6MB

Download
memory/4792-555-0x0000018DBA070000-0x0000018DBA090000-memory.dmp

Filesize
128KB

Download
memory/4792-557-0x0000018DBA030000-0x0000018DBA050000-memory.dmp

Filesize
128KB

Download
memory/4792-559-0x0000018DBA050000-0x0000018DBA070000-memory.dmp

Filesize
128KB

Download
memory/4792-563-0x0000018DBA3C0000-0x0000018DBA3E0000-memory.dmp

Filesize
128KB

Download