b7969504a01437385f5865aef152e0b32b2a1344620ec08aa98c1bac580eff4b

Analysis

max time kernel
11s
max time network
70s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27-03-2023 12:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ESPOTIFY SIN PUBLICIDAD/Spotify1-1-73-517.exe
Size

70.6MB
MD5

567a2857c6f4b381ce27107cb392c0e9
SHA1

ca57b08470d6281792ba78d722d48718d3439d79
SHA256

9e71d03181600209f01eb261db7ebf6fbdfee38ec1ac1974d7f61f75895473d3
SHA512

0850eda05cfdac6fe7d678bb6e22040cbe856ed6bd78c68a52846a40fc6c89a10ce95567df8d62f461193ff3929dca4a6b6c0b5bdc3cf1f661b8f420fc281336
SSDEEP

1572864:6Vt/59XSZMUZ7Q/3PjtWomEglhE5Hm2Fyh4vWVN9FNXLs:kpXSZzNQJ9glhE5rFyheWL

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

Processes:

Spotify.exe

pid process

4020 Spotify.exe
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

pid	process
4020	Spotify.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

Spotify1-1-73-517.exe

description	pid	process	target process
PID 4648 wrote to memory of 4020	4648	Spotify1-1-73-517.exe	Spotify.exe
PID 4648 wrote to memory of 4020	4648	Spotify1-1-73-517.exe	Spotify.exe
PID 4648 wrote to memory of 4020	4648	Spotify1-1-73-517.exe	Spotify.exe

C:\Users\Admin\AppData\Local\Temp\ESPOTIFY SIN PUBLICIDAD\Spotify1-1-73-517.exe
"C:\Users\Admin\AppData\Local\Temp\ESPOTIFY SIN PUBLICIDAD\Spotify1-1-73-517.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4648

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Spotify.exe
2⤵
- Executes dropped EXE
PID:4020

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Spotify\User Data" --url=https://crashdump.spotify.com:443/ --annotation=platform=win32 --annotation=product=spotify --annotation=version=1.1.73.517 --initial-client-data=0x440,0x444,0x448,0x41c,0x44c,0x74af6a30,0x74af6a40,0x74af6a4c
3⤵
PID:4684

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --field-trial-handle=1784,13727279162479025938,13294863101510068729,131072 --disable-features=CalculateNativeWinOcclusion --disable-d3d11 --log-severity=disable --user-agent-product="Chrome/94.0.4606.71 Spotify/1.1.73.517" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=1792 /prefetch:2
3⤵
PID:440

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1784,13727279162479025938,13294863101510068729,131072 --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=utility --log-severity=disable --user-agent-product="Chrome/94.0.4606.71 Spotify/1.1.73.517" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3076 /prefetch:8
3⤵
PID:5044

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/94.0.4606.71 Spotify/1.1.73.517" --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --field-trial-handle=1784,13727279162479025938,13294863101510068729,131072 --disable-features=CalculateNativeWinOcclusion --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=3144 /prefetch:1
3⤵
PID:1544

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1784,13727279162479025938,13294863101510068729,131072 --disable-features=CalculateNativeWinOcclusion --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="Chrome/94.0.4606.71 Spotify/1.1.73.517" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify\User Data" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3120 /prefetch:8
3⤵
PID:1488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1456

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
Filesize
56B

MD5
a23c5f95e0b3369d0b50874ceeb80d33

SHA1
2b01a7fa6a0674e07cc24b928fe7d69da3ab41ab

SHA256
7155013b6dd8d3a1a69d107485804a24b6f626b24f14e3828e6bc210e7e8bef8

SHA512
953dff688263cd145941ebfc57bf6fe5ab6f3d842b28d44691d2e206e3c72010692a1c1a4152c6fecf2772b7d792569fe5e3f0b627922fb7a4628cc19507136a

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
Filesize
1.4MB

MD5
731b2dc006aa29ed1887cedda09af62f

SHA1
8ad7c2f8b6060ba1ae9203a09d8f294df09ec93d

SHA256
5727e74611b3c42e049c4bcfc519bac268639ef68a6905d7468ba57340fd35d8

SHA512
e9a353c8a191ec95c091a93adb6c98bdd82f4224e1ce3ae290d6130ce328448cc8e0d27576cb4011595a764ba45bc25a815967382b1a9d274491033e0135c0f4

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
Filesize
3.9MB

MD5
609d3bfdbf153a74d85375a745a0d4e2

SHA1
0bd0073186dfef93c722a65de309c7132c6c97ac

SHA256
9cb657c10545e4be44c833831aa86476e44136ea27b7ee512e49f536880e3785

SHA512
3ca40c66b1f9dd7ecb60772f36f8779b71079ab1aabd81b8d796c5721cc0c8bde7ad0ee2932af01ff510a934e158e07c61c02f9dab9e89c2e0d46fa5d7d36927

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Filesize
18.1MB

MD5
cc32b4a1ac874200b3792559b932ec26

SHA1
037e9cc69bb2d1f586ffb1b858f4af4cc40a40a1

SHA256
5e298de0ad17cff2fd08fb0620504d67dd48d1c03da46cd79ffef6eeef8c9363

SHA512
006e4b7652869c56101b0ae37b840d3ab2e84cdd2806cb2a6891e0fa34ff2d94c891bb6cc1e6cec8ecc1923a64be905588d7a0249e300b9b39eacd3ab02d4661

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
Filesize
614KB

MD5
7c2a51641cd02938d3cd8c58370c6d23

SHA1
72346f5f43efe86d7ddd1cd6117aee213977fe1d

SHA256
71e0080e8718d86b8356eca9f19a9ae7b898adf0a1b175f35a6813bf73b4f660

SHA512
c04c1c21d42093ea941cf0338d84abf6f5c8c17e9cb21930816858c29f35226a00e414c90b4633ce530153e77a2d138cc0aeb53ee7d896fe003b0a3f34bc90b9

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
Filesize
919KB

MD5
3a8f22265673effc9a31c2c906a0dc34

SHA1
90c489f3e1cc0347c21fb4e2b46f30f7057deb5d

SHA256
c5b31e8f2904883ad272f59a1beab3663ae2688eec847794c361649bdad319f6

SHA512
988a9cac09bd18749c620b589f3b2c955f48741d87944ebe6bc862de9b17353e360dc48010a15edfbc0f1fa56365739323702b69dd57b208f05353f3ba03cd98

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Filesize
949KB

MD5
a366d1da7c624cbcd0574c6da50822db

SHA1
cbeb830ab7dbaa0382ef8b274a4d53b8523e1efb

SHA256
abbbed57cd021cb57909330a675ce703e894b20e837574c607565e7bf7d4312d

SHA512
c7950a9bd0bcc3df3190d2eb1b6c9df7940afaac533ff4ac44692d7b305d36d8120a0aabc25eb72ad5592361a3d7825b09f800cbefcb795295b753a518cf2089

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
Filesize
655B

MD5
0de8df4a5ab170c6f80ba63d80390376

SHA1
9579fea263d2ebdb4a417582d87c2959de5b94b8

SHA256
8e2b9e0007c2a91d249b1d1e4237b8ec2c1dfdfd556bd60eb9157785d6a6e8c9

SHA512
a03bc8b002603e44dd775f914ea08ed08f3e1bd7f54362d96eebe4568ac8d9ed0437c9dfad24353d794f030ef5cb3e3528133ff58df31000272b832e4e600b4e

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll
Filesize
3.9MB

MD5
609d3bfdbf153a74d85375a745a0d4e2

SHA1
0bd0073186dfef93c722a65de309c7132c6c97ac

SHA256
9cb657c10545e4be44c833831aa86476e44136ea27b7ee512e49f536880e3785

SHA512
3ca40c66b1f9dd7ecb60772f36f8779b71079ab1aabd81b8d796c5721cc0c8bde7ad0ee2932af01ff510a934e158e07c61c02f9dab9e89c2e0d46fa5d7d36927

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
Filesize
9.7MB

MD5
224ba45e00bbbb237b34f0facbb550bf

SHA1
1b0f81da88149d9c610a8edf55f8f12a87ca67de

SHA256
8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc

SHA512
c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
Filesize
334KB

MD5
70fce613fb748691cada80536c95bb1d

SHA1
5460379674248b1943adb0da0c2920bf0f0cc60d

SHA256
ccadd45f3e89237464b3d466cd3ab212e8ac9841f1cfa330efbbb70a6fb15c95

SHA512
d339289362b09d6a1fd8e512b451f418e9231a789d3d4eb7553aec5ec089f2aeaa23a440b11671f44ed24372c5451c1772e47163940a7b243c756a5b2f92b1ea

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libGLESv2.dll
Filesize
5.5MB

MD5
f2144935607946f62cefa63d6afee428

SHA1
65e21e7c313b1b36ae767ba045251184a7a73473

SHA256
4b03238dfe12bd0d738e336378627ea3f4457a97641b0fde31c4f66c2ba8f77b

SHA512
85c584188183c0407405e1bdb6fd2f85679db59828ad9ee5f0ce980d51bb354bb688ffd1f7aaa4cd6b6bf25e6c477d32282cea862e8205ab21c4e7c11f98fb52

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
77.9MB

MD5
d13543304529abeb3b344adab9ea429f

SHA1
aea235680fa7251e0250c6d98bf1e946b7368220

SHA256
19a2b837662400707626abebf9edf08408fc51a6261c8ba4c73fe6591fcf7591

SHA512
d246bf978e8fad229f7499a0d8f0b2a3e7bb1216d45f2cdbd103d972b132aa6adc639efe0558129ef3807e5e642dd94918cc547ce95ea6256828f16ba260cca1

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
77.2MB

MD5
1071e86824b3b83cb1b0755274354ff6

SHA1
f98b294b13110b8828931749f3c633ff89c164e5

SHA256
ca6610af95e011a5daa72bc9b5e1276f0a68d1b17183fde5aa90fd5ca00c43f7

SHA512
f0c5b967c397f8faf8b85d07ea1450458cc66626d61e198e932d3b3f78b7eb377907389ee57ee4d4e94fd20fee6d05f4a92ecd8ffffb1905eb2553862da6002c

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
76.2MB

MD5
c37ab8c36d5e8c98680e3cb098fb9f13

SHA1
60259aa8af9c77f889ca5134ca4141f4230c6188

SHA256
1f38217d1d426416af0390f7d03a15076f9dea0091fbd8ef7602ab0c44501348

SHA512
c391c75bff5dec66962c83f996d124e0808b353596c4093f19c743cc568a56894928652b4c695f3f4c42ae425199d2f5ca5dfd8615b91d279112c0a5b6d284d3

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
68.2MB

MD5
3955947ec7502004f81d5fcdc420d3b2

SHA1
2b03185b26c762f53e59074baa3bf27ae5c43dae

SHA256
23c669c47a5811d3bbce0e41e6ee2a7a9fba3a24ea7a9f2d62d90dad964e95ff

SHA512
fb42d18079d8b625bc3b185d04ea88adbab85c4094fa293ee980a15fa2253c7d8745c87534ab306ccafae7fd1a7f69e87201c14235e0fce27b0c1cfd4191638f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
67.6MB

MD5
53af6ec87d614fd4d6516edf508dda3b

SHA1
ee9bc958e99ab802c8ca2b8d1cbf80c6734eaee8

SHA256
ac5e51c842bb3b744f35cda0cfd2d2b2f04c99137004af4e98172cf64d538189

SHA512
6459b6df694e06b1669b552de951d27ed605490294c34cf7b831cd28816406809c137bf1aa095e73628335ccf3094bd3b3a5abbf058c318afdf2850771041c53

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
67.5MB

MD5
42bdcfa27cf8246564f04f79337a718b

SHA1
3ad320169a4679c6ddf355ef3c50b10e70e54f67

SHA256
5043211f035081c3fceb1a8748c6bf420342435b03e8527e4587f1c6eed286ad

SHA512
4619a2aaf797620ae87bd15e82c4f0ebcfb42ab68fba160231f3c5d5e3d8e60ef2c63bc233b11cd518f527f09aaa6f79fdd6e13e4a54b83dce85dcf3f6f8fe8a

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll
Filesize
67.4MB

MD5
bf5d52b1c380c85e14dd563566228fc5

SHA1
f726833f05ecdc4d2b6d9a0e818127a021d19868

SHA256
cf5a28c790abfb213bb33dd57e33ff1fc6386c85a47a58efba0c18583d364b67

SHA512
8260f1cdedfa1e356a656189df460272086fb40ff0f04c97c57e6f0b394c70ab6a48e7ddcfdd6418faa2b44cbd6685926a14311bf664a43288f9c25c1ce31b30

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libegl.dll
Filesize
334KB

MD5
70fce613fb748691cada80536c95bb1d

SHA1
5460379674248b1943adb0da0c2920bf0f0cc60d

SHA256
ccadd45f3e89237464b3d466cd3ab212e8ac9841f1cfa330efbbb70a6fb15c95

SHA512
d339289362b09d6a1fd8e512b451f418e9231a789d3d4eb7553aec5ec089f2aeaa23a440b11671f44ed24372c5451c1772e47163940a7b243c756a5b2f92b1ea

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
Filesize
5.5MB

MD5
f2144935607946f62cefa63d6afee428

SHA1
65e21e7c313b1b36ae767ba045251184a7a73473

SHA256
4b03238dfe12bd0d738e336378627ea3f4457a97641b0fde31c4f66c2ba8f77b

SHA512
85c584188183c0407405e1bdb6fd2f85679db59828ad9ee5f0ce980d51bb354bb688ffd1f7aaa4cd6b6bf25e6c477d32282cea862e8205ab21c4e7c11f98fb52

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
Filesize
283KB

MD5
f88e6aba546bb5120325126549b97168

SHA1
dd415b6cbacaeb79f6d5f6463e4e9a74cf5a6d6c

SHA256
a171d2118fd8607f572fa39d950b81cf83e2146a73385a9fadb1500aa14daa58

SHA512
dbde9991abe4eb617f81ab859424c9a06955232392b660798450e2a6222704e0338f2139d845c222bfdffb280e155bfd1fd16ce63f747887636fe5700a846368

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
Filesize
13KB

MD5
e4811d2bb8407116c9d38ed98b7899be

SHA1
4624bc6a51f6408b96d9d96017e8fd251c8cbf34

SHA256
351707b2e6c2b86eef15068018a02d987c58091259f08007a9b3c70d72fcaffd

SHA512
03ff1f2408594cd3e7db9e47756ecb4e2ec7a8f09a75c9b1f9fe4aabea49cead11543636eb462bed1ff5473004f42ee344c340aeb7d68531c4b2bc66e1c01f07

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
Filesize
7.3MB

MD5
b528671cd4f9a9764b928969a1b2a164

SHA1
749e4d0faae9524b8226d156748c9b0f0082192e

SHA256
3b4cf4697df9b0cdea15f31faa57701e61847016c74642abcda634243874bb08

SHA512
5706b4d9895856a3b06f9a50c146855bbb551cb7ee39ada98da5d7ee2b56dc440795ac8c163e268c8f03072411a9008d1b69b0a4fb4ec14ad6396887c5a01822

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
Filesize
160KB

MD5
4fba5ce8bf10e7e11a34aba5986e329e

SHA1
278895f187db7f798d6a44639b3c14a1c0f4683a

SHA256
7f372b919a89f10f7b08adba9d9ad716910bc83d7a03f07eec392a0cd324a3aa

SHA512
f2935074fa23e8aac2a89f147b0157fa952b7cbc29f73c67cedfc60aad250e12bb7e401eb6dada28fcd3aa7d4e8c09fa9c31c4effb05225c06e5fa6866e40be1

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
Filesize
3.2MB

MD5
ecf9b4bcd44f7a1b3ce4d0c060714711

SHA1
c19b093c54236fc1bf23b2ba4a1670e845c3861f

SHA256
a39e730aafb391eaef4a71b4d687d50ea1819de581222ee4a2543dbf1885b0ad

SHA512
1f1c7a1b67c424d97f38703b3fdba498f7e140522ec520afa0bb0c14f500873d9bb6715a932400b2f3f194e709dd4dba844593a075f5081def004b4a0b3553f2

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
Filesize
3.2MB

MD5
ecf9b4bcd44f7a1b3ce4d0c060714711

SHA1
c19b093c54236fc1bf23b2ba4a1670e845c3861f

SHA256
a39e730aafb391eaef4a71b4d687d50ea1819de581222ee4a2543dbf1885b0ad

SHA512
1f1c7a1b67c424d97f38703b3fdba498f7e140522ec520afa0bb0c14f500873d9bb6715a932400b2f3f194e709dd4dba844593a075f5081def004b4a0b3553f2

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader_icd.json
Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
Filesize
599KB

MD5
355f9553102344f02afc2ed9f9c12155

SHA1
19a8d4de052c728fd7dfe3a9ffed2416d0763586

SHA256
2ef78bdba1ef0be4155217e7438d9f81b9005738ca17f20e189bec43676336a0

SHA512
10d99a187c3e0a1954d45940524239a1cc687a6e4b14c683feebe00ab9d1fe38945cf17ca181300658d31a0091aa145d6cf16b33f14599e22fdff61a4687d886

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
Filesize
599KB

MD5
355f9553102344f02afc2ed9f9c12155

SHA1
19a8d4de052c728fd7dfe3a9ffed2416d0763586

SHA256
2ef78bdba1ef0be4155217e7438d9f81b9005738ca17f20e189bec43676336a0

SHA512
10d99a187c3e0a1954d45940524239a1cc687a6e4b14c683feebe00ab9d1fe38945cf17ca181300658d31a0091aa145d6cf16b33f14599e22fdff61a4687d886

Download Submit
\??\pipe\crashpad_4020_RVJGWTBXDAGNOMAC
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/440-310-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download
memory/1488-331-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download
memory/1544-343-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download
memory/4020-236-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download
memory/4684-261-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download
memory/5044-340-0x0000000000400000-0x0000000001630000-memory.dmp

Filesize
18.2MB

Download