Analysis

  • max time kernel
    99s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 23:31

General

  • Target

    slinky_crack.exe

  • Size

    2.7MB

  • MD5

    a455ed5640c3742ca183286f66b88e75

  • SHA1

    304447ea6d3fc88b5adc1da292b1f99924135595

  • SHA256

    c3e4dfe2c165f6e72ee73e6c92faa2fc5101c6d963a02738a903f78a511dd1df

  • SHA512

    8ff09bdc6e8ad6969d9ad7b7fc9ee53b530c90ce92364e541ef63b3bc0e78c67a53961adec14a123cc273d3db1ff74a83b750a1bb4d1590f3c903fc652dd2016

  • SSDEEP

    49152:aMy5yvvfSPhHiemQljVy4IU6iMgMqR4ta:Fy5+vKPhHiruJyH+MZqRGa

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\slinky_crack.exe
    "C:\Users\Admin\AppData\Local\Temp\slinky_crack.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4456
    • C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe
      C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4636
      • C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe
        SpWebInst0.exe /webinstall
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2680
        • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          Spotify.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:4316
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Spotify\User Data" --url=https://crashdump.spotify.com:443/ --annotation=platform=win32 --annotation=product=spotify --annotation=version=1.2.22.982 --initial-client-data=0x474,0x478,0x47c,0x470,0x480,0x74d0b3d8,0x74d0b3e8,0x74d0b3f4
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1636
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=1864 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:2
            5⤵
              PID:4916
            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
              "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=2888 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:8
              5⤵
                PID:3648
              • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3088 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:8
                5⤵
                  PID:2236
                • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                  "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --first-renderer-process --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --disable-blink-features=WebCodecs --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=4060 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:1
                  5⤵
                    PID:5096
            • C:\Users\Admin\AppData\Local\Temp\ins7F80.tmp
              C:\Users\Admin\AppData\Local\Temp\ins7F80.tmp
              2⤵
              • Executes dropped EXE
              PID:3480
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
            1⤵
              PID:3320

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\Local\Spotify\Browser\MANIFEST-000001

              Filesize

              41B

              MD5

              5af87dfd673ba2115e2fcf5cfdb727ab

              SHA1

              d5b5bbf396dc291274584ef71f444f420b6056f1

              SHA256

              f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

              SHA512

              de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

            • C:\Users\Admin\AppData\Local\Spotify\LocalPrefs.json

              Filesize

              717B

              MD5

              d69691e376f34c802696b9c3e9d1022f

              SHA1

              d25d02664e8a4bedeb8c744663a327d8bd4600f2

              SHA256

              2f10136ff8a1923a218a2103c70ebede1038721f56bd95bb54703d517a68c575

              SHA512

              54b3d27ba0e4170239b9a8a2d38d4c6d96a1e64bfb09ebdd7a2443af221ac405524d2d68c2b91a36999347cbf058c18992c9cc3c7649b9abdf78cb04425147d5

            • C:\Users\Admin\AppData\Local\Spotify\LocalPrefs.json~RFe5996e7.TMP

              Filesize

              529B

              MD5

              435c562755d9ec10d7009258cf02836f

              SHA1

              297406ae99081c903ff60c64ce44f8f855799e24

              SHA256

              1485f70b9e09b86d0e9b0c5229ffba447ce4708ca6d4945aa3dc959591d938c9

              SHA512

              7ab5cefe5b580e443d6d77935540cbdfcb5ec97f573daee85ed8fd259fbdeb2c3cac6f4508149fda93e9217743eeef7b9fc4a5c9b390376d71d5b2fa208a0f55

            • C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat

              Filesize

              56B

              MD5

              81e524b76e1f58f9aecc4b8894ffdab0

              SHA1

              02d8f0875077a06ce7219952522e4149fca30568

              SHA256

              79ed137c4ae006114c4e611d44172e04d633fb38c249ce91a0a559bc10486605

              SHA512

              cab273e77ea54dde63daa7cc2d1bfee64331c5b5be323e8af125174c81520f0567011675a5ff69856b1f15851cfb09ddd0f6280f41d29bd6d4f0b032989c7065

            • C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp

              Filesize

              16B

              MD5

              206702161f94c5cd39fadd03f4014d98

              SHA1

              bd8bfc144fb5326d21bd1531523d9fb50e1b600a

              SHA256

              1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

              SHA512

              0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

            • C:\Users\Admin\AppData\Local\Spotify\public.ldb\CURRENT

              Filesize

              16B

              MD5

              46295cac801e5d4857d09837238a6394

              SHA1

              44e0fa1b517dbf802b18faf0785eeea6ac51594b

              SHA256

              0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

              SHA512

              8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

            • C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe

              Filesize

              901KB

              MD5

              49e06bb26c194912cad41d964343143c

              SHA1

              3ded7686fbc3ed3f001ea29733dfdbd5f55c63cb

              SHA256

              ead80a1767978ed62dfa51443d12f17c0c9444850a8750f7677f82150c0e9598

              SHA512

              c3774d26720cf6388d8dce7cc67459857ae5a00ef189efa48ee98feac86a5cd8c5a0247d533a02051758e06c53d27056fee00319b7b60dff54644b9d970c733e

            • C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe

              Filesize

              901KB

              MD5

              49e06bb26c194912cad41d964343143c

              SHA1

              3ded7686fbc3ed3f001ea29733dfdbd5f55c63cb

              SHA256

              ead80a1767978ed62dfa51443d12f17c0c9444850a8750f7677f82150c0e9598

              SHA512

              c3774d26720cf6388d8dce7cc67459857ae5a00ef189efa48ee98feac86a5cd8c5a0247d533a02051758e06c53d27056fee00319b7b60dff54644b9d970c733e

            • C:\Users\Admin\AppData\Local\Temp\ins7F80.tmp

              Filesize

              2.1MB

              MD5

              0d8f9d0f85da51748f1af9b041a16d14

              SHA1

              0b0ebb3c791d8bd6434750165c0ae353cb972542

              SHA256

              829def90819f9ba1a7c7ad5dfddc801db5aa4453073b7f70a13c8f25841463e4

              SHA512

              2a2ae344ccd6830bcd9560ebee35a2736d5db73e8e8da78b1bde619fbd48dd9df26a80fc93c24103607959f7ea1a63cb98a8aac017c821304a8cafa794dc489c

            • C:\Users\Admin\AppData\Local\Temp\ins7F80.tmp

              Filesize

              2.1MB

              MD5

              0d8f9d0f85da51748f1af9b041a16d14

              SHA1

              0b0ebb3c791d8bd6434750165c0ae353cb972542

              SHA256

              829def90819f9ba1a7c7ad5dfddc801db5aa4453073b7f70a13c8f25841463e4

              SHA512

              2a2ae344ccd6830bcd9560ebee35a2736d5db73e8e8da78b1bde619fbd48dd9df26a80fc93c24103607959f7ea1a63cb98a8aac017c821304a8cafa794dc489c

            • C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa

              Filesize

              1.4MB

              MD5

              98e4e37598b5eff31451108ec844281e

              SHA1

              a515aace35a8113e895dfa9827017be4bdda6b9d

              SHA256

              e22f1248364588e35bb7eda3a2556a614f2e8ba7b3acf5e4227713bc331d6d6c

              SHA512

              981d0774f9079205529a433e4d9b02479713e3f1bcae1f7db14f574696a028e31a711908fac776c2aa77d25a38c7ac6a88c2a27f4ddd355ff957177e85d12689

            • C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll

              Filesize

              3.9MB

              MD5

              13a0d7009e6558b6a5a2da55bb354807

              SHA1

              7d51c92d48065d6b0e6450b28d1e3816826eff25

              SHA256

              6bbe32c790364f0187e10dfa1784cbee64768f766926b9c027daa1d8c10c31b7

              SHA512

              28bd2f033edceec1590b2e7a7eab42458279bb6329e2e13740362afe6ac9415adce5ba9a5900c9daf8166f9ff571765f469f7ee70b5afaebb9b206c1e27a9b5d

            • C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe

              Filesize

              87.2MB

              MD5

              1e953ae054d9466b5905ed58122719ab

              SHA1

              8c4532f273192592c0e5daf731b319b3578ef6b2

              SHA256

              d6a30d16a6b77ebe946e399f3fd0e7c5142ba1bbfebb5b678d0e099613bb081d

              SHA512

              761ce3280ae6927a7e309c4804f4b834dbf8bdc8a4faaa8aac7d472d8f804093ab7f9bafa22878367f6907f4cfa1adc047e5eb85002ec7b71c1db1bbbe44820c

            • C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe

              Filesize

              87.2MB

              MD5

              1e953ae054d9466b5905ed58122719ab

              SHA1

              8c4532f273192592c0e5daf731b319b3578ef6b2

              SHA256

              d6a30d16a6b77ebe946e399f3fd0e7c5142ba1bbfebb5b678d0e099613bb081d

              SHA512

              761ce3280ae6927a7e309c4804f4b834dbf8bdc8a4faaa8aac7d472d8f804093ab7f9bafa22878367f6907f4cfa1adc047e5eb85002ec7b71c1db1bbbe44820c

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

              Filesize

              20.7MB

              MD5

              0f08f4e83d5343a2546127dd1d0dbb50

              SHA1

              1354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6

              SHA256

              f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627

              SHA512

              dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak

              Filesize

              626KB

              MD5

              54563e9a40deb9c8d545847b4b4064d4

              SHA1

              2b00b7839477c1dc9699c960f8eaa2b471cbf96d

              SHA256

              40df7c1d2867c8b146d58b5ee80783ed36c5a38d410c1c3e55011cf042b58062

              SHA512

              19c86cd39e836f76a6e4e87abd53686837193362d84fefc8fff3498fe1c96bccd313c94ff56a663c10d5eab648a1f39f7fb308a9985ec3b3bd0ee4f2f0214db9

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak

              Filesize

              964KB

              MD5

              33c6e196e50f93d6647baf3a08d21de1

              SHA1

              38da6b75585750ba892e11c8fe23fb41a00d7307

              SHA256

              b8b297eeab2e9fe8ecde1e18f1ee6b8c7adb90084bdeb541ad3746defcfd6f07

              SHA512

              9fcdd378f11b2cfbe0617737fc268da9c032126fb038366d2a22cc7c4f8bc26980e9115184ac996652a03efbd7da0912f4bd4bf1159849ebf43149fb0518152d

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

              Filesize

              1.1MB

              MD5

              107e8c2c1e95b052a77b2c9f03c8264b

              SHA1

              ddb9fd95a911d1ede5c72722847d2e61337f7d76

              SHA256

              b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6

              SHA512

              e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb

            • C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg

              Filesize

              681B

              MD5

              b8fdc3c0e05551b0e5a8337b00e97e84

              SHA1

              400507831588214a75498e724b2c63ce465456eb

              SHA256

              d26eb351127ed03f7789d977f897369cf5727afc9f314df79d73ea921b58400c

              SHA512

              f9277007a5ccca31c56041db1c09c1543b320458fff09c20a2dd30294fb589027c1e24a937b4f9f4bcc66fe69293b418f35ee63ab7dd17123c7eea0db3659f5f

            • C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll

              Filesize

              3.9MB

              MD5

              13a0d7009e6558b6a5a2da55bb354807

              SHA1

              7d51c92d48065d6b0e6450b28d1e3816826eff25

              SHA256

              6bbe32c790364f0187e10dfa1784cbee64768f766926b9c027daa1d8c10c31b7

              SHA512

              28bd2f033edceec1590b2e7a7eab42458279bb6329e2e13740362afe6ac9415adce5ba9a5900c9daf8166f9ff571765f469f7ee70b5afaebb9b206c1e27a9b5d

            • C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat

              Filesize

              10.1MB

              MD5

              62880b7d351a9f547b62b8da6c97ce25

              SHA1

              057f11003013cfb3f1c63e6bdd4f2f9949ff0104

              SHA256

              7c40c811d30d459dbf04a04c141b60eb4247cd58a008fb836605317df665748f

              SHA512

              0d6f83175a91d90f4cc3ec4d9071b7acd0cd8ebbcc592322e46fde2adb7198e035af62c45a11a622f2a908e26d4dd8b8d1af023e634a74d0824d02c791ba3c1a

            • C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll

              Filesize

              375KB

              MD5

              8c423d19d562d964febd7ace2d272b56

              SHA1

              e86f319e14f9dd99e2139f85dff925950f11773f

              SHA256

              3abde44a86b9de78a6fd8490104bce197eee689e4687a9e5ef6fc1f9b127743a

              SHA512

              20c98599791196e232399ed0d7485195c6074a57526e7957aa07adb4ce9d9a458abf724077c1bdb370e7d7c7348187fb0b21d28d8e32735a235024cdb7ffeb89

            • C:\Users\Admin\AppData\Roaming\Spotify\libGLESv2.dll

              Filesize

              6.2MB

              MD5

              461a0afab1edcb5cfd54b62f56bbb621

              SHA1

              5122485f10f3b9735a0bb744c6588b4dfce209a7

              SHA256

              4818209a2c351a19190a3824fc96a2ed662d73339fc7064c7fce0def4fa00f69

              SHA512

              e8322874ecb2e54e1d0f913cfc3ba4b560a9a890933b7ce3ec8d5f631afc94ab04c1d23481001699a5a9e519723c2dc47b2b57d8eba6d7dd945fdf935ed99380

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              111.4MB

              MD5

              acdc2fb04610c0ea373d4f0e61d22fa1

              SHA1

              f6d3ec7dc3e93a5eab76ef6527432b881cd52cae

              SHA256

              bdc54d23538ffb97617fe3e56dd6a9617d3f30491fb52b6e0a87cf02ab3090e6

              SHA512

              90894ee8f3cf125470f531a5c2863a0216a2ca009b8ce0528b3d37c08bc951477fd4e6022aca472f6a765058f981fddb2da6b541377865895a7f54b689d5df5e

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              105.5MB

              MD5

              0e9fd35434d9f57e25b1b1283e581255

              SHA1

              d3528a12a391bcaa363d67b07cfe2eb09dc6c80c

              SHA256

              1ecc1a6cddad065ca5bcb967a62d7536e25bd63f538138d8ce6faf4062a9691f

              SHA512

              a89f84d64f2ff497d8031598caea1dffdd68841f1b7a5769af508cdc86123ec5e750136fb40be3e770b29d1837312a718846e6e2662fd9336a55bd30b735b801

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              104.4MB

              MD5

              bf285d53fddfb5f63014a6caa407db98

              SHA1

              43259ba85c966c4023b6240ef5e7d7a3ac4e547b

              SHA256

              e0c7c694d924325ce7f102e8f9df7f627419f88b8910d612f3af3a19e843e45f

              SHA512

              eaae8b7506fd87bc4193e50499762220e5781ee0239220256da739789befb7894306f15ba825698104303d585741d57e02e2909fb4a4ee5d0cb4053d49958e19

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              89.4MB

              MD5

              b66de905840e70dc2e987a3c112f371c

              SHA1

              9717cfe80550384307fa02dde6ea05a86468a071

              SHA256

              958bf20245f4ca54b39178e2480737c0990aa596b410dbdce75e3ce19a155dc6

              SHA512

              169037bc6831faaccf0980bdef28fbe0f14005258d9bd67ba24b2fde1ea966bc5589691ebc611a76f5b93b4811ee6883b302385957a8a771fa2c4a4c3f745f0a

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              78.3MB

              MD5

              5d4b42635f9dde0bdea6c8f3e483b8b4

              SHA1

              9c0b28bb64c32bef7c3db5fbb40a0a50790e5e4e

              SHA256

              842c5fed92754e870ee7b864607681a3d20c85fbdfcdc78bbb694a703eaf1a54

              SHA512

              13e2a91087fb0deba1c01027a81ceda9a49c975e301109a54b6ab269c3a840e2df506e6c5438cd5b7a0c06776f73bcff89435206aae58878ade034951904e29e

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              78.6MB

              MD5

              7ec4e7c11f8881830c2fad18af291f90

              SHA1

              2e80f3f9127689e0a5ad6eac98ee0dc74ee6d2e2

              SHA256

              a64c0a386a1a569c2ffecd8fca2c49462459f1ad1fba76298bbdf1164a08f9cf

              SHA512

              7ce18733f6f22694926006fb79b5c66dfcb5ea3c067af664c1308655e9233704fd45bd0d881c35abaec1519a34d6c39de3957a768569c8883258304fbcc77593

            • C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll

              Filesize

              66.3MB

              MD5

              b92a0b4398371e039f6e7bf74eefe60a

              SHA1

              932e36c5c1aa2d1dd711d1993ea71596076752af

              SHA256

              30cdddf55c1d8d6e36066d930002b17690fdc4be4a3f25b2c1f4d98b6a863c34

              SHA512

              90876aaa7136c5b4b4bd68015ff86e68db6de3bc5e4c578e188a1cc7ea2caefb80c1b8cf5168f6f0c8c3e4ddb6108e73e2c05ce80e0d34f2c2548ae49b5ad12e

            • C:\Users\Admin\AppData\Roaming\Spotify\libegl.dll

              Filesize

              375KB

              MD5

              8c423d19d562d964febd7ace2d272b56

              SHA1

              e86f319e14f9dd99e2139f85dff925950f11773f

              SHA256

              3abde44a86b9de78a6fd8490104bce197eee689e4687a9e5ef6fc1f9b127743a

              SHA512

              20c98599791196e232399ed0d7485195c6074a57526e7957aa07adb4ce9d9a458abf724077c1bdb370e7d7c7348187fb0b21d28d8e32735a235024cdb7ffeb89

            • C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll

              Filesize

              6.2MB

              MD5

              461a0afab1edcb5cfd54b62f56bbb621

              SHA1

              5122485f10f3b9735a0bb744c6588b4dfce209a7

              SHA256

              4818209a2c351a19190a3824fc96a2ed662d73339fc7064c7fce0def4fa00f69

              SHA512

              e8322874ecb2e54e1d0f913cfc3ba4b560a9a890933b7ce3ec8d5f631afc94ab04c1d23481001699a5a9e519723c2dc47b2b57d8eba6d7dd945fdf935ed99380

            • C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak

              Filesize

              404KB

              MD5

              d35ff435ff91254246ae63984230e4bf

              SHA1

              4a780fc53e000d7eccabfeeff36bdbd01dfd8374

              SHA256

              9d0df6a64559ff718c06963f740549ecead271b84cbdcc81c7782e0d0011041e

              SHA512

              1854e88765b9a9ee372164e24756000e70b5bf23bdb2bbb82c0db7b95458ace266fd37880f4502a6b8f2820986d5770ec1d7eb63e99a7dfe9ae48b62b8c79ddb

            • C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo

              Filesize

              13KB

              MD5

              91440c7cb6c74055f565fccfa8625c8b

              SHA1

              f2a1234cf7a8b9cf76fc07209ab28d87b909a342

              SHA256

              8a304b9453b40a283db3a2a41d68fdf7ce0bf14c8904c2befa46d42c88e0f547

              SHA512

              45973cbe5e3812d25e0bb9fb4172cd8e8c704efdf1bacb6821f21eba2bfb8c6035ae438fff2bf85e3028f1fe8a4beb3a050e2f6a2852cd785712b78849b84ccf

            • C:\Users\Admin\AppData\Roaming\Spotify\resources.pak

              Filesize

              7.5MB

              MD5

              14e36372dfd58bd65f5728ab73ff480e

              SHA1

              88f92b081e41cd0eb430abd2850b3c3af86542ba

              SHA256

              51ce36475a08eae89d72495d168dcae055828265e7d0457dbe4c8d9100256822

              SHA512

              094c11f96644461bad32ae9d44c88e79f9ff62394993c2067e5f7688e616335dbd0753f036e7132cbc5462ac79b047a2fb1c230641be56d840098bba4cc464b6

            • C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin

              Filesize

              570KB

              MD5

              7470be2a4d8c32fe706d161271a79494

              SHA1

              aec9f49e88cc2441c394cc83c15d6c5df3d7792e

              SHA256

              ce6833d515ce31856bbfcb785cee98a1e2cbd6167241f1ae0cdcbec7d3edf904

              SHA512

              88bfe281f2c4a323bac07f0d2e0e47006746a4ca9fa664ab2f459d89caba32f4516f36f25134bfc8d142a4a2224bc6db4def6762553c3173809c207bb2557731

            • C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll

              Filesize

              4.2MB

              MD5

              19e0269c11838ee91cccc0d51f04b4f3

              SHA1

              592d7d4053360e7af6b88f82376f669f6d73ca23

              SHA256

              340c9a00f02171557e4c3e79cc2b86c87247a3f1a2426b7eca3efeffb88c99b7

              SHA512

              e5706f253cb715979630b09e7f0aa5b07e91824156e6e72633f4803ca1bc4c1d37a37342f22124ea96b8e2596b29c8332e702454434874cbed819f08bd207e11

            • C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll

              Filesize

              4.2MB

              MD5

              19e0269c11838ee91cccc0d51f04b4f3

              SHA1

              592d7d4053360e7af6b88f82376f669f6d73ca23

              SHA256

              340c9a00f02171557e4c3e79cc2b86c87247a3f1a2426b7eca3efeffb88c99b7

              SHA512

              e5706f253cb715979630b09e7f0aa5b07e91824156e6e72633f4803ca1bc4c1d37a37342f22124ea96b8e2596b29c8332e702454434874cbed819f08bd207e11

            • memory/1636-323-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/1636-233-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/2236-295-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/3648-280-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/3648-351-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/4316-212-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/4916-246-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/4916-341-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/5096-303-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB

            • memory/5096-352-0x0000000000400000-0x00000000018D9000-memory.dmp

              Filesize

              20.8MB