1476b04fa0f31e75a35d04326763b8aa4049a8443038839a50e714c66b2216a1

Analysis

max time kernel
1799s
max time network
1742s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2024, 06:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SpotifySetup.exe
Size

1010KB
MD5

cf2cd227b0150e7d2c7ddff000d7c685
SHA1

fc48ca37ec104634bc559a96d91c1cac2bbbd0f0
SHA256

1476b04fa0f31e75a35d04326763b8aa4049a8443038839a50e714c66b2216a1
SHA512

5b2a030822c2ead4a153efed99b265610909cf29f362e09df0cc5e1a3992edde7ee4b1c795714a1598adae7ca8d151c5744e6499cedcfcff2a973697a5f4a8ee
SSDEEP

12288:FBfCfUkWIsxQ3pqtn9ysfX77JdEa9ZrgFldOxfbOf/:PCfUllxSYysP77JdEa9EM6n

Score

6^/10

discovery persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Spotify = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe --autostart --minimized"	Spotify.exe

Downloads MZ/PE file

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation	Spotify.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation	Spotify.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 2 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Spotify.exe

Executes dropped EXE 8 IoCs

pid	Process
3696	SpWebInst0.exe
4764	Spotify.exe
4500	Spotify.exe
4092	Spotify.exe
1436	Spotify.exe
5036	Spotify.exe
2244	Spotify.exe
4516	Spotify.exe

Loads dropped DLL 18 IoCs

pid	Process
4764	Spotify.exe
4764	Spotify.exe
4500	Spotify.exe
4500	Spotify.exe
1436	Spotify.exe
1436	Spotify.exe
5036	Spotify.exe
5036	Spotify.exe
4092	Spotify.exe
4092	Spotify.exe
4092	Spotify.exe
4092	Spotify.exe
4092	Spotify.exe
4092	Spotify.exe
2244	Spotify.exe
2244	Spotify.exe
4516	Spotify.exe
4516	Spotify.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SpotifySetup.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	Spotify.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Spotify.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Spotify.exe

Modifies Internet Explorer settings 1 TTPs 13 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppName = "Spotify.exe"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppName = "Spotify.exe"	Spotify.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\Policy = "3"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify"	Spotify.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\Policy = "3"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133724981959449384"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	Spotify.exe

Modifies registry class 15 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\spotify\shell\open\ddeexec	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\DefaultIcon	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\spotify\shell\open\ddeexec	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\spotify\shell	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\",0"	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\spotify	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\spotify\shell\open	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\ddeexec	Spotify.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\ddeexec	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\URL Protocol	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\command	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\" --protocol-uri=\"%1\""	Spotify.exe
Key created	\REGISTRY\MACHINE\Software\Classes\spotify	Spotify.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4764	Spotify.exe
4764	Spotify.exe
680	chrome.exe
680	chrome.exe
5608	chrome.exe
5608	chrome.exe
5608	chrome.exe
5608	chrome.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	4764	Spotify.exe
Token: SeCreatePagefilePrivilege	4764	Spotify.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe
Token: SeShutdownPrivilege	680	chrome.exe
Token: SeCreatePagefilePrivilege	680	chrome.exe

Suspicious use of FindShellTrayWindow 32 IoCs

pid	Process
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe

Suspicious use of SendNotifyMessage 29 IoCs

pid	Process
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
4764	Spotify.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe
680	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3624 wrote to memory of 3696	3624	SpotifySetup.exe	83
PID 3624 wrote to memory of 3696	3624	SpotifySetup.exe	83
PID 3696 wrote to memory of 4764	3696	SpWebInst0.exe	88
PID 3696 wrote to memory of 4764	3696	SpWebInst0.exe	88
PID 4764 wrote to memory of 4500	4764	Spotify.exe	89
PID 4764 wrote to memory of 4500	4764	Spotify.exe	89
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 4092	4764	Spotify.exe	91
PID 4764 wrote to memory of 1436	4764	Spotify.exe	92
PID 4764 wrote to memory of 1436	4764	Spotify.exe	92
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93
PID 4764 wrote to memory of 5036	4764	Spotify.exe	93

C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe
"C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3624
- C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe
  SpWebInst0.exe /webinstall
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:3696
- - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
    Spotify.exe
    3⤵
    - Adds Run key to start application
    - Checks computer location settings
    - Checks system information in the registry
    - Executes dropped EXE
    - Loads dropped DLL
    - Enumerates system info in registry
    - Modifies Internet Explorer settings
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:4764
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Spotify\User Data" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.47.364 --initial-client-data=0x3bc,0x3c0,0x3c4,0x3b8,0x3c8,0x7ff8a2270ea8,0x7ff8a2270eb4,0x7ff8a2270ec0
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4500
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/128.0.6613.120 Spotify/1.2.47.364" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2140,i,8742118533641276491,11364259777913098720,262144 --disable-features=BackForwardCache,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr --variations-seed-version --enable-logging=handle --log-file=2144 --mojo-platform-channel-handle=2128 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4092
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/128.0.6613.120 Spotify/1.2.47.364" --field-trial-handle=2088,i,8742118533641276491,11364259777913098720,262144 --disable-features=BackForwardCache,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr --variations-seed-version --enable-logging=handle --log-file=2816 --mojo-platform-channel-handle=2716 /prefetch:3
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1436
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/128.0.6613.120 Spotify/1.2.47.364" --field-trial-handle=2120,i,8742118533641276491,11364259777913098720,262144 --disable-features=BackForwardCache,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr --variations-seed-version --enable-logging=handle --log-file=2832 --mojo-platform-channel-handle=2824 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5036
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/128.0.6613.120 Spotify/1.2.47.364" --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4636,i,8742118533641276491,11364259777913098720,262144 --disable-features=BackForwardCache,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr --variations-seed-version --enable-logging=handle --log-file=4648 --mojo-platform-channel-handle=4644 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:2244
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/128.0.6613.120 Spotify/1.2.47.364" --field-trial-handle=5464,i,8742118533641276491,11364259777913098720,262144 --disable-features=BackForwardCache,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr --variations-seed-version --enable-logging=handle --log-file=5468 --mojo-platform-channel-handle=5400 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4516

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1524

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8a10dcc40,0x7ff8a10dcc4c,0x7ff8a10dcc58
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1772,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1740 /prefetch:2
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2024,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2064 /prefetch:3
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2280,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2220 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3148,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3400,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4512,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3704,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4732,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4872,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5024,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4772,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4940 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5160,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5148,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5096,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3712,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5156 /prefetch:2
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5744,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3416,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5696,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4340,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5520,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3328 /prefetch:8
  2⤵
  PID:452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5972,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5156,i,14771746137821248424,4291564061638762132,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5608

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:3040

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
PID:1920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
463cf7630c3c78d58095ff84c9306438

SHA1
98ff8c9de85e95882e8c295d05d144ffdefde330

SHA256
5f7d6236f52a4332e9f483279d3eee4eb739653408ea05c1a0cac1722dad5c2b

SHA512
f7d2b56c6a9abd59967c770c0d26a02b2101966e0e85a7a577ed4624034b80851bf9d5df30b0948db70c3e77f883d1a3ead4b6f4efcaa595676faddfedcae576

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
38f51e48808b71908f8e40ac3df85489

SHA1
da4d96cec5bc7a49385bc33273c7379826337f09

SHA256
d77b2e2aa186b71f0adb0de77ca063c57a87fd2a250c5566f5ca55915d141127

SHA512
689068702ba1c0a42b1dbbb0f0f385368ae0cf205220c24e366d7d845a40280db3169b8b7d7f37a4f7aeecdb61a0c21bc52a839018a65bca1d6931b8e414388c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.82.1_0\_locales\en_CA\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.82.1_0\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
1cf691567f4e8dddf2e7cb139a670920

SHA1
1361aa216889e771ad54323e3e19b5094a2d5eaf

SHA256
590dc8ab9f75fe268db17f010d847886e6c0ac2705ba92667578604437352f87

SHA512
f2a830e0b6600556a02b1e427ec8855dae647affc2131b5e7c280d97186245a95132e6ac06c91bab3bd2d7aad826a5dff36170c039acb8d08ca628df190a8986

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
9a3ce0e64f08d255704dddb76d197948

SHA1
18df6de6ab3785f328a0777e1c0f168a18a4f9d7

SHA256
a1bd5498c77eec070ce1ff2f678789aa559ea6be84100e68fed90ede22192dd6

SHA512
ef7c56fe1b6501b8c37afa158d73d96bbe48251b09364af93a343bae5291eeeb555da158a227847894d5a6ee4464ab645f6014fb0270f3500ca6b4e970573a5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
691B

MD5
92802e87500afae238d51477777a4ab8

SHA1
7c29a9b0188b40ae92cfd37ba55e435f4c2b30ee

SHA256
0b8784b3df98e91ee42403662bfca3fcfbcac1c44fa3147834618c0f779649d2

SHA512
89f5ab88f130155b235c3c678ef00fc1f0d7e7358cef4f0c3e5c9eecdca95920964426ae94ce131678dcc9142c57ce8e0d9bf5cac2634e2e5d19abf299781da1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
42306636ed46167a569aa27d6fa90652

SHA1
38615bcb6ea98c3e240b8a4ff7717821847e80c5

SHA256
7932ea4e2d9275076e2d920cd69a5ad59f3a1cbe9306e9a28e4683d19e6fd06e

SHA512
9930ae250b8cdab4e8f9269c970965b0a4da92c1f6be790adfebced8926076a76497a18f0fd0f095f400a0753233fde5b6f107f927bd525b76753dd83dd97e21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2618a439698338a75333a925d4e8ea64

SHA1
0432a8709d0e3213748b1b83a27b93d0f736be78

SHA256
6d3a4bfbce2b89ef16afebb18bb49761bc3d1d3b0a4d380a0323d87a99b13082

SHA512
6ded57036cfc7e42600c3858919a531ba46816bbd03a8db31fcc8cd957dcbc06a4ce65856fc8026ca13442db7e17fc69990b6393d8807aa273acb315228f4515

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e92589f3b28c783cf40610e2149c7873

SHA1
88ea281ba9eae6e805cf10e5013c37fb4dc44e11

SHA256
c0e5a5ee27fbb622da8000212fb58e6800154a9de5bb3526c3b9bb651ca5059a

SHA512
75c334ae3ab61e0ded37bcb9945e8c17e6a9f6c04d2ce1e96c94667eb977a610ab7b57ef8381bca9bae4ec351eb0184e0444810670c38b42abd1abf4a128a210

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f1de3abffa3bb584f28c53b3a084f2dd

SHA1
d08a90d2537259cd3c9f8ab28594f30718856cd2

SHA256
d240abcf38db0395555a27a5f58209a8203f287f2dcc34de8c438a155711c4bc

SHA512
471b28d3d1c6c5eccf7d5616742f9c2c3d454c3141d47afe709dfe8405b0ef4d88d99bac14a8045c7ac51bae768b02ce2d7afa1618a7bc24a29dc845210a0180

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
35721be38ab336cf65a608fda1ab84f6

SHA1
ceb8cd3ea738800be7ea779aa23c0778c581a51f

SHA256
20deb892869ebf826f25b31bd4b709877d48e5b2ff4de81e53f55172445e131d

SHA512
29dd7ab863987bc0ff1f363085cb817ebcb71b2f3561d89f2aa8bdab8d58367831c9c21b95268056f4960f5bb7f1b5449d59ce06464781779aa13fd9c2d96cee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c0ced13301f81aa376ba98ef3ddccd02

SHA1
ee96bd5d65a8c6b0eae81f89573921b97b103eb4

SHA256
70e777deca28e72888955b2bc12de8efa8f4ada31573f593c7548119b70f35d9

SHA512
d34cc75454607425e4b93d6c2e7b8bba75f0e9b2d75dedf6a92456a2217873f503ed2588fe65df259285c7028ca79f1984ad6bca46579f37e2299f9103f88699

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
aeb5a3e718bb818d3e12cf65b5f01508

SHA1
a34d2335d6e916053a003bfa6015a2f42d068e3a

SHA256
1f409896ac1d3009c618463a9264960350d8207b5d5141e6c200d0f1a9733e85

SHA512
3f8ac2276a9341e3f12dde2cf1bfd6814c820cc10a18f944634013faa86d69411c5087dd3b09c929208fe7992b9a2c58fce8555cc2c5447ce5ae06be4c4d9e55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9d653d78da158792afeeb4df5d18a4c5

SHA1
153111ba488b9921f99b2e8c0e22fb91cc973563

SHA256
4f675db61084d896b2343979ebd63f1ecda3e458ad4560f2af4f1fde649d81bf

SHA512
5ba5e4c985f7f1b7f05a3f57b1b2ba99e060733fa567c7d0f3265b4c97f3e1fb48879d7a4b57adf0229b9ed77497a77cffe7c7519a834e9adf8bad4b92ed1d93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9050fd86fe31158197614c6e9ebb1be0

SHA1
2729163fe393faa547168423d71a79f9c78ae46b

SHA256
08d65f7fd01de424f74db8ddfc2fa39895b42d973dd9076cfc5b65297a6ec84f

SHA512
b368053fc1f860a0f6e73c0a563961dadbb081472c31702c73a24b6e4acedbb0cd3fdb9c7074fa4ef2f142ef1b7769c3428a1f2d906d7a50886c45700817ae50

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a4647a694416847ea292bfae896e53eb

SHA1
1d5eda3eab9de00e5266f33744faf42e29359217

SHA256
cc515214c950d052b63485de0cdb784437b2f168724641fcd304f2ce50ec46ab

SHA512
e92ec7f1094fbc1079523d3b24dd872904c2944ec2f7aaee7a70bd7d172def92aa9e0a280ae1def3eac8498b6db7ca62e17cc3d6f69cd99a3295bb98e9c1a50e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fc3f7d218f2825c65f73269e5749839d

SHA1
f07afd4b9137e1d312338a43fe5a3e2a6eae53c8

SHA256
04c4f2046c70000d7b7e3aca034adc307be9c043c608245f7745d574a07ad10b

SHA512
4cc50cc099a4865c7f4351408386621baafed9b75ca13beddbb49c92bae1ff5090b1dc7157180b377e25a86fececa356f678b724f81e21584ff7b81c73c01894

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
406ad0570be033ad18e9b5a09b3c8803

SHA1
6ea76c618e9a12391c564c0f12e4aa507f6d8d43

SHA256
2dd923014e74e23cfb3d9535167197b137a59f35ebd5e56aca5428d8a636d4d6

SHA512
fc02976e0ba49c188d9466319347f7d538a7ebdf2f99360b21915f9f00fe289e9881765d59127bac6077327077d3cb2427de520b7f479856e573b0b62f23424c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f556e9fafa551f565a0f602c98a44ce2

SHA1
ef2386f366d9718bc3347ae7409c75598b810958

SHA256
9eb9b82da2e6fcf9d43adbc87cc42b2f5f8ea20b6afcdae8c8484ef236f478be

SHA512
a91c369448998bb84d2c2a04c8547327a789e501fb53d4d6029301e1dfede5078922a931836e2792f3302ac41773cd8fb47ebc315bb6da20bd0c760e827c431d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0f5f79c10631141b5461a8a7597b83b8

SHA1
19a4d0ced4097e8e611f4f8fcc732d542dfcd97b

SHA256
ee8e9eb4c7497e8a615b4231b4430f9634c804f7895efbe7c5b9d647e1d2d7dc

SHA512
ee9723a053f6067f0b2249ed6991b1e80ccdcfa32ae267876f5bbdf636f1ebf0e45c51bccfa620d22bf3356f1cf6bfb5342bf230a40e4f32059e597bbcc7afc3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c9246247692f51f23ef19c66d180fe56

SHA1
bbb561f11a553fdd0b1a3aa6ef4db5181ea71812

SHA256
14d1e1b98c3c13608f2ca5061e1f1639635a642c79255daf3f2f33c9cb8abece

SHA512
92065a58699d5596ac607f118a911421fd140ebacd01413703913619df5aa60c459a779a6842f1faa6ca5ea128b514125f03df3046ddbccb3d19ee839a621198

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2424cd01eb9a77c58d20c4a6242dea94

SHA1
aff027404aa015f6be4cafd35c96b3c8fb187520

SHA256
cdd3c92f00f4d85f3de84556e5df7b924bd9da5786397d5d310681637f9b1ea5

SHA512
5a7639552ac696fb6656b4ab203e28024007d281275e359c474cc1d2a5e1d387243059f1c2176bb91968e268fafd3937cb7fe2fded5e9407ede6755ae4f2b245

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2c8c1bbe74615f4f140f9435356be09b

SHA1
bba042766615b4e030443e5d75ad1fa2c78dd5da

SHA256
4c3d58e3b7a6f3635780e8678f6a4aa86686903e42717372a49899212edf38ba

SHA512
c732318b4f0f8f4c98f05fd1c7a6cf47dfbe7b898664b5cbd9adee67b3bb40edd582c3a1ecb307bc294f9082a1f51b24494d80cce8dedaa4815a9a2b1d79e9b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
047bc83d25bc9914c012ff537e313cfe

SHA1
a0ceeb72b754ad36491495350774d087e54f7391

SHA256
fbe6d6d5b43b6f8cf57e6231780b69168e804a710386a459b22fb072b84fa301

SHA512
ed34aa3420ba865fe5095b186d80798e840f639e8443bb5d07d95deb53d6f7b9c28ba6862da500cd8606cd2ebf99d7aa43db2c28ffcb3f3bf07aec585b6e14ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
717b873e76c5cdac813a1f81e948caef

SHA1
db87b4652abbedf4d56c23ba7c617ee9d874ddcf

SHA256
bf10c55b6c8ab52f4299c0c375da112a5ac6acef7a9d5ec79b73e2ddf3df1878

SHA512
a4677efe228fdf00b68bd258ce80a39afc497de1c8b38f039fe30019f493e172ef1f18c836369e2d8a4af936ca5c461a216c513e86c938a6b2b84f536792ae0a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9cd8b590d346d1aff1ec7427bb2fddf7

SHA1
dfb2c9eea878124bca235f7a002a017ddef98093

SHA256
fc37055d07c62af15d8890a5819d2e022e90875f261b64ae65c259548db2182d

SHA512
e8c8936157e38b90922394962bf61497f61835682fbf6134255cc36883bc52bea01460a9d7eb160ad9b2c338834cc5d996de3f258443d563f10dc00e8e95d912

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3a4641a69ab7d18ba68e376a6d2edbc9

SHA1
2a8791d51dcf470cc36203ddee487cca7b4af4d7

SHA256
10f3ce2b044ad2d82686842d1df7d4595a0cf07b06ed0309737f151d78421fb4

SHA512
78654bc477330a8fd1a83d8d53f8ca5969db8f1284b67f9d1818036733172c2fbc989b6397cf342d398701335c8afe723689af9c68e4c31059548269bcdfee6b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
4fed75ea8f5a933c6eb9ba6e57b7e640

SHA1
094edcd5b10452acd132119d87e708bb4ffa5c5a

SHA256
58da7967b4866da5cd7259c63b4d6cc9071f242992b09682a659a9bd2b9dffcc

SHA512
474f1e5397f73e496e3738bbe58f8d2ba3df3954cd1e24a9c100c647f65370b6339e4c094a4d405747e4f71868786ed0325afc3867ae7e78fde8643240c8e231

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
25134f5ad22af3e64818487fa6d6f459

SHA1
01480ae71d84131f51ffb5eb7fd8dbbcfcc3c8ab

SHA256
44aa2fe6edca1c8aaff906514b87070f407b7bbb2e8f1d4b4209b98addc53c34

SHA512
0d1605172ffea810ddd6f4e2868720441838bd827194b4d249461c675a51725280329b284bf452a9c9dd302c9a1999d9d4c67bec8b2694b778b4c7df0df5f4f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e19bc092457d99488ca464e60b784aa5

SHA1
1253343bd0be8ec5f6bad9bc5ecc4848e834c275

SHA256
073c994b1768bf78807a5df1a421e6af2963bf3fb963d63bb4fd4f1f3dca3eac

SHA512
6b2df5f90ed4228093895c3b5d068b1cc1ccab25a7dbc225307e9f5006a1ffa9482456a99bc9b6779266f8db9d2e30bb39311a370c25466239cab43c186ce9f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7fbb58bc2104410f9f8e53a4dbabcaaa

SHA1
aea51d1d29d88e60dd146c180eac19c8d37edcff

SHA256
ab3d42bc8a17b263b132f18da11380d98ba60705d5524593fc0363c10ec581da

SHA512
f954e2ffb19b6e459f0cabb691d62d59491198be83cbaff51c8d76658590743625cff9849087bc32bd8e10fbb8dc20c56dbd7ff2ffbae3552845c3a04f1166d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4bbea76502b444c7f9c87ca6eb657dfb

SHA1
4ab2357b014e44eb452fc1a8b8ff4da406bb6c6b

SHA256
60cf4a6145fd1c7dfeb7ed827eb9bcbd2bcf260637c7623346f17c0585869412

SHA512
b4256fcf161c5a88c87cc0cdf115abdccfe8611c0d49b812bed883cc04d7c0435b0f39565f3f0f43155ca910d3a5894b197f6ffb57ab4cf59932776d4675cbe8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
697acc564a3cc139609a0f2d3081908c

SHA1
b7290ad6f1bab66882fc72cff566f9431a03ff7c

SHA256
3ee13d57ca016580b56c1144c5291d4388efaf88596a50f097e7672046054674

SHA512
e1aaed3b9871ea07a6af7e730d0b8ac8bac0e736d60b487907c1f0709539e3d850c380ef2b60006c3f2fcbcd747c3f9058fcf42b223cdfba2c2a95a3b0e90507

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5c16c30cb3588bc6d5c0a11e69b2fb8c

SHA1
a15849889e7bbe228c58ce41fce7236ca7941854

SHA256
405058f281a16691b8139611771827478f709855bed7e66b3b6249863a920603

SHA512
ac00f31728302dd0c5b5a66080e2e00d7d0088b26177b2d9d93fbb34d32234a76ec2ff806a7fc823988de41b079a6e69aa620058e45f86027f5fa4bf69940fe4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c7d775360bb0004cf95f054df00b6ea6

SHA1
6f95a7e09e1691f28a24a025bd3b188ecbf4a629

SHA256
ca5805991d4b2f20af91b317b6f5374484b59466f4b2097af6ecc66107e7be01

SHA512
cbb4db3fa5031b1792acded04d932098b517dc8be4b31bd09d5e3875746e01f4b8a720b3a298c8ba1d0ec30991d29ad1f2fa04c6d0346a57f9958a6d06125d08

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fc99af607327700139088a4bcb7b578c

SHA1
5c924fe47bc7f260dd7934a3795849027d2a0c66

SHA256
74d453bb148eaabfef9577e6fd71c1f7d9080d4e2d1b63204b5fcad2802cdbc9

SHA512
c683d55fa7fc3f0188030a719611355a174c4523a9d859a120f9a31450399042b87466ab16621e91a1e15f2babaac27fcde3ed3b49e90aa30109eb4207a9cadd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
bc7dbe81a3020117dd4de4ec38c358cd

SHA1
d3e880574c9289a2e5bd664af7d3ac35f193834e

SHA256
894653a6b8258ddbe8e7db79ff8262ad4eb5bf6de4e3343a12d2c9c189339a6a

SHA512
6c3d14cc51e3d47b006e85b5bc856c3fe65dfdfbbfecc1ec7dd2a2962dfce87c174cd66002c9d532cc9a09aacb7d3015b9615818f960f0568a5102b2f0cf0f78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
06cc3aea8a0f5d16d41cee775cee1891

SHA1
475a416f64645b75ae4452098d370ae5851ac199

SHA256
becd10ea8b4d026b1d6444448e0228b5adbaea40160ad329464fea9c23c80dcb

SHA512
12d4767a353919ece4981f088798e08d4e2534c7d356ce73cb682b8abd513e191c09b16966ff298d75696d7079d630e6c35509133d86f3da3ee815b1f970c15e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a716a6477763f0778a6165653c416167

SHA1
a85fcd7cbad79c2cfc07307be656d177ed6dba37

SHA256
9b8aaa7b9d90ab97c4fa05d7fc6c2795db077903559e86041c92476a7691aee2

SHA512
6165dd9dacce06ee50dbf39b5d7241d4cb52bc255a03805fb4f484ee9b834b0b9e3954e92c6c5873d067fbc0e8f095df718e1739710eb3dcf9e3fdcf623c7821

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
07e20e2cde7140f142d57086ef8e7f66

SHA1
a9dc170af41340af1a042bc441e82406a0d2e092

SHA256
f869db47254dd09170687be77757041ce6b19a0b2d4e6c100cd99321228f35c8

SHA512
4875ada33fdc3693af37ccbcbfa7ab853bd7af1b6f101f37baca41109d092b417d8cad32ca9279e77e38e85b6c52346fec0850096357780af3343933d37b7a0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f329e9d111ca26aca7edd53e49097f89

SHA1
f515b4f3bc12cd2c63b0e42b58d1e85e7d18e6ba

SHA256
6d45ca83454544e7572fe2cbc8eff467c319ad28a0263c79dd247cec8c27cfab

SHA512
7093eb0bd7df3bff4ae522de5007f4fa107da0e071bda12503f272cb157ba49c8bd676dd0f8e6a1ef2c9c932a47b4700bfbef517edb204e0c4e8cd9a98530674

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6cf58a40e3f121e575699d3526587368

SHA1
72d12887dd512515e205d861d07636c73f78300b

SHA256
17811c60ad2305594a18cfda3db9530aebcd4221d9058fc95cf40e7a68c8ba15

SHA512
284b4eafacbf7258412be57df3f2e6b7e06f1545437bd00cd813d88c238040c3c03e7571af4eb2815d080b83f5dbde5aafba7b20ed5309260569f45cab4eaf3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d9560953c2674b8307f6405e5ba43861

SHA1
f45367ff6e77fee29ad920fa1263c56e0f1a5219

SHA256
e23ada776dd52eb620f176bcd12a7f5d474a880533b2e8b1e5af077ac6784d66

SHA512
628372f7e8fb805dc1d61e6b4dca9022915f1a1b414cd7470a6c595f9ce53dcb7af4616ea618226746aef1404d8b1c96240da036e1fbb2daae1f7e50cbbc6eec

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e61e8cf749b9caef27b4e26d255d761d

SHA1
b62122e560140d65d3bcdec400c47855b03753c5

SHA256
927d94e1411892786ecb97fb6f5e50cb1b45d517e30beabed300d6a227eb483e

SHA512
faf8e136defb39b1371a6b6278909444a954d626fb92f8d9da53f6cabf27197f2d320f0a4e9efd36b67c4bbea5537def941476629f0e559828ef1cea2c98aecb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2cd79020d7d0b551823062ca38aa7507

SHA1
f02a05c5b5e888f4ca98a61f74147e05608cae61

SHA256
6e7e3fd4f57551978de4714837ffa928d08f49a4dee839f736af23bfacc94589

SHA512
5fcd194c89d546495dc9ad7d4ddbc2765e65d2d1dc938fad6c2e6019ca7ad40947c5cf3cfa2b8c05cb01fd9be15e7c20ad4e9728b30d9840e14bc8a4edb9d491

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b4113ec3ad42896ec2e787850944cb2c

SHA1
b8a26682c2abe6cff0e461bddd002bc80d176fad

SHA256
6d7072d0b32d433a0508020db95c6020ead50fdd30b88f020aa03ed9e57304d3

SHA512
8166bf73a1177ebc4228e7c931cd799b95c87802e7a2b111989d4b643c8424164b2db665d5e813639e45c904a48993d4d913d3a11e994ebc20901f3ec390eb53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a767cca204dabb5c8353d222184cf116

SHA1
d7ca0961c68f1b843b4d0b1ae72cbf754be972dc

SHA256
966b6596813191e06cac0f23093967a738c11919c1b91ba4170c2b17a446dee3

SHA512
9952eb747c9f4a47fb71f6fe034a683ccc46db3e4cbaf1cd06764e8d03a72a837044b8204db7e288c0d41def8cf74d4d8a4b596e7f685b6ebec3f76d17c5c737

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f981a43aec784478f5790570b2889b57

SHA1
b4af20585cf2742c6584f8850197913c134a3e7e

SHA256
ca3ff7bcda20d27da3925548e28b806cf29154d281e0484d81a420cfbb73ffea

SHA512
22dd7e18c3c6d34d2753e45ecdb327a6c3a794074e1abd202c1b8d939d428bb0d40c5489495fb0c7c7e7c9d4fe37cd4d63923ebcef22c14554268f8290772659

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b1b19d3ddcf41d4ed04ab4f1e9131b51

SHA1
40d6d028d49643152d5bcd7e8f459bfc1ab76fd9

SHA256
2edccdc2e0a6bf790eee98bbb7a6e2ec9bb22f7a41edd2ac1ec35c6abbc90f4b

SHA512
6dba3d027c59e32703967166add8659e339385a298a9b575dd3100b2acbdfccbd0b04af01c6b124035e31db18e1f353bdd848b03d886d9753b692fcb722b39b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
00a7051a0083b599898f42e041fa4ace

SHA1
9eccbbea1213ad77eba71c58f4e8c63524ad0d6f

SHA256
da15b33b8134f7e3e1b3d8b6dc69183688a948a6739ee09fc94c652e72ae1e9d

SHA512
abbbcf55eeaa6dc53ff6f9b57418639dd7878ed181266c6b74860627f47ec2dae29e17c6085404ec62648ee543c1fe979187248e6b5e3527debbe89013971363

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
70f13719636ebb2de01a0399b892fa5a

SHA1
50a49992f5452541482b6ad765ed091c6bf0b9c7

SHA256
ea7786c3e661b1d6fe944db57029f5cc13fdf7ec5db6f0e3bd81185e24cbe638

SHA512
02753525012317fd4782e025a6bb0971b61ba808ae55eeea82457ae3cf6826ce803f8e2bb8c53165dcec7fcb3b6595a85aced91ca27bc6787b710447631abcfd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fdf95a0dcfc9105bb634a71fe4f91d36

SHA1
83f6c11246ff38c7d48176ee1e34783c0096f69a

SHA256
c094f92bca0918e5d2b1f458bc308a221a48c98b2a0de07166a64e731f663071

SHA512
6c72a1d9cd882d10fb434b95353d1be32e701364969260ff099c252568e536dedc93547d7e6cd16c5c1efe2ff2fdf02fa4cc6742e6321f681b18f2906198c1f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e727ac0639dcb64a8f2667fb9e45dbb5

SHA1
af8208358204b6e24b4903ecf87eae58f0526b25

SHA256
6eb53cd3a18241b23b21d53dfcb3beaa5c453dc061226b01857012a37909b7fd

SHA512
e0c2ddc0c4f8e563f9bf597d437be01392147de450b2e29de7b358f41f1a4725e43a4344fc784a3de1267499d3407a3d75884373124e3dac53d1aeaa5cbf3078

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3dfb16104184f1940faa31ad2d4dd736

SHA1
6471b6f105b7e0c0b949fcaaf3febebff0dd04f4

SHA256
fb4f6c8df52a3f5decbcf752d2f7aefea8c007245af027f3a9bce98c95726d2c

SHA512
cf4acbb9356918a87ca9c252f1a2a31462247f4c1896f89a7075a4b33e207a4b6e9f8a83766f05b0d7000ffe49b0b402847c2dfda1684350cc2e3cd291d33b81

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3cb036d8b9c60e69766663949b893e6f

SHA1
83d62cbfdd8d6e0805ee3641c2095e474946cfc2

SHA256
a0da25c101b0a1c041147d837260e14490c57192d3b08e6fd9f0f2405287101a

SHA512
ec86b529ef42a0434dbc094c7c1af1cf8b912b553a18ce524f7cc1dbfb180c616444b5a9c66ec1cee39ddcaabe638dbe5b95be22f61dd4bcf329237cce7375e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
370ac04d8be76b2caddd33fc1e96e49d

SHA1
079557202422e9e7319614da1b06cf9dbb33b490

SHA256
81a5be29916a065e7025f7c5f6b7a39ccf3af79af78e37478fd278164773b853

SHA512
6417ab1af85749bf380b365a6fb87d86b1a5d05c01b317ff9c94a787092b36792f6c0f00241dfb01289998ef1077202b935e8a0c9681ff47eaae98d0185191e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f2383e19020a339bcfe5886a9b85b0b2

SHA1
892d853bfb478c31f5c02d2746b4f98345fb4b03

SHA256
ff3e3ed1143b7cc8026f5f7f6d51f09090dd77a2e90697a150c8e62d43b3d72c

SHA512
046b9046adc26bcd8aad2ee7e3dc5db97ba34734a1580af12a8cc3ab554c3561a1c91cc770e993e01d47e536f696dcb9b38c08fe027ca29bbf8a1a6facc687e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
37fd97f08c3d6c3f27a405f0cb1a6014

SHA1
9cc412373c4e38f318736a0aa13d44b19530c771

SHA256
98ca75b1893d74776b279eb508c525c6403b2700aa1ffe7571dce44010a1c5f6

SHA512
0fbb3f9221fefbf5544099f7fa188aeb54a8087af9ea073dc9c35b9aad0af93f9cac28149e672fd62191086a7cb128a2032ed3236e6a6a1b73241a77f3b1f3ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1ff16ba4f86200dc5ac7ac166a8439b0

SHA1
8d8e21e8ee25c5f6ac119e98cae1a92fd3411399

SHA256
240127a2ab588c4c798737dd7363cff79b81360c374abba3d74b4dffb9fb9f2e

SHA512
1ae8676d9976358230df6e1f71a830a778a4114a5bbc0a983098abdbce4eb72b15391c906d37bff83de6b3b5d4fdd88bfed8013569ba7f0e5b8f6c7cf9ed4492

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
bc0fddd4bcf68f073e969bec40e75ff4

SHA1
fcda3143c19325978cdb3b7febf77aa6e6a0b811

SHA256
2b2cf680987e1c9520587db65f8d1b3388c1df78db40f277b82ea0645672a72e

SHA512
2c3b0d689a0c11a5b6a3fdce57e86e8c79ddaf15b537c7b415dc548b2a5cd3f443c60700bc538f9d921a527dd1268252936f0a8986cb06c2fb21ef2f09093440

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e8d9a8b1de49f2af5d84958b505c274b

SHA1
ce942d33a3c2b33affec275d24608f4fcdbf08f2

SHA256
463ae4c523b00e771dfcd2e4f4262e0d1dc01223d13251cb06952ff9d898b219

SHA512
710fbf038272db54d98899f2d47f8b639f8c23b7aa8abdc9b1d5a7d71983320caa1ee4e2907eca691b47412b364290afda11ed9c55f8149666ed6fb30a5405a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0aac593e13560b843c06ebbd5bb7b663

SHA1
217402a5749481cf71c36b7facb3f732a6a14b63

SHA256
bfe0501426a7613172aa55df2159a8ab3f6fcca0c68b3009109ed255efaca755

SHA512
0edb724a279890e1587b91e19c5b03fbef581acee504248549f6484479fd7a8e006aba600dc970076fe289da633c91c5f905dc783ed5c801a817c2b13d60cee0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
69361f525d6d07025d9341abb757708f

SHA1
53f181a2a445ba2ab6f7cc58c6182b5fa1244122

SHA256
dfc28881cd5bc27610074bb2cc235c93f91a85a479f043415df1c985360a83d5

SHA512
3239336165cec9ba739da6333db51147f339356891354f0dabeca49768d0989b3be4acec575db99b6a6d0893c91e06d41aa335108a45c190b9b163de15742c70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f9f1cafe6c7ccf79918d9c930035204d

SHA1
2316a7580834c1a0eb0c782d9d72eeac1416cc98

SHA256
0f06f79d99423b97bdcbc917f8c026ecf58aec9751d7a9edcda95c009dab65a8

SHA512
3cd367ad12741f6a60cece31938f16added38be101f1d05de8ecd4aa42fe9324d012ee4d7704c97bb04bb36de6388f6a72264b576b7f686ea1f7087bf92d1d70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6cb4203f4c11378df9af14394b672986

SHA1
c03634cb818693e167406a8d33b6b9f2349f5f76

SHA256
ceadf137c6bf3ef38e981f671e99be05ca9af48525cc47919db28e16b39c3c84

SHA512
34061b0c78619c745bb43398862c898f2a4d71cb78a8d296111f00dd5febc1326683296cbf7d49e246d5120ab56f79e747cee70b69b827cd248f048bb4dc9830

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
290e13218617f3c7e540855fea095b04

SHA1
ef93672510195f0356c407d555ad40bf9f21fab6

SHA256
8710cdfd9579ba6e85e66db2f5329a1b58ef987d23eba8b05a58a17114210c6d

SHA512
811ff90e0b39aff06538d82f77268779e09523d1ca033a5bca924dc1a3dacabd09dff4472c5a8a045ce4df5ea554938404b73f9eea7bc892d70327772a6baea3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
093c6fdb573227c59c256a57d46270bb

SHA1
3aef7abceac32bba75cccaa1bcc27d01fb761d99

SHA256
62b37ddff352ce0c86217577c34336012a1cc44458807316a9fbccc47689ed69

SHA512
d1998ac7e0a69f53ccc70d982b0313c555e8747bfeee8635e416c6ce9c5c9d6f29da9da1f29009a12509552328cd1025828b134c71c0467c650e96dc94e45a26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4dd093cc68b49568354f7ad62f38a2d4

SHA1
d8180822004fbdea39073775b5c72e3c5d37e85b

SHA256
9ebc2a7c6b2d922f72fcff000320f4e3f80a111c59544dbcd535ad06435579f9

SHA512
592e1c0a2b63988d6b4785f576a3c91afc68bd3fb166ddffc03b0d3537a42287d4de4dd2436696b3afed64d10c9804fb226f459182b57ee7e2ff89ecc2b7c9e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
36c344738cb119d5bd03f035dfd63e83

SHA1
8d2910d69d2df12911ae0fac53a6050cd34b7192

SHA256
507a6ecf2aa3c703bfe641c29d531da68fc8ac206544ee463d3a593dad8e2782

SHA512
5e52b3096ea90228fa92e16cfb60e44cc53770f8312a699f1b8f81e6f18d4b6b1c93f7bb1a5bffeacb969747113d1308f408bd935961d2e5b67c66434360860b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
269fc44086e4a0f872a06fb8eca61459

SHA1
3dc793c64f9dcbab0aac0010184f710c9685fe75

SHA256
440701679e5317e8b7e548b4c09bd28bcfb1e7b4d55f2fdb9b762eb9b1c9769b

SHA512
cdc04a6fa68c7c6e852ccb46a55f5042ec25c71c561a9a4a8fd82addde6d06ff54c64aa60676169af88470ce01a8072a2e03d0b64b22daf8f6c5d5c3974c67b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fd9d1a1dfc10d46e96a56c9d9caf7d52

SHA1
eaad1e2a303a9849eb3b1f3f75774cd33f742bb8

SHA256
396ee94733daea0647db4f2f6489000dd2d586e2e64fbe930bd82c5483a9cf91

SHA512
564a16d811279b312a8f39cbea826c66a6b7190ebb69a3965c90eafc5df8e9a09bfc06ce77ae2429ebfbb81976c07bb5d25718ad8feccf46452ed1ab725c93c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
17103f49d23dc10e2428dd1db5b63165

SHA1
f93c79a5c604a6475843099a8da096138c26bdc1

SHA256
e1358f9f88c161c73d2c61e60ddd9a9386e0a1d6ac0723953efd4d8a8e27a094

SHA512
88345e054a67d973e995fa9e1e2dbb94ec7fbf602ec47d96502132d3368c5570a1957338ef6e73f2f9c9618d40fee41d250fbfeb7a995c8ca9c72489bcdb8d16

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d99fb5283bd3e54743e02e471ec02528

SHA1
1d39275064472d2b0848cfafa10ef7f232eda1b3

SHA256
964cc957cc70fd020225200b9249694b2a3cb407f9d1923b7d9aa1abb76aa8c6

SHA512
a87a7daa16ef9560820a76b94b1d62e5ca67651218cad3253d1cd977d5c4d1b7f4349ba5dce6b13ea15a7dc6796d2ac319fbe6fa7d1093fd5f4c2c7b9f6096d5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
df27459236b07dbe0e70d59ca6f4e5f5

SHA1
db459b45b3da66e7fd2fe20af38ff2ceb8b59100

SHA256
f256580af18d51cbcf0187814491b0e6366ea483e7f47b8ca8358f6a863e2c30

SHA512
520db6fd068e466cedf2d32eef859e7a3c719cfab81a9354d95d7515cc81bc5fb2b9da8bf2117e431402446e6ce2f04e2f991f8cb94500dba329a73d024a268f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
c27fd6e4dc1b5b4ac5a7084420f69b7c

SHA1
4665c3e358fbf11fd97eeb6e8566548d2cd4782d

SHA256
10d7d610d98d1f7517afe3e84ce97ad3c2468abdfc05cf666b3f560b833bd2f7

SHA512
38233d407dd605b3dade9ff1935bc3e3d38f56639d10a1a7a4d2c6585550bb183af8c3d49802018d85624d968add364bb900e7a1feddda8a802f49eaff79e612

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
2bf652bef12e250678bedb6bee4c2767

SHA1
9652922ca73d9fe3aba950c396828bf86160fbed

SHA256
a5e9ec8fab846e90e284d05622b20df26c233dcc48675fd6b270c97c278c3b96

SHA512
7242018904e706b494ceeaddf755513fb000401eb557c26ae2a0bd957daa60ca57728ec42fb0f8a21cd25928f50d85a93c7e474b3eb4202ae5b5f7fe77403026

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a25a3ce1-fe92-4421-844b-71904a20fb77.tmp

Filesize
10KB

MD5
7838c228be033803003c52c2765400d0

SHA1
5342c9e3b5bca7c9fa7c1266b1562fd56f7375ab

SHA256
79001e6798a38ab3a09d8f7e9562456566015a88ecc4e8a09a6f1adc5fdf6485

SHA512
a7465524adfcc613f00e06bdaacd32e243f1e859c92af58cc86b8ee145383327bc222f6758159ecbf0f0ef0e7d0af7e6cedbedc2bd9aa74262e8b22fc548cee8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fec2bf25-4ac3-4593-879f-e25ee338daa2.tmp

Filesize
10KB

MD5
824dcda21352eb182925ae6aeaf51f76

SHA1
81289e63acbfeb9ae37def79e2e2b4a905722b81

SHA256
5813234b9ba38c95a4e9d5e6473d83db88dca470617e8c0479a09490d885517d

SHA512
39b5a5a6cb7f48ceb300c15b432b20ce905bad531d6b2f782bf13a0142168cd68fba8d00af2ee87db7f541d503bf67f7edaabb97c8ab04f66a75bdd2587e24ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
211KB

MD5
962fb10e3ba979b03446f6769697d2f1

SHA1
1cbb0de7cf32323a4f1ef4c326177862117ba0ed

SHA256
341fc50be9e0d91af5ec9069fd96d3c320a9d42b794739c63a0b7b4e56b445d4

SHA512
681000dfa20c3ba9354c359fb76247976cc9241863b39ebc84b4265a913b271d9a610716dd94dba1714385464cb3e2af7a2570231362e07f0d541c650b1310cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
211KB

MD5
47ec29f392d1c970493e4b29b14f00b1

SHA1
3aa30cc34cca84add01b7946c6ac3cb1a5ea7b8a

SHA256
4a6052dd4d222fc29ea400f8306fbca159c29019024be3189d36e086969415e8

SHA512
653246f1717375ba719640d63f48c8c0fb2e1f9ca97180a0a4de7986233eddf8785f673150524259967feb8fa94b227e96be21beb4ec1201f49c065d77bac3ae

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
74faed1b99a65f13379b75f632a20b3e

SHA1
90e423bc5edb8e64207dbf9caf24eef2f4a49b41

SHA256
76448d8e523804bbc225ed5b42258c9bd016c05c3689aa2259477c2610bfd3d4

SHA512
191453793fd27dbcbc25425400ed02dc00cc30f136a1e29b9615118eef1d4195f85d1d4c67c36fb932c2c301833c8fbf1f7d2eb98e0270fc2a3bbcf27642341d

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Code Cache\js\index-dir\the-real-index~RFe5801ff.TMP

Filesize
48B

MD5
e6816fa8d0096791d37f664aa2d409f5

SHA1
1de2cabf425f094d4c8630632d53244b53a097c9

SHA256
3d9b8bc0c5766ab1a40d64d256a753dac1b512abc86aa6f4656a2fa262ea6e55

SHA512
58bef1f9c3647935be3fc9705f0f1b6272dbec4a2a683e32f304cbe8c7d8056fb6d814c0f414bd7241dffb4d3df59e8e9dd1d63f3d92facff5488318e3f98c38

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State

Filesize
1KB

MD5
e6a417885c918fe3986ec7ce5b35126f

SHA1
8f786b78066a748b4c95d2de2c7f364b8add8b29

SHA256
be38b35d16f50dc6b723f5a096bcb98d6f311965b59ad3d1fab4452f74f44e28

SHA512
8babb897c36d042386f393f1219e6025dbfedde6b2332d502626492e71733f2d0dea88004decf7509a9bb8d6e31ac509d7031b70642489b843a877c1f2d6bdeb

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State~RFe58021e.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Preferences

Filesize
8KB

MD5
37bd2b7eca2f548a43a3a21cc0a65f41

SHA1
4a3d88d5a50fe591a69e8bb5f25a52cba6d97b3e

SHA256
1bc61ab2fbbda48d616774dc6228e16a9f06f563ad592372b1670f0cdf024572

SHA512
5b52a944144d1bed3735e9aca0e8983d1114dbfccf802bee6a37180e83c81e97e7841adfa574e7038c4892420c2d8e444657a3eeea78d56c42899c1be3f43445

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Default\Preferences

Filesize
7KB

MD5
baab565ade432f9178f80c95a4ee9dae

SHA1
3dc43bb47f44909f6f22ee4af4e9cbdc1d857fb1

SHA256
209a7a9646340e3547cd7d4c078837af713037e78a5eea98bf11b8c6a3fe7e5f

SHA512
1d4b221678b5c402dfb78fa2d355319360e83804d8ec4ac2f8fe64f623be896373df69608a278ba32bb0637602a264f11e8320461272994d82721c450145cb3d

Download Submit
C:\Users\Admin\AppData\Local\Spotify\GrShaderCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Spotify\GrShaderCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\Spotify\GrShaderCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Spotify\GrShaderCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Local State

Filesize
1KB

MD5
dc733a87f19a19ec9e18fc9554999a79

SHA1
5fd2766dc69ef95759e00ad02efab871e28bfe77

SHA256
65bbeeee38a857f7d50bc096c636e8ea6744b97e65ffb7838849207321687091

SHA512
110f59d4e1497af347599ea3bc38c04892c0454b12c187efab5cc6ffa5d0826c7da6c5bade51adb4e470e502de95ef39a4546b26b7f03efd688cf1c00e5ba837

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Local State

Filesize
2KB

MD5
054969130f66cf9edb69b7f69e2e3b78

SHA1
b31caa522892817c56aa7f3184e14d485957f492

SHA256
b9e032ee5246da02fd83c9adfe21fc9cbbce061adfb9c0840f5b53b2439365e1

SHA512
06c4bbc9646ab119abdc80c62be3c0741150f62781d35666402fe4786af3a4b224ab3ff07ab7dee6cf4ee1eafb491b882d81e53e21321748c3c98a0ea0d4c5ce

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Local State

Filesize
5KB

MD5
a421f6b3add8eba32cce835371291138

SHA1
fade3bc89f210c3d3e8077444059f82fb24c2ddd

SHA256
1b0609c2e7d5d6d246809f3ccaad5ad90c5130c9fcf3ae9e12b2003bb784ef15

SHA512
841b163c79c4cda5a1c2762bfa33cab6c15310f3284297afd4bbc9828a9b5b3d5a56df31414a905167147e505b565c2543b567851ba31f0bdf76bbe87375bce5

Download Submit
C:\Users\Admin\AppData\Local\Spotify\Local State~RFe57d59f.TMP

Filesize
890B

MD5
c19750228d120c4e973b3bcd409aa18d

SHA1
973472d8aff368f89d83232b68e28646da369467

SHA256
3c2f2061b416be7a9e6e2d2d4193d3776ed3634583f803cf35f69ef97a17bfd0

SHA512
7eed64a7b0477db23adafd86f3210e2e4bd7707fdd2eed56b782721a07ff3e450c9cfe672673f241fcf15e9e908bf285bbc7f189847204b3d4cc3edf34eb9af8

Download Submit
C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat

Filesize
56B

MD5
3478c333e5bacf4af2a75d33d9f81ed6

SHA1
28fb11759db5792859eae03fb49032678c34c0c7

SHA256
0799bf69b99db2feb641ed7bf70711b9a52c54d28b5aa7fe64dbbbc87062ca32

SHA512
00cf4abebecddb2140e9e5f21f0bdf17a0d43e1441a8a9a4e2bd69e2c5752271f01add59b764e9afd465ed20b9f1a02a8866b2ab79922565d9dfe89ad90df2bb

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Temp\3368888e-1b4d-45f4-a5fb-c72218a1cd11.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Temp\7b445234-a70f-4505-9f4a-889a55f6e497.tmp

Filesize
132KB

MD5
e2d2f826a2253da9da88faea320734db

SHA1
17b24a01c01485399600196b6aa68456f070942f

SHA256
e59d727ad2f2ea2612506af5418a2ebf5974f16f7aaa9f7497bc92d75a451624

SHA512
ad0686dab396d77cbf6a39628aca8a712793257232eaf43e4cd27a27b32a7411fd2755bcbd92d3a9a7acf32b0e7974ac65fbc5b28615d91f48558acac7af767d

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir680_1223165327\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa

Filesize
3.5MB

MD5
3a6de0051fda48a055e20bb317102428

SHA1
4038616b39febec49f6ef5b9f0e1d89b58668da1

SHA256
eac7e3178a66302e7f196be738c151f8aa8cfa46834e98b2da542207d024cd8a

SHA512
9c90ad3d9abe77f640608418888722d38d3bd0bf146aec16008a3a11211f2b1ddf83723989d461842c76ddd38200b649f8daf00a56ff53c116fb8a30aab12ec3

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe

Filesize
34.4MB

MD5
9acf6fdfb8202999d593f7e75dd3e309

SHA1
7402e0a64cdcdf024f1368dbe5c83c2d90e9f552

SHA256
bc22f538f39297b66477cefb674c61c7675806fe2e50339aba9c7dcf3dae4975

SHA512
d083f41ba0e5804f44f94b83773b62d9de69337a3c3754baa135723e8fd8c13ecfd83849e296855c58f6a701aa6d38a97f882505f36196f997d0c48e8a86dd40

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak

Filesize
678KB

MD5
a78f89490b0ad70cb1ed0026b4dff98a

SHA1
aea9e05d34827c2d71b342db45e7d34bf3b1633f

SHA256
3f665b02bbe58d6423c2e86211bd8f074d8a36726438e639541ad695f8430b9b

SHA512
2ee38430acb459e1e0ba4f3d76675b3e0ce1dffa2ae638c2331e4c3911e4fbbb795cbacbe82209233be65c29bad3c40efc78c1e88d033a0dee601713166b6d4d

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak

Filesize
1.0MB

MD5
d666dbc8cd69a9c3a8d8365b9715b83a

SHA1
9acfe18fb0aba4c6be911ee29885d80871c4f6f3

SHA256
8152796c92c3481a546564be8f0b2ca90bf50d1bf4a141db166c90377239794d

SHA512
5118f941fd2690c17442338bada963ca0392e705672a1328bb15d1a518b0bb4b268b43650e7acb7d3962b38f5b1404d0d95e4be861745fe91a01a7c1c11ccee2

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll

Filesize
1.3MB

MD5
acf05c77453ddcf67d3a3c628d2bdcbe

SHA1
8e4655a739b81d371ad8b27c90215e3eab1552ca

SHA256
b2155cca50fbc9feb1f9571b6ca5e60a11875d7b4bbf47070c97cf0408b254cc

SHA512
3cd6890d9f62d14d6b721c1379bbbeeeac6eb16f258e5ac0b3208e0b60c9de75e2f1fedbcbdddf2fdb48116934a976fcbe586cf31c0fabfda4e0e37f7214e118

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg

Filesize
577B

MD5
462fc258b27b305ab2e0b793d0f262d9

SHA1
2df4cb9a3a7e18a9c5a2982d05972beeaeda3ed2

SHA256
ab23b00a25831483d0e5ee94af316a4b43a2acb2511197140da71acbd9347deb

SHA512
4e8a9b73ed1f87d121907a8db06394771d3b1800b25724cf82a9623543728ec3a25c44f17e9826c998ce3cafae07cddc6d7b47435ebc3ef89bb2be8226a3ad2f

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll

Filesize
4.7MB

MD5
7d9a32e459843e2eaed8952dca343f05

SHA1
d92da14a6422630da1a6b1d8caed3b17e05b9a91

SHA256
6c5d26a1915f19e5c3564d73b56ff9a734431ff5f1ce4626da6ca4b839e2576c

SHA512
8f7438f8eadf5236f4773cb8af88250f406165267ea3f704312b5ab1495ead7b8d725d16956fdc4713258f040bac721ec550631069d889b4354f4044f3c662db

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat

Filesize
10.0MB

MD5
ffd67c1e24cb35dc109a24024b1ba7ec

SHA1
99f545bc396878c7a53e98a79017d9531af7c1f5

SHA256
9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92

SHA512
e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll

Filesize
492KB

MD5
cb7383d8b61b7c26be99ae921fca8b40

SHA1
46a26ac7d7262302b1d177b94d669506eb1726a4

SHA256
51c9c17e920124ab464289d01c53281da2ae675751da0cd49bd57ce4e4ba226f

SHA512
958d1dd5db3376e79fdfc47e4763dc1882593408815bd837852612814118aa7586a6abd911e2be4dc4566ca4d34506f5d589c99a77dcf3dfaf28c27cba80fce8

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll

Filesize
7.9MB

MD5
108652e8114b43ab5fb3893db8ba82bd

SHA1
781ef0d4251effd622389b075176f20571ed13d5

SHA256
e210a655d44f8c429ca7efeaf6d8aeb84102a62e5b3d389dfab153ae9a719509

SHA512
5c996afe41261e24ae3d85cf38b3de64d7ad13fb94ffd00138d70372285a7c2f6c369b76cccb654301107455d2f56361678de5f82816c38fc268f4cea208a3b6

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak

Filesize
485KB

MD5
feb9b5d5cea5cc61b64ce7908da86858

SHA1
76326d8ce9409a7fcd58b52a28e82e6c54fd02e5

SHA256
fc44badc0f1ee3daa57d905a9e39ae3ee6dbd38049cbd944905630409038ff2b

SHA512
1ea80da2ee16201af1e06e8a08d7e9e3d986c836667aeb44bc8d585d179eddc0382df6ffc2f6bf3dae7e2bc38e93fa3c34f7a6d26a8176778961d2aa6bdeb67e

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo

Filesize
16KB

MD5
e67df29f9aef1fcacd64aa11e6bf1579

SHA1
928f4dfea93433dbf772c3158522a1b2bfbc0169

SHA256
e269c4cb638b7fdb42462596157b5e6e77843bd60f36b58ba35ee40483fac094

SHA512
7a23994b2d1a33590e08b992c81ebf39551d4f3f278b9a4de9cbb09c7b87e0b578e5cda287d83ee89ac5af3f9e8db90c46d9faeaa0140cccf1ba0a33f9a83346

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\resources.pak

Filesize
8.3MB

MD5
834b28eba1dbebe93fa379f33b68374b

SHA1
9990700d224ce9789e92573c854a8273fb0655ea

SHA256
79ae92ce91e1aeb8b66d617bc27d099b23eb17f124e9d1b82c026bc7dd9f3743

SHA512
351d1af861c6738abeed995734f539f8a29f7510da6df890ea624a5f85826aa7d8c8708f8d2de6ef7a4f6a85b982d195d56e0b9337fac6687bb9dab6d43aadeb

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin

Filesize
650KB

MD5
b16e30aef843977c1b957411d31c13c8

SHA1
5a58f198ec4eebc3f342c8d8ce9a1898735c9223

SHA256
88fef2d0269b109ef903adeafa0021086ce03a50cb9ef7cbd5a9500a8fa28e43

SHA512
8790f4778b1c92ce9bc9744df37bff0a97bb6130f9dea19aa1420dbc0eb852bd6422e32602a6bf611844154c45c1dd4efac6b80a71558f9613b87ba695d5a5c1

Download Submit
C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll

Filesize
5.0MB

MD5
d69905a262d0b31aff1a2502a1080f23

SHA1
02ac3de120fe90231e83617f2833d0f807b89a0f

SHA256
2ac94e6677388fa0232cda954799174a01af2f9f74ca4453660bd767ff501a57

SHA512
f4852529cf8e24415bd51ac3b612bae3f01aff122634fa2a54bf9ce244faa71b33874c6521e06489a58543e4fd43b217a6ce94907c68c3a4ccc4ee4b72553126

Download Submit
memory/1920-1257-0x00000278BC290000-0x00000278BC291000-memory.dmp

Filesize
4KB

Download
memory/1920-1223-0x00000278B3E40000-0x00000278B3E50000-memory.dmp

Filesize
64KB

Download
memory/1920-1239-0x00000278B3F40000-0x00000278B3F50000-memory.dmp

Filesize
64KB

Download
memory/1920-1255-0x00000278BC260000-0x00000278BC261000-memory.dmp

Filesize
4KB

Download
memory/1920-1259-0x00000278BC3A0000-0x00000278BC3A1000-memory.dmp

Filesize
4KB

Download
memory/1920-1258-0x00000278BC290000-0x00000278BC291000-memory.dmp

Filesize
4KB

Download
memory/2244-451-0x000002C28CF30000-0x000002C28D66F000-memory.dmp

Filesize
7.2MB

Download
memory/4500-225-0x00007FF78BC00000-0x00007FF78DEAC000-memory.dmp

Filesize
34.7MB

Download
memory/4764-432-0x00007FF78BC00000-0x00007FF78DEAC000-memory.dmp

Filesize
34.7MB

Download
memory/4764-653-0x00007FF78BC00000-0x00007FF78DEAC000-memory.dmp

Filesize
34.7MB

Download
memory/4764-224-0x00007FF78BC00000-0x00007FF78DEAC000-memory.dmp

Filesize
34.7MB

Download
memory/5036-450-0x000001E6977D0000-0x000001E697F0F000-memory.dmp

Filesize
7.2MB

Download
memory/5036-261-0x00007FF8BF100000-0x00007FF8BF101000-memory.dmp

Filesize
4KB

Download
memory/5036-652-0x000001E6977D0000-0x000001E697F0F000-memory.dmp

Filesize
7.2MB

Download
memory/5036-263-0x00007FF8BFA40000-0x00007FF8BFA41000-memory.dmp

Filesize
4KB

Download