e39fb36d28e3461fabd323fd83208d94d19ddf932f587ac7624478b1070aad14

Analysis

user interaction
yes
max time kernel
59s
max time network
61s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
Size 2.5MB
Sample260804-eekn2afn9x
SHA256 e39fb36d28e3461fabd323fd83208d94d19ddf932f587ac7624478b1070aad14
MD5 fac852010fea738a9430c13bc7f2db25
SHA1 72dfbcf1d3171cbb33a647e6c52c0247e7a9a896
SHA512 78520ae3bbb2c4e9e133646f57e28f7978d5c3405c9ee3307094d3530e7eee3d5d5cd2893f23461e6ed96109fee84cbfe096193030e143cf304227db9bfbdc52
SSDEEP 49152:tBl2RG3sb9s2IOOSIA47acdS6SY96LAcaKFSd07T8DxVaAzlSdM:tv2RG3fORM7aKSTY9RcFmqgDxfzwdM
TLSH
T150C533B1705DF027EF7705F416F2E6D7E89C7C4BAA015AD96790BA81A4A01C7E30E2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
3644	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe

Loads dropped DLL 7 IoCs

pid	Process
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	spotify-taskbar-widget.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	spotify-taskbar-widget.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
1472	msedgewebview2.exe
1472	msedgewebview2.exe
1472	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5172	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302891219031986"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{68FB5F78-461F-488E-849C-7D61C33D2D1C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4332	msedgewebview2.exe
4332	msedgewebview2.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
4332	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
Token: SeImpersonatePrivilege	3788	Spotify.Taskbar.Widget_0.3.1_x64-setup.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
3644	spotify-taskbar-widget.exe
3644	spotify-taskbar-widget.exe
3644	spotify-taskbar-widget.exe
3644	spotify-taskbar-widget.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
6676	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe

Suspicious use of SendNotifyMessage 7 IoCs

pid	Process
3644	spotify-taskbar-widget.exe
3644	spotify-taskbar-widget.exe
3644	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe
6676	spotify-taskbar-widget.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3644 wrote to memory of 4332	3644	spotify-taskbar-widget.exe	94
PID 4332 wrote to memory of 3716	4332	msedgewebview2.exe	95
PID 4332 wrote to memory of 1784	4332	msedgewebview2.exe	97
PID 4332 wrote to memory of 1784	4332	msedgewebview2.exe	97
PID 4332 wrote to memory of 1784	4332	msedgewebview2.exe	97
PID 4332 wrote to memory of 4496	4332	msedgewebview2.exe	98
PID 4332 wrote to memory of 4916	4332	msedgewebview2.exe	99
PID 4332 wrote to memory of 4916	4332	msedgewebview2.exe	99
PID 4332 wrote to memory of 3676	4332	msedgewebview2.exe	100
PID 4332 wrote to memory of 3676	4332	msedgewebview2.exe	100
PID 4332 wrote to memory of 3676	4332	msedgewebview2.exe	100
PID 4332 wrote to memory of 2672	4332	msedgewebview2.exe	101
PID 4332 wrote to memory of 2672	4332	msedgewebview2.exe	101
PID 4332 wrote to memory of 2672	4332	msedgewebview2.exe	101
PID 4332 wrote to memory of 1472	4332	msedgewebview2.exe	102
PID 4332 wrote to memory of 1472	4332	msedgewebview2.exe	102
PID 3644 wrote to memory of 468	3644	spotify-taskbar-widget.exe	114
PID 468 wrote to memory of 3680	468	msedge.exe	116
PID 3680 wrote to memory of 4624	3680	msedge.exe	117
PID 3680 wrote to memory of 5164	3680	msedge.exe	118
PID 3680 wrote to memory of 5172	3680	msedge.exe	119
PID 3680 wrote to memory of 5164	3680	msedge.exe	118
PID 3680 wrote to memory of 5164	3680	msedge.exe	118
PID 3680 wrote to memory of 5260	3680	msedge.exe	121
PID 3680 wrote to memory of 5260	3680	msedge.exe	121
PID 3680 wrote to memory of 5352	3680	msedge.exe	123
PID 3680 wrote to memory of 5352	3680	msedge.exe	123
PID 3680 wrote to memory of 5352	3680	msedge.exe	123
PID 3680 wrote to memory of 5340	3680	msedge.exe	122
PID 3680 wrote to memory of 5340	3680	msedge.exe	122
PID 3680 wrote to memory of 5340	3680	msedge.exe	122
PID 3680 wrote to memory of 5480	3680	msedge.exe	125
PID 3680 wrote to memory of 5472	3680	msedge.exe	124
PID 3680 wrote to memory of 5480	3680	msedge.exe	125
PID 3680 wrote to memory of 5480	3680	msedge.exe	125
PID 3680 wrote to memory of 5472	3680	msedge.exe	124
PID 3680 wrote to memory of 5472	3680	msedge.exe	124
PID 3680 wrote to memory of 5832	3680	msedge.exe	127
PID 3680 wrote to memory of 5832	3680	msedge.exe	127
PID 3680 wrote to memory of 5960	3680	msedge.exe	129
PID 3680 wrote to memory of 5960	3680	msedge.exe	129
PID 3680 wrote to memory of 5752	3680	msedge.exe	130
PID 3680 wrote to memory of 5752	3680	msedge.exe	130
PID 3680 wrote to memory of 5752	3680	msedge.exe	130
PID 3680 wrote to memory of 5788	3680	msedge.exe	131
PID 3680 wrote to memory of 5788	3680	msedge.exe	131
PID 3680 wrote to memory of 5744	3680	msedge.exe	132
PID 3680 wrote to memory of 5744	3680	msedge.exe	132
PID 3680 wrote to memory of 5276	3680	msedge.exe	134
PID 3680 wrote to memory of 5784	3680	msedge.exe	135
PID 3680 wrote to memory of 5784	3680	msedge.exe	135
PID 3680 wrote to memory of 5992	3680	msedge.exe	136
PID 3680 wrote to memory of 5992	3680	msedge.exe	136
PID 3680 wrote to memory of 5272	3680	msedge.exe	137
PID 3680 wrote to memory of 5272	3680	msedge.exe	137
PID 3680 wrote to memory of 6000	3680	msedge.exe	138
PID 3680 wrote to memory of 6000	3680	msedge.exe	138
PID 3680 wrote to memory of 2416	3680	msedge.exe	139
PID 3680 wrote to memory of 2416	3680	msedge.exe	139
PID 6676 wrote to memory of 6744	6676	spotify-taskbar-widget.exe	141
PID 6744 wrote to memory of 6772	6744	msedgewebview2.exe	142
PID 4332 wrote to memory of 6820	4332	msedgewebview2.exe	143
PID 4332 wrote to memory of 6820	4332	msedgewebview2.exe	143
PID 4332 wrote to memory of 6820	4332	msedgewebview2.exe	143

C:\Users\Admin\AppData\Local\Temp\Spotify.Taskbar.Widget_0.3.1_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Spotify.Taskbar.Widget_0.3.1_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3788
- C:\Users\Admin\AppData\Local\Spotify Taskbar Widget\spotify-taskbar-widget.exe
  "C:\Users\Admin\AppData\Local\Spotify Taskbar Widget\spotify-taskbar-widget.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3644
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3644.3272.13531273950550240791
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4332
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffae8bdb078,0x7ffae8bdb084,0x7ffae8bdb090
      4⤵
      PID:3716
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1772,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1760 /prefetch:2
      4⤵
      PID:1784
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
      4⤵
      PID:4496
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2360,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
      4⤵
      PID:4916
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3660,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
      4⤵
      PID:3676
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3964,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:1
      4⤵
      PID:2672
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4312,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
      4⤵
      Suspicious use of NtSetInformationThreadHideFromDebugger
      PID:1472
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3320,i,13179334779804578544,14727402890061656481,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
      4⤵
      PID:6820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://accounts.spotify.com/authorize?response_type=code&client_id=0f68737f57b7444fb3a39ca14261bbcb&scope=user-read-currently-playing%20user-read-playback-state%20user-modify-playback-state%20user-library-modify%20user-library-read%20streaming%20user-read-email%20user-read-private&redirect_uri=http%3A%2F%2F127.0.0.1%3A4381%2Fcallback&code_challenge_method=S256&code_challenge=KMMDx1si_7APW9xm2yqgpPeml4zfxRVu_ZoHyi_G6J0
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://accounts.spotify.com/authorize?response_type=code&client_id=0f68737f57b7444fb3a39ca14261bbcb&scope=user-read-currently-playing%20user-read-playback-state%20user-modify-playback-state%20user-library-modify%20user-library-read%20streaming%20user-read-email%20user-read-private&redirect_uri=http%3A%2F%2F127.0.0.1%3A4381%2Fcallback&code_challenge_method=S256&code_challenge=KMMDx1si_7APW9xm2yqgpPeml4zfxRVu_ZoHyi_G6J0
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:3680
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x214,0x238,0x23c,0x20c,0x260,0x7ffae614c188,0x7ffae614c194,0x7ffae614c1a0
        5⤵
        
        PID:4624
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,13969672706056015527,17515624067497188825,262144 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
        5⤵
        
        PID:5164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,17523765105286881696,9268455229318852138,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5172
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,11607323747062289538,12747606725173091879,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:8
        5⤵
        
        PID:5260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,16347151787800731550,9875732085225191023,2097152 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
        5⤵
        
        PID:5340
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,2755392616564554491,6927240433768962085,2097152 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
        5⤵
        
        PID:5352
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,5602567549231287244,7843767668989776542,2097152 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:1
        5⤵
        
        PID:5472
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,17090511031065844273,15430735592646964007,2097152 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:2
        5⤵
        
        PID:5480
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3940,i,6820981057193820601,452526180989976840,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:8
        5⤵
        
        PID:5832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16311223069871751853,16470601846294776241,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
        5⤵
        
        PID:5960
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5128,i,11164927479292449081,4477534992646937424,2097152 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
        5⤵
        
        PID:5752
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,13563545197298392389,13418828270923313217,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
        5⤵
        
        PID:5788
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,16123236479135868106,5179514776522505989,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:8
        5⤵
        
        PID:5744
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16202545397748649565,13188085545414697999,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
        5⤵
        
        PID:5216
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16202545397748649565,13188085545414697999,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
        5⤵
        
        PID:5276
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,8505509885814572867,1911247760438395955,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
        5⤵
        
        PID:5784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16118096516203973401,4990693978008618162,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
        5⤵
        
        PID:5992
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,539782223559382826,11544282041475261375,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:8
        5⤵
        
        PID:5272
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,9468169989191526967,2541659426249909032,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
        5⤵
        
        PID:6000
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,16578595651262820391,2211578845576611261,524288 --field-trial-handle=2276,i,6463485162713982244,7641819009106037857,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
        5⤵
        
        PID:2416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5208

C:\Users\Admin\AppData\Local\Spotify Taskbar Widget\spotify-taskbar-widget.exe
"C:\Users\Admin\AppData\Local\Spotify Taskbar Widget\spotify-taskbar-widget.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6676
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=6676.6732.7837583691033561603
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:6744
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0xfc,0x18c,0x7ffae8bdb078,0x7ffae8bdb084,0x7ffae8bdb090
    3⤵
    PID:6772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c107d5cf33a714a068be0aded9bac4225385ecd3f59f1705fa681e4010125f6c
MD5 aa4214cdd355dd491d7e78f2dc15f214
SHA1 60b5b7a0e0c833918c018f11fa7354bbb8735685
SHA512 aaaa9dc5718e77344760f3ebe4d3dbfe1578d67071ac4752c2addfa29e2e562b6da4ab466d0cef8231f31f45568e99edbac8c445454402bcf9b5c4cbebeb232e
TLSH
T10BD02372BE91D3D0D019303D502002403B26023123CF832310A8480CDC7404082DEECB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aa265248c9a46d51fdc92a9465c7e56eda41d77ec8b3d742ccf32d888e059c33
MD5 1a4e7d465ee48f3fe83c18a64798c5ac
SHA1 42808e0acc7fc57ca8f9cd47acafeb41fb2b7397
SHA512 d672fab742b3e5dbebc88aa3d98bf338391b9329b37ca2e84d471e7a5a686858480e6e50c07347fdcf9b2e16cceee702222c5603c73203b6cb12821b58e2e9e7
TLSH
T1F571F85EA24F3D6DD7AAE6F3FBD15747307140A5092F8EC7104158BEA02A36CC975C18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3a2f529cebf48bc56ecfe81491cedf364f82f6fa8f18a7baf65c6f1860842b0e
MD5 342090b3fda442358d14ff8fcea240d2
SHA1 83d46d6cd10045973c33381189b3b97eb06e6588
SHA512 109915d89b3b5d6d33059ae7327fe1feae4c3b68c7601d06c0a3ea8c4c88a227e875de6a5877fb0cc461403401d461e6d27acb374e1a7625b8f1caaf0e6a6950
TLSH
T13F7168F7C3E8963EDD0155F4A7182E1BCE6D0924832C3D67C8E4AE1B67E1871E28055E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 51e426d094248f05a7bcf12d63a2e5597e1d600a3cfad4539e03a903b256535b
MD5 8e7719acf1f6ad2935ae71337ff4fa26
SHA1 abc2dbcfc386a72ba13a8938bcd7b8e84dbff7c9
SHA512 2d15e5f0dfb11497233a3a392d891eaf1cc676018edd66e8836a4521b475024d17117cbc9053218fea6cf08facdb6cd33af9544883989b6fe79f8d91cdaac7d2
SSDEEP 192:sxZ9Rhjh/ffsUTWpVcZMIdp+1HW6+WNFLfQH/SixMHQx1A8mIgyJ:sxZ9Dh/ffsUTWvcZVuHbdY/IxO
TLSH
T11232D8566D78A97B8CC6D21EFA19BF13E3F9003291D09E58AAFCD51C04E66DD220790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 64c9aca93378eece13f95d14860b8cb73e57e0843391851b7ff3f01350324989
MD5 db0fa1d01a226585683429e8a4fba2db
SHA1 0ae136547044124264d30eea68e80cc03cb2c60b
SHA512 5ba8177d64c9c03c4dd2a233c67034cc863a5b4113d3e9caaf0261f4da503f36bf16ef4cb955296b199fbd24f11b464a636bd3bfd5d0f9b802b007f703db7630
SSDEEP 768:TCqir0NWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVdi5ALl6opT8roPGUnq:TCqir0NWvx7jru1jaci5ALocTn+Uq
TLSH
T14CD2FB3F644CCB7E4FC00A9DEC1A6F963EA802CB96588D4047FA985C02D77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 99f9c2e94418b90e362369fc39a6247df06dd7c623294d3e53c3729820ea3ab9
MD5 ae15c8135753e6cb546aaaa187df84a4
SHA1 3bfdf09aebe156ba008ca5255bcd86daf868b2d9
SHA512 679ee501582884f1d33bc3bf71c357e493f7045a28236591ea57a8ba3c901cf6adf291fa688c9ca0b04b65e8e27769fc782216bc0453c98bfa066e456c1406cf
SSDEEP 24:KdPfWdUaRdFVF4Rt+4IjxFKiiha/F1E3VSm/M681+yXYRfcHuaLdzfn43b++Ij7I:KkMIvKRWcDyZOIfK3qwzPIVKkswnyhz
TLSH
T15A91420271FB52423C3E651C9260D7A71647F1A33855E46B7BE8607D0E6AE240CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 037c142be53f8f73b680078e9bc4a4d307ffbdd6d118530c1e9af0dbb0b4d561
MD5 bcae20ee18f049fb04d5215317824b11
SHA1 936b7a67efae15e32c568ee1794d51159f846e93
SHA512 bd61e9dd0be6a7c05020f2d6dbd3498f4ec9bba8d62505d1c56b38a15f2854b3027e0891f32c21f423cf140e5b6b5573a059fcc42ceb24acba0371d4ef855970
SSDEEP 96:ZqONkoQsjpfmUTmDK5ih/cIPURHl8h4otop5Q5DMBhPwivh50xy0SFYKcAxMbsa4:gONo6kDfQmiUyyAZ903B4QiQW2+U6
TLSH
T18102F73968782CBB8EB3AE49B58B37275FE5113BE6812F80D9E81A1C40D725C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 26016d7d370a9c6ae43d5d5b1f3485f504e14d136cbbcd5496dbe8c7c279f09f
MD5 c162281a3e6e7acaa5920989210c5160
SHA1 0293beee9d52e5f742a7f7959a8eec3d62481fa1
SHA512 7eb69d8f993bd155064cf766bca85a0b3f1ecef1e178a807460698fa61e8a903a5f96f70e57b9d135a96bb498a23890a2423ef73cdf31cbc88906b8dac413ab2
SSDEEP 384:n4ZcIhsNDUo0f9voOlkMrSTbAASt6I7sfIyK6NJ3tBeRs9JKgqijUqB:GhAOdkTTSA7K6NJ9TjKgqmUqB
TLSH
T153B26BB494A82DFB89F6E9C6B586E6171FB44137D2885E5CD0F8B63C708F1F81322925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1d8a83c883e0ed8fad7338e744fce510a6d166df60fe488c59ca917798ad92eb
MD5 5cd46603a94d74d05fcb26a466071752
SHA1 54282096adcb7afa96c5bfc20adef9831b9e0a5a
SHA512 7ee463c4f77d6de6882facf43d33e614000a168b21bef5e642c4d1b205b027e56cdc1092f96e8c837c24e2667a5ea262bb8f4b71584a6ad0f0a1eb32a699838b
SSDEEP 96:WqONkxQsjpfmUTzK5ih/cIPURHl8h4otop5QADMBPPwivh50xy0SFYKcAxMbsa5U:9ONh6kSQmiUyPAX903Br9EvcRKq7YU6
TLSH
T15F12193568BC7C6B5EA3A845B48732175FA4822BEBC97FD1D4EC261C40DF29C130B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b40a7bdd-ba8b-4645-b5a1-be56c154b7a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b40a7bdd-ba8b-4645-b5a1-be56c154b7a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8ac81df2631daf88d9b86144012d75c5b3da96a058b65916a8514650f2e3f452
MD5 126ef293f165d2517c82fd5c78ba8981
SHA1 5fe6c7ed5dabf4d0fd5facb29da29acdccbdc2ec
SHA512 fd48c5399e8d3c1d328095793a513410c615e89fbd900912f68942ff6e708ea5a9b73505f80b5769a48a504e587321b23c0bb1866d1b69fce1546791d3608cb3
TLSH
T11F412758A6E91148B3B36F5AAFF6A87D847B7D772E06D4AE00010D4F0A72B40D9B1733
MD5 SHA1 SHA512 TLSH

Submit Download

spotify-taskbar-widget.exe

Path C:\Users\Admin\AppData\Local\Spotify Taskbar Widget\spotify-taskbar-widget.exe
Size 11.3MB
SHA256 d54d089007b27bf7f79ee24f6a61580be547c1bf5309a61be5dc3b06a543c1a9
MD5 e678678cd26e025b5599029f1c45db00
SHA1 e7d82d7906c6b9e74ebebffaa44196e0ff19c7bb
SHA512 3797bd6a8138ca8d51ccbc8da2246e42c4078fb13de6f6ecfbafa393be9a0308cf84b283abdae361e1e536b1fa0c2958b0cdad57626ab7d8a99d8b31a6e3cda4
SSDEEP 98304:2RWETG0s1b/5hP90DCFWWV2y+/JztAgggggggHMxNLyE/1D:2RF9s1NhWDCFjVGzO
TLSH
T1A4C6E6247B5A996CC09BC474838B8A760A3130CB0B35B9FF449596393F6DBF52F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7703510a-cbd9-4f8f-b0d6-f407f8a8b5c0.tmp

Path C:\Users\Admin\AppData\Local\Temp\7703510a-cbd9-4f8f-b0d6-f407f8a8b5c0.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

fe7f2fe0-35ab-43e4-8143-d2f928d45a7b.tmp

Path C:\Users\Admin\AppData\Local\Temp\fe7f2fe0-35ab-43e4-8143-d2f928d45a7b.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu5E2A.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsu5E2A.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu5E2A.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu5E2A.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3680_1711435040\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00795799-1927-4692-a315-072bcdc80cfa.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3680_885839309\00795799-1927-4692-a315-072bcdc80cfa.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c8a14ef61542173af2e330a12b04d06be75bda0763539d10eae0cfc65234f778
MD5 8e8d204eca3d510cd5390a0fb19b2bee
SHA1 735da39790b717697e97f7bde84ae58efec9fd9a
SHA512 94b9ca973cc6e579412de893072b766feac1eaec39f505c1dc9454054bdc4e2ec15d48f7c58c23800768150bd4d04204e6355be1943ca9fa69c52c7dab5e7a0c
TLSH
T19DD02BE233250D31C33031338682F2985800D52F0006C1546E35F92C2A400E10CC1D41
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 58e40aacb346698db1f4477d51922417129ad5e8a669abad00fb3c3dbb5d186d
MD5 ce16864535035fb4b5db20fe8a860d8c
SHA1 491336f736f7737b9b38ea8a356108fbefade742
SHA512 d012426065aabd63a92007e04114b101b123a0bdd6cf1234d44b9efbb3693aaf6f844e69119877aabb455de189299b062da7ddc8ab4e5738ed28ee8896629ac0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6f3c729a8750beba9cb18bace225e493c11051ca627064d58649c2056020eb72
MD5 c7ae1e670b0a9e7f5d072aedd4f5a06f
SHA1 a861172685de17c2537fdd138925c25984aa23c4
SHA512 1a05f7688fa6936f27b5651b3e30602efe47a1a9e7f5504eb791d3384345a1ad0751a859be6529c3974303ab06eaf12bf13bb3d9392f697bae10285929f3b5b4
TLSH
T178D0125233110934C0302433060372490C40E51B4015C154A428952D3A040540902C41
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 31ae65d596e06592dd8ddad6c00936935d0ddf1505399e7e7549b4cf570f6f5a
MD5 eeb2547cbe8e99399e6a9f4abc592be9
SHA1 87e21420b83e1ccd806fa1a7b385860a0b38493c
SHA512 8483d9adc35dd56fd0cc7bfc5ca0a4d319667f1f1b0bf7c1e5cb006a4ad20e4f5def556991a11f0824b8dca030c1bb476adce20ef098a37f64c5c73f2d8c21b2
TLSH
T1D8C09228508669C2DBA0E3B071CA6DC873B08B20055B0F95E0984AA6F902A88AD46909
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591776.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe591776.TMP
Size 48B
SHA256 a4620950814887bbeca7867f10bc963d0edb960408d1ab1191b8fa7c0ca3a0c6
MD5 a5ff0dd2fd5632c26663a926703a577c
SHA1 1b9347245f47b66dc925f019da89ae0e05763164
SHA512 6fa2e0022015964e41d70bc04a31b86d08838d0ee1c9e26e1e77a85e930f68b23e021a1e48b6debcc6bbe54fdb21d732cc3d61ccc717929442fe8c66140c7644
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 39af11c7778d5f39610bd0a4032985db8094810e090bb3490e31794e4db59ffe
MD5 28c110dbb4c265484929283256c0a3ff
SHA1 92067b65acdbabd63984bc259325430dd5fc1450
SHA512 1a17f3c162054c3ec41d79b5a09e4419302da87b9d7e39aefccde488a0f8aab28c9e4f58d0742747f95d1c69d6c492f6c1e1ed348dc44a684bb40dfd533645e7
SSDEEP 3:LstlNllkll/ldGSl:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Preferences
Size 6KB
SHA256 057f4d36a793e0e440af673727fa78fb6e82f628c38c224f1a88979e3ed84f94
MD5 c8afa70fb08fab957ed97fe65facea89
SHA1 59cc97079c4c7cd6e28e8bcf69872049334d63db
SHA512 08e75cbca96381d936d2b676c2ca3aa810565147cf4c13e771c807ccb7d7c16992922f4cffc37c3737e9ee251c3e8909bc09b4d8a1b4abb776c8538aeaee1abf
SSDEEP 192:sti045U7WRf4zZ8paRo4/S+WiTU6odA4PcnR0IMC:stH40QR2/VNoM2C
TLSH
T152E1DA065EA86A7B8CC7F61A7A35BF02E2F5106221C04E54EBFCC61C05E66CD6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59284e.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Preferences~RFe59284e.TMP
Size 6KB
SHA256 2b929de22725732869c3f411aad1ebbd8c26cc5c57b530f7183be59230009f6f
MD5 042f21514fd3010a17292f9ad793e346
SHA1 d2d67fd42064d20585afe9206b525bfacadd1f7b
SHA512 cb9b3452ab20d5d2c7f4d2a2e78ba97ce132e73392d93f02e17f2661180a49a06c6cf9595a6c027dfdab7bfe1fa0fe8eef0176d7a00e0ec9637191d627dad01d
SSDEEP 192:sti045U/f4zZ8paRo4/S+WiT/twdA4PmnR0IM8:stH46R2/V5wu28
TLSH
T155D1CB065FA8797B4CC7E61A7A39BB02D2F6106161D44E58EBFCC61C08D66CD630BE0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 1KB
SHA256 b9de3bce113215beb28e1e9b7596f0af03264ba4bbe362487c700ac201e7bd0b
MD5 6cbb3fcec057b9c6aeaa07d9771aaf12
SHA1 1f3bca784defe1857f0dc0436678f6d2b71621b4
SHA512 99eb9ad12fb2a55686fe71fd57f171b10975fb2539afdce9ddacf0fbb4eaaacfaa697a76c3faa7375b2d47d94c0dbc8c8408996d352414ed00cd72ff1d53e1ab
TLSH
T1ED3185B3A0D42B3798D2628B72867AAB5E300076C1218F5075FDCA1D02D728CE23BD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 2KB
SHA256 3be139d8fc2bc3d055c615eb62a34cd80f5b5c929e8f48bf439144df985d8a77
MD5 a56d6028de5ed651f91391d7909a896f
SHA1 08e622687a4d526de0d032f80f3a2f665964ecd9
SHA512 a7fb665fca9ccf5579ed3115be98f3f1979749a99f283a81c404aa81b19a88f0f8e6f79e95472a0c9b121cf3e5b538d4b4d19ea33d8775108ff0d663f980b553
TLSH
T1D151D8337888AB7B88E39645B68D3F27DA354061DA616F60A9FD4B1C01D725C7312C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 3KB
SHA256 900c6665a26a233a1e72976193fe212b8b2f6c16ba546f734a5dac2cfd8f2c66
MD5 75281ce6b2ebd6fe3dfb885af2130ccd
SHA1 651b602fdd3e0b0fb60c3f4fb10ea2c269018afb
SHA512 7be83db1292b6792071e00c9904abf9bff8260ce4b316b3f236984a2dad8528724b92db9371e42ff4d1d89175cbc2d10cac3ffe564dfd224ef79b45391b8857e
TLSH
T18771A436A4A8AA3B4DF39A45B9C92F16A7B14132E5917FA4D9FC0F0C01D73982352D17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 16KB
SHA256 9348d8272fa286bfe02776fa62e79b6bcb598bbe019f91e2fdd9c507a40f890e
MD5 08e93d725fcecade83587a0e433ca24a
SHA1 d27b7ccd19d0195a70f973e4db2f27555e2eadf6
SHA512 7eaa67923fca70ea6f8248ac126dc4a27ae7365d8f086c3ffbb0d5969d4a291b578d37b1929c1bd71f66a243c9d9a6046af8fe2b3e00eca1feef05d1e9eda08f
SSDEEP 384:zs+aQikB+z/xvxjg/qhEMNb/mjjY2UyY9zS:3/UxvxjgC+nvY2UXFS
TLSH
T1F3728D2BA4A96F3754F3E505765D0B5FDBB584A290816FB889FD9F0D02873D81302D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 16KB
SHA256 0aa4e6ddba14a4fa935983bfffa77881dd94119bed37c0efc83a26543e21cb53
MD5 8e4f123858692cbc95b099abe0596e91
SHA1 2c7a43a3a0981b691e3fad28e99d2e194f4461fa
SHA512 04706a4cff2861f4729dfc5824980046e5a110205811255751270c4c850bcd17de1dbee9359c2436b98f51bfccf877ad74850b116303012a07f7be3c1cb433b5
SSDEEP 384:z/+aQikB+z/xvxjg/qhECNbYmjjY2UyY9zS:K/UxvxjgC+avY2UXFS
TLSH
T1F1728D2BA4A96F3394F3E505765D1B5FDBB584A280816FB44AFD9F0D02973D81302D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 16KB
SHA256 89c01acf6ffca809adb6b3c4800f033e833ca90511dc59850306cd505194cccf
MD5 3b4d3e8a79caae812a4a7888d28c767e
SHA1 a219fba588114001dd1f97c77c2e960774b8c791
SHA512 1c0d38191bd772d1fe21e0685012e120a1a5e8aafeb2d0e336c29564405516226169874069eb6c8a8b58d749dc16c073c65733608a1f2179db4600d90ae087c1
SSDEEP 384:zV+aQikB+z/xvxjg/qhEsNbzmjjY2UyY9zS:E/UxvxjgC+XvY2UXFS
TLSH
T182728D2BA4A96F3754F3F505765D0B5FDBB584A280816FB849FDAF0E02973D81302D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58af27.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State~RFe58af27.TMP
Size 1KB
SHA256 fabfd9711aab76ffcfeafe31646f3d23d93721685e80cdd17d827e991c8a8bb3
MD5 177eb220e2a0552c6667a16be1df81d1
SHA1 49684281db134cbfe4c8bff764524b1d375f08e2
SHA512 156567bb70da923ed892bf0be94ca4656f5c4052ff016c0a4946d97045f9a9bca82fa831d8e4776e763a4e2b35d1e0de3c7a997e69d4ecd01415b6db51bf9071
TLSH
T1BC216277D0D82B7BA8C1559AB286BA9B5E604076C1248F14B5ED861D02C718CE277C73
MD5 SHA1 SHA512 TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 240f8a43ae7cdf84557eeedeee865b81966a679b78be57a576eddaf8b68ee4da
MD5 ea6ac50a7dfcdf8ec9b34d81755ed87c
SHA1 2ef5ac633cb9c3fa8ff67bfdf29b2edb8a9b7d8c
SHA512 396318d3f2c8b9739a3b8ab2da3aa70ea868f72d9090dd6c38e01452ec52d9cf6e54639b5ab0e9bd4678c731df89cf7f4913b838a6fdcc4704e252b97f18b22f
SSDEEP 96:L6TazzhJY+zHumze2/6TazzhJkMzHumzeAc:N6k3G2y
TLSH
T101A1C0044AF70A16F1FBDA7284B77A119972F845D9844FCE44C143090DA2B8479BDF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 ef6799c101bb099cb2e65a727f826625646c435bcc68a52985bfdd4676fc6e5d
MD5 81586d9aa340e7d95c7fcdac710f0b67
SHA1 42269306b12a2f423ee0f55256744a935200f3cf
SHA512 0ac8a2284ad1ea560860ef1ba186291c51afb52051935b9e6150f8bdd667e7f26645739164e38674cc5580ebfb67066c5cde91b5accb8f231a06c15bcb6df94d
SSDEEP 96:M6+awzhJY+zHumze246TazzhJkMzHumzeAc:M6kcG2y
TLSH
T1C5A1CD044AF60B12F1FBDA7284B77A219972F849D9444FCE44C182090CA2B84BDBDF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_state.json

Path C:\Users\Admin\AppData\Roaming\com.madal.spotify-taskbar-widget\window_state.json
Size 43B
SHA256 5db538d984cd580ad35212dfa9b9e5aa0488351884e08ebc95b9b55aa914bbaa
MD5 6767f1253aa50ffe9f2235be92a9efa4
SHA1 ca951919a5aeea638c498bc347c1f898216562f9
SHA512 93188a3c4ff619d311827ed0c0e21d76dd6a073b85fd5574c3ccd2191394f5beb24209e68189f77ff1970aa8976778f9f242c9e2e103fd63d51e85d9f047c7dd
MD5 SHA1 SHA512

Submit Download

Spotify Taskbar Widget.lnk

Path C:\Users\Admin\Desktop\Spotify Taskbar Widget.lnk
Size 1KB
SHA256 431dbd3690d65d02631687c44052f59b2e7b1f5ba9b5f7360f0db6ec3ee2425a
MD5 17d37c62459dbeb18aea10f322a4d535
SHA1 b5622e6875d340a18e52ec17a48e5f7ffebc3945
SHA512 cd786246f3cb024188ca97865eed45d7ab88b0600d5e2ad467f8907935753473782def9b93046980e6ed2e9c1beb81db92d7839aa54bf24b93f0b50c4abefee6
TLSH
T167210F0066EA0754D6FED8B544EA1332C7B1F4D9A6949FA80400630D1D606819A58F0F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1784-460-0x0000022182540000-0x00000221825ED000-memory.dmp

Download

memory/1784-76-0x00007FFB04300000-0x00007FFB04301000-memory.dmp

Download

memory/3676-177-0x00007FFB04300000-0x00007FFB04301000-memory.dmp

Download

memory/4916-114-0x00007FFB047E0000-0x00007FFB047E1000-memory.dmp

Download

memory/4916-113-0x00007FFB05E80000-0x00007FFB05E81000-memory.dmp

Download