d54d089007b27bf7f79ee24f6a61580be547c1bf5309a61be5dc3b06a543c1a9

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
spotify-taskbar-widget.exe
Size 11.3MB
Sample260804-eekn2afn9x
SHA256 d54d089007b27bf7f79ee24f6a61580be547c1bf5309a61be5dc3b06a543c1a9
MD5 e678678cd26e025b5599029f1c45db00
SHA1 e7d82d7906c6b9e74ebebffaa44196e0ff19c7bb
SHA512 3797bd6a8138ca8d51ccbc8da2246e42c4078fb13de6f6ecfbafa393be9a0308cf84b283abdae361e1e536b1fa0c2958b0cdad57626ab7d8a99d8b31a6e3cda4
SSDEEP 98304:2RWETG0s1b/5hP90DCFWWV2y+/JztAgggggggHMxNLyE/1D:2RF9s1NhWDCFjVGzO
TLSH
T1A4C6E6247B5A996CC09BC474838B8A760A3130CB0B35B9FF449596393F6DBF52F38259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	spotify-taskbar-widget.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4276	msedgewebview2.exe

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_2117117037\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_278495912\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_231793432\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_231793432\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_231793432\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_2117117037\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_2117117037\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_2117117037\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_278495912\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_278495912\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_231793432\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_231793432\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4316_2117117037\LICENSE	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
568	msedgewebview2.exe
568	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4316	msedgewebview2.exe
4316	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4856	spotify-taskbar-widget.exe
4856	spotify-taskbar-widget.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4856	spotify-taskbar-widget.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4856 wrote to memory of 4316	4856	spotify-taskbar-widget.exe	88
PID 4316 wrote to memory of 6056	4316	msedgewebview2.exe	89
PID 4316 wrote to memory of 4272	4316	msedgewebview2.exe	90
PID 4316 wrote to memory of 4272	4316	msedgewebview2.exe	90
PID 4316 wrote to memory of 4272	4316	msedgewebview2.exe	90
PID 4316 wrote to memory of 4272	4316	msedgewebview2.exe	90
PID 4316 wrote to memory of 4168	4316	msedgewebview2.exe	91
PID 4316 wrote to memory of 4688	4316	msedgewebview2.exe	92
PID 4316 wrote to memory of 4688	4316	msedgewebview2.exe	92
PID 4316 wrote to memory of 4688	4316	msedgewebview2.exe	92
PID 4316 wrote to memory of 3016	4316	msedgewebview2.exe	93
PID 4316 wrote to memory of 3016	4316	msedgewebview2.exe	93
PID 4316 wrote to memory of 3016	4316	msedgewebview2.exe	93
PID 4316 wrote to memory of 3016	4316	msedgewebview2.exe	93
PID 4316 wrote to memory of 3016	4316	msedgewebview2.exe	93
PID 4316 wrote to memory of 6032	4316	msedgewebview2.exe	94
PID 4316 wrote to memory of 6032	4316	msedgewebview2.exe	94
PID 4316 wrote to memory of 6032	4316	msedgewebview2.exe	94
PID 4316 wrote to memory of 6032	4316	msedgewebview2.exe	94
PID 4316 wrote to memory of 6032	4316	msedgewebview2.exe	94
PID 4316 wrote to memory of 4276	4316	msedgewebview2.exe	95
PID 4316 wrote to memory of 4276	4316	msedgewebview2.exe	95
PID 4316 wrote to memory of 4276	4316	msedgewebview2.exe	95
PID 4316 wrote to memory of 4892	4316	msedgewebview2.exe	99
PID 4316 wrote to memory of 4892	4316	msedgewebview2.exe	99
PID 4316 wrote to memory of 4892	4316	msedgewebview2.exe	99
PID 4316 wrote to memory of 2832	4316	msedgewebview2.exe	100
PID 4316 wrote to memory of 2832	4316	msedgewebview2.exe	100
PID 4316 wrote to memory of 2832	4316	msedgewebview2.exe	100
PID 4316 wrote to memory of 568	4316	msedgewebview2.exe	101
PID 4316 wrote to memory of 2820	4316	msedgewebview2.exe	102
PID 4316 wrote to memory of 2820	4316	msedgewebview2.exe	102
PID 4316 wrote to memory of 2820	4316	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\spotify-taskbar-widget.exe
"C:\Users\Admin\AppData\Local\Temp\spotify-taskbar-widget.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4856
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4856.5948.12580248609779709620 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4316
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView /prefetch:4 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff902aa5fd8,0x7ff902aa5fe4,0x7ff902aa5ff0
    3⤵
    PID:6056
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1724 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:4272
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2036 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2248 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:4688
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3392 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053 /prefetch:1
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4068 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053 /prefetch:1
    3⤵
    PID:6032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4220 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2056 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:4892
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2056 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:2832
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4768 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:568
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView" --webview-exe-name=spotify-taskbar-widget.exe --webview-exe-version=0.3.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4956 --field-trial-handle=1728,i,18002614143327685500,13405087919750289248,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:cadda6d44158bc4834f550c7eed069e600628053
    3⤵
    PID:2820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3dd229b3360632bec7a5d68749b97d1ffcb0978313ad3e149f920891b0418cb3
MD5 303fed20e37f79b17bf267c81df0b873
SHA1 905aaed2751c9d7c5f2db4c6fbe40f3bebe45016
SHA512 8d6e1b0b7a63a995f1b2d59026d810c26eff30c9247e3d1cea3d8911c194166b6a7cbc498d47f98ad3d6bdcbd5b24f14e307d2928449f3f7de035941c3a7aba6
TLSH
T1C5D011223B020238C0B020B30802B2A80882C22F800A8200A83E8A2EAF880A80A02882
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3df9fbe3f51865dd4ee89c6d59a523a483e004aec7a8da248cad73fafbfbc633
MD5 612d4d40a0d082390fa6fac32d220b62
SHA1 3993af763aaa3727145011c67c2b6e7231165a8f
SHA512 f2d078964ef7592b87c85d14ffc3e86e430e6a5b7a25bf3cb36dec58f20d537278fcd3677cc96931a9e8777a1799c1c689b1f22bed0f76316141564b41c09e7d
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 cbd2cb4cf440a2d9254b332e54fcfb529145e23a7b11ed284638d0f27d597054
MD5 9bf0e52b23088ef71071234f016c493d
SHA1 817752e7e395aa688ff34c97325552ad38e45bf8
SHA512 3abae4e1d2f99cbd83bb12e9c5e83b38ef7b70b6de22561342c34d7541568cc38cb5963beadce22abd1df0232bdcb626648317ab425ecdbd3d468a13315743f3
TLSH
T133C0127000C90241DB8C4B3020CF359031740E34B5074ECC819C05F4AF31304D5EC1AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a182d.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a182d.TMP
Size 48B
SHA256 f43ec21a555c552354d216e1927ca503e46aff8502fc6ced19138eac8e48c8ed
MD5 31d9088ba9f45a7fb6e53ed96b213bbe
SHA1 cdd14322e2862d4cb2799f75bb2500f30202c7f2
SHA512 90c37dc8aeef443d9ed1cdf85ea0d38d201a53a912f08bfc6a4fea57423c3289b778424a1defd2dc0828fb5c679ed32951133e03798fb057acf7f7c6f4c4fa59
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 e13d1a7ba3936c252cc41653be67aa59adf35b1549fa5f134fafb2575877e765
MD5 e4a76e5c24c015491058bce2633179c8
SHA1 aac036e5ee4c3a052d0c24bd9ecf027247a0acd6
SHA512 8394baeb38cf3909e2ce6b3c106b1cca8587101e7e7fa0c20b7fe62c215137b26c7dca67b2602ef773e54d74b6b71274dac91de7e6a7a2d198051ac3a7623d37
TLSH
T1CB319DA6C2E4C67EC9452BF467242E1BC83E094D972C3E239DDAEF5D57E1471E21140E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5ad6aa.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Network\Network Persistent State~RFe5ad6aa.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Preferences
Size 6KB
SHA256 4873b3a3de89ead989598b30069ce6a485014b5f5b371b849fc7dc41effb3a0e
MD5 966c2d7b8de5b7c9646bf72a1832897b
SHA1 b17582898eafcfc077c237136ddc001699668ac3
SHA512 896d012ed74d79ea0c4eb9f185027386027a9c5e8a6c85dccd6e9d3799ff97bba51469aeff09f96aaab6c851b5c68d3d97d2ca81cbd212e96cdc4e89bfffb3ee
SSDEEP 96:ru/dQBoHGb94kAdo5h16Z04s7/x+6MhmuecJe71ejekK+gZ28XM1C7K:r2u+bon4sV+Fde7QjADG6K
TLSH
T123D194066E64B9BB4CC6E109BA39BA07D2FA503175D11D58EBFC862C08DB6DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Preferences
Size 6KB
SHA256 fa0114cea252c1123eaea5b6dac0a471e269219888bbebb6af11a2d224dbede8
MD5 8fa1eeabe1b37d8ffb3dc1181554becf
SHA1 7af728ab59e030494188fa2b049558b3e05c3866
SHA512 d35e499b1f43b60b2ad93bf753905c7159b46e5d1832341a8426df64bdd5fd5f42ead3c60011cff1de3500e0fdfc9c0067d78616ca03c82bf5e76b9358131e8b
SSDEEP 96:stu/dQBoHGb94keo5h16Z04s7/x+6MhmuecJe71ejekK+gZ28XM1C7K:st2u+9on4sV+Fde7QjADG6K
TLSH
T162D196066E64B9BB4CC7E509BA39BA07D2F9503175D11D58EBFC862C08DB6DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Preferences
Size 6KB
SHA256 b8fc2959a959fde122b2e0f93741269cb8292bbe1278d2b5f544588080928a45
MD5 96f18d13c5a5f441e7ba4552cf1a27a2
SHA1 390cfce531eb3b4694188c2c363d7552e1b08621
SHA512 f3f4a97f10c9adee368a8245f78342ac5962e09787c186fe514222ee289da6186566da4a3c4929b525139355a9ab0cf1e1443c215a8ac4e15029bcf38bbaa9ed
SSDEEP 96:stu/dQBfGHGb94keo5h16Z04s7/x+6MhmuecJe71ejekK+gT28XM1C7K:st2uE9on4sV+Fde7QjAxG6K
TLSH
T172D1B7066E64B9BB4CC7E109BA397B07E2F9503265D11E58EBFC862C04DB6DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 3KB
SHA256 c274cabacc59827c1664693854cc3c3c4501a87ab28f21dc8349ad33216b4453
MD5 ab173d021ae4394cefc99c6bbb02b562
SHA1 b783059aae9b577923d35400d47a276ed18684d6
SHA512 162cbbf010fb29b143567ec2f08fa2f8384bf7d40e1b201fc6d948f7d545040696968fbf322aa80cdfd6f43d99b9c364ec4cb07c1cbd1300c175b6b8824b9f38
TLSH
T18F81A427B8B4AA775DF29505B94A3F07ABA4502399917FA9DAEC0F0C02D72DC1342D17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 15KB
SHA256 47a6d1d50eeca4c71a7e1a71903c573a38c56d13acd288ddf28198550a9c483e
MD5 9cf1e67e4f0a9602100da32b812ebb29
SHA1 9721c6dd38b986f791e65c6325fb47ea9689c14d
SHA512 99bcc01ecca4887e51f419277183bd1516fe0423c894d3f895b8628e848bff9715072c495c10d63d30276758410c1dbc3fed25677bb218715419d889f01d135d
SSDEEP 384:f+aQikB+z/xvxjg/qhEwNBSnc91Vqd657N9zI:u/UxvxjgC+C7C657NFI
TLSH
T1E0729E2BA5B97E73A5F7E505794D0B4FCBB894A251816EB84AED6F0D06C32E80302D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 2KB
SHA256 389bed1fd27c4b5cab566475abf3738ad6d0c2e65bf94dcb727990eb88b20497
MD5 b2274b25cfcfcaf44c33be0392f9f94e
SHA1 542238dfb9fb675ad06cff13a88c1dcc59266271
SHA512 e67f372d8ee5f1229b6dc21c0bcd761bc7a437e6c8e82b5d71e0eb7162d47e713fbca1b24cf86a76f6bf9068d7806e9dd92705813429939b6085a5ed9991039e
TLSH
T16B51A433B854ABB799F25609B90B7F13CF3551A19E522F60AADC1B1C01D2AEC6302C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State
Size 3KB
SHA256 71e08143efd367fcc1d26c99cccc3b4f00cd8313906deae26e1bb6e1ea95bace
MD5 fbf66fe19fa7339b5d99d7dc57e8cb00
SHA1 1bc5f354c1fc828f6f2b1ee6dce8b72c1abccb8c
SHA512 4875e53f350f737997fe810ff4e6929531bb208a11fcb0dbeea48f822291ae55c4198cbf4f9d2150e841083e9a7b752927167a06f18cc067b485eebcd300e64c
TLSH
T14361B537B8B4AA778DF39A05B9863B06AB654023E9813FA5DAEC0F0C01D33D81302C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59a80e.TMP

Path C:\Users\Admin\AppData\Local\com.madal.spotify-taskbar-widget\EBWebView\Local State~RFe59a80e.TMP
Size 1KB
SHA256 f4769cfab3f258dbb78f3bde484a80b2a717fe0db37598dae9c9a21d0a349e06
MD5 1d60fd686f78398d39b2a7c3ebcf886b
SHA1 aadc29c3ad4378ed194e14ff8338c9b703f683b4
SHA512 41f3ffd03e4fb0417d258ea232e21b8ad22613a3119d61629c0fcac60d296c43fdc16df8d52b5c68b7ea8f1bd395a345a131cdc3b63b381cdebdbb5173633971
TLSH
T15A216573E4A42F73FC9122167107BB5B5F31006B86508E40A6DD4B2D02D22DCE22AD36
MD5 SHA1 SHA512 TLSH

Submit Download

memory/568-337-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-328-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-330-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-334-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-336-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-339-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-338-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/568-335-0x00000240EDC60000-0x00000240EDC61000-memory.dmp

Download

memory/3016-102-0x00007FF923920000-0x00007FF923921000-memory.dmp

Download

memory/4272-206-0x000001FE04E80000-0x000001FE04F28000-memory.dmp

Download

memory/4272-19-0x00007FF923920000-0x00007FF923921000-memory.dmp

Download

memory/4892-268-0x00007FF923C30000-0x00007FF923C31000-memory.dmp

Download

memory/4892-269-0x00007FF924A90000-0x00007FF924A91000-memory.dmp

Download