4ed3b202c2d49164875936d3171470fba2a44fc98161073bdd6c006914c49cbb

Analysis

user interaction
yes
max time kernel
205s
max time network
210s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
notecable-spotie-music-converter.exe
Size 7.3MB
Sample260807-nbv52acn21
SHA256 4ed3b202c2d49164875936d3171470fba2a44fc98161073bdd6c006914c49cbb
MD5 abbe1d63a45dcba10c4ad286827a4bcc
SHA1 6cde10bf1b3c98b8aa1643bccd9421d3a409a508
SHA512 3dd8775ff012ff611aa45e87b605c3604ed73d3a116c1db63b4fec723420e427fdd9a43b40c8539faa986c3d198bd2b47dda3de61cf73c4438edbae0965bc6e2
SSDEEP 196608:+wgwsT5LVeXyMuocdlnznf8YBFadBL6Ufgv:+wDo55eCMY3LxvadRyv
TLSH
T1B17623C5E97B081DC0A70E3192795C18BD9BBDB64EA42E2C7F5870A0CA3369355FE41B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-processenvironment-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-environment-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-filesystem-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\en-US.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ms.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ru.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-time-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-utility-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\vi.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app-update.yml	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\LICENSE	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\chrome_100_percent.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\v8_context_snapshot.bin	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vk_swiftshader.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ar.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ca.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\et.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\hu.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\zh-CN.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\NoteCable Spotify Music Converter.exe	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-memory-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-processthreads-l1-1-1.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-heap-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\hi.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sl.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\package.json	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\uk.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\_platform_specific\win_x86\widevinecdm.dll.sig	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-synch-l1-2-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\it.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ro.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-localization-l1-2-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\en-GB.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ko.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\vue.min.js	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\gu.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\pt-PT.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\te.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\localize.js	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sv.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\chrome_200_percent.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-processthreads-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-profile-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-conio-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vcruntime140.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\id.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\manifest.fingerprint	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-libraryloader-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-synch-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-util-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\tr.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\elevate.exe	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\msvcp140.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vk_swiftshader_icd.json	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-file-l1-2-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-interlocked-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\d3dcompiler_47.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ta.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\index.css	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\font\Nunito Sans-Regular.ttf	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\slider\2.png	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-math-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sr.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-runtime-l1-1-0.dll	notecable-spotify.exe

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4776_807840472\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4776_807840472\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4776_807840472\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4776_1338923984\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4776_1338923984\manifest.fingerprint	msedgewebview2.exe

Executes dropped EXE 2 IoCs

pid	Process
6140	NoteCable Spotify Music Converter Installer.exe
6100	notecable-spotify.exe

Loads dropped DLL 4 IoCs

pid	Process
4036	notecable-spotie-music-converter.exe
4036	notecable-spotie-music-converter.exe
6100	notecable-spotify.exe
6100	notecable-spotify.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	NoteCable Spotify Music Converter Installer.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notecable-spotie-music-converter.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NoteCable Spotify Music Converter Installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notecable-spotify.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 15 IoCs

pid	Process
4036	notecable-spotie-music-converter.exe
4036	notecable-spotie-music-converter.exe
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe
4844	msedgewebview2.exe
4844	msedgewebview2.exe
6100	notecable-spotify.exe
6100	notecable-spotify.exe
6100	notecable-spotify.exe
6100	notecable-spotify.exe
6100	notecable-spotify.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4776	msedgewebview2.exe
4776	msedgewebview2.exe
4776	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
6140	NoteCable Spotify Music Converter Installer.exe
6140	NoteCable Spotify Music Converter Installer.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4036 wrote to memory of 6140	4036	notecable-spotie-music-converter.exe	88
PID 6140 wrote to memory of 4776	6140	NoteCable Spotify Music Converter Installer.exe	89
PID 4776 wrote to memory of 692	4776	msedgewebview2.exe	90
PID 4776 wrote to memory of 4940	4776	msedgewebview2.exe	91
PID 4776 wrote to memory of 4940	4776	msedgewebview2.exe	91
PID 4776 wrote to memory of 4940	4776	msedgewebview2.exe	91
PID 4776 wrote to memory of 4940	4776	msedgewebview2.exe	91
PID 4776 wrote to memory of 2364	4776	msedgewebview2.exe	92
PID 4776 wrote to memory of 2572	4776	msedgewebview2.exe	93
PID 4776 wrote to memory of 2572	4776	msedgewebview2.exe	93
PID 4776 wrote to memory of 2572	4776	msedgewebview2.exe	93
PID 4776 wrote to memory of 3784	4776	msedgewebview2.exe	94
PID 4776 wrote to memory of 3784	4776	msedgewebview2.exe	94
PID 4776 wrote to memory of 3784	4776	msedgewebview2.exe	94
PID 4776 wrote to memory of 3784	4776	msedgewebview2.exe	94
PID 4776 wrote to memory of 3784	4776	msedgewebview2.exe	94
PID 4776 wrote to memory of 4100	4776	msedgewebview2.exe	95
PID 4776 wrote to memory of 4100	4776	msedgewebview2.exe	95
PID 4776 wrote to memory of 4100	4776	msedgewebview2.exe	95
PID 4776 wrote to memory of 4100	4776	msedgewebview2.exe	95
PID 4776 wrote to memory of 4100	4776	msedgewebview2.exe	95
PID 4776 wrote to memory of 4996	4776	msedgewebview2.exe	96
PID 4776 wrote to memory of 4996	4776	msedgewebview2.exe	96
PID 4776 wrote to memory of 4996	4776	msedgewebview2.exe	96
PID 4776 wrote to memory of 4996	4776	msedgewebview2.exe	96
PID 4776 wrote to memory of 4996	4776	msedgewebview2.exe	96
PID 4776 wrote to memory of 4684	4776	msedgewebview2.exe	100
PID 4776 wrote to memory of 4684	4776	msedgewebview2.exe	100
PID 4776 wrote to memory of 4684	4776	msedgewebview2.exe	100
PID 4776 wrote to memory of 4844	4776	msedgewebview2.exe	101
PID 6140 wrote to memory of 6100	6140	NoteCable Spotify Music Converter Installer.exe	102
PID 4776 wrote to memory of 1220	4776	msedgewebview2.exe	104
PID 4776 wrote to memory of 1220	4776	msedgewebview2.exe	104
PID 4776 wrote to memory of 1220	4776	msedgewebview2.exe	104

C:\Users\Admin\AppData\Local\Temp\notecable-spotie-music-converter.exe
"C:\Users\Admin\AppData\Local\Temp\notecable-spotie-music-converter.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4036
- C:\Users\Admin\AppData\Local\Temp\nsyE42E.tmp\NoteCable Spotify Music Converter Installer.exe
  "C:\Users\Admin\AppData\Local\Temp\nsyE42E.tmp\NoteCable Spotify Music Converter Installer.exe" --source "converter"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6140
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=de-DE --accept-lang=de-DE --mojo-named-platform-channel-pipe=6140.2628.399249287449810181 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4776
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView /prefetch:4 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd5ffc5fd8,0x7ffd5ffc5fe4,0x7ffd5ffc5ff0
      4⤵
      PID:692
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      PID:4940
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1964 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      PID:2364
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2228 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      PID:2572
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=3336 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
      4⤵
      PID:3784
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=4028 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
      4⤵
      PID:4100
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=4688 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
      4⤵
      PID:4996
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2072 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      PID:4684
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3336 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:4844
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4324 --field-trial-handle=1600,i,9784687669680606622,14222350482538308318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
      4⤵
      PID:1220
- - C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\notecable-spotify.exe
    "C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\notecable-spotify.exe" /S /createShortcut=true
    3⤵
    - Drops file in Program Files directory
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:6100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Nunito Sans-Regular.ttf

Path C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\font\Nunito Sans-Regular.ttf
Size 110KB
SHA256 095c1f9fd36415a5e437952526b7ece861be53c5022534c16f78126ec237d9f1
MD5 51a77deb6fba78784d6e7bf54932fab3
SHA1 76221b9bb3e1e43ffeea6642b491a485ea97d2c8
SHA512 4e63cea3592f6db7bbe411f4ee7a37754d29a458c56409a8bac2afd4112bc4a90808e57916ff0f2772e13e26ea78ef5a39434253d88963711e89653d451eea12
SSDEEP 1536:iZJb3BlRk2oyyxyxy6yyhtFpllTh4oQzMlMj2v+XQfYic1HmsZ4C/C1:ijr9k0h4bzMlMjiPfYN1Gsn/S
TLSH
T161B31823B7136749CC076F3D8BB2D3E07372BD906E68C64BF84B6E1AD89B5851986601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 49daf95c446dd161f47354ee15f08ecc50be825a0b5b951a9048da52d372c25e
MD5 95d55200cf13ced1c97cbee8ac49986c
SHA1 55ac7b85bcb7b642390437401a9b556e8dfa584c
SHA512 874996aa4533f57a038482bcf163cbbfe254ccc3bf0f7df32f9023d52c8b49ce5ba0f69e43f1cae46fe04d39ef980f03d9c11fb9b45523cf6bbe1313e2d2ee32
TLSH
T1DAD0045775055050C0143435143C51040104441141511140011500341C55CF50511054
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 58f668134077d183366b3c85f21fc55ad5ce3f58697c85d440c0d29d93d036b9
MD5 97c7f89e196673244e9f1676914e9c5d
SHA1 87d5c576858a59b1c2e8197275f4d608c309da44
SHA512 38bd6762f2f955ef41713eb5f9d9cf1e9f2c9fc51a04488ac831fbb985c07f4c7027a2c5b25afbd06c7cfe685a6c0d5769c1f1538dbd61e5dbf604d7142658cd
TLSH
T1B7D0121736024174C02034331416710C0400C11B81454040542D853D2E188F40E12491
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000001
Size 129KB
SHA256 d7c12fa4645fe1823ab9ac2faed81ca45ecbc20a15d0bbb5a105817659c7fc34
MD5 cf123ef7271af5b9dca6fd32f8657db7
SHA1 a9d89b703c2e6a96a85fe640fe30b16eb9512dd5
SHA512 b9415f67ee8e39dde5e8e353b021ec2396981e1a77f027bef53ead2fc3c6155b1745ab8e1a79ba89e1a05f1fa2b9578def06981d2da651b93dab487c531f1574
SSDEEP 3072:YDQdkyJSc+AGsUQftXncIDMp7M0mmRdGZBAAsaF:YDPeUAPX9cvJWZBAAsS
TLSH
T15DD312ADC07BAADB34DC004D61960F642A5E50165B0C2C9BEB63F1CED36CF978385E62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000002
Size 160KB
SHA256 bf9e60cb09256446802a934f5aa4f84f23f7fab16dd0ffbcf15c6372c28e4ced
MD5 872268cb958783edf76679efe89f66c6
SHA1 d6706f87e6070fb03e4124f5ff899e19eec64809
SHA512 1baa6b862e8634fd84141f98f2fc0ce979e334e61d00e294f14a556b939a46b282e1b2815af1f5b430d6bba55ccf5092fcf562e306e410e11cef5f28400681a4
SSDEEP 3072:I0jpXdbqY2awcCiuda7quUtYN2T3O8RpUvBp37soLtm3REl3DT:I0jpXdP/thuda7quMYN2TeEYA3a1n
TLSH
T176F312CE42C133A400897D7138791CF5B8060A27A1E2EA8E56D77C65B87DD9B4B53F8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000003
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 05609b8e3f60677471cd8694602886c58906fc9c1c31932d16837e59df70c5e0
MD5 ece297859328ef21e9ce1a2908576a70
SHA1 a2b1ed596865ddc71de929f7a5332dabcc2b4509
SHA512 bea3a0e223266445f28ca02ce189ba97b8715cb6e611863cf941027a48fcbcc0c0b15d63b28b064ec74671b1a883b28c54a423a78a4133851f432cd9f1af0b16
TLSH
T1E4E0C7100C52F039CB2749BCE89809002078A203296FAF0B6B188CFAEC423A449A91C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 52c43e86565b5f66988d8fc9b591af3db69bc4561c3e0dcdda2b51557a3c62c7
MD5 99837a811801093a08ee512046997c97
SHA1 c32f697ae3a8435119ce0b288df59015dcc4ee65
SHA512 bb3000c9cb99155821bc678c281cd257f08fa5ff6591044111cd0225eb3cfcabf9c77508fea2d56026163dc911837bb48eebb0613977b96ae14b6fd21930c6e2
TLSH
T115E05E551CA2F065CF2546B0E4E84B0033F6A6476EE77E176B648CB6FC0235D515C268
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 a7ad91a343a6355e4a85326965ff5ddbe446328db841ba32c418cd76134c57f4
MD5 413c71435aa46298e2a610a0f2024ea4
SHA1 fb4e479180156d349747d6800d0c36acf17fda3b
SHA512 874423139640db8cbceac546b237b96c0354d18c5996492568638ac639ce1341463166bb1215cfca9c6654cea5d6f461828a2c65e49db97088ba07ac9f11ad58
TLSH
T1D9D012800A52F4B8CB7205B0E4D59A5071B464036923DE1BA7584CB6DC163455545158
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a93f4.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a93f4.TMP
Size 48B
SHA256 02cc6b30f4d344f37473882ab73e2248c07c1cc66cf460aba51a0331c9e4acfd
MD5 3ae6bcb06244487bc161dfeb89345693
SHA1 b99fc6b63a0169f46a3da5ba4ae0ae4e00c76cc3
SHA512 57b5ca1fdd83ef1b33667493d353287d2434552f3c9b45fc6b51749cf851a0b9c43302c89c6b50196227945c9d2be036d1fdf36a0b9800a0f366782d32da5e32
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 1fe27388848be9ccd6409ee6255ba4c6f0fb2a085c351fa1acc37384753bd434
MD5 440f2019f74b96263b295371f542818e
SHA1 752476ac1fd21fc90b47a5c493ad5cb14d4cd320
SHA512 58041241a47ce823879a665bb6f298a0ab46f8271e80c209cfacf6b6ecdaa9b6712e909a8081d24fbe604d7a9b9c5f0acab4e79dac48835c3ae949babdd58c14
TLSH
T1CF317CB3C3D8956DC8414AF81630AF1BCE9D0514422E3D26C9C6FF4B93D34B3E62664A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 01621dd9e9d7ac623b81eba3214a912400e985ddde543a7ff70e3aa49be95887
MD5 85d7d1be0dd0e4baed861e71eb656878
SHA1 65bc09eae62b5519012e4f7880324687f9796449
SHA512 c7bed0d808698cd96a9b7651878b9f55de059146b8a04ba2ac9235bd308cefcec2a843db7aaa6e3e4c680f1d44b288a44b5bef00ff7b6db6c21de010121445e3
TLSH
T1D4216CB3C3D8956D88514AF81B30AF1BCF9D0914432E3D26C9D5EF4B93D2463E61564B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5b18a5.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\Network Persistent State~RFe5b18a5.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\TransportSecurity
Size 522B
SHA256 d7ecd8246ede6902acc3c15fefd39ed6a98d57501ed5b14c7e31aae7b32e4fc1
MD5 e1fe829c4cb7eb07cf5a61079f610296
SHA1 94801910211d2b574b1baab23609322d9c30c216
SHA512 784f496eb04127d2b80ee0df614701b47de9e70a006a716763a64458e12c9111b55afcb5b6e3a497622a65836a58ffc3c613c34caa5f1d7ee0dbc6ca16ea5a4c
TLSH
T1C5F0BB53846DA4A7A02C596B0DC9BD0E2A7BB436134158F8E769C1FD61805E34E17017
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5a62c2.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\TransportSecurity~RFe5a62c2.TMP
Size 188B
SHA256 4d427607b0d420d2e51afaeeba91c91471d37c83f891a87f35a30a40c5bdb4a5
MD5 af011fc068f348e3680252b437512b96
SHA1 292e3763869578d87cb77d425684c66b900c28a4
SHA512 d2168b799394c2a2cefd4629c478bf2996297161d4ebaaa869f1ba286abef8da13b1bd061128bebdb3e48b07c851cc2517f35e9aef4e8c01e4e5ee5506c6ae4b
TLSH
T1C4C0126260AAE4761068057A19C8AE455F7BF535438298FC9A528678E1901A65F1B413
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 cb7072c31f41470e2bec32c3bf0afd4eb47a16bab4ab76d762e93b1f24adc241
MD5 3bb61ec1f0b414ca8dad19f03a57b863
SHA1 3f3fa435a8cdd5480ede2f13c245c455c4cc96fe
SHA512 936e406e4a202c089255d0e06761acf3c3d194f5535b31e50f1f3e153174e0f17584b10c9fbbce680aa39474d2e1433c40d85f0d385990009e03311b5794525f
SSDEEP 96:stJ/dbL7GNdb9jkwnv5h16ZJV4s7/x+6MhmuecpeFMkknG/ke5K+g1Oh28XM0C7K:sttNcZnvAV4sV+FNeFwokXMGtK
TLSH
T184D1C5426F247DBB4CC7E119BA28BA17E2E5607265D41E68EBFC462C04DB6DC2307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 1a97780ab13b479f5643228a705be5a96f61b0b17f8b0575345cd60cf24128da
MD5 70c39c0d6236b535e7c0823ab01eb3ee
SHA1 38273153e8603ad46de82c4e0b1f466ed5b844a0
SHA512 743a744d28ca5076fac4e31a540de5ef97e5b6d8d6d61638c97e11490f7dafc2910f8f5bad517003ba520d6efa2be80cf76a318dd851a5f2f2129626d7f7b41e
SSDEEP 96:stJ/dbL0Ndb9jkwnv5h16ZJA4s7/x+6MhmuecpeFMkknG/Ie5K+g1OJe28XM0C7K:sttNSZnvAA4sV+FNeFwoIXJGtK
TLSH
T109D1A5426F2879BB4CC7E119BA28BA17E2F5907165C51D68EBFC866C04DB5DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 f697932aad401795cb879e28b3636cc68422015cfc45d67c1a8e1b376e73b222
MD5 e7f30703288dc96ccf66bb1eaf9c953a
SHA1 f2fd5dd83bd46ba54ca259ffae292c39d73d71dd
SHA512 294f9694d280b8252e429d604b7392311f4a5835d10e09ae416587d8a8d6ef7df58d91054d8299dde33ef1de81797ec33713f1196451418fc1b8e4163201d675
SSDEEP 96:stJ/dbL7GNdb9jkBrnv5h16ZJq4s7/x+6MhmuecpeFMkknG/He5K+g1Oh28XM0CO:sttNconvAq4sV+FNeFwoHXMGtK
TLSH
T152D1C5426F24BCBB4CC7E519BA28BA17E2E5507265D41E58EBFC466C08DB6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a6217.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences~RFe5a6217.TMP
Size 5KB
SHA256 a718b1ff39ee61295e0f4ec14e34b96e90da849f2e7019a882a720bec6dea6a6
MD5 bd5ce55a012879d96c8adc96cac3c165
SHA1 94137c3c35145a55d810c2f90fe271676f590aea
SHA512 5886b80ca3e84b907f5806432f21dfb2109487516f131667f9d4bf03ce32f05e3390b5269c766deb7d3106ba51707cb954fdaa986e4d70125e6a6a620c08eaf3
SSDEEP 96:stJ/dDL0Ndb9jkwnv5h16ZP4s7/x+6MhmuecpeFMkkje5K+g1OJe28XM0C7K:sttNSZnv+4sV+FNeFwjXJGtK
TLSH
T152C1A5425F28797B4CC7E109BA28BA07E2F5A07265D51D58EBF8466C08DB5CC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 2KB
SHA256 642873eb5c9e58edbe1cd9bdb37d20f2de09a5edaa83ce590db0ddc07a8bd70a
MD5 3d9442058568a1e663a446c337a54c82
SHA1 45d383b32d047d1122be3cd9d892a0ac329f32a5
SHA512 aeff3a61e0518440b1c9dade608862b3cf1842b0cbfadc62579e0fe1f6798ae7d38c34787a3c99a60775899df9feea90532976a9653da7e89cbe968c5d9f0591
TLSH
T1295195B369649E76C9F3D644BD473B23CD79906AAB912F209BDC1B0C01D755C5342C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 3KB
SHA256 d0227b834a3974b73f23956c05db28c4941dbf8d33dd855dcf9fb9f9e59c576f
MD5 bc2e665391aad74389da6c4abe826e54
SHA1 1358baa006118ab6a90860a273929ed0f84468a8
SHA512 1c356b5c3c7e72bdba29c1b5cebaefb37f40ab9dfa717882eb8f3f632798f8378db4198d1fbf4732d1a5121b7e72466b9886d163372b0cea20834f71dd544ac6
TLSH
T12B6184776974AD7B8DF3DA04B8863716AAA59027E6D53F64CBEC0F0C01D72881342C1B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 15KB
SHA256 4a6da0698f41abf46ed111f2cc237cfdf96317e10702bd1a22d95174bb04eea3
MD5 fd304ca564e65d3f01e60356e98b9ec2
SHA1 68a9f8b3025bd93e07f3ccb4fd785b4be3717fb8
SHA512 b9a3a8932563510c50ca813d8a5ae504c26f4de1f3f7fdea1d3c42cbf57e829ef32226bf85f1d14eb78ec368dd0eb0b126e8808dd62456396a5a490f4cb6591f
SSDEEP 384:C+aQikB+z/xvxjg/qhEMXNBSfyll/sBoJk6nIhw:t/UxvxjgC+Mhl2BoJk6nIW
TLSH
T112729D2B54692E3399F3F601B94D178BDAB9D47691C27EB84BFC1F0E06872881342D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59f023.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State~RFe59f023.TMP
Size 1KB
SHA256 016c04030dc30097fd8cb251908a05023e0b2a5bfed597c1a8bc22939d4236a2
MD5 4a6f09f8989c7b73234314d64eea050b
SHA1 c6017cd1cc93f326e4a1de0de8cd96756fb69f60
SHA512 2c39045ac6bbaf24b53482ede2bd59ef1d98caf3f7f3bdb08af6b4cd243c91753015f8edb481e536e21eb993d321ca169f3b37ad92af7b69ce47d8daf94fdf6b
TLSH
T1B42170F399A48F71DCE2A28AB44677178D2660AE83900E10A7DC0B0C02E748CDA56C3A
MD5 SHA1 SHA512 TLSH

Submit Download

NoteCable Spotify Music Converter Installer.exe

Path C:\Users\Admin\AppData\Local\Temp\nsyE42E.tmp\NoteCable Spotify Music Converter Installer.exe
Size 11.6MB
SHA256 ecb81e871232c2e3d523faeede21fa71de7f9d368d6ff2801fc0ed9c033d81be
MD5 35ca3d18e21c0cdca4ed7ce706f89771
SHA1 587e17476e186474ef33761b00d832db34218f70
SHA512 0f67dc1d22947a6cf45743490d99ab460e047b21aec29f5bde6ab98ffc9a8d2b079f19ee65dd02feb211b1a97bc268f82603ddfc90b7e09fa66e4de7660d1a21
SSDEEP 196608:38CD7W27zpfLG3Azpsg4OaXJ8Pdn+N3VCB5/C9Snxj:38CD627VfC3/ZOaXJ3N3I56M1
TLSH
T1F0C68D03B722A0FBC95742B0E02D97386EB35D2457114DE7C694BCB898BA3D12D77A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyE42E.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyE42E.tmp\nsis_tauri_utils.dll
Size 29KB
SHA256 c0f2b928bc4c81cc5ca30a8932a6dc8cd617dd016679c057e23355fe732b2333
MD5 8def0196223484f8aed4106148dd3f08
SHA1 e0fc0951deb0e5e741df10328f95c7d6678ad3aa
SHA512 9ffa66181bce5aa5210da0fe5edc6c80aa9e46e2bd1fafd840f468965f4d06bc03f9a77e04b975ffc9f25c886c274196e3fedae6cfb57f366ef39f1e31e1ada7
SSDEEP 768:97F3QRyGmiZZ1FCeu2rcFKpnq0jdhK7W+qdxi:hJQRtmaF7YMX/q
TLSH
T11FD23A18FCC97EBAC7DF05B119088D6E529FC8180754CEABE3B25E52D5A23322ED514E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyF8C6.tmp\System.dll
Size 11KB
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
TLSH
T1E0327D1293E044F2F191853C086B3B5AAB7A65099BE24EA79FE381817D15AD6BD3D303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyF8C6.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg2.png

Path C:\Users\Admin\AppData\Local\Temp\nsyF8C6.tmp\res\bg2.png
Size 96KB
SHA256 a23d84ef542101e4a7bde4173fe742cff60179a086e06f5e1eb4184110914033
MD5 6a2f4b9d636b60aff50043d141a5d802
SHA1 fb984784bb1c4c17a32cd146eebfe2bbb36acd01
SHA512 9e3af75909fee780bb9a05878bdb4a641b0332fb8cd66c41b6b0cde4ac8649136ed52d04db84ea7387aac0e663d6b9db759daa4423dc572251a32cb7acd21fff
SSDEEP 1536:VlK28lY0atGe5g6YT7UsjUNO2+xplhYwYAk1bXdUdgH2pj6DSyGzl4dDp7D2:O3G4e2hUlO2+hGwYAk16aH2pji9s87D2
TLSH
T111A301FFF090F5EDB0F9193D5606800597466063CAE83EB8326C6A686F7D50ACCC795A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\nsyF8C6.tmp\res\[email protected]
Size 184KB
SHA256 19a5864b3eeae11b65ca1dc20d7bd3633c19aa64514e2b3547244e63464a21c2
MD5 fd421812ed813c6a4ca3515267100694
SHA1 e494d930432943755e806adbd2de10049b86ec55
SHA512 3d3bba1461eeb952751c17ea6fa95784c2176ac0bd1f9e0b1e00a6ded67209abdf4edc0f046b74f1a2d981ae3ca6362425f916dcb5e0c765a5cba48874b9a714
SSDEEP 3072:3NeFKu/OkF3DD3zLnP1K2lyJW4j2Bj0O0YPP2Dx8xZR9pWHff0499/fb5yly8NDI:dUBOkF3XtBkvjgj94EZR9w3vfbdsDI
TLSH
T1E0040221C5B4F5AA489B3375FB255F078EA34E07D4C29C82F5AFA60C4B3DE84684B18C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\com.notecable.spotify.converter\resource\img\light\radio\[email protected]
Size 1000B
SHA256 b8cbd6461c75512d565b6d7e698457ec24cd2c761b9d5455d6af9c3a819d688a
MD5 01652546c9f11b2b1ba3e6b8a30a82c6
SHA1 f49bec8b4deff489f04cbd8eef3055aa2e880f4d
SHA512 dfbacefed0fe04f859a8d15c5de310da5783705fa63021e54045d68cfbde4c02640297a6e5db68d3a07fd64b0e967b68005a79e5ca186fd350a67808ffe64f1d
TLSH
T1B711C8F523A61CB67AEB0BFC965C042355766559131A4940E4C116BCD31C5C20B0EA4F
MD5 SHA1 SHA512 TLSH

Submit Download

main.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\main.zip
Size 9.8MB
SHA256 64161ed5dfb0a51146f7d443263938c6a11923e2627405e7b5dc4d3668c93799
MD5 a81f6f13acf7b939634ba3781faf53b2
SHA1 06853b23b1d9fa262d6c52af5b762b653debeec4
SHA512 156a572ea1fc09fd59bc6eef239f03af23fd65119c7b6ebf7aba5cb0f2d10b1051a194581a96be69d93f5a8088fa19858b59d41e76dcebe04e67c152bcd92657
SSDEEP 196608:9uAAeL+we19dZqox7LLUhReRelFaUVsbtZhbUbz5UCCTKUbxABRkZk+p2x3Sp:YAAB19fqo1tR3PpbwbnCTKwxABa6A
TLSH
T1B3A6332BD949739733BD5E5067C69CE03FA03DD53BC22AC09A8B26D70047F12BB99A51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node_modules.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\node_modules.zip
Size 5.9MB
SHA256 65bc5ba31cd7e07a797c7eb1ecf7b0c81617051cf6d5d8a212f3137e5a63aa05
MD5 e285bf2e373af6297c765b21f0959bdb
SHA1 fd9711afd21974774d64327c67771fd7d9842288
SHA512 3831744692320c9fc6fbe9b2c98b1eda5220f22ed0e3d3bccd92a6219b3f1237572681ae1dc6f621cd2fa1f4e7af5b8bdc388c6ece4ff8e747601a1b97e8d881
SSDEEP 98304:q2vdXmmG3z+h1qrnF2FGGKwM2F/jq1VfUrf+lbxiem3fV+rDjSL:q25y3WgLF26jXTfif0bxq+rvs
TLSH
T19A56339B787E615AB100649FC4B32CE7AFC7E0BA91F6932BD321922D8DC465759302F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

renderer.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\renderer.zip
Size 9.6MB
SHA256 a583037793ed257ab678c36a7f981d7195cef1604ec1a6d8ac58456d1a4c973a
MD5 986dc0627d0e3585ae4c490743f6c390
SHA1 2bc992040115a62eaa05d4d33adb78b2ccb2e2f0
SHA512 0b90e37400b624e248f278e1fff51a21f35649bd26132b0574dd7092da2b7a8bccc9f7ec8cdec23657ca3d59a8538e4e46f137c95e7da1cdb8544e81aef0397c
SSDEEP 196608:mDdFFKEG9tcpWtWCrwV6Xl1nF+7yyxcpQqOBM0d5NV70kAO1tf1tl/al01:m/FBiep6WCzXLg7BMMBM0d5NVv1tttlj
TLSH
T113A63347549CB099587FDB724E2039B7E8E6BD435B0B861CAE3C1D04B7B9CE8B916720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resource.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\resource.zip
Size 23.9MB
SHA256 869af322b77cf917b0c2a3885c01b36bdc4b837afde90e19d767913bebcd7f6c
MD5 26c21dcff9184f19690d421cf9ae05a2
SHA1 5ccc58fd76151b62661995c7586e200be44856d2
SHA512 90bb3b04f0bc9f14034ef255ce1815794a184d1a83254b283d488e8b60cd9b10e2145db29fcd123d0095b2f7051f39a81254727a721f6b597aed69802c13b50b
SSDEEP 393216:P0r/H8jDhIUFX5bH8GvuAnuMpZyUg468He+F1mHArYXYwBSWdE9rDxHIe8sXeUw:P0rv8BIUFXJcGmSpwUzH+M1mgrsXBXEq
TLSH
T1164733F8CE7525AD6E7ADE26D36653927303D64470E48BC7E61636024B0D0EBB8439E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3784-124-0x00007FFD80330000-0x00007FFD80331000-memory.dmp

Download

memory/4684-569-0x00007FFD80670000-0x00007FFD80671000-memory.dmp

Download

memory/4684-568-0x00007FFD81A80000-0x00007FFD81A81000-memory.dmp

Download

memory/4844-662-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-651-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-653-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-664-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-663-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-659-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-661-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4844-660-0x0000028FB0230000-0x0000028FB0231000-memory.dmp

Download

memory/4940-48-0x00007FFD80330000-0x00007FFD80331000-memory.dmp

Download