ecb81e871232c2e3d523faeede21fa71de7f9d368d6ff2801fc0ed9c033d81be

Analysis

max time kernel
299s
max time network
303s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/NoteCable Spotify Music Converter Installer.exe
Size 11.6MB
Sample260807-nbv52acn21
SHA256 ecb81e871232c2e3d523faeede21fa71de7f9d368d6ff2801fc0ed9c033d81be
MD5 35ca3d18e21c0cdca4ed7ce706f89771
SHA1 587e17476e186474ef33761b00d832db34218f70
SHA512 0f67dc1d22947a6cf45743490d99ab460e047b21aec29f5bde6ab98ffc9a8d2b079f19ee65dd02feb211b1a97bc268f82603ddfc90b7e09fa66e4de7660d1a21
SSDEEP 196608:38CD7W27zpfLG3Azpsg4OaXJ8Pdn+N3VCB5/C9Snxj:38CD627VfC3/ZOaXJ3N3I56M1
TLSH
T1F0C68D03B722A0FBC95742B0E02D97386EB35D2457114DE7C694BCB898BA3D12D77A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-timezone-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\v8_context_snapshot.bin	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\es.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\nb.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\zh-CN.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-console-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-interlocked-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\msvcp140.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\en-US.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\pt-PT.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\vi.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-convert-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-time-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\icudtl.dat	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\el.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\d3dcompiler_47.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\es-419.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-string-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\chrome_200_percent.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\nl.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ur.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\_platform_specific\win_x86\widevinecdm.dll.sig	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\de.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\fi.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sr.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ta.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\slider\bg.png	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-file-l1-2-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-profile-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-sysinfo-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ar.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\zh-TW.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\LICENSE	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-processenvironment-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-environment-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ms.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-processthreads-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-filesystem-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-runtime-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vk_swiftshader_icd.json	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vulkan-1.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sl.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\sv.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\loader.html	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-localization-l1-2-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\feedbackurl.txt	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\fa.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\main.js	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-handle-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\vcruntime140.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\uk.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\bg.png	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\WidevineCdm\4.10.2934.0\manifest.json	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-core-synch-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-locale-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\af.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\et.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\id.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\ml.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\LICENSE.electron.txt	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\api-ms-win-crt-utility-l1-1-0.dll	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\locales\en-GB.pak	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\slider\2.png	notecable-spotify.exe
File created	C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\msvcp100.dll	notecable-spotify.exe

Drops file in Windows directory 30 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1636821489\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\adblock_snippet.js	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1636821489\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-RU	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_346207735\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_346207735\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1636821489\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-ES	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-NL	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Filtering Rules	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_543239976\Part-DE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3828_1748239632\us_tv_and_film.txt	msedgewebview2.exe

Executes dropped EXE 1 IoCs

pid	Process
4664	notecable-spotify.exe

Loads dropped DLL 2 IoCs

pid	Process
4664	notecable-spotify.exe
4664	notecable-spotify.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	NoteCable Spotify Music Converter Installer.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NoteCable Spotify Music Converter Installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notecable-spotify.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 13 IoCs

pid	Process
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe
4664	notecable-spotify.exe
4664	notecable-spotify.exe
4664	notecable-spotify.exe
4664	notecable-spotify.exe
4664	notecable-spotify.exe
2808	msedgewebview2.exe
2808	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3828	msedgewebview2.exe
3828	msedgewebview2.exe
3828	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
124	NoteCable Spotify Music Converter Installer.exe
124	NoteCable Spotify Music Converter Installer.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 124 wrote to memory of 3828	124	NoteCable Spotify Music Converter Installer.exe	89
PID 3828 wrote to memory of 4420	3828	msedgewebview2.exe	90
PID 3828 wrote to memory of 2824	3828	msedgewebview2.exe	91
PID 3828 wrote to memory of 2824	3828	msedgewebview2.exe	91
PID 3828 wrote to memory of 2824	3828	msedgewebview2.exe	91
PID 3828 wrote to memory of 2824	3828	msedgewebview2.exe	91
PID 3828 wrote to memory of 2844	3828	msedgewebview2.exe	92
PID 3828 wrote to memory of 2656	3828	msedgewebview2.exe	93
PID 3828 wrote to memory of 2656	3828	msedgewebview2.exe	93
PID 3828 wrote to memory of 2656	3828	msedgewebview2.exe	93
PID 3828 wrote to memory of 1508	3828	msedgewebview2.exe	94
PID 3828 wrote to memory of 1508	3828	msedgewebview2.exe	94
PID 3828 wrote to memory of 1508	3828	msedgewebview2.exe	94
PID 3828 wrote to memory of 1508	3828	msedgewebview2.exe	94
PID 3828 wrote to memory of 1508	3828	msedgewebview2.exe	94
PID 3828 wrote to memory of 5884	3828	msedgewebview2.exe	95
PID 3828 wrote to memory of 5884	3828	msedgewebview2.exe	95
PID 3828 wrote to memory of 5884	3828	msedgewebview2.exe	95
PID 3828 wrote to memory of 5884	3828	msedgewebview2.exe	95
PID 3828 wrote to memory of 5884	3828	msedgewebview2.exe	95
PID 3828 wrote to memory of 4924	3828	msedgewebview2.exe	96
PID 3828 wrote to memory of 4924	3828	msedgewebview2.exe	96
PID 3828 wrote to memory of 4924	3828	msedgewebview2.exe	96
PID 3828 wrote to memory of 4924	3828	msedgewebview2.exe	96
PID 3828 wrote to memory of 4924	3828	msedgewebview2.exe	96
PID 3828 wrote to memory of 3596	3828	msedgewebview2.exe	100
PID 3828 wrote to memory of 3596	3828	msedgewebview2.exe	100
PID 3828 wrote to memory of 3596	3828	msedgewebview2.exe	100
PID 124 wrote to memory of 4664	124	NoteCable Spotify Music Converter Installer.exe	101
PID 3828 wrote to memory of 2808	3828	msedgewebview2.exe	103
PID 3828 wrote to memory of 1272	3828	msedgewebview2.exe	104
PID 3828 wrote to memory of 1272	3828	msedgewebview2.exe	104
PID 3828 wrote to memory of 1272	3828	msedgewebview2.exe	104
PID 3828 wrote to memory of 2428	3828	msedgewebview2.exe	105
PID 3828 wrote to memory of 2428	3828	msedgewebview2.exe	105
PID 3828 wrote to memory of 2428	3828	msedgewebview2.exe	105
PID 3828 wrote to memory of 2840	3828	msedgewebview2.exe	106
PID 3828 wrote to memory of 2840	3828	msedgewebview2.exe	106
PID 3828 wrote to memory of 2840	3828	msedgewebview2.exe	106

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\NoteCable Spotify Music Converter Installer.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\NoteCable Spotify Music Converter Installer.exe"
1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:124
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=de-DE --accept-lang=de-DE --mojo-named-platform-channel-pipe=124.3448.4327108366078125633 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3828
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView /prefetch:4 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff805015fd8,0x7ff805015fe4,0x7ff805015ff0
    3⤵
    PID:4420
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:2824
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2216 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:2844
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2308 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:2656
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=3528 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
    3⤵
    PID:1508
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=3772 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
    3⤵
    PID:5884
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=4672 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6 /prefetch:1
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4788 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:3596
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4824 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2228 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:1272
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4900 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:2428
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView" --webview-exe-name="NoteCable Spotify Music Converter Installer.exe" --webview-exe-version=1.2.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4924 --field-trial-handle=1768,i,10207037137833269219,16078631338184538468,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:051ef24b72169dc2a1cf137319899fc6cdbfe9b6
    3⤵
    PID:2840
- C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\notecable-spotify.exe
  "C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\notecable-spotify.exe" /S /createShortcut=true
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:4664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Nunito Sans-Regular.ttf

Path C:\Program Files (x86)\NoteCable\NoteCable Spotify Music Converter\resources\app\loader\font\Nunito Sans-Regular.ttf
Size 110KB
SHA256 095c1f9fd36415a5e437952526b7ece861be53c5022534c16f78126ec237d9f1
MD5 51a77deb6fba78784d6e7bf54932fab3
SHA1 76221b9bb3e1e43ffeea6642b491a485ea97d2c8
SHA512 4e63cea3592f6db7bbe411f4ee7a37754d29a458c56409a8bac2afd4112bc4a90808e57916ff0f2772e13e26ea78ef5a39434253d88963711e89653d451eea12
SSDEEP 1536:iZJb3BlRk2oyyxyxy6yyhtFpllTh4oQzMlMj2v+XQfYic1HmsZ4C/C1:ijr9k0h4bzMlMjiPfYN1Gsn/S
TLSH
T161B31823B7136749CC076F3D8BB2D3E07372BD906E68C64BF84B6E1AD89B5851986601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 946cd155060ecc813ab63f1eea3bf8ad9061139ad8e61b4a70ee60daae6bc0c5
MD5 950fccf9e21af5c6b5e0de79a511eb9b
SHA1 299808c1a26d8742d694dc03eaeff2cabe1ec243
SHA512 a066768256dc84f0cc49ce19a47067292f94e60455ff455f60c5adac3a06f93f9cd47cb5315a968a2d35c7acd1375dd85838328d06193c3e7c44d7a1ff62aa38
TLSH
T171D01212F3010138C4303173308371090501CE0B404582016429859E2E481761D02441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5b83a5584ff4179056e9c52b019f5bd8f3541995cb9f705e1f5efeb0e6fa4a27
MD5 a60f6bf7fbe9e5e7ea1347f5ec1114f4
SHA1 597136fc97e716b37095269aaf3d85b175b62913
SHA512 e0bde9f44622a2debd31996c5c85834db59dcd52bdb374c8e88bc82471c554b3bebd952e97b4897692059acf493ffe0f57fcbfc94eede65eebe0c8df6fbeb69c
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000001
Size 129KB
SHA256 dbfe31e82857fe99ba2c57a36405b54d34110160abd2df54727e1e2f51845295
MD5 d776d0aa645f2ddc778676be3ae7db54
SHA1 4be770ed48137beb186c22eeeaddf44d0dfe25e4
SHA512 1b044b7ce815c04e2563646e3f8e1b119d07212ffe0cd63743f916df474fea2a83cb0a094e31fd0a069243f1e7b1d4324839b0d1532e0efa1ea913a72428b752
SSDEEP 3072:MMuGHOIY2yLo9FkKThY9Yea7owwavtwlUnI6/eLD:n1y4Ft9g2VwGI6mLD
TLSH
T1D7D3127BA03F4BDD0921552E5B0AC05B72FE400DE3334B4D5F9CAB610BBA58991CBE99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000002
Size 160KB
SHA256 676c5f26a3e40adcace103169a9de1a5cb01982ef08d87b4a33c738f37a32396
MD5 9658c2ceb05d417fbe9d18608a5e995f
SHA1 34ffd1df9c76e22557d5c338906c32c917990e84
SHA512 07ee0c7b5a333856d1f38ce97d196ded1afed3360832d886f4a38c35ed6140fa1ee8d4e0c510a3b1a6d25985e184834501ddaae941733668d8d08233a62cd461
SSDEEP 3072:I7rp1cGGybEEBRkVtHrimp8kiGTD06PZRkbYAHbtIff5I61j:I7rjcGG1H268kiGTD0ZHHifdj
TLSH
T177F3134C0F0866A4DBB5AFFB634520EE10109676F98C996F3687658C9DF6C290074AFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Cache\Cache_Data\f_000003
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 312B
SHA256 52572a9d6f139347c071370bd5cbcc1fe03e4ddd59cc052282ea0eb0e2cf3bf3
MD5 62c77aa48626484d125c6e446102a512
SHA1 671e8fa6f2999e5a934a3e4d2b2195d9bb16d321
SHA512 0bd6a69811b6fe7c7b2d5050b8d06f8b030bae231aefc7c37ca0ae0fcd8e482ad623a6a492c4a5a94c9e77f762d116d4a11fa9d05c8ac8ec52180b7cdc2ba941
TLSH
T1B9E05E142679F816D7494076D6927122B2325C9B96A61F474770EDB0DE73F86522D04C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 1e595197f10d2dd5fb88108a3f1700e94217d2598b65c03d902e194510dde38b
MD5 b97057cca5c5c88bbe55b755e36e892d
SHA1 b9394a20d3d3d217534656c3cc3390999777a4bd
SHA512 293c0c9a69ac3ee1600993b4f28f481e191cec87b8697dd16d0aa671bb9d647a3135172d4245d82e6261babb40337e7ac9fe793458db9c702c960bc28dfdcd48
TLSH
T11CE02B103416F8C6C78840B0D7A13122B376ACA7162E1F67C350DD70EE62382011D0C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 f4cee2fd6e9dde788b1d2edb6c67e770687466cb94eb65427b2339a669b42391
MD5 924eebaa4b440335c6184f3a389e0d17
SHA1 a133c09016227872719e07a25851eb6578e5d395
SHA512 9c4e7b81ad9ebc498a512775d6314b49ca8ea04d90cbab59fa500d06766b3e664ae9130e73a24e9182c6506c3358c67d6e3a35b86a117e14ffc8b1ca27a727ed
TLSH
T124D01200185BF859C79600F199C13023B2B2D98357135E5753646CB1DE22385025D049
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1bc7.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a1bc7.TMP
Size 48B
SHA256 44611b4d48d6d67ba18a14eaa63b82e221ff0bee1fe663d719f976457a825951
MD5 ca79d55375daf658b37a05edea763c7d
SHA1 33fa7e2ac4064aad22e1bf82f6a246b3c03fcf4a
SHA512 fcb61eb2fe6479b71dfa89f12f55a4f9e942b8789733c1ea30bbff76bd77f037ff0716976db007b5c0fe074fabbf9fec0c371772b157e4e2840bfdb1beca1b3c
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 9028b833d5176603efefba7184e93933f1d71e3759d01662c6313d4932411303
MD5 d89539e52a5608a6e4b78695cffe9153
SHA1 7012e489f25f715d5453ddfd0d1b95314a58973d
SHA512 36ae4ddb321d06a8a03b4d5100efd207e57e5ebceeb927846e76a459907181821983883c98586f5d0fefc82ac1d666b764cedeaf3c77c80d6dbc602763059c49
TLSH
T13A418CB7C3D8955DC8114AF81B30AE1BCF9D0514422E3D26C9C5FF4B93D2463E22A24A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5aa25c.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\Network Persistent State~RFe5aa25c.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\TransportSecurity
Size 522B
SHA256 3e9cf137614825729b64d129fe24c1cb40afca5da036aac21328f32a46ae77e3
MD5 2c982c46900f278b38018371a61b99a2
SHA1 a44345fc58b3c9debba12863d1f43dd2dc8d81fc
SHA512 7b21d3006f6ddff08e7b3e4199931c1dc26bd4577f55d4de9305a5e0408603ae30f47a3fa4b5c459640a7de47bae959032ec0ba131854dfff7f590d4acd4b620
TLSH
T1BCF05053C07DA4EBA018486B09D8FC0E5E7FF531014254FCD76980ACB1805F74647897
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59e98b.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Network\TransportSecurity~RFe59e98b.TMP
Size 188B
SHA256 c0135bb02761e8a3946aba2d62a579e6e86688c258d0a55fc6e9e9305f11432a
MD5 451406b9406eba19b98122bbbb015513
SHA1 7ca4eab04d25e201036c6857a1b73b8484ea7ca5
SHA512 ed8c3b6fff921ee969659d5e64ad00f750f7769ca7ca80c7069774e3d7c6b9fb9ac6512b3430c78aba079128ad79308ab5a6fedab3bcaa94daf7b891c9f94fbc
TLSH
T14BC0C06381BDECB21438053988C0FD075FBAF331008298F8C342C53CD1801F68A03103
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 953c7a758323fabdeabf89390302684b919e9de1963cf114fdc8038a09e7bf86
MD5 0a419323608f06e682f9015e2e7417be
SHA1 b7d365148c277f6b78c7d5a34a9b6a5ef1f3ee30
SHA512 610d4d32c3fd640f3b58c18fbaf595607c1f0e485c673fa322ff81558d20895112f578fb9b244677e670f5d08cb6b2a4ec1e65e44d583ba752389c8298474d8a
SSDEEP 96:stK/deTG1Jb9TkBSv5h16ZJvLCs7/x+6MhmuecpLI3MkknG/7G/eeuK+gTdIx287:styBPvAvOsV+FNk3wokeiRKxGtK
TLSH
T124D1C7425E2479BB4CC7E519BA29BB17E2F5903265D11E68EBFC851C04EB6DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 bc479d9eedfb764f924a740901507cfe07106aeceef06c6f2e28ced762077098
MD5 c12ea43b2c41a3b1ebe5f7ed1ccd4896
SHA1 a15200d8effaa6469732f271fea045858a8d6c3b
SHA512 6f94e394b185e2c4061e51fbaef7590afffc1bc63664c18d213c49d5d20b130ec5eefcaa0a02f1724c387d7d4a53cb37433c605c9289ebcc8e29e7eafcb1cc7c
SSDEEP 96:stK/de81Jb9Tkrv5h16ZJWLCs7/x+6MhmuecpLI3MkknG/8G/zeuK+gTdIx28XMo:styv8vAWOsV+FNk3woxziRKxGtK
TLSH
T1E9D1B7425E2479BB4CC7E119BA25BA17E2F5A03165D11D68EBFC852C04DB5DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 5KB
SHA256 191c09461f91063da8f9c15cf3bbb074d489e923f93d373e5f9f6dec580a7402
MD5 94e49639a37dca6e16af0087e92a0bc9
SHA1 74b6f40c220186d42faa41ee5e3c2430591cfbd8
SHA512 c3cf0ea6e5c8a119aa32370f47aef2f4acfe2c1f4abb8e91a693c0c1afd4b12012286c20da3bc808da41f0fc4b8322831fd288dcaa71cdf3fa3d1a37d5db697f
SSDEEP 96:stK/dW81Jb9Tkrv5h16ZPLCs7/x+6MhmuecpLI3MkkjeuK+gTdIB28XM0C7K:styv8v+OsV+FNk3wjiRKBGtK
TLSH
T179C1B7025F28797F4CC7E509BB29BA06E2F9A06165D51D68EBFC461C08DB5DC6317C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Preferences
Size 6KB
SHA256 a7f62b25021cb1930d4c0bbfe868a406f5a9cfd61ce8803cf2476e4ef2b4658e
MD5 f1de67e30b5d0e3ccd8b4a661dfefd1b
SHA1 627e94d474ddfff76fb412c102c0e337ab81b6da
SHA512 983beada79ab3a124f1eeaac39db14f4982c4781bedd8b2ea132689d6ad2015ee44bc3eef4eec9e343efd179ee37a6148b2012e8ed5ce9685853d473ccbf83c2
SSDEEP 96:stK/de81Jb9Tkrv5h16ZJMiLCs7/x+6MhmuecpLI3MkknG/nEG/b+euK+gTdIB2o:styv8vAFOsV+FNk3wo56iRKBGtK
TLSH
T19AD1B6425E2879BB4CC7E519BA29BB16E2F5A02165D51D68EBFC852C04D75DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 15KB
SHA256 d827aa4cd310920e3f5506f752aaaf8df4443235cf3b3f7d17a946a93cc4b8ee
MD5 3fe73e23cb77f63cd9927e23e8475252
SHA1 696cb6ed423f3964228067493a7832bc3b4783e0
SHA512 78de484fde96fc9e617628ad83e455bdf216fb974089aad6bae7bc736b23ff6bda141738571c21a50b9cbe8d07b4db6be44a79899dacd40133cbb6ee33b8ca32
SSDEEP 384:O+aQikB+z/xvxjg/qhE9NBSIdf4NhYEoJk6HkrIM2:Z/UxvxjgC+zOUEoJk6ErIv
TLSH
T1B9729E2B65293E2799F2F611794D178BCAF5947691C2AEB44AFD1F0E07D72881342C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 2KB
SHA256 b52e0e61787f99fdadca460ae533d351f29ff9f5c964b1e2baa0951b7c392774
MD5 2d0df29ccf215e50bfed0edf6f6189a6
SHA1 54ba4e7057f0282ef161a02f5b31ac5112a971ba
SHA512 5c9b71a3a810c542d5f57d6ed6362b5fd0b532e1df36ced6c565513969a2085931e8196b16c3387675fdb389dc6b73b88b84355d8ffa3c9031b68a94d59975df
TLSH
T12B51B573AD206B3788F29654BA4A3B238EB1D0699A521F60D6DD0B1C02D715C2302C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State
Size 3KB
SHA256 5ac5e9e47dcf70ff485b6d684831123022a77a921ace95414e4caf35f0b4d19b
MD5 6750a567204ab5e1135cd99f2066ac83
SHA1 1130f28de5fde7e19525f25cc101ac3c794071aa
SHA512 fc1813e7166b54251b49d1088e4954058db8c6670ef7856459c26b196aeadb4173dfa377e8a67f1b168ca7a76f3170f911fe9ca6498955425ddd916a550c96f2
TLSH
T1B36186776934A93B8DF2DA10B9863B17ABA1902BD5817FA4C6EC0F1C02D72981342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5979ab.TMP

Path C:\ProgramData\com.notecable.spotify.converter.installer\EBWebView\Local State~RFe5979ab.TMP
Size 1KB
SHA256 b3959d05c547c99b6169a759c419e6c780b0ab803a89076594af56e921761cce
MD5 97ebb1deec7a4a65349e24baef451bf3
SHA1 d319e43f50dccb656e325fd3eb14dbc5c48ec9b6
SHA512 a72cd2dbde5fdf3266c6172ae03f38e7da00c8df740ee78f73843177837a1e65e43215bd2bbd21e5ee7acf63df36af2d44f7943fda156361b9ec1eeb15e0c903
TLSH
T1AE2184F3E8741B32ECE2A69172067B935EB1A07F82118F50A2EE472D06E715DA117C37
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn1319.tmp\System.dll
Size 11KB
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
TLSH
T1E0327D1293E044F2F191853C086B3B5AAB7A65099BE24EA79FE381817D15AD6BD3D303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn1319.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg2.png

Path C:\Users\Admin\AppData\Local\Temp\nsn1319.tmp\res\bg2.png
Size 96KB
SHA256 a23d84ef542101e4a7bde4173fe742cff60179a086e06f5e1eb4184110914033
MD5 6a2f4b9d636b60aff50043d141a5d802
SHA1 fb984784bb1c4c17a32cd146eebfe2bbb36acd01
SHA512 9e3af75909fee780bb9a05878bdb4a641b0332fb8cd66c41b6b0cde4ac8649136ed52d04db84ea7387aac0e663d6b9db759daa4423dc572251a32cb7acd21fff
SSDEEP 1536:VlK28lY0atGe5g6YT7UsjUNO2+xplhYwYAk1bXdUdgH2pj6DSyGzl4dDp7D2:O3G4e2hUlO2+hGwYAk16aH2pji9s87D2
TLSH
T111A301FFF090F5EDB0F9193D5606800597466063CAE83EB8326C6A686F7D50ACCC795A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\nsn1319.tmp\res\[email protected]
Size 184KB
SHA256 19a5864b3eeae11b65ca1dc20d7bd3633c19aa64514e2b3547244e63464a21c2
MD5 fd421812ed813c6a4ca3515267100694
SHA1 e494d930432943755e806adbd2de10049b86ec55
SHA512 3d3bba1461eeb952751c17ea6fa95784c2176ac0bd1f9e0b1e00a6ded67209abdf4edc0f046b74f1a2d981ae3ca6362425f916dcb5e0c765a5cba48874b9a714
SSDEEP 3072:3NeFKu/OkF3DD3zLnP1K2lyJW4j2Bj0O0YPP2Dx8xZR9pWHff0499/fb5yly8NDI:dUBOkF3XtBkvjgj94EZR9w3vfbdsDI
TLSH
T1E0040221C5B4F5AA489B3375FB255F078EA34E07D4C29C82F5AFA60C4B3DE84684B18C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\com.notecable.spotify.converter\resource\img\light\radio\[email protected]
Size 1000B
SHA256 b8cbd6461c75512d565b6d7e698457ec24cd2c761b9d5455d6af9c3a819d688a
MD5 01652546c9f11b2b1ba3e6b8a30a82c6
SHA1 f49bec8b4deff489f04cbd8eef3055aa2e880f4d
SHA512 dfbacefed0fe04f859a8d15c5de310da5783705fa63021e54045d68cfbde4c02640297a6e5db68d3a07fd64b0e967b68005a79e5ca186fd350a67808ffe64f1d
TLSH
T1B711C8F523A61CB67AEB0BFC965C042355766559131A4940E4C116BCD31C5C20B0EA4F
MD5 SHA1 SHA512 TLSH

Submit Download

main.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\main.zip
Size 9.8MB
SHA256 64161ed5dfb0a51146f7d443263938c6a11923e2627405e7b5dc4d3668c93799
MD5 a81f6f13acf7b939634ba3781faf53b2
SHA1 06853b23b1d9fa262d6c52af5b762b653debeec4
SHA512 156a572ea1fc09fd59bc6eef239f03af23fd65119c7b6ebf7aba5cb0f2d10b1051a194581a96be69d93f5a8088fa19858b59d41e76dcebe04e67c152bcd92657
SSDEEP 196608:9uAAeL+we19dZqox7LLUhReRelFaUVsbtZhbUbz5UCCTKUbxABRkZk+p2x3Sp:YAAB19fqo1tR3PpbwbnCTKwxABa6A
TLSH
T1B3A6332BD949739733BD5E5067C69CE03FA03DD53BC22AC09A8B26D70047F12BB99A51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node_modules.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\node_modules.zip
Size 5.9MB
SHA256 65bc5ba31cd7e07a797c7eb1ecf7b0c81617051cf6d5d8a212f3137e5a63aa05
MD5 e285bf2e373af6297c765b21f0959bdb
SHA1 fd9711afd21974774d64327c67771fd7d9842288
SHA512 3831744692320c9fc6fbe9b2c98b1eda5220f22ed0e3d3bccd92a6219b3f1237572681ae1dc6f621cd2fa1f4e7af5b8bdc388c6ece4ff8e747601a1b97e8d881
SSDEEP 98304:q2vdXmmG3z+h1qrnF2FGGKwM2F/jq1VfUrf+lbxiem3fV+rDjSL:q25y3WgLF26jXTfif0bxq+rvs
TLSH
T19A56339B787E615AB100649FC4B32CE7AFC7E0BA91F6932BD321922D8DC465759302F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

renderer.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\renderer.zip
Size 9.6MB
SHA256 a583037793ed257ab678c36a7f981d7195cef1604ec1a6d8ac58456d1a4c973a
MD5 986dc0627d0e3585ae4c490743f6c390
SHA1 2bc992040115a62eaa05d4d33adb78b2ccb2e2f0
SHA512 0b90e37400b624e248f278e1fff51a21f35649bd26132b0574dd7092da2b7a8bccc9f7ec8cdec23657ca3d59a8538e4e46f137c95e7da1cdb8544e81aef0397c
SSDEEP 196608:mDdFFKEG9tcpWtWCrwV6Xl1nF+7yyxcpQqOBM0d5NV70kAO1tf1tl/al01:m/FBiep6WCzXLg7BMMBM0d5NVv1tttlj
TLSH
T113A63347549CB099587FDB724E2039B7E8E6BD435B0B861CAE3C1D04B7B9CE8B916720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resource.zip

Path C:\Users\Admin\AppData\Roaming\NoteCable Spotify Music Converter\installer-cache\resource.zip
Size 23.9MB
SHA256 869af322b77cf917b0c2a3885c01b36bdc4b837afde90e19d767913bebcd7f6c
MD5 26c21dcff9184f19690d421cf9ae05a2
SHA1 5ccc58fd76151b62661995c7586e200be44856d2
SHA512 90bb3b04f0bc9f14034ef255ce1815794a184d1a83254b283d488e8b60cd9b10e2145db29fcd123d0095b2f7051f39a81254727a721f6b597aed69802c13b50b
SSDEEP 393216:P0r/H8jDhIUFX5bH8GvuAnuMpZyUg468He+F1mHArYXYwBSWdE9rDxHIe8sXeUw:P0rv8BIUFXJcGmSpwUzH+M1mgrsXBXEq
TLSH
T1164733F8CE7525AD6E7ADE26D36653927303D64470E48BC7E61636024B0D0EBB8439E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1508-206-0x0000025D11730000-0x0000025D11846000-memory.dmp

Download

memory/1508-102-0x00007FF8239F0000-0x00007FF8239F1000-memory.dmp

Download

memory/2808-2813-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2817-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2818-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2820-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2821-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2822-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2819-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2808-2811-0x000001C9BCFB0000-0x000001C9BCFB1000-memory.dmp

Download

memory/2824-26-0x00007FF8239F0000-0x00007FF8239F1000-memory.dmp

Download

memory/2824-263-0x00000185D4840000-0x00000185D4956000-memory.dmp

Download

memory/2824-205-0x00000185D4840000-0x00000185D4956000-memory.dmp

Download

memory/2824-300-0x00000185D4840000-0x00000185D4956000-memory.dmp

Download

memory/2824-2857-0x00000185D4840000-0x00000185D4956000-memory.dmp

Download

memory/3596-756-0x00007FF8242D0000-0x00007FF8242D1000-memory.dmp

Download

memory/3596-758-0x00007FF824830000-0x00007FF824831000-memory.dmp

Download

memory/3828-192-0x00000257451E0000-0x0000025745421000-memory.dmp

Download

memory/4924-246-0x000001E6F01F0000-0x000001E6F0306000-memory.dmp

Download

memory/5884-211-0x0000026184820000-0x0000026184936000-memory.dmp

Download