Analysis
- max time kernel
36s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
SpotifySetup.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpotifySetup.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
General
- Target SpotifySetup.exe
- Size 1.0MB
- Sample260820-phtffszvhs
- SHA256 54dda0a405e88b0ce11f786da6f47df3d2f5986c5b627ae6599dce6257625620
- MD5 e07700d30d651ef43259347f00374145
- SHA1 2b51e486f548a28f78ee5ec415dda46ff8cbf923
- SHA512 ef84f01456aa3a3ea09407d627518e120380d29a488a745b540f1e333756f367fff5e2c4216aab552374d5d1347a2d72c705bc6062c60e4b10a49485401b3ea2
- SSDEEP 12288:IRKio1Rrudo/9757pRvbpeMcn9w/opEaiMB7DTSFi14jd:IYH1Rado/X7pRvbpeDpJmd
- TLSH T196354B885F28D6AEE363D57D5021D27DEA317C220FC2C60542E9A1FC1A6B774786BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 2 3536 SpotifySetup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Executes dropped EXE 3 IoCs
pid Process 5032 SpWebInst0.exe 5052 Spotify.exe 4976 Spotify.exe - Loads dropped DLL 2 IoCs
pid Process 5052 Spotify.exe 4976 Spotify.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5352 Spotify.exe - Modifies registry class 9 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.launcher SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.launcher\DisplayName = "Spotify Launcher" SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.launcher\CustomActivator = "{18A68F64-72DD-42CE-A75D-EDBDAC226F5D}" SpWebInst0.exe Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.client SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.client\DisplayName = "Spotify" SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.launcher\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png" SpWebInst0.exe Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.client\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png" SpWebInst0.exe Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\AppUserModelId\Spotify.desktop.client\CustomActivator = "{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}" SpWebInst0.exe - Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3536 wrote to memory of 5032 3536 SpotifySetup.exe 89 PID 5032 wrote to memory of 5052 5032 SpWebInst0.exe 91 PID 5052 wrote to memory of 4976 5052 Spotify.exe 92
Processes
-
C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe"C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe"1⤵
- Downloads MZ/PE file
- Suspicious use of WriteProcessMemory
PID:3536 -
C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exeSpWebInst0.exe /webinstall2⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:5032 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeSpotify.exe /INSTALLCOMPLETE3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5052 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeC:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.96.518 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ffcd93f5448,0x7ffcd93f5454,0x7ffcd93f54604⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4976
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2200,i,3242012528759754085,5406357961815898742,262144 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2528 --mojo-platform-channel-handle=2512 /prefetch:24⤵PID:4952
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2712,i,7102856762223696215,1914970640225586089,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=2780 --mojo-platform-channel-handle=2776 /prefetch:114⤵
- System Time Discovery
PID:5352
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2904,i,9515350345238743266,18266668183246493383,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3252 --mojo-platform-channel-handle=3244 /prefetch:134⤵PID:3360
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=6164,i,14756419903919070439,8656642546852403156,2097152 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=6232 --mojo-platform-channel-handle=6228 /prefetch:14⤵PID:3888
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=7480,i,16465188971150084800,18441594889095343616,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=7492 --mojo-platform-channel-handle=7488 /prefetch:144⤵PID:4772
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=3776,i,11894532220193329264,7964967688635173295,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=7904 --mojo-platform-channel-handle=7900 /prefetch:144⤵PID:5496
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2720,i,14939897637158148935,4295907741191852316,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708994745248135 --enable-logging=handle --log-file=3888 --mojo-platform-channel-handle=3860 /prefetch:144⤵PID:1964
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=4008,i,939244746621182431,15664508965101124957,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708995682289984 --enable-logging=handle --log-file=8020 --mojo-platform-channel-handle=8024 /prefetch:144⤵PID:2304
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=1524,i,8845544135294956703,4027396946599716119,524288 --field-trial-handle=2516,i,17468629787760928933,14481301124580882611,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2524,i,6783056266611350822,13967780379646763324,4 --trace-process-track-uuid=3190708996619331833 --enable-logging=handle --log-file=8028 --mojo-platform-channel-handle=7892 /prefetch:144⤵PID:1920
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:5452
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵PID:4908
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4720
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized1⤵PID:2768
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeC:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.96.518 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ffcd93f5448,0x7ffcd93f5454,0x7ffcd93f54602⤵PID:2440
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
- Size 72B
- SHA256 ece9944ca7d0ca209fa0d42382cd2be8a2148053ede7cc954b93a6645ef22f99
- MD5 68ca13df78b983ad95d41f2b36c5ee83
- SHA1 c9167b6799d3f2ebbcf162979b2e7b8f23ee3b83
- SHA512 6ce7ea05c6baf0c39fc44075e7d625aa73366890f4d41b09fcfc8e844289c04c0047e0dc8e8b61ff7a99ca70ac6abba466b0021d5dd2d6c7183da8dd42ee78bb
- TLSH T180A0023405496037D25513B430554BC16620DB903E52172DA4E000DEC8787445165459
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index~RFe5a548a.TMP
- Size 48B
- SHA256 0ff3871276916dcabf0f901de5e0f5d0945d0a5d788d96a99068aa853f32537e
- MD5 c31676942f0c87d91aeb487ab4e92940
- SHA1 de6ac8faed8fec9a4092f404f3014e94611abc9d
- SHA512 0244d507cba5333107deed476eabc12664d018e4b4f816d700e4d63d09e3655c2f8cd707fa64c772d19ece9a70fd31698786c08391943071fc31a63f373a2a2d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\Network Persistent State
- Size 2KB
- SHA256 95d1ef670aa5ac0d4a52e95f2aca95947f2a7c78b442d7fdbbcded3e54eda168
- MD5 7558a9e856cf78bad22d255844180180
- SHA1 959cd3dcb0a6761070c8decde9daabc2254a4924
- SHA512 77c88968ac5f1ef62541e94de8411436a683669f16ac3089c3cf7e4290760d36e49dc0d3b7c19bfd5cdc473cbbd17fb6fa96e7ce9f360a78e6deab74f42bf010
- TLSH T1274199A7C3D9D23DD95112F4A7187E2BCE2E0A2483283C26C8E5BF5BB7D1571E20054E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences
- Size 10KB
- SHA256 6fb58de5cf47f8ae9a45d8a9a22ef5ff6e0748ea77bf58fd6b86921a4052ca53
- MD5 b128f83847e3fe4730aa72b17d8c764f
- SHA1 f1ba422664c827c8f78fdebb4f4ca89a4c052c00
- SHA512 1a320b4540c4361c8db3bf712cc6b6ae7890bbbfe41a197329b74be47f6ddba6b6eedbe92f10a2eab4502bab2a349fad5d8a3d408419b8635a1fb93978016a11
- SSDEEP 192:zREZxcYv7BYS84Z9vHcb+WNV1S1td1WpH/q/yIsn2Kgu:zRoxHyilgzcu
- TLSH T17822B56FA82979BF7CC7E268FA21B753E3F5006124946E44DAFC892C16D76CC2263417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences
- Size 10KB
- SHA256 c1dab520204c7a0091cc6c31661d3ea0dfef5dcdd2ee197ef9e817cca05ddf76
- MD5 da9bb4e3bdf748394985541e2e37788d
- SHA1 7776bcd8a49a3112ab191abb2e3f752d3e9110ca
- SHA512 e01b2a1bb46a9a69dc79e42e9334f782ff14384fc113e84dc21ff61bc47bf581f5819e2341f0134dcbf02985dd51ed2a2b208db12076e5b0f150b74b31414a08
- SSDEEP 192:zREZxcYv7BYS8tZ9vHcb+WNV1S1td1WpHVo/yIsn2Kgu:zRoxHydlgzAu
- TLSH T14B32C66FA82579BB7CC7E268F924BB53E3F5006124946E48DBFC892C16D76CC2253417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences~RFe5a83b8.TMP
- Size 10KB
- SHA256 11bab3002a7250f6774e730d45db2565774d827a4accd03a8d07ac8d204b5019
- MD5 d6695b8d8d737c6f7825071337524b3f
- SHA1 fc11c3d5e3deec5d353b365e576fdea556ebbcca
- SHA512 c427665693689f3b28bf47ee969a477742a2906ab8e8506b916fee4d878caa07a90e4e68d4335d3a3be18f270defac3c04b3e0a1a0e8a6051a1cd83ae9717b79
- SSDEEP 192:zREZxcYv7BYSF4Z9vHcb+WNV1S1td1WpHft/yIsn2Kgw:zRoxHyvlgzzw
- TLSH T1C622C66FA82979BF6CC7E269FA207753E3F500652494AD48DBFC892C05D76CC2263417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\121994f4-493c-4bd6-ad98-bedb0353f054.tmp
- Size 8KB
- SHA256 d366b01c741a74a271b730f953bdeb75b12beda553ec57920f11d1ef7e2f090d
- MD5 bd07601ff6c925059917a03bbac79da7
- SHA1 0d7508f192fea4125cfe97397850c9c71b74c27b
- SHA512 8638a7268536ae7967bb43c7e5e10fbdf68905884a3c36366df6fecbabd9bf43ff834835c067093aadaea4435377f0592b3890babfb1bfc30d5d3a529558c205
- SSDEEP 192:zRIc4Jmv7Z6/IQ9rHcb+WNOwY/yIsn2Kgj:zRIc9tkhgUj
- TLSH T1F002962EAC25697FACC2E259F9257B42E3F5102134943D48DBFCC92C29D7ACD2227417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State
- Size 922B
- SHA256 d965b355ca99ce70ef5db472259aff30c734f0d2cfbeb47f7ff6dba847584ae1
- MD5 71379a9268e21d8f110cdf1dcf86b318
- SHA1 46d4777e3fec9ebe3566ae85321986db4492ab32
- SHA512 b11a5c54530f6a27cd150589cf0b7a454eea2c5c5715f29baeba630aca698f9f6d2ca5c7f6a16405e2545d1eecfbb704fb2ec0757053efeb031e29e94908e120
- TLSH T13F119CF7C7E5912E8A4102F4AB216F1FCE2E0904431C3C2688D47F6B97E1871D110A4F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences
- Size 8KB
- SHA256 3d538501df25fd3ecc47166ec9cb3e0b02ce4170d57f4539afaeb2a3944463f2
- MD5 2d880ef8fbef311338ec5c04193fa6b8
- SHA1 227aeb946a1ab064eed28e6ddd8dec652f5ce6ad
- SHA512 a87e3ada13d7ffa7f05cad5a4822f8cb3dcd7e2372ef0fc26951b1437902af6bd69e490a4df5422d1c72afad5e77e61eaf8e2d652fde338cae807225e6489ac9
- SSDEEP 192:zRIc4Jmv7Z6/JQ9rHcb+WNOEk/yIsn2Kgj:zRIc9tNhgUj
- TLSH T17712951EAC256A7FACC2E659F9257B42E3F5102134903D48DBFCC92C29E7ACD2227417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 3KB
- SHA256 33033cb1dd7578c7e293b2869179341ccf17b9158d2b6bc9822348df2a8af0dd
- MD5 d65f71a45ff314e52a987d9d0bc36397
- SHA1 0b2032ed39cb40583ce6b900ba2918f8de1c869d
- SHA512 28b05c23dd1dd59a6892af80f952f04d2e41ec517444dff4f514f9a94773bac061ea8cae9348ce201b3ed438cb94a1f4657ca03af975e4a322d1e09f5463287a
- TLSH T15B61C72654A6DC7768BBE08179423A43DFB46067E190BFC8D9FD0A1C11E72EC1743517
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 6KB
- SHA256 314a59f0f7d421cd8fd7351887e94ae79c077739fd12c968d1788973061f2f69
- MD5 174d6e1fcb82d6451f04cb4c5ffdd808
- SHA1 56d866b054368ccb2957a3d589b7d3ffcc4baa6e
- SHA512 0feb868264ec1375f95b67dbb0de1803d5419acb2c7259d7e6ec3ef42751e003664e45dcaa62a88b0a730dad80791af259c6f4ff0591286c70d8a2fcac256684
- SSDEEP 96:jlbJ64f4RtDlVF+Dotoh+DotoyN5YD+DvB65dGyvrp7aovMWuAcEuwea:JtyRnqDUxDUBNZ2wsLuREv
- TLSH T127D1C73BE587CE67ECEB91A12A01BE87FB5996555281CAC48CD60D0C01DF5EC260B82E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 6KB
- SHA256 f04d6123dd605c08af324cbdf54fe46b718f10734521016f0ff1819f393aaa9f
- MD5 07a2f5233ce7af0cb23589d57e0da358
- SHA1 975fdfb3444514bd58d74ece1b4c964002f16379
- SHA512 c27aa324ff5793c6ba2c75c0b9258542511131a1b2c96580f9a43d8f7e3eca793c75a5a147c1649d4e8df5ffa782d565dd315e2651ce3433fd9effdfb38f35a7
- SSDEEP 96:jlbJ64f4RtDlVF+Dotoh+DotoyN5YD+DvB65dGyvCp7aovMhuAcEuwea:JtyRnqDUxDUBNZ2wnwuREv
- TLSH T1FFE1C83BE587CE67ECEB94A12A01BD87FB5996555281CAC48CD60D0C01DF5EC260B83F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State~RFe5a0679.TMP
- Size 1008B
- SHA256 41eca92280a542d8a4f1b33bc32708319597f41568037e4b4772eac6c7561043
- MD5 348e6fd70ee27d06fff9f55afe9d57bc
- SHA1 9d48193f581aeeffef389b73d0bbafec905b7acb
- SHA512 a5c3aff1bc77ad7351bd356f7b9d554e743253b0998eb9cba5b69f0eda0dce8b3b3d1005b9536a13807146a73ba07b138cb46f5eb937248eb1d4ac9c57ea2d60
- TLSH T1371154738440EEB17CE4A1A52762B7430E34A167C0954BCC56DA071A56F379D5C07C39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
- Size 56B
- SHA256 d9fa7d2994280243f2066f292710449ac776ce704f9e8f3b05a54eb7cfddf9cf
- MD5 d97e7241400eb79f238a4c2d1d9cbda8
- SHA1 31267822dd9978df2de4d259486b196e1ffc95d1
- SHA512 dca5f961a0d098d0e9c38dd075a687156f3dd7666e866bee767015e6dbc7826261d9345124796dfda72a177ee525a9e8ecc5944688ed4e97da4920d7655a6f93
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\component_crx_cache\metadata.json
- Size 236B
- SHA256 8bf7833c11ce7a85626ee59b89c0d490f619cf5f8f9f41948b5ecc0f4c37ffa7
- MD5 f95fd940260ca4c78b86987cb047aff3
- SHA1 c7de05b8234a9c3c13a164b0195ab4be5f20228a
- SHA512 08613a16f840df8679925dcc6a1bb3cc7aa017e43431b59870a7d0f437aeaf46deb54786d59225fd0a19b7cc0a4249ef76de79fcb665a881f52c42950cefecfb
- TLSH T101D0A7CC4BADC17469059A7F60BD2C87D26FBF8262703DB6F522A211652870F104706F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\component_crx_cache\metadata.json
- Size 348B
- SHA256 6dd2993eb2de08db2571ee4fb8c02fccdef9b8803373aed7a3043dd94ff4e262
- MD5 b5234f5a2960ff58f655dff1e64954d8
- SHA1 4197fb96b5953d0faf5996195b152ecfdff81a72
- SHA512 194bf4d9a1a74d40a399afba440609407522cac969f6989be6d901abef3ec0f92655705eaf7ac3102cf0104f9dc11255953fd7464a2cd70f609deaf2028ab351
- TLSH T120E0C0CD4E9DC3F02A01593E10B81847C32FBF41A2723CF99852E121263931F104A42F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\component_crx_cache\metadata.json
- Size 124B
- SHA256 418e37a64c865013c87c6d30e5094d292fa74fb46e449d968ac83f492e46407b
- MD5 65978328b8ddedd4a287abe5830f4bf7
- SHA1 9bc9c6b04f3ec217420c3b4c0144f0cac646f106
- SHA512 ccc0af038181bff44ec356fdc1a43a3a97fabf3aa55411bb08368ec95c3830229a7f5d7c23e85f55a3ddc7ad078de3ee2418fafa64d6dc92464892ccbab119bd
- TLSH T17CB09BCC05DD81B46E05867E517D1C57D6467F015464159555576511353834F0052157
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\extensions_crx_cache\8d27619e-07f6-4b3c-8d60-1c35571412e4.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
- Size 16B
- SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
- MD5 206702161f94c5cd39fadd03f4014d98
- SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
- SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
- Size 3.9MB
- SHA256 ab20e5730ce3e31c1b8f0ba62fab40a20205d9faf2c8c748d0f02330c181609b
- MD5 e9c4d3f93c2a9b06f60d15b3ca67caa8
- SHA1 1c0d01e88a8955c9ba64248f1a493002e271e561
- SHA512 f0708bfe111c97548c72f10f397ad49635642ed6dd13b3a2ea48e6f78ab97c58b308cf2106f7f055250317f11c052ad00fd81cd3c010f066bcae29ea7990a0d9
- SSDEEP 98304:EySAEdHkArQ5Xa+oeyQmipURqgKqMsxSn+KqjGse9VGQgz5m:EWEdHA0+fP9oMsgn+K4e9V0z5m
- TLSH T12316333843F51E86C61E2A74C7ADDA6AE08D1E930903FF6FBD1593721A466E38370935
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
- Size 4.5MB
- SHA256 3b01ff1bc4a18b63a790c5f6de8e17573de4c5280570ad8677a7767fad304af2
- MD5 745dc55b1fc592bcfbfdf5e0c0336b45
- SHA1 1f0799498e8b24edc1001ec3cf48e0803c46a4c7
- SHA512 514af49e2efb8a75413a977234b14115d156e80cc282a8d381bcf4a4ffddf8ff02a24aee1733568e9dd7da1422c1b8daeb8cf9ba5a07d3ca2a57710e27b22385
- SSDEEP 49152:0SHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:vuktcrfNlTyj5byqS2
- TLSH T100268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 40.5MB
- SHA256 e3fb0cf4b033c7fd689e5a1486c3fec298c263f73868b6085ab4671b35ad538d
- MD5 e239355b47ab28e84fe852491f3e22f4
- SHA1 99fc9399206b81893b7895280ce5356763750127
- SHA512 47878f4f9c4052b625558cf766df34241098473f520e5a74af4befa3e25edffb416899111a185a0c4887b6fdfd2cb9722d26cc1984b072901647cf76ccb418d0
- SSDEEP 393216:7agVCJ/J3j8BRU/gx1yNPo+kY+9E0iY7zAA7D461/qudf:7xRRUtWnCCDh
- TLSH T11D978EAA71E401ECC0AAE1B9CB17DD17E7B7748A0B31E38F02A092621F77660567F751
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
- Size 2.8MB
- SHA256 31a16d06a39339c3b9befef9089b17e4a45b946bccae668b569157ee244b2a7c
- MD5 b6cb4abfa393031dee6880137423205f
- SHA1 697f38786b08074b88a98e558b0d25318c13defc
- SHA512 4f2c60a69e962c0d612bef62c8fdf51022a8a382c8870cc10c2980ce8be3cb56d801ad94a47116d7c72a21631d1b157c880353c6c7aefe6ab026dd1afeccc4a3
- SSDEEP 49152:nHYTMT79ilVoOwsaZigGr9yAeARiTEYiyJjh8Xi6D3cEL8+diN:nHYg8xwfGrUA9Ncnas8jdE
- TLSH T15BD57B13F29901D8C01DD178974A9232FA61BC454B35B6DF0B90B7622FBAEE46B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
- Size 705KB
- SHA256 2c7dd3dc856c0389e56690e6c1bd3c509be950b95831972d5b4a78422cc14a3b
- MD5 0321d6c44a6041910208ce3891727842
- SHA1 42e8935bd94f0fa3fd8611fc84e25a06e8ba82ed
- SHA512 6c9348ed4d50fb2503012b80c0dc8f4cf07d00d2ff857fff8c102266533e65befc6535998f9497fe414cd427dfaf0ff3e5cd1b586addba236b3794768e3d476c
- SSDEEP 12288:bI3H1fJwhjzgsz5B0GDJQrnKs8SNP+QSs8ilSTe+gnSzm5dVYJblIt6kjKQCrC:U3VBE7zEEmPL8bTe+gnSzm5d2bc6kGQt
- TLSH T1FCE412E77374AC7DEE9B1277826505B0FC371A681B82020A179BF8796913B48D8C93D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
- Size 1.2MB
- SHA256 b65200138ef17d5a462da4f11ed93e98a779efa8260454a6d4266205ebbd4caf
- MD5 d995543b367f8675ba74b90f42790175
- SHA1 ae7f07096d74d1565929fffbf1a9711a08fc74e1
- SHA512 99018c2cd0685bcfc6de8d08a649515b606982f56f1dced3b5304c7358e74bb463aa89795752580abff98b288865b49720940f8f0707a5f2527457edda968685
- SSDEEP 24576:i3zB09p2zLmmibkFR8+mZi5r8BWhQumeMRvQt93dyQwuSXAkpbaUGQ74:i3y23mNbkFRJmQ58khQRT1QPtauSXAkA
- TLSH T19E4522D7A370DC7DDD530BB7929B40F4FD7A106B0AB2140A0627BD7A39257889AC6783
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
- Size 2.4MB
- SHA256 24eafefff6b2d53bc408ee41b0607229c111afa07dbdc04d71ad5a25b43027c2
- MD5 1da0531265cf40608f7513c0a92f5195
- SHA1 08a9b3fc5c5c9d5ffb68f148987e31a81cb5222b
- SHA512 35045fec73b7535d5018f28c3b023e0574f71779f31ce1bb70fbfc6dd761ee13699499f253e0c5587d97ee75c25db6cb440093f8b317595296be9c6cded1972d
- SSDEEP 49152:eLOG2qDuB7RIo63ZBZY9iSD2kT2McYcNy5l15:eqG2qe6JBKDtXmKj5
- TLSH T105C56B13F2D901E8C05DD1788B5B9632EAA1BC460B35B6EF0A9077561E7AFE4673D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
- Size 632B
- SHA256 33f70749cdc5ecd6bb047147a2e767d7a279c631f6524ebb1b1df60e6bf93d6e
- MD5 1a161b0b901cc6809fef313dffdb2aea
- SHA1 8471fc229692429ee2df88d49be2d7a6e12bf31c
- SHA512 1a8d594c61829d4b1f50f70d0ff2c743b05e6c7fd8747bf63b184f4567b14fe76611589d0695cfffe667f675e0b901fce9be04243e6281e96429168fe3b73d72
- TLSH T1DAF02DFF59D0657990F10BA1E03C63107CB205951B2B805846531F993B48F69CA5DAB7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
- Size 10.3MB
- SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
- MD5 5bfd3eefca4b5ef2d1a869396390a7de
- SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
- SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
- SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
- TLSH T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\libegl.dll
- Size 504KB
- SHA256 f9ee6e166b95763900af0937ada47b11c5d1129f49f7dfeadaa18fb10d0b1efd
- MD5 581c292b0ff892d1f534110d44aa482c
- SHA1 12bde8c12391f77915fb0c7b6a035949be3e24e9
- SHA512 d4368c17d4b1348699f1e51fed00b118977a9d441d11d7ab755d6e1a2eafaaeccc7d30d822fb812cbe5f0b6f031997ef8fc76a186bd66ecf4b1c7587ee5cc9bf
- SSDEEP 6144:vF1o4DAf5s1KStUkNbhk7Ak7KhPCcgoF0NKzdgbsQr7rVGCXoxd:N1o405CtUkBZk7K9CcgG0NWd/QDVGtd
- TLSH T1C3B48E15B3E94AACE07AC134CA438547EB7178460B61F6DF02E0A2792F77BE45B7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
- Size 7.5MB
- SHA256 630a0e4217d83078b074a1d66e4a4723f9e4f310b24ba0e6a8c3092837b851d1
- MD5 5afda51421b049aa491a4fdd86f65ad5
- SHA1 be9af5237af486276ca32c94cf14f06b2f32f1a4
- SHA512 25d142068e766ba2855aef03f651651f9debdd97d9e33ea20d411ece89223ffd8532cb37a0c5f0dcbd1afa6e82d44484128e8953d6e810de3635a12a51556a6e
- SSDEEP 49152:ktvLjzlN4kFextqcusm4nHcpOjwrMQOT6n1SSCOQESgswJYgZc+5GTSpWy4EWT5S:SWusNpjgKle2S+E8Nkpp0ve9fPzFV
- TLSH T187866C13F69240DDC01DE2B8975B9223F778B8450764B2CF2A5453162FBAFE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
- Size 577KB
- SHA256 76572fbc138ae74d2f2ecdb3dc8924d54f92745db7ee8eb8e8ad7dc4eb576825
- MD5 2a1964ff31c7edff17f4c74d26fce378
- SHA1 2c66f52ac23828ec6a18a6720ebfcb275482edcb
- SHA512 fbb19f906ab8f61461c8be80d53a7cadddfe81524918171c0bfab45f9cec2f5c045ff7ff864858f5c087d4b05c585ba58dfdb7565302605efc524f388c241ba0
- SSDEEP 6144:WpcHQYHQbmpKwey1WMmHfYOMg/jSxMP9sQqblfaYQhp1BPOjnng98//gwb:wwQKAGMDHfdgM6Qqbgaj+wb
- TLSH T117C42B1FF744122A05A352A27F099562FF32D06CA35112663CBD812C3376B6693BB7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
- Size 16KB
- SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
- MD5 8ce43bf0bee69290545738ae472bd5dd
- SHA1 bbc36343250fa8bb2122c8af9e021fc80c032a0b
- SHA512 67825fdb6c0381b7e35c73221caf37374157c1333388d0d20685f4d732340f7fc04faba29ae266fcaa921fff2694b5f8ca0ba24fbbdce2146189924e354df7a5
- SSDEEP 384:5rg5RkIUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/neqA9oz+EFRUeLq4+lLbK74Tdu/:kgOXqEXqP
- TLSH T1DC72B89F1B21CA38E637477F6A5E3125EB3B805C4F91953419BBA44823C639603F71A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
- Size 16KB
- SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
- MD5 d41d181d619aef4a1af14bcd6ad2fc1c
- SHA1 05ea268a59c887a92387a2ad2925285901bba1ba
- SHA512 b2ed7c0c97672411266ef55cfed4e98a7d812e85a20706140c8ea8c566677ed9bdcfaac7d0656496e34db5a7a50e0c9e810fe9a18c2039630745ce617513b605
- SSDEEP 384:pFTaUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/na5k+0SyIqLvsZXPuD:LxOXq+LBDXPuD
- TLSH T15E72175B1932CE38D5378B7E5B9F3624E63B612C5ED164342BEFB41423C636A16E2053
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
- Size 17.8MB
- SHA256 e3a6200122f362e77bee9418fec7469202c81852807f7dd70b021ed600374215
- MD5 c6c9a3d440e436b8c28867f3c3955ce9
- SHA1 208847cb98181e6ba434dd5ec17d686824604946
- SHA512 2e1d53d773f57cf8c311674d60615602670d44af7a7545c60172ebbd47d6bb32e382c4cc91a5394fc1a51dab4b654be822f81f1ea963ec1176624b0bea6a6f1a
- SSDEEP 393216:pqX9UazcYdpnzyXm++SSSCZMwh56qAgbITfTK3l76TmkrqjFWBm0iw+X:pqtJzcYnzoN+wCW4AAITG3lVkMgmeI
- TLSH T10A17124BA758562BCE3F07B74652563F373091197F835307209283281C6A7FBAD8DE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
- Size 16.8MB
- SHA256 148fb1b705a31315ee286cfc344c9e0279d0cd43d386ae4f381e7846a34e434b
- MD5 29afbb4ba906ab75ad5dfa327497e3ab
- SHA1 f2be1fbb5f4fd60fbd5417048714a5cc72dc3f3c
- SHA512 751089634c5070f24a2fcdb3e558f865bcb422c6e28f11df84e415e9faa7c9eb0bed67d5ac4c1f6eebbb2f0b7646314c9d3896714eb6ce25b8c8ced68eee107e
- SSDEEP 49152:I6K5h7itRHs2pzKbUVUGeYVigknbNmtR0q3XxMGPgBoycnpMi:nyqr
- TLSH T128074680E7F95348F2F77F65EEBA90564836BE96EC29C75E0505050E0831A4C99BAF33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
- Size 5.2MB
- SHA256 a92fba6360ddc71779d8ec480f21d4959f5f6c10db24741e19c6ddb0d6ffe85e
- MD5 17a065d79416e6e09f1b96b236017d42
- SHA1 def1009f11aaf1b2db0a76131546b2e4068761b2
- SHA512 cb9f485e4227311620262d1bd2151ea961054c5a1403aea40f06ff565c9aad561f7a55205e190ed46c799b5891484bd261d1d7b974aa4ea65893909f26a061d2
- SSDEEP 98304:84ydZOjlb3GaE1COMOIFGOOOOOOOOOOOOqLOOOOOOOOOOa:vlC09GOOOOOOOOOOOOqLOOOOOOOOOOa
- TLSH T1A3463803F19680E9C06DD579875EA623B632F8840B3676DF66A00F1A2E79FE0673D705
- MD5 SHA1 SHA512 SSDEEP TLSH