Analysis

  • user interaction
    yes
  • max time kernel
    11s
  • max time network
    95s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 17:17

General

  • Target
    spotify-1-2-93-667-g7b5cc0ce.exe
  • Size 139.3MB
  • Sample260925-vt32xsts3n
  • SHA256 614741858a7def3fb21da385312fe7b114dd2873f6d79fb3d980a979af560ba0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Modifies registry class 9 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\spotify-1-2-93-667-g7b5cc0ce.exe
    "C:\Users\Admin\AppData\Local\Temp\spotify-1-2-93-667-g7b5cc0ce.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      Spotify.exe /INSTALLCOMPLETE
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1088
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.93.667 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ffea63a5448,0x7ffea63a5454,0x7ffea63a5460
        3⤵
        • Executes dropped EXE
        PID:2852
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2160,i,2891389260212794610,16702041290033321695,262144 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2440 --mojo-platform-channel-handle=2428 /prefetch:2
        3⤵
          PID:2764
        • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=2472,i,9672229125356778377,8647662257980786036,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=2504 --mojo-platform-channel-handle=2460 /prefetch:11
          3⤵
          • System Time Discovery
          PID:2840
        • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=2896,i,5093453594203457465,15746511497312599640,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3108 --mojo-platform-channel-handle=3100 /prefetch:13
          3⤵
            PID:6004
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=6028,i,14481525479916365654,15245328864635971606,2097152 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=6040 --mojo-platform-channel-handle=6036 /prefetch:1
            3⤵
              PID:764
            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
              "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=7668,i,10665676833993234663,13415087433761654119,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=7676 --mojo-platform-channel-handle=7672 /prefetch:14
              3⤵
                PID:2268
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
            1⤵
              PID:3380
            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
              "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized
              1⤵
                PID:5448
                • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                  C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.93.667 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ffea63a5448,0x7ffea63a5454,0x7ffea63a5460
                  2⤵
                    PID:5920
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                  1⤵
                    PID:1232

                  Network

                        MITRE ATT&CK Enterprise v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        index

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index
                        • Size 24B
                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                        • MD5 SHA1 SHA512

                        the-real-index

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
                        • Size 48B
                        • SHA256 1747946fd8694366ed55e6cbb0b9a91069e5391f819ca8db01915aaeff8f24f2
                        • MD5 SHA1 SHA512

                        the-real-index

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
                        • Size 72B
                        • SHA256 9e975738875c06c8c0869c26f86ed6e310d38446b29873383e60954851129d55
                        • MD5 SHA1 SHA512 TLSH

                        data_0

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_0
                        • Size 8KB
                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                        • MD5 SHA1 SHA512 SSDEEP

                        data_1

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_1
                        • Size 264KB
                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                        • MD5 SHA1 SHA512 SSDEEP

                        data_2

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_2
                        • Size 8KB
                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                        • MD5 SHA1 SHA512 SSDEEP

                        data_3

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_3
                        • Size 8KB
                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                        • MD5 SHA1 SHA512 SSDEEP

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\Network Persistent State
                        • Size 59B
                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                        • MD5 SHA1 SHA512 TLSH

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\Network Persistent State
                        • Size 2KB
                        • SHA256 58f3e9456e47218f3a715f193547838e07ad2893a579de1a8896197da5aba383
                        • MD5 SHA1 SHA512 TLSH

                        SCT Auditing Pending Reports

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\SCT Auditing Pending Reports
                        • Size 2B
                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                        • MD5 SHA1 SHA512

                        Preferences

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences
                        • Size 10KB
                        • SHA256 c6fd4611dbedca4f98d65e213aea5a455e68d741a4f78ad41d5e5791cb221498
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Preferences~RFe5a2f5e.TMP

                        • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences~RFe5a2f5e.TMP
                        • Size 10KB
                        • SHA256 27e5e177dc02a4363a6e739296c4d211f91b414866dc90968a3a8a5031c55396
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        MANIFEST-000001

                        • Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
                        • Size 41B
                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                        • MD5 SHA1 SHA512

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State
                        • Size 922B
                        • SHA256 26c1f162adb8437885a4463521ca02b74a455d83af4ac14c75314ae8aa15c62c
                        • MD5 SHA1 SHA512 TLSH

                        Preferences

                        • Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences
                        • Size 8KB
                        • SHA256 344ccfa87ec3685b58cb5da51fbe8fe26c9364b0373eaafc79c53e069d7723d6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Preferences~RFe5a2f5e.TMP

                        • Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences~RFe5a2f5e.TMP
                        • Size 8KB
                        • SHA256 f4123a57f8dce5374ad4c706d66d01a23ea959f47eee07f8e9a39d0c5bd72de5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        CURRENT

                        • Path C:\Users\Admin\AppData\Local\Spotify\Default\Sync Data\LevelDB\CURRENT
                        • Size 16B
                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                        • MD5 SHA1 SHA512

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Local State
                        • Size 6KB
                        • SHA256 83bb3329be655cbf2b0ed97b52b3e0cdbdb9245312e1a99d3df021e02139ec2e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Local State
                        • Size 3KB
                        • SHA256 59500d6292c80675f896d941f23c50b88c3b049488122dfb7dbcbdedbef7232c
                        • MD5 SHA1 SHA512 TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Spotify\Local State
                        • Size 6KB
                        • SHA256 ba41d3b99a15dee48bb3ccd99d848d76716fb1b0365bd786ca77193799b27df9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Local State~RFe59fe9a.TMP

                        • Path C:\Users\Admin\AppData\Local\Spotify\Local State~RFe59fe9a.TMP
                        • Size 1008B
                        • SHA256 64d29939f20cab0fa07f88cdbb0d6b1301f03652db72e22931ffbe7cc8c1ad50
                        • MD5 SHA1 SHA512 TLSH

                        settings.dat

                        • Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
                        • Size 56B
                        • SHA256 a83380e924ecfec17059fad3baf4224a722518a75e4571ffd447d567f3f3a048
                        • MD5 SHA1 SHA512

                        9d921ad5-b2ce-472f-a12e-4cbe0058f571.tmp

                        • Path C:\Users\Admin\AppData\Local\Spotify\extensions_crx_cache\9d921ad5-b2ce-472f-a12e-4cbe0058f571.tmp
                        • Size 13B
                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                        • MD5 SHA1 SHA512

                        000002.dbtmp

                        • Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
                        • Size 16B
                        • SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
                        • MD5 SHA1 SHA512

                        login.spa

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
                        • Size 3.9MB
                        • SHA256 3a0a62798e6113857bd5d265550e0f0cf41cc7515e5beb1713150d72f8d919c4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        D3DCompiler_47.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
                        • Size 4.5MB
                        • SHA256 67dfec67c30d8a439009896f5a800d652e10e27f3b3c27eedbb3e042a7105903
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 40.0MB
                        • SHA256 cef6b4ef24cc7895a3c2323ba3d177480b913cad55ef5b6e9448c81697bab4db
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 35.0MB
                        • SHA256 d94ace2222d2516fb56f92670b5f396744be008cd454caac34ad7e9b425c6c55
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 36.8MB
                        • SHA256 490b7cf01f74e54a1a9ce306f0be38914ca65c6dfb3e28912748c49b1a8ac113
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 34.5MB
                        • SHA256 ea4032de70b4d813536545712a0ac776a779c14e65f6a965f6e8e7fbb818647f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 34.8MB
                        • SHA256 dcb53ed2980f32b2803814611dc71fa6d891d6034e530deac3c1a91e9fef56f0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 35.6MB
                        • SHA256 6c1afacbb9b84956e2eb9185ddf3676b99d220243caf6f1f61f18117efe30914
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 34.7MB
                        • SHA256 100274367209eee558d24319c377d2ee160b4cd7a9bb22829a33d92dd63d9e9a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 34.4MB
                        • SHA256 876cb4895708b26d59b758aa27602ca9e4c0df9e3c2c512bebd130d2c6a6d41c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 36.9MB
                        • SHA256 6e7b5ac0c8ee3cc18890d69b330aa976334c8b1df9efc17ebe452bb5ceb8ff62
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                        • Size 35.2MB
                        • SHA256 d96cfe1ee7422520548cecc5ea8b0b09c1ec89d81b50e9a4a18933539a42ae4d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Spotify.exe

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                        • Size 2.8MB
                        • SHA256 3b926bb42ae00036b56f5bc67615f4b7f967167ab2b92afe22be095d86496fd2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        chrome_100_percent.pak

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
                        • Size 705KB
                        • SHA256 2c7dd3dc856c0389e56690e6c1bd3c509be950b95831972d5b4a78422cc14a3b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        chrome_200_percent.pak

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
                        • Size 1.2MB
                        • SHA256 b65200138ef17d5a462da4f11ed93e98a779efa8260454a6d4266205ebbd4caf
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        chrome_elf.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
                        • Size 2.4MB
                        • SHA256 f7c2e27bcdcda6092343664a604d7ab36682ca6f414ada54e7460d3d8075ffb4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        crash_reporter.cfg

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
                        • Size 632B
                        • SHA256 9ad1e2c216c3c92a9f376a9b39148cc763b87e4f885d6b3cd47b25c9954caf52
                        • MD5 SHA1 SHA512 TLSH

                        icudtl.dat

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
                        • Size 10.3MB
                        • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        libEGL.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
                        • Size 504KB
                        • SHA256 f43b0edb510b4d7ba50b04242ff4f97a79c030c4b9978483b25171dffa3f868f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        libglesv2.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
                        • Size 7.5MB
                        • SHA256 96d95fdb0e7a5540f4653dbeb4432c862de0644e46b9211a5122f36887e2ea2c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        en-US.pak

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
                        • Size 577KB
                        • SHA256 76572fbc138ae74d2f2ecdb3dc8924d54f92745db7ee8eb8e8ad7dc4eb576825
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        en.mo

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
                        • Size 16KB
                        • SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        zh-Hant.mo

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
                        • Size 16KB
                        • SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\prefs
                        • Size 154B
                        • SHA256 e5d67607b8f78376554f2d62731b5a846dc21f1e528935d6b8678e774307d127
                        • MD5 SHA1 SHA512 TLSH

                        resources.pak

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
                        • Size 17.8MB
                        • SHA256 e3a6200122f362e77bee9418fec7469202c81852807f7dd70b021ed600374215
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        v8_context_snapshot.bin

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
                        • Size 16.5MB
                        • SHA256 cd98f7abc00a5ceed8e469d214eb3720c37bc6b89fdd1c15068e0788fbcb57d7
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        vk_swiftshader.dll

                        • Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
                        • Size 5.2MB
                        • SHA256 d5ec433bd5d74a2da0070f87951547b13f371ed624c5502522834709015d0a2b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        memory/1088-649-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/1088-709-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/1088-330-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/1088-329-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/1088-599-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/1088-972-0x0000015BE3130000-0x0000015BE5976000-memory.dmp

                        memory/2268-669-0x000002315AF10000-0x000002315D756000-memory.dmp

                        memory/2840-640-0x000002555DE60000-0x00000255606A6000-memory.dmp

                        memory/2840-934-0x000002555DE60000-0x00000255606A6000-memory.dmp

                        memory/5448-559-0x00000160903B0000-0x0000016092BF6000-memory.dmp

                        memory/6004-391-0x00007FFEC71A0000-0x00007FFEC71A1000-memory.dmp

                        memory/6004-390-0x00007FFEC8640000-0x00007FFEC8641000-memory.dmp