Analysis
- user interaction
yes - max time kernel
11s - max time network
95s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 17:17
Static task
static1
Behavioral task
behavioral1
Sample
spotify-1-2-93-667-g7b5cc0ce.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
spotify-1-2-93-667-g7b5cc0ce.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
General
- Target spotify-1-2-93-667-g7b5cc0ce.exe
- Size 139.3MB
- Sample260925-vt32xsts3n
- SHA256 614741858a7def3fb21da385312fe7b114dd2873f6d79fb3d980a979af560ba0
- MD5 398113f9eb965edcff4aa119ebf62779
- SHA1 afa237d3a9df7f750ba770ba92534feb8cca5ec5
- SHA512 d7dae2c0a78133fdab343f6b130f7c6306d405827a0e9c0e14738af09f6d2df5561ca00f48f6a5668b7ee6fd074aa9ae24a7dc9ae4d2c75494950a8c005cb02b
- SSDEEP 3145728:3FU0/dQYMmxI7YjvmoatF0Xw2NErUbx7BslIhEt0DPibSe:3FU0REYbk4XwmEYYl50Tiue
- TLSH T1526833985A1CDAADE397CA7C5412C675E53438520AD1860606FF92F85F3BB3C786BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Executes dropped EXE 2 IoCs
pid Process 1088 Spotify.exe 2852 Spotify.exe - Loads dropped DLL 1 IoCs
pid Process 1088 Spotify.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2840 Spotify.exe - Modifies registry class 9 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.client\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png" spotify-1-2-93-667-g7b5cc0ce.exe Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.launcher\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png" spotify-1-2-93-667-g7b5cc0ce.exe Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.launcher\DisplayName = "Spotify Launcher" spotify-1-2-93-667-g7b5cc0ce.exe Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.launcher\CustomActivator = "{18A68F64-72DD-42CE-A75D-EDBDAC226F5D}" spotify-1-2-93-667-g7b5cc0ce.exe Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.client\DisplayName = "Spotify" spotify-1-2-93-667-g7b5cc0ce.exe Set value (str) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.client\CustomActivator = "{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}" spotify-1-2-93-667-g7b5cc0ce.exe Key created \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.launcher spotify-1-2-93-667-g7b5cc0ce.exe Key created \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId\Spotify.desktop.client spotify-1-2-93-667-g7b5cc0ce.exe Key created \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\AppUserModelId spotify-1-2-93-667-g7b5cc0ce.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 1732 wrote to memory of 1088 1732 spotify-1-2-93-667-g7b5cc0ce.exe 90 PID 1088 wrote to memory of 2852 1088 Spotify.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\spotify-1-2-93-667-g7b5cc0ce.exe"C:\Users\Admin\AppData\Local\Temp\spotify-1-2-93-667-g7b5cc0ce.exe"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1732 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeSpotify.exe /INSTALLCOMPLETE2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1088 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeC:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.93.667 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ffea63a5448,0x7ffea63a5454,0x7ffea63a54603⤵
- Executes dropped EXE
PID:2852
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2160,i,2891389260212794610,16702041290033321695,262144 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2440 --mojo-platform-channel-handle=2428 /prefetch:23⤵PID:2764
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=2472,i,9672229125356778377,8647662257980786036,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=2504 --mojo-platform-channel-handle=2460 /prefetch:113⤵
- System Time Discovery
PID:2840
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=2896,i,5093453594203457465,15746511497312599640,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3108 --mojo-platform-channel-handle=3100 /prefetch:133⤵PID:6004
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=6028,i,14481525479916365654,15245328864635971606,2097152 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=6040 --mojo-platform-channel-handle=6036 /prefetch:13⤵PID:764
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.93.667" --metrics-shmem-handle=7668,i,10665676833993234663,13415087433761654119,524288 --field-trial-handle=2432,i,5578989987763493312,16921698864473585460,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2436,i,9156510909060103731,18070722726437534986,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=7676 --mojo-platform-channel-handle=7672 /prefetch:143⤵PID:2268
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3380
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized1⤵PID:5448
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeC:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.93.667 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ffea63a5448,0x7ffea63a5454,0x7ffea63a54602⤵PID:5920
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵PID:1232
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 1747946fd8694366ed55e6cbb0b9a91069e5391f819ca8db01915aaeff8f24f2
- MD5 75a82f93c3a85d5ff6548099f335065e
- SHA1 fbd1006a9f34600199a3fee5813067842f77fae7
- SHA512 73052de8c817a8a6d5e76e5c296802bfd0460adb943dfb538bfee6e262f8dbe6bb16f6b019ec765e2474a07f6e2f4e6f6c8e774a4ce861353b0fe8cd53c64dfb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
- Size 72B
- SHA256 9e975738875c06c8c0869c26f86ed6e310d38446b29873383e60954851129d55
- MD5 5d509a8c6d5e8052f5a5af0e3c417052
- SHA1 4864d651bf743ce007669f5e0a29e5e98b37dbf9
- SHA512 97d003cd97be73be861815bfb1144ed3893fbcf4c927322b93c1ea8e5903f260592a4920ecc02c73f977156250c7b220f404b9a7c83dbc989181a79f02155fe5
- TLSH T181A0023545529002C78521B430595E72521548D826254769C1F440DCDD5599457118A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\Network Persistent State
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\Network Persistent State
- Size 2KB
- SHA256 58f3e9456e47218f3a715f193547838e07ad2893a579de1a8896197da5aba383
- MD5 75bcf247cb863d7d0af3203366eb594a
- SHA1 96fb9ab96e31cd14eff8d3b2281e8a1d133555b4
- SHA512 72b08f367b3fc3138172aa1b4478848346e9bac8c3de5ca2bf017cab6ef93fe5cd4ae0714031ab20b19bc23b5781e0661e290b3160165928b21aabe289a9ab6f
- TLSH T1B8416BE7C7D9862DC95156F4A7183E1BCE2E0A24433C3C2AC8E9BE1F67D1831E20055E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences
- Size 10KB
- SHA256 c6fd4611dbedca4f98d65e213aea5a455e68d741a4f78ad41d5e5791cb221498
- MD5 c700769ba1f5537e04b9503510c34a38
- SHA1 d3afb8f7c001e871a4c57f12d754d43471bd9145
- SHA512 271ea49f40e2cffa939d1ef0cab3b5eedcf8633496f6ac1a4c320fcc9ec1493588d4de8656830d271bc619987c59ac16d8bbb807a8103f927f27af96f3e6b6b1
- SSDEEP 192:zR+ZK81xv7q469GPHcb+WNVChCidCxGhSyJYJ+/yIsn2Kgw:zRanzysggO4w
- TLSH T13E22765EE914797B5DCAD22DF9247B52E3F5003228A46E88D6FC8A3C1AE76CD3113407
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Browser\Preferences~RFe5a2f5e.TMP
- Size 10KB
- SHA256 27e5e177dc02a4363a6e739296c4d211f91b414866dc90968a3a8a5031c55396
- MD5 65a49029314fe19c3cadfd086d337d48
- SHA1 9f19d9d3ea0f744380a0e74dd14f57e45848e1ad
- SHA512 5dbf0836dafc1173b9e6b465eb21a8bb478abecb6bdaa039874485b64318f540410cd2d1d6edf93cdfc00aab2aed3cf0a6c24faa5d84d12deb3a94b9a0f6d92d
- SSDEEP 192:zR+ZK81xv7p469GPHcb+WNVChCidCxGhSyJYJ+/yIsn2KgR:zRanztsggO4R
- TLSH T1BD22665EE914797B5DCAD22DF9217B52E3F9003228A46E88D6FC8A3C19E76CD3113417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State
- Size 922B
- SHA256 26c1f162adb8437885a4463521ca02b74a455d83af4ac14c75314ae8aa15c62c
- MD5 e3de7484468c9797bf42955bbedd204b
- SHA1 654dd522a27cacd368cebd865020db73a791b373
- SHA512 7ac3360d6d0ff6482d95693e912c3c1c4f4732da1f20b074fc9b1ca550b6d4cc3f0eb4fc8eb47dfa0cb18c6f25f0fa8c4f58408b23944fb5dc02e4f2605459a3
- TLSH T15A113AF7C7D4856E8A5142F497156F1BCE1E0614432C382689E8AF2B93E1872A114A5E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences
- Size 8KB
- SHA256 344ccfa87ec3685b58cb5da51fbe8fe26c9364b0373eaafc79c53e069d7723d6
- MD5 57b47c7b344d991a622113fd5c146f46
- SHA1 2e8352dc3f18404253fa8f5fe1bde5f5da1b29d3
- SHA512 1c87f6a509548beca6721da7ac38b70505c669e417bf8c007b070d6b4ef52490965a91a2fd7e886af8d4623546d92a68078570f12285b5d8bfc1f6c5073b96cf
- SSDEEP 192:zRCyB1M+/v7ZzI49GbHcb+WNObf+/yIsn2Kg5:zRCs1VXtlogG45
- TLSH T1AA02A62EAD24697F9CC6E259E9257B82E3F5103139943D48D7FCCA2C29E7ACC2127417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences~RFe5a2f5e.TMP
- Size 8KB
- SHA256 f4123a57f8dce5374ad4c706d66d01a23ea959f47eee07f8e9a39d0c5bd72de5
- MD5 7f68d3b5f39432ca24d6fdf5b422a177
- SHA1 a247e4e5a8854ac9f0a5d5d5f3536c9211c29ed4
- SHA512 bd6ffbe7cd76994d750548ce0136d5a1dfd28c49bef49ad1d2a95814f5fd6e9244c8f3e0a9a978212889ad2eeeecd285003e5dc371fa1da258ae4441bc507a1c
- SSDEEP 192:zRCyB1M+/v7Z9I49GbHcb+WNObf+/yIsn2Kg8:zRCs1VXtrogG48
- TLSH T10102972EAD24697F9CC6E259E9253B82E3F5103139943D48D7FC8A2C29E7ACC2137417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 6KB
- SHA256 83bb3329be655cbf2b0ed97b52b3e0cdbdb9245312e1a99d3df021e02139ec2e
- MD5 473e67fc97f641dcba3112212bafdffb
- SHA1 84c2adcc2e182362b0b4b96952629b8a95538192
- SHA512 98c058d71312be04a224a426fee73fdde832ce0d6f05f4cdfff75b200fad379ddbc248b193a997fcf1bb54c151a5a53efb05ddecdaacc8e918cdce64a98d8399
- SSDEEP 96:sWbJ6KffVK6v+Dotoh+DotoyN5NwDzB6jGyv1UiVkrp3HkO8wea:ptfVKrDUxDUBctz+U/EOh
- TLSH T1C4D1966DE956DE77ACEB87903601F586EB503215C5906EC488DA4D0F42DB5EF360383E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 3KB
- SHA256 59500d6292c80675f896d941f23c50b88c3b049488122dfb7dbcbdedbef7232c
- MD5 6d9a0d825ea11e7b7ab922a0a70b7891
- SHA1 9c21f78c260a8d6e57921a51d9950e122ee092e3
- SHA512 7769c7b3844366965dceb85399039ce881213d0a400633fef73b17a219486681e32077ba88a25c8c1b5e0b76c4faeebb295ea23b485c90e6018359ce5da8dcbf
- TLSH T1CA61C52D64689D7359BBD840B9023A43FBA82027A5607FD8E6FE4F1D16E72DD2343503
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State
- Size 6KB
- SHA256 ba41d3b99a15dee48bb3ccd99d848d76716fb1b0365bd786ca77193799b27df9
- MD5 745617bc5ac9638bff591257ccd175aa
- SHA1 6b58bb22318ba9f763fabc012eccc76cf025e345
- SHA512 29ab13bb91b62e8fb189a96ebb2098855bf2db22da7d78e8112f60ecab14341c78d750ea526f43095274c9c3a4eefb04b53b4178fa2ef1f887dab7724c24156b
- SSDEEP 96:sWbJ6KffVK6v+Dotoh+DotosN5NwDzB6jGyv1UiVkrp3HkOqwea:ptfVKrDUxDUJctz+U/EO7
- TLSH T16BD1856EE956CE77ACEB86903601F586EB503215C5906EC488DA0D0F42DB5EF364382E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\Local State~RFe59fe9a.TMP
- Size 1008B
- SHA256 64d29939f20cab0fa07f88cdbb0d6b1301f03652db72e22931ffbe7cc8c1ad50
- MD5 8f109bd955866d1885426a2369245ec7
- SHA1 a0207212e6c0c80ff6d6fa4b00250a48162bb4a9
- SHA512 10fc9de67a2249abdbbbf86485547dd725c430a4273a89db7c2587f84edb63711786b56f7b125dcbda0c3eee034a8e75ed2aa660f01bd07b807065281718ae0c
- TLSH T1D11194BA28506F707EA08E24170266232E27542B85911AC8B3DF172313F26C92303C30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
- Size 56B
- SHA256 a83380e924ecfec17059fad3baf4224a722518a75e4571ffd447d567f3f3a048
- MD5 4dcba27bec1d7fade92e3f91e5c96a34
- SHA1 9ba99ebaca1f29c914232650572009d38d82b5e6
- SHA512 58ba7e52dcaec6b11032778e08e6965c8152bfa3f57e5d7feb4049ab209f8848fe95ab150466689d3af68ccd3055079ff03d7a326e4ad5f8f0d001728817e861
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\extensions_crx_cache\9d921ad5-b2ce-472f-a12e-4cbe0058f571.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
- Size 16B
- SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
- MD5 206702161f94c5cd39fadd03f4014d98
- SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
- SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
- Size 3.9MB
- SHA256 3a0a62798e6113857bd5d265550e0f0cf41cc7515e5beb1713150d72f8d919c4
- MD5 cc67d20aa321ac505ca593d5b9d654d0
- SHA1 6e35479b8e52b31030278c4095f227a61de49dd5
- SHA512 594e6adffc0c5c522c5c5ab8b7e7ebec9fd0d035c6fcb43bc376160375774b8091aa7b5858d9a1624aa24f2f92469edcbd2dd112738313aac0ffb3d1b532771d
- SSDEEP 98304:p8IVIuXse9SQOuURfomiedaAKHZ9QSEHEvfVUx6Mggcz:p8Cpx9fYozHZ94HEvqgMk
- TLSH T1E31633FC82F81A46C16D2931E5E80F16F9561EE30991FF19F89892F32A463C78BB5474
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
- Size 4.5MB
- SHA256 67dfec67c30d8a439009896f5a800d652e10e27f3b3c27eedbb3e042a7105903
- MD5 23a4727b44d091f741087eac1941e73b
- SHA1 e14a6087aec318562d928a68baed23dd848b26e9
- SHA512 66b4fc1f6fffced7778701cd27bc0555e5d6fc9408c0f59c6c5e574be3dd3d2895c2d0bd8f1fe21c0cac495cd8261b16faf1227f2debd9812365ecbe8ab7a7ac
- SSDEEP 49152:VSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxq2:YuktcrfNlTyj5byqSV
- TLSH T1B8268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 40.0MB
- SHA256 cef6b4ef24cc7895a3c2323ba3d177480b913cad55ef5b6e9448c81697bab4db
- MD5 66a21fbb84ace2af21fec3a62379372f
- SHA1 8ced322b6f8b1b3d45e45f7f9f6a1ecae4cb1720
- SHA512 0ba43052e77fefdaab0bc56e716f5df39f1d03944ea0fddd0a4640cf822ff147eeecc24c28db0ed48195cb05ca55b4ab83ea97277898ccd58c1d6b008abe7656
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xFEflDZEE:xyma5/kcJ/s4TJTEflFEE
- TLSH T173978D9B72E400ACC0AEE1BACF17DC17E7B7744A4771A34F02A092625F67A60563F761
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 35.0MB
- SHA256 d94ace2222d2516fb56f92670b5f396744be008cd454caac34ad7e9b425c6c55
- MD5 b24cd7109190664cdb86aec9ec3743ed
- SHA1 e5cd217682a9b17d40e6e956b09030031a183783
- SHA512 97a73b4daaf9ecf916aa43ba682dbcab13b3ea9a9aa929414afc618bfc390442b383cc7673a13d6da4119640b12140894e25290c3e9654adaa47ee1b44d475da
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xf:xyma5/kcJ/s4TJp
- TLSH T138877DAB72E401ACC0FAD1BACF17DC17D7B7744A0732E65F02A092525F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 36.8MB
- SHA256 490b7cf01f74e54a1a9ce306f0be38914ca65c6dfb3e28912748c49b1a8ac113
- MD5 b9b74be4d6965d10cad9a49a0becd081
- SHA1 0d1692acb1dfcf405e83f6f146cb990b2d79729a
- SHA512 4fdb98f82a887ecb0c26b28310eccedcc42de789ee8012469df43de81db79d0969a9b29357ecc7f0cd191cca8bfe3fda57b503d13b1ad2f44d78d2e542a2473f
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xFEflDk:xyma5/kcJ/s4TJTEflg
- TLSH T113878DAB72E400ACC0EAD1BACF17DC17D7B7744A4772E35F02A092625F67A60563E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 34.5MB
- SHA256 ea4032de70b4d813536545712a0ac776a779c14e65f6a965f6e8e7fbb818647f
- MD5 6c6d5a4205f2d14ec8f220cc9f098101
- SHA1 acaa83f583abc35f18652a6cec5fc23fedbacf69
- SHA512 4278e250bf20bd8f33b9ed399db39fad6b688653bd0e91f637e2949b6479f34f5c64996cd7ce6dce95f56540c318a9653fe896a4df1da8cf26a3791f2870db7e
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn32:xyma5/kcJ/s4TJm
- TLSH T195877CAB72E401ACC0FAD1BACF17DC17D7B7744A0732E25F06A092525F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 34.8MB
- SHA256 dcb53ed2980f32b2803814611dc71fa6d891d6034e530deac3c1a91e9fef56f0
- MD5 a17952488cf578fb9b84fb323a77caa2
- SHA1 b3fe7d0902d40561dc80f3b2ca67d35a6c055b75
- SHA512 53a19a7e96630ef599ee65ed40df1ff4ec53a895013998016ce9127d7a51b9dcf08324594c6e90a32e5110776bdaeb44f85bec0dd94e3cee144b584723dea15d
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xF:xyma5/kcJ/s4TJ/
- TLSH T1DA877CAB72E401ACC0FAD1BACF17DC17D7B7744A0732E65F02A092525F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 35.6MB
- SHA256 6c1afacbb9b84956e2eb9185ddf3676b99d220243caf6f1f61f18117efe30914
- MD5 b2a2b4b0a40c49682352084920b3feb6
- SHA1 89bdc57812828175ddca6dfe51303f8f609f43bc
- SHA512 3df44d01c4a54af1c8d8ed8b4785a9fa5f9385ff965a3c52e9952edbf50438422ae9791a595456b223dd292f021fc295fd84f5fb40f9abc49d9bbfa30d33b107
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3x7:xyma5/kcJ/s4TJZ
- TLSH T1A2877DAB72E401ACC0FAD1BACF17DC17D7B7744A4732E25F02A092625F67A60563E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 34.7MB
- SHA256 100274367209eee558d24319c377d2ee160b4cd7a9bb22829a33d92dd63d9e9a
- MD5 1d408285e681b52c34f4d30b63bd5244
- SHA1 c2ef372e082d81442c87dd793968a5478cbd8884
- SHA512 d7afaf0c1d2e61e5741caeacf9e603e1917aeb682aa08d7399e8499a13d205d3a3834ed9a5af78bf26f525261c05c11e6de4aca76c9645e4fcffcb0c5f35d087
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xD:xyma5/kcJ/s4TJB
- TLSH T142877CAB72E401ACC0FAD1BACF17DC17D7B7744A0732E25F02A192525F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 34.4MB
- SHA256 876cb4895708b26d59b758aa27602ca9e4c0df9e3c2c512bebd130d2c6a6d41c
- MD5 5bf38094820cea9685108dceff770a64
- SHA1 2917d7bcba628a985aceceb69d596631453a588f
- SHA512 b5444ea555fae3e0ec56504855148d328c81c7f5aebb20eea625ea0d738661019012aac4af81749dc71e74814eb3538ab008691a6de31e9d830d186cd07293b1
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJnQ:xyma5/kcJ/s4TJQ
- TLSH T10F877CAB72E401ACC0FAD1BACF17DC17D7B7744A0732E25F06A092525F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 36.9MB
- SHA256 6e7b5ac0c8ee3cc18890d69b330aa976334c8b1df9efc17ebe452bb5ceb8ff62
- MD5 2cae2db4e6980f5d929f8052cf2cc5cb
- SHA1 9df76e845e62845e48f1d538076ed23d1fbb4123
- SHA512 7d85b25071cb01d1e2fed224292c81809654b302f37502b8afa6af1dc63ec46340bc6284d9a3720a6ede3a6827c29549479397023e18289ca9813851272b3a5b
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xFEflDy:xyma5/kcJ/s4TJTEfle
- TLSH T1B4878DAB72E401ACC0EAD1BACF13DC17D7B7744A4772E35F02A092625F67A60563E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
- Size 35.2MB
- SHA256 d96cfe1ee7422520548cecc5ea8b0b09c1ec89d81b50e9a4a18933539a42ae4d
- MD5 3804df90cb557b7b474f8b56405dbc49
- SHA1 1ae49689182b71405657f9e26cc98f7a18f65d9f
- SHA512 89ae61cabdc81a500bb89cc3f6eade901f303dae4d1795867e89f258309708f105f3c60be66c3a606bd81d0d623cf659f3d1659046d449647f4f1a95609ed061
- SSDEEP 393216:Jaayyp5MJf5mk55/kcJ/EnnNKvuM0Rtd3VgK3IrJn3xm:xyma5/kcJ/s4TJQ
- TLSH T15A877DAB71E401ACC0FAD1BACF17DC17D7B7744A4732E25F02A092625F67A60563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
- Size 2.8MB
- SHA256 3b926bb42ae00036b56f5bc67615f4b7f967167ab2b92afe22be095d86496fd2
- MD5 4ae0616f4b89939f0a761ba2d40587d3
- SHA1 652ef64d54b81b1f59314f47570f72d6b6bff503
- SHA512 067deec1dde3e2c9d25e612a81ff6526fe730b9bfb8c7bb8e0888b53dca29c52a756d92bb25b5a9e351a41f8c09a8e37f71d582a246603fea4baaaaba47cb024
- SSDEEP 49152:iHYTMT79ilVoOwsaZigGr9yAeARiTEYiyJjh8Xi6D3cEL8+dil:iHYg8xwfGrUA9Ncnas8jdc
- TLSH T121D57B13F29901D8C01DD178974A9232FA61BC454B35B6DF0B90B7622FBAEE46B3D724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
- Size 705KB
- SHA256 2c7dd3dc856c0389e56690e6c1bd3c509be950b95831972d5b4a78422cc14a3b
- MD5 0321d6c44a6041910208ce3891727842
- SHA1 42e8935bd94f0fa3fd8611fc84e25a06e8ba82ed
- SHA512 6c9348ed4d50fb2503012b80c0dc8f4cf07d00d2ff857fff8c102266533e65befc6535998f9497fe414cd427dfaf0ff3e5cd1b586addba236b3794768e3d476c
- SSDEEP 12288:bI3H1fJwhjzgsz5B0GDJQrnKs8SNP+QSs8ilSTe+gnSzm5dVYJblIt6kjKQCrC:U3VBE7zEEmPL8bTe+gnSzm5d2bc6kGQt
- TLSH T1FCE412E77374AC7DEE9B1277826505B0FC371A681B82020A179BF8796913B48D8C93D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
- Size 1.2MB
- SHA256 b65200138ef17d5a462da4f11ed93e98a779efa8260454a6d4266205ebbd4caf
- MD5 d995543b367f8675ba74b90f42790175
- SHA1 ae7f07096d74d1565929fffbf1a9711a08fc74e1
- SHA512 99018c2cd0685bcfc6de8d08a649515b606982f56f1dced3b5304c7358e74bb463aa89795752580abff98b288865b49720940f8f0707a5f2527457edda968685
- SSDEEP 24576:i3zB09p2zLmmibkFR8+mZi5r8BWhQumeMRvQt93dyQwuSXAkpbaUGQ74:i3y23mNbkFRJmQ58khQRT1QPtauSXAkA
- TLSH T19E4522D7A370DC7DDD530BB7929B40F4FD7A106B0AB2140A0627BD7A39257889AC6783
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
- Size 2.4MB
- SHA256 f7c2e27bcdcda6092343664a604d7ab36682ca6f414ada54e7460d3d8075ffb4
- MD5 063ffcbab5157b200dca0572d1b88fa6
- SHA1 68d375fa027be4ccd4d63e95a9543674249ddaf9
- SHA512 e3cfea905d0f20ddfa52c92154c95cbe7dd93501bf20b816f41d4270cc18cbfb0d0785ad3af4585a165288c3fed294d38cb8790372b9603fa912d5299d3c69a7
- SSDEEP 49152:/LOG2qDuB7RIo63ZBZY9iSD2kT2McYcNy5l1M:/qG2qe6JBKDtXmKjM
- TLSH T181C56B13F2D901E8C05DD1788B5B9632EAA1BC460B35B6EF0A9077561E7AFE4673D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
- Size 632B
- SHA256 9ad1e2c216c3c92a9f376a9b39148cc763b87e4f885d6b3cd47b25c9954caf52
- MD5 41c488506e0828ad4b89524cbe4f813a
- SHA1 ad22c5bc32a296b91adc3ac2b6a16d8bcea2ea78
- SHA512 3cffbf3d75dd23a2db744933fa2089639cf36ccfac6c81294a63e755e0df6008554bc2f83ffc0eda51885bfeb24562e8b5d192e2cefc64267667509c18d660ab
- TLSH T14FF02DFF59D0657990F10BA1D03C63107CB205951B2B805846631F993B48F6DCA5DAB7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
- Size 10.3MB
- SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
- MD5 5bfd3eefca4b5ef2d1a869396390a7de
- SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
- SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
- SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
- TLSH T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
- Size 504KB
- SHA256 f43b0edb510b4d7ba50b04242ff4f97a79c030c4b9978483b25171dffa3f868f
- MD5 dced19feba5fa94f956070a91c5229f0
- SHA1 afab9916b02500ae48c9144f2d3eb39dd4474c22
- SHA512 847019bbc64b3c82468d06a5b7b8af2d8978664f53bd02265cde0a3d76430bb0ae8ac8053db9e0612261af587baf3389aec7a73a1fc2d1c7376f8f4382e4b341
- SSDEEP 6144:RF1o4DAf5s1KStUkNbhk7Ak7KhPCcgoF0NKzdgbsQr7rVGCXox5:71o405CtUkBZk7K9CcgG0NWd/QDVGt5
- TLSH T11EB48E15B3E94AACE07AC134CA438547EB7178460B61F6DF02E0A2792F77BE45B7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
- Size 7.5MB
- SHA256 96d95fdb0e7a5540f4653dbeb4432c862de0644e46b9211a5122f36887e2ea2c
- MD5 079bae06411aa3d1d4328b364aa9e5fd
- SHA1 c70e47f6f82925e06c236cb9f76592a568516aad
- SHA512 adfe1c14bd760199a2277f2c3f96af9aeb132426ea4bcb405fefc638fd84c7e52e93940050653a4e6a6a4ce6ed307360480671da389a48c30c72427aae60e0e6
- SSDEEP 49152:ctvLjzlN4kFextqcusm4nHcpOjwrMQOT6n1SSCOQESgswJYgZc+5GTSpWy4EWT5N:aWusNpjgKle2S+E8Nkpp0ve9fPzFm
- TLSH T1DF867C13F69240DDC01DE2B8975B9223F778B8450764B2CF2A5453162FBAFE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
- Size 577KB
- SHA256 76572fbc138ae74d2f2ecdb3dc8924d54f92745db7ee8eb8e8ad7dc4eb576825
- MD5 2a1964ff31c7edff17f4c74d26fce378
- SHA1 2c66f52ac23828ec6a18a6720ebfcb275482edcb
- SHA512 fbb19f906ab8f61461c8be80d53a7cadddfe81524918171c0bfab45f9cec2f5c045ff7ff864858f5c087d4b05c585ba58dfdb7565302605efc524f388c241ba0
- SSDEEP 6144:WpcHQYHQbmpKwey1WMmHfYOMg/jSxMP9sQqblfaYQhp1BPOjnng98//gwb:wwQKAGMDHfdgM6Qqbgaj+wb
- TLSH T117C42B1FF744122A05A352A27F099562FF32D06CA35112663CBD812C3376B6693BB7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
- Size 16KB
- SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
- MD5 8ce43bf0bee69290545738ae472bd5dd
- SHA1 bbc36343250fa8bb2122c8af9e021fc80c032a0b
- SHA512 67825fdb6c0381b7e35c73221caf37374157c1333388d0d20685f4d732340f7fc04faba29ae266fcaa921fff2694b5f8ca0ba24fbbdce2146189924e354df7a5
- SSDEEP 384:5rg5RkIUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/neqA9oz+EFRUeLq4+lLbK74Tdu/:kgOXqEXqP
- TLSH T1DC72B89F1B21CA38E637477F6A5E3125EB3B805C4F91953419BBA44823C639603F71A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
- Size 16KB
- SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
- MD5 d41d181d619aef4a1af14bcd6ad2fc1c
- SHA1 05ea268a59c887a92387a2ad2925285901bba1ba
- SHA512 b2ed7c0c97672411266ef55cfed4e98a7d812e85a20706140c8ea8c566677ed9bdcfaac7d0656496e34db5a7a50e0c9e810fe9a18c2039630745ce617513b605
- SSDEEP 384:pFTaUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/na5k+0SyIqLvsZXPuD:LxOXq+LBDXPuD
- TLSH T15E72175B1932CE38D5378B7E5B9F3624E63B612C5ED164342BEFB41423C636A16E2053
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\prefs
- Size 154B
- SHA256 e5d67607b8f78376554f2d62731b5a846dc21f1e528935d6b8678e774307d127
- MD5 b887a3cae88688643dd609a1270de096
- SHA1 61d5b1ac59fa72f2969bb100cdc6a2fe2a57d9bc
- SHA512 f5436117cbdc710605a17a604fe0d099600bba26d0d4f32c30799f3cbc2a794dbe8779f91bdac628c6fbbd6e342e321cf2aaa5e963ed1a495ec799db0eb57193
- TLSH T1FFC08C99A003EB309C9006DDA61672408070308DB4CE13184E2302180D8E72C6A21362
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
- Size 17.8MB
- SHA256 e3a6200122f362e77bee9418fec7469202c81852807f7dd70b021ed600374215
- MD5 c6c9a3d440e436b8c28867f3c3955ce9
- SHA1 208847cb98181e6ba434dd5ec17d686824604946
- SHA512 2e1d53d773f57cf8c311674d60615602670d44af7a7545c60172ebbd47d6bb32e382c4cc91a5394fc1a51dab4b654be822f81f1ea963ec1176624b0bea6a6f1a
- SSDEEP 393216:pqX9UazcYdpnzyXm++SSSCZMwh56qAgbITfTK3l76TmkrqjFWBm0iw+X:pqtJzcYnzoN+wCW4AAITG3lVkMgmeI
- TLSH T10A17124BA758562BCE3F07B74652563F373091197F835307209283281C6A7FBAD8DE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
- Size 16.5MB
- SHA256 cd98f7abc00a5ceed8e469d214eb3720c37bc6b89fdd1c15068e0788fbcb57d7
- MD5 3eae2436f337b21b0db931a33f00eb20
- SHA1 8473e335db8c4be55db8cac57605270654a939b3
- SHA512 9529dedc4fdf681840897d7590eaa7cae10f8a41048daafa4719e8755ab0a802f4f10b97953d01603ca17a170c70110db13ce9a48a5b1c8ca3da301af08d81aa
- SSDEEP 49152:lPK4h4NBgMkdzojU25zTPVigZn+fDNGKqrDdWJIlyAk0TH:BIlyPQH
- TLSH T147074680E7F95348F2F77F65EEBA90564836BE96ED29C75E0405050E0831A4C99BAF33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
- Size 5.2MB
- SHA256 d5ec433bd5d74a2da0070f87951547b13f371ed624c5502522834709015d0a2b
- MD5 489aafba97063499ba51fc4862af4f6a
- SHA1 f233b8db93f4a5348e04065a4ebe6e5e3a67f930
- SHA512 a42ef36d8acc252f2dc0603f00cbea85fbfb2a63fdfdb32c2e18d99371f7d27104d3e101dfd2c5e8406630304f712c0cd3ca206155505da418ab0dc82fd491d7
- SSDEEP 98304:m4ydZOjlb3GaE1COMOIFGOOOOOOOOOOOOqLOOOOOOOOOOM:FlC09GOOOOOOOOOOOOqLOOOOOOOOOOM
- TLSH T1AD463803F19680E9C06DD579875EA623B632F8840B3676DF66A00F1A2E79FE0673D705
- MD5 SHA1 SHA512 SSDEEP TLSH