Overview

overview

10

Static

static

3

2026-10-10...yn.exe

windows10-2004-x64

10

2026-10-10...yn.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/10/2026, 04:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
  • Size 1.2MB
  • Sample261011-e47vvse13t
  • SHA256 660d1a67ac5bde24476d017146207a9900a9f36d2ef6cd126614afe3c82fdcc5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspyware

Malware Config

Signatures

  • Modifies visibility of hidden/system files in Explorer 2 TTPs 2 IoCs
    defense_evasion
  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 26 IoCs
  • Loads dropped DLL 58 IoCs
  • Adds Run key to start application 2 TTPs 5 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 21 IoCs
    adwarespyware
  • Modifies registry class 38 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 25 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6020
    • \??\c:\users\admin\appdata\local\temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe 
      c:\users\admin\appdata\local\temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe 
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of WriteProcessMemory
      PID:5964
      • C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe
        SpWebInst0.exe /webinstall
        3⤵
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2956
        • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          Spotify.exe /INSTALLCOMPLETE
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Adds Run key to start application
          • Reads the TCP/IP host and domain name from the registry
          • Checks processor information in registry
          • Enumerates system info in registry
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:2060
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.3.4.258 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffad722e6a0,0x7ffad722e6b0,0x7ffad722e6c0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4348
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=2524,i,18357971870365372556,33556283636955574,524288 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=3120 --mojo-platform-channel-handle=3116 /prefetch:3
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Time Discovery
            PID:5464
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=2220,i,11164973732890433311,5100538457163485578,262144 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2972 --mojo-platform-channel-handle=2960 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3932
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=2776,i,4179834132452671594,6341205302138668268,524288 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3136 --mojo-platform-channel-handle=3128 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3836
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --top-chrome-webui --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=4088,i,7962562739829300209,5245903937431533418,2097152 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=6060 --mojo-platform-channel-handle=6072 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4212
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=6552,i,10518542636670889938,1566523343724527131,2097152 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=6584 --mojo-platform-channel-handle=6580 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1940
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=7492,i,13180178909251486192,15805996326713337715,524288 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=7500 --mojo-platform-channel-handle=7496 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            PID:1772
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=3120,i,13416501828932892704,16265490853345205440,524288 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708994745248135 --enable-logging=handle --log-file=5260 --mojo-platform-channel-handle=3132 /prefetch:3
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Time Discovery
            PID:4696
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --metrics-shmem-handle=2960,i,6650963624196978017,4976421901534140628,262144 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708995682289984 --enable-logging=handle --log-file=7740 --mojo-platform-channel-handle=7768 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Network Service Discovery
            PID:5668
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=3140,i,2037779226807992517,17100827589994459729,524288 --field-trial-handle=2964,i,11611721410888882745,17962728676363257866,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2968,i,9239537550595391901,13096615464483090877,4 --trace-process-track-uuid=3190708996619331833 --enable-logging=handle --log-file=5620 --mojo-platform-channel-handle=3568 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4972
    • C:\Windows\Resources\Themes\icsys.icn.exe
      C:\Windows\Resources\Themes\icsys.icn.exe
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3508
      • \??\c:\windows\resources\themes\explorer.exe
        c:\windows\resources\themes\explorer.exe
        3⤵
        • Modifies visibility of hidden/system files in Explorer
        • Executes dropped EXE
        • Adds Run key to start application
        • Drops file in System32 directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1160
        • \??\c:\windows\resources\spoolsv.exe
          c:\windows\resources\spoolsv.exe SE
          4⤵
          • Executes dropped EXE
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:5576
          • \??\c:\windows\resources\svchost.exe
            c:\windows\resources\svchost.exe
            5⤵
            • Modifies visibility of hidden/system files in Explorer
            • Executes dropped EXE
            • Adds Run key to start application
            • Drops file in System32 directory
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:5728
            • \??\c:\windows\resources\spoolsv.exe
              c:\windows\resources\spoolsv.exe PR
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of SetWindowsHookEx
              PID:5800
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:384
    • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5908
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.3.4.258 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ffad722e6a0,0x7ffad722e6b0,0x7ffad722e6c0
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4992
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=2324,i,13496565794459007396,851708379253660239,262144 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2596 --mojo-platform-channel-handle=2584 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4956
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=2848,i,14984302305237142932,15994710989339538542,524288 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=3164 --mojo-platform-channel-handle=3160 /prefetch:3
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Time Discovery
        PID:3784
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=3016,i,14186524191843931186,7920672728217585356,524288 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3180 --mojo-platform-channel-handle=3168 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:552
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --top-chrome-webui --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1791692518443841 --launch-time-ticks=625666805 --metrics-shmem-handle=5944,i,14113503146307786713,10931297391800524626,2097152 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=5980 --mojo-platform-channel-handle=5976 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5824
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1791692518443841 --launch-time-ticks=625754575 --metrics-shmem-handle=6432,i,7963828917724032844,4917641837166651171,2097152 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=6436 --mojo-platform-channel-handle=6452 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4704
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=7400,i,12380700433803679597,626498472559395426,524288 --field-trial-handle=2588,i,14519531306127208056,2146185979303302848,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2592,i,11974521758417068330,756745406395017353,4 --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=7388 --mojo-platform-channel-handle=7384 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        PID:3052

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Persistence

          Boot or Logon Autostart Execution

          1
          T1547

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          1
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Privilege Escalation

          Boot or Logon Autostart Execution

          1
          T1547

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Event Triggered Execution

          1
          T1546

          Component Object Model Hijacking

          1
          T1546.015

          Defense Evasion

          Hide Artifacts

          1
          T1564

          Hidden Files and Directories

          1
          T1564.001

          Modify Registry

          3
          T1112

          Credential Access

          Discovery

          Network Service Discovery

          1
          T1046

          Query Registry

          4
          T1012

          System Information Discovery

          4
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          System Network Configuration Discovery

          1
          T1016

          System Time Discovery

          1
          T1124

          Lateral Movement

          Collection

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          1c15e565-b313-4539-afa7-dc8f1e5a8b35.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\1c15e565-b313-4539-afa7-dc8f1e5a8b35.tmp
          • Size 3KB
          • SHA256 28ff61009620e6207e631643212274a2e90e319e5e384832e6061f6ae4d760b3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          6c220e30-5dab-4e3e-9db3-c376f6f17d7a.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\6c220e30-5dab-4e3e-9db3-c376f6f17d7a.tmp
          • Size 3KB
          • SHA256 9c510e110551fe033dd4ef6281dd16d50d14f77cfac245b993fb35fd9dad27e7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          45d8ad7c-09eb-411c-aafe-aea36b168f1c.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\45d8ad7c-09eb-411c-aafe-aea36b168f1c.tmp
          • Size 414B
          • SHA256 c7cdae430b7499f97bed8abe9ca853f06af5d9bc15fcca0611402cae07d8590c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          51f90572-8fa3-4be8-b018-799f9ef1888b.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\51f90572-8fa3-4be8-b018-799f9ef1888b.tmp
          • Size 7KB
          • SHA256 75e88d55cb7983197e73bf83d2fd5e16fe76420017e275e71b133a8175eccf48
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          snapshot-new.baf
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Cache\No_Vary_Search\snapshot-new.baf
          • Size 20B
          • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
          • MD5 SHA1 SHA512
          Submit Download

          temp-index
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\temp-index
          • Size 72B
          • SHA256 07c1b74acf9471e6fd58bfbe9ca6a9c520ab828da50f0b66480f2e9e5c6e329c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          the-real-index
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
          • Size 72B
          • SHA256 f728ecf6e2e4956a5e9c716689d5bf1f965e275482769b2978a63feacd1f2c88
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          todelete_58b905e6bf811f81
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\todelete_58b905e6bf811f81
          • Size 48B
          • SHA256 01b0362b3bb83ce1d30a31424a35f18d1a11c5541a7588a49d5e38c8915156b6
          • MD5 SHA1 SHA512
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnGraphiteCache\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\GPUCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          aac01ce6-e6ce-4df1-b345-7ba29381a514.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\aac01ce6-e6ce-4df1-b345-7ba29381a514.tmp
          • Size 10KB
          • SHA256 15e7bb749b00ea62efbd08f224ddd1db770ba378e7b56438b65854bfb06a75fb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          f24f46e3-126d-4bad-8ddb-a91650420010.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\f24f46e3-126d-4bad-8ddb-a91650420010.tmp
          • Size 10KB
          • SHA256 bbca6f5cf19d2ca6a2f5f76f4fe90666fb4978270e7438aa43910ee5c7b500fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          171f2b38-b924-4ec8-b4b4-c18439b8ae0e.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\171f2b38-b924-4ec8-b4b4-c18439b8ae0e.tmp
          • Size 84B
          • SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          7b42d388-0e7a-49cc-b978-1b11233a37ac.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\7b42d388-0e7a-49cc-b978-1b11233a37ac.tmp
          • Size 414B
          • SHA256 81c09bd4b315e9e22a4c9d20f33a36485178ff990602ed27ed43621a4fe41b05
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          temp-index
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Code Cache\js\index-dir\temp-index
          • Size 48B
          • SHA256 29a84aa4497c77f22bd27413bb226e223e6b0bce406254bb3963467068a72297
          • MD5 SHA1 SHA512
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\Network Persistent State
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          SCT Auditing Pending Reports
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512
          Submit Download

          index
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Shared Dictionary\cache\index
          • Size 24B
          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
          • MD5 SHA1 SHA512
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Sync Data\LevelDB\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          ad2f7518-33e8-46a5-9c1f-f5bccce3320d.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\ad2f7518-33e8-46a5-9c1f-f5bccce3320d.tmp
          • Size 7KB
          • SHA256 1977ce507da29385cfb5f102541434c57d8f86fff43c05d7845a75f08111db0e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b1a88bbb-7a47-4aa7-b39f-97aacba0ae33.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\b1a88bbb-7a47-4aa7-b39f-97aacba0ae33.tmp
          • Size 9KB
          • SHA256 8513c23959f8113ba036949286b1da5c0a083cfcf0977e174a534390f9c5c840
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b886a7c9-14e5-4f15-9880-8de20f601195.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\Default\b886a7c9-14e5-4f15-9880-8de20f601195.tmp
          • Size 6B
          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
          • MD5 SHA1 SHA512
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Local\Spotify\GrShaderCache\data_1
          • Size 264KB
          • SHA256 3b653f040795971aed7c8d565889a953330f9d9277042b2ef926e5b686d10141
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Local State
          • Path C:\Users\Admin\AppData\Local\Spotify\Local State
          • Size 917B
          • SHA256 ef767bfdb0f3abfb396fc0d4992e90af291b82acde17c059fafa1945192c0cad
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          settings.dat
          • Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
          • Size 56B
          • SHA256 1e0116fd09af63e4ece1e58df10c3852129fb88bf2bc00d80e71b2a5c3115060
          • MD5 SHA1 SHA512
          Submit Download

          9a6960c2-6412-4173-b492-146ad1227ee0.tmp
          • Path C:\Users\Admin\AppData\Local\Spotify\extensions_crx_cache\9a6960c2-6412-4173-b492-146ad1227ee0.tmp
          • Size 13B
          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
          • MD5 SHA1 SHA512
          Submit Download

          000002.dbtmp
          • Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
          • Size 16B
          • SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
          • MD5 SHA1 SHA512
          Submit Download

          000004.dbtmp
          • Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000004.dbtmp
          • Size 16B
          • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
          • MD5 SHA1 SHA512
          Submit Download

          2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe 
          • Path C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe 
          • Size 1.0MB
          • SHA256 d4d0a8d2172dd10c98c82459384760498e82616b289febe70a8bfa6e1958ec8c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          login.spa
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
          • Size 5.5MB
          • SHA256 cfe5ee317c2225b9a7e677517e2db5e9640ba2c0ca2ba674d93d9e4a85192eed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          native-licenses.html
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\native-licenses.html
          • Size 69KB
          • SHA256 1cd2bb5505e9a1b98526794138e1ae346d18e65e7b62a8a8aac632599b57d2b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          xpui.spa
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\xpui.spa
          • Size 10.9MB
          • SHA256 19be39b9f8da51a5e766699bc0e7a8bf6dc6f09b1b733a2d8feb4cb2e1ce0608
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Spotify.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
          • Size 41.5MB
          • SHA256 ae772df4dca26c53c73ea720836db77584dc431d14d3ab3b5c4b49b0bd2b8fde
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Spotify.dll.sig
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll.sig
          • Size 1KB
          • SHA256 f79ea4f4520de633938ac17139b82b2dd4f99e21f65a454c4de4b1bc01751984
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Spotify.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          • Size 3.8MB
          • SHA256 06db5b888d52f7a3a4182cba18dfc8f4659646d2ff0110bb08586781a539782d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Spotify.exe.sig
          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe.sig
          • Size 1KB
          • SHA256 78215ff8777a7a850cbed6cff7d7a605e6866a206708c12546aa1f790252752c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          SpotifyLauncher.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\SpotifyLauncher.exe
          • Size 10.0MB
          • SHA256 b1e7419c706ddd33c30f160099270cbcf24095cb2c990604d8a627621c5812b4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_100_percent.pak
          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
          • Size 689KB
          • SHA256 9a9cee828a46b2b3ab96bc6907493fb5ee6cb23da2239ee92ae4d7f18bf4d130
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_200_percent.pak
          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
          • Size 1.2MB
          • SHA256 4500aa1043a4edcd12c2c524ae0ab43f4c482f7280e3a850d94e1aa1860d34e2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_elf.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
          • Size 2.7MB
          • SHA256 b4e4f21434ca96935bfbf61fefeb3a7bc506b394592b5ca331c2ad68a648fd5a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          crash_reporter.cfg
          • Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
          • Size 631B
          • SHA256 e22cebbea03256524d9b864f6ac5149203b7acd91af5b3fb97417d6239d4791a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          crashpad_handler.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\crashpad_handler.exe
          • Size 773KB
          • SHA256 44dc628fad4505543ca42d674c263aa96880b82c79d81b504fe6236ec5fc8aa4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          d3dcompiler_47.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll
          • Size 4.5MB
          • SHA256 00f32499385ffdfbd05602e0b7c9072bc143717a42b8c84c0a6160a23eb3a8c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
          • Size 10.4MB
          • SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
          • Size 460KB
          • SHA256 90c31f94abcc4762ba8a4b3b059fe7b1110346ac8b2f9b79c6c9d4f4570f3a8a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libGLESv2.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\libGLESv2.dll
          • Size 460KB
          • SHA256 c9124968bf26fee0815ee41f851f60b1a5a03d6b05b4e5d8edc29f75a1ff33b7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcef.dll.sig
          • Path C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll.sig
          • Size 1KB
          • SHA256 598c52ed728bd339ec6905f42ee3f25371fcb3167786beafa8e3340502bdcd56
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          af.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\af.mo
          • Size 16KB
          • SHA256 f18151982b11edf6460b02b6cf7bd5d104fe5cfb7252dcac40247ced81326e40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          am.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\am.mo
          • Size 20KB
          • SHA256 8fd30c72089b6afccd9b53a69fec02df84f01fbc112502534d483a288239056e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar-EG.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-EG.mo
          • Size 20KB
          • SHA256 6db052b3510c4d4c53f9262a17ec7dc9230fadb8e6b61fa13e02230680ee7988
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar-MA.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-MA.mo
          • Size 20KB
          • SHA256 aa85d032dd43e35aac0a302efdafef240f8f16a197aa9d333dab62ad7630d122
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar-SA.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-SA.mo
          • Size 20KB
          • SHA256 44c801b550b67c6b564066a2e1a943255ee207f8c49dc06427355e03a9aee4bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar.mo
          • Size 20KB
          • SHA256 a7b998f51750f4b06489894af6af9141601a344c5fd73a79ce88a5e05bf4cd08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          az.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\az.mo
          • Size 18KB
          • SHA256 f6fb69412508d19c32ce514be79334131264e4ce17fabe0409e0b8245a7cb678
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bg.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bg.mo
          • Size 22KB
          • SHA256 6fcf6c7033be5ef5afdc1dd499eafb6f850f727ccab6bc7ba9a3e03ede3150c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bho.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bho.mo
          • Size 24KB
          • SHA256 d215066d1da8189454b476a68ed4dd67cd956c68ecaf49a83ea865e9f272fac4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bn.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bn.mo
          • Size 25KB
          • SHA256 1a5d5e200811988cc74ecc389c1fe24c33a48a543adc87a6f1c6fc8cb34e637e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bs.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bs.mo
          • Size 17KB
          • SHA256 83e099dbc0022f6f2c723f701cff4feb688954ed5a0cca8e214c16b0346eda13
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ca.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ca.mo
          • Size 17KB
          • SHA256 0f35a77ae28ff5e148ea122780f1006aa5111da6235416a2fc7ed0c215175a66
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cs.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\cs.mo
          • Size 17KB
          • SHA256 0ce5ca17a46a31ccd37aafb145133a6f4e6606087ec7c9357d357aa6903ba5de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          da.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\da.mo
          • Size 17KB
          • SHA256 a5f88cc25a829a26de482cd4b4d28c44277c70981fbb0050a54cd4f437fb713e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\de.mo
          • Size 17KB
          • SHA256 ab6b48450a35f81726e61bbbbcac152b1f029a2a524c7e4829042439e5d37f1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          el.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\el.mo
          • Size 23KB
          • SHA256 8bd6f8d94ab6b5a0c1dd19f247e381a85c887168f4b118c954203adbf5a08904
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-GB.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-GB.mo
          • Size 16KB
          • SHA256 dcd7b66a1c2bd622958a873c4b42ef925019a3f9b8d4710f9145db71409bf628
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-US.pak
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
          • Size 581KB
          • SHA256 0b2a72cc851d62f615080f3954f2c94d7009ccac31ac4248398f08359fd1c714
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
          • Size 16KB
          • SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-419.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-419.mo
          • Size 17KB
          • SHA256 8ef4238202014096cf738dd3ee3113adca63944cdd191cd8464a0b2031625b2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-AR.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-AR.mo
          • Size 17KB
          • SHA256 c32c177a1aed5a15a4bcd07dd4dc3db74c45682ffaf6a1c8a45393142890a6c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-MX.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-MX.mo
          • Size 17KB
          • SHA256 404759a8fbb728729692747ac19f6b6953bc0632bbbca753b24771f1a653eb78
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es.mo
          • Size 17KB
          • SHA256 c468a03f6e45046fc9fd8a5133091fb72ed66587627662cfac61632b11955365
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          et.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\et.mo
          • Size 17KB
          • SHA256 992981edc15070a0adf225e205ee7ccfb2ec0b8ee0c1a743a0c0c51cf152d133
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          eu.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\eu.mo
          • Size 17KB
          • SHA256 68ef4b89672fa1ff7b1ba29304af3792411c22968a43e09012358b45ce9d4048
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fa.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fa.mo
          • Size 21KB
          • SHA256 bd60dd37e15d89125e818f0b0abc31a721858cd9e458f449ffa6457cbe42ace6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fi.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fi.mo
          • Size 17KB
          • SHA256 7682322d3bcb60af4c031f112408f40d183856cba9ef98a68e96ca600d0f8c6b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fil.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fil.mo
          • Size 17KB
          • SHA256 5a0290abda7f56cfebc1404f72c56a2bf1075bd453a087b31597cd40c1b059bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr-CA.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fr-CA.mo
          • Size 18KB
          • SHA256 faaffc93e48d90e466197879b3637782f926fe1a6948df0f648420bdd802dc81
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fr.mo
          • Size 18KB
          • SHA256 10d0030baefa37c09c8e73d7484c679179ff1ef71622130fb57c246ea088fa8d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          gl.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\gl.mo
          • Size 17KB
          • SHA256 baefb0f5a3551b79b0325b6b424171bbad91af8faadf2bc50bc43b52aaa9f4b6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          gu.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\gu.mo
          • Size 24KB
          • SHA256 ea34bf5f0f465fe070c08c7d6f056e12218314ba6931c944722a32aa45fd54c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          he.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\he.mo
          • Size 19KB
          • SHA256 93644d11e66b4ff522c962dee76b50b85ff52577420e32fc349975f00310d6e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hi.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hi.mo
          • Size 26KB
          • SHA256 852bfde3a31c889f7d8e178435fc62bfdd543fbb8b70b19f52895ce21ab84993
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hr.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hr.mo
          • Size 17KB
          • SHA256 66d38ac83c3ea2e6dd60e5c063975929a9d00210999e4eaddaec94bedeb7b1cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hu.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hu.mo
          • Size 17KB
          • SHA256 c3dddf2942f1855edb6bfa75885667a6eb62834666ca45f4d34f8bd95886f588
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          id.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\id.mo
          • Size 16KB
          • SHA256 6a2677f7d60e65724d83030a601926c2746bfc241653fa4eaa29ac6673099dae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          is.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\is.mo
          • Size 17KB
          • SHA256 100467f3f0ef062dbd4f5f34c3c0a56d496d72e540752566071abc9601c20e84
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          it.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\it.mo
          • Size 17KB
          • SHA256 c0e5ca3aad3919b6978e011982fb4bee5283859e2b5acb7c5975b900c709cf40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ja.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ja.mo
          • Size 19KB
          • SHA256 dfaa0336098aa906290abf6ed953557dd0448fccf0a74788fb01b2d5c3059b0c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kn.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\kn.mo
          • Size 28KB
          • SHA256 970af1faaa1262aae785eee576b0e09d6d2dc3fb392f7fb605f646318fc0e55a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ko.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ko.mo
          • Size 18KB
          • SHA256 55e5dd04a8ae2b911d376fd2d72d580f7a9a2185e30915dba0685c12504c6db8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lt.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\lt.mo
          • Size 17KB
          • SHA256 1ef22194265acef812b0889c870cab49f92dab94d49ccc803f126e13dce96d6b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lv.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\lv.mo
          • Size 17KB
          • SHA256 ce7a90b21f9059e18329fcb1fa1cff500fae0cfa94756eb6f6e59b728681d546
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mk.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\mk.mo
          • Size 22KB
          • SHA256 a9c24356d771d2c270d426bf36a7ff858c3eb6cd358419c5b38e3500b24e061f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ml.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ml.mo
          • Size 29KB
          • SHA256 2a2bc7ab6241ce637716ed05f650788c509d93a34740963f03952f04d5a33a43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mr.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\mr.mo
          • Size 25KB
          • SHA256 e090f2e7a8124d1b7839edf6482f83a535793e89cdc1d6ec3f2eb55eb129e493
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ms.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ms.mo
          • Size 17KB
          • SHA256 055923e4e1c507d778fefc5c248e0f4593b4dff9d6b7c30ce2cd0f438fddbb53
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nb.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\nb.mo
          • Size 17KB
          • SHA256 4a933878ea384fb136af8915bf8488c1b1754a461f9de6f3d7558519ea7e253b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ne.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ne.mo
          • Size 28KB
          • SHA256 c5bd621fece94dfa802c133868f74d85fb5c95799ad949cc578569f755626161
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nl.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\nl.mo
          • Size 17KB
          • SHA256 6a092b51e8ce0ba869481782ab4c548b55fc6d550fa1b4eda19b8afdb47ed9ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          or.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\or.mo
          • Size 27KB
          • SHA256 3e807bfc804aab725a9f88d2caa86d917360041ad5a993631fe6a570eaa22265
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pa-IN.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pa-IN.mo
          • Size 26KB
          • SHA256 bf690802a3757be141a674b34c8967a674ccd10f91b0299b8c7a3d8d6ecae534
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pa-PK.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pa-PK.mo
          • Size 21KB
          • SHA256 18d087b611c1883a02f0c5a8117c854302c7dfef292515ae28dd5142206112d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pl.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pl.mo
          • Size 17KB
          • SHA256 ff8900015a1983dd15c35d2cae6df6c8716012a557047b2943f2ed08f19d888e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-BR.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pt-BR.mo
          • Size 17KB
          • SHA256 6310dfc349c2db20df4c93ed86439429def3bf01019526fd4682997d9a19f01d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-PT.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pt-PT.mo
          • Size 17KB
          • SHA256 cc1b911b168a4ad38d419d26843872321aa44f096fe020348d1bf0dee41b8d40
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ro.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ro.mo
          • Size 17KB
          • SHA256 4fd3602488177d1d39be69120c6e7a5352349ca4a282dd8834aa6ac309e57245
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ru.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ru.mo
          • Size 21KB
          • SHA256 cec81ef9647f837743383ebbdac866e3f1d76ed7a77a818a7e1760ecaae7b8df
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sk.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sk.mo
          • Size 17KB
          • SHA256 35c40027d73a72ed32a026e8dcdf7ac8591a6eb71c8ebcb32e0264631a7a71e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sl.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sl.mo
          • Size 17KB
          • SHA256 c1c082b3a57466b9165232ca6bff7034079e42d745e18e28281ef0fa62c788a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sr.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sr.mo
          • Size 17KB
          • SHA256 b67e1aabc65f611e2c4767119e49c5183ef7d26e4b31cdf84b64ca3ccc3d1c86
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sv.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sv.mo
          • Size 17KB
          • SHA256 c8058e86431e6844e606199c0387191ecac3b9e4d53c1704f6a966c53153cff2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sw.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sw.mo
          • Size 17KB
          • SHA256 b2a616914dd7fb9749046c8cd83ffdf0be18d81f852d1737f7a9d1a315e23eae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ta.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ta.mo
          • Size 27KB
          • SHA256 ae2026281836070e26b3e6b52de8f0e1fc82d6b3c01ff59bc71ba4757ccf99bf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          te.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\te.mo
          • Size 26KB
          • SHA256 6110e356b38956dc33116bc69b4e234aa39322b90aa3fa595bd00c758a9df535
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          th.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\th.mo
          • Size 24KB
          • SHA256 b1d021b7581d00c2edaa3c99e70ca9ae4fe3065a2a489ae864ebfb130f62e6cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tr.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\tr.mo
          • Size 17KB
          • SHA256 2cdc4e310744e42a699619f8750ec04fc2ca29afc66dd3e02c57a031d8774a8e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          uk.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\uk.mo
          • Size 21KB
          • SHA256 da1a7137983d24e09f53f440bd0d44456fd8fa44006f4b5461e98b6a7cfc3f36
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ur.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ur.mo
          • Size 21KB
          • SHA256 e5ef631c6b49b57af817617c5b9a4197fd12b2b74baea06e52cd2a54eae73fef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vi.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\vi.mo
          • Size 18KB
          • SHA256 9330d6f539b9d8f504796dc4f5ff79924046fe86cc2862d66eb9db7cbac47f00
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-CN.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-CN.mo
          • Size 16KB
          • SHA256 7b20bca865ebdfe12b8f712ff732090f753f1c42becfde41941cc06fde2fedf2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-Hant-HK.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant-HK.mo
          • Size 16KB
          • SHA256 1928e0496087f1fcc31cd27ef6783db3d16c5252852fe56db78476dae4ca87f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-Hant.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
          • Size 16KB
          • SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zu.mo
          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zu.mo
          • Size 17KB
          • SHA256 8842e30b944b3ce991c4f0c356a28d2783570225ee5fb007d602c4aef54765ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prefs
          • Path C:\Users\Admin\AppData\Roaming\Spotify\prefs
          • Size 157B
          • SHA256 1cfa8ec7cd1eb08e10b6f6fd0527d450916de88805a2ad1ed2cd65a8eba66914
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          resources.pak
          • Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
          • Size 20.3MB
          • SHA256 e2a142e80b54d0d7849c1f10b1fda305d90f19d08be68d44f01868d9b187b897
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          save-to-spotify.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\save-to-spotify.exe
          • Size 10.4MB
          • SHA256 1457941537c29430cf8006ee4f2db8e36ab18879cb5992b434f70ea3f8f45be9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          spotify_cli.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\spotify_cli.exe
          • Size 2.4MB
          • SHA256 8995d4e143a85a99c07a7947326618493158f7b3e80607ccfd12bc2a5be6864e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          toast_icon.png
          • Path C:\Users\Admin\AppData\Roaming\Spotify\toast_icon.png
          • Size 3KB
          • SHA256 9b6b97d13db27d3ebb90a0544ea5a75cc3109e90e51e61831353539adc43f8f3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          uninstall.exe
          • Path C:\Users\Admin\AppData\Roaming\Spotify\uninstall.exe
          • Size 507KB
          • SHA256 7e03a10708d5ab2213a863436fb805a564da340bffa60740284a1486b5ba6eca
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          v8_context_snapshot.bin
          • Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
          • Size 17.1MB
          • SHA256 c20d9408009a281ee4152b63077a8309eb17ec172bbf80b80dc7879d586bb099
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
          • Size 5.2MB
          • SHA256 bb7a02718905692be5c9c6bb4dccd9a8a0219dd483778e00c179241c040fdf04
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader_icd.json
          • Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vulkan-1.dll
          • Path C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
          • Size 954KB
          • SHA256 452005b1b569d51eb3fcfa7d3dee1c8ccde6f1061e2597c24ba8f115839c52f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          explorer.exe
          • Path C:\Windows\Resources\Themes\explorer.exe
          • Size 135KB
          • SHA256 7f281d75b78602a124690c335cd3a778f53359539de50619fd0c53fd80f462e4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icsys.icn.exe
          • Path C:\Windows\Resources\Themes\icsys.icn.exe
          • Size 135KB
          • SHA256 4d5d3072d9c6f35e77ee7725f2f0242bf84311ff551f31427ee7f27aef1780ad
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          spoolsv.exe
          • Path C:\Windows\Resources\spoolsv.exe
          • Size 135KB
          • SHA256 97bbb820f2412e0247c99dc1bef7a629adff6a0691fa235992264bc31e229393
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          svchost.exe
          • Path \??\c:\windows\resources\svchost.exe
          • Size 135KB
          • SHA256 98300b0c360c1b9d85e0bdee302b50843f32e5193d84822c1e0fc873795a8990
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/1160-1193-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/2060-856-0x00007FFAD45C0000-0x00007FFAD6F79000-memory.dmp
          Download

          memory/2060-957-0x00007FFAD45C0000-0x00007FFAD6F79000-memory.dmp
          Download

          memory/2060-958-0x00007FFAD45C0000-0x00007FFAD6F79000-memory.dmp
          Download

          memory/2060-492-0x00007FFAD45C0000-0x00007FFAD6F79000-memory.dmp
          Download

          memory/2060-491-0x00007FFAD45C0000-0x00007FFAD6F79000-memory.dmp
          Download

          memory/3508-51-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/3836-528-0x00007FFAF2DE0000-0x00007FFAF2DE1000-memory.dmp
          Download

          memory/3836-527-0x00007FFAF30D0000-0x00007FFAF30D1000-memory.dmp
          Download

          memory/5576-37-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/5576-50-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/5728-43-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/5800-49-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/5800-48-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/6020-52-0x0000000000400000-0x000000000041F000-memory.dmp
          Download

          memory/6020-0-0x0000000000400000-0x000000000041F000-memory.dmp
          Download