660d1a67ac5bde24476d017146207a9900a9f36d2ef6cd126614afe3c82fdcc5

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
Size 1.2MB
Sample261011-e47vvse13t
SHA256 660d1a67ac5bde24476d017146207a9900a9f36d2ef6cd126614afe3c82fdcc5
MD5 b7905744e2b7074d7405171f4f2ee154
SHA1 49df13914227640f0c61e7d5903910af72bc3f20
SHA512 87a3c75207fefc5e4178a92cb3fe1cfa65c78c796748af94ae54a043b97328365bdf45a7c7ccd418f820aa73b13b15f3391e10e7041f925fa85a9043e3e5361d
SSDEEP 12288:PFUNDaKaAmQBxXr/6jcRrz0u673pQqxZEZiLn5osowwB7DTSFi14jk:PFOaVvmXrJRrz03pQqxZEZD8k
TLSH
T18D453A895F24D5AEE363D57C5021D27DEA317C220FC1860652E9A2FC1A7B724787BF22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

adware defense_evasion discovery persistence privilege_escalation spyware

Malware Config

Signatures

Modifies visibility of hidden/system files in Explorer 2 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden = "0"	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden = "0"	svchost.exe

Downloads MZ/PE file 1 IoCs

flow	pid	Process
5	5080	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 21 IoCs

pid	Process
5080	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
2092	icsys.icn.exe
3384	explorer.exe
5696	spoolsv.exe
5332	svchost.exe
2748	spoolsv.exe
4672	SpWebInst0.exe
3836	Spotify.exe
5784	Spotify.exe
6120	Spotify.exe
1236	Spotify.exe
2784	Spotify.exe
1604	Spotify.exe
5136	Spotify.exe
5436	Spotify.exe
4784	Spotify.exe
6112	Spotify.exe
5176	Spotify.exe
3212	Spotify.exe
4940	Spotify.exe
5904	Spotify.exe

Loads dropped DLL 43 IoCs

pid	Process
3836	Spotify.exe
5784	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
6120	Spotify.exe
6120	Spotify.exe
2784	Spotify.exe
2784	Spotify.exe
2784	Spotify.exe
1236	Spotify.exe
1236	Spotify.exe
1236	Spotify.exe
6120	Spotify.exe
1236	Spotify.exe
1604	Spotify.exe
5436	Spotify.exe
5436	Spotify.exe
5436	Spotify.exe
5136	Spotify.exe
5136	Spotify.exe
4784	Spotify.exe
4784	Spotify.exe
5136	Spotify.exe
1604	Spotify.exe
1604	Spotify.exe
4784	Spotify.exe
6112	Spotify.exe
5176	Spotify.exe
6112	Spotify.exe
6112	Spotify.exe
6112	Spotify.exe
3212	Spotify.exe
3212	Spotify.exe
3212	Spotify.exe
4940	Spotify.exe
4940	Spotify.exe
4940	Spotify.exe
5904	Spotify.exe
5904	Spotify.exe
5904	Spotify.exe

Adds Run key to start application 2 TTPs 5 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Explorer = "c:\\windows\\resources\\themes\\explorer.exe RO"	svchost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Svchost = "c:\\windows\\resources\\svchost.exe RO"	svchost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Windows\CurrentVersion\Run\Spotify = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\" --autostart --minimized"	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Explorer = "c:\\windows\\resources\\themes\\explorer.exe RO"	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\Svchost = "c:\\windows\\resources\\svchost.exe RO"	explorer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\explorer.exe	svchost.exe
File opened for modification	C:\Windows\SysWOW64\explorer.exe	explorer.exe

Drops file in Windows directory 13 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Resources\Themes\icsys.icn.exe	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_1663617931\privacy-sandbox-attestations.dat	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_1663617931\manifest.json	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\_platform_specific\win_x64\widevinecdm.dll.sig	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\_platform_specific\win_x64\widevinecdm.dll	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\manifest.json	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\_metadata\verified_contents.json	Spotify.exe
File opened for modification	\??\c:\windows\resources\themes\explorer.exe	icsys.icn.exe
File opened for modification	\??\c:\windows\resources\spoolsv.exe	explorer.exe
File opened for modification	\??\c:\windows\resources\svchost.exe	spoolsv.exe
File opened for modification	C:\Windows\Resources\tjud.exe	explorer.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_1663617931\_metadata\verified_contents.json	Spotify.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\LICENSE	Spotify.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Spotify.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Spotify.exe

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	spoolsv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	spoolsv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icsys.icn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	explorer.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6120	Spotify.exe
5136	Spotify.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Spotify.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Spotify.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Spotify.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	Spotify.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Spotify.exe

Modifies Internet Explorer settings 1 TTPs 11 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppName = "Spotify.exe"	Spotify.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\Policy = "3"	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify"	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppName = "Spotify.exe"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\AppPath = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy	Spotify.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6}\Policy = "3"	Spotify.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe

Modifies registry class 28 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell	Spotify.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\ddeexec	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\" --protocol-uri=\"%1\""	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\CLSID\{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}\LocalServer32	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.client\DisplayName = "Spotify"	SpWebInst0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.launcher\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png"	SpWebInst0.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\spotify\shell\open\ddeexec	Spotify.exe
Key deleted	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\spotify\shell\open\ddeexec	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\URL Protocol	Spotify.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\",0"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\CLSID	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.launcher\CustomActivator = "{18A68F64-72DD-42CE-A75D-EDBDAC226F5D}"	SpWebInst0.exe
Key created	\REGISTRY\MACHINE\Software\Classes\spotify	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\spotify\shell\open	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\DefaultIcon	Spotify.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\command	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\CLSID\{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.client	SpWebInst0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.client\CustomActivator = "{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}"	SpWebInst0.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\spotify\shell\open\ddeexec	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\spotify	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\spotify\shell	Spotify.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\CLSID\{5F86DC52-D653-4CFF-BAC7-C3A406AF8946}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\Spotify.exe\" -ToastActivated"	Spotify.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId	SpWebInst0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.client\IconUri = "C:\\Users\\Admin\\AppData\\Roaming\\Spotify\\toast_icon.png"	SpWebInst0.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.launcher	SpWebInst0.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\AppUserModelId\Spotify.desktop.launcher\DisplayName = "Spotify Launcher"	SpWebInst0.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
3384	explorer.exe
5332	svchost.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe
Token: SeShutdownPrivilege	3836	Spotify.exe
Token: SeCreatePagefilePrivilege	3836	Spotify.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
3836	Spotify.exe
3836	Spotify.exe
3836	Spotify.exe

Suspicious use of SetWindowsHookEx 12 IoCs

pid	Process
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
2092	icsys.icn.exe
2092	icsys.icn.exe
3384	explorer.exe
3384	explorer.exe
5696	spoolsv.exe
5696	spoolsv.exe
5332	svchost.exe
5332	svchost.exe
2748	spoolsv.exe
2748	spoolsv.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1560 wrote to memory of 5080	1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe	89
PID 1560 wrote to memory of 2092	1560	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe	90
PID 2092 wrote to memory of 3384	2092	icsys.icn.exe	91
PID 3384 wrote to memory of 5696	3384	explorer.exe	92
PID 5696 wrote to memory of 5332	5696	spoolsv.exe	93
PID 5332 wrote to memory of 2748	5332	svchost.exe	94
PID 5080 wrote to memory of 4672	5080	2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe	97
PID 4672 wrote to memory of 3836	4672	SpWebInst0.exe	98
PID 3836 wrote to memory of 5784	3836	Spotify.exe	99
PID 3836 wrote to memory of 6120	3836	Spotify.exe	102
PID 3836 wrote to memory of 1236	3836	Spotify.exe	103
PID 3836 wrote to memory of 2784	3836	Spotify.exe	104
PID 3836 wrote to memory of 1604	3836	Spotify.exe	108
PID 3836 wrote to memory of 5136	3836	Spotify.exe	109
PID 3836 wrote to memory of 5436	3836	Spotify.exe	110
PID 3836 wrote to memory of 4784	3836	Spotify.exe	112
PID 6112 wrote to memory of 5176	6112	Spotify.exe	116
PID 3836 wrote to memory of 3212	3836	Spotify.exe	118
PID 3836 wrote to memory of 4940	3836	Spotify.exe	121
PID 3836 wrote to memory of 5904	3836	Spotify.exe	122

C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1560
- \??\c:\users\admin\appdata\local\temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
  c:\users\admin\appdata\local\temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of WriteProcessMemory
  PID:5080
- - C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe
    SpWebInst0.exe /webinstall
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:4672
  - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
      Spotify.exe /INSTALLCOMPLETE
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Adds Run key to start application
      Drops file in Windows directory
      Reads the TCP/IP host and domain name from the registry
      Checks processor information in registry
      Enumerates system info in registry
      Modifies Internet Explorer settings
      Modifies registry class
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:3836
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.3.4.258 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ffaf843e6a0,0x7ffaf843e6b0,0x7ffaf843e6c0
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:5784
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=2392,i,12407649528335118107,8938773375436939412,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=2760 --mojo-platform-channel-handle=2756 /prefetch:11
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Reads the TCP/IP host and domain name from the registry
        System Time Discovery
        
        PID:6120
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=2184,i,3920818486486042366,3325705269744023439,262144 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2728 --mojo-platform-channel-handle=2716 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1236
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=3012,i,9492312854425822260,9788433772402099407,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3152 --mojo-platform-channel-handle=3148 /prefetch:13
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:2784
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=2628,i,6372551388524210234,12889208584438813219,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=5428 --mojo-platform-channel-handle=5424 /prefetch:13
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1604
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=5092,i,6766453804007023479,18178731518864261875,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=5536 --mojo-platform-channel-handle=5540 /prefetch:11
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Reads the TCP/IP host and domain name from the registry
        System Time Discovery
        
        PID:5136
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --top-chrome-webui --force-high-res-timeticks=enabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1791692478130123 --launch-time-ticks=640079082 --metrics-shmem-handle=5808,i,14237997719638507192,2157803580785541749,2097152 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=5844 --mojo-platform-channel-handle=5840 /prefetch:1
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:5436
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1791692478130123 --launch-time-ticks=640285218 --metrics-shmem-handle=6396,i,14643859234150997290,4136656702869624572,2097152 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708994745248135 --enable-logging=handle --log-file=5656 --mojo-platform-channel-handle=6392 /prefetch:1
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:4784
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=8152,i,3938840521780249985,3092338737509790572,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708995682289984 --enable-logging=handle --log-file=8160 --mojo-platform-channel-handle=8156 /prefetch:14
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Reads the TCP/IP host and domain name from the registry
        
        PID:3212
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=8172,i,6289103608759631067,16882438173121399501,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708996619331833 --enable-logging=handle --log-file=7404 --mojo-platform-channel-handle=7408 /prefetch:14
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:4940
    - - C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        
        "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=enabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/151.0.7922.138 Spotify/1.3.4.258" --metrics-shmem-handle=6788,i,17918360889206128064,18179784673799728941,524288 --field-trial-handle=2720,i,17490004925397242227,4370179800362298417,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,KillOnInvalidNavigationHeaders,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2724,i,11961484799422481329,11997862281326160050,4 --trace-process-track-uuid=3190708997556373682 --enable-logging=handle --log-file=8156 --mojo-platform-channel-handle=7252 /prefetch:14
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:5904
- C:\Windows\Resources\Themes\icsys.icn.exe
  C:\Windows\Resources\Themes\icsys.icn.exe
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2092
- - \??\c:\windows\resources\themes\explorer.exe
    c:\windows\resources\themes\explorer.exe
    3⤵
    - Modifies visibility of hidden/system files in Explorer
    - Executes dropped EXE
    - Adds Run key to start application
    - Drops file in System32 directory
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3384
  - - \??\c:\windows\resources\spoolsv.exe
      c:\windows\resources\spoolsv.exe SE
      4⤵
      Executes dropped EXE
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:5696
    - - \??\c:\windows\resources\svchost.exe
        
        c:\windows\resources\svchost.exe
        5⤵
        Modifies visibility of hidden/system files in Explorer
        Executes dropped EXE
        Adds Run key to start application
        Drops file in System32 directory
        System Location Discovery: System Language Discovery
        Suspicious behavior: GetForegroundWindowSpam
        Suspicious use of SetWindowsHookEx
        Suspicious use of WriteProcessMemory
        
        PID:5332
      - \??\c:\windows\resources\spoolsv.exe
        
        c:\windows\resources\spoolsv.exe PR
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of SetWindowsHookEx
        
        PID:2748

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3780

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4680

C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:6112
- C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
  C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.3.4.258 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ffaf843e6a0,0x7ffaf843e6b0,0x7ffaf843e6c0
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5176

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6781d810-8650-41ab-b30b-2d0648e8ad2f.tmp

Path C:\Users\Admin\AppData\Local\Spotify\6781d810-8650-41ab-b30b-2d0648e8ad2f.tmp
Size 2KB
SHA256 1ba292c32c0d081a0f6c54791b4b0d28ec7ab2217270fae4880aa158fbdeb467
MD5 4e50a2b06636a2244eec8cab1f37a9cb
SHA1 6c2ab29f90c589557862db7ba8522b95c44f3836
SHA512 c14e381f5092ec3a5c5d54e81991c22a71d28de3bf2aa3f3df6e9b1bbf2d2292d5435b7d5a31297daba660cd1bae2e81bdc27ae739ee4fedab53981c481444dd
TLSH
T1AB51847968B49E7619B68566B5463942CF3222BAB5607FD0E2DC0A1801E72EC4343453
MD5 SHA1 SHA512 TLSH

Submit Download

84d28431-6e44-4cc9-9147-2af9dccdbb1c.tmp

Path C:\Users\Admin\AppData\Local\Spotify\84d28431-6e44-4cc9-9147-2af9dccdbb1c.tmp
Size 3KB
SHA256 28437f5e0483fd6eddc3bd82033a241cd0cca4ce9cdfa690ea458dae287f3890
MD5 3d08ba8eed194dbe5ea471f1cc3a6866
SHA1 e0a207ee2bc2fb2ca9ca0bdc27f2d340b481d990
SHA512 59763ca64eadb41e40b30c7938a059a3d2a74ffd4588ab15686640a5c7c4fe4447e027142eed70ecff8beda4636f6730aa4832218f1e0d5863f9c48482a95745
TLSH
T16761B32868A89EBA18B3E562B9423A03EF752167B1607EC0E2FD0B1C01E72D80383057
MD5 SHA1 SHA512 TLSH

Submit Download

01d0090c-d19d-40b2-a88e-31284c89cc87.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\01d0090c-d19d-40b2-a88e-31284c89cc87.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

232e97fd-7ee8-4e4a-b433-e424b3bcfa03.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\232e97fd-7ee8-4e4a-b433-e424b3bcfa03.tmp
Size 11KB
SHA256 9a6ddf1504d2e1bce3f0f1d3fecc143be6ad5a256b885f8ed46e03a6c95bc858
MD5 29395b53452c28295c532b672bab9cc1
SHA1 6f95174e0162fa432ff5ff63264d78424a1ee423
SHA512 8a33b62992a5495d6a13d41219f3e743219842a4bdd6801009537cd6ceb954fb1c726832c494f53fe8c84b144da3d059e9688e087718cda6db2992bd6c85bc65
SSDEEP 192:zRyIGVIZ0wI/Lv7KjEXc9PHc36+WNVgHkapdHOgBMZmCxvZ/yIsn2ag3:zRLb0wILObFk0oyxD3
TLSH
T12532D56EAA2466BB6CD7E228F9607716E3F5102235D0AD84E7FD893C14E76CC6223443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

423d1ff8-8256-474f-a3ce-a4db4684ac55.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\423d1ff8-8256-474f-a3ce-a4db4684ac55.tmp
Size 11KB
SHA256 e699a88b8a174e7b44a2779a4aea934f470355c2b42edd755e363ee42fdcc220
MD5 ebcf5df905f032d09ada54a6f902a3b5
SHA1 9b4d8c10179d0f4a2e0e89dc9e20907a8d8e23df
SHA512 acd22750ef7ad6fb87b30177f71072dbd5884eda7618b1682f867c3d95c08e709bcb2abf0c41fb9f45d91fba5a4a053148242bef6f563051d9d1dee05e189bb6
SSDEEP 192:zRyIGVIZ0wI/Lv7KjDjXc9PHc36+WNVgHkapdHOgBMZmCQpcN/yIsn2ag3:zRLb0wILOQFk0oyQpU3
TLSH
T1EB32D76FAA246ABB6CD7D228F9607756E3F5102235D0AD44E7FC893C14E76CD6223043
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7dc963af-1439-4ec2-844e-1e5d55891d73.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\7dc963af-1439-4ec2-844e-1e5d55891d73.tmp
Size 10KB
SHA256 cd85f4f873102b5882b9a4ddc5ca78f52459ef04cc2d88df9a17a928e5de21a3
MD5 080a25731c651c6a9a9c9235e0d21315
SHA1 204130fd46fdd53c375a91ccb22e8e9aaab09ab2
SHA512 0970e070cfb53075fa6efc6d6887b1eb15529903bc879fe80b87cff6df612d5b406a0a0acd40d4c2e38872a8d0a05e20054932cf6650e98293f7ad597701a6de
SSDEEP 192:zRyIGVIZ0wI/Lv7KNEXc9PHc36+WNVgHkapdHOgBMZmCwR/yIsn2ag1:zRLb0wILOJFk0oyy1
TLSH
T10332C66EAA2466BF6CD7D228F9607756E3F5002235D0AD84E7FD893C14E7ACC6223447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot-new.baf

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Cache\No_Vary_Search\snapshot-new.baf
Size 20B
SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
MD5 7177cd1b3e21f48a23cb47dc11b36f7b
SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 c838e1821d08630d37f3220380b52cd32ecccc490351586cdf75bebade8a0e1b
MD5 2a89179088e0e525163b811c6f19957c
SHA1 71e5563935287cd5a59988df600382ba031a1c8a
SHA512 48a8d07d8dc6febe4e77a0fda71fe48e10d72e0df109902e5fa223e4d2cb859793fc59ec6253843cf14284c4e469d4d1126b48e26b2b6f68e961338bec2ab71d
TLSH
T113A0026026916C42C740F6B820520B4367648A3687294719D8A97454D8A46DE8119159
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 aacdce430b53f9bc763ea129484d5d6dbe2267abaf72f788b94ef3e8d88e2b0c
MD5 7f3a3082e01eb1f9871614cc8654bb67
SHA1 b0d52e3df1c3cfd66ea5a837af0b8e4bf6b8f9f9
SHA512 d1942e766487a68efa351ec06c181a99ab2bf25401dfa64ee97d897e862a33f14bc8fc286cc9708e8d6006e6ca653f7d1378cdeb37a154234735a33642ff1c92
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

1646d05c-6c43-4100-b73d-479a3c5e223e.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\1646d05c-6c43-4100-b73d-479a3c5e223e.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e310ca3e-da21-4ee7-954b-71dc87805b6b.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\Network\e310ca3e-da21-4ee7-954b-71dc87805b6b.tmp
Size 2KB
SHA256 b3a5678aa4ae0b3b0a4402808661f04e4db7efc386191ca3c381659be912458d
MD5 804aba4f30f9c63dea3075147636cd6d
SHA1 eac7bb0e8f3caa57e2e9bc9408d737c0d182621c
SHA512 e30ab1ed7ac75d68351cb7c212f7e3746142065dc552cbc940bac0493917c69964b8c0617dd63019a223d6a059a3172ed73fef6724cc8b8924a81d82235ef95a
TLSH
T1A1417DE7C3D8962DD94116F49B193E2BCE3E0A2843283C26C8D5BF1B77E2571E24055E
MD5 SHA1 SHA512 TLSH

Submit Download

a1873cbf-5a46-481a-9870-94ada7701b0c.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Browser\a1873cbf-5a46-481a-9870-94ada7701b0c.tmp
Size 10KB
SHA256 dd1a5f5b79b95028f786b2199d9cfd003afa2e3aa5d19c4cf6cba771a9f1e5d4
MD5 eec074d50f9fd9a516d04abde1a11a0a
SHA1 3e02a19b1cf165fc49a416bb021d2ca189498034
SHA512 650da20b638bdf7545c40bec2dd8361a8e920151a0b7573e77638e9b82ef561b333bae5086d6f5d128b5e31306bf3a7a0b7bdc55cea875bb3f3f6fc2de9799c4
SSDEEP 192:zRyIGVIZ0wI/Lv7KOEXc9PHc36+WNVgHkapdHOgBMZmCwR/yIsn2agg:zRLb0wILOiFk0oyyg
TLSH
T18722D66FAA2466BB6CD7D229F9607716E3F5002235D0AD84E7FC893C14E76CC6223447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7952520e-60e5-41a6-ad38-3caceda49096.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Default\7952520e-60e5-41a6-ad38-3caceda49096.tmp
Size 9KB
SHA256 7a3189689fb944decb733e88a4832a9ac32d1c24c3c709f761d5dbc8cfa14fa5
MD5 377f97b5d4cbe4da7b91b1e683d4b3ae
SHA1 d05c142e77832ebc72ef5bb9c725f92f200286db
SHA512 eb358058087bb3d1f54f3f13623009bd66ea270e87a4cc1170ada89be292cdad6fc89f878f2fc575109297b64ab1bb238865d987c3ced35ccae54dbaceb1c081
SSDEEP 192:zRZjIGbqJwIWfv7zMh9+Hc36+WNOP0L/yIsn2agZ:zRZUnJwIOCEk0wYZ
TLSH
T1E812946EAE24A97F6CC7D269FA613792E3F5102134943D88D6FC893C15D7ACD2223097
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

63534852-6165-4f7c-8f17-86d2ce16c8b7.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\63534852-6165-4f7c-8f17-86d2ce16c8b7.tmp
Size 1KB
SHA256 a35a0e5db825c53874717958f2e940205927ce05ee3bc5800c858deea86a2df3
MD5 a1f03d1e377060f1ac3ffec476ff1ea2
SHA1 238ad047d5329cb55cefdf9c8f057b0c41d8d3d4
SHA512 329fab255a8a52cd9cc62ac2ec78c6b1c08653069ce8038d24a5d85074569b726e5933c93ee88a394b772c2fa87df1c66a6eb21d086538af34cb26a93b3fe844
TLSH
T1C5218BF7C7E4956E8A4142F45B112E1BCE2E0918431C3C1A88D4BF2B93F2871911094E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences
Size 8KB
SHA256 9535bd8624edb9dc5f50412770122eb12f602c6317a7cf22ddb1624a0a0f84a9
MD5 1f829e247a4854aead4d60d7bcf85d18
SHA1 232a77a43baea743e6506043ca6a9bc42703e54f
SHA512 3b45b666f33e712c2d6809f8257c7b7ab92f467ab0aa101a3c0ead7dd1b756bf77345beba0cd2fb440f2e33e1e3d55ae6c6aa42304c948f130658e4d9d7f0d36
SSDEEP 96:zRZpRml7FkYUsxdxwtv7JdeWC9QAeuX79636+WVoMPktNm+Te09jKWt86mNLCyIj:zRZnq74v7zMhXc36+WNO/S0yIsn2agZ
TLSH
T10102606DAE24AA7F6CC6D229FA663743E3F5102134903D88D6FC893C25D7ACD2223457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Spotify\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

c8224f96-0cdd-4e8a-97a2-86504429ad4c.tmp

Path C:\Users\Admin\AppData\Local\Spotify\Default\c8224f96-0cdd-4e8a-97a2-86504429ad4c.tmp
Size 10KB
SHA256 bd9c0250d7e6ee8726c60e7a0e089d356e721d8ce98e31c2f6542cc80e5c0dc2
MD5 ad9a0d8148aebb16c908723108ddc12a
SHA1 52c45475e67bba7b6a53ad00086273a0c96f9725
SHA512 8daffb8512c9da71b58efdbdd80ffc3685a721bdd23e2efabc2e8d2588ccad02048b29fec961fbe83f41d335585efbecde10ba37b178d650fdeff76f0d3a8005
SSDEEP 192:zRZjIGbqJwIWfv7VVh9+Hc36+WNOqdvL/yIsn2agu:zRZUnJwIONEk0ddhu
TLSH
T1F322A56EAA24AA7F6CC7D269FA657792E3F1102134903D88D7FC893C15D7ACD2223057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Spotify\Default\trusted_vault.pb
Size 84B
SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
MD5 85d7a7c1e12b26cd994cd41e587629d6
SHA1 bf53173aa4b19a217eb542951dbafe3ec3506810
SHA512 b3562e0466d9e218e96be44a01feac567e2843f61d1fe5201a5c7d6eef0e714cb5d7d8aa380dbe4f341aca2c46e615f3bfd29621a4898cb8e027cf1155b8df83
TLSH
T115A0128266008642461DB130C80B4C4018311C5A0B34400111F36EA362D5900C541440
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Spotify\Local State
Size 917B
SHA256 04c022f4885583ca6f54a2fb1d47c15874e6a14ba5f856ac506edad1d38bb648
MD5 8c7a85fb9ddac1f8343bc02fb000f2c7
SHA1 b5c519f11bc86000703cfa0f3e526590d93f0bdd
SHA512 95ae39742b61b2f11c476dea0533f65743ae87dc8d1e818009bcc9d2e55ea1b5bd0321df2817bf91015a931b1718be0b4db753085bc6d9d05759ab41fb49602d
TLSH
T15F1163B2689067356CA05ABF6A826B120E33227690650E55E3DC072201D75DD8353C34
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
Size 56B
SHA256 2d1675beed942cb19c297b4c8614ac0d04084a239fc298f3c004f69a3d9a8f01
MD5 48007cd8af4c63f66f0a8e142fa08aef
SHA1 ac1778c048ee756eef082a6dbd4193266483e278
SHA512 9926b3765698c7c20358d01313a587b40c9b4ae45e61d76295c93fb1e4c85c0ff56974eb3b2c2c647d8e5b04cdb384083a6f74855557996b23eaa3731ef45317
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Spotify\component_crx_cache\metadata.json
Size 124B
SHA256 418e37a64c865013c87c6d30e5094d292fa74fb46e449d968ac83f492e46407b
MD5 65978328b8ddedd4a287abe5830f4bf7
SHA1 9bc9c6b04f3ec217420c3b4c0144f0cac646f106
SHA512 ccc0af038181bff44ec356fdc1a43a3a97fabf3aa55411bb08368ec95c3830229a7f5d7c23e85f55a3ddc7ad078de3ee2418fafa64d6dc92464892ccbab119bd
TLSH
T17CB09BCC05DD81B46E05867E517D1C57D6467F015464159555576511353834F0052157
MD5 SHA1 SHA512 TLSH

Submit Download

d5cbac2f-85ee-4dca-a5d0-5f525b85de38.tmp

Path C:\Users\Admin\AppData\Local\Spotify\d5cbac2f-85ee-4dca-a5d0-5f525b85de38.tmp
Size 6KB
SHA256 9af7fccee8c78ba15128492f26991dbbd3c0b0077e811bfec279c698918c5749
MD5 fc892801f7e866e6568283f74c98d090
SHA1 6ac499e85f99114dce05c3005288a28bc8a024c2
SHA512 7e783e92c5f8247adc7ccbec2afc46cacea10974971247f79b87899f55d27b753cb4f96b4da16f0a978acfe32e2f250c29eac5fe1b37dbb49ae29d8836942ae2
SSDEEP 96:labJEfcQrFIA+2otoh+2otoyN53pDDIB68GyvteQC/glp6aocNO0kAdea:QtKpIX2Ux2UB3p384YJXne0xb
TLSH
T188D184BDEC86CEAAADFB47D16204BB8AEF54326511907AD0D8D90F0C40CB5FC665281F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0bc14c5-b9c2-435e-99a9-3aa71becb35f.tmp

Path C:\Users\Admin\AppData\Local\Spotify\extensions_crx_cache\f0bc14c5-b9c2-435e-99a9-3aa71becb35f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

000002.dbtmp

Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe

Path C:\Users\Admin\AppData\Local\Temp\2026-10-10_b7905744e2b7074d7405171f4f2ee154_elex_icedid_luca-stealer_njrat_swisyn.exe
Size 1.0MB
SHA256 d4d0a8d2172dd10c98c82459384760498e82616b289febe70a8bfa6e1958ec8c
MD5 1ce03994e9686a0e0993221543fee8d1
SHA1 2c912bd61efbc19fc50257d9b28dfa6a51302922
SHA512 c26c2b69af7de0258574ea294cfa8b77c689ff1b8d1bd5220cf4ef8e1d60694fedf0f5908bdb7945f1fdab74819ef4e2388b42370705c759578ea0e1d34f9274
SSDEEP 12288:MaAmQBxXr/6jcRrz0u673pQqxZEZiLn5osowwB7DTSFi14jv:DvmXrJRrz03pQqxZEZD8v
TLSH
T110354BC85B28D5AEE363D57D5021E27DEA317C220FC1860642E9A1FC1A7B774786BF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
Size 5.5MB
SHA256 cfe5ee317c2225b9a7e677517e2db5e9640ba2c0ca2ba674d93d9e4a85192eed
MD5 09b18965e804be88d5e0c3dbd3f77699
SHA1 bc8a2f6b7630628018df332b1522d6b20a09d949
SHA512 295b642111876c6d9b32a4063dd9402dbbd6d1dc567f1fb3fcd7b5a4d2104c3c83fb19ecb5cd72b4f2e5a8cf0acfd1b8b5fab49972f4015496486d6e13017041
SSDEEP 98304:6/c8k60hGI3PReJcmfZWt1EdAy7SY4x1f8IKq/An3MjoD1C+2YAqt5gZ7KZEs+kY:UDk/93UJcmxWt1EV7SxrK9LD4+2YAqTu
TLSH
T17B46331186F0AEABC43963B452C42371F6F90EB05065E7AEDD630D7FA1363C2CEA9519
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

native-licenses.html

Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\native-licenses.html
Size 69KB
SHA256 1cd2bb5505e9a1b98526794138e1ae346d18e65e7b62a8a8aac632599b57d2b2
MD5 25e5d6045db97c7e14a35336f3c92d17
SHA1 8e7f0d83cc2aed00e125b65fa92d628dd0f5e704
SHA512 e018be71204b75be8a292b54880f1dad6d0ee06611760e7db17701d942c904347b16e9c35a00f4c5f2d33504ab6a5cee1bdac7f0500d2ddfabbc2460eb8f25c2
SSDEEP 1536:N8Cbok0mxyYtdGqNgLo/8fj/0HPyWNxexxokeHzPgEMZAX5RTWX2f0EV:6RkRNgLo2j/ZVczYYTgNk
TLSH
T1D8635F16B5862F3322C781FD99A05BAEF2D65098E7192D4C33FC86D4936BCE3D1E2446
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xpui.spa

Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\xpui.spa
Size 10.9MB
SHA256 19be39b9f8da51a5e766699bc0e7a8bf6dc6f09b1b733a2d8feb4cb2e1ce0608
MD5 59ca5295355832b53bff8bfd8d297a91
SHA1 84f14a6a8504ae9ae8d55c670cf89afe1c0ad457
SHA512 52d65f849bdde9673146bb6803ab95004a3173cb50f6882fdd856a5fd0e3f2818797c18a1e49c1338fdd619d5d2186a91e0d5bbd4e3449d975c09cf346576d4d
SSDEEP 196608:GK5MVcxj6Zuf/93oHrNI/dZxgnKLP4XyYIAar1dl+glG3R0t5G+tWtJeQ3H5ppbF:T5Ccxj6ZsmJi7rPGyYfah+Xhj1bee5pX
TLSH
T13CB63313C469484FE9B6D7B9F58A0AEBB358478290D3E26F9B2D4CA0390549F1B135CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3DCompiler_47.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\D3DCompiler_47.dll
Size 4.5MB
SHA256 00f32499385ffdfbd05602e0b7c9072bc143717a42b8c84c0a6160a23eb3a8c6
MD5 4bee0da7573c4d9e6881ef88522b6afc
SHA1 fa27e1a337315855843de565f71816b3d9a015e5
SHA512 3e4ea40baadce8f745bd449b95874ed643cb27165287b706a28b750bf4fae331ec41ada75f6b8dfef78859e9cd03ddecfddd3f928c1b992ba2f5773e6f827980
SSDEEP 49152:+6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/X:+Udeqt737jFm5wv
TLSH
T19D268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Spotify.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
Size 41.5MB
SHA256 ae772df4dca26c53c73ea720836db77584dc431d14d3ab3b5c4b49b0bd2b8fde
MD5 4741f3894fc92aa2923d27331ad7d80e
SHA1 00f3f671ae26f2ebbdde810212414c83c6ea2241
SHA512 f8d34a702ae7acd7ad2958b01009447e201ae82b5122d9983cb6e36ae49df4906e38d711be7ecb0b03c36bb4904fa444d26cd44fa27f74fd3c8f26446d0c7b0d
SSDEEP 393216:wNyCiACRmzwvdNFp7SZYtKgFveDvBxvSnUc4eMuhiW6kNBkND:JRFpB2VS6kNBkND
TLSH
T1A2978D9A72E401ACC0AEE1BACB17DD17EBB7744A4331E35F02E192625F67A20163F751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Spotify.dll.sig

Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll.sig
Size 1KB
SHA256 f79ea4f4520de633938ac17139b82b2dd4f99e21f65a454c4de4b1bc01751984
MD5 5ae26067f8879c8c00ac6fde0396ba51
SHA1 634cc97255d1fa98384f6be3cfb4e79a5237d66d
SHA512 d4754486e6f16b191d6389bde80c8b242682a45777d0eb1e95eac077bafcd7fd2186a789bc843e4733df2b3f0eb5229e81f8a163bf18ea197283e4393f8c0d0f
TLSH
T1D12196A4BB0D7113A161458D1781DE08DFB343C1FA71A89182BC89B1DC52721AE878BE
MD5 SHA1 SHA512 TLSH

Submit Download

Spotify.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
Size 3.8MB
SHA256 06db5b888d52f7a3a4182cba18dfc8f4659646d2ff0110bb08586781a539782d
MD5 345cae60ee8d6805645300b5b12aee88
SHA1 bba3306b357128a45208dad0d3515af50b296e19
SHA512 a67c294808f8b5540544e6e470209c5b32466e2fc34405b9680ea2f222857bfa6676f831cf34817ff9095d439496e64f5557a88a10173cd480c837dadd7f01a2
SSDEEP 49152:C9mFiI9qimTaUs+V8DhZOCbqEMMrw9E/ffBO8zkTBMG4R0MQpzGFbiGIy60uDbcr:AToXlQoMpEvko36Io6x9
TLSH
T15D067C13F29A01D8C01DD179875A9232EA61BC454B35B6DF0B90B7621FB6FE46B3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Spotify.exe.sig

Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe.sig
Size 1KB
SHA256 78215ff8777a7a850cbed6cff7d7a605e6866a206708c12546aa1f790252752c
MD5 68178c8c4dbc9c4b00ba60b3415256f2
SHA1 a45bef26c3e450147cbf7435df3c551446da4083
SHA512 82fd9de73bc4002dffcd962a8f3a6fb265c9b8c8faffa0210ee463c6de371fd30528970d3c38b9c598f365999f41aa1b4ca9c588368e14f79bed955704579a7a
TLSH
T1A221E9F57B1C3013A21186997780E818CEF643C5F5B014A182ACC476EC71730A99B8BF
MD5 SHA1 SHA512 TLSH

Submit Download

SpotifyLauncher.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\SpotifyLauncher.exe
Size 10.0MB
SHA256 b1e7419c706ddd33c30f160099270cbcf24095cb2c990604d8a627621c5812b4
MD5 6b8d891d65394929f7c896e697721c1a
SHA1 abee6903e405519e8823043a58e15bb08f69c8f8
SHA512 da570946cd971d02efb08d0a71790fcc06ea2595b5a93903a4ba921585bf78a2608fd5f455bfd46c5ba1d1989b4d7b363ed274ebfa0ea0260df0d3ffc3e9a504
SSDEEP 98304:nF7bD3HGvGHLtGDOQBd53Y1mD4WmXjIw6gqMi+7cwyhnRu24jIk:nxXxH5gd53tD4DjIRMi+OhUhjIk
TLSH
T168B68DE731D552ECC067C17ECB13ED2FD6AFB42A0622D5A751A092621E27C503F2AF16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
Size 689KB
SHA256 9a9cee828a46b2b3ab96bc6907493fb5ee6cb23da2239ee92ae4d7f18bf4d130
MD5 561272ff6a20f0f38397ed8e922c44f8
SHA1 a12852fa3b8d5ee79d6ef2eb1196e03ffed0d2f2
SHA512 c4c016fec2b21a2d2d25551e554f88b73bd455a874ce35a956f4da56a8a9538d11a156a6877935929c9d631fd4d1a05ba352417b0364e9736673ab88ef17aa65
SSDEEP 12288:XI3H1fJwhjzgsz5B0GDJQrnKs8SNP+QSsEHeilSTe+gnPzmxufYJblItcjKQCrC:43VBE7zEEmPLVbTe+gnPzmxuQbccGQt
TLSH
T168E412E77370AC7DEE9B1677826514B0FC371A280A92160A17DAF8796913B48D8DD3C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
Size 1.2MB
SHA256 4500aa1043a4edcd12c2c524ae0ab43f4c482f7280e3a850d94e1aa1860d34e2
MD5 3710bbad1dffe591693724f12c849f38
SHA1 7776ed470b7eaa3b2eef4e0f82f46277f33ad762
SHA512 e83de335d400735d9ddb8ac6e164c534c196baabab8e85fef57dcb7de6365481cbef47cdebba56214be435c617c0a7df21c340a2543ecdeb1577abf3859a9ffa
SSDEEP 24576:83zB09p2zLmmibkFR8+mZiqr8BWhQume1RvQt9wbNQIQwuSXAk/UGQ74:83y23mNbkFRJmQ+8khQRa1QPD8uSXAkL
TLSH
T1864512D7D3B0EC7EDD520B77939B10E0FD7500271A62190F0B26AD7A39166C8EAD5A83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_elf.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
Size 2.7MB
SHA256 b4e4f21434ca96935bfbf61fefeb3a7bc506b394592b5ca331c2ad68a648fd5a
MD5 7ddf74e23c704607ff26bb5d6f950226
SHA1 31c2a57672fc9a8bf33f42e7024990e2a24a81f8
SHA512 c200e8a3520fd1cfbbc8c6342ec51e6bd7168f6396ab4472cd4491dc1882782b4cfbd5768b1679570a2f09a08cb08f9b9847a61043798a6db43905b8be054bee
SSDEEP 49152:y8H3BjteqPGBMo+9b1rfUMhqRRfqQSeaUYLetPgJDijASp:LEqPVx1t8PtAUA0
TLSH
T1BFD57B13F6DA01D8C01ED1788B5B9232EA61BC454B35B6EF0A90B6561F7AFE4673E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crash_reporter.cfg

Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
Size 631B
SHA256 e22cebbea03256524d9b864f6ac5149203b7acd91af5b3fb97417d6239d4791a
MD5 27e12c610c7d2e28bd3b74bcd8730365
SHA1 e04b36562f0dd0d7a9313b3953d6986bcd560772
SHA512 8fa9c96a9090564d334a3ec3d6274ae44ae28a20a283b491e916690264ea28dd0854fe250465566fab3d1e7f351184df120942dc06386045ae0f32fd4dc56aa7
TLSH
T1D4F02DFF49D0657A90F10B61D03C23107CB205951B2B805846631F993B48F69DA5DAB7
MD5 SHA1 SHA512 TLSH

Submit Download

crashpad_handler.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\crashpad_handler.exe
Size 773KB
SHA256 44dc628fad4505543ca42d674c263aa96880b82c79d81b504fe6236ec5fc8aa4
MD5 c386a8fa35265ce59264e30273d39b3e
SHA1 4a740b6832808d081c12a23457b0c9165af4b620
SHA512 5045ce5038c02dd236d9e45180fcd783abe9f184c18591cefb6cb0cebc8b7dff1180a5b9f4eec6a01500a367fe6803d218bb9092fd38cc27ba59be42c1944886
SSDEEP 24576:4t2BLVFSifYVXjj57bwfGrqPzOQTFZxyZsuv1Od+aVUWqn:4CfShYGrqPzOQTFZxyZsuv1Od+aVUJn
TLSH
T150F46C2EB67810F9C1B7C1B5DA029807F7F2780B57B19A9F13A543A61F236544E3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
Size 10.4MB
SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
MD5 c9d17441b2314fe514cd8cb951577c1c
SHA1 15cae4dee805f3e04171e00781da13fe40036439
SHA512 836d4f4fa591ee059dbfb943c2f13ded58a0f5048b5505214ec7105d0963106e0078aa262090d0dac9cca80995c7961a900ffa7a2af8ff315aabad1313bd37a4
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89j:1/cBhORok2HiXUxO/RJk3IWhlYntjdOj
TLSH
T1A9B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
Size 460KB
SHA256 90c31f94abcc4762ba8a4b3b059fe7b1110346ac8b2f9b79c6c9d4f4570f3a8a
MD5 69d3d900c7bd97ddb0c3c8496e605677
SHA1 48c7701b02b0f7ccefb36048940c863e72e38255
SHA512 36518ded8f7ab159adc504f34648e7c4666a06ed79910ddf8c1371e72c09ea1d6a9f27db9cebffbc97e1348163ce3c3e1910949e7707441b4698d257c61e9aa2
SSDEEP 6144:njmJgPeBK6fWsjB5o1Nx8PZJHIgiBqmYVCKQuWRkEL5Ofb:njmzA6fJBix8PZtIguqdVCJuykYOT
TLSH
T176A47D05B3E548ACD037C1348A538647EB7178960B61F6EF03A0E2792F77BE45A7A325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\libGLESv2.dll
Size 460KB
SHA256 c9124968bf26fee0815ee41f851f60b1a5a03d6b05b4e5d8edc29f75a1ff33b7
MD5 11181d533ff0725994f42d8a1c8fcf91
SHA1 b8a4b86d5e750a170b43209f31afa3403bc69e0f
SHA512 c5dfb8acf0384d540810b509660a99eb725bb02901966581f8a64b7915489f2f9ff3b3114bd82487dfe0b85d5cc375e4de1be6a2596b928bdfe393692db948cf
SSDEEP 6144:DODgP2BT6fjEb54o1tb8PZxHIgaBKozVba+4luWFIukKLiu:DOhx6fe5Vb8PZlIgGKsVba+quO9NV
TLSH
T1B2A47D15B3E548ACD077C0348A538646EB7178960F61F6EF03A0E2392F77BE45A7A325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcef.dll.sig

Path C:\Users\Admin\AppData\Roaming\Spotify\libcef.dll.sig
Size 1KB
SHA256 598c52ed728bd339ec6905f42ee3f25371fcb3167786beafa8e3340502bdcd56
MD5 ce6f5bd525b7515b63e0735816812eaf
SHA1 2bb1ac3647515895548c07a2e806b50b0046d292
SHA512 c712b8c207ea82a6f0601ae21b7beb1e74833e56982662b60e005347823c71a4e3262161006c714a1752d54135566d6b107ec57e3a06e9726678a6fa4cb9a050
TLSH
T17C2196F5AB1C7023958083991780E504DEF643C9F6611495965C8572D861720AD968BE
MD5 SHA1 SHA512 TLSH

Submit Download

af.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\af.mo
Size 16KB
SHA256 f18151982b11edf6460b02b6cf7bd5d104fe5cfb7252dcac40247ced81326e40
MD5 88f921dda27b269c8d3d546964784e92
SHA1 8be89feaadfb2e32b61c73c01d9c55fb70214b03
SHA512 80d14efe322a455b67445f4be43e05c27b5446e22cf8166156356fa1c01eca37ba50fa9f57fafc7cefbace298dc0da56d4ddd9a62919713bd4eca68421d515b9
SSDEEP 384:z1LWCiUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n7be8CNL/2SXILAxWQvd:JLWAOXqHbU/20F
TLSH
T1E272D74A0B12DA38D136577F6A5F3136FB7F615D8FA1E5306EABA00423C236A01B60C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\am.mo
Size 20KB
SHA256 8fd30c72089b6afccd9b53a69fec02df84f01fbc112502534d483a288239056e
MD5 95406871511551f713732c1de666736a
SHA1 240a2214c1f1864beb15c7e4d068e28df4f29952
SHA512 4f9d67f365497f01e57589ec3dde0601a1700c4ec26c5d0355462ab4e415d6fb641f338bc9dc5d4774b5c2e50da6007cff90b006bf02a335a1ebe85ab6970c5e
SSDEEP 384:cfUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nfkHPbqQwWSAThggrTriaKffrk1qBLng4:ceOXqU+QwWSA1ggrTrKLz9q6kH+
TLSH
T158A2B749ADB2FF37DF1F4B7E942A2849D6699D080B801838D36BD398279AB531CD6071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar-EG.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-EG.mo
Size 20KB
SHA256 6db052b3510c4d4c53f9262a17ec7dc9230fadb8e6b61fa13e02230680ee7988
MD5 7e24d25e57faccb0efb4dcedc6ef4dcb
SHA1 749452da4b0e356763425f2a2294d89a49b323c8
SHA512 1ee692d13824ab866ec48bd3c65ce8a33204b462fb7f2e8c1942867edea53ab7138e7430175d4290690c9d14e48650c9415dcd0730c1e16525f1aedb339d420d
SSDEEP 384:il8fUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/FeImB/NSkKHqL63Z30M:s8eOXqFmBMkKH/
TLSH
T1259262D70A25C832D62BCF3ED2DA346CE577AC26DB8AF83134D7A81152C7612529E371
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar-MA.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-MA.mo
Size 20KB
SHA256 aa85d032dd43e35aac0a302efdafef240f8f16a197aa9d333dab62ad7630d122
MD5 8a4da93a093c20643ea811c5b789d98a
SHA1 5efa38a8e7c00b288790151221c89882d25b5cff
SHA512 3ab427642aef42bf0ee90a8219611a5ce32cb928732f56059cea70896c6bdbdfcf28de8985c67cb01b094fd1731c92adc79249c3a2984203b68ab1cfd066322f
SSDEEP 384:6LFrUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/klK69oL1ziz63DkxU5LbKbgpfYP3vAi:6UOXqiK69oq6z+UD7Csj7rhYJ
TLSH
T1DD9262D60A25C831D627CB3EE2EB302CDA377D268F96FD313497580496CB617929E634
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar-SA.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar-SA.mo
Size 20KB
SHA256 44c801b550b67c6b564066a2e1a943255ee207f8c49dc06427355e03a9aee4bc
MD5 94e7eb63977f89dd18768c04b17d52ea
SHA1 4721d0c3f4f9373a303e6dab9694ea1c8dbf48af
SHA512 ef82a7bc59ed0189ae54987329fed11c7261dcf7351308490e01a94753c6b331b554c46e526d897183bc8661b999e8061b86bf4c90013e8be8447baf175b0a41
SSDEEP 384:G8CYl9UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/QENXxpYv+t/IYL63Z3b97OeGVebn:XCYlYOXqUmXxpYvBFC8
TLSH
T1BA9252D60A25C831D62BCF3ED2EA346CE937AC16DAC6F8313497581153C7643A29E375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ar.mo
Size 20KB
SHA256 a7b998f51750f4b06489894af6af9141601a344c5fd73a79ce88a5e05bf4cd08
MD5 4156c5f8a03a35f805e275dae1de96bf
SHA1 d52b0974130493288b037b76328d80953a95faf3
SHA512 9a83700a8db2d2f7d909071ab08147b4ed233feaa50073c463e1d8a58954c306d3ec4a2b281d8b72683ec7f382da79f30bb8bb2275f39a047903151fea986337
SSDEEP 384:FxBfSgAQKUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/F89kS7rDj3EL63Z36saJuel3MD:FDSvQtOXq4j7Teru
TLSH
T1F39264D71A25C832C72ACF3ED2EA346CE577AC26DE86F8313497681056C7603929E375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

az.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\az.mo
Size 18KB
SHA256 f6fb69412508d19c32ce514be79334131264e4ce17fabe0409e0b8245a7cb678
MD5 a4c7ae0d2538071c90c1a0e960f4ec8f
SHA1 7d41c3c127289a3ea530f2ed7c5f47906abf3792
SHA512 d09798acef3cd6e55c08fe541fbd7e6b43a39b6163ad1a81b9427fb0af02063dcf00f65ceea169c100f1f3ecfcfd18cc78de0681907b5e8b4e6fd1382079df0b
SSDEEP 384:1rMk27SUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nrUMcnRjwV1B5LbKnAUf/HBi:1gB7FOXqvERKU3hi
TLSH
T1C682F9DA0A1ACD28C63F43BF099E7676E62F205C6FC152761AE7940823CE70757E2197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bg.mo
Size 22KB
SHA256 6fcf6c7033be5ef5afdc1dd499eafb6f850f727ccab6bc7ba9a3e03ede3150c7
MD5 bdd47f70980140907fb60b8fcf91db3a
SHA1 7ce55cc9fb43ccffe8346ea4de0c1b7856fe317a
SHA512 ec24b67ef4a63760c059784ca7b25c433381a0b17425d9b8643734531535ed374790feb9d6a313db4a23f7ff311dca531d76536ccc8e0305a38df5daafb7ea26
SSDEEP 384:Q/BjEUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/no3ldxhjcmtYLbK/+7:QJjOXqqdPLtE7
TLSH
T1E7A264A5071698AFC212E6BF99093D0D7EAF40FE3FE7825115762CAC32F117442B664E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bho.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bho.mo
Size 24KB
SHA256 d215066d1da8189454b476a68ed4dd67cd956c68ecaf49a83ea865e9f272fac4
MD5 a1e12db8aa0216e08d142fce7db9677c
SHA1 59f791cb94b5dec69bb0aebd34e3bc3844fdb212
SHA512 65bc453082a504ce783bc797004e509aa02c6a59b7c1173cd02fff5dea41a2dd350c2959a0160b1d357d47142ceaa3237a921c5543530a2537dff62c56193d47
SSDEEP 384:LBzOZUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nSCeTBFr0Pa5KLwvlLgtgW7Ga7WUPh:9zjOXqIBFYPVLwA1YI
TLSH
T19EB24E4DEBB8F7B5CEACB9BE3B8A0C7AC57D707067A441760995B3CA8180CB401751A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bn.mo
Size 25KB
SHA256 1a5d5e200811988cc74ecc389c1fe24c33a48a543adc87a6f1c6fc8cb34e637e
MD5 c356c971b43e33fdcf18562b4c50dfec
SHA1 b0e4c1a916ba5fe804ce55151131cd779215c9ba
SHA512 4ce7c6539e429f15616d85fb8ca4b8d177f6be8d152620ed5df8e642de815e72b0ef62b91b688ca51756a778f768f87636e7c36d8188caa0b9f656646886d816
SSDEEP 384:gFHeUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nZCNHq6/jY21vAcLbKUQWiuKH:qxOXq8NHtLvA+KH
TLSH
T11CC2EB548C2D85B3F896CEFA434C2334D127AD4A4B61F729DD1BA0483AADC7C49ADCB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bs.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\bs.mo
Size 17KB
SHA256 83e099dbc0022f6f2c723f701cff4feb688954ed5a0cca8e214c16b0346eda13
MD5 fb621afd0d03b5da7232791f4587a346
SHA1 1bba353173342c0b57b18110f45be860229d8f63
SHA512 206afac4b648467f07042372a386eea2df9d5ab43cffc4718aa3d95c900f37f23e90afcc5ad0ede885986a744ed30fb78124a7c9dd4e9b8f996c6e310a99f8b3
SSDEEP 384:FyTm2t5DCUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nimH0JIPihV6Dmr28f72duk7:s5DVOXqBH0bhEDCSduk7
TLSH
T19D82F9CB1625CD34E27BC37E6AAB3915E72F448C9D8599391AAFF00413C335A02FA597
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ca.mo
Size 17KB
SHA256 0f35a77ae28ff5e148ea122780f1006aa5111da6235416a2fc7ed0c215175a66
MD5 4423ef243c76feac2f7f4d113cae0744
SHA1 4e71215bf5503878eb92eb4db626784513749cf0
SHA512 779bcfa60f2cf5557e01501342abb1d8ad138fe3f206e9f210ce888b8d7289b3dc4302c7ce2e4c1e1c2e379059d147f6e1dcbf60c19d64ba925abe6a745dba54
SSDEEP 384:Ds1cxUxJUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nycrGWL4LeH4yJfdWLYRpWV:dxOUOXqhrGe1WF
TLSH
T19C82F8570B11DE3DE137033EAB5E7017E62F958C6E91D134BAEB648423C63CC52A329A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\cs.mo
Size 17KB
SHA256 0ce5ca17a46a31ccd37aafb145133a6f4e6606087ec7c9357d357aa6903ba5de
MD5 1a7a9c0425e78e69c021c1019610d517
SHA1 b2e7788b6085a3829ca15da43d8ce21e6b0f2732
SHA512 0d69ff8c00c4cb7d8af4d98b65575998352bd6228c7a36e5a4d2170017dd8d794146ea32a7bc0c8c97efc05f0d7654066ed763fb79c3b1c4f2c153eeaa6b8309
SSDEEP 384:eCtlUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n1djBENQTymthmOF6/cj:3tQOXqpLTvmOFOc
TLSH
T10C82D76E2611C938E637473F6AAF2528FA3F515C0F96D1341EFFA88023C234A16E7556
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\da.mo
Size 17KB
SHA256 a5f88cc25a829a26de482cd4b4d28c44277c70981fbb0050a54cd4f437fb713e
MD5 1d2f2af9c492a92981b293fa96870a4d
SHA1 00bbf403e62cf69d5e5eb24103aa62c94f49f692
SHA512 bcaa5766357ec45e016eb7a3af7b60d29c8ce46feef42daeaaa3f4717d6b0c3c9a93411adf360eb86c37d690c0225026b7fd5d34440cfc6b852893daba65fae5
SSDEEP 384:BjvVW7BAyUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nwDYOHOZERHRyebWqeZUQ72CdT:t9HOXqOYuUEx8eER5d+0
TLSH
T11782D88E1A20DE38E937477F665E3669E73FA15C8F9496351AEBE04823C264103F3197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\de.mo
Size 17KB
SHA256 ab6b48450a35f81726e61bbbbcac152b1f029a2a524c7e4829042439e5d37f1e
MD5 c252cba05e588086be4c4518706f8aee
SHA1 44dfb7a573141de11d45f19bb1d4a68120f25063
SHA512 e6c57c66f3f1b5ab466890d743cdac00c450908d71b62fba6aba4bde3995532597bf0971b299bf404cf2931419f85f47739c2bd8feffc062c040ad33cf3851c8
SSDEEP 384:jhIQO5UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nkihmjrzpZ1lmr3H4Z4YASJZRlb:jR5OXqsjHp0ru4YA4zlb
TLSH
T19782F98B1A15DD38E627833F5B5F293AFB3B925D4F81653429EFA84413C636702EA017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\el.mo
Size 23KB
SHA256 8bd6f8d94ab6b5a0c1dd19f247e381a85c887168f4b118c954203adbf5a08904
MD5 b65df3eae6cdc4c4242add81d2b88233
SHA1 f4fd64d50cd37151d8fd7f6129564ed85051d120
SHA512 28b95f382dd83ff9ccb57d93d3ef8992db64d14bb1cc7581c8f37c085a5fd03f0a379d56a667871fab7b63494a9dae19ae08c7c4e355b6130527356a9092b9e1
SSDEEP 384:oZUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/JEMv6eb/LbKhxwB9cVqjOhyO2:bOXq9vTBGViOhyn
TLSH
T1F6B283DF75009DBCD05AC67B8499B07DB78A5C1C9F48DAE8663EDA107BEC1614222E0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-GB.mo
Size 16KB
SHA256 dcd7b66a1c2bd622958a873c4b42ef925019a3f9b8d4710f9145db71409bf628
MD5 fe7826990a7bee3f89f7544687025771
SHA1 abfd82093d520ad60403e98609112cceeb80dd38
SHA512 5639674beed9657286ca5d9ec437aed9a957867ca409d40f0ffe3748f01fe935a9d0cffb24b8aaa946f59d4a10a04113630d2b11403b33f74a59d0806ad77385
SSDEEP 384:xK/IputvdUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nwqA9oz3glx0+CPP6YMlLbK7nw:YA5OXqzFP6uw
TLSH
T11072C79F2B21CA38E637477F6A9F3125EB3B805C4F91993419EBA04823C625613F7197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
Size 581KB
SHA256 0b2a72cc851d62f615080f3954f2c94d7009ccac31ac4248398f08359fd1c714
MD5 1957e9bac252b68c2c4ac6f9e05da84d
SHA1 103e085aa11b9ae221976b58abd26833e4dddf40
SHA512 49251c97a974b7ec8c5a8fccf56f32cf6d61f53d4a540ba71f0a886f622812251e621810af1eadecbd117b7d9782496c32eaaa3a0a51517b62235e96a60019bf
SSDEEP 6144:M/5zehi7wZlsHfwwOQYNY3NHi5mMP94hbR8faY+W38OHAjBngts/+bwL:M/ZecwZiHfwBNsM+hbRMYjiwL
TLSH
T110C44C1FF744122A059352627F09A5B2FF32D06CA36112663CBD812C337776692BB6F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
Size 16KB
SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
MD5 8ce43bf0bee69290545738ae472bd5dd
SHA1 bbc36343250fa8bb2122c8af9e021fc80c032a0b
SHA512 67825fdb6c0381b7e35c73221caf37374157c1333388d0d20685f4d732340f7fc04faba29ae266fcaa921fff2694b5f8ca0ba24fbbdce2146189924e354df7a5
SSDEEP 384:5rg5RkIUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/neqA9oz+EFRUeLq4+lLbK74Tdu/:kgOXqEXqP
TLSH
T1DC72B89F1B21CA38E637477F6A5E3125EB3B805C4F91953419BBA44823C639603F71A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-419.mo
Size 17KB
SHA256 8ef4238202014096cf738dd3ee3113adca63944cdd191cd8464a0b2031625b2e
MD5 9ac34e6eb36325acb4b340ee0828b589
SHA1 634901c15e308fed67938d889f176de53d149598
SHA512 f73ea40d3a9e1408d32647b96e9457e0610c4337e31ef49984e2886c2798701a9805581a4f2ffe1f09ec12413e2028f4e562af516bdc831a07d145ddb6ddb6c6
SSDEEP 384:nEG09UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n+frjLkD2R:9OXqq
TLSH
T1F882185B1B55CE35E237473EAA4BB62BF66A80DC2D45C12416FFA49423C23CD02A359B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-AR.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-AR.mo
Size 17KB
SHA256 c32c177a1aed5a15a4bcd07dd4dc3db74c45682ffaf6a1c8a45393142890a6c7
MD5 c15742918d8747d333b1c3c919e5e9f8
SHA1 352dbb196f666024b7ba52a4dd6baaac21719b0b
SHA512 346d7f9735210f51f10fa345904313c0829a4896343ebdc6e8c42bcd531e3a8c9746c9e1aa6edf06837756dbc31c3f23b9cb45f53fb2e9f6b0e533b2e32f360b
SSDEEP 384:nTUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/ni0ysBLkDNRD:SOXq+tRD
TLSH
T14982F81B1B55CE35F237477FAA4BF51BF67A50D82D85C06016FFA0A823C56CD02A358A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-MX.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es-MX.mo
Size 17KB
SHA256 404759a8fbb728729692747ac19f6b6953bc0632bbbca753b24771f1a653eb78
MD5 991450d1200578f2c414d56345b8bece
SHA1 cf4f5f13268ea4f28e7f763b568050f7e08ab85c
SHA512 749ef521ccba4bd2768ed7ce56fc7b86ae9bba6a8b848bf73f9b7fc92190336689f07ee849abe16a5165512f1854ffbf65e09548feec0943b0452a2d748791dc
SSDEEP 384:nZPpAqAUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nTifLkDoh:ZP66OXqOh
TLSH
T12D82191B1A15CE36F23B477FAA5BB51BF66A90DC2D45C16417FFA09423C27CD02A318A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\es.mo
Size 17KB
SHA256 c468a03f6e45046fc9fd8a5133091fb72ed66587627662cfac61632b11955365
MD5 c58608ad2505579a547f975d5174e003
SHA1 90c5bfb48845569f0beee654d825739f00547ecc
SHA512 bf96aceedfc47bdb390c4a2cc11618728dd3a04de5b326a159afb12f6bf3941d512b6f7a2fb436fcdb2114ea3845583e147ddf0b2c64bad953d6f6944639e52f
SSDEEP 384:qyQZwUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/naORYRGdt:aOXqzf
TLSH
T1CC82086B1B21CE35E337437F9A0BB52BF67E41D82D46C06056FFA49823C638D01A359A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\et.mo
Size 17KB
SHA256 992981edc15070a0adf225e205ee7ccfb2ec0b8ee0c1a743a0c0c51cf152d133
MD5 743757ae350b459b7a1837b4380ed354
SHA1 7bb338a5135cb4c3d92c7f7df84d79bb29f773d2
SHA512 ff01442b9d507e771b1ec51d2f20e7722c83df063158e2e46eae277ae9b1894c6e3d7d600e4baa0ce05c323fac47ba26131a12b224dad236705c1cb2ffa1edbc
SSDEEP 384:6t2Dk1UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nmuB2u5PQBftZ8HndxuBAu5PZ/0jk:HD/OXqXrPQ3VPZx
TLSH
T1C4720A870A21CE35E43647BE966F711AE37F925C5E409D311AFBE44823DB38526E3293
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eu.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\eu.mo
Size 17KB
SHA256 68ef4b89672fa1ff7b1ba29304af3792411c22968a43e09012358b45ce9d4048
MD5 533ccf19d74e1cfd9e1b967499230eba
SHA1 4225a7d5e765f5d8c39ca5aa631628a27db7e67d
SHA512 10471e3a994e7d2956f2f58e9266ecad8254e806cbc710c1804eaf0502add5ceee7eecb1d21efb4015f821decc4087a8ee8fcf475a176ebd5f5890108e53b094
SSDEEP 384:peHxgUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/na5u4q2tP7nYvugE+D:sRPOXq25vRQ/D
TLSH
T18A82D84E6F11CD38FE36037E266E3419FA7F805C4E559A247AFFA84423C639511A32DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fa.mo
Size 21KB
SHA256 bd60dd37e15d89125e818f0b0abc31a721858cd9e458f449ffa6457cbe42ace6
MD5 e8edc46ca68b601dd498b69a5bebf837
SHA1 0b8ff0b74033bc6e86355f40f25ecb19da62eb85
SHA512 71b28018ef1cc6132918c5fc1982eac02b310e41d94929aa3a2f369a27345600eb16fab56e719bb02c61bad36dd7a0cf2a9264f8d65cd68b9863e2f6b9ad7787
SSDEEP 384:rbPCuyWgUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nTG2ytlAd0ncJ7h8kpKUzlgBxh6:reuyWPOXqHLjey+SV
TLSH
T1F5A2868A2B698E73D313863B42E73534C7379E1A9649F950BCF1126406AA723874F637
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fi.mo
Size 17KB
SHA256 7682322d3bcb60af4c031f112408f40d183856cba9ef98a68e96ca600d0f8c6b
MD5 f8d4e5b62ead095fc58d0fbe65bb8215
SHA1 3c00834e1008ae5763df0e64588e660af9195284
SHA512 50d0914f894e7d70f1ad6405618012448d9c91d9f2207598a84bc68192f400eca3bb714e68820dada3004738aee1edc3697c1f78d09f3ebf5ec4b85ef0c21409
SSDEEP 384:Ogo8bUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nUyV3bJRlKp+1Lvm:oOXqT94
TLSH
T1C8822B8A1521CE35F17A877E9AAE742CE3BAD35C8E948D245BEBB44403C218512F357B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fil.mo
Size 17KB
SHA256 5a0290abda7f56cfebc1404f72c56a2bf1075bd453a087b31597cd40c1b059bb
MD5 5d7da5079d417f9cf03227b7b2c81964
SHA1 b7251bf39c99f2f5595adf2e400e8a7ca1217c93
SHA512 63977769ce459819f68e05eac93a86891fb0fe5e1d1e06cf84ac88ada152f79cab3a370453c9418f0013ff6a328cab32fea6676cca8261d6a2174a6414eb6e5e
SSDEEP 384:wMJxBBF95k8UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nrQtZ10FKkFjA+tllLbKx+Jv:w896OXqnIW
TLSH
T18182A64B3711CA38EA3643BF1A6E3919EB3B405CAF85A5381BBF644823C719552F3562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr-CA.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fr-CA.mo
Size 18KB
SHA256 faaffc93e48d90e466197879b3637782f926fe1a6948df0f648420bdd802dc81
MD5 f86fb814819a403b5d2e74e7528c2d46
SHA1 f35b30df78db0bf222c68ad498757f3dab282c0c
SHA512 b39208d67c720149a778547812b8eeb08ee959f61e7ef46cb0ad3a87ef4bdd1a293c8ab4a21f7c79ec11cb169ef802779a9d4d5c01e45621e55a3b61a7553a57
SSDEEP 384:TwgUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nQpeSk/uz3rWBYRoki+vP:aOXqoeSsuz3rWgvP
TLSH
T18C82E98F0A31DE74E667033FBA0B3156EA3FD14C4F95E5241AEBA44813C62AE4397197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\fr.mo
Size 18KB
SHA256 10d0030baefa37c09c8e73d7484c679179ff1ef71622130fb57c246ea088fa8d
MD5 d118f38a05bad717ba0ba30655136790
SHA1 18381957327856a1387bdcd907efb77401cc4a3e
SHA512 1cea7bb905cc38c10fab74c958b80ae277bcaf9429d4e87d379b0c173acfed2ad68103464f57d342fb21e3a8d46a7ade9823aae5f70a062b6aff4fd5d6c27130
SSDEEP 384:laY4UV/9qaUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nCN/knKnVvzr/qnogYReHbafR:9/QdOXqNGVvz+wfR
TLSH
T19D82F98F4E21CE24E1A7037FBA1B2566EE3B814C5F90D5345EAF908813C229D53971D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gl.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\gl.mo
Size 17KB
SHA256 baefb0f5a3551b79b0325b6b424171bbad91af8faadf2bc50bc43b52aaa9f4b6
MD5 ca8cab485b61300772ec85ed860d46f0
SHA1 391d22fb540c26b6aa3537d289a41e854a9d49c6
SHA512 d2f83d3a3410aad0fdfa4115ad98b097eda2a9b7dfdb6601c0aaaafea3ad8c0cbddc1e25e235b391b9edac5dab755324d1f83bdb1cf649685939e94e348974e2
SSDEEP 384:m0wRUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nYpaEYR8QEuvMh:JwsOXq0
TLSH
T16882185A1B21CE34E237433EBA1BB12BEA6E51D83E44D57556FFA45423C13DC02A349B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\gu.mo
Size 24KB
SHA256 ea34bf5f0f465fe070c08c7d6f056e12218314ba6931c944722a32aa45fd54c4
MD5 2862108ec531b637de8c50f46c12a736
SHA1 cc94c1b9f8403460aa98c20b27ebba617f241631
SHA512 ccedd041f827bbd4c0a8712a4a69f9bbbf219c448b47173295180a530aa2bc7478d37787a2655d44f651009c8033c584d3b0f32b3c785071a6abf81d73e80695
SSDEEP 384:XeCmdCUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nbnG8q9S9Zh9V59Yh9t6R4Eo7ld78:XeCmdVOXqRQdiqIlKS1
TLSH
T164B220A1C778F830E9D64B7F814E6120D62E9207CA6E331016DFEE445540D9E3EEA6DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\he.mo
Size 19KB
SHA256 93644d11e66b4ff522c962dee76b50b85ff52577420e32fc349975f00310d6e1
MD5 e7bde82b38f2e9c198ee3da7f35784e6
SHA1 aecc5de7c4503fce4fca83baa63b367e3a7c6109
SHA512 5f06f40cd4146b919d5d2497743ae38fad93fd3c865c518242fe4e8d78d81f1be6fde9f4216a58d87ece0e8013c5401a7aa1bf506183a6ae331ac4ddc34dfd96
SSDEEP 384:PIsBUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n4LTLgTL7lmMbyg8BPMo91kmV8+YLbp:t8OXqcLTLgTL7lmM38BPM81kmV8+w0CP
TLSH
T1B292A7C496D4CA34D13287FF9F6AF518EF7782792D927520C76A101C6FA30F4A963062
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hi.mo
Size 26KB
SHA256 852bfde3a31c889f7d8e178435fc62bfdd543fbb8b70b19f52895ce21ab84993
MD5 822f0ef186adbfc2918931ff6b3d186d
SHA1 5fe9100c1af27d81b9d7b09ae5f6066a69fa1c30
SHA512 d3ae0ae28560f358054d72dd79405c0652b534b4d8fd09e0f95a5046d7529f24f49566de3387dfbfd249d05801f75160e59c5e50cfba4697d221d19a3d2b4fcb
SSDEEP 384:p8sGUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nDAWiYp2B07vw3VHF8iCGybAYrZKSr6:p8+OXqZruDWrIKha8fn/960yP
TLSH
T19CC2100CEBBCF7B5DABDB9BE37490C3AC46D71385BE0412249D5B3EEA580DB414611A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hr.mo
Size 17KB
SHA256 66d38ac83c3ea2e6dd60e5c063975929a9d00210999e4eaddaec94bedeb7b1cc
MD5 b4b1dcc33b8ae7c586c43d4abf5302e2
SHA1 5f70e77b72b7675107ad83ef68f1e33de1a922cb
SHA512 e5a585f4d9fb74daa780b12f404f76b5092f01d5ea8e1be89ea9c8bc201606e08d78b8f87417888ea1728898cd50274bc5056f690ee7d5bfcc6619604794a2eb
SSDEEP 384:ZK2BXmUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nO5ZyIFSBDHHovr2y7po:PXpOXqkY/BIxo
TLSH
T1D182E99E0625CA34E63A837E6B7B3614E73F405C9E819A395AEFB00413C734A12F7197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\hu.mo
Size 17KB
SHA256 c3dddf2942f1855edb6bfa75885667a6eb62834666ca45f4d34f8bd95886f588
MD5 897e5d134e8bf08d1d891edaff118808
SHA1 d0150849128189dbba5e72f406eef73b834a5ca3
SHA512 4a75e2a2804bdc65bc3c5090fa2f8a68e74c120449b68c532554a2b4d78443a995dc929528b475900b74b9d305c93485ff98ac33e62a0a4491f92d1de9658bee
SSDEEP 384:huftCUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n++IKLv62+8e65:IPOXq7If65
TLSH
T11B82F8EF0721EE61F87A477F6E6E3815D73F810C4EA6697426AB944813C634909D305F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\id.mo
Size 16KB
SHA256 6a2677f7d60e65724d83030a601926c2746bfc241653fa4eaa29ac6673099dae
MD5 c8a3e3e6075b25c43e5788159d8acd56
SHA1 25fc0e3faacac6e0c84145de0d9fbabf04609cf4
SHA512 8ffc886a6d70d3f1b5b700c2d0a48cfe50a2c0c7ef20e3b9cb096a88433f826cff5fdf3dc1e368394bcfec33630ebdfb753dea663640d4ed0d632d2032671e07
SSDEEP 384:tHlMKhUmUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nG3E2zLbK6uMwPjRUu:OOXqi3E2juMwPjRp
TLSH
T17E72D94B1F15E935E5364B7E59CF3529FA2F022C8F85A6341BBBEC2413C239512E3496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\is.mo
Size 17KB
SHA256 100467f3f0ef062dbd4f5f34c3c0a56d496d72e540752566071abc9601c20e84
MD5 348ef6ec1e4397c1776e852a3b4fc92a
SHA1 e9fbb68b0b4b75a8fa484ff5e769fb41a330c0b1
SHA512 483c87f51cc7a1506af94e13bacd9b602491bace29e56d817239ba76c0e0f635bb88e4bf8dd5dc26a64e8e056a6bc687ec96100ca2e21c74eb7fa5f3f9b53e53
SSDEEP 384:cAl6SSAUdUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nB1ELSVD:KR4OXq3r
TLSH
T15D820A4A2A13DE39F57B477DA6AE3A18E73F609C4EC1D9341AFBA40413C234611B71A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\it.mo
Size 17KB
SHA256 c0e5ca3aad3919b6978e011982fb4bee5283859e2b5acb7c5975b900c709cf40
MD5 c7881d0607b01aa804c17c685f3ed6bf
SHA1 5241e236b9c576207c31362f582c98d2495f5140
SHA512 5b5a3246b37454f85e9de99c244c32e07f21fb0deb355b33bddeb1001e816ad1e6fe9d01d0f3016f444b4fa0d03fc73126ccad4a876aa85ee96d1d0c86b0a6e1
SSDEEP 384:sGpu0LUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/neY0R5x/ODwzpLbK9dL+AnVdnaQa8:si6OXqSL5GkadL+AnVdnaQaQGJVsjXzT
TLSH
T197821B6A1A25CD38F63743BE9A5F3158E73F909CAE55A23019EB704C23C739122F6157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ja.mo
Size 19KB
SHA256 dfaa0336098aa906290abf6ed953557dd0448fccf0a74788fb01b2d5c3059b0c
MD5 7a60e68b8a95ec7b931d9e4f5ca08677
SHA1 e82a0e02b78283a04322d16f56b7a6ee4a1c5e1c
SHA512 4438d32611a7cf860d33eea9249099bbf1156bb7865532c34e8cc45359e5f5707d1418ee1ef035aee4d9cb8a58d3e24cf4a0b89b259730cc30cf872f11fe70ae
SSDEEP 384:z2eYB4UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nu0l/YTT/osL/f2O:z2hXOXq608TLuO
TLSH
T18592E76E9792D938D922027F199F3190F71BAC19DE923A3509BFE06433D138FD1616B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\kn.mo
Size 28KB
SHA256 970af1faaa1262aae785eee576b0e09d6d2dc3fb392f7fb605f646318fc0e55a
MD5 a9eef20d07bb651ae0f7fb8081a8a9fe
SHA1 8b9987ec828c30bbdef252c22b4e4344825b16c3
SHA512 31d734b530168fd1fa5fe62fee9c900ba2f843a06a6409312b0c0a5cbfbd0b2b0c44709dcaebe6d874ee5d47865dda1ceb82df983bf93e127d838c88090f66e4
SSDEEP 768:9xpyjIOXqhXwmuL6sFpHIHMPf4rYHKH2rhkrTKAh3xcjWFH07H0UrzHK7HKqnHbp:/Ex8wmuGsFpHIHMXCYHKH2FOTKAh3xco
TLSH
T1B5D20D0A2D79AC31EBE6017B24DCA03EDFF567D18CA903D1F8EED3442AA5D5951821EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ko.mo
Size 18KB
SHA256 55e5dd04a8ae2b911d376fd2d72d580f7a9a2185e30915dba0685c12504c6db8
MD5 b24d85c42d3c4eefa4f45ecf64a944f8
SHA1 759c001ca1b168d78bddb403247d8a00f8ebe00e
SHA512 c7e136172d9bbcad9a86fa60f8e8c2c3adb438701dfd417404d6398df8e7ff123ae74353263357dc87a2f9fff7749208e7871c9effa1749eb848ab25eb79e3aa
SSDEEP 384:1ZVHZW8HUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nOlqbiMcvCTRVM35dQW/DVBYdM4:1ZlA8WOXqilqncv0VMb/ZBYT
TLSH
T14582E7E62A0BCE38D132477E6EEFB424E71BA01C5FA342749E979C4467C428701D75AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\lt.mo
Size 17KB
SHA256 1ef22194265acef812b0889c870cab49f92dab94d49ccc803f126e13dce96d6b
MD5 91ebca005d123c7224634e55b0fe8f8b
SHA1 b5c9dfcb674b2c0088d0dce4b84a30b460f88249
SHA512 c57c03e62dc86a4efc4137bd615f27caa3fd065b2e8984304b4224e58f22e08489c5782f76a712926931969c6269da6d48930810e277018d2d63784c5b78aacf
SSDEEP 384:2B/BlUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/kRxCFg/PZ8CusJwk:BOXqJFg/Wrsf
TLSH
T16E82F9061A21CD7BE73707BF06BE762CDB3F610C6EC2943068BFA54453C635762966A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\lv.mo
Size 17KB
SHA256 ce7a90b21f9059e18329fcb1fa1cff500fae0cfa94756eb6f6e59b728681d546
MD5 19d31d3f26eca9c9c375c0c0f5aa89da
SHA1 3c1e295257e522c64fefe9dd330b207a154c185d
SHA512 4164a8de372dcff2df768a2ab0f8531366843d38159417ebf6c755591a88689cea1d5ec0df3c7648136ed03fc29e3fd22ef980b3cfcf6b23af5764787d6dbd33
SSDEEP 384:/AdyUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nypI6NmNLKfp06JKTncpEW:/slOXq+C47y/UEW
TLSH
T1BB821C5B1B12CE38D5374BBF676E7165E72E924C0E8055347AFFA41823CA3A501B7893
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\mk.mo
Size 22KB
SHA256 a9c24356d771d2c270d426bf36a7ff858c3eb6cd358419c5b38e3500b24e061f
MD5 725a472c7b578ded1c609faea9f3763b
SHA1 fae139279e711a9b5a90ab731ae06027b2124f71
SHA512 61eac57af51dbde1b74e8eadbec989926ce21c511328ffc80056d2f974f8f176572eed1e49ee61833c9924456dbffad0275f53197da4ed1623d8ab7ab8b315e3
SSDEEP 384:WKn8UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nwby1iw704EvM9pzDYMORRmeFL4:HOXqU2DlEqkpL4
TLSH
T12CA264A10B18A8DEC512E67FD81DBA0D7E6F41FD2FA787110A752CBC37E106842B524E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ml.mo
Size 29KB
SHA256 2a2bc7ab6241ce637716ed05f650788c509d93a34740963f03952f04d5a33a43
MD5 25715e203b96b7c4d863d52b704f9895
SHA1 61cf6251ae52f6119993d2a453f8d3b3557ede2f
SHA512 9e0dce996b845a9d401946690173a02d900b6c837af298c744734e23b22d441101c5592be4c0e61cf4a1b95cba3dd8a4fbcb378563193e59432519b02e4a6862
SSDEEP 384:yMjTtRUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nB+zVLZRlgiYfNPPQ5KhLXESV5iV8:yetsOXqVVP+GV5g45b
TLSH
T17CD2DA4B5032CD3ACF91023A7B4E2F6BCE2B8E90449F669F586DF1625999F7D0CA5031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\mr.mo
Size 25KB
SHA256 e090f2e7a8124d1b7839edf6482f83a535793e89cdc1d6ec3f2eb55eb129e493
MD5 721bd46625a5063a4e8a19da7640c8c1
SHA1 57d61ab0b758ae4b515dab99d7cc55e6affda11b
SHA512 b582f5580981782c2943534bd97d2cc86aca410894310b78a785dc218ac2863a5bdbe1779a8dfa9c776e576d92d3652f40d83265108130f8dc75b01a0c9dd447
SSDEEP 384:XMjzUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nGtNF5HDeR+AFRsAftDHDQLbKABwf2a:XcyOXqlEOsA1
TLSH
T1D7C2224DFB79F724DDBC7ABF36181D3BD8BE207087E5822609E5B2AB15C0DB00199592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ms.mo
Size 17KB
SHA256 055923e4e1c507d778fefc5c248e0f4593b4dff9d6b7c30ce2cd0f438fddbb53
MD5 55e0018ee34a7c276fbdf8e93b487b0d
SHA1 50ab648c2fa495b748f4b610f5da31e6907928b5
SHA512 55b1158c08277cdbf5d9626c43f8890902cd6961f399b883f7c458ab5a39cf01603ac7dfd61514de503e9a3e680189877f01fe612c3f967e2d11d73966ca90dc
SSDEEP 384:7mkUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n7ynRE2VOLbKhTZFQFlW:COXqfynRE2VJZFQFw
TLSH
T1D882094B1A1DFB34D23A87FE55DD3519FA2F53285F8086391AB7DD3013C638512A258A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\nb.mo
Size 17KB
SHA256 4a933878ea384fb136af8915bf8488c1b1754a461f9de6f3d7558519ea7e253b
MD5 b712cdefe680f9053de49a954a7af1e8
SHA1 6485089d8df99cc8edddec53cecbfc1e2e8e864d
SHA512 fc0dd14c8cb0071206ca2bb80b63af18767459d93cb84e52dfccfb26ea9456c3e1bab4faf5d7ef20fd74d06efacf5da4536fec554fe892ec41db21855ff74cca
SSDEEP 384:M2iHUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nuxitCoIOHVl3zmn25ctuIvmDOc:MeOXqixitCoIarTIvmD5
TLSH
T12E82E84B1F21DE38F532477E665E316AEB7FA11C8FD1897516EFF01827C329202A2196
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ne.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ne.mo
Size 28KB
SHA256 c5bd621fece94dfa802c133868f74d85fb5c95799ad949cc578569f755626161
MD5 a7739aa30a004b6c8d577ceb77258c06
SHA1 e9347317cd56236f8d0f6fb867dc16b18f89b904
SHA512 70c32acb13958ee964c4c3f4c69caad3bdc925352d03381e5f1c3dad9e9601eb4f9ff0a88c474cb9eddf5678175446088b49837f0e352802ec970e0a0892c64a
SSDEEP 768:kOXqTIFakycId4+E2PjRRDJf9fsKUFkkFIxakh:NUIFakycId4+E2PjRR9f9fsKUFkkFIxZ
TLSH
T1DFD2D84CEB75F3A6D4ECB9BB3B4C1E3AC569263087A281679CF9B2C615C5C7004D52A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\nl.mo
Size 17KB
SHA256 6a092b51e8ce0ba869481782ab4c548b55fc6d550fa1b4eda19b8afdb47ed9ae
MD5 437dc2015f061a92a55b1022ed3b5b5b
SHA1 93853ae205dbaad201f26eb82929bbf9c4ed70ed
SHA512 5e99d634c513173e9e450c0c9e8c82e9c38099bc2caef4a5acdab75f7e2c91989e6bb75f0591b29db74c3e763d856296e5499aec7c2c64970cc3a03f4fca84af
SSDEEP 384:IfSdHUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n7bO3wl0B5zI13qVjRiQrB8+lNe:NoOXqS3wl0bg3qV/B7e
TLSH
T19382094B1B11CA3DE563477EA54E265AEB3BD04C8E95C63819FFEC14138324A22E70DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

or.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\or.mo
Size 27KB
SHA256 3e807bfc804aab725a9f88d2caa86d917360041ad5a993631fe6a570eaa22265
MD5 66bca710ba9e794410cf55a3c788d8db
SHA1 a81c8a03cbcf138206bcae1b3442c48dabae6486
SHA512 ecd6a39db87340321d60d7a01bf217a816411d53171d0d95adf8f370207a262b37ec5796fc127629f403f9965a549dc8eace776ee6fb45a3a224f97307e4b5e3
SSDEEP 384:nDUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/QE9aZ+ubtKr8sRwPCm0LkzmHVd4+uKJO:iOXqUL2Rwa5O
TLSH
T114C2FA11EDB4EDA4ECF243BAA08DB338941E0339E9C7ABE8074597C35552CDA4FE9458
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pa-IN.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pa-IN.mo
Size 26KB
SHA256 bf690802a3757be141a674b34c8967a674ccd10f91b0299b8c7a3d8d6ecae534
MD5 4c6fc265b3ccd521ea215accdfd421e8
SHA1 f2149d5607d86f480ac54aa4b902492596999e91
SHA512 efc7c6ddbb4363d731a513e861c07e49eaa6c7ae73a73dfda932aac2ab3d681850479953f0d57ab1e2ad67d02dc6b9bde200e256088b6d5cefb2db09728462d4
SSDEEP 768:13IdOXq9VaeH6tsmiLiFBgR2+ojHmc6xhs:dI8AVaeH6tsmiLiFBgR2+ojHmc6xhs
TLSH
T109C20E068948E776DFE50A7E16DAA73C94170D385CAFCB2C4681C544F2D4F810ADBBAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pa-PK.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pa-PK.mo
Size 21KB
SHA256 18d087b611c1883a02f0c5a8117c854302c7dfef292515ae28dd5142206112d1
MD5 b37d178336b542957bfe29559f099b83
SHA1 7f5c321256de9e6e8ed4c0f383b5e8343ed5ee94
SHA512 a8b392ee3f4f8969c9025d78f668a845615dac310f774563f4d1b138f9214260bc730710ca8511788cce148ed5de411d35384d37dbd7c037f9c52580b540aa91
SSDEEP 384:xaPNeUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n8BiTf8QOtc1ps8sF5Ti8QG+33tlLm:UROXqH1OTLc97Q
TLSH
T1E2A2A8DA29A8D731FA72CA3B02D73C24CB371B164F82E594ABB651401ED51130DAF677
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pl.mo
Size 17KB
SHA256 ff8900015a1983dd15c35d2cae6df6c8716012a557047b2943f2ed08f19d888e
MD5 21207081749b931bfb4a565ade6d2f31
SHA1 1072b7c48f081b9e07f43e710df165346103a2e8
SHA512 043a54f0ae3b5d822fc31a267aee25da864b5d7b2d15b6e83aa13d8e70b654f07acd9e5421f57ac4bec22735a72d8fc9f014c737148d096068455c52ed57b4f7
SSDEEP 384:zsMDloUUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nmnw8+K9KHbVTrIDMa/R:XoOXqinw8+wKHpTrG/R
TLSH
T1AD82194E5A35CF38E776477F9AAB3669EB3F405C9E81913516EF240423C628A02F7097
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pt-BR.mo
Size 17KB
SHA256 6310dfc349c2db20df4c93ed86439429def3bf01019526fd4682997d9a19f01d
MD5 8da48ad799ce176361bb2ececb758465
SHA1 a1f8298ca2bc8d38ddbfba6cd93ff6960a369577
SHA512 9132ae590076eb8b51df017e9097a22b57a8948500bb1d92aa9e039a5076fa8b7842a67632320c193eedef9bddb8e04fc5c51c91ac05d0cac0b97407da912851
SSDEEP 384:ogkiNGrUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/noiqZi3LkDfs:jVGaOXqpqZU
TLSH
T12D82E65E1B21CE39E33B877E667F360BE76A419C4E45C5255BEFE40423C239902A318B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\pt-PT.mo
Size 17KB
SHA256 cc1b911b168a4ad38d419d26843872321aa44f096fe020348d1bf0dee41b8d40
MD5 69f6c41505cce2f14ed60d903db460e0
SHA1 cd415acd85391077e6da4798c79a9960bcdbce67
SHA512 3f9d7d6bd472c5301b0c74492631ff6acebf99fdd48a33a37d009e986a8314ff2df39bf6a0cdb4555930e81028a3880dd14b903c8581c5606f94683f7bbf3070
SSDEEP 384:c/cqXgZLUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nR9WtLkDPMZ+:a/OXqgZ+
TLSH
T18282F85E1B22CE34E23B437F676F6A0AE72E81985E45C5251BFFA44423C638913E3197
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ro.mo
Size 17KB
SHA256 4fd3602488177d1d39be69120c6e7a5352349ca4a282dd8834aa6ac309e57245
MD5 d3e3a770921e79cfbaaadbb8bcd46717
SHA1 c30e8cc5b2f3faded1a78ba0806deeb7dc881601
SHA512 51cf481b6d1ad7e7d6210a1230d296928bea398b801c9b7c9d2eebd795c77972b3e02e81ab116b6ef6c85e24554474ae652db69674a7f0a7282160c597b0b02d
SSDEEP 384:NFY76UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nQHwEnJEEWLE7JQb:G9OXqyeb
TLSH
T1D182FA5B2705CE7DEA3243FF1AAE38D6EE1F519C5E85923055DB986413C238B02A74CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ru.mo
Size 21KB
SHA256 cec81ef9647f837743383ebbdac866e3f1d76ed7a77a818a7e1760ecaae7b8df
MD5 283dfa97bdd1578598852ff470b71b6c
SHA1 16a34613730461280f36ace981f45244fade674e
SHA512 04acc0fe5aa87aadab16d82ba08ec4d0a3a75fb80fa8fc5c5c0846dd97fb3ae1f9ba19eb480b617ef42169450813203304df58c3b6c51d6a0ee02bc1e729afe4
SSDEEP 384:0bcKOuUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/kXyil6W91xXFY8Ih:0bcKOBOXqlilFB3Ih
TLSH
T13BA294651759A8ADD212E23FC9097D0DFEBB40FD2FAA53250CE62C7D32F2128423E556
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sk.mo
Size 17KB
SHA256 35c40027d73a72ed32a026e8dcdf7ac8591a6eb71c8ebcb32e0264631a7a71e7
MD5 f72bb91179f0c27e0476d2da9349c88b
SHA1 ac103fb5d3a618b642b78fcee732ac00f49c1e48
SHA512 32fe6d1700cf4c0f1eab38614f23e078b1ba133f86bfbf1628e97a9522a50f41dd33465bb643fa3739666553cb925cb9db9ba3d8f1bb1c0874d0144bbbc1052b
SSDEEP 384:My5Ep4ZUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n+2JENyZB9iT3xV4Z3JqCTc:h5EJOXqaxW30CTc
TLSH
T16982F99F5621CD39D72B437E5AAF3214FE3F105C4E97953419EFB88023D328912B26A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sl.mo
Size 17KB
SHA256 c1c082b3a57466b9165232ca6bff7034079e42d745e18e28281ef0fa62c788a6
MD5 bd4062979a3f8e6b5cf470c04d6733af
SHA1 8c3ca01595dc8f4f31c7dbeb83a40fe5f36f2ffe
SHA512 f273dcc74904cd09b9b500a4db8e931bdeaa3ac34534a9d43d7e76aa90c58590e6fa067b9fa5d9504136e50b9fdc85f345b5c14ce78047facfa1201fabcec294
SSDEEP 384:PTwDLeUrAvUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nOQrS/Si0UxUkUjEr2PF2+YaI:O/OXqbAOrF91zq
TLSH
T10C82F7AA0B26CA2DD53B43BFAA6F3155EA3F401C9EC2A5316EDF700813D735611BB056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sr.mo
Size 17KB
SHA256 b67e1aabc65f611e2c4767119e49c5183ef7d26e4b31cdf84b64ca3ccc3d1c86
MD5 36301f7d16f73fcf0716665161717eff
SHA1 8d3cb2751625e32ce7e9a4044384dbf3c4fda776
SHA512 8f85758d1390ef394ae2ef6b2f31c15905323a032cdb30ebd527ab833d825887339a5e4be7d2f4acdc9b3b8d480db9366d5fca3a87029b8f41957f0dd2e2c6e7
SSDEEP 384:fUnstrYxChsUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nmMoqMbJLlBoRZTLbSHB5niS:HbOXqSMoq8Jb+ZcX
TLSH
T14882F99B5612CE24E92B837E6E7F3654F73F408CCD85D9355AAF601413C235A02FA297
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sv.mo
Size 17KB
SHA256 c8058e86431e6844e606199c0387191ecac3b9e4d53c1704f6a966c53153cff2
MD5 e570aff23990808ae476bc72a99d6496
SHA1 adeec73ab9223774430a9bd77a63ef5a303ac6fe
SHA512 6be4e47224c149dcdf90955b14cc5832f79a7be5b31566d2089e164f93b7d5a4253d64be3d336c136ec9f3fb39cc656bbef9a8befba80a3172b365fe21f9d67b
SSDEEP 384:YopWOMBvEUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nwOUQBrKt7R4wucGnp8yhboxb:zYOXq4jP1Gnboxb
TLSH
T10782D64B0B20DE34EA37477F966E366AD73FE05C8F9294382AEBA40867C725501B7147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\sw.mo
Size 17KB
SHA256 b2a616914dd7fb9749046c8cd83ffdf0be18d81f852d1737f7a9d1a315e23eae
MD5 dc57463a03562671945a1911673ca6e6
SHA1 0876ece7747804592e6362b6426a16e604b304d5
SHA512 cbf1d9fb07370872ca4150992843c04cfcc8cf7efd9fb5745f09de3e445d04f84f5cfe464a77a222a4257d19b611cda8946142b628ee9f05cc3130e71e947aa6
SSDEEP 384:4H91UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nKlLj2HA/D68fuPg1elu:WAOXq2d/f
TLSH
T1FC82F8970D12CD24D336437F07EE7E29DFAED40C5E1969221BA7390C23CB28912B795A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ta.mo
Size 27KB
SHA256 ae2026281836070e26b3e6b52de8f0e1fc82d6b3c01ff59bc71ba4757ccf99bf
MD5 1987ac3216c456ebdc0490fcb2e3dd60
SHA1 a6cad9eedd234801411bc6cf153e12824685ce27
SHA512 9a7af70d8b9f01540bfbaa181342ee219447c39f799b2c3d7fdb27f25aa384d169a67931197b5c2fbcc5709d0457142daec9e90fd2a4e10efc7f77702931d183
SSDEEP 384:UNh9jUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/n0/cjMNtfL6pce183F8:U9COXqqK
TLSH
T196D253CE923DEE89CE6318BF030D136856596119C526E3A53CB66E0199DCCADCF3027E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\te.mo
Size 26KB
SHA256 6110e356b38956dc33116bc69b4e234aa39322b90aa3fa595bd00c758a9df535
MD5 7bbf83844af2f10ecfa9200cfac890c3
SHA1 32a5a2a2df8944a8dbdc3aa6360f2b61e22a89b3
SHA512 2beeecd23722013dc6c254620a713337c940ffb3f69a6c632f705616053775db858c68df88ef97f85768a3c866420eb73bbdf7e90ff7a4f6816582b3d2d3a169
SSDEEP 384:GK4CWWBoVUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/kfta1sO2ZjpQoVSnxB7k9ydel8:TLOXqJ1ySDWf9AP+n/dlcluAoah
TLSH
T1EDC2AC063A26D720E6F70277752CF66C893817416AD6732C1EAFA347F787D6A0483536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\th.mo
Size 24KB
SHA256 b1d021b7581d00c2edaa3c99e70ca9ae4fe3065a2a489ae864ebfb130f62e6cd
MD5 bb35b91fe0ae3ab2b1cb585c4a6d3c40
SHA1 d07cbdb62b6f72c0d81eae22f6ad793f40ecc6bf
SHA512 3d5b075801226b44188b4293653379bddda1527c4a0b422d00991c21b8eee6e292aec12fedf2ca39fc04a242b5c4f56b3cf1c935789981e3139b6c8c98f7af0d
SSDEEP 768:OOXqZrxNz7XLOLO3O8FnLns76FaztMq07a1A8SYapVY0/8276WzWStz6T5H7Zf4e:HRArNEUXHqRV
TLSH
T15BB211B726169D64F945177F162A7284AB2EAD583F73F8F005DB211973F030A8122EE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\tr.mo
Size 17KB
SHA256 2cdc4e310744e42a699619f8750ec04fc2ca29afc66dd3e02c57a031d8774a8e
MD5 ffa0abe0d92330082d82125e081ebb84
SHA1 ceaf6a37fa0c458aa173213f49fddd6fed99148f
SHA512 7fd49135ec83d91e50846a89e309744be1d1df6ae5093f02fb26d00783bd56f6a715e2438250e6294dc508ced9851850a54f12e06dcaacb2557ec479e0e36b6f
SSDEEP 384:XD0JUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/ntahogg+cKj4p5ULbKn4W0Trf:z0UOXq5ahogg+cKj4pBQ
TLSH
T14182F9CB5D15DD3CE33B177F9AAE3529E63F820C1F90E52216BBA81833C425612D715A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\uk.mo
Size 21KB
SHA256 da1a7137983d24e09f53f440bd0d44456fd8fa44006f4b5461e98b6a7cfc3f36
MD5 45e2f8544baf02394b1490cc6713575b
SHA1 2f832471f2bbbe4df0e615d5a990c2fc079b72b8
SHA512 ab97416109b4c2c95dcf38e60c8ada4f9908fa8d7e07aac84446187d4ba2c2f5ca4e3054056c9b23b91c07fad28a19b188a3179553efcb6ed951525ec82f57b3
SSDEEP 384:n4UV1UhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nj6ZiHTlGEN1KVup4Bm9dntrVt:n4UyOXqbt
TLSH
T104A244E50B198CEFC212E27FD54D790DBF6B40FD3FA6432625A62CAD22F1114463939A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\ur.mo
Size 21KB
SHA256 e5ef631c6b49b57af817617c5b9a4197fd12b2b74baea06e52cd2a54eae73fef
MD5 7dda565c0912078f77dea6d92fa9d686
SHA1 d5c7570b79f8c8f8c754de35088c9fcb05837d8d
SHA512 e81b80cd293df4576c85a9ec931576e49d2fce703d35c624360e52e69d907066b8c259d947dbc4ccd9f1dd4b4d2d6b4a8313ef4a4bf2f37d2eb6a3ddc7f749e8
SSDEEP 384:fYZ5Aj8yUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nZdcnZ1IVtoGrXLbKUUmFExR0:gZ5zlOXqTptbUmFGu
TLSH
T1B6A2A3CB2264C671CA324ABF41D77C38CA370A178746F225AA7754460FC62136E6F67B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\vi.mo
Size 18KB
SHA256 9330d6f539b9d8f504796dc4f5ff79924046fe86cc2862d66eb9db7cbac47f00
MD5 97889372ccc5a3d60564b158692f3cab
SHA1 7056fb1daf2102c9e3f0f00c0d9933093113f6cc
SHA512 eea6f2b1896f737fb6d3d9bcf1f1ad46e63030a5b93a5d6270e41869e2cbcc57389393eb86f6781076a5fd14f2f51c3b7df4bf94c2de55171e2bf6016b0ef1f1
SSDEEP 384:hUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/FxE2pNPXIc3Mi86mUgEPXbLbK9I0J3:cOXqwAXIh1uX9U3
TLSH
T19892E9460710D930D1BE873EC59E741DFBAFA01DDFC1DA742AEB74A423D13452B6268A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-CN.mo
Size 16KB
SHA256 7b20bca865ebdfe12b8f712ff732090f753f1c42becfde41941cc06fde2fedf2
MD5 54de11dc57128ab8389c0891f352c9a6
SHA1 c561e365db9be37d4e675301ce17ff4afc9d4a7b
SHA512 ab1ac0d0ce7da349c8cecbaf54dbbcdb660f33e470e6d41aacd62c438903a0ab20d6c7a8cbfd3cdf4bb4067601bbf8c619e107e45707c82f9c8134378dcbc8ec
SSDEEP 384:EubUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nASaoJxqhq398D1M6:LqOXq2oJJ8D66
TLSH
T12C72199B0931CD35D62B473EA7AF3128E72B616C5FD2A4306BEBA40423C676612F2547
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-Hant-HK.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant-HK.mo
Size 16KB
SHA256 1928e0496087f1fcc31cd27ef6783db3d16c5252852fe56db78476dae4ca87f4
MD5 94622f1d02f18a2b844a14f6f996e250
SHA1 25405dbb931b46960b90d965e332296aeb36447a
SHA512 b8049517639987619ccb4fc8e3ffb774f24f25b31782dbfc50f6673f1504cb12fe06cfdc3c7193a377b16da26a27c040345d5a6ca036403616138fd26c40ef2f
SSDEEP 384:8lF5XRUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nyNmHORlHOX2dLvsnRkY/s:8FsOXq+NMORlHOX2XYE
TLSH
T15D72095B0922CE38D53B8B7E569E3529E63F617C5ED568342BEFB04423C63A913E2053
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-Hant.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
Size 16KB
SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
MD5 d41d181d619aef4a1af14bcd6ad2fc1c
SHA1 05ea268a59c887a92387a2ad2925285901bba1ba
SHA512 b2ed7c0c97672411266ef55cfed4e98a7d812e85a20706140c8ea8c566677ed9bdcfaac7d0656496e34db5a7a50e0c9e810fe9a18c2039630745ce617513b605
SSDEEP 384:pFTaUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/na5k+0SyIqLvsZXPuD:LxOXq+LBDXPuD
TLSH
T15E72175B1932CE38D5378B7E5B9F3624E63B612C5ED164342BEFB41423C636A16E2053
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zu.mo

Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zu.mo
Size 17KB
SHA256 8842e30b944b3ce991c4f0c356a28d2783570225ee5fb007d602c4aef54765ea
MD5 b2a93f7fbc38c826e24733b02b4994b4
SHA1 6d8842a6dd07faab7b8e2d469881f10aa8172e69
SHA512 352c861a65d3b1e6ea7a432e634bbd86d2f69865e4a6ceec59dc0a8fd22ec25d3b7ec49c96e8f598a7b090f5401f88d343726ee33285fa9fdcb11b0221467ec2
SSDEEP 384:EwoaEBxfUhYqA9oz+EFRUeLq4+lLbK7wc+Qp/nDbnBiwULa3AC:po7BxeOXq3bH
TLSH
T19F82F9DA0711C936E37E03BF4B9B3854DB3F605D5F81A936A3B3694423C028B62D3596
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs

Path C:\Users\Admin\AppData\Roaming\Spotify\prefs
Size 157B
SHA256 1cfa8ec7cd1eb08e10b6f6fd0527d450916de88805a2ad1ed2cd65a8eba66914
MD5 3464ba408bcc53d68eb809d1c10f9d88
SHA1 884d73013ec87900885d3b17fae6b564b96179db
SHA512 6a2e9101e0e9e6dd7debae509781b03786e3f40b7a64a59a26ebc901831415828805800ffaff3edfee503f54551871e815d553a9b35fde602a45b4158a1fdde7
TLSH
T1A3C08CA9A027EB328CA4050DA2163208C0B0308DB8CEA208492782080C8EB1CB72226B
MD5 SHA1 SHA512 TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
Size 20.3MB
SHA256 e2a142e80b54d0d7849c1f10b1fda305d90f19d08be68d44f01868d9b187b897
MD5 f3e3269c35d7f4bc05a39a0cf230dd4e
SHA1 d24b3dfe655f4e5d4a374abf3ce21b1e9de1a971
SHA512 7ba552e95e238c13e02ffa68ce39ae8f4c7ddc5ca90661edd4e5c8906d453b95cbc96504e23f1ca73372146ec318438140f23d9da50babc0313d737c5cfae8c6
SSDEEP 393216:MZLZelLgg9mno8sbdlJcXQCxBFvidN8CHae4YvxvkrBnlLEqdl8:MIggQQCp2N8wae4YtkBnlLEqn8
TLSH
T15B27126BB300523BCEA34376545BA23A7332804E3F4793672059E36D1C5BBE99F6894D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

save-to-spotify.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\save-to-spotify.exe
Size 10.4MB
SHA256 1457941537c29430cf8006ee4f2db8e36ab18879cb5992b434f70ea3f8f45be9
MD5 95945f8008e23adfbd44a13dc6366545
SHA1 44858389d0fc4e0a74f43b0eca3ab7e535b39cf2
SHA512 a363c8ae446c3a118fc6e54dd5b84061a31ea2daf7739f691f3dec622e2535a1ecdb01bbde731d623094083c36f6fa1cc057ec168a71602c7fa4f5b73c111413
SSDEEP 98304:YFz9lKkiIphH0KmwznkR2psKK14ENR0vFhupf08MmYojgHqhbHyHMDESH:Y9fxwFwznkQK1xN6vFsO8fYojgKtyxo
TLSH
T12AB67C03FCA554E9C0ADD63589B29213BB717C491B3223D71BA0B7342E76BD0AEB9354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spotify_cli.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\spotify_cli.exe
Size 2.4MB
SHA256 8995d4e143a85a99c07a7947326618493158f7b3e80607ccfd12bc2a5be6864e
MD5 b421327d99fdb7571e699696ec451205
SHA1 2b0f5553490013351f7adb92a593cfdef6b35015
SHA512 bd7a9ee9d0143d96d84529a4b7b10ef0002d6e5a16524a14fe3d88b9be52d94719a7fba0215c00bbd6b85a2e85030553a7a473f50ea9e24640c87cd207e6e5f9
SSDEEP 49152:ZNsw/jQpAtlWnUSmPZCPOfwRMPmEMksPYpYEqKNK0qaSd/nW9Vt:Z5jOMPm7st
TLSH
T1F4C57D6E66A404FDD0EBC2BACA46CD17D7B2740E1370A75F07E185622F5B6208A7D723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toast_icon.png

Path C:\Users\Admin\AppData\Roaming\Spotify\toast_icon.png
Size 3KB
SHA256 9b6b97d13db27d3ebb90a0544ea5a75cc3109e90e51e61831353539adc43f8f3
MD5 7fa923b46d29a8a22e581e605afe41a6
SHA1 b1e44808faffb822df9c891a9c8472a2fe2c8a64
SHA512 b0209e52b08645e9a06bdb5712400268d6048f6f17ec27eb917bd7d60574e29d536b57e186e880f403f502cd533fe1bc1a7c17206dbc5820b96141390c046885
TLSH
T186714BFC6669283BE4EAA1F1363459138C2775831B851256E1FB8002D8ABA981C27E86
MD5 SHA1 SHA512 TLSH

Submit Download

uninstall.exe

Path C:\Users\Admin\AppData\Roaming\Spotify\uninstall.exe
Size 507KB
SHA256 7e03a10708d5ab2213a863436fb805a564da340bffa60740284a1486b5ba6eca
MD5 42ef83dbf2b51064cafce101ca564b70
SHA1 60584d748af007858a4bdd2ccd228b95067fa853
SHA512 11589651b5919c87b5a9ee83ae007a96e1a9f7127dc9105496f08f7b625ed89cd5676474c8444879c7abb24e4aeb19e77a386300f566a781f4bec51047ee8955
SSDEEP 6144:YN5z306KRmDUG4tDaNMvJ3xNJDTSFi14hR:yhgmD40cJB7DTSFi14hR
TLSH
T160B44FD02A58E9AFE353D97C5461D27AD8727C230ED29006D1F0A1FD893B3B87869F21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
Size 17.1MB
SHA256 c20d9408009a281ee4152b63077a8309eb17ec172bbf80b80dc7879d586bb099
MD5 97a46af2f3864a1a50b202c3e3757bbc
SHA1 a922ab0c78c4c7a42143e091dea1dfbf1930863a
SHA512 a33010039dfd0a444a2c47c47cd1796d5427ee9f0665f5af59be641313d5542b4a921e850873e5fb7ae2edf9c370347574a6c1c1da88eafc3812f82dd764316e
SSDEEP 49152:YfEAiKsh+t6dMZuzQ9AigZBimZgnyXQoJ6qQuI04pRgw7lwzAU0sV5i:YBRgw79
TLSH
T1EB074780E7F95348F2F77F65EEBA90164836BE96ED29C75E0415050E0831A4C99BAF33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
Size 5.2MB
SHA256 bb7a02718905692be5c9c6bb4dccd9a8a0219dd483778e00c179241c040fdf04
MD5 36f4662ef4cd5414bdcbc19763a4dc35
SHA1 d93ab3fb22e0f2657cf17afa8c128b3a975a05ac
SHA512 e53c0a6077a203da5812b35b830316f01e1b429e2dbdbd26cfdd5a6bf764882eb709d7b82bfbbe4abf5670c798adab404f13d723f3e19db8aff4b01b1fe0d07b
SSDEEP 49152:REjlXpakvNfUxoZZa/Rxhq0nbc4e2oNxzrwB2vF0aTkgkF3pilUo+uceQW+d+OYr:REjlXMpbcZ3U64nqX/fYH+j
TLSH
T142463803F28680E9C06DE579875EA623B231F8840B7676DF66A01F192E79FE0673D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Roaming\Spotify\vulkan-1.dll
Size 954KB
SHA256 452005b1b569d51eb3fcfa7d3dee1c8ccde6f1061e2597c24ba8f115839c52f0
MD5 5c2da7deccd999be4ed2e7edb2b0f248
SHA1 ecd3808cd29d7bb3f06e32ab2b189df47dea9a04
SHA512 652b4a5e85bc19bf1a8c6ab6590e314826ad6f62a63914f93acce38e598599af15cd1560d75dbb7eb277df0865969a049bd9b3961ec08467e67800c41c07749f
SSDEEP 24576:nN/KQywiXpm8mFpCbdEbJZ+gkkKNlC1EoDkw7+DV6g3v0TAE7yoeHXVje:tW9Xpm5PCicgkkKNlC1EoDkw7+DV6g3u
TLSH
T18F258E639A948AA9D676C034D9D18A03D9F074811332B6CF06B417186F6FEF07B7DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

explorer.exe

Path C:\Windows\Resources\Themes\explorer.exe
Size 135KB
SHA256 3e83a3be2145d560939685ff5e877cb1fb3da96323353608f847561acd0f8783
MD5 b46911efa0a76eef8813a794fc8708b0
SHA1 fb056d2ebed8c14a201f526423f91d44dce821f8
SHA512 f7d822ddb6e411c285dee46f9f8f976a066e2207b0f6ad9b11e5d0874b2f4ca585388dd361b81c39a2e6dfc03e3f70db1d7484b4445ef64894f644803277a79e
SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVG7:UVqoCl/YgjxEufVU0TbTyDDalA7
TLSH
T144D31C236F50503ED52289F178A6DA5EBD621E361BE06C0B7666BB0439B720372F531F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icsys.icn.exe

Path C:\Windows\Resources\Themes\icsys.icn.exe
Size 135KB
SHA256 4d5d3072d9c6f35e77ee7725f2f0242bf84311ff551f31427ee7f27aef1780ad
MD5 516ca2bbd4a6589539d10e9ce8042246
SHA1 d1df4174c8f54d023ceb8bd59eea9091d3706cf4
SHA512 c390674963a0692c967e234d0e85a3b5e84495e212f22089e1473d806807a8b9de309ddcddc15b72a4a0adbd05bcb2afb0a2f7bd152d8ba30fe7fce4608e5901
SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVGW:UVqoCl/YgjxEufVU0TbTyDDalAW
TLSH
T118D3E823BF5050BED821C9F12CA5D62BBE225E261B959E0732A6BB047175703B6F530F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spoolsv.exe

Path C:\Windows\Resources\spoolsv.exe
Size 135KB
SHA256 10db3fdab27bb463f21544b26e89f56c50983cc03fb43ea732f9418de6642fd0
MD5 83762e2ed8d73691e35401b74c9d52b2
SHA1 25fff66c8206701351f7d13cbbdee82243e34281
SHA512 58a62cbc67cc7e098b418505269dc11535254ca37c4f02fcffa20cf428258cc143cf9eaaf0a85f299fbc65e7b462aa69127238c1bcde46dbd06afdf53a28bc9c
SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVGp:UVqoCl/YgjxEufVU0TbTyDDalAp
TLSH
T1DFD31A237F10545BD4258AF12CA9CBAABA214E3B0BA0AD47325FBF24367564775F120F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.exe

Path C:\Windows\Resources\svchost.exe
Size 135KB
SHA256 12a7f0e3e574316afa6a54f7db58a1c0cad075ac97dd56aa0d6ef97403481273
MD5 8b5a3165b84734af3c672fb1cdc06609
SHA1 f69a17e4c72258a8ac46a65087bfcee6ac7ee11c
SHA512 e19617440de302ed386a210aa62d52d981fc6f10a574599c3bb943278b61e47a9904a437b873d0a2697407bcc33487bb3c159430b1a0223dc0dec3fb98fb47f1
SSDEEP 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVG2:UVqoCl/YgjxEufVU0TbTyDDalA2
TLSH
T1F6D31C17FD50502FD8168AF168A6EB69B5221EB31BE1AD1732A2BF003575183B6F121F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_1663617931\manifest.json
Size 97B
SHA256 335b1566f2a398f764be95e60ea16352e087262dfffa2616576bb22947d7e4bc
MD5 bb2720cb7fa3a5c821be80f5b421e090
SHA1 c969483a66c882a2d99cd35a99954c64e4ccf373
SHA512 b2f326381ec8904a4d193b2dc7c624318c76cf23ac464a03a3f0528dbba54520ae0fce4fc7b914ac2ed7ed380d3616459b7a5754b9748b45507ead051b910739
TLSH
T148B012B56844B27714C403240B328392ABF15D4238237D30150610802164139026726D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping3836_490223438\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1560-54-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/1560-0-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2092-53-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2748-51-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2784-529-0x00007FFB12D90000-0x00007FFB12D91000-memory.dmp

Download

memory/2784-528-0x00007FFB120C0000-0x00007FFB120C1000-memory.dmp

Download

memory/3384-1041-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/3836-595-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-985-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-499-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-848-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-935-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-825-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-824-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-966-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-598-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-1040-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-987-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-594-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-883-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/3836-501-0x000001F312590000-0x000001F314F49000-memory.dmp

Download

memory/5696-52-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/6112-850-0x000001BFA04E0000-0x000001BFA2E99000-memory.dmp

Download

memory/6112-849-0x000001BFA04E0000-0x000001BFA2E99000-memory.dmp

Download