Trojan.Siggen11.62175

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\Software\Classes\spotify\shell\open\command] '' = '"%APPDATA%\Spotify\Spotify.exe" --protocol-uri="%1"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run\] 'Spotify' = '%APPDATA%\Spotify\Spotify.exe --autostart --minimized'

Malicious functions

Injects code into

the following user processes:

spotify.exe

Modifies file system

Creates the following files

%APPDATA%\spotify\spwebinst0.exe
%APPDATA%\spotify\~tmp_2404_224_~
%APPDATA%\spotify\~tmp_2404_226_~
%APPDATA%\spotify\~tmp_2404_228_~
%APPDATA%\spotify\~tmp_2404_230_~
%APPDATA%\spotify\~tmp_2404_232_~
%APPDATA%\spotify\~tmp_2404_234_~
%APPDATA%\spotify\~tmp_2404_236_~
%APPDATA%\spotify\~tmp_2404_258_~
%APPDATA%\spotify\~tmp_2404_222_~
%APPDATA%\spotify\~tmp_2404_220_~
%APPDATA%\spotify\~tmp_2404_244_~
%APPDATA%\spotify\~tmp_2404_246_~
%APPDATA%\spotify\~tmp_2404_248_~
%APPDATA%\spotify\~tmp_2404_250_~
%APPDATA%\spotify\~tmp_2404_252_~
%APPDATA%\spotify\~tmp_2404_254_~
%APPDATA%\spotify\~tmp_2404_256_~
%APPDATA%\spotify\~tmp_2404_238_~
%APPDATA%\spotify\~tmp_2404_242_~
%APPDATA%\spotify\~tmp_2404_176_~
%APPDATA%\spotify\~tmp_2404_240_~
%APPDATA%\spotify\~tmp_2404_196_~
%APPDATA%\spotify\~tmp_2404_180_~
%APPDATA%\spotify\~tmp_2404_182_~
%APPDATA%\spotify\~tmp_2404_184_~
%APPDATA%\spotify\~tmp_2404_186_~
%APPDATA%\spotify\~tmp_2404_188_~
%APPDATA%\spotify\~tmp_2404_190_~
%APPDATA%\spotify\~tmp_2404_192_~
%APPDATA%\spotify\~tmp_2404_214_~
%APPDATA%\spotify\~tmp_2404_218_~
%APPDATA%\spotify\~tmp_2404_216_~
%APPDATA%\spotify\~tmp_2404_200_~
%APPDATA%\spotify\~tmp_2404_202_~
%APPDATA%\spotify\~tmp_2404_204_~
%APPDATA%\spotify\~tmp_2404_206_~
%APPDATA%\spotify\~tmp_2404_208_~
%APPDATA%\spotify\~tmp_2404_210_~
%APPDATA%\spotify\~tmp_2404_212_~
%APPDATA%\spotify\~tmp_2404_194_~
%APPDATA%\spotify\~tmp_2404_198_~
%APPDATA%\spotify\~tmp_2404_178_~
%HOMEPATH%\desktop\spotify.lnk
%LOCALAPPDATA%\spotify\public.ldb\manifest-000001
%LOCALAPPDATA%\spotify\browser\cache\data_2
%LOCALAPPDATA%\spotify\browser\cache\data_3
%LOCALAPPDATA%\spotify\browser\reporting and nel-journal
%LOCALAPPDATA%\spotify\ct.pb.tmp
%LOCALAPPDATA%\spotify\browser\reporting and nel
%LOCALAPPDATA%\spotify\browser\code cache\js\8c8d3fe6e0e57b95_0
%LOCALAPPDATA%\spotify\browser\local storage\leveldb\manifest-000001
%LOCALAPPDATA%\spotify\browser\cache\data_0
%LOCALAPPDATA%\spotify\browser\cache\data_1
%LOCALAPPDATA%\spotify\browser\local storage\leveldb\000001.dbtmp
%LOCALAPPDATA%\spotify\ea21b3e3-c848-4c43-959a-b2a738bee997.tmp
%LOCALAPPDATA%\spotify\browser\manifest-000001
%LOCALAPPDATA%\spotify\browser\000001.dbtmp
%LOCALAPPDATA%\spotify\browser\log
%TEMP%\1860-f8fe-03b0-19ce
%LOCALAPPDATA%\spotify\browser\39ecc2aa-c73c-464a-b814-75911914221e.tmp
%LOCALAPPDATA%\spotify\browser\cache\f_000001
%LOCALAPPDATA%\spotify\browser\local storage\leveldb\log
%LOCALAPPDATA%\spotify\browser\code cache\js\28fe625a5d66d2d6_0
%LOCALAPPDATA%\spotify\user data\crashpad\settings.dat
%APPDATA%\microsoft\windows\start menu\programs\spotify.lnk
%LOCALAPPDATA%\spotify\browser\cookies-journal
%LOCALAPPDATA%\spotify\public.ldb\000001.dbtmp
%LOCALAPPDATA%\spotify\public.ldb\manifest-000002
%LOCALAPPDATA%\spotify\public.ldb\000002.dbtmp
%LOCALAPPDATA%\spotify\public.ldb\log
%LOCALAPPDATA%\spotify\public.ldb\000003.log
%APPDATA%\spotify\prefs.tmp
%LOCALAPPDATA%\spotify\browser\cookies
%LOCALAPPDATA%\spotify\user data\crashpadmetrics-active.pma
%LOCALAPPDATA%\spotify\browser\cache\index
%LOCALAPPDATA%\spotify\browser\code cache\js\index
%LOCALAPPDATA%\spotify\browser\visited links
%LOCALAPPDATA%\spotify\browser\gpucache\index
%LOCALAPPDATA%\spotify\browser\gpucache\data_0
%LOCALAPPDATA%\spotify\browser\gpucache\data_1
%LOCALAPPDATA%\spotify\browser\gpucache\data_2
%LOCALAPPDATA%\spotify\browser\gpucache\data_3
%LOCALAPPDATA%\spotify\browser\code cache\wasm\index
%LOCALAPPDATA%\spotify\browser\code cache\wasm\index-dir\temp-index
%LOCALAPPDATA%\spotify\browser\code cache\js\index-dir\temp-index
%APPDATA%\spotify\~tmp_2404_174_~
%APPDATA%\spotify\~tmp_2404_172_~
%APPDATA%\spotify\~tmp_2404_170_~
%APPDATA%\spotify\~tmp_2404_46_~
%APPDATA%\spotify\~tmp_2404_48_~
%APPDATA%\spotify\~tmp_2404_50_~
%APPDATA%\spotify\~tmp_2404_52_~
%APPDATA%\spotify\~tmp_2404_54_~
%APPDATA%\spotify\~tmp_2404_56_~
%APPDATA%\spotify\~tmp_2404_58_~
%APPDATA%\spotify\~tmp_2404_42_~
%APPDATA%\spotify\~tmp_2404_80_~
%APPDATA%\spotify\~tmp_2404_40_~
%APPDATA%\spotify\~tmp_2404_66_~
%APPDATA%\spotify\~tmp_2404_68_~
%APPDATA%\spotify\~tmp_2404_70_~
%APPDATA%\spotify\~tmp_2404_72_~
%APPDATA%\spotify\~tmp_2404_74_~
%APPDATA%\spotify\~tmp_2404_76_~
%APPDATA%\spotify\~tmp_2404_78_~
%APPDATA%\spotify\~tmp_2404_62_~
%APPDATA%\spotify\~tmp_2404_60_~
%APPDATA%\spotify\~tmp_2404_64_~
%APPDATA%\spotify\~tmp_2404_36_~
%APPDATA%\spotify\~tmp_2404_20_~
%APPDATA%\spotify\~tmp_2404_2_~
%APPDATA%\spotify\~tmp_2404_4_~
%APPDATA%\spotify\~tmp_2404_6_~
%APPDATA%\spotify\~tmp_2404_8_~
%APPDATA%\spotify\~tmp_2404_10_~
%APPDATA%\spotify\~tmp_2404_12_~
%APPDATA%\spotify\~tmp_2404_14_~
%APPDATA%\spotify\~tmp_2404_38_~
%APPDATA%\spotify\~tmp_2404_82_~
%APPDATA%\spotify\~tmp_2404_0_~
%APPDATA%\spotify\~tmp_2404_22_~
%APPDATA%\spotify\~tmp_2404_24_~
%APPDATA%\spotify\~tmp_2404_26_~
%APPDATA%\spotify\~tmp_2404_28_~
%APPDATA%\spotify\~tmp_2404_30_~
%APPDATA%\spotify\~tmp_2404_32_~
%APPDATA%\spotify\~tmp_2404_34_~
%APPDATA%\spotify\~tmp_2404_18_~
%APPDATA%\spotify\~tmp_2404_16_~
%APPDATA%\spotify\~tmp_2404_44_~
%APPDATA%\spotify\~tmp_2404_84_~
%APPDATA%\spotify\~tmp_2404_134_~
%APPDATA%\spotify\~tmp_2404_138_~
%APPDATA%\spotify\~tmp_2404_140_~
%APPDATA%\spotify\~tmp_2404_142_~
%APPDATA%\spotify\~tmp_2404_144_~
%APPDATA%\spotify\~tmp_2404_146_~
%APPDATA%\spotify\~tmp_2404_148_~
%APPDATA%\spotify\~tmp_2404_132_~
%APPDATA%\spotify\~tmp_2404_128_~
%APPDATA%\spotify\~tmp_2404_136_~
%APPDATA%\spotify\~tmp_2404_150_~
%APPDATA%\spotify\~tmp_2404_158_~
%APPDATA%\spotify\~tmp_2404_160_~
%APPDATA%\spotify\~tmp_2404_162_~
%APPDATA%\spotify\~tmp_2404_164_~
%APPDATA%\spotify\~tmp_2404_166_~
%APPDATA%\spotify\~tmp_2404_168_~
%APPDATA%\spotify\~tmp_2404_152_~
%APPDATA%\spotify\~tmp_2404_154_~
%APPDATA%\spotify\~tmp_2404_156_~
%APPDATA%\spotify\~tmp_2404_130_~
%APPDATA%\spotify\~tmp_2404_126_~
%APPDATA%\spotify\~tmp_2404_86_~
%APPDATA%\spotify\~tmp_2404_90_~
%APPDATA%\spotify\~tmp_2404_92_~
%APPDATA%\spotify\~tmp_2404_94_~
%APPDATA%\spotify\~tmp_2404_96_~
%APPDATA%\spotify\~tmp_2404_98_~
%APPDATA%\spotify\~tmp_2404_100_~
%APPDATA%\spotify\~tmp_2404_102_~
%APPDATA%\spotify\~tmp_2404_104_~
%APPDATA%\spotify\~tmp_2404_88_~
%APPDATA%\spotify\~tmp_2404_106_~
%APPDATA%\spotify\~tmp_2404_110_~
%APPDATA%\spotify\~tmp_2404_112_~
%APPDATA%\spotify\~tmp_2404_114_~
%APPDATA%\spotify\~tmp_2404_116_~
%APPDATA%\spotify\~tmp_2404_118_~
%APPDATA%\spotify\~tmp_2404_120_~
%APPDATA%\spotify\~tmp_2404_122_~
%APPDATA%\spotify\~tmp_2404_124_~
%APPDATA%\spotify\~tmp_2404_108_~
%LOCALAPPDATA%\spotify\user data\widevinecdm\4.10.1440.18\ia32\widevinecdm.dll
%LOCALAPPDATA%\spotify\browser\local storage\leveldb\000003.log

Deletes the following files

%APPDATA%\spotify\spwebinst0.exe
%LOCALAPPDATA%\spotify\public.ldb\current~rf8bf29.tmp
%LOCALAPPDATA%\spotify\public.ldb\manifest-000001

Moves the following files

from %APPDATA%\spotify\~tmp_2404_0_~ to %APPDATA%\spotify\apps\about.spa
from %APPDATA%\spotify\~tmp_2404_180_~ to %APPDATA%\spotify\locales\ro.pak
from %APPDATA%\spotify\~tmp_2404_182_~ to %APPDATA%\spotify\locales\ru.mo
from %APPDATA%\spotify\~tmp_2404_184_~ to %APPDATA%\spotify\locales\ru.pak
from %APPDATA%\spotify\~tmp_2404_186_~ to %APPDATA%\spotify\locales\sk.pak
from %APPDATA%\spotify\~tmp_2404_188_~ to %APPDATA%\spotify\locales\sl.pak
from %APPDATA%\spotify\~tmp_2404_190_~ to %APPDATA%\spotify\locales\sr.pak
from %APPDATA%\spotify\~tmp_2404_194_~ to %APPDATA%\spotify\locales\sv.pak
from %APPDATA%\spotify\~tmp_2404_176_~ to %APPDATA%\spotify\locales\pt-br.pak
from %APPDATA%\spotify\~tmp_2404_196_~ to %APPDATA%\spotify\locales\sw.pak
from %APPDATA%\spotify\~tmp_2404_198_~ to %APPDATA%\spotify\locales\ta.pak
from %APPDATA%\spotify\~tmp_2404_200_~ to %APPDATA%\spotify\locales\te.pak
from %APPDATA%\spotify\~tmp_2404_202_~ to %APPDATA%\spotify\locales\th.mo
from %APPDATA%\spotify\~tmp_2404_204_~ to %APPDATA%\spotify\locales\th.pak
from %APPDATA%\spotify\~tmp_2404_206_~ to %APPDATA%\spotify\locales\tr.mo
from %APPDATA%\spotify\~tmp_2404_178_~ to %APPDATA%\spotify\locales\pt-pt.pak
from %APPDATA%\spotify\~tmp_2404_174_~ to %APPDATA%\spotify\locales\pt-br.mo
from %APPDATA%\spotify\~tmp_2404_210_~ to %APPDATA%\spotify\locales\uk.pak
from %APPDATA%\spotify\~tmp_2404_150_~ to %APPDATA%\spotify\locales\ko.pak
from %APPDATA%\spotify\~tmp_2404_152_~ to %APPDATA%\spotify\locales\lt.pak
from %APPDATA%\spotify\~tmp_2404_154_~ to %APPDATA%\spotify\locales\lv.pak
from %APPDATA%\spotify\~tmp_2404_156_~ to %APPDATA%\spotify\locales\ml.pak
from %APPDATA%\spotify\~tmp_2404_208_~ to %APPDATA%\spotify\locales\tr.pak
from %APPDATA%\spotify\~tmp_2404_146_~ to %APPDATA%\spotify\locales\kn.pak
from %APPDATA%\spotify\~tmp_2404_192_~ to %APPDATA%\spotify\locales\sv.mo
from %APPDATA%\spotify\~tmp_2404_158_~ to %APPDATA%\spotify\locales\mr.pak
from %APPDATA%\spotify\~tmp_2404_166_~ to %APPDATA%\spotify\locales\nl.mo
from %APPDATA%\spotify\~tmp_2404_168_~ to %APPDATA%\spotify\locales\nl.pak
from %APPDATA%\spotify\~tmp_2404_170_~ to %APPDATA%\spotify\locales\pl.mo
from %APPDATA%\spotify\~tmp_2404_172_~ to %APPDATA%\spotify\locales\pl.pak
from %APPDATA%\spotify\~tmp_2404_160_~ to %APPDATA%\spotify\locales\ms.mo
from %APPDATA%\spotify\~tmp_2404_162_~ to %APPDATA%\spotify\locales\ms.pak
from %APPDATA%\spotify\~tmp_2404_164_~ to %APPDATA%\spotify\locales\nb.pak
from %APPDATA%\spotify\~tmp_2404_88_~ to %APPDATA%\spotify\locales\el.pak
from %APPDATA%\spotify\~tmp_2404_212_~ to %APPDATA%\spotify\locales\vi.mo
from %APPDATA%\spotify\~tmp_2404_252_~ to %APPDATA%\spotify\libglesv2.dll
from %APPDATA%\spotify\~tmp_2404_254_~ to %APPDATA%\spotify\libcef.dll
from %APPDATA%\spotify\~tmp_2404_256_~ to %APPDATA%\spotify\snapshot_blob.bin
from %APPDATA%\spotify\~tmp_2404_258_~ to %APPDATA%\spotify\v8_context_snapshot.bin
from %LOCALAPPDATA%\spotify\public.ldb\000001.dbtmp to %LOCALAPPDATA%\spotify\public.ldb\current
from %LOCALAPPDATA%\spotify\public.ldb\000002.dbtmp to %LOCALAPPDATA%\spotify\public.ldb\current
from %APPDATA%\spotify\~tmp_2404_250_~ to %APPDATA%\spotify\libegl.dll
from %APPDATA%\spotify\~tmp_2404_144_~ to %APPDATA%\spotify\locales\ja.pak
from %APPDATA%\spotify\~tmp_2404_248_~ to %APPDATA%\spotify\icudtl.dat
from %LOCALAPPDATA%\spotify\browser\code cache\js\index-dir\temp-index to %LOCALAPPDATA%\spotify\browser\code cache\js\index-dir\the-real-index
from %LOCALAPPDATA%\spotify\ct.pb.tmp to %LOCALAPPDATA%\spotify\ct.pb
from %LOCALAPPDATA%\spotify\browser\local storage\leveldb\000001.dbtmp to %LOCALAPPDATA%\spotify\browser\local storage\leveldb\current
from %LOCALAPPDATA%\spotify\ea21b3e3-c848-4c43-959a-b2a738bee997.tmp to %LOCALAPPDATA%\spotify\localprefs.json
from %LOCALAPPDATA%\spotify\browser\000001.dbtmp to %LOCALAPPDATA%\spotify\browser\current
from %APPDATA%\spotify\prefs.tmp to %APPDATA%\spotify\prefs
from %LOCALAPPDATA%\spotify\public.ldb\current to %LOCALAPPDATA%\spotify\public.ldb\current~rf8bf29.tmp
from %APPDATA%\spotify\~tmp_2404_148_~ to %APPDATA%\spotify\locales\ko.mo
from %APPDATA%\spotify\~tmp_2404_244_~ to %APPDATA%\spotify\d3dcompiler_47.dll
from %APPDATA%\spotify\~tmp_2404_232_~ to %APPDATA%\spotify\cef.pak
from %APPDATA%\spotify\~tmp_2404_218_~ to %APPDATA%\spotify\locales\zh-hant.mo
from %APPDATA%\spotify\~tmp_2404_220_~ to %APPDATA%\spotify\locales\zh-tw.pak
from %APPDATA%\spotify\~tmp_2404_222_~ to %APPDATA%\spotify\swiftshader\libegl.dll
from %APPDATA%\spotify\~tmp_2404_224_~ to %APPDATA%\spotify\swiftshader\libglesv2.dll
from %APPDATA%\spotify\~tmp_2404_226_~ to %APPDATA%\spotify\spotify.exe
from %APPDATA%\spotify\~tmp_2404_246_~ to %APPDATA%\spotify\devtools_resources.pak
from %APPDATA%\spotify\~tmp_2404_214_~ to %APPDATA%\spotify\locales\vi.pak
from %APPDATA%\spotify\~tmp_2404_216_~ to %APPDATA%\spotify\locales\zh-cn.pak
from %APPDATA%\spotify\~tmp_2404_234_~ to %APPDATA%\spotify\cef_100_percent.pak
from %APPDATA%\spotify\~tmp_2404_236_~ to %APPDATA%\spotify\cef_200_percent.pak
from %APPDATA%\spotify\~tmp_2404_238_~ to %APPDATA%\spotify\cef_extensions.pak
from %APPDATA%\spotify\~tmp_2404_240_~ to %APPDATA%\spotify\chrome_elf.dll
from %APPDATA%\spotify\~tmp_2404_242_~ to %APPDATA%\spotify\crash_reporter.cfg
from %APPDATA%\spotify\~tmp_2404_230_~ to %APPDATA%\spotify\spotifystartuptask.exe
from %APPDATA%\spotify\~tmp_2404_228_~ to %APPDATA%\spotify\spotifymigrator.exe
from %APPDATA%\spotify\~tmp_2404_142_~ to %APPDATA%\spotify\locales\ja.mo
from %APPDATA%\spotify\~tmp_2404_140_~ to %APPDATA%\spotify\locales\it.pak
from %APPDATA%\spotify\~tmp_2404_138_~ to %APPDATA%\spotify\locales\it.mo
from %APPDATA%\spotify\~tmp_2404_42_~ to %APPDATA%\spotify\apps\playlist-folder.spa
from %APPDATA%\spotify\~tmp_2404_44_~ to %APPDATA%\spotify\apps\playlist.spa
from %APPDATA%\spotify\~tmp_2404_46_~ to %APPDATA%\spotify\apps\profile.spa
from %APPDATA%\spotify\~tmp_2404_48_~ to %APPDATA%\spotify\apps\queue.spa
from %APPDATA%\spotify\~tmp_2404_36_~ to %APPDATA%\spotify\apps\licenses.spa
from %APPDATA%\spotify\~tmp_2404_16_~ to %APPDATA%\spotify\apps\collection.spa
from %APPDATA%\spotify\~tmp_2404_40_~ to %APPDATA%\spotify\apps\lyrics.spa
from %APPDATA%\spotify\~tmp_2404_50_~ to %APPDATA%\spotify\apps\search.spa
from %APPDATA%\spotify\~tmp_2404_58_~ to %APPDATA%\spotify\apps\stations.spa
from %APPDATA%\spotify\~tmp_2404_60_~ to %APPDATA%\spotify\apps\xpui.spa
from %APPDATA%\spotify\~tmp_2404_62_~ to %APPDATA%\spotify\apps\zlink.spa
from %APPDATA%\spotify\~tmp_2404_64_~ to %APPDATA%\spotify\locales\am.pak
from %APPDATA%\spotify\~tmp_2404_52_~ to %APPDATA%\spotify\apps\settings.spa
from %APPDATA%\spotify\~tmp_2404_54_~ to %APPDATA%\spotify\apps\show.spa
from %APPDATA%\spotify\~tmp_2404_56_~ to %APPDATA%\spotify\apps\station.spa
from %LOCALAPPDATA%\spotify\browser\39ecc2aa-c73c-464a-b814-75911914221e.tmp to %LOCALAPPDATA%\spotify\browser\network persistent state
from %APPDATA%\spotify\~tmp_2404_66_~ to %APPDATA%\spotify\locales\ar.mo
from %APPDATA%\spotify\~tmp_2404_30_~ to %APPDATA%\spotify\apps\glue-resources.spa
from %APPDATA%\spotify\~tmp_2404_28_~ to %APPDATA%\spotify\apps\genre.spa
from %APPDATA%\spotify\~tmp_2404_26_~ to %APPDATA%\spotify\apps\full-screen-modal.spa
from %APPDATA%\spotify\~tmp_2404_24_~ to %APPDATA%\spotify\apps\findfriends.spa
from %APPDATA%\spotify\~tmp_2404_22_~ to %APPDATA%\spotify\apps\error.spa
from %APPDATA%\spotify\~tmp_2404_20_~ to %APPDATA%\spotify\apps\concerts.spa
from %APPDATA%\spotify\~tmp_2404_18_~ to %APPDATA%\spotify\apps\concert.spa
from %APPDATA%\spotify\~tmp_2404_34_~ to %APPDATA%\spotify\apps\legacy-lyrics.spa
from %APPDATA%\spotify\~tmp_2404_14_~ to %APPDATA%\spotify\apps\collection-songs.spa
from %APPDATA%\spotify\~tmp_2404_12_~ to %APPDATA%\spotify\apps\collection-artist.spa
from %APPDATA%\spotify\~tmp_2404_10_~ to %APPDATA%\spotify\apps\collection-album.spa
from %APPDATA%\spotify\~tmp_2404_8_~ to %APPDATA%\spotify\apps\chart.spa
from %APPDATA%\spotify\~tmp_2404_6_~ to %APPDATA%\spotify\apps\buddy-list.spa
from %APPDATA%\spotify\~tmp_2404_4_~ to %APPDATA%\spotify\apps\browse.spa
from %APPDATA%\spotify\~tmp_2404_2_~ to %APPDATA%\spotify\apps\artist.spa
from %APPDATA%\spotify\~tmp_2404_32_~ to %APPDATA%\spotify\apps\hub.spa
from %LOCALAPPDATA%\spotify\browser\code cache\wasm\index-dir\temp-index to %LOCALAPPDATA%\spotify\browser\code cache\wasm\index-dir\the-real-index
from %APPDATA%\spotify\~tmp_2404_68_~ to %APPDATA%\spotify\locales\ar.pak
from %APPDATA%\spotify\~tmp_2404_74_~ to %APPDATA%\spotify\locales\ca.pak
from %APPDATA%\spotify\~tmp_2404_112_~ to %APPDATA%\spotify\locales\fil.pak
from %APPDATA%\spotify\~tmp_2404_114_~ to %APPDATA%\spotify\locales\fr-ca.mo
from %APPDATA%\spotify\~tmp_2404_116_~ to %APPDATA%\spotify\locales\fr.mo
from %APPDATA%\spotify\~tmp_2404_118_~ to %APPDATA%\spotify\locales\fr.pak
from %APPDATA%\spotify\~tmp_2404_120_~ to %APPDATA%\spotify\locales\gu.pak
from %APPDATA%\spotify\~tmp_2404_70_~ to %APPDATA%\spotify\locales\bg.pak
from %APPDATA%\spotify\~tmp_2404_110_~ to %APPDATA%\spotify\locales\fi.pak
from %APPDATA%\spotify\~tmp_2404_108_~ to %APPDATA%\spotify\locales\fi.mo
from %APPDATA%\spotify\~tmp_2404_128_~ to %APPDATA%\spotify\locales\hr.pak
from %APPDATA%\spotify\~tmp_2404_130_~ to %APPDATA%\spotify\locales\hu.mo
from %APPDATA%\spotify\~tmp_2404_132_~ to %APPDATA%\spotify\locales\hu.pak
from %APPDATA%\spotify\~tmp_2404_134_~ to %APPDATA%\spotify\locales\id.mo
from %APPDATA%\spotify\~tmp_2404_136_~ to %APPDATA%\spotify\locales\id.pak
from %APPDATA%\spotify\~tmp_2404_122_~ to %APPDATA%\spotify\locales\he.mo
from %APPDATA%\spotify\~tmp_2404_126_~ to %APPDATA%\spotify\locales\hi.pak
from %APPDATA%\spotify\~tmp_2404_72_~ to %APPDATA%\spotify\locales\bn.pak
from %APPDATA%\spotify\~tmp_2404_124_~ to %APPDATA%\spotify\locales\he.pak
from %APPDATA%\spotify\~tmp_2404_38_~ to %APPDATA%\spotify\apps\login.spa
from %APPDATA%\spotify\~tmp_2404_76_~ to %APPDATA%\spotify\locales\cs.mo
from %APPDATA%\spotify\~tmp_2404_78_~ to %APPDATA%\spotify\locales\cs.pak
from %APPDATA%\spotify\~tmp_2404_80_~ to %APPDATA%\spotify\locales\da.pak
from %APPDATA%\spotify\~tmp_2404_82_~ to %APPDATA%\spotify\locales\de.mo
from %APPDATA%\spotify\~tmp_2404_84_~ to %APPDATA%\spotify\locales\de.pak
from %APPDATA%\spotify\~tmp_2404_102_~ to %APPDATA%\spotify\locales\es.pak
from %APPDATA%\spotify\~tmp_2404_106_~ to %APPDATA%\spotify\locales\fa.pak
from %APPDATA%\spotify\~tmp_2404_104_~ to %APPDATA%\spotify\locales\et.pak
from %APPDATA%\spotify\~tmp_2404_92_~ to %APPDATA%\spotify\locales\en-us.pak
from %APPDATA%\spotify\~tmp_2404_94_~ to %APPDATA%\spotify\locales\en.mo
from %APPDATA%\spotify\~tmp_2404_96_~ to %APPDATA%\spotify\locales\es-419.mo
from %APPDATA%\spotify\~tmp_2404_98_~ to %APPDATA%\spotify\locales\es-419.pak
from %APPDATA%\spotify\~tmp_2404_100_~ to %APPDATA%\spotify\locales\es.mo
from %APPDATA%\spotify\~tmp_2404_86_~ to %APPDATA%\spotify\locales\el.mo
from %APPDATA%\spotify\~tmp_2404_90_~ to %APPDATA%\spotify\locales\en-gb.pak
from %TEMP%\1860-f8fe-03b0-19ce to %TEMP%\4.10.1440.18-win-ia32.zip

Substitutes the following files

%LOCALAPPDATA%\spotify\public.ldb\current
%APPDATA%\spotify\prefs.tmp

Network activity

Connects to

'<LOCALNET>.17.130':8080
'do####ad.scdn.co':443
'microsoft.com':80
'cl#####oken.spotify.com':443
're####ctor.gvt1.com':443
'r4######5hne6nzs.gvt1.com':443
'sp#####t.wg.spotify.com':443
'ap#####ve.spotify.com':443
'ge######ient.spotify.com':443
'r4######5hne6nsy.gvt1.com':443

TCP

'do####ad.scdn.co':443
'cl#####oken.spotify.com':443
're####ctor.gvt1.com':443
'r4######5hne6nzs.gvt1.com':443
'ap#####ve.spotify.com':443
'ge######ient.spotify.com':443
'r4######5hne6nsy.gvt1.com':443

UDP

DNS ASK do####ad.scdn.co
DNS ASK microsoft.com
DNS ASK cl#####oken.spotify.com
DNS ASK re####ctor.gvt1.com
DNS ASK sp#####t.wg.spotify.com
DNS ASK ap#####ve.spotify.com
DNS ASK r4######5hne6nzs.gvt1.com
DNS ASK ge######ient.spotify.com
DNS ASK r4######5hne6nsy.gvt1.com
're####ctor.gvt1.com':443

Miscellaneous

Searches for the following windows

ClassName: 'SpotifyHttpsListener' WindowName: ''

Creates and executes the following

'%APPDATA%\spotify\spwebinst0.exe' /webinstall
'%APPDATA%\spotify\spotify.exe'
'%APPDATA%\spotify\spotify.exe' --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Spotify\User Data\Crashpad" "--me...
'%APPDATA%\spotify\spotify.exe' --type=gpu-process --field-trial-handle=1220,823631324332072016,9641407062281690214,131072 --enable-features=CastMediaRouteProvider --disable-d3d11 --log-file="%APPDATA%\Spotify\debug.log" --lo...
'%APPDATA%\spotify\spotify.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1220,823631324332072016,9641407062281690214,131072 --enable-features=CastMediaRouteProvider --lang=en-US --se...
'%APPDATA%\spotify\spotify.exe' --type=renderer --log-file="%APPDATA%\Spotify\debug.log" --field-trial-handle=1220,823631324332072016,9641407062281690214,131072 --enable-features=CastMediaRouteProvider --lang=en-US --log-file...

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней