| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-May-04 15:09:16 |
| Detected languages |
English - United States
|
| CompanyName | Spotify AB |
| FileDescription | Spotify Music Player |
| FileVersion | 1.70.368.0 |
| InternalName | Spotify.exe |
| LegalCopyright | Copyright (C) 2023 Spotify AB |
| OriginalFilename | Spotify.exe |
| ProductName | Spotify |
| ProductVersion | 1.70.368.0 |
| Comments | Music streaming application |
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x110 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2026-May-04 15:09:16 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x20e00 |
| SizeOfInitializedData | 0x17c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000000B4A4 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3c000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| bcrypt.dll |
BCryptCloseAlgorithmProvider
BCryptGenRandom BCryptOpenAlgorithmProvider |
|---|---|
| KERNEL32.dll |
VirtualProtect
GetCurrentProcess FlushInstructionCache OutputDebugStringA Sleep CloseHandle CreateThread HeapSize GetCurrentProcessId MultiByteToWideChar VirtualQuery CreateFileW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW WriteConsoleW DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WideCharToMultiByte InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WakeAllConditionVariable EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapReAlloc FindClose |
| USER32.dll |
DefWindowProcW
CreateWindowExW GetSystemMetrics ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW RegisterClassW SetProcessDPIAware TranslateMessage PostQuitMessage SetLayeredWindowAttributes |
| GDI32.dll |
SelectObject
DeleteObject CreateFontA |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.70.368.0 |
| ProductVersion | 1.70.368.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | Spotify AB |
| FileDescription | Spotify Music Player |
| FileVersion (#2) | 1.70.368.0 |
| InternalName | Spotify.exe |
| LegalCopyright | Copyright (C) 2023 Spotify AB |
| OriginalFilename | Spotify.exe |
| ProductName | Spotify |
| ProductVersion (#2) | 1.70.368.0 |
| Comments | Music streaming application |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-May-04 15:09:16 |
| Version | 0.0 |
| SizeofData | 1052 |
| AddressOfRawData | 0x30ee8 |
| PointerToRawData | 0x300e8 |
| StartAddressOfRawData | 0x140031350 |
|---|---|
| EndAddressOfRawData | 0x140031358 |
| AddressOfIndex | 0x140036d50 |
| AddressOfCallbacks | 0x140022458 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140035080 |
| XOR Key | 0x2b5b3fe |
|---|---|
| Unmarked objects | 0 |
| C++ objects (33145) | 176 |
| C objects (33145) | 20 |
| ASM objects (33145) | 8 |
| ASM objects (35207) | 10 |
| C objects (35207) | 17 |
| C++ objects (35207) | 92 |
| Imports (33145) | 9 |
| Total imports | 169 |
| C++ objects (LTCG) (35226) | 6 |
| Resource objects (35226) | 1 |
| 151 | 1 |
| Linker (35226) | 1 |
No comments yet.