diff --git a/detection/execution/unexpected-execdir-linux.sql b/detection/execution/unexpected-execdir-linux.sql
index 35fbc57..fd5dd15 100644
--- a/detection/execution/unexpected-execdir-linux.sql
+++ b/detection/execution/unexpected-execdir-linux.sql
@@ -40,6 +40,7 @@ WHERE
     '/usr/lib/firefox',
     '/usr/lib/fwupd',
     '/usr/lib/ibus',
+    '/usr/share/spotify-client',
     '/usr/lib/libreoffice/program',
     '/usr/lib/polkit-1',
     '/usr/lib/slack',