I found a binary file with a gibberish name in my home directory. Its content seems to be just hex zeroes when I open it in an online binary viewer. It doesn't have execute permissions. It seems I accidentally ran spotify --uri=
around the time the file was created (I could not replicate).
Can I safely ignore this as some bug with a program that tried to write to a file?
Have you checked when the file was last modified.
If it fits the date you did the Spotify command then I wouldn't worry much about it.
If you still are concerned you can send the file to virustotal to be safe.
If it's more concerning for you for a functional reason then move the file elsewhere if nothing break you should be fine.
I checked when it was created and that spotify command is the only one that makes sense time-wise.
Convoluted name and a lot of null bytes? Sounds like a temporary file used during downloading.