Have you checked when the file was last modified.
If it fits the date you did the Spotify command then I wouldn’t worry much about it.
If you still are concerned you can send the file to virustotal to be safe.
If it’s more concerning for you for a functional reason then move the file elsewhere if nothing break you should be fine.
A long time ago I used a CLI download manager that could download from different mirrors at the same time.
I think it was a tool called axel and it worked very well.