Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/11/2026, 15:54

General

  • Target
    bilibili-radio-desktop.exe
  • Size 9.1MB
  • Sample261110-tch5ray18l
  • SHA256 134bb769af6d69de5d4b539712e9ef786f0b90d4a5a0478deaacd903cab3cb30
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 26 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 64 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of WriteProcessMemory 26 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bilibili-radio-desktop.exe
    "C:\Users\Admin\AppData\Local\Temp\bilibili-radio-desktop.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:5344
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5344.4564.16698771492923180284
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4572
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x12c,0x16c,0x7ffca6d1b078,0x7ffca6d1b084,0x7ffca6d1b090
        3⤵
          PID:5004
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1724,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:2
          3⤵
            PID:1264
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2036,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
            3⤵
              PID:5816
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2368,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
              3⤵
                PID:5124
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3584,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                3⤵
                  PID:5812
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3872,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:1
                  3⤵
                    PID:5992
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4736,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
                    3⤵
                      PID:3776
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4732,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:8
                      3⤵
                        PID:2112
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=752,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
                        3⤵
                          PID:6068
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=756,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:8
                          3⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:3052
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView" --webview-exe-name=bilibili-radio-desktop.exe --webview-exe-version=0.1.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,2090611770942311778,10095385793067820756,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:8
                          3⤵
                            PID:4764
                        • C:\Users\Admin\AppData\Local\Temp\_up_\_up_\py-radio\dist\bilibili-radio-backend.exe
                          "\\?\C:\Users\Admin\AppData\Local\Temp\_up_\_up_\py-radio\dist\bilibili-radio-backend.exe"
                          2⤵
                          • Suspicious use of WriteProcessMemory
                          PID:5576
                          • C:\Users\Admin\AppData\Local\Temp\_up_\_up_\py-radio\dist\bilibili-radio-backend.exe
                            "\\?\C:\Users\Admin\AppData\Local\Temp\_up_\_up_\py-radio\dist\bilibili-radio-backend.exe"
                            3⤵
                            • Loads dropped DLL
                            • Suspicious use of WriteProcessMemory
                            PID:904
                            • C:\Windows\system32\cmd.exe
                              C:\Windows\system32\cmd.exe /c "ver"
                              4⤵
                              • Executes a command shell one-liner
                              PID:3272

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            Microsoft.CognitiveServices.Speech.core.dll

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1201770379\Microsoft.CognitiveServices.Speech.core.dll
                            • Size 2.6MB
                            • SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            manifest.fingerprint

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1201770379\manifest.fingerprint
                            • Size 66B
                            • SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
                            • MD5 SHA1 SHA512 TLSH

                            verified_contents.json

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\_metadata\verified_contents.json
                            • Size 7KB
                            • SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-af.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-af.hyb
                            • Size 70KB
                            • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-be.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-be.hyb
                            • Size 5KB
                            • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-bg.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-bg.hyb
                            • Size 3KB
                            • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
                            • MD5 SHA1 SHA512 TLSH

                            hyph-cs.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-cs.hyb
                            • Size 62KB
                            • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-cu.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-cu.hyb
                            • Size 51KB
                            • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-cy.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-cy.hyb
                            • Size 35KB
                            • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-da.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-da.hyb
                            • Size 6KB
                            • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-de-1901.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-de-1901.hyb
                            • Size 118KB
                            • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-de-1996.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-de-1996.hyb
                            • Size 117KB
                            • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-de-ch-1901.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-de-ch-1901.hyb
                            • Size 117KB
                            • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-el.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-el.hyb
                            • Size 4KB
                            • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-en-gb.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-en-gb.hyb
                            • Size 45KB
                            • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-en-us.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-en-us.hyb
                            • Size 58KB
                            • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-es.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-es.hyb
                            • Size 14KB
                            • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-et.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-et.hyb
                            • Size 20KB
                            • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-eu.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-eu.hyb
                            • Size 665B
                            • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
                            • MD5 SHA1 SHA512 TLSH

                            hyph-fr.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-fr.hyb
                            • Size 7KB
                            • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-ga.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-ga.hyb
                            • Size 34KB
                            • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-gl.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-gl.hyb
                            • Size 9KB
                            • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-gu.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-gu.hyb
                            • Size 655B
                            • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
                            • MD5 SHA1 SHA512 TLSH

                            hyph-hr.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-hr.hyb
                            • Size 2KB
                            • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
                            • MD5 SHA1 SHA512 TLSH

                            hyph-hu.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-hu.hyb
                            • Size 309KB
                            • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-hy.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-hy.hyb
                            • Size 605B
                            • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
                            • MD5 SHA1 SHA512 TLSH

                            hyph-it.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-it.hyb
                            • Size 2KB
                            • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
                            • MD5 SHA1 SHA512 TLSH

                            hyph-ka.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-ka.hyb
                            • Size 9KB
                            • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-kn.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-kn.hyb
                            • Size 711B
                            • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
                            • MD5 SHA1 SHA512 TLSH

                            hyph-la.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-la.hyb
                            • Size 1KB
                            • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
                            • MD5 SHA1 SHA512 TLSH

                            hyph-lt.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-lt.hyb
                            • Size 7KB
                            • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-lv.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-lv.hyb
                            • Size 37KB
                            • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-ml.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-ml.hyb
                            • Size 776B
                            • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
                            • MD5 SHA1 SHA512 TLSH

                            hyph-mn-cyrl.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-mn-cyrl.hyb
                            • Size 5KB
                            • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-mul-ethi.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-mul-ethi.hyb
                            • Size 3KB
                            • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
                            • MD5 SHA1 SHA512 TLSH

                            hyph-nl.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-nl.hyb
                            • Size 75KB
                            • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-or.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-or.hyb
                            • Size 647B
                            • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
                            • MD5 SHA1 SHA512 TLSH

                            hyph-pa.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-pa.hyb
                            • Size 607B
                            • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
                            • MD5 SHA1 SHA512 TLSH

                            hyph-pt.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-pt.hyb
                            • Size 1KB
                            • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
                            • MD5 SHA1 SHA512 TLSH

                            hyph-ru.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-ru.hyb
                            • Size 19KB
                            • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-sk.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-sk.hyb
                            • Size 62KB
                            • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-sl.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-sl.hyb
                            • Size 6KB
                            • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-sq.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-sq.hyb
                            • Size 1KB
                            • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
                            • MD5 SHA1 SHA512 TLSH

                            hyph-sv.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-sv.hyb
                            • Size 70KB
                            • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-ta.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-ta.hyb
                            • Size 554B
                            • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
                            • MD5 SHA1 SHA512 TLSH

                            hyph-te.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-te.hyb
                            • Size 703B
                            • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
                            • MD5 SHA1 SHA512 TLSH

                            hyph-tk.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-tk.hyb
                            • Size 2KB
                            • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
                            • MD5 SHA1 SHA512 TLSH

                            hyph-uk.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-uk.hyb
                            • Size 18KB
                            • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            hyph-und-ethi.hyb

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\hyph-und-ethi.hyb
                            • Size 3KB
                            • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
                            • MD5 SHA1 SHA512 TLSH

                            manifest.fingerprint

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_1640046695\manifest.fingerprint
                            • Size 66B
                            • SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
                            • MD5 SHA1 SHA512 TLSH

                            manifest.fingerprint

                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4572_562861285\manifest.fingerprint
                            • Size 66B
                            • SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
                            • MD5 SHA1 SHA512 TLSH

                            desktop-lyrics.log

                            • Path C:\Users\Admin\AppData\Local\Bilibili Radio\desktop-lyrics.log
                            • Size 964B
                            • SHA256 e79d985329d7b5f9412c077b124c98144b9a883e01c70205eec8a39d9b120b93
                            • MD5 SHA1 SHA512 TLSH

                            desktop-lyrics.log

                            • Path C:\Users\Admin\AppData\Local\Bilibili Radio\desktop-lyrics.log
                            • Size 1KB
                            • SHA256 cf56be208fe8278a2510bb9101b6cd558ff70872a57f1c07554a7a8b552700e9
                            • MD5 SHA1 SHA512 TLSH

                            desktop-lyrics.log

                            • Path C:\Users\Admin\AppData\Local\Bilibili Radio\desktop-lyrics.log
                            • Size 2KB
                            • SHA256 496d6d26cc32b76a067e34d74305d4bb634c9312d14297395b080169f136c7f5
                            • MD5 SHA1 SHA512 TLSH

                            VCRUNTIME140.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\VCRUNTIME140.dll
                            • Size 95KB
                            • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            _ctypes.pyd

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\_ctypes.pyd
                            • Size 120KB
                            • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ada92cb5d92a588d1b93__mypyc.cp310-win_amd64.pyd

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\ada92cb5d92a588d1b93__mypyc.cp310-win_amd64.pyd
                            • Size 218KB
                            • SHA256 df449f6b7397e3a83f84d08ff38efac2c45527944221d1d6f6e78228a05c8ce7
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-console-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-console-l1-1-0.dll
                            • Size 21KB
                            • SHA256 a742b375fc6cb32e17c66f7e677cef59399216ac21c1384de6ec892c2b099a4d
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-datetime-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-datetime-l1-1-0.dll
                            • Size 21KB
                            • SHA256 4e8c54b23d5c0d5b388d7c0182da2e3afc9819073640e83b753f517d5cf77aeb
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-debug-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-debug-l1-1-0.dll
                            • Size 21KB
                            • SHA256 29354cbe6e808ae1b1c187aafe5f2a66d8cb5b4ed7ef3f830884c7c02171305f
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-errorhandling-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-errorhandling-l1-1-0.dll
                            • Size 21KB
                            • SHA256 cfce9bfbe11b534e1fc28d59efed233b7490f081380a016b45b2357b4be1f173
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-fibers-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-fibers-l1-1-0.dll
                            • Size 21KB
                            • SHA256 7d02b9f60a652ee3496d809fb42a5779d6523aa9e574a853d9d71ca13aa0344d
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-file-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-file-l1-1-0.dll
                            • Size 25KB
                            • SHA256 2ff6914e5887b3fa53cb418b5602c84b79f189e441e1e66bf42c759688d8c885
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-file-l1-2-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-file-l1-2-0.dll
                            • Size 21KB
                            • SHA256 98b4b6a29374e68a383bd6e4b58cd76223335d38d2586c5a494466444811b75c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-file-l2-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-file-l2-1-0.dll
                            • Size 21KB
                            • SHA256 637e9a34044c366b9b004e62ee15aa4875e344a5a6b7634c803a40d95883d7cc
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-handle-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-handle-l1-1-0.dll
                            • Size 21KB
                            • SHA256 049a1b6b3fd664e5ab2bb27fc3614d8f8091a0dabd4aebc92a0804bf62a55c38
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-heap-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-heap-l1-1-0.dll
                            • Size 21KB
                            • SHA256 0d5db713081a8c823506739716ff483f6b68e203128b54ea3b807f9aa6fa7f49
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-interlocked-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-interlocked-l1-1-0.dll
                            • Size 21KB
                            • SHA256 73170ecc212462678605e0025d87dfad646e53edbf7c015857cfdd47dfa1138f
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-libraryloader-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-libraryloader-l1-1-0.dll
                            • Size 21KB
                            • SHA256 f6445229c496e05b84092b4ae5ad765233471acdcd12460b492d499001d623bf
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-localization-l1-2-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-localization-l1-2-0.dll
                            • Size 21KB
                            • SHA256 6ce59c2de64b6195695e8754636cbe283a7af3ddb78acf32c3879d7d09aba4b1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-memory-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-memory-l1-1-0.dll
                            • Size 21KB
                            • SHA256 0b1793130550ea2e80c52cd5c28442f29364cddb063833d67b3c6d5995fd89dd
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-namedpipe-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-namedpipe-l1-1-0.dll
                            • Size 21KB
                            • SHA256 218d0b5a06fb1c07249bb7388b8ff9c5d7622206c562ffc9fee21a372d1371af
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-processenvironment-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-processenvironment-l1-1-0.dll
                            • Size 21KB
                            • SHA256 11dc3f718b8cd959c30d7c69af2880f728ab5640c678af7290acd554911bc9b0
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-processthreads-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-processthreads-l1-1-0.dll
                            • Size 21KB
                            • SHA256 49172aa2c8734ef8159bc6dd58a9ddf9d391f3a109254a96f48fc0d9f9eec89a
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-processthreads-l1-1-1.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-processthreads-l1-1-1.dll
                            • Size 21KB
                            • SHA256 f5c82a141bdc7929bb3d6d4196c0e8501f4a894fd65a435f8134c073134461ac
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-profile-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-profile-l1-1-0.dll
                            • Size 21KB
                            • SHA256 d71ca70fcf6871ef83f8b45218edc50a2a1ee9d568b77bb69bd56fcf3ebda97b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-rtlsupport-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-rtlsupport-l1-1-0.dll
                            • Size 21KB
                            • SHA256 e400bf8019dc0caf98865aea07429f8581ac5b004b9759a1c62f2d7bccbcb3a4
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-string-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-string-l1-1-0.dll
                            • Size 21KB
                            • SHA256 3e35afeb848c4777e3db2b3b38b2cd8fe768feac82b18c69308fe07d65b1a602
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-synch-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-synch-l1-1-0.dll
                            • Size 21KB
                            • SHA256 f09a3b2d04c4ae6c1217ed073421c912eb7e0fb006441291948470e6329a4fd2
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-synch-l1-2-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-synch-l1-2-0.dll
                            • Size 21KB
                            • SHA256 5cf8cf2b29a0fb4f3df647ccb1efcae0390e0d57bedfc37200c1577810c3716c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-sysinfo-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-sysinfo-l1-1-0.dll
                            • Size 21KB
                            • SHA256 b3b356cdca34cb5023cd8f49025e23128f1e86dd0d4865d62bc42f775f1acca8
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-timezone-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-timezone-l1-1-0.dll
                            • Size 21KB
                            • SHA256 a202f21169cc103c019019d3cbc05c3549a8dbac6eed0ecb4e5281e36f028a26
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-core-util-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-core-util-l1-1-0.dll
                            • Size 21KB
                            • SHA256 01cbe35a9513dd5c499179a31dbae86a4f37a510bba7a7cc484f23559b252067
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-conio-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-conio-l1-1-0.dll
                            • Size 21KB
                            • SHA256 ea8ad551e8944389ce502cb8d5f979d243af7784ce7382fa18a04a9de2f7b2d1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-convert-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-convert-l1-1-0.dll
                            • Size 25KB
                            • SHA256 eb41bf23e10405efcad8bb3eb8972f431394113324717386362ac6406a5c6d75
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-environment-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-environment-l1-1-0.dll
                            • Size 21KB
                            • SHA256 294bca6dcb6455e9027b527aae42ed5aa04d5ae769cb897cb36a150b40a6fa26
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-filesystem-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-filesystem-l1-1-0.dll
                            • Size 21KB
                            • SHA256 a60dbd92bc1e1e06035d6aeef821d71dd06de7e15b5536110048233dd523a9a2
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-heap-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-heap-l1-1-0.dll
                            • Size 21KB
                            • SHA256 20ce58e1990ac2f726466e234e6a6ef4dfae97f8cb1571a0a4b1bd74df87dfdd
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-locale-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-locale-l1-1-0.dll
                            • Size 21KB
                            • SHA256 fe617cc8748560a1e12e58559fdf192c5888babff4ae62e386617293d5fc20b0
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-math-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-math-l1-1-0.dll
                            • Size 29KB
                            • SHA256 655965eca578ae6b0afedd0ce2a424a3f6e9b3e624dd0d55ce67bc7df75b3b6b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-process-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-process-l1-1-0.dll
                            • Size 21KB
                            • SHA256 2292e2b873f90645e2d6e94e83c748f301773a2c12c3824e80581aefd869cc9c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-runtime-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-runtime-l1-1-0.dll
                            • Size 25KB
                            • SHA256 84ce7e29868776de9939938d5c3091736669ebad4f063f5e83df0299b474e5ed
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-stdio-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-stdio-l1-1-0.dll
                            • Size 25KB
                            • SHA256 acd08d06dfc981071142a851913e55aa253926c12b5b9d73649b832a4bfd0dd9
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-string-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-string-l1-1-0.dll
                            • Size 25KB
                            • SHA256 db897e58b7d327a059db263af2f1be1eff58176e3bcdb82aa801e2d69fd2293c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-time-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-time-l1-1-0.dll
                            • Size 21KB
                            • SHA256 44705d9b3271d9db307f92c7c2764a98db5819e670897dbfc95beb386a1840bb
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            api-ms-win-crt-utility-l1-1-0.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\api-ms-win-crt-utility-l1-1-0.dll
                            • Size 21KB
                            • SHA256 fe4c586d1fc06d9012b2fc9c34aa72b219a939dbb2d9f034763465a7de24fff2
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            base_library.zip

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\base_library.zip
                            • Size 859KB
                            • SHA256 991449e86d8e6f9f0eed1aad5956e06560e9f2c8bce6e8230f526ee9f7e5acac
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            libcrypto-1_1.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\libcrypto-1_1.dll
                            • Size 3.3MB
                            • SHA256 9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            libffi-7.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\libffi-7.dll
                            • Size 32KB
                            • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            libssl-1_1.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\libssl-1_1.dll
                            • Size 688KB
                            • SHA256 d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            INSTALLER

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\markupsafe-3.0.3.dist-info\INSTALLER
                            • Size 4B
                            • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
                            • MD5 SHA1 SHA512

                            pyexpat.pyd

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\pyexpat.pyd
                            • Size 194KB
                            • SHA256 4a2d59993bce76790c6d923af81bf404f8e2cb73552e320113663b14cf78748c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            python3.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\python3.dll
                            • Size 64KB
                            • SHA256 dc909eb798a23ba8ee9f8e3f307d97755bc0d2dc0cb342cedae81fbbad32a8a9
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            python310.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\python310.dll
                            • Size 4.3MB
                            • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            select.pyd

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\select.pyd
                            • Size 29KB
                            • SHA256 db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ucrtbase.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\_MEI55762\ucrtbase.dll
                            • Size 1.1MB
                            • SHA256 048d4c5a51e45777ba15facdaddbf7702594a2268e8de1768ab0f5f4e4d7e733
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            47fac82a-fe52-434e-9de6-db0c5846c196.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\47fac82a-fe52-434e-9de6-db0c5846c196.tmp
                            • Size 16KB
                            • SHA256 6cc5e40bbf7ebbc72410924b2764d4a0950902257dadec62d80e8af586350959
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            5651586f-1461-402d-a39d-b72cb8f5c9ed.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\5651586f-1461-402d-a39d-b72cb8f5c9ed.tmp
                            • Size 2KB
                            • SHA256 d4f5ce9c2a9cdea29b33000013c2ffb5cf6d8561ad7e62d21d14b9ffef236629
                            • MD5 SHA1 SHA512 TLSH

                            621ade90-b229-430a-bad9-9de66c855cd4.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\621ade90-b229-430a-bad9-9de66c855cd4.tmp
                            • Size 3KB
                            • SHA256 5a4cc59a33ed4312a56398df7ff74602b5842f3fb52d95f21312befd65fd9a6c
                            • MD5 SHA1 SHA512 TLSH

                            crl-set

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\CertificateRevocation\6498.2026.10.20\crl-set
                            • Size 13KB
                            • SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            manifest.json

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
                            • Size 118B
                            • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                            • MD5 SHA1 SHA512 TLSH

                            settings.dat

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 9c683af78c9dc6c892adfd6e769413c420a26c99869ec8bef420e6607929ffa9
                            • MD5 SHA1 SHA512

                            settings.dat

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 91204f6fbb735f39e1f757e8975326f34c17daf3edf3a999f29388130c356417
                            • MD5 SHA1 SHA512 TLSH

                            throttle_store.dat

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Crashpad\throttle_store.dat
                            • Size 20B
                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                            • MD5 SHA1 SHA512

                            8c12ee5e-1d5e-495f-ab59-f866d994713a.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\8c12ee5e-1d5e-495f-ab59-f866d994713a.tmp
                            • Size 6KB
                            • SHA256 1c09bd05fee7ccb8ed22b221cd8617209ed3d8d7c7407dfe318c4a00305115ba
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            temp-index

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Code Cache\js\index-dir\temp-index
                            • Size 216B
                            • SHA256 4a04a15fc1b900dfb9949274cecb1df75bd8cf529d05684a635a9ff13462a875
                            • MD5 SHA1 SHA512 TLSH

                            the-real-index

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                            • Size 48B
                            • SHA256 96f56ba6a04770c39089b3b4dbb88c87bdf90b625e103573b8d0d9192f848381
                            • MD5 SHA1 SHA512

                            index

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\DawnGraphiteCache\index
                            • Size 256KB
                            • SHA256 d76d87ff8381aa6f331c60c4113a316657d81b9f1c3a2e47d4fb193788fa8bff
                            • MD5 SHA1 SHA512 SSDEEP

                            data_0

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\GPUCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP

                            data_1

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\GPUCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP

                            data_2

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\GPUCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP

                            data_3

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\GPUCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP

                            79f61b87-692f-4d0a-83b8-13d0d0763d90.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Network\79f61b87-692f-4d0a-83b8-13d0d0763d90.tmp
                            • Size 111B
                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                            • MD5 SHA1 SHA512 TLSH

                            Network Persistent State

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Network\Network Persistent State
                            • Size 59B
                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                            • MD5 SHA1 SHA512 TLSH

                            SCT Auditing Pending Reports

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512

                            Preferences

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Preferences
                            • Size 6KB
                            • SHA256 7131a894db9d7bfca39e734939421765b7b0c5729dba112a64c3288ad7ba36f2
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            MANIFEST-000001

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512

                            CURRENT

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Default\Sync Data\LevelDB\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512

                            Local State

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Local State
                            • Size 1KB
                            • SHA256 1951a92b5b325667d7b694f05f96278f79e29d37a03ca3c8166b993e0953df19
                            • MD5 SHA1 SHA512 TLSH

                            manifest.json

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\Speech Recognition\1.15.0.1\manifest.json
                            • Size 76B
                            • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                            • MD5 SHA1 SHA512 TLSH

                            acd76a3a-20c5-4702-8765-9079e99a0ae1.tmp

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\acd76a3a-20c5-4702-8765-9079e99a0ae1.tmp
                            • Size 1KB
                            • SHA256 465929fc4dcddd9fc3651dba8f6264359b7ea5dd8945987d0cf9f4fbc55ab332
                            • MD5 SHA1 SHA512 TLSH

                            hyph-as.hyb

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
                            • Size 703B
                            • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                            • MD5 SHA1 SHA512 TLSH

                            hyph-hi.hyb

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
                            • Size 687B
                            • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                            • MD5 SHA1 SHA512 TLSH

                            hyph-nb.hyb

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
                            • Size 141KB
                            • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            manifest.json

                            • Path C:\Users\Admin\AppData\Local\com.ourhome.bilibiliradio\EBWebView\hyphen-data\120.0.6050.0\manifest.json
                            • Size 82B
                            • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                            • MD5 SHA1 SHA512 TLSH

                            bili_radio.sqlite3

                            • Path C:\Users\Admin\AppData\Roaming\com.ourhome.bilibiliradio\data\bili_radio.sqlite3
                            • Size 240KB
                            • SHA256 5ba219c0c4302a117bd89544fe19318b42826d56612a12260abcb15fb966ce3e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            memory/1264-26-0x00007FFCC1970000-0x00007FFCC1971000-memory.dmp

                            memory/3052-837-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-846-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-842-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-835-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-841-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-843-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-847-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-836-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-845-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/3052-844-0x0000023BD4850000-0x0000023BD4851000-memory.dmp

                            memory/4572-480-0x0000017F00000000-0x0000017F01000000-memory.dmp

                            memory/5124-74-0x00007FFCC2360000-0x00007FFCC2361000-memory.dmp

                            memory/5124-83-0x00007FFCC2060000-0x00007FFCC2061000-memory.dmp

                            memory/5812-151-0x00007FFCC1970000-0x00007FFCC1971000-memory.dmp