videoai[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

videoai.dll
Size

617KB
MD5

5a1218d2ef4a06f2f4ce101129521c29
SHA1

4cdf5ed47e19b72c4d7aafcc07e7b1df7dd3118c
SHA256

defe29be3895bdfcd5a4141ab4ee42a80abcc015de8084e3dc71d2b5edf4b77e
SHA512

874ec7e9ea88dc0a6f3d6f6f21946d7acfe39633ee77565edd0eeed66c7348c1d11bd17353f7cb840384b8a0de6924e5fe8a254c2bff713535c157269a59f666
SSDEEP

12288:AQeXXx00+gp7rsW+tmPV/0n/BaHUgY4EECvzdvPJw8C:AQeXXi0D7oW+tiVs/BaHU3TrbdvC8C

Score

1^/10

Malware Config

Signatures

Files

videoai.dll
.dll windows x64

cd817f8dac8101bcc3156fa94af0b248

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:8c:d1:5e:23:94:33:14:5c:0b:9e:10:31:38:54:dc
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

31/01/2022, 00:00

Not After

29/01/2025, 23:59

Subject

CN=Topaz Labs LLC,O=Topaz Labs LLC,L=Dallas,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:df:24:ed:8e:b0:99:f4:aa:a3:77:a9:5b:ee:31:6a:83:e0:e2:bd:ea:93:18:ee:53:b9:5f:4f:d3:d1:92:95
Signer

Actual PE Digest

01:df:24:ed:8e:b0:99:f4:aa:a3:77:a9:5b:ee:31:6a:83:e0:e2:bd:ea:93:18:ee:53:b9:5f:4f:d3:d1:92:95

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

opencv_world455

?write@cv@@YAXAEAVFileStorage@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMat@1@@Z
?read@cv@@YAXAEBVFileNode@1@AEAVMat@1@AEBV31@@Z
??6cv@@YAAEAVFileStorage@0@AEAV10@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?copyMakeBorder@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@HHHHHAEBV?$Scalar_@N@1@@Z
?add@cv@@YAXAEBV_InputArray@1@0AEBV_OutputArray@1@0H@Z
?subtract@cv@@YAXAEBV_InputArray@1@0AEBV_OutputArray@1@0H@Z
?mean@cv@@YA?AV?$Scalar_@N@1@AEBV_InputArray@1@0@Z
?merge@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@@Z
?split@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@@Z
?rotate@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@H@Z
??AFileStorage@cv@@QEBA?AVFileNode@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?randn@cv@@YAXAEBV_InputOutputArray@1@AEBV_InputArray@1@1@Z
??1ParallelLoopBody@cv@@UEAA@XZ
?parallel_for_@cv@@YAXAEBVRange@1@AEBVParallelLoopBody@1@N@Z
?imencode@cv@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV_InputArray@1@AEAV?$vector@EV?$allocator@E@std@@@3@AEBV?$vector@HV?$allocator@H@std@@@3@@Z
?getStructuringElement@cv@@YA?AVMat@1@HV?$Size_@H@1@V?$Point_@H@1@@Z
?GaussianBlur@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@V?$Size_@H@1@NNH@Z
?dilate@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@0V?$Point_@H@1@HHAEBV?$Scalar_@N@1@@Z
?warpPerspective@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@0V?$Size_@H@1@HHAEBV?$Scalar_@N@1@@Z
?cvtColor@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@HH@Z
??0Mat@cv@@QEAA@HHHPEAX_K@Z
??0Mat@cv@@QEAA@AEBV01@@Z
??1FileStorage@cv@@UEAA@XZ
??0FileStorage@cv@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0@Z
??0Mat@cv@@QEAA@AEBV01@AEBVRange@1@1@Z
??0Mat@cv@@QEAA@AEBV01@AEBV?$Rect_@H@1@@Z
??4Mat@cv@@QEAAAEAV01@AEBV01@@Z
?clone@Mat@cv@@QEBA?AV12@XZ
?copyTo@Mat@cv@@QEBAXAEBV_OutputArray@2@@Z
?copyTo@Mat@cv@@QEBAXAEBV_OutputArray@2@AEBV_InputArray@2@@Z
?inv@Mat@cv@@QEBA?AVMatExpr@2@H@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@HHH@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?ones@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?eye@Mat@cv@@SA?AVMatExpr@2@HHH@Z
?push_back@Mat@cv@@QEAAXAEBV12@@Z
??Hcv@@YA?AVMatExpr@0@AEBV10@AEBV?$Scalar_@N@0@@Z
??Gcv@@YA?AVMatExpr@0@AEBVMat@0@0@Z
??Dcv@@YA?AVMatExpr@0@AEBVMat@0@0@Z
??Dcv@@YA?AVMatExpr@0@AEBV10@AEBVMat@0@@Z
??Dcv@@YA?AVMatExpr@0@AEBVMat@0@AEBV10@@Z
??Dcv@@YA?AVMatExpr@0@AEBV10@N@Z
??Dcv@@YA?AVMatExpr@0@AEBV10@0@Z
?perspectiveTransform@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@0@Z
?abs@cv@@YA?AVMatExpr@1@AEBV21@@Z
?releaseAndGetString@FileStorage@cv@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0Mat@cv@@QEAA@HHHAEBV?$Scalar_@N@1@@Z
?remap@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@00HHAEBV?$Scalar_@N@1@@Z
??0Mat@cv@@QEAA@HHH@Z
?noArray@cv@@YAAEBV_InputOutputArray@1@XZ
??0_InputArray@cv@@QEAA@AEBVMatExpr@1@@Z
?error@cv@@YAXHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD1H@Z
?resize@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@V?$Size_@H@1@NNH@Z
?imdecode@cv@@YA?AVMat@1@AEBV_InputArray@1@H@Z
?addWeighted@cv@@YAXAEBV_InputArray@1@N0NNAEBV_OutputArray@1@H@Z
??4Mat@cv@@QEAAAEAV01@$$QEAV01@@Z
??0Mat@cv@@QEAA@$$QEAV01@@Z
?empty@Mat@cv@@QEBA_NXZ
?convertTo@Mat@cv@@QEBAXAEBV_OutputArray@2@HNN@Z
??1Mat@cv@@QEAA@XZ
??0Mat@cv@@QEAA@XZ

aiengine

??0TBlockProc@@QEAA@V?$Size_@H@cv@@H0HM@Z
?setInputs@TBlockProc@@QEAA_NAEBV?$vector@VMat@cv@@V?$allocator@VMat@cv@@@std@@@std@@@Z
?MessagesEnabled@SystemInfo@aiutils@@SA_NXZ
?SaveEncryptedFile@ModelReaderUtil@aiutils@@SA_NAEAV?$map@VQString@@V?$vector@EV?$allocator@E@std@@@std@@U?$less@VQString@@@3@V?$allocator@U?$pair@$$CBVQString@@V?$vector@EV?$allocator@E@std@@@std@@@std@@@3@@std@@VQString@@1@Z
?ReadCompressedFiles@ModelReaderUtil@aiutils@@SAHVQString@@AEAV?$map@VQString@@V?$vector@EV?$allocator@E@std@@@std@@U?$less@VQString@@@3@V?$allocator@U?$pair@$$CBVQString@@V?$vector@EV?$allocator@E@std@@@std@@@std@@@3@@std@@0_N@Z
?getMachineId@SystemInfo@aiutils@@QEAA?AVQString@@XZ
?GetInstance@SystemInfo@aiutils@@SAAEAV12@_N@Z
?nextBlock@TBlockProc@@QEAA_NXZ
?getBlock@TBlockProc@@QEAA?BV?$vector@VMat@cv@@V?$allocator@VMat@cv@@@std@@@std@@XZ
?resetOutput@TBlockProc@@QEAAXH@Z
?mergeOutputBlock@TBlockProc@@QEAAXAEBVMat@cv@@@Z
?output@TBlockProc@@QEAA?AVMat@cv@@XZ
??0FileFetcher@aiutils@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?filePath@FileFetcher@aiutils@@QEAA?AVQString@@V3@@Z
?setLocalDirPath@FileFetcher@aiutils@@QEAA_NVQString@@@Z
?getLocalDirPath@FileFetcher@aiutils@@QEAA?AVQString@@XZ
??0ModelManager@aiengine@@IEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?SetInstance@ModelManager@aiengine@@SAAEAV12@PEAV12@@Z
?IsInitialized@ModelManager@aiengine@@SA_NXZ
?setModelDirPath@ModelManager@aiengine@@QEAA_NVQString@@0@Z
??1ModelManager@aiengine@@UEAA@XZ
?getGPUList@SystemInfo@aiutils@@QEAAAEBV?$vector@VDeviceInfo@aiutils@@V?$allocator@VDeviceInfo@aiutils@@@std@@@std@@_N@Z
?downloadModel@ModelManager@aiengine@@UEAA_NAEBV?$QMap@VQString@@VQVariant@@@@VQString@@@Z
??1TBlockProc@@QEAA@XZ
?GetInstance@ModelManager@aiengine@@SAAEAV12@XZ
??1FileFetcher@aiutils@@UEAA@XZ
?computeFilename@ModelManager@aiengine@@QEAA?AVQString@@V3@00HV?$Size_@H@cv@@I@Z
?MakeBackend@ModelBackendFactory@aiengine@@SAPEAVModelBackend@2@W4MODEL_BACKEND_TYPE@2@@Z
?TypeFor@ModelBackendFactory@aiengine@@SA?AW4MODEL_BACKEND_TYPE@2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?NameFor@ModelBackendFactory@aiengine@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4MODEL_BACKEND_TYPE@2@@Z
?MBNameFor@ModelBackendFactory@aiengine@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4MODEL_BACKEND_TYPE@2@@Z
?AllBackends@ModelBackendFactory@aiengine@@SAHXZ
?isApple@SystemInfo@aiutils@@QEBA_NXZ
?allIntel@SystemInfo@aiutils@@QEAA_NXZ
?getDeviceMemory@SystemInfo@aiutils@@QEAAMH@Z
?GetInstance@DeviceSelector@aiengine@@SAAEAV12@_N@Z
?preferredDevice@DeviceSelector@aiengine@@QEAAHXZ
?threadsForDevice@DeviceSelector@aiengine@@QEAAIH@Z
?blocksForDevice@DeviceSelector@aiengine@@QEAAMH@Z
?preferredBackend@DeviceSelector@aiengine@@QEAA?AW4MODEL_BACKEND_TYPE@2@HHM@Z

libssl-1_1-x64

OPENSSL_init_ssl
SSL_get_verify_result
SSL_CTX_load_verify_locations
SSL_shutdown
TLS_client_method
SSL_get_error
SSL_ctrl
SSL_write
SSL_read
SSL_connect
SSL_free
SSL_new
SSL_get_peer_certificate
SSL_CTX_use_certificate_file
SSL_CTX_use_PrivateKey_file
SSL_set_verify
SSL_set_bio
SSL_pending
SSL_CTX_set_cert_store
SSL_CTX_get_cert_store
SSL_CTX_free
SSL_CTX_new

libcrypto-1_1-x64

MD5_Final
ASN1_STRING_length
ASN1_STRING_get0_data
SHA256_Init
MD5_Init
SHA256_Final
SHA512_Init
MD5_Update
SHA512_Final
BIO_new_socket
BIO_ctrl
OPENSSL_sk_value
OPENSSL_sk_num
X509_STORE_free
X509_STORE_add_cert
X509_free
SHA256_Update
d2i_X509
X509_get_subject_name
X509_NAME_get_text_by_NID
X509_get_ext_d2i
GENERAL_NAMES_free
SHA512_Update

qt6core

??8QString@@QEBA_NPEBD@Z
?fromStdString@QString@@SA?AV1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?isNull@QString@@QEBA_NXZ
??1QDebug@@QEAA@XZ
??6QDebug@@QEAAAEAV0@_N@Z
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??0QVariant@@QEAA@XZ
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@AEBV0@@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@$$QEAV0@@Z
??4QVariant@@QEAAAEAV0@$$QEAV0@@Z
?isNull@QVariant@@QEBA_NXZ
?toString@QVariant@@QEBA?AVQString@@XZ
?toDateTime@QVariant@@QEBA?AVQDateTime@@XZ
?toMap@QVariant@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ
??0QDate@@QEAA@HHH@Z
??0QTime@@QEAA@HHHH@Z
??0QDateTime@@QEAA@XZ
??0QDateTime@@QEAA@VQDate@@VQTime@@W4TimeSpec@Qt@@H@Z
??0QDateTime@@QEAA@AEBV0@@Z
??1QDateTime@@QEAA@XZ
?fromUtf8@QString@@SA?AV1@VQByteArrayView@@@Z
??4QDateTime@@QEAAAEAV0@AEBV0@@Z
?toString@QDateTime@@QEBA?AVQString@@W4DateFormat@Qt@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?precedes@QDateTime@@AEBA_NAEBV1@@Z
??6@YA?AVQDebug@@V0@AEBVQDateTime@@@Z
??1QJsonDocument@@QEAA@XZ
?toVariant@QJsonDocument@@QEBA?AVQVariant@@XZ
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??6QDebug@@QEAAAEAV0@PEBX@Z
?qBadAlloc@@YAXXZ
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?deallocate@QArrayData@@SAXPEAU1@_J1@Z
?begin@QByteArray@@QEAAPEADXZ
?end@QByteArray@@QEAAPEADXZ
?size@QByteArray@@QEBA_JXZ
?toLower@QString@@QEGBA?AV1@XZ
??4QString@@QEAAAEAV0@PEBD@Z
??0QTextStream@@QEAA@PEAVQIODevice@@@Z
??1QTextStream@@UEAA@XZ
?readAll@QTextStream@@QEAA?AVQString@@XZ
??6QTextStream@@QEAAAEAV0@AEBVQString@@@Z
??0QDebug@@QEAA@$$QEAV0@@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@I@Z
??6QDebug@@QEAAAEAV0@_J@Z
??6QDebug@@QEAAAEAV0@_K@Z
??6QDebug@@QEAAAEAV0@M@Z
??6QDebug@@QEAAAEAV0@N@Z
??0QDebugStateSaver@@QEAA@AEAVQDebug@@@Z
??1QDebugStateSaver@@QEAA@XZ
??0QVariant@@QEAA@H@Z
??0QVariant@@QEAA@_N@Z
??0QVariant@@QEAA@N@Z
??0QVariant@@QEAA@M@Z
?toUInt@QVariant@@QEBAIPEA_N@Z
?toBool@QVariant@@QEBA_NXZ
?toFloat@QVariant@@QEBAMPEA_N@Z
?toStringList@QVariant@@QEBA?AV?$QList@VQString@@@@XZ
?toList@QVariant@@QEBA?AV?$QList@VQVariant@@@@XZ
?qdebugHelper@QVariant@@AEBA?AVQDebug@@V2@@Z
?isOpen@QIODevice@@QEBA_NXZ
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?write@QIODevice@@QEAA_JPEBD_J@Z
?close@QFileDevice@@UEAAXXZ
??0QFile@@QEAA@AEBVQString@@@Z
??1QFile@@UEAA@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
??0QTemporaryFile@@QEAA@XZ
??1QTemporaryFile@@UEAA@XZ
?setAutoRemove@QTemporaryFile@@QEAAX_N@Z
?open@QTemporaryFile@@QEAA_NXZ
?qgetenv@@YA?AVQByteArray@@PEBD@Z
?qInstallMessageHandler@@YAP6AXW4QtMsgType@@AEBVQMessageLogContext@@AEBVQString@@@ZP6AX012@Z@Z
?data@QByteArray@@QEBAPEBDXZ
?isNull@QByteArray@@QEBA_NXZ
?constData@QString@@QEBAPEBVQChar@@XZ
?mid@QString@@QEBA?AV1@_J0@Z
?fromLocal8Bit@QString@@SA?AV1@VQByteArrayView@@@Z
?number@QString@@SA?AV1@HH@Z
?number@QString@@SA?AV1@IH@Z
?QStringList_join@QtPrivate@@YA?AVQString@@PEBV?$QList@VQString@@@@PEBVQChar@@_J@Z
?QStringList_contains@QtPrivate@@YA_NPEBV?$QList@VQString@@@@VQStringView@@W4CaseSensitivity@Qt@@@Z
??6QDebug@@QEAAAEAV0@J@Z
?toInt@QVariant@@QEBAHPEA_N@Z
??0QCalendar@@QEAA@XZ
?toString@QDateTime@@QEBA?AVQString@@AEBV2@VQCalendar@@@Z
??0QFileInfo@@QEAA@AEBVQString@@@Z
??1QFileInfo@@QEAA@XZ
?exists@QFileInfo@@QEBA_NXZ
?absolutePath@QFileInfo@@QEBA?AVQString@@XZ
?isReadable@QFileInfo@@QEBA_NXZ
?isWritable@QFileInfo@@QEBA_NXZ
?warning@QMessageLogger@@QEBA?AVQDebug@@XZ
?indexOf@QString@@QEBA_JAEBV1@_JW4CaseSensitivity@Qt@@@Z
?remove@QFile@@QEAA_NXZ
??0QString@@QEAA@PEBD@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
??0QMessageLogger@@QEAA@PEBDH0@Z
?toUpper@QString@@QEHAA?AV1@XZ
?data@QString@@QEBAPEBVQChar@@XZ
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
?compareStrings@QtPrivate@@YAHVQStringView@@0W4CaseSensitivity@Qt@@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@PEBD_J@Z
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?critical@QMessageLogger@@QEBA?AVQDebug@@XZ
?info@QMessageLogger@@QEBA?AVQDebug@@XZ
??4QDateTime@@QEAAAEAV0@$$QEAV0@@Z

msvcp140

?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
_Thrd_join
_Mtx_trylock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
??1_Lockit@std@@QEAA@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
?_Xbad_function_call@std@@YAXXZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
_Thrd_sleep
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QEAA@H@Z
_Cnd_unregister_at_thread_exit

ws2_32

getnameinfo
inet_pton
closesocket
connect
ioctlsocket
getpeername
getsockopt
ntohs
recv
select
send
setsockopt
shutdown
freeaddrinfo
socket
WSAStartup
WSACleanup
WSAGetLastError
WSASocketW
getaddrinfo
__WSAFDIsSet

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertOpenSystemStoreW
CertCloseStore

kernel32

InitOnceBeginInitialize
InitOnceComplete
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

vcruntime140

__std_terminate
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
__RTDynamicCast
memset
memmove
memcpy
memcmp
memchr
__std_exception_copy
_CxxThrowException
strchr
__std_exception_destroy
_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit
abort
_errno
terminate
_beginthreadex
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
free
malloc

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
strtoull

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_stricmp
isdigit
tolower

api-ms-win-crt-math-l1-1-0

sqrtf
sqrt
sinf
asinf
atanf
ceil
ceilf
cosf
floor
round
floorf
pow

Exports

Exports

??0AuthManager@videoai@@IEAA@VQString@@@Z
??0AuthManager@videoai@@QEAA@AEBV01@@Z
??1AuthManager@videoai@@UEAA@XZ
??4AuthManager@videoai@@QEAAAEAV01@AEBV01@@Z
??_7AuthManager@videoai@@6B@
?GetInstance@AuthManager@videoai@@SAAEAV12@XZ
?Init@AuthManager@videoai@@SAXVQString@@@Z
?__pAuthManager@AuthManager@videoai@@1V?$unique_ptr@VAuthManager@videoai@@U?$default_delete@VAuthManager@videoai@@@std@@@std@@A
?generateAuthRequestFile@AuthManager@videoai@@QEAA_NAEBVQString@@@Z
?isLoggedIn@AuthManager@videoai@@QEAA_NXZ
?isOwned@AuthManager@videoai@@QEAA_NXZ
?licenseDate@AuthManager@videoai@@QEAA?AVQString@@XZ
?loadAuth@AuthManager@videoai@@IEAA?AV?$QMap@VQString@@VQVariant@@@@VQString@@@Z
?parseAuth@AuthManager@videoai@@IEAAXV?$QMap@VQString@@VQVariant@@@@@Z
?refreshAuthToken@AuthManager@videoai@@IEAA_NVQString@@@Z
?requireWatermark@AuthManager@videoai@@QEAA_NAEBV?$QMap@VQString@@VQVariant@@@@@Z
?setup@AuthManager@videoai@@IEAAXXZ
?userEmail@AuthManager@videoai@@QEAA?AVQString@@XZ
create_processor
destroy_processor
get_output_count
get_output_frame
get_remaining_frames
get_stabilize_output_size
get_vp_name
list_devices
list_models
list_scales
process_frame
set_logging
stream_ended
wait_for

Sections

.text
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd817f8dac8101bcc3156fa94af0b248

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

0b:8c:d1:5e:23:94:33:14:5c:0b:9e:10:31:38:54:dcCertificate

Extended Key Usages

Key Usages

01:df:24:ed:8e:b0:99:f4:aa:a3:77:a9:5b:ee:31:6a:83:e0:e2:bd:ea:93:18:ee:53:b9:5f:4f:d3:d1:92:95Signer

Headers

DLL Characteristics

File Characteristics

Imports

opencv_world455

aiengine

libssl-1_1-x64

libcrypto-1_1-x64

qt6core

msvcp140

ws2_32

crypt32

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 447KB - Virtual size: 447KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 13KB - Virtual size: 14KB

.pdata Size: 20KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

0b:8c:d1:5e:23:94:33:14:5c:0b:9e:10:31:38:54:dc
Certificate

01:df:24:ed:8e:b0:99:f4:aa:a3:77:a9:5b:ee:31:6a:83:e0:e2:bd:ea:93:18:ee:53:b9:5f:4f:d3:d1:92:95
Signer

.text
Size: 447KB - Virtual size: 447KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 13KB - Virtual size: 14KB

.pdata
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB