Analysis

  • max time kernel
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 00:31

General

  • Target
    Topaz Video AI Pro v7.1.6.exe
  • Size 229.3MB
  • Sample260712-avcadady21
  • SHA256 77f919ef609872175d26758dbadcbcc6e43bc291be57ff0e32a3c9d848ad1175
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 8 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 28 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 24 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 30 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Topaz Video AI Pro v7.1.6.exe
    "C:\Users\Admin\AppData\Local\Temp\Topaz Video AI Pro v7.1.6.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5064
    • C:\Users\Admin\AppData\Local\Temp\is-OUGB2.tmp\Topaz Video AI Pro v7.1.6.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-OUGB2.tmp\Topaz Video AI Pro v7.1.6.tmp" /SL5="$400AC,239313794,968192,C:\Users\Admin\AppData\Local\Temp\Topaz Video AI Pro v7.1.6.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3492
      • C:\Windows\system32\msiexec.exe
        "msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\TopazVideoAI-7.1.6.msi"
        3⤵
        • Enumerates connected drives
        • Drops file in System32 directory
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:5412
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6048
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 15130B02F0694C4280FA9ACB43FA7F74 C
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:5384
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding B5BCE02B3FF8C0D59F8F6C3A2E462407 C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:2144
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding C82708A09EEA843C321D791E06143DE4
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:5852
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 8275D3C73E3ED705CEBA8E62E01CBDFC
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:696
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 0E4D9168F043B79C5CF1A85BC13A833E E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • Suspicious use of SetWindowsHookEx
      PID:4940

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e5a8791.rbs

        • Path C:\Config.Msi\e5a8791.rbs
        • Size 236KB
        • SHA256 83f86bfe27367ca340c06fe052a934e520f17885b112f186fd3b74aab8b87692
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-487GM.tmp

        • Path C:\DLLs\is-487GM.tmp
        • Size 2.9MB
        • SHA256 f67d455fbca9d472a0b8c8ecd84edd4766fd275cbd6b9bbb6daad12b4aef553d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VerticalHeaderView.qml

        • Path C:\Program Files\Topaz Labs LLC\Topaz Video AI\qml\QtQuick\Controls\Basic\VerticalHeaderView.qml
        • Size 1KB
        • SHA256 1e8b6ac222f9b63a397b410f3a0c81ed67144a2f73ec00e12ecbc433ea76205e
        • MD5 SHA1 SHA512 TLSH

        HorizontalHeaderView.qml

        • Path C:\Program Files\Topaz Labs LLC\Topaz Video AI\qml\QtQuick\Controls\Imagine\HorizontalHeaderView.qml
        • Size 1KB
        • SHA256 a20e12d2e657e69060ec6b823bd111c4689e45553be5bdea2c492fe6f0200499
        • MD5 SHA1 SHA512 TLSH

        ffmpeg.html

        • Path C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\doc\ffmpeg\ffmpeg.html
        • Size 212KB
        • SHA256 8f0da08f6502213849af3772e996ec5606ee973a69e6baf6bf53969027ee1912
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chf-1.json

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chf-1.json
        • Size 5KB
        • SHA256 a2129439f1a43593506ee5dfceebe9b4e0f3ae1e3ee70f02c5bb3db35f76d2cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ghq-5.json

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ghq-5.json
        • Size 15KB
        • SHA256 4d28bb03a6e9dff37d684fb26c2183963699c12fba863c1e63ddf73fdf0e6017
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0EAMU.tmp

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\is-0EAMU.tmp
        • Size 405B
        • SHA256 eb01e8d1316ff54a049fa0e74b20ac2fd9471b5544629cbe9268ad558658e0bf
        • MD5 SHA1 SHA512 TLSH

        is-8V0H2.tmp

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\is-8V0H2.tmp
        • Size 544B
        • SHA256 f72ad98947863b70c49ad17c929ad0d6289f0c9c6dbab9c37f2e03200d3ec5ce
        • MD5 SHA1 SHA512 TLSH

        prob-2.json

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\prob-2.json
        • Size 19KB
        • SHA256 24376e695c78e337e5cf6e5e7324f8a7cf9271e6c2e6cc69c637b4c408464e7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rxl-1.json

        • Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\rxl-1.json
        • Size 16KB
        • SHA256 fef1bbdfc93bf8681f6a0036564ab86e128fec645520b7f0642ff73dce0d98e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSI169.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\MSI169.tmp
        • Size 1.3MB
        • SHA256 1df8e62f32fea94ef5a2ef7c309af9073fd66c72ce3a5f3a1b3129ee8e07fc16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSI3A1D.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\MSI3A1D.tmp
        • Size 132KB
        • SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Inter-Medium.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Inter-Medium.ttf
        • Size 307KB
        • SHA256 a645f55492d1c8cdace43c72be8cbec08e680b5a86d8b4c2d1c50d6e41e9cc96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Inter-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Inter-Regular.ttf
        • Size 302KB
        • SHA256 3127f0b873387ee37e2040135a06e9e9c05030f509eb63689529becf28b50384
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Inter-SemiBold.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Inter-SemiBold.ttf
        • Size 308KB
        • SHA256 b0b540e69bf6717016e33874670e09acf4bffc2ca3f4c1cf174a4ff696308c65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Topaz Video AI.ofx

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Common Files\OFX\Plugins\Topaz Video AI.ofx.bundle\Contents\Win64\Topaz Video AI.ofx
        • Size 660KB
        • SHA256 0f4fc01d391046bef5e61757926bd7c15e3d78481ed1cb345eb35c134f4d9bba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Topaz Video AI Frame Interpolation.aex

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\MediaCore\Topaz Labs LLC\Topaz Video AI\Topaz Video AI Frame Interpolation.aex
        • Size 453KB
        • SHA256 6ed167c1001897d335e7c6992ac275fac9387c9cac67146f8103d8134ff36fbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Topaz Video AI.aex

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\MediaCore\Topaz Labs LLC\Topaz Video AI\Topaz Video AI.aex
        • Size 472KB
        • SHA256 602e783b3d89bedd39b1f8018c24958934bda99734a64183f1409f4406a6ff9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-014TB.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\MediaCore\Topaz Labs LLC\Topaz Video AI\is-014TB.tmp
        • Size 18.2MB
        • SHA256 fb79680d80f240654dfa69b813cd35a2574038a542dd1e219c837d247b5fc894
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3Dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\D3Dcompiler_47.dll
        • Size 4.0MB
        • SHA256 e994847e01a6f1e4cbdc5a864616ac262f67ee4f14db194984661a8d927ab7f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Core.dll
        • Size 6.1MB
        • SHA256 8a1af6b5ea341ef0d01573a9005e5c68206cfef6853b5584e8a737c26c9d9ee7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Gui.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Gui.dll
        • Size 8.6MB
        • SHA256 cfce665b7c477ebff815fb27a9b55d0b629183c0cecb5282a87bad666d76daa8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6LabsFolderListModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6LabsFolderListModel.dll
        • Size 105KB
        • SHA256 d614f9dc8493a0271c6da6d72d658df0f9cfed4e6c5e0732abf169f82a50e151
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6LabsSettings.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6LabsSettings.dll
        • Size 61KB
        • SHA256 2fbb5d4c7134e1738f464b2a5337174b38b0908492903c8a460dd01c83a9017f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Multimedia.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Multimedia.dll
        • Size 844KB
        • SHA256 d65d749813c1778264115ebd03ecccd87628dd1432a03560f13b009330459306
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6MultimediaQuick.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6MultimediaQuick.dll
        • Size 230KB
        • SHA256 c87fa93fd57a6fb2f7d10e9c45ec09c9cbe1298ddd5f4d7458ff896e99b17b85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Network.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Network.dll
        • Size 1.7MB
        • SHA256 f6702966e341d9a2f1707df5833db984205b3717fb5ce3cd2a37383ac347905d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6OpenGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6OpenGL.dll
        • Size 1.9MB
        • SHA256 5180dc9d9394d8c4de756d6e97e6f12e4f27639578124236589e08ba837f0d3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Qml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Qml.dll
        • Size 4.9MB
        • SHA256 578afdb3822eac599b48f6e101a35d40744afcbdea8f35bf3c69b57004c8ad51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QmlModels.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QmlModels.dll
        • Size 715KB
        • SHA256 846d37da5d81570c08824fccc2a1fa7b10b40dc15bcb2a71b9da553b87680992
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QmlWorkerScript.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QmlWorkerScript.dll
        • Size 74KB
        • SHA256 c52c62b7feb5491d2d914ae10478f3a0bfa3fb58cb75189932f5dd5ffad31b1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Quick.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6Quick.dll
        • Size 5.5MB
        • SHA256 5deee180c5947e3370cbde40ca5151367d8cf48879fdae1d748fb1ee995744f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2.dll
        • Size 93KB
        • SHA256 3e8892f343a7850884d88935cf67c28a97e186271c34d33dda7e5d0c83ab22ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Basic.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Basic.dll
        • Size 1.0MB
        • SHA256 241f93951bd5354b645dc85db5fb4f886e7486f624bf007ba7d233a89e5e4f0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2BasicStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2BasicStyleImpl.dll
        • Size 60KB
        • SHA256 e584ad5196ba39477c82b53c4494e2634f1d680662366e13e9d196974f4b09d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Fusion.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Fusion.dll
        • Size 974KB
        • SHA256 07feda36319e1f903fe021f06e29314b59d4e1f3aa270cca445624723fa57f12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2FusionStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2FusionStyleImpl.dll
        • Size 153KB
        • SHA256 dd905ba7f473f3d6af0a15090852e359eda5de49dd72961dc8b3255ae3670c32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Imagine.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Imagine.dll
        • Size 2.3MB
        • SHA256 5e5b9de7140024f9295710c18f3a4a13b6903256366d40bc51ce442689166474
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2ImagineStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2ImagineStyleImpl.dll
        • Size 48KB
        • SHA256 43c86bd1b40e2d500cdd7f0146dc50156d021e0772d037f7119cf9f210908e10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Impl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Impl.dll
        • Size 282KB
        • SHA256 b1f431714c90b70c990378f4ed8d598f333125803a8f891b5f5d49d62f37045f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Material.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Material.dll
        • Size 1.2MB
        • SHA256 80cf57645318cc4e7320dcf0e5df3b315e8a75b7e8375c459381ffd7aa4d00de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2MaterialStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2MaterialStyleImpl.dll
        • Size 257KB
        • SHA256 a55c7355aec4da8b7dca0657c70b57c57d7924e7145ef5769f4b5da2c45176a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2Universal.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Universal.dll
        • Size 966KB
        • SHA256 78dc570b54ce98eecd5982853a879323136124415dda56858f52731c5ad2050c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2UniversalStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2UniversalStyleImpl.dll
        • Size 105KB
        • SHA256 d3100cd44b112d2ec6411f8007811a80b83a60fb08f2238cafddd369bdff4038
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickControls2WindowsStyleImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2WindowsStyleImpl.dll
        • Size 66KB
        • SHA256 950f45c2ad6334c894461bcc7a6c0e434f021da0151d15fdeea977695f30efbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickDialogs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickDialogs2.dll
        • Size 156KB
        • SHA256 bfb0dc7f2d715f203b19a0a39f16542f00892c7c7d2c9789d878f97b8e646b2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickDialogs2QuickImpl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickDialogs2QuickImpl.dll
        • Size 1.7MB
        • SHA256 2560952163e1de8d982e669dd271bde723e32b2c93de6721e3ac6174fee91cbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickDialogs2Utils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickDialogs2Utils.dll
        • Size 48KB
        • SHA256 e54f5c10133e2b331c5da0095dbee0b3df4c0f29f2341db9d3878ff5a825209e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickEffects.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickEffects.dll
        • Size 209KB
        • SHA256 8d63908a29195989c20b568a4e3fcdde8354cb5efbe5cff01cc75c24c757a787
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickLayouts.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickLayouts.dll
        • Size 217KB
        • SHA256 ba807b732f8b380118a0dcab28aa75c2df3bbbe1952f0b14164430a7d348bf30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickShapes.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickShapes.dll
        • Size 249KB
        • SHA256 96c7d04941ce1e2aa053756c24cf770eb21d5d87488d12e0e52ff1aa23f2120b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6QuickTemplates2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Qt6QuickTemplates2.dll
        • Size 1.7MB
        • SHA256 9ce15041acffb2a9c2967cfc8144f4353f26b70113ee7e0f12ce582fb6cf4a74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tutils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\TUtils\tutils.dll
        • Size 2.4MB
        • SHA256 108250bdac98bcef39f194234da29c9611194fe19be2f61b1fa0a090ad08cb55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TN5PC.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\Topaz Video AI.ofx.bundle\Contents\Win64\is-TN5PC.tmp
        • Size 807KB
        • SHA256 86a03bc1172d337ac191b23e0b725cf0c67bf82fd1a30e68cdb4460452bb250b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crashpad_handler.exe

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\crashpad_handler.exe
        • Size 617KB
        • SHA256 dae64b325c2d39fa6bf3a683ee8bb87bdc9273115064f5c87e74e7456a256a30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevator.exe

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\elevator.exe
        • Size 111KB
        • SHA256 1b9bb64877477f908e0345f3bcc7dabc578da899eb44f415574a8e7b697263a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-0IPRG.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-0IPRG.tmp
        • Size 146KB
        • SHA256 85104618a195c750e24f8417f017cc004078b6faf8bf586740a042fb568ab4e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1148D.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-1148D.tmp
        • Size 1015KB
        • SHA256 c587179fafaac7eb6d58474ef7e2f4e22be80dc810f0b7c6c7659de5c9167935
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-B0DDL.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-B0DDL.tmp
        • Size 14.0MB
        • SHA256 b191d929ab1b3d54146d96820bdb66dd5fe22c4cf27f60fcde97215c4cd9b45e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-G10MH.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-G10MH.tmp
        • Size 20.0MB
        • SHA256 1095c62a7bbff4f1c868a7ef0edfae5eb0691e7bc29601acfac1d4ec41155989
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GJR4D.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-GJR4D.tmp
        • Size 17.7MB
        • SHA256 9c9e6d822561c6c41b90e6994b3e8857cf1d66dbfb1e0c4c799c7c89b4e92da1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LOD7H.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-LOD7H.tmp
        • Size 761KB
        • SHA256 c4685a3b24769e05b2ad3c64b69d38477654e7c5117e4a6cb0bec227aead0bf5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LTMFA.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-LTMFA.tmp
        • Size 198KB
        • SHA256 b6720a984ca5e8b4fc243f0da348c4c6c78a11f51b57b16b8be30bbb6986efb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QAMGS.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-QAMGS.tmp
        • Size 43KB
        • SHA256 db4d92d73dc8cadaa363cd1a2233775a4e400884a71498622b6d83e2b0561649
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-QTR30.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-QTR30.tmp
        • Size 2.2MB
        • SHA256 f84925b84161212e90f3bae710537cf42a87babb3be5efdf339c116cd405d128
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-R6UN6.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-R6UN6.tmp
        • Size 13KB
        • SHA256 4d2acdb52198f7087f29a1c91afc20576be93be6c4f0fecd53755f8740872df1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-RFG5J.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-RFG5J.tmp
        • Size 5.9MB
        • SHA256 b68821884d01ec92bda7dce8c843e22f8de70dfe11f387374a68703f865bf52d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UR26G.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-UR26G.tmp
        • Size 108KB
        • SHA256 695a97d7f133199110b80658b58055feb210d140395744c29913b400105a65b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-VL7TQ.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\is-VL7TQ.tmp
        • Size 30KB
        • SHA256 839b94676b3964219fd9ecf03f2ac4bea386ea5a836fcdf3cc14f3196c41da6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        opengl32sw.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\opengl32sw.dll
        • Size 19.7MB
        • SHA256 b04de4541863bc7d8879040a78889c4849c1b1da2784c4630f734c146c2998ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-OK256.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\qml\QtQuick\Controls\Universal\is-OK256.tmp
        • Size 1KB
        • SHA256 78b5fc58e6d881d16351e92d32b8cadea6b14fbf8c20c1bc7e56d02946467ae8
        • MD5 SHA1 SHA512 TLSH

        is-K7HSL.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\qml\QtQuick\Controls\Windows\is-K7HSL.tmp
        • Size 215B
        • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
        • MD5 SHA1 SHA512 TLSH

        tbb12.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\tbb12.dll
        • Size 188KB
        • SHA256 73f1cd5fcc90ff5ab7dc02bd0c97d9019486b270358fcb6ef43d41ddf553ff47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        videoio.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\PFiles\Topaz Labs LLC\Topaz Video AI\videoio.dll
        • Size 711KB
        • SHA256 e5f065594b67296b78491604d2dffbc3373549399a36b32e6208aa9493ba9a64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-3TRR5.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Topaz Labs LLC\Topaz Video AI\models\is-3TRR5.tmp
        • Size 6KB
        • SHA256 d2deb69f8cb1339b3b875096040a419013bdd9f5f7af08e882de7097de30e039
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-E5UOT.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Topaz Labs LLC\Topaz Video AI\models\is-E5UOT.tmp
        • Size 13KB
        • SHA256 d5dcddf2a5dd370bd54afac54f78ad8c87e13687f04b2d5c45d93aa2cb0de346
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-RDHR9.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Topaz Labs LLC\Topaz Video AI\models\is-RDHR9.tmp
        • Size 15KB
        • SHA256 1a1f6691b3e862ea3fe7f111782ffb1786d62e84e7af9808a4e8eda9b05bcadc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        oss-licenses.txt

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\Topaz Labs LLC\Topaz Video AI\oss-licenses.txt
        • Size 30KB
        • SHA256 951ad678c0a5a3d4c11e2d54c2b50784706ddc71278c033f63ab3ec603904d01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        TopazVideoAI-7.1.6.msi

        • Path C:\Users\Admin\AppData\Local\Temp\is-ABVR3.tmp\TopazVideoAI-7.1.6.msi
        • Size 2.8MB
        • SHA256 aebad3e139fe8b0b81d1b2a4a09e5a09cc5aeb9413f66b67e87c93fe7065e59e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Topaz Video AI Pro v7.1.6.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-OUGB2.tmp\Topaz Video AI Pro v7.1.6.tmp
        • Size 3.6MB
        • SHA256 c9b78ee4d7c260f9cb9e972cbd596fab5b807304b172159669d6d0321a81b3c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3492-93-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-6-0x0000000000F30000-0x0000000000F31000-memory.dmp

        memory/3492-2763-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-1883-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-94-0x0000000000F30000-0x0000000000F31000-memory.dmp

        memory/3492-2036-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-1803-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-1818-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-1810-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-2762-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-1816-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/3492-134-0x0000000000400000-0x00000000007B0000-memory.dmp

        memory/5064-0-0x0000000000400000-0x00000000004FB000-memory.dmp

        memory/5064-92-0x0000000000400000-0x00000000004FB000-memory.dmp

        memory/5064-2764-0x0000000000400000-0x00000000004FB000-memory.dmp