Analysis
- max time kernel
899s - max time network
558s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 02:06
Static task
static1
Behavioral task
behavioral1
Sample
TopazVideoAI-3.1.10.msi
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
TopazVideoAI-3.1.10.msi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
20 signatures
900 seconds
General
- Target TopazVideoAI-3.1.10.msi
- Size 652.9MB
- Sample260720-cjdeeaey4t
- SHA256 eb0db8b8cb8703c79a7df53168db1adc917e342d4d32ec8532339282e829ef00
- MD5 a6a8316cf0e4c1c0c06bd8e1add24f25
- SHA1 28c161f81be840148128feab365c0aa2415d7fd5
- SHA512 bc47233857df4a5665969c901b5170320432650dd0506a10d052443974fac13e84e3ce879361cd4052af7c9a71ecd4cd0da2029b0b68c2d463aa72070f68aa19
- SSDEEP 12582912:3uOBslNG7R5WzInfYRFrPDZUyZHavt1aPizy5AzvrOQk0TQJKFvSwBPqiaTEg53:dBsjaWOur1UyMvtMqzy4vi5s0ZwBP63
- TLSH T153693383774F13BAE7ABE234417542088930BE25676492CB1BE4B7DA1FB32D1617C25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe - Loads dropped DLL 8 IoCs
pid Process 872 MsiExec.exe 1692 MsiExec.exe 3816 MsiExec.exe 3816 MsiExec.exe 3816 MsiExec.exe 1520 MsiExec.exe 1520 MsiExec.exe 1520 MsiExec.exe - Enumerates connected drives 3 TTPs 48 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\F: explorer.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\D: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\E: explorer.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\D: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\X: msiexec.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\DialogButtonBox.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\impl\qtquickcontrols2basicstyleimplplugin.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\openvino_onnx_frontend.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\RangeSlider.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\translations\qt_cs.qm msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\onnxruntime.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\ToolButton.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\ToolTip.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\ItemDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\tooling\qmldir msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\Qt\labs\platform\plugins.qmltypes msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\MenuItem.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\VerticalHeaderView.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\TextArea.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Fusion\RadioDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Fusion\PageIndicator.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\TabBar.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\avformat-60.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Windows\SelectionRectangle.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\HorizontalHeaderView.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\RoundButton.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Shapes\qmlshapesplugin.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\doc\ffmpeg\libavutil.html msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\MenuItem.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\doc\ffmpeg\fate.html msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\qmldir msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\tls\qschannelbackend.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\ToolSeparator.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\translations\qt_ko.qm msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\Dial.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\ToolSeparator.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\SwitchDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\Button.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\doc\ffmpeg\libswresample.html msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Fusion\Dial.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\DelayButton.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Particles\plugins.qmltypes msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\SpinBox.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\RadioButton.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\DelayButton.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\plugins.qmltypes msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\BusyIndicator.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\Tumbler.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\opengl32sw.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\Qt6QuickDialogs2Utils.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\Qt6QuickControls2Impl.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\TextArea.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\SwipeDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Windows\ComboBox.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Fusion\Dialog.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\Qt6Core.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\LocalStorage\plugins.qmltypes msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\ItemDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\qmldir msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\Switch.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\ffmpeg\examples\qsv_transcode.c msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\MenuSeparator.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Universal\TextArea.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Windows\qmldir msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\GroupBox.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Material\impl\qtquickcontrols2materialstyleimplplugin.dll msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\share\man\man3\libavcodec.3 msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Imagine\CheckDelegate.qml msiexec.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\Basic\CheckBox.qml msiexec.exe - Drops file in Windows directory 41 IoCs
description ioc Process File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vcruntime140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\MSI199F.tmp msiexec.exe File created C:\Windows\Installer\SourceHash{AB53D50C-7607-4DA2-B19F-F5FF7AD8BEC7} msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\{AB53D50C-7607-4DA2-B19F-F5FF7AD8BEC7}\mainapp.exe msiexec.exe File opened for modification C:\Windows\Installer\MSI29ED.tmp msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10 msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_2.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_codecvt_ids.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vccorlib140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\MSI6AE0.tmp msiexec.exe File opened for modification C:\Windows\Installer\MSI6BBC.tmp msiexec.exe File created C:\Windows\Installer\e5afd7c.msi msiexec.exe File opened for modification C:\Windows\Installer\MSI3028.tmp msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File opened for modification C:\Windows\Installer\MSI2807.tmp msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_atomic_wait.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vccorlib140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vcruntime140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\e5afd7c.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File created C:\Windows\SystemTemp\~DF4AE0F24416404B26.TMP msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_2.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_atomic_wait.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\{AB53D50C-7607-4DA2-B19F-F5FF7AD8BEC7}\mainapp.exe msiexec.exe File created C:\Windows\Installer\e5afd7e.msi msiexec.exe File created C:\Windows\SystemTemp\~DFDE5FBF8F49EB78AE.TMP msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\concrt140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\concrt140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vcruntime140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\vcruntime140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File created C:\Windows\Installer\DerandomizedSymbolicLinksForSourceLists\TopazVideoAI-3.1.10.msi MsiExec.exe File created C:\Windows\SystemTemp\~DF31CE6508B41CD695.TMP msiexec.exe File created C:\Windows\SystemTemp\~DF40D9FA137074B485.TMP msiexec.exe File opened for modification C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C msiexec.exe File created C:\Windows\Installer\$PatchCache$\Managed\C05D35BA70672AD41BF95FFFA78DEB7C\3.1.10\msvcp140_codecvt_ids.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3 msiexec.exe File opened for modification C:\Windows\Installer\MSI715A.tmp msiexec.exe - Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 4264 msiexec.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe - Checks SCSI registry key(s) 3 TTPs 62 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName explorer.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000\Software\Microsoft\Internet Explorer\Main explorer.exe - Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E msiexec.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\PackageName = "TopazVideoAI-3.1.10.msi" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix StartMenuExperienceHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Net\2 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\client.cbs SearchHost.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\Assignment = "1" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\13CD821E8711F6B4086A161E2B55ACDE msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Set value (data) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" SearchHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\ProductName = "Topaz Video AI" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Media msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\DeploymentFlags = "3" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList msiexec.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "23" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\MuiCache SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DomStorageState SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoftwindows.client.cbs SearchHost.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\Version = "50397194" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Media\1 = ";Installer Package" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify explorer.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56" SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" StartMenuExperienceHost.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\AdvertiseFlags = "388" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{3FB55E1A-304F-45E8-85A3-FBD51AF8D4B8} explorer.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total SearchHost.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Net msiexec.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings explorer.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\LastUsedSource = "n;2;C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Set value (data) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "23" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "56" SearchHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Net\1 = "C:\\Windows\\Installer\\DerandomizedSymbolicLinksForSourceLists\\" msiexec.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23" SearchHost.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\C05D35BA70672AD41BF95FFFA78DEB7C msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\C05D35BA70672AD41BF95FFFA78DEB7C\Complete msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\Language = "1033" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\13CD821E8711F6B4086A161E2B55ACDE\C05D35BA70672AD41BF95FFFA78DEB7C msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" StartMenuExperienceHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\ProductIcon = "C:\\Windows\\Installer\\{AB53D50C-7607-4DA2-B19F-F5FF7AD8BEC7}\\mainapp.exe" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{34F7E7AE-C9FD-487F-B342-DCB4F5FD61E3} explorer.exe Key created \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\MuiCache StartMenuExperienceHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\SourceList\Media\DiskPrompt = "Topaz Video AI Installer Package" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\ explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "56" SearchHost.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\C05D35BA70672AD41BF95FFFA78DEB7C\VCRedist msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\C05D35BA70672AD41BF95FFFA78DEB7C\PackageCode = "27D8148CE0A3F6544932D2CD3F94407B" msiexec.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3488 msiexec.exe 3488 msiexec.exe 4884 explorer.exe 4884 explorer.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4264 msiexec.exe Token: SeIncreaseQuotaPrivilege 4264 msiexec.exe Token: SeSecurityPrivilege 3488 msiexec.exe Token: SeCreateTokenPrivilege 4264 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4264 msiexec.exe Token: SeLockMemoryPrivilege 4264 msiexec.exe Token: SeIncreaseQuotaPrivilege 4264 msiexec.exe Token: SeMachineAccountPrivilege 4264 msiexec.exe Token: SeTcbPrivilege 4264 msiexec.exe Token: SeSecurityPrivilege 4264 msiexec.exe Token: SeTakeOwnershipPrivilege 4264 msiexec.exe Token: SeLoadDriverPrivilege 4264 msiexec.exe Token: SeSystemProfilePrivilege 4264 msiexec.exe Token: SeSystemtimePrivilege 4264 msiexec.exe Token: SeProfSingleProcessPrivilege 4264 msiexec.exe Token: SeIncBasePriorityPrivilege 4264 msiexec.exe Token: SeCreatePagefilePrivilege 4264 msiexec.exe Token: SeCreatePermanentPrivilege 4264 msiexec.exe Token: SeBackupPrivilege 4264 msiexec.exe Token: SeRestorePrivilege 4264 msiexec.exe Token: SeShutdownPrivilege 4264 msiexec.exe Token: SeDebugPrivilege 4264 msiexec.exe Token: SeAuditPrivilege 4264 msiexec.exe Token: SeSystemEnvironmentPrivilege 4264 msiexec.exe Token: SeChangeNotifyPrivilege 4264 msiexec.exe Token: SeRemoteShutdownPrivilege 4264 msiexec.exe Token: SeUndockPrivilege 4264 msiexec.exe Token: SeSyncAgentPrivilege 4264 msiexec.exe Token: SeEnableDelegationPrivilege 4264 msiexec.exe Token: SeManageVolumePrivilege 4264 msiexec.exe Token: SeImpersonatePrivilege 4264 msiexec.exe Token: SeCreateGlobalPrivilege 4264 msiexec.exe Token: SeCreateTokenPrivilege 4264 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4264 msiexec.exe Token: SeLockMemoryPrivilege 4264 msiexec.exe Token: SeIncreaseQuotaPrivilege 4264 msiexec.exe Token: SeMachineAccountPrivilege 4264 msiexec.exe Token: SeTcbPrivilege 4264 msiexec.exe Token: SeSecurityPrivilege 4264 msiexec.exe Token: SeTakeOwnershipPrivilege 4264 msiexec.exe Token: SeLoadDriverPrivilege 4264 msiexec.exe Token: SeSystemProfilePrivilege 4264 msiexec.exe Token: SeSystemtimePrivilege 4264 msiexec.exe Token: SeProfSingleProcessPrivilege 4264 msiexec.exe Token: SeIncBasePriorityPrivilege 4264 msiexec.exe Token: SeCreatePagefilePrivilege 4264 msiexec.exe Token: SeCreatePermanentPrivilege 4264 msiexec.exe Token: SeBackupPrivilege 4264 msiexec.exe Token: SeRestorePrivilege 4264 msiexec.exe Token: SeShutdownPrivilege 4264 msiexec.exe Token: SeDebugPrivilege 4264 msiexec.exe Token: SeAuditPrivilege 4264 msiexec.exe Token: SeSystemEnvironmentPrivilege 4264 msiexec.exe Token: SeChangeNotifyPrivilege 4264 msiexec.exe Token: SeRemoteShutdownPrivilege 4264 msiexec.exe Token: SeUndockPrivilege 4264 msiexec.exe Token: SeSyncAgentPrivilege 4264 msiexec.exe Token: SeEnableDelegationPrivilege 4264 msiexec.exe Token: SeManageVolumePrivilege 4264 msiexec.exe Token: SeImpersonatePrivilege 4264 msiexec.exe Token: SeCreateGlobalPrivilege 4264 msiexec.exe Token: SeCreateTokenPrivilege 4264 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4264 msiexec.exe Token: SeLockMemoryPrivilege 4264 msiexec.exe - Suspicious use of FindShellTrayWindow 56 IoCs
pid Process 4264 msiexec.exe 4264 msiexec.exe 5340 sihost.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe - Suspicious use of SendNotifyMessage 40 IoCs
pid Process 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe 4884 explorer.exe - Suspicious use of SetWindowsHookEx 9 IoCs
pid Process 4264 msiexec.exe 3488 msiexec.exe 872 MsiExec.exe 1692 MsiExec.exe 3816 MsiExec.exe 1520 MsiExec.exe 3308 StartMenuExperienceHost.exe 5948 SearchHost.exe 4884 explorer.exe - Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 3488 wrote to memory of 872 3488 msiexec.exe 89 PID 3488 wrote to memory of 1692 3488 msiexec.exe 90 PID 3488 wrote to memory of 3816 3488 msiexec.exe 92 PID 3488 wrote to memory of 1520 3488 msiexec.exe 93 PID 5340 wrote to memory of 4884 5340 sihost.exe 107 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\TopazVideoAI-3.1.10.msi1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4264
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3488 -
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 285718B4A61CEDE0931EE872806EF3E4 C2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:872
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding FA8B16F33913D6741FC3F1EC9963DC50 C2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1692
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 337BFB4C750F83932083BA675D63B2BC2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:3816
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 9D2407ADA256312F35D7F5314178EBD2 E Global\MSI00002⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:1520
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:6012
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5340 -
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵
- Boot or Logon Autostart Execution: Active Setup
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4884
-
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5948
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3308
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4528
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e5afd7d.rbs
- Size 196KB
- SHA256 ed5735d310d23fdaa5f70ed6bf23dc004334bc399c66add495512418512e74dc
- MD5 9498faf5c29efee4e912c1cc0bebb33c
- SHA1 40a1ad0aed58fe7c253f848cd3ac5e960d68a049
- SHA512 6cc2a681c144d19fa200d1395a93e4bbe61e652a6f8e1f90c4e799166665ec9af05e02bb742e2dc891d2e45120b0d65377f1b3ed2c9f1a6e3dcba286966e24ec
- SSDEEP 1536:0oEj2bXxZMmOqgTBhSTSl4UNJZ8vaCAYOscag7xe6+CKA+wAGbBlPj2RO7yLJYes:E1eySjsyCW3pbbMp
- TLSH T16E145E79097BD3A1E619F4F523A5AE8D8348A489A33E41BE33FE410BD5ACD124B7F054
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Topaz Labs LLC\Topaz Video AI\QtQuick\Controls\plugins.qmltypes
- Size 215B
- SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
- MD5 2006d4b7d0da455aa4c7414653c0018a
- SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
- SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
- TLSH T18ED02352CEECF6A313451C16C44C47E72E53D1544731AD10F05401ED714771C36ABBC5
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\aaa-10.json
- Size 17KB
- SHA256 217ac7eb71605f232ab63679026289b3858de9d5fd61222462ffd3412c995c9f
- MD5 290094cf6f9c74c46692fefa6e4ce50b
- SHA1 c445df9d2514b1cbe11fbd11019621e440e54c22
- SHA512 35eec1a7fd7d2e1dc3d204863ce1029597be1a38f7a20896b5833dd19c2871073eb4fb438205ef63d057e1758fb69f6b71f4c195d2cf50c8208ccbec998611d8
- SSDEEP 48:1nZZKseGZZEiPGZZOovGiZf4Gf4gf4PwnZH45r45945fGZZ93guAMBH5QuTZ3XXn:1Z8a9aFR0wZUapZVTVXXwWl3
- TLSH T1E682CE3AC66E9CDA42B9A3A4B83C8257E430135765784C9F73BC5C8CCF3315B05869AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\aaa-9.json
- Size 18KB
- SHA256 35d78775657b2c65ddc48296bd98e7a8806ceaa78da018c5251ca560ce347cee
- MD5 d06a7d646734638911e65c5fb87b5445
- SHA1 17ec9a11a6b034dbf48b4e8d449e96970949dbe0
- SHA512 81e464d437b67f19ac9db90a84cf8174a58a19387da307b9437564367fc0eae2c41aabdac04f13dc0bf64c8ed3e460712c250b4a95e65285438107b949ab5d74
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpuAMBH5Qua3XXFd:1Z8ZTZ5i0wZUZaZVcXXwel3
- TLSH T12A82F03AC67EDCDA41B9A3A5B82C8257E420135B69784C9F37BC5C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ahq-10.json
- Size 18KB
- SHA256 22c68beafcc9bcd9d1df3ae9cb4d0fc4fd35300ff2e8188fc29a9400f90daf5c
- MD5 8bd1fcf34d53cd4877fddbfd08cf373c
- SHA1 158586dbc9308b3e1e39539b3a4e96d239b88a08
- SHA512 5c4bbac40cd945ee35eb70bd6abac42d086c66378e0282dbe8a6341abcbdcadecd7fa1511ae8a08b5899c43e21534abc7311706bb9dd477e942aad07c83c6f65
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqphAB8eGan63XXFs:1Z8ZTZ5i0wZUZheGjXXwTMQ
- TLSH T1E782E03AC67ADCDA42B9A3A5B82C8657E430135B69784C9F37BC5C8CCF3319B058156B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ahq-11.json
- Size 18KB
- SHA256 7d3b82c778bd84c42ccc80bc2443860ef0e2b9a2e0d4e23d70c83029b0a92c07
- MD5 d7b0c442b063c8cd2fffe2d21f594e44
- SHA1 c73ac16bfb5c349238784c8fd2dc6a5a14f98a5e
- SHA512 425c1bf147ebaeefc64f2a4b6c121f2e7fc7466bc3e03f9b95e3a47d23a785fac8050548b90502eb09b4b128d45dffe67f5f454b03353196f704ccab93b3d29e
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqphAB8eGan63XXFc:1Z8ZTZ5i0wZUZheGjXXwTv
- TLSH T19C82E03AC67ADCDA42B9A3A5782C8657E430135B69784C9F37BC5C8CCF3319B05815AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ahq-12.json
- Size 17KB
- SHA256 c93b612ddcb4ea6895f11b443fbf48c911f6ba5460d06f0ddda237b9e8fd4d28
- MD5 c26265b34b305227273adf48cb9793e4
- SHA1 5c00742de059a34a50916df01cbf16275b4f7530
- SHA512 7ca0ebffc98e9af4c169eb69fdd69e2691dfd19c82537628a878186f43d537749e15d3708a590c1fe2b3269ba8e20c53a922445024cb53e8328e472971f48646
- SSDEEP 48:1nZZKseGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93ghAB8eGanzZ3XXD:1Z8a9aFi0wZUaQeGuVXXwTu1
- TLSH T1FF82BF39C66E9CDA42B9A3A4B87C8257E430135755784C9F37BC5C8CCF3319B0586AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\alq-10.json
- Size 18KB
- SHA256 b43afd0461909eb0dc29803d9105ce8dc0bec9cce8b03af9759ef350279c6181
- MD5 ab0191437079b9e298ec06d475a4f94f
- SHA1 171e7c2abb341470deb7ebd0c445ab489e97bc94
- SHA512 0ea60a9e3855fd20ffb1d803720e7c70486c64c1ec059f2af2e789aae17af0b47a47e5d7b7cbe9bf86691cff3f8ab7a614a57d4451ac0770f0ca0ecbdc6553fb
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpaQAivaZiu3XXFx:1Z8ZTZ5i0wZUZGaQXXw9k
- TLSH T1D882EE3AC67EDCDA41B9A3A5B82C8657E420135B69784C9F37BC5C8CCF3319B05815AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\alq-12.json
- Size 18KB
- SHA256 ddefef73160b648a1935d246ee0995fef56c7a10343669b534492afc2de859d8
- MD5 c5f796c25fa80093c13358fa64442920
- SHA1 75a18081c3b8092921c9b4c1ab77d92477f83cf8
- SHA512 7f6673afc9bcc162b71643044d6afa5ee426f165bc9fd01cd3c0a48a61a3a5a88e8865a13a64e6c82c05ad890157d610ad8d7f8a53c30fe806ef3bce71558f9a
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpaQAivaZiu3XXFd:1Z8ZTZ5i0wZUZGaQXXw9Za
- TLSH T12E82EE3AC27EDCDA41B9A3A5B82C8657E420135B69784C9F37BC5C8CCF3319B05815AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\alq-13.json
- Size 17KB
- SHA256 928ccfee6616758b67cf60728e76d88f1697f989a08cc35ccbeae107a010532a
- MD5 0a96d6eb95bbf053157e39b931d07975
- SHA1 6344d066bf330ece08ca0882f7dba9cf067d0c5c
- SHA512 95159be8bb5ad71f767aabb3120c789c76b8df64d4ba302fea7da8ac37d5785ecd8d55e67478806457e7d72ff54153a8a5ebd91e437eecaa6bfdeae40235f2bc
- SSDEEP 48:1nZZKseGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gaQAivaZiPZ3XXT:1Z8a9aFi0wZUafa/VXXw9c
- TLSH T10C82B039C66E9CDA41B9A3A4B87C8257E430135B55784C9F73BC5C8CCF3315B05869AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\alqs-1.json
- Size 18KB
- SHA256 d1a0294f51ee9fc072bafddca95257c0e30891e6196c25d09745e349aa0ce364
- MD5 02a5de69fe9de7d01885804b0388da9c
- SHA1 8d9e0461b443d18a4055c3658603c23ef7396080
- SHA512 75deb4bb7a9388902588048c37c074977668f04823ba98140f95e6652d2a828135e4f9564727de07b5dd82db8cbf1645b3eeb6ad0a7d36386a6a37d228275cf3
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpOAnmi3QaGu3XXK:1Z8ZTZ5i0wZUZpgqXXwv
- TLSH T13382FE3AC27ADCDA42B9A3A5B82C8257E420135B69784C9F37BC5C8CCF3319B058556B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\alqs-2.json
- Size 17KB
- SHA256 e6174978c3701b7037c32ae7e270e2eac0287d3513db4617d5e050e6790db6dd
- MD5 d0dca05ad93263c129ce250bc1077e9d
- SHA1 72613ad224f07b668c7b119e360afc8d4e68955d
- SHA512 01c8f81a807b034ef5a1d66eb0ed3eea9f3d9ff9019029f652a72cfacd1a6f29677db59856079ba8cf5eb7f60a08ce20cf17f6b08c8274550c31c244faad2b93
- SSDEEP 48:1nZZKszGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gOAnmi3QaGPZ3XD:1Z1a9aFi0wZUaoghVXXw3Qv
- TLSH T1A082B03AC66E9CDA41B9A3A4B87C8257E430135765784C9F33BC5C8CCF3315B0546AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\amq-10.json
- Size 18KB
- SHA256 405ef4f95f93a8cacd178891240567c0121f3d0f01a621284dc0e6e71e3ff5d2
- MD5 8fc13abb25e4193bfb38c512e0a19d1e
- SHA1 c1bbd7c9a1a451a179925e4d703f11339c0f3715
- SHA512 61c67e13898de22cc3b27c33ef02354162549e6199379a8ae57e4ae76fdb3227fcf8574ba2e51af4184dff6179c562d7ea5225bcfd371f77a88babac18db8712
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpyAmU3EaGDl3XXD:1Z8ZTZ5i0wZUZeUUjtXXwNQ9V
- TLSH T14682FD3AC67ADCDA41B9A3A5B82C8657E420135B69784C9F37BC4C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\amq-12.json
- Size 18KB
- SHA256 027df9d5db3ab2bb01040752c386e1c564df6f16af1106ceef0a50d5402ff903
- MD5 08bed4713d21846d809f113624c7ffcb
- SHA1 ad0cab749d48a877e171f88696dd7c2ebd4ff812
- SHA512 b86ed84bdd156b0accde71f358d0c2aa42568dca4c6e2f7edd6e73f394cb031172741ee0e205563578a608094e0726c079a2b12a457558fd8c6c85a188677f36
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpyAmU3EaGDl3XXe:1Z8ZTZ5i0wZUZeUUjtXXwNQW
- TLSH T15782EE3AC67ADCDA41B9A3A5782C8657E430135B69784C9F37BC4C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\amq-13.json
- Size 17KB
- SHA256 6a77430eb789b0412031befded406ad690e652a4c7aa6a53a4dafafe4aab9936
- MD5 c1b9cdba704ca94d4b6406e8b27c99f0
- SHA1 9503258fa3481cdf70db1b1210584469bdbbd67f
- SHA512 65d51652a0d9e3ebf87b3b9eeee30631f751b613613313b4911b3f10b9a94123e55a42ace824b356475513cab45e56e6b874ba91318e5ea1d0b6bfe05220a53d
- SSDEEP 48:1nZZKszGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gyAmU3EaGDEZ3Xg:1Z1a9aFi0wZUaPUUj4VXXwNQ4
- TLSH T1CB82B03AC66E9CDA41B9A3A4B87C8257E430135B55784C9F37BC5C8CCF3319B058696B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\amqs-1.json
- Size 18KB
- SHA256 c1f29f483bb0df211fc9e3b2770a42d44dec930737a424ebf6682b4f6d33f978
- MD5 7b1994c8579834d3ba2df9c76d88a43d
- SHA1 05d7e0061d40c4001e637db3ed3826e43aa39ff6
- SHA512 05906cf1e6c1a952a59a1fd4e51a8d73fa3aab60c0e3212b9b41a722a4e25384de732019e4dd697a142aa4a2534afeabdff2c1fabf750b0a2309b4f8c10ff824
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpbA/k11i3RGaN27:1Z8ZTZ5i0wZUZOrBGlXXw6
- TLSH T16782EE3AC67EDCDA41B9A3A5B82C8657E420135B69784C9F37BC5C8CCF3319B05815AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\amqs-2.json
- Size 17KB
- SHA256 b2b088b313fc6256e78c34858daf1f079d9adbd3579eb5ef84f3042406c3c811
- MD5 ff791866a5c80b7b7c90d26a4a58fb20
- SHA1 22ebdbb47a24ab635dd2cabb0a6edf1145b22e7a
- SHA512 64dba57eed0f9d24f128cf306829c33116b9a2c3c2b0c29182d8d440ee47931a284a51916ba31ecae67ebe813c4add13506c0778324fc9d58c4c8faca760e860
- SSDEEP 48:1nZZKszGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gbA/k11i3RGaNnU:1Z1a9aFi0wZUaFrBGAVXXwFXVv
- TLSH T1BB82C039C66E9CDA41B9A3A4B87C8257E430135765784C9F33BC5C8CCF3319B0586A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apa-1.json
- Size 6KB
- SHA256 033ba48f6ed0c8d8692e3bdd86512279a4632df6ad7f034722d18e053524a376
- MD5 38f22618bf75933d0a33be44929110d8
- SHA1 97d6d0c8dc478a6c1ce927ba1e92cce1c418659f
- SHA512 cb5ea62f6551e9b26648699a8ec47aa010562165b0db53ceb748da7af724d9b620b37123e714ab16bdcfef687c00beebba88184a957f1ec7ef3dd0f53f4627cc
- SSDEEP 48:1zZmb3UQE8iZmb3K8iZmb3uzZmb3YtuDiZS3afz7SBrec2AmXXFuCdSW9M:1zIVETImTISzIctuu7Uec23XXoFWS
- TLSH T1B5D1063AC16D5CDB12FDA3B469688657E535136B10640C8F3BBC0D4C8F7712B058AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apb-1.json
- Size 6KB
- SHA256 d6cc24fddcab526997a7f93a3176f89d03eb8820dd850280a6dee5c7a473cfa7
- MD5 34b1aa2a40cbe5bf1503c6073b2bdcd9
- SHA1 833687c521eaf6b4943428832d1ac5b84827a55b
- SHA512 3afdf32a0156eefab536e107ffca7cc5410fc985f3e2835466e669ef5ae0dfe3e27293c451ba4b52919753d69ae70073d60a5b8017845a9daf6aea50ce49a4b5
- SSDEEP 48:1zZXQE8iZp8iZFzZ3tuDiZS3afz7H/Brec2AmXXF4otbISWVJ:1zeETvTrz9tuu7Vec23XXltFWv
- TLSH T1A0D1F23AC1299CDB11FDA3B069A8C617E535136750680C4F3BBC4D4C8F7312B068AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-1.json
- Size 4KB
- SHA256 ec6e009a59c1e4fe39be5bd9852cf477173741b2e22585e825e328efe4774308
- MD5 c8e937273d44b6bb9573ff155e6974bc
- SHA1 93e33b87ae5d3ac9e2ca7cdaa61361bb5967483e
- SHA512 c4f2c8e595473122115b9d6e2fbba2090a96256c23ce7b3cb7972872140b404c07152098771f2a3e6e6e98cbcf7ebfb58fa747389ef2b50187638d19a3d1d1c7
- SSDEEP 48:1zZmb3AK8iZmb348iZmb3WFfzrJ7/Brec2PmXXFevMrHeSFt:1zIkKTIkTIcpec2uXXwvqbb
- TLSH T17DA10A2AC0699DDB11FDA3B069688747F535136B50780C8F3BBC0D4C8F7752B058AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-4.json
- Size 6KB
- SHA256 0e15d3604d44190c8afe16c1edd351ec07b1f4fca7ec76339a46e3f4fc0f9ef0
- MD5 808d901fd1247d8944a2d961fed95f81
- SHA1 e643699e21cc30909f9f68991e030660f9b5c3ca
- SHA512 840c3626694ec2598556133c066611856f6eabfc09bd9cba4d7b83333fc10133ea8bd4552876e7748fe7d80833a36bd33048ea7409f95bd83aca039669863039
- SSDEEP 48:1HZyQiZbQiZfHZXFfzrJ7/Brec2PmXXFeelbUjE:1HIn1nJHtpec2uXXwe1H
- TLSH T10FD1272AC46D9CDB51FCA3B069A88647F935136760780C5F37BC4C4C8F7362B0689A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-5.json
- Size 6KB
- SHA256 aa8ae6c282eea74facf146e8349c5ec87b5f2065639c2184943a595ac932887c
- MD5 29276fe7c804011f59a636f429c39719
- SHA1 a1f36cee6f6077af6b3808bc74a75f529102cd43
- SHA512 25ab9e408a02b545e745aa74b29ff2a63936dc7666b8abbdc6c853793f9cce6318e8275188a4331363c8f41045d852b4c63472690a051b572a64750a4c566b47
- SSDEEP 48:KHZXQEQiZpQiZFHZy3AfzrJ7/Brec2PjXXFWRrEPMh:KHGEnvnrHDpec27XX9E
- TLSH T1D6D1062AC16D9CDB51FCA3B069A88647E935135760780C5F3BBC0C4C8F7352B0689A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-6.json
- Size 6KB
- SHA256 e34dc324cafc7f1328b52b0ca96d60160042758867f946eef387aeb1d4ba6b7d
- MD5 06f459fbe829ab81349533631f0c3e31
- SHA1 ef0acf782dbf59d0de1bf75b41f82a1c674e6367
- SHA512 011d01b16262ae63139a484255e4ce11507a8012ea1605f330987849b3ab9013df3eeb11eaef5a642fcba811d82510ae7d5df1ef7ff295e9b9217fe2a79cde46
- SSDEEP 48:KHZXQEQiZpQiZFHZy3AfzrJ7/Brec2PmXXFSjPMS:KHGEnvnrHDpec2uXXy3
- TLSH T12DD1092AC16E9CDB51FDA3B069688657E935136750780C5F37BC0C4C8F7362B0689A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-7.json
- Size 5KB
- SHA256 24801fd4ee78e2e0ebd9ea48348350ec50af79d92933c92f7a27f612f51b71b9
- MD5 abb1bc5bd9221798f88a66f1c792fd14
- SHA1 914ee8074d60c619227ca4e59f9c952213c09047
- SHA512 c36d575c47ee78ac3abe964144a08202cc33b439699249595be70fb935591dc81591126ff25c3a59430376c425318c62f3705f94260466f9c4f8b8416b315dc8
- SSDEEP 48:KHZXQEQiZpQiZFHZy3AfzrJ7/Brec2PmXXFRyPM3:KHeEnnnzH7pec2uXX+S
- TLSH T188B1012AD16E9CEF51B963B0B9A8C607F531136B60640C9F3BBC4C4C8F7312B0545A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\apo-8.json
- Size 5KB
- SHA256 e039b3b3b237656766b0b18859cb2e9270dae4573db5e4b0a75c271ced4a5973
- MD5 492d47610e7fd9fef82cf62281457740
- SHA1 c2fa2dd619bad170e5d195a2ce7fde2378d2191d
- SHA512 440d8e792308abda764778621dfbcf47193bd93a5e4c3a1cf969cc15ed3028206b253f3c6084d7273e221b09f09442e1e6671b3e216f8c1b76c1394509f7a7e3
- SSDEEP 48:KHZXQEQiZpQiZFHZy3AfzrJ7/Brec2PmXXFFNPM4:KHeEnnnzH7pec2uXXbtF
- TLSH T16CB1122AC12E9CEB51F963B0B9A8C607F570136B60640C8F3BBC4C4C8F7312B0545A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\benchmarks.json
- Size 1KB
- SHA256 c29d1c91a5d2f386913aaeba27268820d9de4c028dd0b4b9589e151f748f97f0
- MD5 7d4a84f8e2072de16988de4ce13022eb
- SHA1 28785df6a8ee64b0aa28c76536fc12e9e975ae11
- SHA512 de39033e75017ddf893a52b03750a7fb217855fc992e7131c6878212c01ea28f5bc1deca1d3aaed794bb02297c1035e7f80fd26b77eca4afa8d0e4675263cb74
- TLSH T17321DE1ADCE60D5B0AFAA2BD757E0716E8888A374305194239FC84AC5F7364391ACE58
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chf-1.json
- Size 7KB
- SHA256 dc49b8d233a9f8e46ca4617d7e9ce73317fdf456b5005d0bc65ea4d0fe2e6993
- MD5 a9a936692ed0d2526827fe555704fc78
- SHA1 4ee78e5475e15e4fbf2d6a7f48f409ed52d888bd
- SHA512 0b92b282c7dce7a2e3d7da16805c05bc904db7e59ad921ddcd73f789f46df6fb0abdf18cadce1ea597fce8c06c0a64543365a2f969299606f1c58774c40baa39
- SSDEEP 48:1xZKNiiZRVEiiZTVOxZn8VdtAiiZ6V4Ffz7JyrONmXXFePXTlS1t:1xMNdjVEdpVOxyVdtAdgV46OQXXwPgr
- TLSH T14EF1002AC5699CDA52FDA3B069688642E835176754780C4F37BC1C8C8F3316B068AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chf-2.json
- Size 7KB
- SHA256 ab31ca414e793266c8048cf8cb9beee8ae5f0faa1a73e6ffc04299d894a18ef2
- MD5 f26c05710cdd6be4e1f768ed76a160f2
- SHA1 8d7d60450b9836100cb2f2ad2e1aa7d58b4ed2b1
- SHA512 6aa8774601c63bfcd2b415b38269afec1f81ad5fb7d6aad8c6304cecf17b6549a52fc863eac383da2a64b38cfb709196f1c974e932da562796c92b8501da7323
- SSDEEP 48:1xZKNiiZRVEiiZTVOxZn8VdtAiiZ6V4Ffz7JyrONmXXFeXVPvS1sv:1xMNdjVEdpVOxyVdtAdgV46OQXXwlCGv
- TLSH T173F1F13AC4699DDB52FDE3B069688642E934176750780C4F37BC0C8C8F3316B06CAA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chf-3.json
- Size 7KB
- SHA256 07fd37695cfeea92169b8baa8a9ab6c843c3042929918192707e0bb5b0a16c94
- MD5 9c20adab13321e2cd17c1aba2a69ed8f
- SHA1 6b90ff05019fa57e159579b799807e5f9fffece0
- SHA512 01c91ca8b25a05273199bf9553a6119af5c4c8b98666d4a266f3d477c6edb20117d8be81eba91773b8de1434600575ab60f08ef7019f72117d43ec26722a742b
- SSDEEP 48:1xZKNiiZRVEiiZTVOxZn8VUiiZwV4Ffz7JyrONmXXFeZoxlS1z:1xENdjVEdpVOxyVUdSV46OQXXwZomF
- TLSH T147E1053AC5699DEB51FDA3B069688643E835176754780C4F37BC4C8C8F3316B068AA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chr-1.json
- Size 6KB
- SHA256 a90aa8efd0bf4c82f22b796bad6a137ea11456caea3660bef47024a44ccaf804
- MD5 cb4b55b510a5b6e0b522bde03f660092
- SHA1 bf85d511e1064cc3b3d7d388f13caf19498e4ca7
- SHA512 0619227a0ef65d63052fc34d29d6e5d5361a7e2863ad323cd8bc0fd1373bc3564d41f903c2737431cd5c842a1088c4290dcfc983c1220e315d4a144c4a4415f4
- SSDEEP 48:1xZ3NxZTxZLxZ/QtAxZgFfzrJu/yrONmXXFeL//y3Z9Sht:1xtNxpxJx6tAxYxOQXXwjyuH
- TLSH T160D1D12AD5399DEB51BD63B06968C357E93413AB61640C9F37BC4C8C8F3312B0586E6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\chr-2.json
- Size 6KB
- SHA256 c74af8c80ab8bd47b270e38eadef8aa7f0885b3c7486dbb9ebb36e67c365fb1c
- MD5 e19e67d004ca5df2c8bba1d58132b92a
- SHA1 adb0790a8b5218a8f4e6613c9ac1546af1a593a4
- SHA512 a251c8986c3292529323e2550e011a6a15f1df5be5ae4361d731440d618b0bcd4a2977b2f833d9582cadb80465f755b7a7358827e5a0d6bdee46937814852537
- SSDEEP 48:1xZ3NxZTxZLxZ/VxZ2FfzrJu/yrONmXXFeL//ybqShsv:1xtNxpxJxLxWxOQXXwjy7qv
- TLSH T18CD1C02AD5399DEB41BD63B06968C357E93413AB61640C8F37BC4C8C8F3312B0586A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\cpe-1.json
- Size 3KB
- SHA256 23b742fcdb84a077ab3dfccee8dbcddff91fcc35162c30a6d6a4246e10b95349
- MD5 eabe60ffe0c39e1c2d1f57186906727a
- SHA1 fa1873ec396bfcff1224cd17f9537e6cff82079d
- SHA512 b7f0fe0aa6777e9033c0c3c98a07b68516d0a6df4a2a6631accfc22c338ff4f77d6d5006bddef8d1d9ada4a451668a77aaf889b5e0341bea279dc678b0356c2e
- TLSH T11D81FF3ED2341C9B05F6B375A8AD4207F86543AB45800C4B3BBC496C9F33157168BE2E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\cpe-2.json
- Size 3KB
- SHA256 f737be590dd5a58ca8ce02450a1ae2f9938d47f280c319a433dcc00bbc84c996
- MD5 2bab25e87f19b0d9cefd612dff0caf3d
- SHA1 8e7fda1a46574b5a6b39d6604eaa515ef8b12437
- SHA512 bfe5b60be3e20cc5b455785cb52d70d14e121a6ded20c89bfdd1ef9cd301f96941902feb81a0a650a3820a63d275f46cb17626fa8f728bf609db41f48a525027
- TLSH T11C61DE3EC2345C9B05F6B775A8AD8607F96543AB45800C0B3BBC4A6C9F33117168BE2E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ddv-1.json
- Size 18KB
- SHA256 0126489e7989405c3838b94595f084c1d5207bb03d8c63482777e6644514a6cb
- MD5 2d122107406f15439975094f31b7df8c
- SHA1 ad0836060c6b319692722b8974c489043c14815b
- SHA512 355127e24ac2bbc45dcad7e5a2fd6e460d8fab5952ad66f77de0d02d0dbbc6221c342b67485e936ffa4eb230e1b3c7c9671d803a9faba17cd757af66b0e484be
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpLA/gaXqx2jdDIl:1Z8ZTZ5i0wZUZAgEqx2dh+J0XXwxf
- TLSH T18392213AC67ADCDA41B9A3A5B82C8657E430135B69744C9F37BC5C8CCF331AB058166B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ddv-2.json
- Size 18KB
- SHA256 fd3f26f97adb6e74f2d13b128b0a28c9f662daed495f01fd54580049f74a2531
- MD5 3e7dd17743a6106554a9291ff637db2e
- SHA1 485836b581ccc748cc500ecb47a29b0ebcbcc8e6
- SHA512 68a3002d20729485297db0f4cfd0017d167ca983298ca1c815ea1b732ac9c35a5d569cbb8d5beca3f6c19f4506969222f83a83a4e249f1c23e4467d5b979172d
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpLA/gaXqx2jdDIL:1Z8ZTZ5i0wZUZAgEqx2dh+J0XXwdzdv
- TLSH T1D092113AC27ADCDA41B9A3A5B82C8657E430135B69744C9F37BC5C8CCF331AB058566B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ddv-3.json
- Size 18KB
- SHA256 c482a112d62abd86b5301a693ec9af1d146e2a8ab2d30296d3cefc6a99daaa18
- MD5 0b2ab678c6d6fa0dca4f7884254bce67
- SHA1 24028927c8774b09f7c082a090bd3a0f556a77b8
- SHA512 9c1dba7d771bad2a3c22c47d1ff83bb75ddc9c5451c99ac451c117c13b73cf7a6b25af102f05fa1fca788b919016d63b33c96f5d6c2e248b17c81c712c79951b
- SSDEEP 48:1nZZKseGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gLA/gaXqx2jdDIQ:1Z8a9aFi0wZUaPgEqx2dh+JMgXXw/N9
- TLSH T1AC82DF3AC66E9CDA41B9A3A4B87C8257E430135B55784C9F37BC5C8CCF3316B0586A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtd-1.json
- Size 18KB
- SHA256 e2edf291b7d002cbe6bd35e9fca8f2f83c2d32333d0c4f2b19c38e5d39084cea
- MD5 e3cb10725f7ea034421e0864cc2f1632
- SHA1 27dca27147e939643e3ac83f52c7179d0b450fca
- SHA512 00a9c2a5a3bad20a36423d9235d8cd476bb0606ef5912545c23b62f5ae79328ae74877ace9620f813cd2e4cb6c54c44a4381e322e2fc6b61ace20c13f18d0f08
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpFA496OaQqyj3XU:1Z8ZTZ5i0wZUZREO7qqXXwoa
- TLSH T18182FF3AC27ADCDA41B9A3A5B82C8657E430135B69784C9F37BC4C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtd-3.json
- Size 18KB
- SHA256 c96dad3743cc0ea12cb025db64e86b1e6c398fffae50b4b3fb00e84b2a32ece9
- MD5 29e11b94190196d0495ffe316453bbeb
- SHA1 9b790962e4a3938bc04be63947f39dc1c016a1e4
- SHA512 904daaa8cb32d83a55f2fccf1a0c8b52a1c9436bf96084efbc3b80286b9dc3fc7ee9e0ad26506988f37def5625d206dd065008af39633c4c2bc7aa34a0d29538
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpFA496OaQqyj3Xi:1Z8ZTZ5i0wZUZREO7qqXXwB
- TLSH T16F820F7AC27ADCDA41B9A3A5B82C8657E430135B69784C9F37BC4C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtd-4.json
- Size 17KB
- SHA256 ca5ee29b6d237a5c6d02e7a0310ce93c65e410a2eb172e5dc872121fe822daee
- MD5 6937462d19c3e523f4595cc86d930428
- SHA1 ef0a9456fe229f1d8581a9efc7bf37a40616e337
- SHA512 9d0dde899445ce44dede5d482efa7b73951b9fe96ba67cb5dee1bb65105cc3f81438875fef28a85c23892ba2e9113172f0b7e877ffdc926b52ed3f727e5d1aa7
- SSDEEP 48:1nZZKseGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gFA496OaQqyOZ39:1Z8a9aFi0wZUaKEO7qhVXXwUj
- TLSH T10682C03AC66E9CDA41B9A3A5B83C8257E430135765784C9F37BC5C8CCF3315B0586AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtds-1.json
- Size 18KB
- SHA256 6a82158b51341660555ac6443cabf891160ef76e447cfcc298b46edcf9bfc964
- MD5 9df2873534fb4ae9e9117a4cb7ff1fe0
- SHA1 948e57c7292d9c14cb82c15e270f69371ff43218
- SHA512 6d790f5844cf4e08aea7cde12baed170d34540f581bb826caa52f011f7735f609c6a95044758cdb60f3a95945e56e8b8f62782eac8d4eba4edd795f3611951a7
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqp2AxL6sa7qdEvIA:1Z8ZTZ5i0wZUZ8sSqymXXw60
- TLSH T14282FF3AC67ADCDA41B9A3A5B82C8657E430135B69784C9F37BC4C8CCF3319B05855AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtds-2.json
- Size 17KB
- SHA256 69bd359761122f51086c6ac23704899f68db4bc9f95509ebd2e1330d4129addf
- MD5 13dc60506b84d307a77c3b26f9a897f5
- SHA1 da9b1226ac4767228b6d3f8005d032f9bf6b589b
- SHA512 794a5161c08f517e3a434e5c96c202bf54526e7b813dbea0fe876d96072d3f9d08064c078ab92980e02c2086dbbed591b19276c3a0c9c38c5bbf85b957610bd5
- SSDEEP 48:1nZZKszGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93g2AxL6sa7qdEvNU:1Z1a9aFi0wZUabsSqyVVXXw68v
- TLSH T1DB82C13AC66E9CEA41B9A3A4B87C8257E430135765784C9F37BC5C8CCF3315B0546AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtv-1.json
- Size 19KB
- SHA256 0f71e80034b55dd3a1310a9cd37f2d9d01eeeff495e3fbed5d7973397d2bcc72
- MD5 b34b529931b0aa47d97a4a5a0308a70e
- SHA1 d6f694d494578744bb4f116b6f235766fcb9c6d2
- SHA512 282adfb1db7bbaea391d0ad3ea7f930be331eda97c0a2c1a14724950e9d415b2d49bcbfc2dd79f6a0c0d8181b16cbf97ac223a7e2f1050724baf8cc185e30b98
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqp7AYQev5UKaZ3q8:1Z8ZTZ5i0wZUZAgqqB2dqJIXXwP2
- TLSH T1C492103AC67ADCDA41B9A3A5B82C8657E430135B69784C9F37BC5C8CCF331AB058156B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtv-3.json
- Size 19KB
- SHA256 cbc47efb1fe323361482c9424d5d3ba3dbf2bcd0ac552b952f4b867c3b132d89
- MD5 04585caf1de5a2c46b0b09490e57c6ae
- SHA1 0f323069c9a738ecbae556fe74dc85c0b52c2e6c
- SHA512 5d7f3f3d8723221e8c9d3e19f47b2446a0b51ad861a91620377a368fc73d168a8c3c3f7491a29d30bd3f1dbeb1b286cc7d56592d9accb22127ee2289d203b670
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqp7AYQev5UKaZ3qZ:1Z8ZTZ5i0wZUZAgqqB2dqJIXXwL
- TLSH T12B92113AC67ADCDA41B9A3A5B82C8657E430135B69784C9F37BC5C8CCF331AB058156B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtv-4.json
- Size 18KB
- SHA256 1de5c302739bfcd3908d605a2deb6227705f586604e42f3df9922fd320409897
- MD5 f340fe4818b24a03e7d120e2f08bf696
- SHA1 6b4f449151c186fe200245a9b0e2fabefda99235
- SHA512 95c8c112c55f585e5e77519ea5f65cfe0bb96f607ecebf40d28b276922d78a1800dd50aa7bacf1f2e66ba104d1fda1a1883e6c953100c2e3c93356d0bcb98645
- SSDEEP 48:1nZZKszGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93g7AYQev5UKaZ3qJ:1Z1a9aFi0wZUaRgqqB2dqJogXXw8
- TLSH T12B82DF3AC66E9CDA41B9A3A4B87C8257E430135B65784C9F33BC5C8CCF3316B0546A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtvs-1.json
- Size 18KB
- SHA256 ed085f6b484563318b29932f96a7e6a85137879ebfe37706a61c28dfa0ae280e
- MD5 7985ada388bcbd4ea3cf189118bad287
- SHA1 55abd67142af6443acf856ffd63959010f83b1ad
- SHA512 eee27a6ddb8fa9ce04c86dc5e69ce4b83324fcc1813329006fe084f4f7efec7bdb85c5866178b406d503db611aeebb217c8846eac420c0e803ec16214016a545
- SSDEEP 48:1nZZKsenZZ6chnZZmAnniZf4Gf4gf4PwnZH45r45945fnZZMqpMADXQev5KKabqV:1Z8ZTZ5i0wZUZCqeqLdcJAXXwPKN
- TLSH T19992103AC67ADCDA41B9A3A5B82C8657E430135B69784C9F37BC5C8CCF3319B058166B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\dtvs-2.json
- Size 18KB
- SHA256 3ee09045e17b686a6b99dbe7112a8bd285e49ef83b9ca9c2e31dcac7ca4c7e74
- MD5 82d074619586e202157a7b9919e65f9c
- SHA1 cff5838602f8d35617a5e46c8054bd34a838e53e
- SHA512 80b1af832e9f9d531dd3993bb1ad909313d096adb86c69f5ff1511a2b4bc59d36cafc517f06d2f4d9dd667c6fcf0656803461ef6c075cdec885146161d92d62a
- SSDEEP 48:1nZZKseGZZEiPGZZOovniZf4Gf4gf4PwnZH45r45945fGZZ93gMADXQev5KKabqD:1Z8a9aFi0wZUaPqeqLdcJQgXXwPKMdv
- TLSH T1C882CE3AC66E9CDA41B9A3A4B86C8657E430135B65784C9F33BC5C8CCF3316B0546A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\encoders.json
- Size 8KB
- SHA256 9433916fbe8e54eb5ac3a3f6266727dcf07a9117bc2a6c4bfaec52179476a9cc
- MD5 0a1e18f19673d3555a84f7be6cc8b8c2
- SHA1 b3e4a02ec8df0e5b6f3f42d959ee755baae3986d
- SHA512 0d4d74b6952ae70a5b2211f3256997342420ca8617770c504fdbe2cadce08c5ff88bc44621717564d2d51555a1d4969c6d028fb4ce5d2546743e13ef47f2a2d2
- SSDEEP 192:vsejsW4CjxLaAmACAVLxurLXwLaqq9hSiBOMBSUyX:9E9I
- TLSH T166021823D7AC5D1B29B1A36A69EE450BF3A8135F21C0CA873BB8124D4F7793240C55EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\gcg-5.json
- Size 15KB
- SHA256 e1fe363e582d8c02c00b5bd7ccbc43a8a62ff90f4692251c039db8173c299339
- MD5 864561df598da51e76fc7e603fbc2c47
- SHA1 05369f1d494f97276028a2720d1f2e18d2c698ae
- SHA512 2a0dbfc3cbb220214f990e1b38f092d3a41a1237e88ce0688e2dc64313cf1bcfe57fe02d8d0a01f362bf8bd88443efaded5f7d67ec5a3007c2b4edffe7c54cbb
- SSDEEP 48:1hZZgvxhZZMjehZZW1O47bDUreC2whZpnOfhZZbUBqAQNWHYAMqj37v63XXFeLqo:1/q/J/B4AS3w/k/bNoGXXwWo
- TLSH T15562A07DD63AACCE52B9A374AD7D8247E420635754A80C8F37BD0C8C8F331671446AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ghq-5.json
- Size 15KB
- SHA256 1ee63128773e0515cc3bb1b89038c77204120ee6308490a53fc09bf1f0320ca8
- MD5 c611d713a3ed4a9c5307044aa82a161d
- SHA1 30bd202147134ccdbcd91bd82ae6d9a810ec291e
- SHA512 cbbabeef2f7cfaa0eba5da584af97dd5432b24d7c3560d8c819d84fb01e2fdef58917cdcf56543dd00f34a41fa2ab1f29b81172cc151c140cc186629c50d8810
- SSDEEP 48:1hZZgvxhZZMjehZZW1O47bDUreC2whZpnOfhZZbUBdrAIwsbWHYZBqj37v63XXFu:1/q/J/B4AS3w/k/Cvwsbo2XXwv
- TLSH T117628F7DD63AACCE52B9A374AD7D8247E420635B54A80C9F37BD0C4C8F331671446AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\ifi-1.json
- Size 6KB
- SHA256 d5740cfc5d05f1d63db526e273ff3e3eee5039196065268b3ad0609651eade83
- MD5 be51506abbe0df8f830bc04c1ad97a87
- SHA1 f7edb221d03db54667ad8bd88e39b959fb892d81
- SHA512 28023550f87e9c71ec86f4e888b2fb9106b4ed5662ddf82babbb92ce9e7036d23479f218432607b947f0a46fab605a8b61ba6238adafcc0240a4c5dd05ee4bbf
- SSDEEP 48:1pZKNqiZRVEqiZTVOpZn8VUqiZwV4Ffz7JyrONmXXFegoYgupt:1pENF7VEFhVOp6VUFqV46OQXXwVuP
- TLSH T12AD1C02AD5299DDB52BDA3B069A88717E835136B50640C5F37BC1C8C8F3312B0586E6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\prap-2.json
- Size 1KB
- SHA256 40fafff7d00fe52efa4e0c0e6ef30a6844fa50b5b638b9d96e7ce43b491c6b3e
- MD5 408574c6d15181632148d730bbffb50f
- SHA1 b644cc6f50ad666b44c2a91497fd13d4f7c85808
- SHA512 32443d7c1bec39fb240728c8804f99396871fec9e0b9cf08e5ad56336b191176f8056e4b99db33c09c52486e960f6667a75bc5abba8b05aff4cbdd5c076fae52
- TLSH T13821993AD4255EAB41F5A370A9B9D603F55653AF6141080B3A7C2A1C8F3B8371980F2D
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Topaz Labs LLC\Topaz Video AI\models\prap-3.json
- Size 2KB
- SHA256 af76c195e9b18ae800ce1201f6fcc98d77349681a4d4ad077ae75db54efd6cb2
- MD5 63ee3933c90a892874c17f024b7c5b94
- SHA1 9b32a5866a9a445e24e22a69a9c7c213e56b7733
- SHA512 88d4e97baaa136b3b5ec5324e6a905a2be35cc71844e2dd1edd174d2cebbff927a571ef2ad5fc2410b813a0e61d33f039b4356b8cd6be4279eeec9f2705193b8
- TLSH T1C641C129E0685E6B41B96374B9F88707EBD5432F6011284B3F7C595C4F3B8329985F2E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
- Size 599B
- SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
- MD5 658ab8c32d4cc5deb36ac5f63da4658b
- SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
- SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
- TLSH T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI7A61.tmp
- Size 1.0MB
- SHA256 01950f1aa4851de5b80d440a4908a56c04023571cbf17585222f12c885a430d1
- MD5 b1e4db146e83ad1a356012c86236886d
- SHA1 7530e3bdeda240e9886c1a6afa969c17133ceae2
- SHA512 41a2e4f81233065c93566a8e589d04c26be8d428027c06c97921741f625947a59c34d635acc64da07e46b89bf763e9c952b340160d842b4307e5d18160e0eb52
- SSDEEP 12288:Mp1RS8Qqw4UU5trxLNudfTAgG59otUjOn9ERaAj7h4HvQ2kC739McjgxegwPaTQ3:WVHaMcjEepaTQNDtYkC+SO
- TLSH T1F8357C66339C4255E17B917CCAC74B0ADAB2740643219BCF45A487AE2F27BF41E3B760
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSIC8F0.tmp
- Size 113KB
- SHA256 aecd2d2fe766f6d439acc2bbf1346930ecc535012cf5ad7b3273d2875237b7e7
- MD5 4fdd16752561cf585fed1506914d73e0
- SHA1 f00023b9ae3c8ce5b7bb92f25011eaebe6f9d424
- SHA512 3695e7eb1e35ec959243a91ab5b4454eb59aeef0f2699aa5de8e03de8fbb89f756a89130526da5c08815408cb700284a17936522ad2cad594c3e6e9d18a3f600
- SSDEEP 1536:YImZwomOndvrhsgz56GoiFmntw1ebC0fsWk0FlcdOJKJpPpxyNokVbY4:jewOdvregz5L/mxb7FUOsrPpxyN7/
- TLSH T19EB37C1275D0C072E8BE0E3D45748A715F7E7930EF648AEB635812694FB42C0AE39E67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\MSI29ED.tmp
- Size 154KB
- SHA256 233f5e43325615710ca1aa580250530e06339def861811073912e8a16b058c69
- MD5 b2e2c24ebce4f188cf28b9e1470227f5
- SHA1 9de61721326d8e88636f9633aa37fcb885a4babe
- SHA512 343ea590c7f6b682b3b3e27fd4ab10ffeded788c08000c6dd1e796203f07bf9f8c65d64e9d4b17ce0da8eb17aaf1bd09c002359a89a7e5ab09cf2cb2960e7354
- SSDEEP 3072:cdwZIkRi/1Aj8wqnIbDkjJwWhEWvLn6ow0v2Je+Bxw+WH:cd5+i/HwqI/k1FCWzWhXq
- TLSH T1CBF36C1773E4107BE5B6C674C8635916EB76B8112720DB9F0364427A1F23791BE3AB32
- MD5 SHA1 SHA512 SSDEEP TLSH