The Topaz Video Frame Interpolation aex File Malware Analysis

Technical Analysis

File Name	Topaz Video Frame Interpolation.aex
File Type	PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-11-28 03:00:30 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	ad0b7afacf427cb22c082caea33c48d6
SHA1	1be0e450e53d3702e83127c39d03a659c13aae7d
SHA256	796ffed33305a7b63735ac0b77f3923d15bb5ee79959d0e0e0f351dc7fb21ee2
SHA512	0775b152e2b87d62ce9631f95be8c2fc7819a2d5ffeb9e96c9e9afab7797dab15cf79fc8759cd4e3a4c0565d46242869c09c4aedc28758b235da357c3cfcea08
ImpHash	f38ebcbebf64def53983dadeff4f07c7

PE Analysis

Basic Information

▼

Image Base	`0x180000000`
Entry Point	`0x180055250`
Compilation Time	2025-11-04 19:18:16
Checksum	0x00000000 (Actual: 0x0007c2e9)
OS Version	6.0
PEiD Signatures	`PE32+ executable (DLL) (console) x86-64, for MS Windows`
PDB Path	`C:\a\_work\1\b\build\aeplugin\RelWithDebInfo\Topaz Video Frame Interpolation.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	15 libraries
Exports	2 functions
Resources	2 Resources
Sections	6 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	367,103 bytes	367,104 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BA33323827FD5BFA99C359C41AA39357`
`.rdata`	`0x0005b000`	74,852 bytes	75,264 bytes	5.66 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`648F3D719C7A137F1C51954B73A5AC00`
`.data`	`0x0006e000`	6,672 bytes	4,096 bytes	2.96 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FA28FEE0CB3CE295AA9D5DDE79BED0EC`
`.pdata`	`0x00070000`	14,904 bytes	15,360 bytes	5.63 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BF4A0EAA93F52C03E141B9A3A24BFB6A`
`.rsrc`	`0x00074000`	912 bytes	1,024 bytes	4.50 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`71B19BB780C2454A5CF6610DE7197B5F`
`.reloc`	`0x00075000`	328 bytes	512 bytes	3.80 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`2C25BD098B537A8310BBA20828346DEA`

Resource Analysis

▼

Total Resources: 2 (731 bytes)

Resource Type	Count	Total Size	Percentage
PIPL	1	350 bytes	47.9%
RT_MANIFEST	1	381 bytes	52.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Topaz Video Frame Interpolation.aex File Analysis