d6fd4c58a7d893a5bd63a60f4fc554386464e33434ed3445ee37aa1ef72464f3

Resubmissions

05/10/2023, 01:54

231005-cb1vqsgb5x 8

05/10/2023, 01:28

231005-bvzw4shh72 8

Analysis

max time kernel
52s
max time network
85s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2023, 01:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

iZotope Ozone Advanced v11.0.0 CE.exe
Size

158.6MB
MD5

87664d3be7414daf7f632fae3ad91016
SHA1

79b07b1a6e0d006512b361b110a650ec505704a4
SHA256

d6fd4c58a7d893a5bd63a60f4fc554386464e33434ed3445ee37aa1ef72464f3
SHA512

c29f88ea712c72c494205ed46534913c62fd8664c4614e5c3fb83c81e8059a3573e786be7fb4cb5be6e08ca4c56d9aefcc6a34e71a2c735ef5ac41332b670137
SSDEEP

3145728:x8tpZk+cNvGcOPUlNUFQvfN+1lkx4/FnN3+6h4y9sxmq8EHtXvCVn8HjuYpe+zkK:xEcNehcPN+dJVjBsxm0QVn6NIK

Score

8^/10

discovery evasion

Malware Config

Signatures

Sets file to hidden 1 TTPs 2 IoCs

Modifies file attributes to stop it showing in Explorer etc.

evasion

Hidden Files and Directories

T1564.001

pid	Process
1860	attrib.exe
1328	attrib.exe

Executes dropped EXE 1 IoCs

pid	Process
2408	iZotope Ozone Advanced v11.0.0 CE.tmp

Loads dropped DLL 1 IoCs

pid	Process
2408	iZotope Ozone Advanced v11.0.0 CE.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 39 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\VST3\iZotope\desktop.ini	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\desktop.ini	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini	attrib.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Native Instruments\Service Center\is-J6QQF.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\PlugIn.ico	attrib.exe
File created	C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-ODURU.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\NKS\PAResources\image\iZotope\Ozone 11 Exciter\is-QTJTS.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Imager Presets\is-S8T7L.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Clarity\Presets\Clarity Presets\is-R5R3M.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-FLGP0.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Vintage Tape\Presets\Vintage Tape Presets\is-OVS1A.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\Contents\x64\is-DNA6C.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Expert Curated Presets\Sylvia Massy\is-TUT4A.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Mix Bus\is-2EU38.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Impact Presets\is-K9S6M.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Imager\Presets\Imager Presets\is-4KEE3.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Impact\Presets\Impact Presets\is-TV14D.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Vintage Tape Presets\is-SAD24.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-QF90I.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Spectral Shaper\NKS\PAResources\dist_database\iZotope\Ozone 11 Spectral Shaper\is-HV2SS.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Imager\NKS\Presets\is-IOFLC.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Maximizer\NKS\Presets\is-EARA5.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Genre-Specific Mastering\is-R4QLG.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Instruments and Busses\is-TKUNQ.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Spectral Shaper Presets\is-7S6SL.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Cores\is-C35J2.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Stabilizer\Resources\Target Curves\is-8NDJ1.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\All-Purpose Mastering\is-BPEG3.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Equalizer\Presets\EQ Presets\is-30V4L.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Dynamics\NKS\PAResources\image\iZotope\Ozone 11 Dynamics\is-857N3.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\Contents	attrib.exe
File created	C:\Program Files\Common Files\VST3\iZotope\is-OQ7NB.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Dynamics\NKS\Presets\is-7VQ01.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Stabilizer Presets\is-67LFI.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\PlugIn.ico	attrib.exe
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini	attrib.exe
File created	C:\Program Files\iZotope\Ozone Vintage Compressor\NKS\Presets\is-NCRIA.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Vintage EQ\NKS\PAResources\image\iZotope\Ozone 11 Vintage EQ\is-B4T56.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Dynamics Presets\is-M7H81.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Genre-Specific Mastering\is-HU9F1.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Dynamics\Presets\Dynamics Presets\is-06MA0.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Master Rebalance\Presets\Master Rebalance Presets\is-E0IOC.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Instruments and Busses\is-H52TT.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Match EQ Presets\is-52DBH.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\Common Files\VST3\iZotope\is-GE49J.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Resources\Target Curves\is-3SIRS.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Vintage Compressor\NKS\PAResources\dist_database\iZotope\Ozone 11 Vintage Compressor\is-AV50M.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-E690M.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\All Purpose Mastering\is-VJ69O.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Genre-Specific Mastering\is-DU894.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-5NIKD.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Stabilizer\Presets\Stabilizer Presets\is-6HNCI.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\PlugIn.ico	attrib.exe
File created	C:\Program Files\iZotope\Ozone Vintage Tape\Presets\Vintage Tape Presets\is-JVPOM.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Vintage Tape\Presets\Vintage Tape Presets\is-KQLQF.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\Exciter Cache\is-5B4FD.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-DH6B3.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Vintage Compressor\NKS\Presets\is-9GHBT.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Expert Curated Presets\Pete Lyman\is-5UKIR.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Instruments and Busses\is-1B04E.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Clarity\Presets\Clarity Presets\is-Q970I.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\Common Files\Native Instruments\Service Center\is-937I1.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\Common Files\Native Instruments\Service Center\is-NADVC.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\PlugIn.ico	attrib.exe
File created	C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Genre-Specific Mastering\is-AS0UO.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone Stabilizer\Presets\Stabilizer Presets\is-R1IC2.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp
File created	C:\Program Files\iZotope\Ozone\Exciter Cache\is-QU3KL.tmp	iZotope Ozone Advanced v11.0.0 CE.tmp

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2408	iZotope Ozone Advanced v11.0.0 CE.tmp
2408	iZotope Ozone Advanced v11.0.0 CE.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2408	iZotope Ozone Advanced v11.0.0 CE.tmp

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 3488 wrote to memory of 2408	3488	iZotope Ozone Advanced v11.0.0 CE.exe	90
PID 3488 wrote to memory of 2408	3488	iZotope Ozone Advanced v11.0.0 CE.exe	90
PID 3488 wrote to memory of 2408	3488	iZotope Ozone Advanced v11.0.0 CE.exe	90
PID 2408 wrote to memory of 988	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	102
PID 2408 wrote to memory of 988	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	102
PID 2408 wrote to memory of 1860	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	104
PID 2408 wrote to memory of 1860	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	104
PID 2408 wrote to memory of 1328	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	106
PID 2408 wrote to memory of 1328	2408	iZotope Ozone Advanced v11.0.0 CE.tmp	106

Views/modifies file attributes 1 TTPs 3 IoCs

evasion

Hidden Files and Directories

T1564.001

pid	Process
988	attrib.exe
1860	attrib.exe
1328	attrib.exe

C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe
"C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3488
- C:\Users\Admin\AppData\Local\Temp\is-5SB44.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-5SB44.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp" /SL5="$901D8,165329028,857088,C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2408
- - C:\Windows\system32\attrib.exe
    "C:\Windows\system32\attrib.exe" +r /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*"
    3⤵
    - Drops desktop.ini file(s)
    - Drops file in Program Files directory
    - Views/modifies file attributes
    PID:988
- - C:\Windows\system32\attrib.exe
    "C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*.ini"
    3⤵
    - Sets file to hidden
    - Drops desktop.ini file(s)
    - Views/modifies file attributes
    PID:1860
- - C:\Windows\system32\attrib.exe
    "C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*.ico"
    3⤵
    - Sets file to hidden
    - Drops file in Program Files directory
    - Views/modifies file attributes
    PID:1328

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\Plugin.ico

Filesize
159KB

MD5
55699801204480d42551f47a594bcf60

SHA1
aec5b26f24b07ee9e02f29586ace406017c3cb6d

SHA256
42c04f5b9c0a0d2c15bc5682e4dfc0fc211e4d3321a5275e975bd3a52ee68577

SHA512
08897b59dc1799269695d716f9b2d11d830226134ef1cedd16fa1c024965d1830532ec941126d6c7df58315d6cb8869651a2ecb2cca57c1b715038d42bfec37a

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\Contents\x64\iZOzone11AAXHook.aaxplugin

Filesize
2.0MB

MD5
28089d08f31efa691a403a4e028f22d4

SHA1
747fb312c9a7e584b7dc11eeab812248221b6c11

SHA256
3b589a3866a5c9888e34cfe45df63dd0f2e735721fda5b44bdb2e2a470413c36

SHA512
15508cf8b569319668097c55dcaad162affd669150a127566abd9fb380968762ffae1f3298d575c6c893927ba2d249409329f9fa8c266ecbaaca1d97e8a175bf

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\Contents\x64\iZOzone11ClarityAAXHook.aaxplugin

Filesize
2.0MB

MD5
09755544702dca719411484948dc4aee

SHA1
ab405ed57dec11d5b0f6a88aad4be55d34d07bab

SHA256
0a09384b80c7237bb3816bebee5022b1f70a7559443531a06bb499f1d95ddc45

SHA512
49b7ce89880198eca73a626d1a43e047d409093f1e38807cb3541d619fd58cd20c3b9f0bc3e8271dc6cd983ca6991d14eb9f0698a59aebd0f5db0b29b3061060

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\Contents\x64\iZOzone11DynamicEQAAXHook.aaxplugin

Filesize
2.0MB

MD5
ff13f5a62654f5cea56f96008ef1a95d

SHA1
49218a870e727def207841428eb3248a919c2bf9

SHA256
c407e2a8eb18c8e2d3c4d9d886eb33b0efc1a2ef71873eea72a9fe7b59cb2452

SHA512
a3bcbe514ee336dbb3f17c64f6c7a871b24588c02667fc87c889ff8a649b8a34d0d08c50d95b1af3b1f8b6b6155224cfb90ba18381187a0e796a34136b622dc8

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\Contents\x64\iZOzone11DynamicsAAXHook.aaxplugin

Filesize
2.0MB

MD5
1a0714f7bcdb31b72624acb6d64b2db9

SHA1
38e880e79f743c4e536cb889bb1ba77f07bfef45

SHA256
cf01bfd19478fd7c65f85a4055e513c4dc68adbbfff7175e0d205c9fd406e2a6

SHA512
1af8c592b130230e52a5e738a9cf8fa754356ee8777de191a852affb76f4912965b8a73ee038ad0be1feb50a79f3a8d9be02309a9d4b20d8aae44fa992a101d9

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\Contents\x64\iZOzone11EqualizerAAXHook.aaxplugin

Filesize
2.0MB

MD5
8f2ce4571c591c760c9aefe94175a107

SHA1
a36d66960de9d759cdf29882df57b6f39b51a4d4

SHA256
180b9866fbdff92d23109a3b3596b9ebb80eb61e14d9255344464beca7fd9a5e

SHA512
8fe41a4b4c0801f89e0217e27371fc6848dc377f21a80d4bc331243939f63cd6d5d5f4ac624cf3a080bfd84462074696ee59c26914d2a319ba4afa855bbc9827

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\Contents\x64\iZOzone11ExciterAAXHook.aaxplugin

Filesize
2.0MB

MD5
de2519bad0a02b611b6bb8d181d59114

SHA1
dd0c586db620eb1cfd0cedade94aaa8fd47fe74c

SHA256
e05bcfaac57b2d598b0ecfc32dfd69e30dfb8db11d2fb630982b23c9f73c7603

SHA512
53507fbe5a2405669f1b5bfc16f90b6c0c2ec4659a87151f337180e247349f5d2a154a23f60f6ce58ee3d633c9ce9e2baead5c3c2f64bf577df240b49820f948

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\Contents\x64\iZOzone11ImagerAAXHook.aaxplugin

Filesize
2.0MB

MD5
c38ad70189f33311c108932c35dc6875

SHA1
7dec1d8872adbae000bd677979f9bf348b9557e3

SHA256
374f4515eecb572573a7fd1cfb9fa1962b8d92986ed1f0db4c76bc05f93cc152

SHA512
66398aa76ff97684c1c93e345b6514063686b0d6062220a9d823b89eb99da24d140e2f996ef388c0e7b68d1d7c7db031ed9e4d916803ea10f8d5707e82e2c812

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\Contents\x64\iZOzone11ImpactAAXHook.aaxplugin

Filesize
2.0MB

MD5
d6caa62857d33bb7daf6b1e19216dff7

SHA1
86b58b188975e9dd5fba755bd8755be5de39e211

SHA256
435286dc9bbc49e07f2479d74cba6872cd8cfc1ded8a051eca5a0dfa124a0f58

SHA512
2214445bcb6ec57087172ef5af1aa86778746873a783f3f13ede1f66b9782c71461117e99534488c1bcf084e1de4f9e32b92151d1b08a7e70b5a7be61fbbef0f

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\Contents\x64\iZOzone11LowEndFocusAAXHook.aaxplugin

Filesize
2.0MB

MD5
423cf021872e0f56c223b5ce2d543451

SHA1
f72aec056788e4b73b46b5b598f001b7fbb1ebb9

SHA256
2fdcff3a902cfb040700c3bf6ef22d89f76dcc37171f51913536696afdbb3776

SHA512
3e3e5b190ccc6d2ff4be357f75d8aa94fcc5185dddde770cd0eba76403a27669b926deb96956f97f0910503c79bc33ce42bb4dbefdf1eaaab0090ef3d3b2d5c4

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\Contents\x64\iZOzone11MasterRebalanceAAXHook.aaxplugin

Filesize
2.0MB

MD5
bfd9c5c92e3d766c39baf24c3a7a5870

SHA1
408177f4c6222dccc9fe38d463b9d5ebe96e7d0c

SHA256
5f1fbcbbcc78aa975fd47146bdd831955e530cf3bfef4df30110890f4ca3a49b

SHA512
a621ed48ee556e7311a4920c6826df1a6ee069882af9b6ec8d1939d40692c9bb3216b58f58b923566fbad3276346f90396f94b942a0182de5e5ee53323f87e51

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\Contents\x64\iZOzone11MatchEQAAXHook.aaxplugin

Filesize
2.0MB

MD5
4007612139848166f80bfba14ce79e16

SHA1
0573f0b96a8e0dc26e5fdcbdaa79efc0f4074cf9

SHA256
35c7392545ad4529d67d695dea7a082b3f9a6976248212b4ddf720e04b7a4d7d

SHA512
f40da20172256ee96698315d08d7fbe998780efc76714597fffc8db43315e03b752556347f6e3fb45c2794c6a198093274c8428edaf314f83300a572e41a9cf2

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\Contents\x64\iZOzone11MaximizerAAXHook.aaxplugin

Filesize
2.0MB

MD5
d9b83679c0bad31650114cc47bb1b1cb

SHA1
b9c50f8a9b5f7243e193477341710d29f4a71d6e

SHA256
94c06eecef4767be5cdbc574b9cae199d2a0a7c7553153ae5b3d84a909834a35

SHA512
0e2cb2f7db71bb75abce32748c79541f08b354da68e95ae63d2f1e7d87accb824d017b88b4ce36f326eb859364bcaaa1a610f9f8362d20aa4ff1a45e4451ba4e

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\Contents\x64\iZOzone11SpectralShaperAAXHook.aaxplugin

Filesize
2.0MB

MD5
e4ebc5fd41aa5eed7550c6efd8dab9aa

SHA1
177ebc94b0163f550cff96eaf22d286681872208

SHA256
d3cc826c44da1aa63643d49a987b4f9b7cd0498ecfbaf4e69ae743c13ef473e5

SHA512
bdfcb9c8d0a151189e3550b0762682b00c675e08deedc973175dbabd288121489a5fd2a50f326037843f3e27faee03a64ca3414526981b5be8a05a18a7795817

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\Contents\x64\iZOzone11StabilizerAAXHook.aaxplugin

Filesize
2.0MB

MD5
9ced692ec1976c304bc90ab4530e34ad

SHA1
0eb849fb283991123ce8b271d856a18441b0b513

SHA256
d967ea45cd1dfbe07ed192280c85f74c048305d2705f71dfcc76861b2cd9f12d

SHA512
a07312e9139aa63936768ab343919385914054ffb3cb9e188d938808e6f93f9e137e769a49634419aead54ad208e25a3432b108dd63dc3ee113e2cfcc12e880c

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\Contents\x64\iZOzone11VintageCompressorAAXHook.aaxplugin

Filesize
2.0MB

MD5
de27ed3c0805e7613b5fef27ed7b50f4

SHA1
a5f101f4bf32cf842adb0714281ff48bea4498d8

SHA256
a084a1d345ab438a358c0313dcbbb6e0e822edf2daf32cb3977111cf17da41ad

SHA512
bef3e3d7cf1db4a0fbe5eb4287a53c01c8c62628c4c4e79c31ba2d5c46e8db7ea3431d1489a5370417ed39139b9c8375b188491c9a69f1263ad093cdbe0d4369

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\Contents\x64\iZOzone11VintageEQAAXHook.aaxplugin

Filesize
2.0MB

MD5
1a0456a7f438a04c7312d0c5a94b6361

SHA1
11360f312834af902395689c63925bbde64392d1

SHA256
4d51c916e7eedbacfa0ed25adcd4d6a0ae639eaf4037e827cd8992586ead39b9

SHA512
6ac4e3c50fa41505d62a69ec773fd0e33142f9a632606692aecbc9b39b6786143145b6534f025b17aad643ce611a2d0d7ff41b261671a8237248f208f929ea4a

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\Contents\x64\iZOzone11VintageLimiterAAXHook.aaxplugin

Filesize
2.0MB

MD5
e1d87bf9c87de3ab1daeaf216856f9ad

SHA1
42ed56da5115a65bd1273bad63c01203a0910ec9

SHA256
d9f8c274bd4080e6798b5951873fdf3b60ad86c87a5baf4e6b9b7abfaed5c03c

SHA512
3992e7997e47443f47bf9db164327eaa8b775f1b9b52c560198c69d43e166958992e00a3e117709d0bedef9477ef7cd4506f9a37fa0f6d291d494b57e354bba0

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\Contents\x64\iZOzone11VintageTapeAAXHook.aaxplugin

Filesize
2.0MB

MD5
fc0105de0dd0c7da0e6c39444e393b55

SHA1
512eaead8a95d9b4c873ebb698ef22d9b7aa4b5b

SHA256
8adbaae6ba125e048a410407457860d493dc580797290855c9c044a41bac4dbe

SHA512
2ed6a44e2f8c310630b03434827e173492db7a7acf13ba1b5519623e75d8f9623aa73d05c30e4b0f89873465f6fdb796aefc0033b828eb6700044df692c392d2

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\PlugIn.ico

Filesize
78KB

MD5
717d1a50eb9d1a5e21366366002339f6

SHA1
9de166281af9d6ade14e12bda91e0271eb5c558c

SHA256
3edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f

SHA512
3ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7

Download Submit
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\VST3\iZotope\is-1VJ8T.tmp

Filesize
46B

MD5
ced966b256027c7576f4d08463bca394

SHA1
39c7ddf93498f447a6f0fdd1be3d91faac907e7d

SHA256
300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6

SHA512
3f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555

Download Submit
C:\Program Files\Common Files\VST3\iZotope\is-B8LD9.tmp

Filesize
2.0MB

MD5
226e02b15a191e33d63faeaacc4a00f6

SHA1
c57f2e3e395e182ca7ba39e7bc3d99d7499d7286

SHA256
56eb0ca05b030ea41047948a6fe44b815f8e8689fa4c03cd9550d91ecbe61bf1

SHA512
cfc97a96256e635b36b9c7c091bb78d295dcc19731dec42aeabec004e7e582990bf282f331ff03f7b248f4ed7c235fc7d044cfa202561f16b16f8c5be78353b7

Download Submit
C:\Program Files\Common Files\VST3\iZotope\is-C255O.tmp

Filesize
2.0MB

MD5
48d16c27e9fe30bb061b880f2ac1eb27

SHA1
55ebaa5c9b5417db1c2ba1552645021224e1b99a

SHA256
e0c569870534e51a8b2617c527d59b7eb6a12a7532e4df003a15f88ab88c527e

SHA512
44f131b141a19c0228a09948932ee7c932683727ba45fa4a060d6af8ab34fccd92d885d026425ad92a2679b9eb2131d2dace6614f50ebbff541174cd35efc996

Download Submit
C:\Program Files\Common Files\VST3\iZotope\is-OG65G.tmp

Filesize
159KB

MD5
55699801204480d42551f47a594bcf60

SHA1
aec5b26f24b07ee9e02f29586ace406017c3cb6d

SHA256
42c04f5b9c0a0d2c15bc5682e4dfc0fc211e4d3321a5275e975bd3a52ee68577

SHA512
08897b59dc1799269695d716f9b2d11d830226134ef1cedd16fa1c024965d1830532ec941126d6c7df58315d6cb8869651a2ecb2cca57c1b715038d42bfec37a

Download Submit
C:\Program Files\iZotope\Ozone Equalizer\NKS\PAResources\dist_database\iZotope\Ozone 11 Equalizer\is-3NRK5.tmp

Filesize
29B

MD5
5ac03a672e9bd1d491d0c7d0f17581c1

SHA1
53fed117a35815a111402c5cc9e814230b6ec6d7

SHA256
a2eb5e64ee82582f66e23ea176b0c06ff67c7b5b73b19c5036c918a7ad83be14

SHA512
45af9b571c0687eb352396d92cdcb628953466d920afcf0dbcef8015a46828eb1da09c0e6267b526ec37361cfa98a50075965d96ae85fb7a8f3faefcd687c76b

Download Submit
C:\Program Files\iZotope\Ozone\Resources\Target Curves\is-PCRNE.tmp

Filesize
783KB

MD5
b20b13fe3b83085e993376caeb3fe647

SHA1
739cb9f6597fd9e5b28754716349f764b5b86cda

SHA256
7ce68ae07d4a7e8005f29988f959dc10d7fd2e1459b9dbb14c97f1f8431f9bc9

SHA512
64b6c53f7fbdb66e2aa0d8b4f3c401954b89c4abfb78a433793de2b50daf8d5e6d0082df8e8218b362d06f5a9154a50e328c73b46a9799a0fc76eceb1d872aaa

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-5SB44.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp

Filesize
3.0MB

MD5
4c29c4ac9fb65c4c8d83e30ab84bde61

SHA1
1057582a7b05af19abb6dc8ca2ded842426571a0

SHA256
c9eddb818cbe1ed0546645ee16f4df039b423611218d105045c4a09e3d51f20e

SHA512
dc0ac44a175f83f7b36e9b804fa7efd112f411b1e5eabee8e009a2c1f91e1eed22d40c11d289497e3bb34b0ffd63cb64ed6a94baeed961e0b4b80f3e28e5d060

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-5SB44.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp

Filesize
3.0MB

MD5
4c29c4ac9fb65c4c8d83e30ab84bde61

SHA1
1057582a7b05af19abb6dc8ca2ded842426571a0

SHA256
c9eddb818cbe1ed0546645ee16f4df039b423611218d105045c4a09e3d51f20e

SHA512
dc0ac44a175f83f7b36e9b804fa7efd112f411b1e5eabee8e009a2c1f91e1eed22d40c11d289497e3bb34b0ffd63cb64ed6a94baeed961e0b4b80f3e28e5d060

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-8U76D.tmp\_isetup\_iscrypt.dll

Filesize
2KB

MD5
a69559718ab506675e907fe49deb71e9

SHA1
bc8f404ffdb1960b50c12ff9413c893b56f2e36f

SHA256
2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

SHA512
e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

Download Submit
memory/2408-900-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/2408-12-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/2408-206-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/2408-2790-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/2408-6-0x0000000002820000-0x0000000002821000-memory.dmp

Filesize
4KB

Download
memory/2408-13-0x0000000002820000-0x0000000002821000-memory.dmp

Filesize
4KB

Download
memory/2408-3056-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/3488-11-0x0000000000400000-0x00000000004DE000-memory.dmp

Filesize
888KB

Download
memory/3488-1-0x0000000000400000-0x00000000004DE000-memory.dmp

Filesize
888KB

Download
memory/3488-3057-0x0000000000400000-0x00000000004DE000-memory.dmp

Filesize
888KB

Download