Analysis
-
max time kernel
143s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
05-10-2023 01:54
Static task
static1
Behavioral task
behavioral1
Sample
iZotope Ozone Advanced v11.0.0 CE.exe
Resource
win7-20230831-en
General
-
Target
iZotope Ozone Advanced v11.0.0 CE.exe
-
Size
158.6MB
-
MD5
87664d3be7414daf7f632fae3ad91016
-
SHA1
79b07b1a6e0d006512b361b110a650ec505704a4
-
SHA256
d6fd4c58a7d893a5bd63a60f4fc554386464e33434ed3445ee37aa1ef72464f3
-
SHA512
c29f88ea712c72c494205ed46534913c62fd8664c4614e5c3fb83c81e8059a3573e786be7fb4cb5be6e08ca4c56d9aefcc6a34e71a2c735ef5ac41332b670137
-
SSDEEP
3145728:x8tpZk+cNvGcOPUlNUFQvfN+1lkx4/FnN3+6h4y9sxmq8EHtXvCVn8HjuYpe+zkK:xEcNehcPN+dJVjBsxm0QVn6NIK
Malware Config
Signatures
-
Sets file to hidden 1 TTPs 2 IoCs
Modifies file attributes to stop it showing in Explorer etc.
pid Process 4904 attrib.exe 3344 attrib.exe -
Executes dropped EXE 1 IoCs
pid Process 3428 iZotope Ozone Advanced v11.0.0 CE.tmp -
Loads dropped DLL 1 IoCs
pid Process 3428 iZotope Ozone Advanced v11.0.0 CE.tmp -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s) 39 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\desktop.ini iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\VST3\iZotope\desktop.ini iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini attrib.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\All-Purpose Mastering\is-FLSD1.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Impact Presets\is-EH627.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Match EQ Presets\is-G2UOV.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Spectral Shaper Presets\is-2OC5C.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Imager\NKS\PAResources\dist_database\iZotope\Ozone 11 Imager\is-6A9V3.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-4IHR5.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\NKS\PAResources\image\iZotope\Ozone 11 Exciter\is-FR610.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Imager\NKS\PAResources\image\iZotope\Ozone 11 Imager\is-AJKRR.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Vintage Limiter Presets\is-C4JSS.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Equalizer\Presets\EQ Presets\is-PRMTO.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-G3NAC.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-S2UES.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Limiter\NKS\PAResources\dist_database\iZotope\Ozone 11 Vintage Limiter\is-BS5JJ.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Maximizer\NKS\Presets\is-41E15.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Instruments and Busses\is-LHGOP.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Stabilizer Presets\is-G84B9.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini attrib.exe File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini attrib.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\is-KHMSU.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Mix Bus\is-JUJ4F.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\All-Purpose Mastering\is-DS5SQ.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Impact Presets\is-154HO.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Maximizer\NKS\Presets\is-SHGLM.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\All-Purpose Mastering\is-271MD.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\Presets\Exciter Presets\is-EPE16.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\Contents\x64\iZOzone11ImagerAAXHook.aaxplugin attrib.exe File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\All-Purpose Mastering\is-2SE88.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Ozone Legacy Presets\Genre-Specific Mastering\is-GDA2D.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini attrib.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\is-A2OO3.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\is-J5I6U.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Spectral Shaper\NKS\Presets\is-FRSJC.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\EQ Presets\is-LVGRO.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Impact\Presets\Impact Presets\is-KCKLQ.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Maximizer\Presets\Maximizer Presets\is-34E1P.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Compressor\Presets\Vintage Compressor Presets\is-6R0A5.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\is-8PMV4.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Tape\NKS\Presets\is-5BPCP.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Low End Focus Presets\is-7P134.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Clarity\Presets\Clarity Presets\is-SQ80A.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Maximizer Presets\is-7231R.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Spectral Shaper\Presets\Spectral Shaper Presets\is-KEGUO.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File opened for modification C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\Contents attrib.exe File created C:\Program Files\iZotope\Ozone Maximizer\NKS\Presets\is-5MPA9.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Spectral Shaper\NKS\PAResources\image\iZotope\Ozone 11 Spectral Shaper\is-H0BBA.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage EQ\NKS\PAResources\image\iZotope\Ozone 11 Vintage EQ\is-0IEFL.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Mix Bus\is-7IQA2.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Stabilizer\Resources\Target Curves\is-HMHD3.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Maximizer Presets\is-8HNQF.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Limiter\NKS\Presets\is-SIQ8C.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Tape\Presets\Vintage Tape Presets\is-7OFRO.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Equalizer\NKS\Presets\is-CQDC1.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-D99S4.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Imager\NKS\Presets\is-54EHU.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Maximizer\NKS\Presets\is-G1PAQ.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Expert Curated Presets\Greg Calbi\is-FMNHK.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Global Presets\Mix Bus\is-INIVV.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Master Rebalance Presets\is-3D4SG.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Limiter\Presets\Vintage Limiter Presets\is-7IH3A.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Exciter Cache\is-2S1UN.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\Exciter Cache\is-5RI52.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Exciter\NKS\Presets\is-6JQIH.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone\Presets\Dynamics Presets\is-268HB.tmp iZotope Ozone Advanced v11.0.0 CE.tmp File created C:\Program Files\iZotope\Ozone Vintage Tape\Presets\Vintage Tape Presets\is-ITRJS.tmp iZotope Ozone Advanced v11.0.0 CE.tmp -
Checks processor information in registry 2 TTPs 8 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe -
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3027552071-446050021-1254071215-1000_Classes\Local Settings firefox.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3428 iZotope Ozone Advanced v11.0.0 CE.tmp 3428 iZotope Ozone Advanced v11.0.0 CE.tmp -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2276 firefox.exe Token: SeDebugPrivilege 2276 firefox.exe -
Suspicious use of FindShellTrayWindow 17 IoCs
pid Process 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 3428 iZotope Ozone Advanced v11.0.0 CE.tmp -
Suspicious use of SendNotifyMessage 15 IoCs
pid Process 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe 2276 firefox.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2276 firefox.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 536 wrote to memory of 3428 536 iZotope Ozone Advanced v11.0.0 CE.exe 90 PID 536 wrote to memory of 3428 536 iZotope Ozone Advanced v11.0.0 CE.exe 90 PID 536 wrote to memory of 3428 536 iZotope Ozone Advanced v11.0.0 CE.exe 90 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 116 wrote to memory of 2276 116 firefox.exe 102 PID 2276 wrote to memory of 4228 2276 firefox.exe 103 PID 2276 wrote to memory of 4228 2276 firefox.exe 103 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 PID 2276 wrote to memory of 4604 2276 firefox.exe 104 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
-
Views/modifies file attributes 1 TTPs 3 IoCs
pid Process 3048 attrib.exe 4904 attrib.exe 3344 attrib.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe"C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:536 -
C:\Users\Admin\AppData\Local\Temp\is-C3OKC.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp"C:\Users\Admin\AppData\Local\Temp\is-C3OKC.tmp\iZotope Ozone Advanced v11.0.0 CE.tmp" /SL5="$A01FC,165329028,857088,C:\Users\Admin\AppData\Local\Temp\iZotope Ozone Advanced v11.0.0 CE.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:3428 -
C:\Windows\system32\attrib.exe"C:\Windows\system32\attrib.exe" +r /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*"3⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Views/modifies file attributes
PID:3048
-
-
C:\Windows\system32\attrib.exe"C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*.ini"3⤵
- Sets file to hidden
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Views/modifies file attributes
PID:4904
-
-
C:\Windows\system32\attrib.exe"C:\Windows\system32\attrib.exe" +s +h /s /d "C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\*.ico"3⤵
- Sets file to hidden
- Views/modifies file attributes
PID:3344
-
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:116 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"2⤵
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2276 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.0.1108177096\1526881045" -parentBuildID 20221007134813 -prefsHandle 1880 -prefMapHandle 1872 -prefsLen 20938 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a4bdd28-8eea-4c03-b919-9f23823eb276} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 1960 22a106d8458 gpu3⤵PID:4228
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.1.426594692\1457402572" -parentBuildID 20221007134813 -prefsHandle 2332 -prefMapHandle 2328 -prefsLen 20974 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6163eb8f-edb8-4bca-af81-085f082a4e4c} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 2360 22a101eef58 socket3⤵
- Checks processor information in registry
PID:4604
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.2.1960878729\197242520" -childID 1 -isForBrowser -prefsHandle 3232 -prefMapHandle 3228 -prefsLen 21077 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {29c7aa61-8030-46b5-932e-93e97b722e19} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 3240 22a144acc58 tab3⤵PID:1388
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.3.283093890\1476569675" -childID 2 -isForBrowser -prefsHandle 3604 -prefMapHandle 3600 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {67319379-b430-4e09-946b-37898747d116} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 3608 22a03b68158 tab3⤵PID:5056
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.4.640741157\604087256" -childID 3 -isForBrowser -prefsHandle 4468 -prefMapHandle 3968 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b288c134-0cd9-4aac-b658-e7726172dce6} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 4480 22a15a24458 tab3⤵PID:4432
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.5.401860444\2137790473" -childID 4 -isForBrowser -prefsHandle 5180 -prefMapHandle 5184 -prefsLen 26656 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c4cf735c-627b-4d5b-9ff0-b6a1fd4076cd} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 5140 22a15a26858 tab3⤵PID:4076
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.7.1044821479\1914016407" -childID 6 -isForBrowser -prefsHandle 5532 -prefMapHandle 5528 -prefsLen 26656 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a21c9b32-1b69-458e-a286-0cc970620175} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 5444 22a16eb3e58 tab3⤵PID:1856
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.6.1798005440\137879415" -childID 5 -isForBrowser -prefsHandle 5380 -prefMapHandle 5324 -prefsLen 26656 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9f49dd2-ec0a-47f3-beb5-96055e97abee} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 5372 22a168ca858 tab3⤵PID:2280
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2276.8.566512080\745122367" -childID 7 -isForBrowser -prefsHandle 4596 -prefMapHandle 4592 -prefsLen 26656 -prefMapSize 232675 -jsInitHandle 1048 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3777a084-4bb7-4349-bada-ea0c7d6e23c5} 2276 "\\.\pipe\gecko-crash-server-pipe.2276" 4604 22a14aaca58 tab3⤵PID:5492
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
159KB
MD555699801204480d42551f47a594bcf60
SHA1aec5b26f24b07ee9e02f29586ace406017c3cb6d
SHA25642c04f5b9c0a0d2c15bc5682e4dfc0fc211e4d3321a5275e975bd3a52ee68577
SHA51208897b59dc1799269695d716f9b2d11d830226134ef1cedd16fa1c024965d1830532ec941126d6c7df58315d6cb8869651a2ecb2cca57c1b715038d42bfec37a
-
Filesize
46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11AAXHook.aaxplugin\Contents\x64\iZOzone11AAXHook.aaxplugin
Filesize2.0MB
MD528089d08f31efa691a403a4e028f22d4
SHA1747fb312c9a7e584b7dc11eeab812248221b6c11
SHA2563b589a3866a5c9888e34cfe45df63dd0f2e735721fda5b44bdb2e2a470413c36
SHA51215508cf8b569319668097c55dcaad162affd669150a127566abd9fb380968762ffae1f3298d575c6c893927ba2d249409329f9fa8c266ecbaaca1d97e8a175bf
-
Filesize
78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
Filesize
46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\Contents\x64\iZOzone11ClarityAAXHook.aaxplugin
Filesize2.0MB
MD509755544702dca719411484948dc4aee
SHA1ab405ed57dec11d5b0f6a88aad4be55d34d07bab
SHA2560a09384b80c7237bb3816bebee5022b1f70a7559443531a06bb499f1d95ddc45
SHA51249b7ce89880198eca73a626d1a43e047d409093f1e38807cb3541d619fd58cd20c3b9f0bc3e8271dc6cd983ca6991d14eb9f0698a59aebd0f5db0b29b3061060
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ClarityAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\Contents\x64\iZOzone11DynamicEQAAXHook.aaxplugin
Filesize2.0MB
MD5ff13f5a62654f5cea56f96008ef1a95d
SHA149218a870e727def207841428eb3248a919c2bf9
SHA256c407e2a8eb18c8e2d3c4d9d886eb33b0efc1a2ef71873eea72a9fe7b59cb2452
SHA512a3bcbe514ee336dbb3f17c64f6c7a871b24588c02667fc87c889ff8a649b8a34d0d08c50d95b1af3b1f8b6b6155224cfb90ba18381187a0e796a34136b622dc8
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicEQAAXHook.aaxplugin\is-LIT77.tmp
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\Contents\x64\iZOzone11DynamicsAAXHook.aaxplugin
Filesize2.0MB
MD51a0714f7bcdb31b72624acb6d64b2db9
SHA138e880e79f743c4e536cb889bb1ba77f07bfef45
SHA256cf01bfd19478fd7c65f85a4055e513c4dc68adbbfff7175e0d205c9fd406e2a6
SHA5121af8c592b130230e52a5e738a9cf8fa754356ee8777de191a852affb76f4912965b8a73ee038ad0be1feb50a79f3a8d9be02309a9d4b20d8aae44fa992a101d9
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11DynamicsAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\Contents\x64\iZOzone11EqualizerAAXHook.aaxplugin
Filesize2.0MB
MD58f2ce4571c591c760c9aefe94175a107
SHA1a36d66960de9d759cdf29882df57b6f39b51a4d4
SHA256180b9866fbdff92d23109a3b3596b9ebb80eb61e14d9255344464beca7fd9a5e
SHA5128fe41a4b4c0801f89e0217e27371fc6848dc377f21a80d4bc331243939f63cd6d5d5f4ac624cf3a080bfd84462074696ee59c26914d2a319ba4afa855bbc9827
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11EqualizerAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\Contents\x64\iZOzone11ExciterAAXHook.aaxplugin
Filesize2.0MB
MD5de2519bad0a02b611b6bb8d181d59114
SHA1dd0c586db620eb1cfd0cedade94aaa8fd47fe74c
SHA256e05bcfaac57b2d598b0ecfc32dfd69e30dfb8db11d2fb630982b23c9f73c7603
SHA51253507fbe5a2405669f1b5bfc16f90b6c0c2ec4659a87151f337180e247349f5d2a154a23f60f6ce58ee3d633c9ce9e2baead5c3c2f64bf577df240b49820f948
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ExciterAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\Contents\x64\iZOzone11ImagerAAXHook.aaxplugin
Filesize2.0MB
MD5c38ad70189f33311c108932c35dc6875
SHA17dec1d8872adbae000bd677979f9bf348b9557e3
SHA256374f4515eecb572573a7fd1cfb9fa1962b8d92986ed1f0db4c76bc05f93cc152
SHA51266398aa76ff97684c1c93e345b6514063686b0d6062220a9d823b89eb99da24d140e2f996ef388c0e7b68d1d7c7db031ed9e4d916803ea10f8d5707e82e2c812
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImagerAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\Contents\x64\iZOzone11ImpactAAXHook.aaxplugin
Filesize2.0MB
MD5d6caa62857d33bb7daf6b1e19216dff7
SHA186b58b188975e9dd5fba755bd8755be5de39e211
SHA256435286dc9bbc49e07f2479d74cba6872cd8cfc1ded8a051eca5a0dfa124a0f58
SHA5122214445bcb6ec57087172ef5af1aa86778746873a783f3f13ede1f66b9782c71461117e99534488c1bcf084e1de4f9e32b92151d1b08a7e70b5a7be61fbbef0f
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11ImpactAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\Contents\x64\iZOzone11LowEndFocusAAXHook.aaxplugin
Filesize2.0MB
MD5423cf021872e0f56c223b5ce2d543451
SHA1f72aec056788e4b73b46b5b598f001b7fbb1ebb9
SHA2562fdcff3a902cfb040700c3bf6ef22d89f76dcc37171f51913536696afdbb3776
SHA5123e3e5b190ccc6d2ff4be357f75d8aa94fcc5185dddde770cd0eba76403a27669b926deb96956f97f0910503c79bc33ce42bb4dbefdf1eaaab0090ef3d3b2d5c4
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11LowEndFocusAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\Contents\x64\iZOzone11MasterRebalanceAAXHook.aaxplugin
Filesize2.0MB
MD5bfd9c5c92e3d766c39baf24c3a7a5870
SHA1408177f4c6222dccc9fe38d463b9d5ebe96e7d0c
SHA2565f1fbcbbcc78aa975fd47146bdd831955e530cf3bfef4df30110890f4ca3a49b
SHA512a621ed48ee556e7311a4920c6826df1a6ee069882af9b6ec8d1939d40692c9bb3216b58f58b923566fbad3276346f90396f94b942a0182de5e5ee53323f87e51
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MasterRebalanceAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\Contents\x64\iZOzone11MatchEQAAXHook.aaxplugin
Filesize2.0MB
MD54007612139848166f80bfba14ce79e16
SHA10573f0b96a8e0dc26e5fdcbdaa79efc0f4074cf9
SHA25635c7392545ad4529d67d695dea7a082b3f9a6976248212b4ddf720e04b7a4d7d
SHA512f40da20172256ee96698315d08d7fbe998780efc76714597fffc8db43315e03b752556347f6e3fb45c2794c6a198093274c8428edaf314f83300a572e41a9cf2
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MatchEQAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\Contents\x64\iZOzone11MaximizerAAXHook.aaxplugin
Filesize2.0MB
MD5d9b83679c0bad31650114cc47bb1b1cb
SHA1b9c50f8a9b5f7243e193477341710d29f4a71d6e
SHA25694c06eecef4767be5cdbc574b9cae199d2a0a7c7553153ae5b3d84a909834a35
SHA5120e2cb2f7db71bb75abce32748c79541f08b354da68e95ae63d2f1e7d87accb824d017b88b4ce36f326eb859364bcaaa1a610f9f8362d20aa4ff1a45e4451ba4e
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11MaximizerAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\Contents\x64\iZOzone11SpectralShaperAAXHook.aaxplugin
Filesize2.0MB
MD5e4ebc5fd41aa5eed7550c6efd8dab9aa
SHA1177ebc94b0163f550cff96eaf22d286681872208
SHA256d3cc826c44da1aa63643d49a987b4f9b7cd0498ecfbaf4e69ae743c13ef473e5
SHA512bdfcb9c8d0a151189e3550b0762682b00c675e08deedc973175dbabd288121489a5fd2a50f326037843f3e27faee03a64ca3414526981b5be8a05a18a7795817
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11SpectralShaperAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\Contents\x64\iZOzone11StabilizerAAXHook.aaxplugin
Filesize2.0MB
MD59ced692ec1976c304bc90ab4530e34ad
SHA10eb849fb283991123ce8b271d856a18441b0b513
SHA256d967ea45cd1dfbe07ed192280c85f74c048305d2705f71dfcc76861b2cd9f12d
SHA512a07312e9139aa63936768ab343919385914054ffb3cb9e188d938808e6f93f9e137e769a49634419aead54ad208e25a3432b108dd63dc3ee113e2cfcc12e880c
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11StabilizerAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\Contents\x64\iZOzone11VintageCompressorAAXHook.aaxplugin
Filesize2.0MB
MD5de27ed3c0805e7613b5fef27ed7b50f4
SHA1a5f101f4bf32cf842adb0714281ff48bea4498d8
SHA256a084a1d345ab438a358c0313dcbbb6e0e822edf2daf32cb3977111cf17da41ad
SHA512bef3e3d7cf1db4a0fbe5eb4287a53c01c8c62628c4c4e79c31ba2d5c46e8db7ea3431d1489a5370417ed39139b9c8375b188491c9a69f1263ad093cdbe0d4369
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageCompressorAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\Contents\x64\iZOzone11VintageEQAAXHook.aaxplugin
Filesize2.0MB
MD51a0456a7f438a04c7312d0c5a94b6361
SHA111360f312834af902395689c63925bbde64392d1
SHA2564d51c916e7eedbacfa0ed25adcd4d6a0ae639eaf4037e827cd8992586ead39b9
SHA5126ac4e3c50fa41505d62a69ec773fd0e33142f9a632606692aecbc9b39b6786143145b6534f025b17aad643ce611a2d0d7ff41b261671a8237248f208f929ea4a
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageEQAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\Contents\x64\iZOzone11VintageLimiterAAXHook.aaxplugin
Filesize2.0MB
MD5e1d87bf9c87de3ab1daeaf216856f9ad
SHA142ed56da5115a65bd1273bad63c01203a0910ec9
SHA256d9f8c274bd4080e6798b5951873fdf3b60ad86c87a5baf4e6b9b7abfaed5c03c
SHA5123992e7997e47443f47bf9db164327eaa8b775f1b9b52c560198c69d43e166958992e00a3e117709d0bedef9477ef7cd4506f9a37fa0f6d291d494b57e354bba0
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageLimiterAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\Contents\x64\iZOzone11VintageTapeAAXHook.aaxplugin
Filesize2.0MB
MD5fc0105de0dd0c7da0e6c39444e393b55
SHA1512eaead8a95d9b4c873ebb698ef22d9b7aa4b5b
SHA2568adbaae6ba125e048a410407457860d493dc580797290855c9c044a41bac4dbe
SHA5122ed6a44e2f8c310630b03434827e173492db7a7acf13ba1b5519623e75d8f9623aa73d05c30e4b0f89873465f6fdb796aefc0033b828eb6700044df692c392d2
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\PlugIn.ico
Filesize78KB
MD5717d1a50eb9d1a5e21366366002339f6
SHA19de166281af9d6ade14e12bda91e0271eb5c558c
SHA2563edabec593e5f08a75eef94605bbe75cfa23d6e7388787ddcf497a1ff0b17c7f
SHA5123ec884d1c61031e2f9e9bb9bca5adb3494160a4331f386f0118da41dd18e5c04caf408d6edf6bced72d4cce81480b1e8826f99bc0938060cc97f71bad9d584d7
-
C:\Program Files\Common Files\Avid\Audio\Plug-Ins\iZotope\iZOzone11VintageTapeAAXHook.aaxplugin\desktop.ini
Filesize46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
Filesize
46B
MD5ced966b256027c7576f4d08463bca394
SHA139c7ddf93498f447a6f0fdd1be3d91faac907e7d
SHA256300441ba697e1d2e0f3249f4222be4b09d35be0ce5269e97a7ba9848b2b183a6
SHA5123f22a6b4e3cf2bb1d5001fea84eb1f533e5e7311c27682b08a44a75d2cd0f019f2a73d6ba65f90fc5cca9ca4ae2ddabd9230c6cd920c799fbb478ff432234555
-
Filesize
2.0MB
MD548d16c27e9fe30bb061b880f2ac1eb27
SHA155ebaa5c9b5417db1c2ba1552645021224e1b99a
SHA256e0c569870534e51a8b2617c527d59b7eb6a12a7532e4df003a15f88ab88c527e
SHA51244f131b141a19c0228a09948932ee7c932683727ba45fa4a060d6af8ab34fccd92d885d026425ad92a2679b9eb2131d2dace6614f50ebbff541174cd35efc996
-
Filesize
2.0MB
MD5226e02b15a191e33d63faeaacc4a00f6
SHA1c57f2e3e395e182ca7ba39e7bc3d99d7499d7286
SHA25656eb0ca05b030ea41047948a6fe44b815f8e8689fa4c03cd9550d91ecbe61bf1
SHA512cfc97a96256e635b36b9c7c091bb78d295dcc19731dec42aeabec004e7e582990bf282f331ff03f7b248f4ed7c235fc7d044cfa202561f16b16f8c5be78353b7
-
Filesize
159KB
MD555699801204480d42551f47a594bcf60
SHA1aec5b26f24b07ee9e02f29586ace406017c3cb6d
SHA25642c04f5b9c0a0d2c15bc5682e4dfc0fc211e4d3321a5275e975bd3a52ee68577
SHA51208897b59dc1799269695d716f9b2d11d830226134ef1cedd16fa1c024965d1830532ec941126d6c7df58315d6cb8869651a2ecb2cca57c1b715038d42bfec37a
-
C:\Program Files\iZotope\Ozone Equalizer\NKS\PAResources\dist_database\iZotope\Ozone 11 Equalizer\is-L1I9A.tmp
Filesize29B
MD55ac03a672e9bd1d491d0c7d0f17581c1
SHA153fed117a35815a111402c5cc9e814230b6ec6d7
SHA256a2eb5e64ee82582f66e23ea176b0c06ff67c7b5b73b19c5036c918a7ad83be14
SHA51245af9b571c0687eb352396d92cdcb628953466d920afcf0dbcef8015a46828eb1da09c0e6267b526ec37361cfa98a50075965d96ae85fb7a8f3faefcd687c76b
-
Filesize
783KB
MD5b20b13fe3b83085e993376caeb3fe647
SHA1739cb9f6597fd9e5b28754716349f764b5b86cda
SHA2567ce68ae07d4a7e8005f29988f959dc10d7fd2e1459b9dbb14c97f1f8431f9bc9
SHA51264b6c53f7fbdb66e2aa0d8b4f3c401954b89c4abfb78a433793de2b50daf8d5e6d0082df8e8218b362d06f5a9154a50e328c73b46a9799a0fc76eceb1d872aaa
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\activity-stream.discovery_stream.json.tmp
Filesize22KB
MD5632fc3a611280318dbf1977cbad3c0a0
SHA10b92760ac03d252f2c3fa53d8e0549a44a57650c
SHA256b9caed5867868cee39d4026fccbaf0ad33019d32fa35f3f0a5d92c99dfa2c3da
SHA51217c9db3bd307f729f8eec7ca1473574d250c2f885e741f924bef991b6050ebb9ecc9f906b53cbef9d4a9ccacd4d03172e12bbb279d3c54c13f4c26a3fd00e683
-
Filesize
2KB
MD5a69559718ab506675e907fe49deb71e9
SHA1bc8f404ffdb1960b50c12ff9413c893b56f2e36f
SHA2562f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc
SHA512e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63
-
Filesize
3.0MB
MD54c29c4ac9fb65c4c8d83e30ab84bde61
SHA11057582a7b05af19abb6dc8ca2ded842426571a0
SHA256c9eddb818cbe1ed0546645ee16f4df039b423611218d105045c4a09e3d51f20e
SHA512dc0ac44a175f83f7b36e9b804fa7efd112f411b1e5eabee8e009a2c1f91e1eed22d40c11d289497e3bb34b0ffd63cb64ed6a94baeed961e0b4b80f3e28e5d060
-
Filesize
3.0MB
MD54c29c4ac9fb65c4c8d83e30ab84bde61
SHA11057582a7b05af19abb6dc8ca2ded842426571a0
SHA256c9eddb818cbe1ed0546645ee16f4df039b423611218d105045c4a09e3d51f20e
SHA512dc0ac44a175f83f7b36e9b804fa7efd112f411b1e5eabee8e009a2c1f91e1eed22d40c11d289497e3bb34b0ffd63cb64ed6a94baeed961e0b4b80f3e28e5d060
-
Filesize
7KB
MD5b4d20f58a087cfa458fc42bc8c684138
SHA15e44e42985cbf12385b1f6bfec2bdd22a492a81c
SHA256d601ecbf1825c517a77c14b47687463ad4d00c3e02563098267d2232cd562975
SHA512005e036fb90e3c9d38025a8b9527e5cd6f2bd818804d533895eeee9ab3961285bd188ea9d76b8d4f264326cb9afda017cea93df17420923e3482adb9750938ab
-
Filesize
6KB
MD5200f9e14d5dc57096e1262e4f547539b
SHA145af12dfd416066aa89a2dafb77588a971c4e0b3
SHA256a786761c62166ecb875c585c330ee6ab77b71eb24c8aa3962554c81dbe6a32a8
SHA5128e5d44cc928f1404162fd430132add0e716b34915eb7fb4ba3815854f5a637095155891abc146f47ed925cb5ae9fc1711c8d6a143bfe2a0ced6e8349c5b95059
-
Filesize
7KB
MD50f443a60888d5997fb863f045348e7c5
SHA15a8aaa2ab142b319fda15d524eab48b3463f1dd1
SHA2567fef98f7cc37c8b7c0a3565351a43089d2e6f361510589e65015772610c4560b
SHA512481557c55bf89a4368fd7db74223d90394f3c615c417f21ad79e87966bc109770f24056b4f0e7b0d929e9e979d5b9255dbe90106c8493b96e0dec030b7de4dc6
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore-backups\recovery.jsonlz4
Filesize3KB
MD5cf9b6bfaba55eb0155a2af087160e22d
SHA19e39c3b71086d1852598099cf9f6dcdaf7843c13
SHA25635e463e47661383d0730ce6acbe486afeecc9b549b2fda6755c07c4fe7e1ed7b
SHA5129952362599b7f665a6b65b2c67998edee1db27fc2e36d938e0d84be8523a123fe6b863f4430c2b1dadf82be2804ec38269b8ec18d7839ef7189c320c5a01c7b4
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD5353e404239b77ec95471ffdfb9c509de
SHA16b5dc0e58f9f3f218c0a5929f8ab7b1899bce90b
SHA2564a68465073a03446a4c98454d4a97933c41814d22de2d02928a7af8c25566fa5
SHA512da8a616aa332738a060c3a055b6ff9e054a38768336668bba31405fe151d653f1ea295e13425df8385ac35074d97310f51bcbb3b963c03c1c633c50e1f6f18ee
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD5d5660aaa2095e20373f1525e44ab7133
SHA1026d3514754c61c6fcd649e60e9a813ff30c1625
SHA256498c737c8dad2782af3d45bfe7b9e414fe2c8f082f76c8372443fe9f1f800b5e
SHA5125a6f4567b312123e61076318e7acf90b01decf971d898f01555eddc0fafd7829227f72dfedd59b4e23aa79b2bca92a386b605235f7cbe75444f73a9fb99358c3
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD511dde1df83b0d7955ea11a486bb0b5b2
SHA17ab1b76eb90fedad974fe43851a32dfd69f2ccf1
SHA25629d6b64931e61cccfd09b337699d09d00a6e0e3b840de7554709dcef55cccc9d
SHA5128d0e68cda37615fb6743f58bedf9ffc54d4e618f42295953bc3f8a58cd47494260927e8acad7df96a4874f9eeb3a2133a0e63c68c1541e705fae994584628e27
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\b7jtu2fw.default-release\sessionstore.jsonlz4
Filesize4KB
MD588b7169cc498dec7dc243093804f04e0
SHA1b4e46b44abd3e2d4a7130a7a28e1c8b608336547
SHA256c004f97833be702588a109ef9400baf0371e6edb2426cb4511d1438d2a216021
SHA5128f41001149fed2eb2f6d4a0ec9eddd28845cfb7be576a36f29122cb60105c6c910f30315b6d145e4ebe9dd700a54ddc8deb5a321b8dc89bbb31374e0520757dd