Windows Analysis Report
CloudTalk-Phone-3.2.7-win 1.exe

Overview

General Information

Sample name: CloudTalk-Phone-3.2.7-win 1.exe
Analysis ID: 1560049
MD5: e70109e2505ba2da36749d7a5a2e2e09
SHA1: e31d0d707aa051c028d9cb83b83bc552bddfb08a
SHA256: ac55f7f825a36a04982e4ed392ea1152f068d95adc201aad8a6b933f01e536f4
Infos:

Detection

Score: 19
Range: 0 - 100
Whitelisted: false
Confidence: 0%

Compliance

Score: 34
Range: 0 - 100

Signatures

Submitted sample is a known malware sample
Drops large PE files
Creates a process in suspended mode (likely to inject code)
Drops PE files
EXE planting / hijacking vulnerabilities found
Enables debug privileges
Enables security privileges
Found dropped PE file which has not been started or loaded
Installs a raw input device (often for capturing keystrokes)
PE file contains more sections than normal
PE file contains sections with non-standard names
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Stores files to the Windows start menu directory
Uses 32bit PE files

Classification

EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\Uninstall CloudTalk Phone.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\cloudtalk-phone-desktop-updater\installer.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x64.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\elevate.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: cmd.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu64.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x86.exe Jump to behavior

Compliance
barindex
EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\Uninstall CloudTalk Phone.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\cloudtalk-phone-desktop-updater\installer.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x64.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\elevate.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: cmd.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu64.exe Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe EXE: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x86.exe Jump to behavior
Uses 32bit PE files
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5d636ab1-c7e3-59bd-8112-ba32183ccaab Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\LICENSE.electron.txt Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\LICENSE.electron.txt Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: certificate valid
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: C:\Dev\elevate\bin\x86\Release\Elevate.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391338066.00000000056F6000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D3DCompiler_47.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1361313060.0000000005061000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\_\cfb73e75\RelWithDebInfo-0.7.0\bin\snoretoast.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.0000000005070000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\electron.exe.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000727C000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\ffmpeg.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1362322374.000000000506C000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\electron.exe.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000727C000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: D3DCompiler_47.pdbGCTL source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1361313060.0000000005061000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\Users\guill\src\projects\notifu.releases\notifu.buildtemp\notifu_build\notifu\x64\Release\notifu.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\vk_swiftshader.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1370591755.0000000005069000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\libGLESv2.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: C:\_\cfb73e75\RelWithDebInfo-0.7.0\bin\snoretoast.pdb0 source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.0000000005070000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\Users\guill\src\projects\notifu.releases\notifu.buildtemp\notifu_build\notifu\x64\Release\notifu.pdb# source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\vulkan-1.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1293476115.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1283784707.0000000002E70000.00000004.00001000.00020000.00000000.sdmp
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\lib Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\locales Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://.css
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://.jpg
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://adrianheine.de
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1085
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1452
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1452expandIntegerPowExpressionsThe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1512
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1637
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1936
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2046
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2152
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2152skipVSConstantRegisterZeroIn
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2162
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2273
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2517
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2894
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2970
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2978
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3027
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3045
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3078
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3153
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3205
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3206
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3246
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3246allowClearForRobustResourceInitSome
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3452
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3498
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3502
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3577
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3584
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3586
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3623
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3624
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3625
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3682
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3682allowES3OnFL100Allow
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3729
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3832
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3862
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3965
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3970
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3997
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4214
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4267
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4324
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4339
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4384
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4405
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4428
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4551
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4633
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4646
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4722
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4722forceRobustResourceInitForce-enable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/482
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4836
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4889
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4901
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4937
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007disableDrawBuffersIndexedDisable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5055
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5061
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5281
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5371
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5375
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5421
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5430
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5469
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5535
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5577
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5658
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5658forceGlErrorCheckingForce
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750enableCompressingPipelineCacheInThreadPoolEnable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5881
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5901
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5906
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6041
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6041forceInitShaderVariablesForce-enable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6048
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6141
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6248
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6439
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6651
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6692
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6755
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6860
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6876
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6878
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6929
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6953
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7036
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7036Frontend
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7047
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7172
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7279
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7279cacheCompiledShaderEnable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7370
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7406
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7527
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7553
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7556
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7724
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7724disableAnisotropicFilteringDisable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://casper.beckman.uiuc.edu/~c-tsai4
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://certificates.godaddy.com/repository/gd_intermediate.crt0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://certificates.godaddy.com/repository100.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://chasen.aist-nara.ac.jp/chasen/distribution.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://code.google.com/p/lao-dictionary/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://code.google.com/p/smhasher/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1094869
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/110263
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1144207
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1165751
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1165751disableProgramBinaryDisable
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1171371
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1181068
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1181193
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/308366
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/403957
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/550292
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/565179
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/642227
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/642605
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/644669
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/650547
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/672380
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/709351
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/797243
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/809422
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/830046
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/849576
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/883276
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/927470
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/941620
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/941620allowTranslateUniformBlockToStructuredBufferThere
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crl.godaddy.com/gds1-20
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://dev.w3.org/csswg/css-color/#hwb-to-rgb
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://devel.freebsoft.org/speechd
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://exslt.org/common
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://exslt.org/commonnode-set..
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://fedorahosted.org/lohit>
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://feross.org
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://google.github.io/snappy/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://html4/loose.dtd
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://icl.com/saxon
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://icl.com/saxonorg.apache.xalan.xslt.extensions.RedirectxsltDocumentElem:
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://issuetracker.google.com/200067929
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jsperf.com/1-vs-infinity
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://labs.creativecommons.org/licenses/zero-waive/1.0/us/legalcode>
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://lao-dictionary.googlecode.com/git/Lao-Dictionary-LICENSE.txt
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://lao-dictionary.googlecode.com/git/Lao-Dictionary.txt
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://narwhaljs.org)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000040A000.00000004.00000001.01000000.00000003.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000000.1113361947.000000000040A000.00000008.00000001.01000000.00000003.sdmp String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://ocsp.comodoca.com0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://ocsp.digicert.com0A
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://ocsp.digicert.com0C
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: http://ocsp.digicert.com0X
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ocsp.godaddy.com/0J
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391338066.00000000056F6000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1397449623.00000000056F9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://ocsp.sectigo.com0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://opensource.org/licenses/bsd-license.php
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://opensource.perlig.de/rjsmin/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://s..
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://scripts.sil.org/OFL
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://source.android.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://source.android.com/compatibility)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://stackoverflow.com/a/1068308/13216
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://website-archive.mozilla.org/www.mozilla.org/mpl/MPL/NPL/1.1/):
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://wpad/wpad.dat
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://wpad/wpad.dat..
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.3waylabs.com/nw/WWW/products/wizcon/vt220.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.00000000050B5000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.apache.org/licenses/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.00000000050B5000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.chromium.org
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.dabeaz.com/ply/ply-3.11.tar.gz
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.gutenberg.org/ebooks/53).
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.jclark.com/xt
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.00000000050B5000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.mozilla.org/MPL/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.mozilla.org/NPL/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.nongnu.org/freebangfont/downloads.html#mukti
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.opensource.org/licenses/bsd-license.php
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.paralint.com/projects/notifu/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.paralint.com/projects/notifu/)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.ploscompbiol.org/static/license
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.pylint.org/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.squid-cache.org/Doc/config/half_closed_clients/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.strongtalk.org/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.suitable.com
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.suitable.com/tools/smslib.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.suitable.com/tools/smslib.html>
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1175166582.0000000005DE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.unicode.org/copyright.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.unicode.org/copyright.html.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xmlsoft.org/XSLT/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xmlsoft.org/XSLT/namespace
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xmlsoft.org/XSLT/namespacehttp://www.jclark.com/xtxsl:key
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xmlsoft.org/XSLT/xsltNewExtDef
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://aka.ms/tsconfig
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://aka.ms/tsconfig.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://android.googlesource.com/platform/external/puffin
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://android.googlesource.com/platform/external/setupdesign/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4674
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4849
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5140
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5536
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5845
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7161
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7162
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7246
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7246enableCaptureLimitsSet
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7308
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7319
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7320
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7369
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7382
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7405
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7489
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7604
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7714
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons.gcp.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons.gcp.gvt2.com/domainreliability/uploadhttps://beacons.gvt2.com/domainreliability/uplo
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons2.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons3.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons4.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons5.gvt2.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://beacons5.gvt3.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bit.ly/3rpDuEX.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bit.ly/3rpDuEX.WebBundleURLLoaderFactory::OnResponseParsedInvalid
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://blog.chromium.org/2019/10/no-more-mixed-messages-about-https.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://blog.chromium.org/2019/10/no-more-mixed-messages-about-https.htmlattribution
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10201
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10704
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=9560)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=107106
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=745678
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.android.clients.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.bigcache.googleapis.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.doc-0-0-sj.sj.googleusercontent.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.docs.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.drive.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.googlesyndication.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.pack.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.play.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://c.youtube.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1378779388.00000000056E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstore?hl=it&category=theme81https://myactivity.google.com/myactivity/?u
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1381972311.00000000056E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstore?hl=no&category=theme81https://myactivity.google.com/myactivity/?u
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1382812136.00000000056E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstore?hl=pt-BR&category=theme81https://myactivity.google.com/myactivity
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1383498673.00000000056E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstore?hl=ru&category=theme81https://myactivity.google.com/myactivity/?u
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://chromium.googlesource.com/angle/angle/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://clients2.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://clients2.google.com/domainreliability/upload
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1038223.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1042393
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1046462
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1060012
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1091824
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1137851
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1154140
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1300575
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/593024
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/593024selectViewInGeometryShaderThe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/619103.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/619103.Subsequence
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/650547
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/650547callClearTwiceUsing
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/655534
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/655534useSystemMemoryForConstantBuffersCopying
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/705865
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/710443
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/811661
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/848952
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/927119
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/927119..
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/981419
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://creativecommons.org/licenses/by/3.0/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://datatracker.ietf.org/doc/draft-ietf-rtcweb-ip-handling.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://dejavu-fonts.github.io/Download.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/endsWith
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/includes
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/startsWith
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Strict_mode
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Strict_mode.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/zh-CN/docs/Web/JavaScript/Reference/Strict_mode
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/zh-TW/docs/Web/JavaScript/Reference/Strict_mode
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://developers.google.com/android/guides/setup
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://docs.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://encoding.spec.whatwg.org
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://esdiscuss.org/topic/isconstructor#content-11
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gcp.gvt2.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gcp.gvt6.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gist.github.com/XVilka/8346728#gistcomment-2823421
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/GoogleChromeLabs/pywebsocket3/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/GoogleChromeLabs/text-fragments-polyfill
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/KhronosGroup/SPIRV-Cross
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/KhronosGroup/SPIRV-Headers.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/KhronosGroup/SPIRV-Tools.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Maratyszcza/pthreadpool
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Microsoft/TypeScript/issues/20809
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Microsoft/TypeScript/issues/4643)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Microsoft/tslib.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/Squirrel/Squirrel.Mac
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/WICG/construct-stylesheets/issues/119#issuecomment-588352418.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/WICG/construct-stylesheets/issues/119#issuecomment-588352418.border-boxcontent-bo
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/WICG/scheduling-apis
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/WICG/shared-element-transitions/blob/main/debugging_overflow_on_images.md
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/acornjs/acorn
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/acornjs/acorn.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/acornjs/acorn/issues/575
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/addaleax/eventemitter-asyncresource
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/antirez/linenoise
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/chalk/chalk/issues/58
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/chalk/chalk/pull/92
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/chalk/supports-color
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/chromium/chromium/blob/da4adbb3/third_party/blink/renderer/devtools/front_end/sdk
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/da-x/rxvt-unicode/tree/v9.22-with-24bit-color
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/dfcreative/color-name
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/dpranke/pyjson5
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/estree/estree/blob/a27003adf4fd7bfad44de9cef372a2eacd527b1c/es5.md#regexpliteral
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/feross/safe-buffer
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/caja/blob/HEAD/src/com/google/caja/ses/repairES5.js
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/caja/blob/HEAD/src/com/google/caja/ses/startSES.js
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/desugar_jdk_libs
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/diff-match-patch/tree/master/javascript
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/pprof/tree/master/proto
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/private-join-and-compute
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/protobuf
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/re2
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/securemessage
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/google/shell-encryption
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/isaacs/color-support.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/joyent/node
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/joyent/node/issues/3295.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jridgewell/trace-mapping.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jrmuizel/qcms/tree/v4
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/mafintosh/pump
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/mozilla/source-map/blob/8cb3ee57/lib/util.js#L327
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/mysticatea/abort-controller
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/TSC/blob/master/Moderation-Policy.md
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node-v0.x-archive/issues/2876.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/master/CODE_OF_CONDUCT.md
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/v10.8.0/lib/internal/errors.js
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/commit/ec2822adaad76b126b5cccdeaa1addf2376c9aa6
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/commit/f7620fb96d339f704932f9bb9a0dceb9952df2d4
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/10673
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/13435
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/2119
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/45171
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/45753
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/12342
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/13870#discussion_r124515293
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/1771#issuecomment-119351671
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/21313
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/2649
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/30958
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/33661
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/35949#issuecomment-722496598
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/38433#issuecomment-828426932
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/protocolbuffers/protobuf/blob/master/java/lite.md
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/puppeteer/puppeteer
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/simplejson/simplejson
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/tensorflow/models
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/tensorflow/tensorflow
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/tensorflow/text.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/tensorflow/tflite-support
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/ServiceWorker/issues/1356.
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/ServiceWorker/issues/1356.v8.produceCachev8.produceModuleCacheV8.CodeCacheSiz
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/gamepad/pull/120
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/gamepad/pull/120Access
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/webappsec-permissions-policy/blob/master/features.md#sensor-features
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/webappsec-permissions-policy/blob/master/features.md#sensor-featuresDeviceOri
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/xiph/rnnoise
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/yargs/yargs-parser#supported-nodejs-versions
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/yargs/yargs-parser.git
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/yargs/yargs/issues/2040
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/LdLk22
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/LdLk22MEDIA_ELEMENT_ERROR:
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/LdLk22Media
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/rStTGz
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/t5IS6M).
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://google-analytics.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://googlevideo.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gvt1.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gvt2.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://gvt6.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://heycam.github.io/webidl/#define-the-operations
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://heycam.github.io/webidl/#es-interfaces
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://infra.spec.whatwg.org/#forgiving-base64-decode
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://invisible-island.net/ncurses/terminfo.ti.html#toc-_Specials
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://invisible-island.net/xterm/ctlseqs/ctlseqs.html
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/161903006
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/166809097
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/184850002
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/187425444
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/220069903
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/220069903emulatePixelLocalStorageEmulate
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/229267970
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/250706693
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jsperf.com/object-keys-vs-for-in-with-closure/3
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://linux.die.net/man/1/dircolors).
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://marijnhaverbeke.nl
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://no-color.org/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pagure.io/lohit
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://polymer-library.polymer-project.org
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://quiche.googlesource.com/quiche
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://rreverser.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: https://sectigo.com/CPS0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://sites.google.com/site/gaviotachessengine/Home/endgame-tablebases-1
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://skia.org/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://source.chromium.org/chromium/chromium/src/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://sourceforge.net/project/?group_id=1519
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://sqlite.org/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://ssl.gstatic.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://stackoverflow.com/a/5501711/3561
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1381972311.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1383498673.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1382812136.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1385480993.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1372740773.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1384232946.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1377497474.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1376006866.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1376631217.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1375271744.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1380268350.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1374329423.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1386008841.00000000056E1000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1384926320.00000000056E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://support.google.com/chrome/answer/6098869
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://swiftshader.googlesource.com/SwiftShader
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://tc39.github.io/ecma262/#sec-%typedarray%.of
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc3492#section-3.4
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc3986#section-3.2.2
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.6
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://v8.dev/blog/v8-release-89
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.apache.org/licenses/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.apache.org/licenses/LICENSE-2.0
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/4664843055398912
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5093566007214080
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5093566007214080Hyphenation.Openen-ASen-GUen-MHen-MPen-PRen-UMe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5636954674692096
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.0000000007186000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5718547946799104
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5738264052891648
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5738264052891648Renderer.Font.PrimaryFont.FCPRenderer.Font.Prim
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.00000000050D3000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1706922428.000000000041E000.00000004.00000001.01000000.00000003.sdmp String found in binary or memory: https://www.cloudtalk.io/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Atom
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClass
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlLetter
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigits
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Quantifier
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-RegExpUnicodeEscapeSequence
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-AtomEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-term
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000712F000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.google.com/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.iana.org/assignments/tls-extensiontype-values
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1152011211.0000000005160000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1366191214.000000000506E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.swift.org/download/
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1387119113.0000000005063000.00000004.00000020.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1201732339.00000000059E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.typescriptlang.org/
Installs a raw input device (often for capturing keystrokes)
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: RegisterRawInputDevices() failed for RIDEV_REMOVE memstr_e84fe932-4

System Summary
barindex
Submitted sample is a known malware sample
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped file: MD5: 23b7d7d024abb0f558420e098800bf27 Family: OceanLotus Alias: OceanLotus, , Cobalt Kitty , APT-C-00, SeaLotus, APT32 Description: OceanLotus is an APT group that was first disclosed and named by QI-ANXIN. The APT group carried out targeted attacks against Chinese government, research institutes, maritime institutions, and shipping companies since 2012. The group, called as APT32 by FireEye, also targeted corporations with a vested interest in Vietnams manufacturing, consumer products, and hospitality sectors. Furthermore, it has also targeted foreign governments, as well as Vietnamese dissidents and journalists since at least 2013. References: https://www.fireeye.com/blog/threat-research/2017/05/cyber-espionage-apt32.html https://www.cybereason.com/labs-operation-cobalt-kitty-a-large-scale-apt-in-asia-carried-out-by-the-oceanlotus-group/https://www.scmagazineuk.com/ocean-lotus-groupapt-32-identified-as-vietnamese-apt-group/article/663565/Data Source: https://github.com/RedDrip7/APT_Digital_Weapon
Drops large PE files
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File dump: CloudTalk Phone.exe.0.dr 157876536 Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File dump: CloudTalk Phone.exe0.0.dr 157876536 Jump to dropped file
Enables security privileges
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process token adjusted: Security Jump to behavior
PE file contains more sections than normal
Source: CloudTalk Phone.exe.0.dr Static PE information: Number of sections : 15 > 10
Source: libEGL.dll.0.dr Static PE information: Number of sections : 12 > 10
Source: libGLESv2.dll.0.dr Static PE information: Number of sections : 12 > 10
Source: vk_swiftshader.dll.0.dr Static PE information: Number of sections : 12 > 10
Source: vulkan-1.dll.0.dr Static PE information: Number of sections : 12 > 10
Source: CloudTalk Phone.exe0.0.dr Static PE information: Number of sections : 15 > 10
Source: ffmpeg.dll.0.dr Static PE information: Number of sections : 11 > 10
Sample file is different than original file name gathered from version info
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenamevk_swiftshader.dll, vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenamelibGLESv2.dllb! vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: node.originalFileName = ""; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1199660803.0000000002D30000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: node.originalFileName = source.originalFileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1365133274.000000000506C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamelibGLESv2.dllb! vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1318658125.0000000005060000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilename@ vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamenotifu.exe. vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const containingFileName = getNormalizedAbsolutePath(containingFile.originalFileName, currentDirectory); vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const containingFileName = !isString(containingFile) ? getNormalizedAbsolutePath(containingFile.originalFileName, currentDirectory) : containingFile; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const redirect = getResolvedProjectReferenceToRedirect(file.originalFileName); vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: if (redirect || !isDeclarationFileName(file.originalFileName)) vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: if (!host.realpath || !options.preserveSymlinks || !stringContains(file.originalFileName, nodeModulesPathPart)) vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const realDeclarationPath = toPath3(host.realpath(file.originalFileName)); vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: getNormalizedAbsolutePath(file.originalFileName, currentDirectory), vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: trace(host, Diagnostics.Module_0_was_resolved_as_locally_declared_ambient_module_in_file_1, moduleName.text, getNormalizedAbsolutePath(file.originalFileName, currentDirectory)); vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: !isString(containingFile) ? getNormalizedAbsolutePath(containingFile.originalFileName, currentDirectory) : containingFile, vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: newSourceFile.originalFileName = oldSourceFile.originalFileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: function createRedirectedSourceFile(redirectTarget, unredirected, fileName, path, resolvedPath, originalFileName, sourceFileOptions) { vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: redirect.originalFileName = originalFileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const originalFileName = fileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: const dupFile = createRedirectedSourceFile(fileFromPackageId, file, fileName, path, toPath3(fileName), originalFileName, sourceFileOptions); vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: file.originalFileName = originalFileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: sourceFile.originalFileName = refPath; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: toFileName(file.originalFileName, fileNameConvertor) vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: originalFileName: documentSpan.fileName, vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1208663759.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: result.originalFileName = result.fileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391338066.00000000056F6000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameElevate.exeH vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1370591755.0000000005069000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamevk_swiftshader.dll, vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1361313060.0000000005061000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamed3dcompiler_47.dllj% vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1397449623.00000000056F9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameElevate.exeH vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: node.originalFileName = ""; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: node.originalFileName = source.originalFileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1205385936.00000000067E0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: result.originalFileName = result.fileName; vs CloudTalk-Phone-3.2.7-win 1.exe
Uses 32bit PE files
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: classification engine Classification label: clean19.winEXE@11/108@0/0
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Programs Jump to behavior
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6640:120:WilError_03
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Mutant created: \Sessions\1\BaseNamedObjects\5d636ab1-c7e3-59bd-8112-ba32183ccaab
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsh36E7.tmp Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Windows\SysWOW64\tasklist.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'CLOUDTALK PHONE.EXE'
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000727C000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: SELECT name FROM sqlite_master WHERE type='table';
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File read: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe "C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe"
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq CloudTalk Phone.exe" | %SYSTEMROOT%\System32\find.exe "CloudTalk Phone.exe"
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq CloudTalk Phone.exe"
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\find.exe C:\Windows\System32\find.exe "CloudTalk Phone.exe"
Source: unknown Process created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe "C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe"
Source: unknown Process created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe "C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe"
Source: unknown Process created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe "C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe"
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq CloudTalk Phone.exe" | %SYSTEMROOT%\System32\find.exe "CloudTalk Phone.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq CloudTalk Phone.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\find.exe C:\Windows\System32\find.exe "CloudTalk Phone.exe" Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: oleacc.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: shfolder.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: windows.fileexplorer.common.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: ntshrui.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: linkinfo.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: cscapi.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: sxs.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: version.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: mpr.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: framedynos.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: wbemcomn.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Windows\SysWOW64\find.exe Section loaded: ulib.dll Jump to behavior
Source: C:\Windows\SysWOW64\find.exe Section loaded: fsutilext.dll Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq CloudTalk Phone.exe"
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5d636ab1-c7e3-59bd-8112-ba32183ccaab Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: certificate valid
Source: CloudTalk-Phone-3.2.7-win 1.exe Static file information: File size 85035480 > 1048576
Source: CloudTalk-Phone-3.2.7-win 1.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: C:\Dev\elevate\bin\x86\Release\Elevate.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391338066.00000000056F6000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: D3DCompiler_47.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1361313060.0000000005061000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\_\cfb73e75\RelWithDebInfo-0.7.0\bin\snoretoast.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.0000000005070000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\electron.exe.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000727C000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\ffmpeg.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1362322374.000000000506C000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\electron.exe.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1309738945.000000000727C000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: D3DCompiler_47.pdbGCTL source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1361313060.0000000005061000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\Users\guill\src\projects\notifu.releases\notifu.buildtemp\notifu_build\notifu\x64\Release\notifu.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\vk_swiftshader.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1370591755.0000000005069000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\libGLESv2.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: C:\_\cfb73e75\RelWithDebInfo-0.7.0\bin\snoretoast.pdb0 source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1391798331.0000000005070000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\Users\guill\src\projects\notifu.releases\notifu.buildtemp\notifu_build\notifu\x64\Release\notifu.pdb# source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1393320152.0000000005575000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\projects\src\out\Default\vulkan-1.dll.pdb source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1293476115.00000000059E0000.00000004.00001000.00020000.00000000.sdmp, CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1283784707.0000000002E70000.00000004.00001000.00020000.00000000.sdmp
PE file contains sections with non-standard names
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: .00cfg
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: .gxfg
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: .retplne
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: .rodata
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: .voltbl
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: CPADinfo
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: _RDATA
Source: CloudTalk Phone.exe.0.dr Static PE information: section name: malloc_h
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: .00cfg
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: .gxfg
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: .retplne
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: .rodata
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: .voltbl
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: CPADinfo
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: _RDATA
Source: CloudTalk Phone.exe0.0.dr Static PE information: section name: malloc_h
Source: ffmpeg.dll.0.dr Static PE information: section name: .00cfg
Source: ffmpeg.dll.0.dr Static PE information: section name: .gxfg
Source: ffmpeg.dll.0.dr Static PE information: section name: .retplne
Source: ffmpeg.dll.0.dr Static PE information: section name: .voltbl
Source: ffmpeg.dll.0.dr Static PE information: section name: _RDATA
Source: libEGL.dll.0.dr Static PE information: section name: .00cfg
Source: libEGL.dll.0.dr Static PE information: section name: .gxfg
Source: libEGL.dll.0.dr Static PE information: section name: .retplne
Source: libEGL.dll.0.dr Static PE information: section name: .voltbl
Source: libEGL.dll.0.dr Static PE information: section name: _RDATA
Source: libGLESv2.dll.0.dr Static PE information: section name: .00cfg
Source: libGLESv2.dll.0.dr Static PE information: section name: .gxfg
Source: libGLESv2.dll.0.dr Static PE information: section name: .retplne
Source: libGLESv2.dll.0.dr Static PE information: section name: .voltbl
Source: libGLESv2.dll.0.dr Static PE information: section name: _RDATA
Source: snoretoast-x64.exe.0.dr Static PE information: section name: .00cfg
Source: snoretoast-x86.exe.0.dr Static PE information: section name: .00cfg
Source: vk_swiftshader.dll.0.dr Static PE information: section name: .00cfg
Source: vk_swiftshader.dll.0.dr Static PE information: section name: .gxfg
Source: vk_swiftshader.dll.0.dr Static PE information: section name: .retplne
Source: vk_swiftshader.dll.0.dr Static PE information: section name: .voltbl
Source: vk_swiftshader.dll.0.dr Static PE information: section name: _RDATA
Source: vulkan-1.dll.0.dr Static PE information: section name: .00cfg
Source: vulkan-1.dll.0.dr Static PE information: section name: .gxfg
Source: vulkan-1.dll.0.dr Static PE information: section name: .retplne
Source: vulkan-1.dll.0.dr Static PE information: section name: .voltbl
Source: vulkan-1.dll.0.dr Static PE information: section name: _RDATA
Drops PE files
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x64.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\vulkan-1.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\CloudTalk Phone.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\nsExec.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\libGLESv2.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\CloudTalk Phone.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\ffmpeg.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\libEGL.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\SpiderBanner.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\vk_swiftshader.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu64.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\nsis7z.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\System.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\d3dcompiler_47.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\StdUtils.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\elevate.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x86.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\LICENSE.electron.txt Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Local\Programs\cloudtalk-phone-desktop\LICENSE.electron.txt Jump to behavior
Stores files to the Windows start menu directory
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CloudTalk Phone.lnk Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\System32\conhost.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x64.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\vulkan-1.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\nsExec.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\libGLESv2.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\ffmpeg.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\libEGL.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\SpiderBanner.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\vk_swiftshader.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu64.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\nsis7z.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\System.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\d3dcompiler_47.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\StdUtils.dll Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\elevate.exe Jump to dropped file
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x86.exe Jump to dropped file
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File Volume queried: C:\ FullSizeInformation Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\lib Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\locales Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules Jump to behavior
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe File opened: C:\Users\user\AppData\Local\Temp\nsi386F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: IIAMDARMAppleBroadcomGoogleIntelMesaMicrosoftNVIDIAImagination TechnologiesQualcommSamsung Electronics Co., Ltd.VivanteVMwareTestNULLUnknown
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: VMware
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1373389618.0000000005505000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DV
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1362322374.000000000506C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: vmncVMware Screen Codec / VMware Videovp5On2 VP5vp6On2 VP6vp6fOn2 VP6 (Flash version)targaTruevision Targa imageimage/x-targaimage/x-tga
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006811000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: (IsLinux() && isVMWare) || (IsAndroid() && isNvidia) || (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) || (IsAndroid() && IsMaliT8xxOrOlder(functions)) || (IsAndroid() && IsMaliG31OrOlder(functions))
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000002.1724011653.00000000054FF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1303947931.0000000006BE0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1362322374.000000000506C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: VMware Screen Codec / VMware Video
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process information queried: ProcessInformation Jump to behavior
Enables debug privileges
Source: C:\Windows\SysWOW64\tasklist.exe Process token adjusted: Debug Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\Desktop\CloudTalk-Phone-3.2.7-win 1.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq CloudTalk Phone.exe" | %SYSTEMROOT%\System32\find.exe "CloudTalk Phone.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq CloudTalk Phone.exe" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\find.exe C:\Windows\System32\find.exe "CloudTalk Phone.exe" Jump to behavior
Source: CloudTalk-Phone-3.2.7-win 1.exe, 00000000.00000003.1298243686.0000000006B60000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: ..\..\third_party\webrtc\modules\desktop_capture\win\window_capture_utils.ccFail to create instance of VirtualDesktopManagerChrome_WidgetWin_Progman
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1560049 Sample: CloudTalk-Phone-3.2.7-win 1.exe Startdate: 21/11/2024 Architecture: WINDOWS Score: 19 32 Submitted sample is a known malware sample 2->32 34 Drops large PE files 2->34 7 CloudTalk-Phone-3.2.7-win 1.exe 12 308 2->7         started        10 CloudTalk Phone.exe 2->10         started        12 CloudTalk Phone.exe 2->12         started        14 CloudTalk Phone.exe 2->14         started        process3 file4 24 C:\Users\user\AppData\Local\...\nsis7z.dll, PE32 7->24 dropped 26 C:\Users\user\AppData\Local\...\nsExec.dll, PE32 7->26 dropped 28 C:\Users\user\AppData\Local\...\System.dll, PE32 7->28 dropped 30 16 other files (none is malicious) 7->30 dropped 16 cmd.exe 1 7->16         started        process5 process6 18 conhost.exe 16->18         started        20 tasklist.exe 1 16->20         started        22 find.exe 1 16->22         started       
⊘No contacted IP infos