Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
JabraDirectSetup.exe

Overview

General Information

Sample Name:JabraDirectSetup.exe
Analysis ID:708232
MD5:df71bfab12e144a002d85d07c0fa0fd8
SHA1:700b1257e4bdc35bb9d53388e1c4220773827621
SHA256:98ececd8b2573b79e79b97ebf1034afeac5107e50869422066b438138ae18d14
Infos:

Detection

Score:8
Range:0 - 100
Whitelisted:false
Confidence:0%

Compliance

Score:50
Range:0 - 100

Signatures

Uses 32bit PE files
Queries the volume information (name, serial number etc) of a device
Drops PE files to the application program directory (C:\ProgramData)
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Very long cmdline option found, this is very uncommon (may be encrypted or packed)
Deletes files inside the Windows folder
Uses code obfuscation techniques (call, push, ret)
Found evasive API chain (date check)
Creates files inside the system directory
PE file contains sections with non-standard names
Detected potential crypto function
Contains functionality to query CPU information (cpuid)
Found potential string decryption / allocating functions
Found dropped PE file which has not been started or loaded
Uses the system / local time for branch decision (may execute only at specific dates)
Contains functionality which may be used to detect a debugger (GetProcessHeap)
PE file contains executable resources (Code or Archives)
Enables debug privileges
Is looking for software installed on the system
Drops files with a non-matching file extension (content does not match file extension)
Sample file is different than original file name gathered from version info
Drops PE files
Tries to load missing DLLs
Contains functionality to read the PEB
Drops PE files to the windows directory (C:\Windows)
Found evasive API chain checking for process token information
Binary contains a suspicious time stamp
Uses taskkill to terminate processes
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Checks for available system drives (often done to infect USB drives)
Uses Microsoft's Enhanced Cryptographic Provider
Creates a process in suspended mode (likely to inject code)

Classification

Analysis Advice

Sample drops PE files which have not been started, submit dropped PE samples for a secondary analysis to Joe Sandbox
Sample is looking for USB drives. Launch the sample with the USB Fake Disk cookbook
Sample may be VM or Sandbox-aware, try analysis on a native machine
Sample tries to load a library which is not present or installed on the analysis machine, adding the library might reveal more behavior
Sample may offer command line options, please run it with the 'Execute binary with arguments' cookbook (it's possible that the command line switches require additional characters like: "-", "/", "--")
Sample searches for specific file, try point organization specific fake files to the analysis machine

Process Tree

  • System is w10x64
  • JabraDirectSetup.exe (PID: 2040 cmdline: "C:\Users\user\Desktop\JabraDirectSetup.exe" MD5: DF71BFAB12E144A002D85D07C0FA0FD8)
    • JabraDirectSetup.exe (PID: 1120 cmdline: "C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exe" -burn.clean.room="C:\Users\user\Desktop\JabraDirectSetup.exe" -burn.filehandle.attached=572 -burn.filehandle.self=568 MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
      • JabraDirectSetup.exe (PID: 4216 cmdline: "C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exe" -q -burn.elevated BurnPipe.{D9E1E3E0-161A-4566-8CAE-5A87964B54C8} {D37BA658-0E76-49AC-BEF7-9E23554C8C54} 1120 MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
  • JabraDirectSetup.exe (PID: 1128 cmdline: "C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exe" /burn.runonce MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
    • JabraDirectSetup.exe (PID: 5340 cmdline: C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exe" /burn.log.append "C:\Users\user\AppData\Local\Temp\Jabra_Direct_20220923074951.log MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
      • JabraDirectSetup.exe (PID: 1240 cmdline: C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exe" -burn.clean.room="C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 /burn.log.append "C:\Users\user\AppData\Local\Temp\Jabra_Direct_20220923074951.log MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
        • JabraDirectSetup.exe (PID: 5136 cmdline: "C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exe" -q -burn.elevated BurnPipe.{9C247021-F0C8-4FC2-9304-77A36769657D} {3D1A53A5-B618-4AC6-9F29-86FEE8B34C1A} 1240 MD5: 6D9E7D60EE823CDB1AEA3F0C4C5B6C56)
  • msiexec.exe (PID: 5384 cmdline: C:\Windows\system32\msiexec.exe /V MD5: 4767B71A318E201188A0D0A420C8B608)
    • msiexec.exe (PID: 3960 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 094F350B1881CEA527676BAF5570DA2D MD5: 12C17B5A5C2A7B97342C362CA467E9A2)
      • taskkill.exe (PID: 5268 cmdline: "C:\Windows\\System32\taskkill.exe" /F /IM jabra-direct.exe MD5: 15E2E0ACD891510C6268CB8899F2A1A1)
        • conhost.exe (PID: 5984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)
      • svchost.exe (PID: 5268 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Users\user\Desktop\JabraDirectSetup.exeCode function: 0_2_01239F8F DecryptFileW,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00AE9F8F DecryptFileW,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00B0F340 CryptAcquireContextW,GetLastError,CryptCreateHash,GetLastError,CryptHashData,ReadFile,GetLastError,CryptDestroyHash,CryptReleaseContext,GetLastError,CryptGetHashParam,GetLastError,SetFilePointerEx,GetLastError,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00AE9D74 DecryptFileW,DecryptFileW,

Compliance

barindex
Uses 32bit PE files
Source: JabraDirectSetup.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, REMOVABLE_RUN_FROM_SWAP, NET_RUN_FROM_SWAP
Creates a software restore point
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SystemRestore SRInitDone
Source: C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SystemRestore SRInitDone
Creates license or readme file
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeFile created: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.ba\license.rtfJump to behavior
Source: C:\ProgramData\Package Cache\{50c3bcea-1203-4bf1-9103-09af1bf52966}\JabraDirectSetup.exeFile created: C:\Users\user\AppData\Local\Temp\{332EE04F-741A-4188-8924-1DBA26FBF992}\.ba\license.rtfJump to behavior
Uses new MSVCR Dlls
Source: C:\Windows\System32\msiexec.exeFile opened: C:\Windows\SysWOW64\msvcr100.dll
PE / OLE file has a valid certificate
Source: JabraDirectSetup.exeStatic PE information: certificate valid
Contains modern PE file flags such as dynamic base (ASLR) or NX
Source: JabraDirectSetup.exeStatic PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Binary contains paths to debug symbols
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaterFactory\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.Factories.pdb source: GNAudio.DeviceApis.FirmwareUpdate.Factories.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\MX_UVC\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.MxUvc.pdbSHA256 source: GNAudio.DeviceApis.FirmwareUpdate.MxUvc.dll.8.dr
Source: Binary string: D:\a\1\s\Source\GnProtocolOverUsbHid\obj\Release\net472\GNAudio.DeviceApis.GnProtocol.UsbHid.pdbSHA256 source: GNAudio.DeviceApis.GnProtocol.UsbHid.dll.8.dr
Source: Binary string: C:\src\wix39r2\build\ship\x86\SfxCA.pdb source: MSI3570.tmp.8.dr
Source: Binary string: D:\a\1\s\Source\GnProtocolOverUsbHid\obj\Release\net472\GNAudio.DeviceApis.GnProtocol.UsbHid.pdb source: GNAudio.DeviceApis.GnProtocol.UsbHid.dll.8.dr
Source: Binary string: c:\Development\Open Source\Autofac\src\Source\Autofac\obj\Release\Autofac.pdb source: Autofac.dll0.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR_OTA\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.CsrOta.pdb source: GNAudio.DeviceApis.FirmwareUpdate.CsrOta.dll.8.dr
Source: Binary string: C:\agent\_work\66\s\build\ship\x86\wixca.pdb source: MSI3570.tmp.8.dr
Source: Binary string: D:\a\1\s\Source\Release\SitelHidFwu.pdb source: SitelHidFwu.dll.8.dr
Source: Binary string: C:\B\DKPCSW\Berlin_SoftphonePlugin_CiscoIPCommunicatorIntegration_3.0\Binaries\CustomActions.pdb source: MSI3570.tmp.8.dr
Source: Binary string: D:\a\1\s\Source\Release\BluecorePsKeyApi.pdb source: BluecorePsKeyApi.dll.8.dr
Source: Binary string: C:\src\wix39r2\build\ship\x86\wixca.pdb source: MSI3570.tmp.8.dr
Source: Binary string: C:\agent\_work\66\s\build\ship\x86\burn.pdb source: JabraDirectSetup.exe
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaterFactory\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.Factories.pdbSHA256#;2 source: GNAudio.DeviceApis.FirmwareUpdate.Factories.dll.8.dr
Source: Binary string: D:\a\1\s\Source\CommandLineParser\obj\Release\net472\GNAudio.CommandLineParser.pdb source: GNAudio.CommandLineParser.dll.8.dr
Source: Binary string: D:\a\1\s\Source\CommandLineParser\obj\Release\net472\GNAudio.CommandLineParser.pdbSHA256 source: GNAudio.CommandLineParser.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR_USB_OTA\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.CsrUsbOta.pdbSHA256 source: GNAudio.DeviceApis.FirmwareUpdate.CsrUsbOta.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\MX_UVC\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.MxUvc.pdb source: GNAudio.DeviceApis.FirmwareUpdate.MxUvc.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR_OTA\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.CsrOta.pdbSHA256W source: GNAudio.DeviceApis.FirmwareUpdate.CsrOta.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.Csr.pdbSHA256 source: GNAudio.DeviceApis.FirmwareUpdate.Csr.dll.8.dr
Source: Binary string: D:\a\1\s\Source\Release\SitelHidFwu.pdbEE!GCTL source: SitelHidFwu.dll.8.dr
Source: Binary string: E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb source: System.Buffers.dll.8.dr
Source: Binary string: E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb source: System.Numerics.Vectors.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.Csr.pdb source: GNAudio.DeviceApis.FirmwareUpdate.Csr.dll.8.dr
Source: Binary string: E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb source: System.Threading.Tasks.Extensions.dll.8.dr
Source: Binary string: D:\a\1\s\Source\FirmwareUpdaters\CSR_USB_OTA\obj\Release\net472\GNAudio.DeviceApis.FirmwareUpdate.CsrUsbOta.pdb source: GNAudio.DeviceApis.FirmwareUpdate.CsrUsbOta.dll.8.dr
Source: Binary string: C:\agent\_work\66\s\build\ship\x86\WixStdBA.pdb source: JabraDirectSetup.exe, 00000001.00000002.592449598.000000006D54F000.00000002.00000001.01000000.00000007.sdmp, JabraDirectSetup.exe, 00000007.00000002.595352589.00000000705AF000.00000002.00000001.01000000.0000000D.sdmp
Source: C:\Windows\System32\msiexec.exeFile opened: z:
Source: C:\Windows\System32\msiexec.exeFile opened: x:
Source: C:\Windows\System32\msiexec.exeFile opened: v:
Source: C:\Windows\System32\msiexec.exeFile opened: t:
Source: C:\Windows\System32\msiexec.exeFile opened: r:
Source: C:\Windows\System32\msiexec.exeFile opened: p:
Source: C:\Windows\System32\msiexec.exeFile opened: n:
Source: C:\Windows\System32\msiexec.exeFile opened: l:
Source: C:\Windows\System32\msiexec.exeFile opened: j:
Source: C:\Windows\System32\msiexec.exeFile opened: h:
Source: C:\Windows\System32\msiexec.exeFile opened: f:
Source: C:\Windows\System32\msiexec.exeFile opened: b:
Source: C:\Windows\System32\msiexec.exeFile opened: y:
Source: C:\Windows\System32\msiexec.exeFile opened: w:
Source: C:\Windows\System32\msiexec.exeFile opened: u:
Source: C:\Windows\System32\msiexec.exeFile opened: s:
Source: C:\Windows\System32\msiexec.exeFile opened: q:
Source: C:\Windows\System32\msiexec.exeFile opened: o:
Source: C:\Windows\System32\msiexec.exeFile opened: m:
Source: C:\Windows\System32\msiexec.exeFile opened: k:
Source: C:\Windows\System32\msiexec.exeFile opened: i:
Source: C:\Windows\System32\msiexec.exeFile opened: g:
Source: C:\Windows\System32\msiexec.exeFile opened: e:
Source: C:\Windows\System32\msiexec.exeFile opened: c:
Source: C:\Windows\System32\msiexec.exeFile opened: a:
Source: C:\Users\user\Desktop\JabraDirectSetup.exeCode function: 0_2_01223D4E GetFileAttributesW,GetLastError,GetLastError,SetFileAttributesW,GetLastError,GetTempPathW,GetLastError,FindFirstFileW,GetLastError,SetFileAttributesW,DeleteFileW,GetTempFileNameW,MoveFileExW,MoveFileExW,MoveFileExW,FindNextFileW,GetLastError,GetLastError,GetLastError,GetLastError,RemoveDirectoryW,GetLastError,MoveFileExW,GetLastError,FindClose,
Source: C:\Users\user\Desktop\JabraDirectSetup.exeCode function: 0_2_01263C72 FindFirstFileW,FindClose,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00AE9A1D FindFirstFileW,lstrlenW,FindNextFileW,FindClose,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00B13C72 FindFirstFileW,FindClose,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00AD3D4E GetFileAttributesW,GetLastError,GetLastError,SetFileAttributesW,GetLastError,GetTempPathW,GetLastError,FindFirstFileW,GetLastError,SetFileAttributesW,DeleteFileW,GetTempFileNameW,MoveFileExW,MoveFileExW,MoveFileExW,FindNextFileW,GetLastError,GetLastError,GetLastError,GetLastError,RemoveDirectoryW,GetLastError,MoveFileExW,GetLastError,FindClose,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_00B07437 FindFirstFileExW,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_6D53689C FindFirstFileW,FindClose,
Source: C:\Windows\Temp\{E08359EB-BFFA-49B5-8115-528C8789A364}\.cr\JabraDirectSetup.exeCode function: 1_2_6D5471C2 FindFirstFileExA,
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages\vcRuntimeAdditional_amd64\cab1.cab
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages\NULL
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\NULL
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages\vcRuntimeAdditional_amd64
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages
Source: C:\Windows\Temp\{240BAF75-3E5B-4E93-8F26-E04B9DE786C2}\.be\JabraDirectSetup.exeFile opened: C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages\vcRuntimeAdditional_amd64\NULL
Source: JabraDirectSetup.exeString found in binary or memory: http://appsyndication.org/2006/appsyn
Source: JabraDirectSetup.exeString found in binary or memory: http://appsyndication.org/2006/appsynapplicationc:
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://audio.v2.soap.uc.cisco.com/types
Source: Autofac.dll0.8.drString found in binary or memory: http://autofac.org
Source: Autofac.dll0.8.drString found in binary or memory: http://autofac.org8
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: MSI3570.tmp.8.drString found in binary or memory: http://cacerts.digicert.com/NETFoundationProjectsCodeSigningCA.crt0
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com(
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onAudioSnapshot
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onCapabilitiesUpdatedT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onCurrentInputVolumeUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onCurrentOutputVolumeUpdated_
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onDeadConnectionStateUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onDefaultInputVolumeUpdated_
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onDefaultOutputVolumeUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onDevicePluggedInT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onDeviceUnpluggedW
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onError
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onInputDeviceRemovedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onInputDeviceUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onMuteStateUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onOutputDeviceRemoved_
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onOutputDeviceUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onRingerDeviceUpdatedU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.com/onRingerVolumeUpdatedW
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comm
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comn
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comp
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comq
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comw
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.audio.v2.soap.uc.cisco.comx
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onCapabilitiesUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onConfigDataCreatedW
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onConfigDataDeletedW
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onConfigDataUpdatedT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onConfigSnapshotK
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.com/onErrorY
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.comm
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.config.v2.soap.uc.cisco.comp
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onCapabilitiesUpdatedk
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onConversationCapabilitiesUpdatede
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onConversationConfigUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onConversationEnded
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onConversationSnapshot
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onConversationStarted
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onError
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onParticipantAdded
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onParticipantChanged
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onParticipantMediaDataUpdatedQ
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onParticipantRemovedg
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com/onRemoteMediaOffered_
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comu
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comv
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comw
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comx
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.comy
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.conversation.v2.soap.uc.cisco.com~
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onCapabilitiesUpdatedV
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onDeviceAdded
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onDeviceRemovedY
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onDeviceSelectedS
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onDeviceSnapshotS
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onDeviceUpdatedT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onErrorT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.com/onPhoneModeUpdatedQ
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.comj
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.coml
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.comm
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.device.v2.soap.uc.cisco.como
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onCallParkedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onCapabilitiesUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onDefaultLineUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onDoNotDisturbUpdatedO
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onErrorU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onLineStateRemovedW
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onLineStateUpdatedR
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onPhoneParticipantUpdatedU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onPhoneResetJ
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.com/onPhoneSnapshotO
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comh
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comk
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comn
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comp
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comq
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comu
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.phone.v2.soap.uc.cisco.comy
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onCapabilitiesUpdatedX
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onCustomPresenceStatesUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onDerivedPresenceUpdatedZ
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onError
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onPresenceSnapshotc
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onPrivacyListUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.com/onSubscriptionRequest
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.comq
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.coms
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.comt
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.presence.v2.soap.uc.cisco.comw
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/heartbeatT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/onCapabilitiesUpdatedM
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/onError
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/onServerHealthUpdated
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/onStartedT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com/onSystemSnapshotY
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.com9
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.comf
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.comm
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.comn
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://client.system.v2.soap.uc.cisco.comr
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://config.v2.soap.uc.cisco.com/types
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://conversation.v2.soap.uc.cisco.com/types
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: MSI3570.tmp.8.drString found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0=
Source: MSI3570.tmp.8.drString found in binary or memory: http://crl3.digicert.com/NETFoundationProjectsCodeSigningCA.crl0E
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: MSI3570.tmp.8.drString found in binary or memory: http://crl4.digicert.com/NETFoundationProjectsCodeSigningCA.crl0L
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://device.v2.soap.uc.cisco.com/types
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://ocsp.digicert.com0C
Source: MSI3570.tmp.8.drString found in binary or memory: http://ocsp.digicert.com0K
Source: MSI3570.tmp.8.drString found in binary or memory: http://ocsp.digicert.com0N
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: http://ocsp.digicert.com0O
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://phone.v2.soap.uc.cisco.com/types
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://presence.v2.soap.uc.cisco.com/types
Source: JabraDirectSetup.exeString found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: JabraDirectSetup.exeString found in binary or memory: http://s2.symcb.com0
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAudioInputDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAudioInputDevices
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAudioOutputDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAudioOutputDevices
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAudioStatisticsForConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getAutomaticGainControlParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getCurrentInputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getCurrentOutputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getDefaultInputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getDefaultOutputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getEchoCancellationParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getNoiseSuppressionParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getRingerDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getRingerVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/getVoiceActivityDetectionParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/mute
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/playAudioFile
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setAudioInputDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setAudioOutputDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setAutomaticGainControlParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setCurrentInputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setCurrentOutputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setDefaultInputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setDefaultOutputVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setEchoCancellationParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setInputLowFreqRolloff
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setLowBandwidthMode
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setNoiseSuppressionParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setOutputLowFreqRolloff
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setRingerDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setRingerVolume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/setVoiceActivityDetectionParameters
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/unmute
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.audio.v2.soap.uc.cisco.comTU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.com/createConfigData
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.com/deleteConfigData
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.com/updateConfigData
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.config.v2.soap.uc.cisco.comTU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/acceptIncomingConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/addMediaToConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/addParticipant
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/endConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/merge
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/mute
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/rejectIncomingConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/removeMediaFromConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/removeParticipants
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/startConversation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/unmute
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.com/updateConversationConfig
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.conversation.v2.soap.uc.cisco.comTU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v1.soap.uc.cisco.com/setDefaultLine
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/disableDeviceSelectionEvents
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/enableDeviceSelectionEvents
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/initialize
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/selectDevice
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/selectDeviceAndLine
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/setDeviceAlias
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/setLineAlias
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/setPhoneMode
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.comF
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.device.v2.soap.uc.cisco.comTU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/attendedTransferToContact
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/attendedTransferToNumber
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/callForwardToContact
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/callForwardToNumber
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/callForwardToVoiceMail
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/callPark
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/cancelAttendedTransfer
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/completeAttendedTransfer
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/deleteCtlFile
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/disableCallForward
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/disableMobility
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/enableMobility
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/enrollCertificate
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/getCallStatistics
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/getVoicemailPilotNumber
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/hold
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/iDivert
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/initialize
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/resume
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/sendDtmfTone
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/sendToMobile
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/setDoNotDisturb
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/unattendedTransferToContact
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/unattendedTransferToNumber
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.comE
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.comH
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.comL
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.phone.v2.soap.uc.cisco.comTU
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/clearToDerivedPresenceT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/createCustomPresenceStateT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/initializeT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/respondToSubscriptionRequestT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/setPresenceT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/setPrivacyListT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/subscribeT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.com/unsubscribeT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.comk
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.comq
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.presence.v2.soap.uc.cisco.coms
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getCredentials
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getLogLevel
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getProductInformation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getProfileName
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getServerAddressTypes
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/getServicesInformation
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/heartbeat
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/refreshClient
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/registerClient
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/setCredentials
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/setLogLevel
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/setServerAddressTypes
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/subscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/unregisterClient
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.com/unsubscribe
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.comT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://service.system.v2.soap.uc.cisco.comTU
Source: JabraDirectSetup.exeString found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: JabraDirectSetup.exeString found in binary or memory: http://sv.symcb.com/sv.crt0
Source: JabraDirectSetup.exeString found in binary or memory: http://sv.symcd.com0&
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://system.v2.soap.uc.cisco.com/types
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Base
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/BaseT
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/BaseV
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Basea
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Based
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Baseg
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Basek
Source: CiscoUCIntegration_Part.dll.8.drString found in binary or memory: http://v2.soap.uc.cisco.com/Basep
Source: MSI3570.tmp.8.drString found in binary or memory: http://wixtoolset.org
Source: JabraDirectSetup.exe, 00000007.00000002.592749628.0000000003A90000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000007.00000002.591430030.0000000003520000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://wixtoolset.org/schemas/thmutil/2010
Source: JabraDirectSetup.exe, 00000001.00000002.590709679.0000000003190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://wixtoolset.org/schemas/thmutil/2010(
Source: JabraDirectSetup.exe, 00000007.00000002.592749628.0000000003A90000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://wixtoolset.org/schemas/thmutil/2010d=am
Source: JabraDirectSetup.exeString found in binary or memory: http://www.digicert.com/CPS0
Source: JabraDirectSetup.exeString found in binary or memory: http://www.jabra.com0
Source: JabraDirectSetup.exe, 00000001.00000002.577714200.0000000000DE9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://www.opensource.org/licenses/cpl1.0.txt
Source: JabraDirectSetup.exeString found in binary or memory: http://www.symauth.com/cps0(
Source: JabraDirectSetup.exeString found in binary or memory: http://www.symauth.com/rpa00
Source: icudtl.dat.8.drString found in binary or memory: http://www.unicode.org/copyright.html
Source: JabraDirectSetup.exe, 00000011.00000002.579373059.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470019154.0000000000BA3000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470110504.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470248628.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470520659.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470851239.0000000000BB0000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000003.470481499.0000000000BB0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://backend-xpress.jabra.com/a86)=C:
Source: JabraDirectSetup.exe, 00000000.00000003.310166973.000000000087E000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000000.00000002.578347505.000000000087E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://backend-xpress.jabra.com/api/
Source: JabraDirectSetup.exe, 00000005.00000003.360748648.0000000000872000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360935166.0000000000872000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://backend-xpress.jabra.com/api/Xpress/N
Source: JabraDirectSetup.exe, 00000011.00000003.442601693.0000000000B77000.00000004.00000020.00020000.00000000.sdmp, MSI3570.tmp.8.drString found in binary or memory: https://backend-xpress.jabra.com/api/Xpress/Network/d880dc5e-a8c1-4b85-b451-87580bdae16f
Source: JabraDirectSetup.exe, 00000005.00000003.358928931.000000000089B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://backend-xpress.jabra.com/api/Xpress/Network/d880dc5e-a8c1-4b85-b451-87580bdae16fDb
Source: JabraDirectSetup.exe, 00000000.00000002.581565705.0000000002CB0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000001.00000002.590709679.0000000003190000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000002.00000002.581734533.00000000030E0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000006.00000002.580218071.0000000003750000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000007.00000002.592749628.0000000003A90000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000002.590934046.00000000033A0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://backend-xpress.jabra.com/api/Xpress/Network/d880dc5e-a8c1-4b85-b451-87580bdae16fd=am
Source: et.pak.8.dr, zh-TW.pak.8.drString found in binary or memory: https://bugs.chromium.org/p/chromium/issues/entry?template=Safety
Source: JabraDirectSetup.exeString found in binary or memory: https://d.symcb.com/cps0%
Source: JabraDirectSetup.exeString found in binary or memory: https://d.symcb.com/rpa0
Source: System.Numerics.Vectors.dll.8.drString found in binary or memory: https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf
Source: System.Numerics.Vectors.dll.8.drString found in binary or memory: https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf8
Source: System.Threading.Tasks.Extensions.dll.8.dr, System.Buffers.dll.8.drString found in binary or memory: https://github.com/dotnet/corefx/tree/7601f4f6225089ffb291dc7d58293c7bbf5c5d4f
Source: System.Threading.Tasks.Extensions.dll.8.dr, System.Buffers.dll.8.drString found in binary or memory: https://github.com/dotnet/corefx/tree/7601f4f6225089ffb291dc7d58293c7bbf5c5d4f8
Source: ar.pak.8.dr, en-US.pak.8.dr, id.pak.8.dr, bg.pak.8.dr, ko.pak.8.dr, ru.pak.8.dr, fa.pak.8.dr, et.pak.8.dr, zh-TW.pak.8.drString found in binary or memory: https://support.google.com/chrome/answer/6098869
Source: JabraDirectSetup.exe, MSI3570.tmp.8.drString found in binary or memory: https://www.digicert.com/CPS0
Source: JabraDirectSetup.exe, 00000002.00000002.580259743.0000000002D30000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360875933.000000000089C000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360748648.0000000000872000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360935166.0000000000872000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360771640.000000000089C000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000002.361457273.0000000000858000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360482891.0000000002920000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.358928931.000000000089B000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360706416.000000000089C000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000005.00000003.360148579.0000000002C9A000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000006.00000002.579977537.0000000003570000.00000004.00000020.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000002.589444911.0000000002E30000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.jabra.com
Source: JabraDirectSetup.exe, 00000011.00000002.589444911.0000000002E30000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.jabra.com/direct
Source: JabraDirectSetup.exe, 00000000.00000002.581565705.0000000002CB0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000001.00000002.590709679.0000000003190000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000002.00000002.581734533.00000000030E0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000006.00000002.580218071.0000000003750000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000007.00000002.592749628.0000000003A90000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000002.590934046.00000000033A0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.jabra.com/directd=am
Source: JabraDirectSetup.exe, 00000000.00000002.581565705.0000000002CB0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000001.00000002.590709679.0000000003190000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000002.00000002.581734533.00000000030E0000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000006.00000002.580218071.0000000003750000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000007.00000002.592749628.0000000003A90000.00000004.00000800.00020000.00000000.sdmp, JabraDirectSetup.exe, 00000011.00000002.590934046.00000000033A0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.jabra.comd=am