Quantcast
Channel: Forensic Artifacts » Windows
Viewing all articles
Browse latest Browse all 13
↧

ActionVoip – Windows client

March 28, 2014, 8:39 am
$
0
0
Author Name
Mohammed Faiz Quadri
Artifact or Program Version
4.14 (Same may apply on older versions)
Artifact Description
This artifact is for Actionvoip client for Windows.

ActionVoip is a program to make VOIP calls from the a PC or a Smart phone. It is used by thousands of users worldwide to make free/cheap phones calls. It is not mandatory for a user to provide their identity information while making a call. The user ID shown on the receiving phone is usually an “Unknown” number.
Registry Keys

HKU\<<>>\Software\ActionVoip\ActionVoip\Accounts\Password: <<>>

HKU\<<>>\Software\ActionVoip\ActionVoip\Accounts\Username: “<<>>”

HKU\<<>>\Software\ActionVoip\ActionVoip\CallHistory\<<>>\Count: 0×00000002 —> REG_DWORD value showing the number of calls made from the account

HKU\<<>>\Software\ActionVoip\ActionVoip\CallHistory\<<>>\Call_00: “001234567″ —> Values showing the phone number dialed

HKU\<<>>\Software\ActionVoip\ActionVoip\CallHistory\<<>>\Call_01: “0012345678″ —> Values showing the phone number dialed

HKU\<<>>\Software\ActionVoip\ActionVoip\<<>>\CallerId: CallerIdForCalls —> Caller ID user for making calls

HKU\<<>>\Software\ActionVoip\ActionVoip\<<>>\CallerId: CallerIdForSMS —> Caller ID user for sending SMS
File Locations
C:\Users\mohfa04\AppData\Roaming\ActionVoip\History_<<>>.dat —> History files showing details of the calls made from the account

Sample Data -

TYPE=CALL
NUMBER=00123456789
NAME=
CALLTYPEV2=2
OTHERPARTYTYPE=2
ENDCAUSE=3
ENDCAUSESIP=-1
ENDCAUSESTRING=
ENDLOCATION=4
CALLSTARTTIME=2013-2-23 16:50:20
CONNSTARTTIME=1970-1-1 5:30:0
CALLENDTIME=2013-3-23 16:50:37
CALLENDTIME=2013-3-23 16:50:37
NEWVOICEMAIL=NO
Research Links
actionvoip.com
Forensic Programs of Use
ProcessExplorer
RegShot
↧
Search
Viewing all articles
Browse latest Browse all 13

Trending Articles

Practice Sheet of Right form of verbs for HSC Students

September 22, 2019, 11:40 pm

Download: FK ft Shenky – Nakuyewa ”Prod by: Shenky”

February 16, 2017, 4:24 pm

How to win at Markstrat (Markstrat Tips and Tricks) – Vodites

January 5, 2014, 10:34 pm

Ominde Commission Report and Recommendations – Ominde Report of 1964

March 16, 2015, 5:14 am

Bureau of Internal Revenue: Regional Offices (Directory)

January 9, 2014, 11:06 pm

GO 53 on Enhancement of Ex-gratia upto 5 Lakhs Toddy Tappers in Telangana

March 26, 2017, 11:23 pm

Cakewalk CA-2A Leveling Amplifier v2.0.1.97 WiN, v2.0.1.96 OSX Incl Keygen

October 17, 2016, 7:20 am

Mp3 Download: Mdu - Kunjenjenjena

December 7, 2017, 8:16 am

How the kill the job , when DTP request running for long hours.

July 26, 2013, 2:41 am

Microsoft Intune から展開しているアプリのアップデートについて

October 17, 2016, 4:11 am

18-year-old girl was beaten for half an hour by two Northampton men in 'an...

September 1, 2017, 10:00 pm

Car crash in Dunton Bassett leaves driver in critical condition

October 7, 2014, 7:51 am

Macky 2, Two Others In Road Accident

March 29, 2015, 5:34 am

Application log 00000000000000089514: Could not convert queue DLVST90CLNT

May 14, 2015, 11:27 pm

Detroit mafia: D’Anna Brothers agree to plea deal

April 21, 2016, 6:56 am

Delivery block field greyed out using VA02

January 26, 2016, 2:52 pm

Muloraki Au

June 22, 2016, 1:44 am

【個人撮影】スマホのプライベート映像♪「中に出さないで///」カラオケ屋での生ハメ撮りが流出ｗ【リベンジポルノ】＠PornHub

October 12, 2017, 2:23 pm

BREAKING NEWS: Diamond Platnumz Is Reported Dead After Ghastly Car Accident

February 9, 2018, 4:56 am

FIAT 500 B0111 B0112

July 5, 2018, 10:31 am
Search