Windows Analysis Report
https://www.neat-reader.com/download/start-download?target=windows

Overview

General Information

Sample URL: https://www.neat-reader.com/download/start-download?target=windows
Analysis ID: 1521513
Infos:

Detection

Score: 8
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Signatures

Contains functionality for read data from the clipboard
Contains functionality to call native functions
Contains functionality to dynamically determine API calls
Contains functionality to shutdown / reboot the system
Detected potential crypto function
Drops PE files
Enables security privileges
Found dropped PE file which has not been started or loaded
Installs a raw input device (often for capturing keystrokes)
PE file contains an invalid checksum
PE file contains sections with non-standard names
PE file does not import any functions
PE file overlay found
Stores files to the Windows start menu directory
Uses Microsoft's Enhanced Cryptographic Provider
Uses code obfuscation techniques (call, push, ret)

Classification

Uses Microsoft's Enhanced Cryptographic Provider
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F7CE9 CryptUnprotectData, 12_2_6F6F7CE9
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F7DA3 _wcsicmp,??2@YAPAXI@Z,CryptProtectData, 12_2_6F6F7DA3
Source: https://www.neat-reader.com/download/start-download?target=windows HTTP Parser: No favicon
Source: https://www.neat-reader.com/download/start-download?target=windows HTTP Parser: No favicon
Source: https://www.neat-reader.com/download/start-download?target=windows HTTP Parser: No favicon
Source: https://www.neat-reader.com/download/android-epub-reader HTTP Parser: No favicon
Source: https://www.neat-reader.com/ HTTP Parser: No favicon
Source: https://www.neat-reader.com/ HTTP Parser: No favicon
Source: https://play.google.com/store/apps/details?id=com.mobile.legends&pcampaignid=merch_published_cluster_promotion_battlestar_top_picks HTTP Parser: No favicon
Source: https://www.neat-reader.com/auto-activity?guid=83f4c120-7dc1-4372-b266-ca17c2470b3f HTTP Parser: No favicon
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\LICENSE.electron.txt Jump to behavior
Source: Binary string: ffmpeg.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libEGL.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vulkan-1.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960405089.0000000005AD0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960137150.0000000005220000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: electron.exe.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007505000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: electron.exe.pdb0 source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007505000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libGLESv2.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libGLESv2.dll.pdbp" source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vulkan-1.dll.pdb@ source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960405089.0000000005AD0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960137150.0000000005220000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vk_swiftshader.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: M.pdB source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E45000.00000004.00001000.00020000.00000000.sdmp
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_004059CC GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose, 12_2_004059CC
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_004065FD FindFirstFileW,FindClose, 12_2_004065FD
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00402868 FindFirstFileW, 12_2_00402868
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list\libs Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list\libs\darwin Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list Jump to behavior
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: * **Google Hangouts Video**: http://www.youtube.com/watch?v=I9nDOSGfwZg equals www.youtube.com (Youtube)
Source: chromecache_534.2.dr String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){hJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_534.2.dr String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: V8.MemoryHeapUsedV8.MemoryHeapCommitted.gmail.docs.plus.inboxcalendar.google.com.calendarwww.youtube.com.youtube.top10sina.com.cnfacebook.combaidu.comqq.comtwitter.comtaobao.comlive.comwikipedia equals www.youtube.com (Youtube)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1085
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1452
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1452expand_integer_pow_expressionsThe
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1512
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1637
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1936
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2046
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2152
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2152skip_vs_constant_register_zeroIn
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2162
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2273
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2514
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2517
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2727
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2970
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2978
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3016
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3027
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3045
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3078
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3153
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3205
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3206
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3243
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3246
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3246allow_clear_for_robust_resource_initSome
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3452
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3498
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3502
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3529
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3584
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3623
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3624
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3625
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3682
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3682GL_USES_FRAG_COLORGL_USES_FRAG_DATA_SECONDARY_COLORGL_USES_SECONDARGL_USES_F
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3729
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3859
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3970
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3997
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4214
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4267
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4324
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4339
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4384
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4405
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4428
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4551
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4633
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4646
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/482
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4836
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4901
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4937
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4995
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007disable_anisotropic_filteringDisable
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5055
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5061
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5281
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5375
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5469
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5535
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750ANGLE_DEFAULT_PLATFORMvulkanvulkan-nullswiftshadergld3d11GPU.ANGLE.DisplayIn
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://blog.izs.me
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://blog.izs.me/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://blog.izs.me/)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1094869
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/110263
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1144207
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1165751
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1165751Disable
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/1171371
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/308366
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/403957
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/565179
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/642227
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/642605
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/644669
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/650547
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/672380
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/709351
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/772651
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/797243
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/809422
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/830046
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/849576
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/883276
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/927470
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/941620
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://crbug.com/941620allow_translate_uniform_block_to_structured_bufferThere
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://creativecommons.org/publicdomain/zero/1.0/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://debuggable.com/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007300000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://feross.org
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/00e8f7a1b7603aabdb7fb3567f485cb1c2076702)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/0251b38a8405471892c5eeaba7c8d54bd7028214)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/04e07fdc620841068f12b8edf36f27e6592a0a18)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/12960c437cc25c53e682cfe5bff06d74a5bb1eb9)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/130e363856747b487652f04b5550056d7778e43a)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/132c9ee63f92a586a120ed3bd6b7ef023badb8bb)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/2180839eda2cb16edcfda46ccfe24711680af850)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/219bf22237b11bc375e2e110b93db512f1acfdd4)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/23f7f545abfe1fb6499cd61cc8ff41fd86cef4a0)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/287e589ac773d3738b2aa7d40e0b6d43dde5261b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/2c86b10feafd868ebd071dda3a222e6f51972b5d)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/2d1c5981869e0fe6f5bc71b5c5582accfd125cc6)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/2ee32f50b88b383317e33cc0a4bfaa5f2eadead7)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/2f2078bf998bd3f44289ebd17eeccf5e12e4c134)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/325792aee92de0ba6fea306657933fc63dc00474)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/3b23865340cfba075f61f7dba0ea31fcc27260ec)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/422e539e8989e65ba43ecc39ddbaa3c4f755d465)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/48993ade9b0831fbce28d94b3b0963a4b0dccbdd)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/49642428342e5f291eb9d690802e83ed830623b5)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/4dc56f6d04e8f5fe12ba53a8a776653b3d7b60ed)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/4f968298f97394e488297ec32c8e927a3a322076)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/52a673703a87a93c0f6a8552e6bd73caba66d2eb)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/54e8fab3e3d907bbb264caf3e28a24773d0d6fdb)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/5560f729124f022ffed00085aafea43dded7fb03)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/5810f279a4caeda115f39e429c9671795613abf8)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/5afff89eca0efe7081309dc2d123309e825df221)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/62f29eb0c4dee01170a5511615e5bcc9faca26ca)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/71aaa29591d6681f8579486f18d32ba1ee651a5b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/72f325b78edd0dc2aac940a76ce5f644005ce4c3)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/75233d974a30af6e3b8ab38a73e5ede67172fc1c)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/7e46c2058cb5994809eab5f4dbb12f21e937c72b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/817b49830571b45a8aec6b1fc1525434f5798c58)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/88b92b43153f21609aee71d47abcd4dc27a6586d)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/8be5626bbb54e6c899a1b71d22411709126d9fea)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/9146024e1094e8bb871ab15d1b7fc556a710732f)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/99051992a9f45eb0dd79e062681d6f5d366deb41)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/9be858312553002841725b617050aaff3c48951d)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/9c5c58b18363494976185e7ddc790ac63de840ed)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/a007198fa23c19902b1f3ffb81498629e0e9c875)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/a245d18a131341feec4f87659746954e78cae780)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/acb388bc0546b48fca11dce8aa7a595af2cda5e2)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/ad91ce2346cb34e5d5a49d07dd952d15f6c832a3)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b15115b2cbfffe15827cd5e4368267d417b72f08)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b25e79dfb599777a38157bd419395bd28369ee86)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b7bfa7113b8d1af49a57ab767f24a599ed92044f)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b7fc526ea49894f366153bd32997e02568c0b8a6)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b968688afe2c727ae141f50aa983d481dbc1dbbf)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/b9e35469d3bbd0a1ee92e0a815ce2512904d4a18)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/bc81ca9414296234c764b7306a19ba72b2e59b52)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/be7d334778481639294cdf87f5c359a230aeb65b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/cf70dbc6d2ba62bf1eb12b563dd5ecd27af6e2be)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d1d65dd29d7bbaf9ea42eaa5fcb0da3fb4df98e9)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d32623baa7a6273d47be67d587ad4ea0ecffc5de)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d48d88ee17b780c02123e6d657274cab456e943e)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d4bdb5ed9e2fe06ec44698b66c029f624135a0ab)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d7f7f77689e2eaef050686be2bdf3e72881a79ac)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/d9ef60398e88f2c2f958ab2b159d38052ffe7f8a)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/ef5c43bcbcf31819e032c3b7ae7654b7f8e9358b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/f155785e2bb42b5ddf0a8156401c6dafdf57ba8b)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/f75d4455359ecdf30eeb676e2c7f31d4cf7b42ed)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/f90e825da9d505c11b4262c50cd54553f979c300)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/fc93c05f68398f30abc46fd16ae6c673a1eee099)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/koajs/koa/commit/ff70bdc75a30a37f63fc1f7d8cbae3204df3d982)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/node-modules/ylru/commit/475abb0e9c787fd65d7c3dd3d2d74d67560b0bec)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/oozcitak/xmlbuilder-js
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/qix-
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/substack/js-traverse.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/visionmedia/expresso
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://google.com
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://issuetracker.google.com/173636783
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jedschmidt.com)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jongleberry.com
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jquery.org/license
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jsperf.com/javascript-array-concat-vs-push/98
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ljharb.codes
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://mathiasbynens.be/notes/javascript-encoding#surrogate-formulae
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://mths.be/fromcodepoint
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://n8.io/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://paul.vorba.ch
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://peter.michaux.ca/articles/lazy-function-definition-pattern)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://requirejs.org/docs/errors.html#mismatch
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://stackoverflow.com/a/1068308/13216
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://substack.net
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://substack.net)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://underscorejs.org/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://underscorejs.org/LICENSE
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://unisolated.invalid
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://unisolated.invalidsms_fetcherBlink.Sms.Receive.TimeSmsReceiveBlink.Sms.Receive.TimeCancelOnSu
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://wonko.com/post/html-escaping)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.another-d-mention.ro/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2907318497.00000000069C0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/comms.html#crossDocumentMessages
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.youtube.com/watch?v=I9nDOSGfwZg
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4674
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4849
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5140
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=2070)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=90
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=156034
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://chromium.googlesource.com/angle/angle/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crashpad.chromium.org/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crashpad.chromium.org/bug/new
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crashpad.chromium.org/https://crashpad.chromium.org/bug/new
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1042393
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1046462
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1091824
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/1137851
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/401439).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/593024
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/593024select_view_in_geometry_shaderThe
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/650547
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/650547call_clear_twiceUsing
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/655534
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/655534use_system_memory_for_constant_buffersCopying
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/705865
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/710443
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://crbug.com/811661
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.chrome.com/extensions/sandboxingEval).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://developer.mozilla.org/en/DOM/window.postMessage
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://docs.google.com/document/d/17aTgLnjMXIrfjgNaTUnHQO7m3xgzHR2VXBTmi03Qii4/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://es5.github.io/#x13.2.2
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://es5.github.io/#x15.1.2.2)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/3rd-Eden/kuler
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/3rd-Eden/kuler.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/3rd-Eden/text-hex
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/3rd-Eden/text-hex.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Leonidas-from-XIV/node-xml2js
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/Leonidas-from-XIV/node-xml2js.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/RyanZim/universalify#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/RyanZim/universalify.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/TooTallNate/util-deprecate
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/WebReflection/get-own-property-symbols/issues/4
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/YuzuJS/setImmediate#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/YuzuJS/setImmediate.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ZJONSSON/node-unzipper#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ZJONSSON/node-unzipper.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/alessioalex/tiny-each-async#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/alessioalex/tiny-each-async.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/antelle
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/antelle/node-stream-zip
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/antelle/node-stream-zip.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/antelle/node-stream-zip/blob/master/LICENSE
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/bnjmnt4n/lodash-cli.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/calvinmetcalf/process-nextick-args
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/calvinmetcalf/process-nextick-args.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/component/toidentifier#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/component/toidentifier.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/crypto-utils/keygrip#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/crypto-utils/keygrip.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/cthackers/adm-zip
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/es-shims/String.prototype.trimEnd#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/es-shims/String.prototype.trimStart#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/es-shims/es5-shim
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/es-shims/es6-shim
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/es-shims/object.getownpropertydescriptors#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/expressjs/vary)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/felixge/node-stack-trace
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/feross/safe-buffer
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/golang/go/blob/master/src/archive/zip/reader.go#L503
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/gyson/koa-convert#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/gyson/koa-convert.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/hgouveia/node-downloader-helper
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/hgouveia/node-downloader-helper.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/hgouveia/node-downloader-helper/issues)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/inspect-js/object-inspect
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/inspect-js/which-boxed-primitive#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/inspect-js/which-boxed-primitive.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/issues/101)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/issues/102)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/issues/105)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/issues/106
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/issues/99)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/iojs/readable-stream/labels/wg-agenda
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/isaacs/minimatch#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/isaacs/once#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/isaacs/sax-js#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jashkenas/underscore/pull/1247
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jden/node-listenercount#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/joyent/node
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/joyent/node/pull/7878
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jprichardson/node-jsonfile#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/jquery
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/jquery.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/jquery/blob/3.2.1/AUTHORS.txt
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/sizzle
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/basic-auth/issues/39
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/http-assert
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/http-errors
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/media-typer#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/media-typer.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/mime-db#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/mime-db.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/mime-types#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/mime-types.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/negotiator#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/negotiator.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/on-finished#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/on-finished.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/statuses#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/statuses.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/type-is#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/type-is.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/vary#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/jshttp/vary.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose/blob/4e3e96baf58b817d71bd44a8c0d78bb42623aa95/index.js#L36
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose/pull/27
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose/pull/61
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/compose/pull/65
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/json)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa/blob/master/docs/error-handling.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa/blob/master/docs/migration.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa/pull/438).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa/pull/614
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koa/pull/668
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/koajs.com/pull/38.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/send
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/static#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/koajs/static.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/object-keys#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/object.assign#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/object.assign/issues/17
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/unbox-primitive#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/unbox-primitive.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/util.promisify#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/ljharb/util.promisify.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/lodash/lodash
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/lodash/lodash.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/lodash/lodash/blob/4.17.15/dist/lodash.js#L6735-L6744
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/TSC/blob/master/Moderation-Policy.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/b1c8f15c5f169e021f7c46eb7b219de95fe97603/lib/util.js#L201-L230
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/b3fcc245fb25539909ef1d5eaa01dbf92e168633/lib/path.js#L56
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/master/CODE_OF_CONDUCT.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/blob/v4.4.7/lib/_http_server.js#L486
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/issues/3043
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/node/pull/3073
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/readable-stream#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/nodejs/string_decoder
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/npm/wrappy
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/npm/wrappy.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/olado/doT).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pillarjs/parseurl#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pillarjs/parseurl.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pillarjs/resolve-path#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pillarjs/resolve-path.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pvorb/node-md5#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/qix-/node-simple-swizzle#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/qix-/node-simple-swizzle.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/sindresorhus/path-is-absolute#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/sindresorhus/path-is-absolute.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/sindresorhus/time-zone#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/sindresorhus/time-zone.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/sponsors/ljharb
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/substack/js-traverse#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/substack/minimist
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/substack/node-hashish).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/substack/node-mkdirp.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/suryagh/tsscmp#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/suryagh/tsscmp.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/unshiftio/one-time#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/unshiftio/one-time.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/visionmedia/node-only#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/wesleytodd/setprototypeof
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/wesleytodd/setprototypeof.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/logform#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/logform.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/triple-beam#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/triple-beam.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston-transport#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston/blob/2.x/lib/winston/logger.js#L198-L201
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston/blob/master/UPGRADE-3.0.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/zeit/ms#readme
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/zeit/ms.git
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://goo.gl/yabPex
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://guides.github.com/activities/contributing-to-open-source/).MIT
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/infrastructure.html#space-character
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/infrastructure.html#strip-and-collapse-whitespace
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/161903006
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/166809097
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jquery.com
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jquery.com/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jquery.org/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jquery.org/license
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://js.foundation/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://lodash.com/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://lodash.com/)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://lodash.com/custom-builds).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://lodash.com/icon.svg
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://lodash.com/license
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mathiasbynens.be/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E7A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mathiasbynens.be/notes/javascript-unicode).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Array/reverse).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Array/slice)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Number/isFinite).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Number/isInteger).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Number/isNaN)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Number/isSafeInteger).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Object/assign).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/String/replace).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/String/split).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/Structured_clone_algorithm)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/clearTimeout).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/isNaN)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/iteration_protocols#iterator).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/rest_parameters).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/round#Examples)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/setTimeout).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/spread_operator).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/toLowerCase).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mdn.io/toUpperCase).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://monitoring.url.loader.factory.invalid
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://monitoring.url.loader.factory.invalidPermissions
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://mths.be/he).
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://nodejs.org/api/http.html#http_response_writableended
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://nodejs.org/api/stream.html#stream_readable_pipe_destination_options
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://openjsf.org/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pkware.cachefly.net/webdocs/casestudies/APPNOTE.TXT
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-48
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-54
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-57
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-59
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-61
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-64
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://promisesaplus.com/#point-75
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://raw.githubusercontent.com/cthackers/adm-zip/master/LICENSE
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://registry.npmjs.org
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://sizzlejs.com/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://stackoverflow.com/questions/16254385/undocumented-response-finished-in-node-js
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://w3c.github.io/encrypted-media/#direct-individualization.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://w3c.github.io/encrypted-media/#distinctive-identifier)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://w3c.github.io/encrypted-media/#distinctive-permanent-
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5148698084376576
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5669008342777856
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5709390967472128
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5742188281462784.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromestatus.com/feature/5742188281462784.CancelDeferredNavigationWillFailRequestDidComm
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromium.org/blink/origin-trials/portals
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.chromium.org/blink/origin-trials/portalsPrerenderHost::StartPrerenderingrender_frame_hos
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.google.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.google./_/chrome/plus.google.cominbox.google.comdrive.google.comServiceWorker.DiskCache.
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.google.com/speech-api/full-duplex/v1
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.google.com/speech-api/full-duplex/v1key=pair=output=pb/down?speech_recognition_downstrea
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocatemacAddresssignalStrengthsignalToNoiseRatiowifiAcc
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.gstatic.com/securitykey/a/google.com/origins.json
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.gstatic.com/securitykey/origins.json
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.00000000069C0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.gstatic.com/securitykey/origins.jsonhttps://www.gstatic.com/securitykey/a/google.com/ori
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/february/double-hmac-verificati
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.npmjs.com/package/babel-polyfill)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906837489.00000000056D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://xivilization.net
Contains functionality for read data from the clipboard
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00405461 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,ShowWindow,ShowWindow,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageW,CreatePopupMenu,AppendMenuW,GetWindowRect,TrackPopupMenu,SendMessageW,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageW,GlobalUnlock,SetClipboardData,CloseClipboard, 12_2_00405461
Installs a raw input device (often for capturing keystrokes)
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007300000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: RegisterRawInputDevices() failed for RIDEV_REMOVE memstr_1c577cd0-0
Contains functionality to call native functions
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_100010D0 GetVersionExW,LoadLibraryW,GetProcAddress,LocalAlloc,LocalAlloc,NtQuerySystemInformation,LocalFree,LocalAlloc,FreeLibrary,lstrcpynW,lstrcmpiW,LocalFree,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,lstrlenW,lstrlenA,MultiByteToWideChar,lstrcmpiW,CloseHandle,FreeLibrary, 12_2_100010D0
Contains functionality to shutdown / reboot the system
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_0040338F EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,OleUninitialize,ExitProcess,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 12_2_0040338F
Detected potential crypto function
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00406B15 12_2_00406B15
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_004072EC 12_2_004072EC
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00404C9E 12_2_00404C9E
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F8162 12_2_6F6F8162
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F8561 12_2_6F6F8561
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F8F7D 12_2_6F6F8F7D
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F927A 12_2_6F6F927A
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F1378 12_2_6F6F1378
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6FA83A 12_2_6F6FA83A
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6F840D 12_2_6F6F840D
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6FAF1C 12_2_6F6FAF1C
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6FABA9 12_2_6F6FABA9
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F901B5F 12_2_6F901B5F
Enables security privileges
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Process token adjusted: Security Jump to behavior
PE file does not import any functions
Source: 5f76730b-09b4-44db-ab17-a9dd86f74506.tmp.0.dr Static PE information: No import functions for PE file found
Source: 684586ff-cd85-441d-9787-5fb9ae2d80f4.tmp.0.dr Static PE information: No import functions for PE file found
PE file overlay found
Source: 5f76730b-09b4-44db-ab17-a9dd86f74506.tmp.0.dr Static PE information: Data appended to the last section found
Source: 684586ff-cd85-441d-9787-5fb9ae2d80f4.tmp.0.dr Static PE information: Data appended to the last section found
Source: 5f76730b-09b4-44db-ab17-a9dd86f74506.tmp.0.dr Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: classification engine Classification label: clean8.win@33/646@0/35
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_0040338F EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,OleUninitialize,ExitProcess,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 12_2_0040338F
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00404722 GetDlgItem,SetWindowTextW,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW, 12_2_00404722
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F902AAC CreateToolhelp32Snapshot, 12_2_6F902AAC
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00402104 CoCreateInstance, 12_2_00402104
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Mutant created: \Sessions\1\BaseNamedObjects\bbff271c-caf8-5302-b3c6-6d9ee38f27e3
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsj2B13.tmp Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007505000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: SELECT name FROM sqlite_master WHERE type='table';
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.neat-reader.com/download/start-download?target=windows"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6476 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://play.google.com/store/apps/details?id=com.gzhi.neatreader.r2.main
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,1756451637922991175,14183001203310220918,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6852 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe "C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6476 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6852 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6476 --field-trial-handle=2236,i,6439054695075565315,17960345864955142184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2012,i,1756451637922991175,14183001203310220918,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: oleacc.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: shfolder.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32 Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Source: Binary string: ffmpeg.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libEGL.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vulkan-1.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960405089.0000000005AD0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960137150.0000000005220000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: electron.exe.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007505000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: electron.exe.pdb0 source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965437167.0000000007505000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libGLESv2.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: libGLESv2.dll.pdbp" source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vulkan-1.dll.pdb@ source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960405089.0000000005AD0000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2960137150.0000000005220000.00000004.00001000.00020000.00000000.sdmp, NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: vk_swiftshader.dll.pdb source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964010022.00000000065C0000.00000004.00001000.00020000.00000000.sdmp
Source: Binary string: M.pdB source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2906478813.0000000004E45000.00000004.00001000.00020000.00000000.sdmp
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_100010D0 GetVersionExW,LoadLibraryW,GetProcAddress,LocalAlloc,LocalAlloc,NtQuerySystemInformation,LocalFree,LocalAlloc,FreeLibrary,lstrcpynW,lstrcmpiW,LocalFree,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,lstrlenW,lstrlenA,MultiByteToWideChar,lstrcmpiW,CloseHandle,FreeLibrary, 12_2_100010D0
PE file contains an invalid checksum
Source: 5f76730b-09b4-44db-ab17-a9dd86f74506.tmp.0.dr Static PE information: real checksum: 0x3b9af84 should be: 0xbe92
Source: libEGL.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x66588
Source: libGLESv2.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x2c0e87
Source: SpiderBanner.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x11dab
Source: libEGL.dll0.12.dr Static PE information: real checksum: 0x0 should be: 0x604a4
Source: vk_swiftshader.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x3e92d0
Source: ffmpeg.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x27fa83
Source: nsis7z.dll.12.dr Static PE information: real checksum: 0x0 should be: 0x7611e
Source: libGLESv2.dll0.12.dr Static PE information: real checksum: 0x0 should be: 0x69cc7a
Source: vulkan-1.dll.12.dr Static PE information: real checksum: 0x0 should be: 0xa72ef
Source: 684586ff-cd85-441d-9787-5fb9ae2d80f4.tmp.0.dr Static PE information: real checksum: 0x3b9af84 should be: 0x3e57
Source: System.dll.12.dr Static PE information: real checksum: 0x0 should be: 0xe5c7
PE file contains sections with non-standard names
Source: libEGL.dll.12.dr Static PE information: section name: .00cfg
Source: libEGL.dll.12.dr Static PE information: section name: .voltbl
Source: libGLESv2.dll.12.dr Static PE information: section name: .00cfg
Source: libGLESv2.dll.12.dr Static PE information: section name: .voltbl
Source: vk_swiftshader.dll.12.dr Static PE information: section name: .00cfg
Source: vk_swiftshader.dll.12.dr Static PE information: section name: .voltbl
Source: vulkan-1.dll.12.dr Static PE information: section name: .00cfg
Source: vulkan-1.dll.12.dr Static PE information: section name: .voltbl
Source: ffmpeg.dll.12.dr Static PE information: section name: .00cfg
Source: ffmpeg.dll.12.dr Static PE information: section name: .voltbl
Source: libEGL.dll0.12.dr Static PE information: section name: .00cfg
Source: libEGL.dll0.12.dr Static PE information: section name: .voltbl
Source: libGLESv2.dll0.12.dr Static PE information: section name: .00cfg
Source: libGLESv2.dll0.12.dr Static PE information: section name: .voltbl
Source: NeatReader.exe.12.dr Static PE information: section name: .00cfg
Source: NeatReader.exe.12.dr Static PE information: section name: .rodata
Source: NeatReader.exe.12.dr Static PE information: section name: .voltbl
Source: NeatReader.exe.12.dr Static PE information: section name: CPADinfo
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F7038E0 push eax; ret 12_2_6F70390E
Drops PE files
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\5f76730b-09b4-44db-ab17-a9dd86f74506.tmp Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\nsis7z.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\d3dcompiler_47.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\System.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\swiftshader\libGLESv2.dll Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe (copy) Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\Unconfirmed 708013.crdownload Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\ffmpeg.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\libEGL.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\nsProcess.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\NeatReader.exe Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\StdUtils.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\vulkan-1.dll Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\Unconfirmed 299717.crdownload Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\resources\elevate.exe Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\684586ff-cd85-441d-9787-5fb9ae2d80f4.tmp Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\vk_swiftshader.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\libGLESv2.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\swiftshader\libEGL.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\SpiderBanner.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File created: C:\Program Files (x86)\NeatReader\LICENSE.electron.txt Jump to behavior
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\nsis7z.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\d3dcompiler_47.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\System.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\swiftshader\libGLESv2.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\ffmpeg.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\libEGL.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\NeatReader.exe Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\StdUtils.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\nsProcess.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\vulkan-1.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\resources\elevate.exe Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\libGLESv2.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\vk_swiftshader.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Program Files (x86)\NeatReader\swiftshader\libEGL.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsk2BFF.tmp\SpiderBanner.dll Jump to dropped file
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_004059CC GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose, 12_2_004059CC
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_004065FD FindFirstFileW,FindClose, 12_2_004065FD
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_00402868 FindFirstFileW, 12_2_00402868
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list\libs Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list\libs\darwin Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules Jump to behavior
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe File opened: C:\Program Files (x86)\NeatReader\resources\app.asar.unpacked\node_modules\font-list Jump to behavior
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.0000000006BC7000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: VMware Virtual Webcam
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: vmncVMware Screen Codec / VMware Videovp5On2 VP5vp6On2 VP6vp6fOn2 VP6 (Flash version)targaTruevision Targa imageimage/x-targaimage/x-tgav
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.0000000006BC7000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: eb1a:2860eb1a:28201ce6:282012ab:03801943:22530c45:64d00c45:64d21bcf:298504ca:704704ca:704804f2:b3ed04f2:b3ca05c8:035d05c8:036904ca:709513d3:52570bda:57f2VMware Virtual WebcamMedia.VideoCapture.BlacklistedDeviceGoogle Camera AdapterIP Camera [JPEG/MJPEG]CyberLink Webcam SplitterEpocCamWebcamMax../../media/capture/video/video_capture_metrics.ccDevice supports Media.VideoCapture.Device.SupportedPixelFormatMedia.VideoCapture.Device.SupportedResolution
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.0000000006BC7000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: VMnet
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Adreno (TM) 418Adreno (TM) 530Adreno (TM) 540GL_EXT_texture_lod_biasARB_draw_buffersGL_ARB_texture_swizzleGL_EXT_texture_swizzleGL_ARB_pixel_buffer_objectGL_EXT_pixel_buffer_objectGL_EXT_draw_buffers2GL_ARB_fragment_shaderGL_NV_texture_border_clampGL_ARB_robust_buffer_access_behaviorGL_EXT_framebuffer_sRGBGL_ARB_framebuffer_sRGBfunctions->standard == STANDARD_GL_DESKTOP && isAMDfunctions->standard == STANDARD_GL_DESKTOP && isIntelisIntel && !IsSandyBridge(device) && !IsIvyBridge(device) && !IsHaswell(device)IsApple() && isIntelisIntel && IsApple() && IsSkylake(device) && GetMacOSVersion() < OSVersion(10, 13, 2)functions->standard == STANDARD_GL_DESKTOP && (isIntel || isAMD)IsLinux() && functions->standard == STANDARD_GL_DESKTOP && isAMD(IsApple() && functions->standard == STANDARD_GL_DESKTOP) || (IsLinux() && isAMD)IsApple() && functions->standard == STANDARD_GL_DESKTOP && GetMacOSVersion() < OSVersion(10, 11, 0)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 0)IsApple() && isAMDIsAndroid() && isQualcommfunctions->standard == STANDARD_GL_DESKTOP && isNvidiaIsApple() || isNvidiafunctions->isAtMostGL(gl::Version(4, 1)) || (functions->standard == STANDARD_GL_DESKTOP && isAMD)isAMD || IsAndroid()IsAndroid() || isNvidia(IsAndroid() && isQualcomm) || (isIntel && IsApple())isAMD || isIntelIsNexus5X(vendor, device)IsAndroid() || (IsWindows() && isIntel)(IsWindows() && (isIntel || isAMD)) || (IsLinux() && isNvidia) || IsIOS() || IsAndroidEmulator(functions)IsAndroid() || limitMaxTextureSizeIsAndroid() || (IsApple() && (isIntel || isAMD || isNvidia))limitMaxTextureSizeIsApple()IsAndroid() || isAMD || !functions->hasExtension("GL_KHR_robust_buffer_access_behavior")IsApple() && isIntel && GetMacOSVersion() >= OSVersion(10, 12, 4)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 6)IsLinux() || (IsAndroid() && isNvidia) || (IsWindows() && isNvidia) || (IsApple() && functions->standard == STANDARD_GL_ES)IsApple() || (IsLinux() && isAMD)IsApple() || (IsWindows() && isAMD)functions->standard == STANDARD_GL_DESKTOP && functions->isAtLeastGL(gl::Version(3, 1)) && !functions->isAtLeastGL(gl::Version(4, 3))features->emulatePrimitiveRestartFixedIndex.enabled && IsApple() && isIntelIsApple() || IsAndroid() || IsWindows()functions->standard == STANDARD_GL_ES && functions->isAtLeastGLES(gl::Version(3, 1)) && functions->hasGLESExtension("GL_EXT_texture_norm16")IsWindows() && isAMDIsLinux() && isAMD && isMesa && mesaVersion < (std::array<int, 3>{19, 3, 5})(IsLinux() && isVMWare) || (IsAndroid() && isNvidia) || (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) || (IsAndroid() && IsMaliT8xxOrOlder(functions)) || (IsAndroid() && IsMaliG31OrOlder(functions))IsApple() && functions->standard == STANDARD_GL_ES && !(isAMD && IsWindows())isDualGPUMacWithNVIDIAisTSANBuild && IsLinux() && isNvidiaIsApple() && (isAMD || isIntel || isNvidia)IsLinux() && IsWayland()!CanMapBufferForRead(functions)IsApple() && hasAMDIsAdreno42xOr3xx(func
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2913935462.00000000069C0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: (IsLinux() && isVMWare) || (IsAndroid() && isNvidia) || (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) || (IsAndroid() && IsMaliT8xxOrOlder(functions)) || (IsAndroid() && IsMaliG31OrOlder(functions))
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.0000000006BC7000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: num_failuresrelease_after_msThrottling.RequestThrottled%08x: %02x ../../net/base/network_interfaces_win.ccWlanApiwlanapi.dllWlanQueryInterfaceWlanSetInterfaceVMnetGetAdaptersAddresses failed:
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2965089648.0000000006DC0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2911017758.00000000065C0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: VMware Screen Codec / VMware Video
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Process information queried: ProcessInformation Jump to behavior
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_100010D0 GetVersionExW,LoadLibraryW,GetProcAddress,LocalAlloc,LocalAlloc,NtQuerySystemInformation,LocalFree,LocalAlloc,FreeLibrary,lstrcpynW,lstrcmpiW,LocalFree,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,lstrlenW,lstrlenA,MultiByteToWideChar,lstrcmpiW,CloseHandle,FreeLibrary, 12_2_100010D0
Source: NeatReader Setup 8.1.4.exe, 0000000C.00000003.2964415087.0000000006BC7000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: ../../third_party/webrtc/modules/desktop_capture/win/window_capture_utils.ccFail to create instance of VirtualDesktopManagerChrome_WidgetWin_Progmanffff:%hx%n%4hx%n.
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_6F6FEB20 GetSystemTime,SystemTimeToFileTime, 12_2_6F6FEB20
Source: C:\Users\user\Downloads\NeatReader Setup 8.1.4.exe Code function: 12_2_0040338F EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,OleUninitialize,ExitProcess,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 12_2_0040338F
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1521513 URL: https://www.neat-reader.com... Startdate: 28/09/2024 Architecture: WINDOWS Score: 8 5 NeatReader Setup 8.1.4.exe 134 2->5         started        8 chrome.exe 21 2->8         started        11 chrome.exe 2->11         started        13 chrome.exe 2->13         started        dnsIp3 24 C:\Users\user\AppData\Local\...\nsis7z.dll, PE32 5->24 dropped 26 C:\Users\user\AppData\Local\...\nsProcess.dll, PE32 5->26 dropped 28 C:\Users\user\AppData\Local\...\System.dll, PE32 5->28 dropped 36 13 other files (none is malicious) 5->36 dropped 40 192.168.2.5 unknown unknown 8->40 42 239.255.255.250 unknown Reserved 8->42 30 C:\Users\...\Unconfirmed 708013.crdownload, PE32 8->30 dropped 32 C:\Users\...\Unconfirmed 299717.crdownload, PE32 8->32 dropped 34 C:\...34eatReader Setup 8.1.4.exe (copy), PE32 8->34 dropped 38 2 other files (none is malicious) 8->38 dropped 15 chrome.exe 8->15         started        18 chrome.exe 8->18         started        20 chrome.exe 8->20         started        22 chrome.exe 11->22         started        file4 process5 dnsIp6 44 47.79.65.198 VODAFONE-TRANSIT-ASVodafoneNZLtdNZ United States 15->44 46 108.177.15.84 GOOGLEUS United States 15->46 48 31 other IPs or domains 15->48
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
142.250.186.46
 unknown United States
15169 GOOGLEUS false
142.250.185.206
 unknown United States
15169 GOOGLEUS false
74.125.133.155
 unknown United States
15169 GOOGLEUS false
47.79.65.198
 unknown United States
9500 VODAFONE-TRANSIT-ASVodafoneNZLtdNZ false
172.217.16.214
 unknown United States
15169 GOOGLEUS false
216.58.206.72
 unknown United States
15169 GOOGLEUS false
142.250.186.174
 unknown United States
15169 GOOGLEUS false
142.250.185.168
 unknown United States
15169 GOOGLEUS false
216.239.38.181
 unknown United States
15169 GOOGLEUS false
216.58.206.54
 unknown United States
15169 GOOGLEUS false
142.250.185.227
 unknown United States
15169 GOOGLEUS false
142.250.181.238
 unknown United States
15169 GOOGLEUS false
142.250.185.162
 unknown United States
15169 GOOGLEUS false
142.250.186.131
 unknown United States
15169 GOOGLEUS false
172.217.18.10
 unknown United States
15169 GOOGLEUS false
142.250.186.136
 unknown United States
15169 GOOGLEUS false
142.250.184.195
 unknown United States
15169 GOOGLEUS false
142.250.185.67
 unknown United States
15169 GOOGLEUS false
142.250.186.78
 unknown United States
15169 GOOGLEUS false
1.1.1.1
 unknown Australia
13335 CLOUDFLARENETUS false
108.177.15.84
 unknown United States
15169 GOOGLEUS false
142.250.186.163
 unknown United States
15169 GOOGLEUS false
172.217.18.3
 unknown United States
15169 GOOGLEUS false
142.250.185.132
 unknown United States
15169 GOOGLEUS false
216.58.206.86
 unknown United States
15169 GOOGLEUS false
142.250.185.136
 unknown United States
15169 GOOGLEUS false
172.217.18.2
 unknown United States
15169 GOOGLEUS false
216.58.206.46
 unknown United States
15169 GOOGLEUS false
142.250.181.246
 unknown United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
47.254.121.20
 unknown United States
45102 CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC false
142.250.186.164
 unknown United States
15169 GOOGLEUS false
216.58.212.161
 unknown United States
15169 GOOGLEUS false
172.217.16.195
 unknown United States
15169 GOOGLEUS false

Private

IP
192.168.2.5