Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'Jane2ch

suspicious

Threat Score: 85/100 AV Detection: Marked as clean

Jane2ch - コピー.exe

This report is generated from a file or URL submitted to this webservice on October 12th 2017 01:00:24 (UTC)
Guest System: Windows 7 32 bit, Home Premium, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v7.00 © Hybrid Analysis

Overview Sample not shared Re-analyze Hash Seen Before Show Similar Samples Report False-Positive Request Report Deletion

Incident Response

Risk Assessment

Remote Access: Reads terminal service related keys (often RDP related)
Persistence: Writes data to a remote process
Fingerprint: Reads the active computer name
Reads the cryptographic machine GUID
Reads the windows installation date
Network Behavior: Contacts 3 domains and 3 hosts. View all details

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

Malicious Indicators 4
Environment Awareness
- The input sample contains a known anti-VM trick
  
  details
  
  Found VM detection artifact "CPUID trick" in "b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin" (Offset: 2676166)
  
  source
  
  Binary File
  
  relevance
  
  5/10
Installation/Persistance
- Writes data to a remote process
 
 details
 
 "<Input Sample>" wrote 32 bytes to a remote process "%PROGRAMFILES%\Internet Explorer\iexplore.exe" (Handle: 1616)
 "<Input Sample>" wrote 52 bytes to a remote process "%PROGRAMFILES%\Internet Explorer\iexplore.exe" (Handle: 1616)
 "<Input Sample>" wrote 4 bytes to a remote process "%PROGRAMFILES%\Internet Explorer\iexplore.exe" (Handle: 1616)
 
 source
 
 API Call
 
 relevance
 
 6/10
Network Related
- Found more than one unique User-Agent
  
  details
  
  Found the following User-Agents: Monazilla/1.00 (JaneStyle/3.83)
  JaneStyle/3.83
  
  source
  
  Network Traffic
  
  relevance
  
  5/10
- Malicious artifacts seen in the context of a contacted host
  
  details
  
  Found malicious artifacts related to "219.94.155.244" (ASN: , Owner: ): ...
  
  URL: http://tapcreate.jp/ (AV positives: 1/64 scanned on 02/15/2017 04:23:39)
  URL: http://aiboku.com/joubashop/shopaccess.html (AV positives: 1/68 scanned on 08/10/2016 04:19:41)
  URL: http://shonannoen.com/pdf_files/1445190467.pdf (AV positives: 4/66 scanned on 01/15/2016 19:12:19)
  URL: http://rakuichido.sakura.ne.jp/ (AV positives: 1/66 scanned on 11/30/2015 12:37:43)
  File SHA256: 146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4 (Scanned on 04/02/2017 17:49:54)
  File SHA256: c84c86223e7d96b9e261080a39026634e059454a630177bf06a05d16d5737c4e (AV positives: 15/57 scanned on 01/15/2016 19:12:22)
  File SHA256: ba654cb65f8e3623b910713094e77ec564bb21d8b0a9c5961400b71962ae3465 (AV positives: 1/55 scanned on 12/07/2015 13:11:24)
  File SHA256: bff90608318906bda8f556a9692e3690b7aa8d5d2d1be9551a1a77c5eee9bbc0 (AV positives: 3/57 scanned on 04/24/2015 03:54:58)
  File SHA256: e280acd6f6e98aa55d5d6faaf9b9bec5cc45306a45760dae8659c48f2a048c84 (AV positives: 7/56 scanned on 12/01/2014 03:58:02)
  File SHA256: 3da8c60562d50339aaa2ce5e637e28cd85a4c2aa5b3310c1db9b0c3661638594 (AV positives: 6/55 scanned on 11/23/2014 13:16:22)
  
  source
  
  Network Traffic
  
  relevance
  
  10/10

Suspicious Indicators 20
Anti-Detection/Stealthyness
- Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)
 
 details
 
 "<Input Sample>" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "DISABLECACHINGOFSSLPAGES"; Value: "00000000040000000400000000000000")
 "iexplore.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "DISABLECACHINGOFSSLPAGES"; Value: "00000000040000000400000000000000")
 
 source
 
 Registry Access
 
 relevance
 
 3/10
Environment Awareness
- Reads the cryptographic machine GUID
 
 details
 
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
 "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
- Reads the windows installation date
 
 details
 
 "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION"; Key: "INSTALLDATE")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
General
- Opened the service control manager
 
 details
 
 "iexplore.exe" called "OpenSCManager" requesting access rights "SC_MANAGER_CONNECT" (0x1)
 
 source
 
 API Call
 
 relevance
 
 10/10
- Requested access to a system service
 
 details
 
 "<Input Sample>" called "OpenService" to access the "ServicesActive" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights
 "<Input Sample>" called "OpenService" to access the "gpsvc" service
 "iexplore.exe" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights
 "iexplore.exe" called "OpenService" to access the "rasman" service
 "iexplore.exe" called "OpenService" to access the "RASMAN" service
 "iexplore.exe" called "OpenService" to access the "ServicesActive" service requesting "SERVICE_QUERY_CONFIG" (0X1) access rights
 "iexplore.exe" called "OpenService" to access the "WSearch" service
 
 source
 
 API Call
 
 relevance
 
 10/10
- Sent a control code to a service
 
 details
 
 "<Input Sample>" called "ControlService" and sent control code "0X24" to the service "gpsvc"
 "<Input Sample>" called "ControlService" and sent control code "0XFC" to the service "gpsvc"
 "iexplore.exe" called "ControlService" and sent control code "0X24" to the service "WSearch"
 "iexplore.exe" called "ControlService" and sent control code "0XDC" to the service "WSearch"
 
 source
 
 API Call
 
 relevance
 
 10/10
Installation/Persistance
- Creates new processes
 
 details
 
 "<Input Sample>" is creating a new process (Name: "%PROGRAMFILES%\Internet Explorer\iexplore.exe", Handle: 1616)
 
 source
 
 API Call
 
 relevance
 
 8/10
Network Related
- Found potential IP address in binary/memory
  
  details
  
  "127.0.0.1"
  
  source
  
  File/Memory
  
  relevance
  
  3/10
Remote Access Related
- Contains indicators of bot communication commands
 
 details
 
 "mail=%s&pass=%s&login=%s" (Indicator: "login=")
 "DefaultBeLogin=0" (Indicator: "login=")
 
 source
 
 File/Memory
 
 relevance
 
 10/10
- Reads terminal service related keys (often RDP related)
 
 details
 
 "<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER"; Key: "TSUSERENABLED")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
System Security
- Modifies Software Policy Settings
 
 details
 
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CRLS")
 "<Input Sample>" (Access type: "CREATE"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CTLS")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
- Modifies proxy settings
 
 details
 
 "<Input Sample>" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
 "<Input Sample>" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
- Queries sensitive IE security settings
 
 details
 
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
 "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
 
 source
 
 Registry Access
 
 relevance
 
 8/10
Unusual Characteristics
- Imports suspicious APIs
 
 details
 
 RegDeleteKeyA
 RegCloseKey
 CryptEncrypt
 RegCreateKeyExA
 RegOpenKeyExA
 RegEnumKeyExA
 CreateFileMappingA
 GetFileAttributesA
 GetTempPathA
 WriteFile
 CopyFileA
 GetModuleFileNameA
 LoadLibraryExA
 UnhandledExceptionFilter
 CreateThread
 GetTickCount
 VirtualProtect
 GetVersionExA
 LoadLibraryA
 ExitThread
 GetStartupInfoA
 GetFileSize
 CreateDirectoryA
 DeleteFileA
 GetProcAddress
 FindFirstFileA
 GetComputerNameA
 FindNextFileA
 CreateFileW
 CreateFileA
 LockResource
 GetCommandLineA
 MapViewOfFile
 GetModuleHandleA
 CreateProcessA
 Sleep
 FindResourceA
 VirtualAlloc
 ShellExecuteA
 SetWindowsHookExW
 GetUpdateRect
 GetLastActivePopup
 SetKeyboardState
 FindWindowExA
 SetWindowsHookExA
 FindWindowA
 GetWindowThreadProcessId
 InternetConnectA
 InternetCloseHandle
 InternetOpenA
 
 source
 
 Static Parser
 
 relevance
 
 1/10
- Installs hooks/patches the running process
 
 details
 
 "iexplore.exe" wrote bytes "e99cf3e0f7" to virtual address "0x771AE869" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e9efb9d3fa" to virtual address "0x7428388E" (part of module "COMCTL32.DLL")
 "iexplore.exe" wrote bytes "e9b34bd2f7" to virtual address "0x7715EC7C" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e955a55df9" to virtual address "0x758C3EAE" (part of module "OLEAUT32.DLL")
 "iexplore.exe" wrote bytes "e99ac35af8" to virtual address "0x76A12694" (part of module "COMDLG32.DLL")
 "iexplore.exe" wrote bytes "e92e0de2f7" to virtual address "0x7719CF42" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e9b29659f8" to virtual address "0x768E9D0B" (part of module "OLE32.DLL")
 "iexplore.exe" wrote bytes "e9fc79c9fa" to virtual address "0x74327922" (part of module "COMCTL32.DLL")
 "iexplore.exe" wrote bytes "e9b090c9f7" to virtual address "0x7715ABE1" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e954a1e3f7" to virtual address "0x77183B7F" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e9395469f9" to virtual address "0x759293FC" (part of module "OLEAUT32.DLL")
 "iexplore.exe" wrote bytes "e98b8e6ff9" to virtual address "0x758C5DEE" (part of module "OLEAUT32.DLL")
 "iexplore.exe" wrote bytes "4053257758582677186a2677653c27770000000000bf6b750000000056cc6b75000000007cca6b750000000037683f756a2c2777d62d27770000000020693f750000000029a66b7500000000a48d3f7500000000f70e6b7500000000" to virtual address "0x77411000" (part of module "NSI.DLL")
 "iexplore.exe" wrote bytes "e9fda46ff9" to virtual address "0x758C4731" (part of module "OLEAUT32.DLL")
 "iexplore.exe" wrote bytes "e9ee7e71f8" to virtual address "0x768A6143" (part of module "OLE32.DLL")
 "iexplore.exe" wrote bytes "e9652bd5f7" to virtual address "0x7715ADF9" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e937f2e0f7" to virtual address "0x771AE963" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e9c20ae2f7" to virtual address "0x7719D274" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e96ff1e0f7" to virtual address "0x771AE9C9" (part of module "USER32.DLL")
 "iexplore.exe" wrote bytes "e9e89acef7" to virtual address "0x7715E30C" (part of module "USER32.DLL")
 
 source
 
 Hook Detection
 
 relevance
 
 10/10
- Reads information about supported languages
 
 details
 
 "<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
 "iexplore.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
 
 source
 
 Registry Access
 
 relevance
 
 3/10
Hiding 4 Suspicious Indicators
- All indicators are available only in the private webservice or standalone version

Informative 22
Anti-Reverse Engineering
- PE file contains zero-size sections
  
  details
  
  Raw size of "BSS" is zero
  Raw size of ".tls" is zero
  
  source
  
  Static Parser
  
  relevance
  
  10/10
Environment Awareness
- Reads the registry for installed applications
 
 details
 
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\IEXPLORE.EXE")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\IEXPLORE.EXE")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\IEXPLORE.EXE"; Key: "PATH"; Value: "00000000010000004800000043003A005C00500072006F006700720061006D002000460069006C00650073005C0049006E007400650072006E006500740020004500780070006C006F007200650072003B000000")
 "iexplore.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\IEXPLORE.EXE")
 "iexplore.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\IEXPLORE.EXE")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
External Systems
- Sample was identified as clean by Antivirus engines
  
  details
  
  0/56 Antivirus vendors marked sample as malicious (0% detection rate)
  0/40 Antivirus vendors marked sample as malicious (0% detection rate)
  
  source
  
  External System
  
  relevance
  
  10/10
General
- Accesses Software Policy Settings
 
 details
 
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CTLS"; Key: "")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
- Accesses System Certificates Settings
 
 details
 
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\MY"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\27AC9369FAF25207BB2627CEFACCBE4EF9C319B8"; Key: "BLOB")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\8AD5C9987E6F190BD6F5416E2DE44CCD641D8CDA"; Key: "BLOB")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FF67367C5CD4DE4AE18BCCE1D70FDABD7C866135"; Key: "BLOB")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\109F1CAED645BB78B3EA2B94C0697C740733031C"; Key: "BLOB")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\D559A586669B08F46A30A133F8A9ED3D038E2EA8"; Key: "BLOB")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\FEE449EE0E3965A5246F000E87FDE2A065FD89D4"; Key: "BLOB")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS"; Key: "")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CRLS\A377D1B1C0538833035211F4083D00FECC414DAB"; Key: "BLOB")
 "<Input Sample>" (Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CTLS"; Key: "")
 "<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED"; Key: "")
 
 source
 
 Registry Access
 
 relevance
 
 10/10
- Contacts domains
 
 details
 
 "menu.2ch.net"
 "janesoft.net"
 "api.2ch.net"
 
 source
 
 Network Traffic
 
 relevance
 
 1/10
- Contacts server
 
 details
 
 "104.20.50.205:443"
 "219.94.155.244:80"
 "104.20.50.205:80"
 
 source
 
 Network Traffic
 
 relevance
 
 1/10
- Creates mutants
 
 details
 
 "\Sessions\1\BaseNamedObjects\C:-"
 "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex"
 "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
 "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
 "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex"
 "Local\ZonesCounterMutex"
 "Local\c:!users!mcreuty!appdata!roaming!microsoft!windows!cookies!"
 "Local\ZonesLockedCacheCounterMutex"
 "Local\_!MSFTHISTORY!_"
 "Local\!IETld!Mutex"
 "Local\c:!users!mcreuty!appdata!roaming!microsoft!windows!ietldcache!"
 "C:-"
 "Local\ZonesCacheCounterMutex"
 "Local\c:!users!mcreuty!appdata!local!microsoft!windows!history!history.ie5!"
 "Local\ZoneAttributeCacheCounterMutex"
 "Local\c:!users!mcreuty!appdata!local!microsoft!windows!temporary internet files!content.ie5!"
 "\Sessions\1\BaseNamedObjects\Local\!IETld!Mutex"
 "\Sessions\1\BaseNamedObjects\Local\c:!users!mcreuty!appdata!roaming!microsoft!windows!ietldcache!"
 "\Sessions\1\BaseNamedObjects\Local\_!MSFTHISTORY!_"
 "\Sessions\1\BaseNamedObjects\Local\c:!users!mcreuty!appdata!roaming!microsoft!windows!cookies!"
 
 source
 
 Created Mutant
 
 relevance
 
 3/10
- GETs files from a webserver
 
 details
 
 "GET /bbsmenu.html HTTP/1.1
 Connection: close
 Host: menu.2ch.net
 Accept: text/html, */*
 Accept-Encoding: gzip
 User-Agent: Monazilla/1.00 (JaneStyle/3.83)"
 "GET /janestyle/version.txt HTTP/1.1
 Connection: close
 Host: janesoft.net
 Accept: text/html, */*
 Accept-Encoding: gzip
 User-Agent: JaneStyle/3.83"
 "GET /janestyle/setting.php HTTP/1.1
 Connection: close
 Host: janesoft.net
 Accept: text/html, */*
 Accept-Encoding: gzip
 User-Agent: JaneStyle/3.83"
 
 source
 
 Network Traffic
 
 relevance
 
 5/10
- Launches a browser
 
 details
 
 Launches browser "iexplore.exe" (Show Process)
 Launches browser "iexplore.exe" (Show Process)
 
 source
 
 Monitored Target
 
 relevance
 
 3/10
- Process launched with changed environment
 
 details
 
 Process "iexplore.exe" (Show Process) was launched with new environment variables: "PATH="%PROGRAMFILES%\Internet Explorer;""
 
 source
 
 Monitored Target
 
 relevance
 
 10/10
- Sample shows a variety of benign indicators
 
 details
 
 The input file/all extracted files were not detected as malicious and the input file is signed with a validated certificate
 
 source
 
 Indicator Combinations
 
 relevance
 
 10/10
- Scanning for window names
 
 details
 
 "<Input Sample>" searching for class "DDEMLMom"
 "<Input Sample>" searching for class "MS_AutodialMonitor"
 "<Input Sample>" searching for class "MS_WebCheckMonitor"
 "<Input Sample>" searching for class "MS_WINHELP"
 
 source
 
 API Call
 
 relevance
 
 10/10
- Spawns new processes
 
 details
 
 Spawned process "iexplore.exe" with commandline "-nohome" (Show Process)
 Spawned process "iexplore.exe" with commandline "SCODEF:3316 CREDAT:79873" (Show Process)
 
 source
 
 Monitored Target
 
 relevance
 
 3/10
- The input sample is signed with a certificate
 
 details
 
 The input sample is signed with a certificate issued by "CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE" (SHA1: B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C; see report for more information)
 The input sample is signed with a certificate issued by "CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE" (SHA1: C0:E4:9D:2D:7D:90:A5:CD:42:7F:02:D9:12:56:94:D5:D6:EC:5B:71; see report for more information)
 The input sample is signed with a certificate issued by "CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE" (SHA1: 90:00:40:17:77:DD:2B:43:39:3D:7B:59:4D:2F:F4:CB:A4:51:6B:38; see report for more information)
 The input sample is signed with a certificate issued by "CN=GlobalSign Timestamping CA - G2, O=GlobalSign nv-sa, C=BE" (SHA1: B3:63:08:B4:D4:CD:ED:4F:CF:BD:66:B9:55:FA:E3:BF:B1:2C:29:E6; see report for more information)
 The input sample is signed with a certificate issued by "CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE" (SHA1: 4D:01:85:1E:AA:6C:8C:B5:86:F5:2E:B6:19:AA:42:DA:63:CB:D4:24; see report for more information)
 
 source
 
 Certificate Data
 
 relevance
 
 10/10
- The input sample is signed with a valid certificate
 
 details
 
 The entire certificate chain of the input sample was validated successfully.
 
 source
 
 Certificate Data
 
 relevance
 
 10/10
Installation/Persistance
- Dropped files
 
 details
 
 "jane2ch.brd" has type "Non-ISO extended-ASCII text with CRLF NEL line terminators"
 "b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.ini" has type "Non-ISO extended-ASCII text with CRLF LF NEL line terminators"
 "attrib.ini" has type "ASCII text with CRLF line terminators"
 "bbsmenu.dat" has type "HTML document Non-ISO extended-ASCII text with LF NEL line terminators"
 "ImageView.ini" has type "ASCII text with CRLF line terminators"
 "bbsmenu.idx" has type "ASCII text with CRLF line terminators"
 "{DE313D84-AF23-11E7-B22D-0A002745ABDE}.dat" has type "Composite Document File V2 Document Cannot read section info"
 "favorites.dat" has type "Non-ISO extended-ASCII text with CRLF line terminators"
 "RecoveryStore.{DE313D83-AF23-11E7-B22D-0A002745ABDE}.dat" has type "Composite Document File V2 Document Cannot read section info"
 
 source
 
 Binary File
 
 relevance
 
 3/10
- Touches files in the Windows directory
 
 details
 
 "<Input Sample>" touched file "%WINDIR%\system32\OLEACCRC.DLL"
 "<Input Sample>" touched file "%WINDIR%\Fonts\staticcache.dat"
 "<Input Sample>" touched file "%WINDIR%\system32\en-US\user32.dll.mui"
 "<Input Sample>" touched file "%WINDIR%\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.7600.16385_en-us_020378a8991bbcc2\comctl32.dll.mui"
 "<Input Sample>" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls"
 "<Input Sample>" touched file "%WINDIR%\system32\tzres.dll"
 "<Input Sample>" touched file "%WINDIR%\system32\en-US\tzres.dll.mui"
 "<Input Sample>" touched file "%WINDIR%\system32\en-US\KERNELBASE.dll.mui"
 "<Input Sample>" touched file "%WINDIR%\system32\en-US\SETUPAPI.dll.mui"
 "<Input Sample>" touched file "%WINDIR%\system32\imageres.dll"
 "<Input Sample>" touched file "%WINDIR%\system32\en-US\imageres.dll.mui"
 
 source
 
 API Call
 
 relevance
 
 7/10
Network Related
- Found potential URL in binary/memory
  
  details
  
  Heuristic match: ".biz
  .com
  .edu
  .gov
  .info
  .int
  .mil
  .net
  .org"
  Pattern match: "http://tkssp.com/2ch/janestyle/160x600"
  Heuristic match: "api.2ch.net"
  Pattern match: "https://secure.comodo.com/CPS0"
  Pattern match: "crl.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crl0"
  Pattern match: "crt.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crt0%"
  Pattern match: "http://ocsp.comodoca4.com0"
  Heuristic match: "ssl425718.cloudflaressl.com"
  Heuristic match: "*.2ch.net"
  Pattern match: "http://crl.comodoca.com/COMODORSACertificationAuthority.crl0r"
  Pattern match: "http://crt.comodoca.com/COMODORSAAddTrustCA.crt0%"
  Pattern match: "crl.usertrust.com/AddTrustExternalCARoot.crl05"
  Pattern match: "http://ocsp.usertrust.com0"
  Heuristic match: "GET /root.crl HTTP/1.1
  Connection: Keep-Alive
  Accept: */*
  User-Agent: Microsoft-CryptoAPI/6.1
  Host: crl.globalsign.net"
  Heuristic match: "GET /gscodesigng2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRruLd2WRFk6cRYGFIqkQ4J8hxDogQUCG7YtpyKv%2B0%2B18N0XcyAH6gvUHoCEhEhdUWDP%2BYYQHbA5pRbe81dbA%3D%3D HTTP/1.1
  Connection: Keep-Alive
  Accept: */*
  User-Agent: Microsoft-CryptoAPI/6.1
  Host: ocsp2.globalsign.com"
  Pattern match: "https://www.globalsign.com/repository/0"
  Heuristic match: "menu.2ch.net"
  Heuristic match: "janesoft.net"
  Pattern match: "http://janesoft.net/janestyle/"
  Heuristic match: ".machi.to"
  Heuristic match: "read.so"
  Heuristic match: ".2ch.net"
  Heuristic match: ".bbspink.com"
  Pattern match: "http://jbbs.shitaraba.net/bbs/api/setting.cgi/"
  Pattern match: "https://2chv.tora3.net/futen.cgi"
  Heuristic match: "2ch.net"
  Pattern match: "http://img.2ch.net/"
  Pattern match: "http://blog.bbspink.com/"
  Pattern match: "https://api.2ch.net/v1/"
  Heuristic match: "jbbs.livedoor.jp"
  Heuristic match: "jbbs.shitaraba.net"
  Pattern match: "http://info.2ch.net/"
  Pattern match: "http://find.2ch.net/"
  Pattern match: "https://api.2ch.net/v1/auth/"
  Pattern match: "www.ime.st/"
  Pattern match: "http://www.amazon.co.jp/exec/obidos/external-search/?mode=blended&tag=janestyle-22&field-keywords="
  Pattern match: "http://ff2ch.syoboi.jp/?q="
  Heuristic match: "bbspink.com"
  Heuristic match: "shitaraba.net"
  Pattern match: "http://%s/bbs/read.cgi/%s/%s/%s"
  Pattern match: "http://%s/test/read.cgi/%s/%s/"
  Pattern match: "http://be.2ch.net/test/p.php?i="
  Pattern match: "http://search.yahoo.co.jp/search?p=$TEXTU&ei=UTF-8&fr=sb-jane"
  Pattern match: "http://janesoft.net/janestyle/setting.php"
  Heuristic match: "info.2ch.net"
  Pattern match: "http://ime.nu/http://"
  Pattern match: "http://ime.nu/"
  Pattern match: "http://ime.st/"
  Pattern match: "http://nun.nu/?http://"
  Heuristic match: ".2ch.net,.bbspink.com"
  Heuristic match: ".machibbs.com,.machi.to"
  Heuristic match: "jbbs.shitaraba.net,jbbs.livedoor.jp,jbbs.livedoor.com,jbbs.shitaraba.com"
  Pattern match: "http://menu.2ch.net/bbsmenu.html"
  Pattern match: "http://ff2ch.syoboi.jp/"
  Pattern match: "http://janesoft.net/janestyle/version.txt"
  Pattern match: "http://jbbs.shitaraba.net/internet/8173/"
  Pattern match: "http://jbbs.shitaraba.net/"
  Pattern match: "http://jbbs.livedoor.jp/"
  Pattern match: "http://be.2ch.net/index.php"
  Pattern match: "api.2ch.net/subject/"
  Pattern match: "http://be.2ch.net"
  Heuristic match: "be.2ch.net"
  Pattern match: "http://premium.2ch.net/?id=janestyle"
  Pattern match: "http://www.monazilla.org/"
  Heuristic match: ".info"
  Pattern match: "http://sakots.pekori.jp/OpenJane/"
  Pattern match: "http://hogehoge2001.tripod.co.jp/"
  Pattern match: "http://www.nevrona.com/Indy/"
  Pattern match: "http://www.gzip.org/zlib/"
  Pattern match: "http://pc.2ch.net/test/read.cgi/tech/981726544/931-"
  Pattern match: "http://www.os.rim.or.jp/~ikeda/"
  Pattern match: "http://www.delphi-gems.com/"
  Pattern match: "http://sourceforge.net/projects/fastmm"
  Pattern match: "http://fastcode.sourceforge.net/"
  Pattern match: "http://www.sawatzki.de/"
  Pattern match: "http://www.shagrouni.com/english/software/xpmenu.html"
  Pattern match: "http://www.tntware.com/delphicontrols/unicode/"
  Pattern match: "http://pngdelphi.sourceforge.net/"
  Pattern match: "http://www.tolderlund.eu/delphi/"
  Pattern match: "http://www.vector.co.jp/soft/win95/prog/se279521.html"
  Pattern match: "http://sourceforge.jp/projects/gikonavi/"
  Pattern match: "http://homepage1.nifty.com/MADIA/delphi/Effect/index.htm"
  Pattern match: "http://homepage1.nifty.com/ht_deko/tech002.html#tech022"
  Pattern match: "http://cafe-au-lait.ath.cx/"
  Pattern match: "http://hp.vector.co.jp/authors/VA029585/"
  Pattern match: "http://www.bsalsa.com/"
  Pattern match: "http://pc.2ch.net/test/read.cgi/software/1016729822/630-"
  Pattern match: "http://cincinnati7743.hp.infoseek.co.jp/"
  Pattern match: "http://www.bb-chat.tv/?2ch_m"
  Pattern match: "http://www.2ch.net/"
  Pattern match: "http://search.2ch.net/"
  Pattern match: "http://dig.2ch.net/"
  Pattern match: "http://stat.2ch.net/SPARROW"
  Pattern match: "http://o.8ch.net/"
  Pattern match: "http://i.2ch.net/"
  Pattern match: "http://www.2ch.net/kakolog.html"
  Pattern match: "http://8ch.net/"
  Pattern match: "find.2ch.net/search"
  Pattern match: "http://headline.2ch.net/bbynamazu/"
  Pattern match: "http://egg.2ch.net/namazuplus/"
  Pattern match: "http://mao.2ch.net/eq/"
  Pattern match: "http://himawari.2ch.net/eqplus/"
  Pattern match: "http://rio2016.2ch.net/lifeline/"
  Pattern match: "http://egg.2ch.net/smartphone/"
  Pattern match: "http://matsuri.2ch.net/hawaii/"
  Pattern match: "http://matsuri.2ch.net/campus/"
  Pattern match: "http://mevius.2ch.net/lovesaloon/"
  Pattern match: "http://rio2016.2ch.net/allergy/"
  Pattern match: "http://fate.2ch.net/lovelive/"
  Pattern match: "http://mao.2ch.net/apple2/"
  Pattern match: "http://matsuri.2ch.net/qa/"
  Pattern match: "http://be.2ch.net/"
  Pattern match: "http://premium.2ch.net/"
  Pattern match: "http://medaka.2ch.net/be/"
  Pattern match: "http://matsuri.2ch.net/nandemo/"
  Pattern match: "http://matsuri.2ch.net/argue/"
  Pattern match: "http://headline.2ch.net/bbynews/"
  Pattern match: "http://newsnavi.2ch.net/"
  Pattern match: "http://hayabusa9.2ch.net/news/"
  Pattern match: "http://asahi.2ch.net/newsplus/"
  Pattern match: "http://fate.2ch.net/fakenews/"
  Pattern match: "http://asahi.2ch.net/fakenewsplus/"
  Pattern match: "http://rosie.2ch.net/chinasmog/"
  Pattern match: "http://mevius.2ch.net/news2/"
  Pattern match: "http://rosie.2ch.net/liveplus/"
  Pattern match: "http://hayabusa9.2ch.net/mnewsplus/"
  Pattern match: "http://matsuri.2ch.net/musicnews/"
  Pattern match: "http://asahi.2ch.net/idolplus/"
  Pattern match: "http://fate.2ch.net/seijinewsplus/"
  Pattern match: "http://lavender.2ch.net/news4plus/"
  Pattern match: "http://lavender.2ch.net/news4plusd/"
  Pattern match: "http://egg.2ch.net/asia/"
  Pattern match: "http://egg.2ch.net/bizplus/"
  Pattern match: "http://egg.2ch.net/ticketplus/"
  Pattern match: "http://egg.2ch.net/scienceplus/"
  Pattern match: "http://phoebe.bbspink.com/pinkplus/"
  Pattern match: "http://mercury.bbspink.com/avplus/"
  Pattern match: "http://fate.2ch.net/snsplus/"
  Pattern match: "http://egg.2ch.net/wildplus/"
  Pattern match: "http://egg.2ch.net/femnewsplus/"
  Pattern match: "http://egg.2ch.net/dqnplus/"
  Pattern match: "http://egg.2ch.net/moeplus/"
  Pattern match: "http://mao.2ch.net/comicnews/"
  Pattern match: "http://lavender.2ch.net/gamenews/"
  Pattern match: "http://medaka.2ch.net/pcnews/"
  Pattern match: "http://egg.2ch.net/owabiplus/"
  Pattern match: "http://matsuri.2ch.net/trafficinfo/"
  Pattern match: "http://matsuri.2ch.net/news7/"
  Pattern match: "http://matsuri.2ch.net/archives/"
  Pattern match: "http://matsuri.2ch.net/bakanews/"
  Pattern match: "http://mao.2ch.net/editorial/"
  Pattern match: "http://rosie.2ch.net/editorialplus/"
  Pattern match: "http://rio2016.2ch.net/wikileaks/"
  Pattern match: "http://rio2016.2ch.net/kokusai/"
  Pattern match: "http://mao.2ch.net/war/"
  Pattern match: "http://matsuri.2ch.net/news5/"
  Pattern match: "http://rio2016.2ch.net/iraq/"
  Pattern match: "http://lavender.2ch.net/africa/"
  Pattern match: "http://lavender.2ch.net/europa/"
  Pattern match: "http://egg.2ch.net/news5plus/"
  Pattern match: "http://rio2016.2ch.net/dejima/"
  Pattern match: "http://matsuri.2ch.net/entrance/"
  Pattern match: "http://rio2016.2ch.net/entrance2/"
  Pattern match: "http://medaka.2ch.net/pcqa/"
  Pattern match: "http://info.2ch.net/wiki/"
  Pattern match: "http://matsuri.2ch.net/goods/"
  Pattern match: "http://egg.2ch.net/gline/"
  Pattern match: "http://matsuri.2ch.net/event/"
  Pattern match: "http://rio2016.2ch.net/2chse/"
  Pattern match: "http://info.2ch.net/rank/"
  Pattern match: "http://matsuri.2ch.net/dataroom/"
  Pattern match: "http://medaka.2ch.net/vote/"
  Pattern match: "http://agree.2ch.net/operate/"
  Pattern match: "http://rosie.2ch.net/operatex/"
  Pattern match: "http://agree.2ch.net/sec2ch/"
  Pattern match: "http://agree.2ch.net/sec2chd/"
  Pattern match: "http://qb5.2ch.net/saku2ch/"
  Pattern match: "http://qb5.2ch.net/saku/"
  Pattern match: "http://agree.2ch.net/sakud/"
  Pattern match: "http://agree.2ch.net/sakukb/"
  Pattern match: "http://mevius.2ch.net/intro/"
  Pattern match: "http://medaka.2ch.net/honobono/"
  Pattern match: "http://medaka.2ch.net/yume/"
  Pattern match: "http://medaka.2ch.net/offmatrix/"
  Pattern match: "http://mao.2ch.net/offreg/"
  Pattern match: "http://mevius.2ch.net/offevent/"
  Pattern match: "http://mevius.2ch.net/aasaloon/"
  Pattern match: "http://mevius.2ch.net/mona/"
  Pattern match: "http://mao.2ch.net/nida/"
  Pattern match: "http://mevius.2ch.net/aastory/"
  Pattern match: "http://mevius.2ch.net/kao/"
  Pattern match: "http://egg.2ch.net/mass/"
  Pattern match: "http://egg.2ch.net/youth/"
  Pattern match: "http://rio2016.2ch.net/disaster/"
  Pattern match: "http://egg.2ch.net/119/"
  Pattern match: "http://mevius.2ch.net/gender/"
  Pattern match: "http://lavender.2ch.net/giin/"
  Pattern match: "http://matsuri.2ch.net/manifesto/"
  Pattern match: "http://rio2016.2ch.net/police/"
  Pattern match: "http://egg.2ch.net/court/"
  Pattern match: "http://mao.2ch.net/saibanin/"
  Pattern match: "http://rio2016.2ch.net/soc/"
  Pattern match: "http://egg.2ch.net/atom/"
  Pattern match: "http://rio2016.2ch.net/energy/"
  Pattern match: "http://egg.2ch.net/river/"
  Pattern match: "http://rio2016.2ch.net/traf/"
  Pattern match: "http://mao.2ch.net/way/"
  Pattern match: "http://egg.2ch.net/develop/"
  Pattern match: "http://rio2016.2ch.net/recruit/"
  Pattern match: "http://medaka.2ch.net/job/"
  Pattern match: "http://rio2016.2ch.net/volunteer/"
  Pattern match: "http://egg.2ch.net/welfare/"
  Pattern match: "http://rio2016.2ch.net/mayor/"
  Pattern match: "http://mao.2ch.net/ftax/"
  Pattern match: "http://rio2016.2ch.net/jsdf/"
  Pattern match: "http://mevius.2ch.net/nenga/"
  Pattern match: "http://mao.2ch.net/lifework/"
  Pattern match: "http://egg.2ch.net/regulate/"
  Pattern match: "http://krsw.2ch.net/forex/"
  Pattern match: "http://rio2016.2ch.net/venture/"
  Pattern match: "http://mevius.2ch.net/manage/"
  Pattern match: "http://mao.2ch.net/management/"
  Pattern match: "http://mao.2ch.net/estate/"
  Pattern match: "http://rio2016.2ch.net/koumu/"
  Pattern match: "http://mao.2ch.net/shikaku/"
  Pattern match: "http://matsuri.2ch.net/lic/"
  Pattern match: "http://mao.2ch.net/haken/"
  Pattern match: "http://egg.2ch.net/hoken/"
  Pattern match: "http://mevius.2ch.net/tax/"
  Pattern match: "http://medaka.2ch.net/exam/"
  Pattern match: "http://egg.2ch.net/hosp/"
  Pattern match: "http://egg.2ch.net/bio/"
  Pattern match: "http://egg.2ch.net/hikari/"
  Pattern match: "http://mao.2ch.net/dtp/"
  Pattern match: "http://medaka.2ch.net/part/"
  Pattern match: "http://egg.2ch.net/koukoku/"
  Pattern match: "http://egg.2ch.net/agri/"
  Pattern match: "http://mao.2ch.net/build/"
  Pattern match: "http://mao.2ch.net/industry/"
  Pattern match: "http://matsuri.2ch.net/peko/"
  Pattern match: "http://lavender.2ch.net/company/"
  Pattern match: "http://rio2016.2ch.net/bouhan/"
  Pattern match: "http://mevius.2ch.net/antispam/"
  Pattern match: "http://egg.2ch.net/ihan/"
  Pattern match: "http://rosie.2ch.net/hokkaido/"
  Pattern match: "http://rosie.2ch.net/tohoku/"
  Pattern match: "http://rosie.2ch.net/kousinetu/"
  Pattern match: "http://rosie.2ch.net/kanto/"
  Pattern match: "http://rosie.2ch.net/tokyo/"
  Pattern match: "http://rosie.2ch.net/tama/"
  Pattern match: "http://rosie.2ch.net/kana/"
  Pattern match: "http://rosie.2ch.net/tokai/"
  Pattern match: "http://rosie.2ch.net/kinki/"
  Pattern match: "http://rosie.2ch.net/osaka/"
  Pattern match: "http://rosie.2ch.net/chugoku/"
  Pattern match: "http://rosie.2ch.net/sikoku/"
  Pattern match: "http://rosie.2ch.net/kyusyu/"
  Pattern match: "http://rosie.2ch.net/okinawa/"
  Pattern match: "http://matsuri.2ch.net/expo/"
  Pattern match: "http://mao.2ch.net/subcal/"
  Pattern match: "http://mevius.2ch.net/bun/"
  Pattern match: "http://mao.2ch.net/mitemite/"
  Pattern match: "http://mevius.2ch.net/poem/"
  Pattern match: "http://egg.2ch.net/rongo/"
  Pattern match: "http://lavender.2ch.net/movie/"
  Pattern match: "http://lavender.2ch.net/cinema/"
  Pattern match: "http://fate.2ch.net/endroll/"
  Pattern match: "http://rio2016.2ch.net/rmovie/"
  Pattern match: "http://rio2016.2ch.net/kinema/"
  Pattern match: "http://krsw.2ch.net/netflix/"
  Pattern match: "http://krsw.2ch.net/hulu/"
  Pattern match: "http://mao.2ch.net/occult/"
  Pattern match: "http://fate.2ch.net/kaidan/"
  Pattern match: "http://matsuri.2ch.net/esp/"
  Pattern match: "http://mevius.2ch.net/sfx/"
  Pattern match: "http://rio2016.2ch.net/rsfx/"
  Pattern match: "http://lavender.2ch.net/drama/"
  Pattern match: "http://lavender.2ch.net/siki/"
  Pattern match: "http://mao.2ch.net/fortune/"
  Pattern match: "http://mao.2ch.net/uranai/"
  Pattern match: "http://matsuri.2ch.net/kyoto/"
  Pattern match: "http://lavender.2ch.net/gallery/"
  Pattern match: "http://lavender.2ch.net/rakugo/"
  Pattern match: "http://egg.2ch.net/ruins/"
  Pattern match: "http://fate.2ch.net/cyberpunk/"
  Pattern match: "http://egg.2ch.net/emperor/"
  Pattern match: "http://fate.2ch.net/spiritual/"
  Pattern match: "http://rio2016.2ch.net/rikei/"
  Pattern match: "http://rio2016.2ch.net/sci/"
  Pattern match: "http://rio2016.2ch.net/life/"
  Pattern match: "http://matsuri.2ch.net/bake/"
  Pattern match: "http://matsuri.2ch.net/kikai/"
  Pattern match: "http://rio2016.2ch.net/denki/"
  Pattern match: "http://rio2016.2ch.net/robot/"
  Pattern match: "http://matsuri.2ch.net/infosys/"
  Pattern match: "http://rio2016.2ch.net/informatics/"
  Pattern match: "http://matsuri.2ch.net/sim/"
  Pattern match: "http://matsuri.2ch.net/nougaku/"
  Pattern match: "http://matsuri.2ch.net/sky/"
  Pattern match: "http://rio2016.2ch.net/galileo/"
  Pattern match: "http://mao.2ch.net/doctor/"
  Pattern match: "http://rio2016.2ch.net/kampo/"
  Pattern match: "http://rio2016.2ch.net/math/"
  Pattern match: "http://matsuri.2ch.net/doboku/"
  Pattern match: "http://matsuri.2ch.net/material/"
  Pattern match: "http://mevius.2ch.net/space/"
  Pattern match: "http://rio2016.2ch.net/future/"
  Pattern match: "http://rio2016.2ch.net/wild/"
  Pattern match: "http://fate.2ch.net/plants/"
  Pattern match: "http://matsuri.2ch.net/goldenfish/"
  Pattern match: "http://matsuri.2ch.net/insect/"
  Pattern match: "http://rio2016.2ch.net/earth/"
  Pattern match: "http://lavender.2ch.net/psycho/"
  Pattern match: "http://lavender.2ch.net/gengo/"
  Pattern match: "http://egg.2ch.net/dialect/"
  Pattern match: "http://lavender.2ch.net/pedagogy/"
  Pattern match: "http://lavender.2ch.net/sociology/"
  Pattern match: "http://lavender.2ch.net/economics/"
  Pattern match: "http://mevius.2ch.net/book/"
  Pattern match: "http://mevius.2ch.net/poetics/"
  Pattern match: "http://lavender.2ch.net/history/"
  Pattern match: "http://lavender.2ch.net/history2/"
  Pattern match: "http://lavender.2ch.net/whis/"
  Pattern match: "http://lavender.2ch.net/archeology/"
  Pattern match: "http://lavender.2ch.net/min/"
  Pattern match: "http://lavender.2ch.net/kobun/"
  Pattern match: "http://lavender.2ch.net/english/"
  Pattern match: "http://lavender.2ch.net/usa/"
  Pattern match: "http://lavender.2ch.net/korea/"
  Pattern match: "http://lavender.2ch.net/china/"
  Pattern match: "http://lavender.2ch.net/taiwan/"
  Pattern match: "http://mevius.2ch.net/myanmar/"
  Pattern match: "http://mevius.2ch.net/yangon/"
  Pattern match: "http://lavender.2ch.net/geo/"
  Pattern match: "http://matsuri.2ch.net/chiri/"
  Pattern match: "http://lavender.2ch.net/gogaku/"
  Pattern match: "http://lavender.2ch.net/art/"
  Pattern match: "http://lavender.2ch.net/philo/"
  Pattern match: "http://lavender.2ch.net/jurisp/"
  Pattern match: "http://medaka.2ch.net/shihou/"
  Pattern match: "http://lavender.2ch.net/kaden/"
  Pattern match: "http://matsuri.2ch.net/wm/"
  Pattern match: "http://matsuri.2ch.net/vcamera/"
  Pattern match: "http://matsuri.2ch.net/bakery/"
  Pattern match: "http://rio2016.2ch.net/toilet/"
  Pattern match: "http://lavender.2ch.net/sony/"
  Pattern match: "http://lavender.2ch.net/phs/"
  Pattern match: "http://lavender.2ch.net/keitai/"
  Pattern match: "http://krsw.2ch.net/spsaloon/"
  Pattern match: "http://fate.2ch.net/ios/"
  Pattern match: "http://matsuri.2ch.net/iPhone/"
  Pattern match: "http://egg.2ch.net/android/"
  Pattern match: "http://lavender.2ch.net/chakumelo/"
  Pattern match: "http://hayabusa9.2ch.net/appli/"
  Pattern match: "http://egg.2ch.net/applism/"
  Pattern match: "http://lavender.2ch.net/dgoods/"
  Pattern match: "http://lavender.2ch.net/camera/"
  Pattern match: "http://mevius.2ch.net/dcamera/"
  Pattern match: "http://mevius.2ch.net/av/"
  Pattern match: "http://lavender.2ch.net/pav/"
  Pattern match: "http://rio2016.2ch.net/battery/"
  Pattern match: "http://mevius.2ch.net/seiji/"
  Pattern match: "http://egg.2ch.net/diplomacy/"
  Pattern match: "http://egg.2ch.net/trafficpolicy/"
  Pattern match: "http://medaka.2ch.net/eco/"
  Pattern match: "http://egg.2ch.net/stock/"
  Pattern match: "http://mao.2ch.net/stockb/"
  Pattern match: "http://medaka.2ch.net/market/"
  Pattern match: "http://hayabusa9.2ch.net/livemarket1/"
  Pattern match: "http://hayabusa9.2ch.net/livemarket2/"
  Pattern match: "http://mao.2ch.net/deal/"
  Pattern match: "http://egg.2ch.net/koumei/"
  Pattern match: "http://mevius.2ch.net/kyousan/"
  Pattern match: "http://egg.2ch.net/sisou/"
  Pattern match: "http://egg.2ch.net/kova/"
  Pattern match: "http://mao.2ch.net/money/"
  Pattern match: "http://matsuri.2ch.net/food/"
  Pattern match: "http://matsuri.2ch.net/candy/"
  Pattern match: "http://matsuri.2ch.net/juice/"
  Pattern match: "http://matsuri.2ch.net/pot/"
  Pattern match: "http://matsuri.2ch.net/cook/"
  Pattern match: "http://egg.2ch.net/okome/"
  Pattern match: "http://mao.2ch.net/yasai/"
  Pattern match: "http://rio2016.2ch.net/kinoko/"
  Pattern match: "http://krsw.2ch.net/takenoko/"
  Pattern match: "http://matsuri.2ch.net/salt/"
  Pattern match: "http://mevius.2ch.net/ramen/"
  Pattern match: "http://matsuri.2ch.net/nissin/"
  Pattern match: "http://matsuri.2ch.net/jnoodle/"
  Pattern match: "http://matsuri.2ch.net/sushi/"
  Pattern match: "http://matsuri.2ch.net/don/"
  Pattern match: "http://matsuri.2ch.net/curry/"
  Pattern match: "http://matsuri.2ch.net/bread/"
  Pattern match: "http://matsuri.2ch.net/pasta/"
  Pattern match: "http://matsuri.2ch.net/kbbq/"
  Pattern match: "http://matsuri.2ch.net/konamono/"
  Pattern match: "http://matsuri.2ch.net/toba/"
  Pattern match: "http://matsuri.2ch.net/gurume/"
  Pattern match: "http://matsuri.2ch.net/famires/"
  Pattern match: "http://matsuri.2ch.net/jfoods/"
  Pattern match: "http://matsuri.2ch.net/bento/"
  Pattern match: "http://mevius.2ch.net/sake/"
  Pattern match: "http://matsuri.2ch.net/wine/"
  Pattern match: "http://mao.2ch.net/beer/"
  Pattern match: "http://matsuri.2ch.net/drunk/"
  Pattern match: "http://matsuri.2ch.net/recipe/"
  Pattern match: "http://matsuri.2ch.net/patissier/"
  Pattern match: "http://matsuri.2ch.net/supplement/"
  Pattern match: "http://fate.2ch.net/vegetarian/"
  Pattern match: "http://rio2016.2ch.net/lifesaloon/"
  Pattern match: "http://medaka.2ch.net/kankon/"
  Pattern match: "http://rio2016.2ch.net/okiraku/"
  Pattern match: "http://rio2016.2ch.net/homealone/"
  Pattern match: "http://rio2016.2ch.net/countrylife/"
  Pattern match: "http://egg.2ch.net/debt/"
  Pattern match: "http://rio2016.2ch.net/inpatient/"
  Pattern match: "http://rio2016.2ch.net/sportsclub/"
  Pattern match: "http://lavender.2ch.net/bath/"
  Pattern match: "http://rio2016.2ch.net/anniversary/"
  Pattern match: "http://rio2016.2ch.net/sousai/"
  Pattern match: "http://mevius.2ch.net/baby/"
  Pattern match: "http://rio2016.2ch.net/kagu/"
  Pattern match: "http://rosie.2ch.net/diy/"
  Pattern match: "http://rosie.2ch.net/diary/"
  Pattern match: "http://medaka.2ch.net/shop/"
  Pattern match: "http://egg.2ch.net/hcenter/"
  Pattern match: "http://mao.2ch.net/used/"
  Pattern match: "http://egg.2ch.net/rental/"
  Pattern match: "http://rio2016.2ch.net/trend/"
  Pattern match: "http://rio2016.2ch.net/model/"
  Pattern match: "http://mevius.2ch.net/fashion/"
  Pattern match: "http://mao.2ch.net/underwear/"
  Pattern match: "http://rio2016.2ch.net/shoes/"
  Pattern match: "http://rio2016.2ch.net/female/"
  Pattern match: "http://medaka.2ch.net/diet/"
  Pattern match: "http://lavender.2ch.net/mensbeauty/"
  Pattern match: "http://egg.2ch.net/aroma/"
  Pattern match: "http://rio2016.2ch.net/seikei/"
  Pattern match: "http://rio2016.2ch.net/shapeup/"
  Pattern match: "http://rio2016.2ch.net/world/"
  Pattern match: "http://rio2016.2ch.net/northa/"
  Pattern match: "http://rio2016.2ch.net/credit/"
  Pattern match: "http://lavender.2ch.net/point/"
  Pattern match: "http://matsuri.2ch.net/cafe30/"
  Pattern match: "http://mevius.2ch.net/cafe40/"
  Pattern match: "http://matsuri.2ch.net/cafe50/"
  Pattern match: "http://egg.2ch.net/cafe60/"
  Pattern match: "http://lavender.2ch.net/live/"
  Pattern match: "http://rio2016.2ch.net/souji/"
  Pattern match: "http://rio2016.2ch.net/goki/"
  Pattern match: "http://rio2016.2ch.net/radiation/"
  Pattern match: "http://mao.2ch.net/kechi2/"
  Pattern match: "http://rio2016.2ch.net/chance/"
  Pattern match: "http://rio2016.2ch.net/cigaret/"
  Pattern match: "http://rio2016.2ch.net/megane/"
  Pattern match: "http://rio2016.2ch.net/yuusen/"
  Pattern match: "http://rio2016.2ch.net/conv/"
  Pattern match: "http://rio2016.2ch.net/sale/"
  Pattern match: "http://lavender.2ch.net/stationery/"
  Pattern match: "http://rio2016.2ch.net/class/"
  Pattern match: "http://mevius.2ch.net/shar/"
  Pattern match: "http://medaka.2ch.net/x3/"
  Pattern match: "http://matsuri.2ch.net/denpa/"
  Pattern match: "http://egg.2ch.net/owarai/"
  Pattern match: "http://medaka.2ch.net/2chbook/"
  Pattern match: "http://fate.2ch.net/uwasa/"
  Pattern match: "http://medaka.2ch.net/charaneta/"
  Pattern match: "http://medaka.2ch.net/charaneta2/"
  Pattern match: "http://matsuri.2ch.net/mascot/"
  Pattern match: "http://rio2016.2ch.net/senji/"
  Pattern match: "http://mevius.2ch.net/ex/"
  Pattern match: "http://rio2016.2ch.net/x1/"
  Pattern match: "http://medaka.2ch.net/gaysaloon/"
  Pattern match: "http://mao.2ch.net/nohodame/"
  Pattern match: "http://medaka.2ch.net/dame/"
  Pattern match: "http://rio2016.2ch.net/loser/"
  Pattern match: "http://matsuri.2ch.net/hikky/"
  Pattern match: "http://krsw.2ch.net/mental/"
  Pattern match: "http://matsuri.2ch.net/single/"
  Pattern match: "http://mao.2ch.net/wom/"
  Pattern match: "http://mao.2ch.net/sfe/"
  Pattern match: "http://medaka.2ch.net/wmotenai/"
  Pattern match: "http://matsuri.2ch.net/ms/"
  Pattern match: "http://lavender.2ch.net/male/"
  Pattern match: "http://matsuri.2ch.net/motetai/"
  Pattern match: "http://mevius.2ch.net/motenai/"
  Pattern match: "http://rio2016.2ch.net/alone/"
  Pattern match: "http://mao.2ch.net/tomorrow/"
  Pattern match: "http://medaka.2ch.net/employee/"
  Pattern match: "http://rio2016.2ch.net/student/"
  Pattern match: "http://mao.2ch.net/otaku/"
  Pattern match: "http://matsuri.2ch.net/nendai/"
  Pattern match: "http://rio2016.2ch.net/sepia/"
  Pattern match: "http://medaka.2ch.net/gag/"
  Pattern match: "http://medaka.2ch.net/575/"
  Pattern match: "http://medaka.2ch.net/tanka/"
  Pattern match: "http://medaka.2ch.net/4649/"
  Pattern match: "http://mao.2ch.net/hidari/"
  Pattern match: "http://fate.2ch.net/worldskb/"
  Pattern match: "http://headline.2ch.net/bbylive/"
  Pattern match: "http://headline.2ch.net/bbylivej/"
  Pattern match: "http://mao.2ch.net/livesaturn/"
  Pattern match: "http://mao.2ch.net/livevenus/"
  Pattern match: "http://hawk.2ch.net/livejupiter/"
  Pattern match: "http://fate.2ch.net/liveuranus/"
  Pattern match: "http://mao.2ch.net/endless/"
  Pattern match: "http://himawari.2ch.net/weekly/"
  Pattern match: "http://fate.2ch.net/livewar/"
  Pattern match: "http://fate.2ch.net/livefield/"
  Pattern match: "http://fate.2ch.net/liveelection/"
  Pattern match: "http://himawari.2ch.net/livewkwest/"
  Pattern match: "http://nhk2.2ch.net/livenhk/"
  Pattern match: "http://nhk2.2ch.net/liveetv/"
  Pattern match: "http://himawari.2ch.net/liventv/"
  Pattern match: "http://himawari.2ch.net/livetbs/"
  Pattern match: "http://himawari.2ch.net/livecx/"
  Pattern match: "http://himawari.2ch.net/liveanb/"
  Pattern match: "http://himawari.2ch.net/livetx/"
  Pattern match: "http://fate.2ch.net/livemx/"
  Pattern match: "http://agree.2ch.net/liveabema/"
  Pattern match: "http://nhk2.2ch.net/livebs/"
  Pattern match: "http://tanuki.2ch.net/livebs2/"
  Pattern match: "http://himawari.2ch.net/livewowow/"
  Pattern match: "http://himawari.2ch.net/liveskyp/"
  Pattern match: "http://himawari.2ch.net/liveradio/"
  Pattern match: "http://mao.2ch.net/liveanime/"
  Pattern match: "http://mao.2ch.net/kokkai/"
  Pattern match: "http://mao.2ch.net/dome/"
  Pattern match: "http://tanuki.2ch.net/livebase/"
  Pattern match: "http://rio2016.2ch.net/livefoot/"
  Pattern match: "http://mao.2ch.net/oonna/"
  Pattern match: "http://mao.2ch.net/ootoko/"
  Pattern match: "http://mao.2ch.net/dancesite/"
  Pattern match: "http://mao.2ch.net/festival/"
  Pattern match: "http://rio2016.2ch.net/jasmine/"
  Pattern match: "http://agree.2ch.net/liveanarchy/"
  Pattern match: "http://fate.2ch.net/livesangyou/"
  Pattern match: "http://agree.2ch.net/liveyonmoji/"
  Pattern match: "http://mao.2ch.net/edu/"
  Pattern match: "http://medaka.2ch.net/jsaloon/"
  Pattern match: "http://medaka.2ch.net/kouri/"
  Pattern match: "http://mao.2ch.net/juku/"
  Pattern match: "http://mao.2ch.net/ojyuken/"
  Pattern match: "http://mao.2ch.net/senmon/"
  Pattern match: "http://mao.2ch.net/design/"
  Pattern match: "http://mao.2ch.net/musicology/"
  Pattern match: "http://medaka.2ch.net/govexam/"
  Pattern match: "http://lavender.2ch.net/hobby/"
  Pattern match: "http://matsuri.2ch.net/magic/"
  Pattern match: "http://matsuri.2ch.net/puzzle/"
  Pattern match: "http://lavender.2ch.net/craft/"
  Pattern match: "http://mevius.2ch.net/toy/"
  Pattern match: "http://lavender.2ch.net/zoid/"
  Pattern match: "http://lavender.2ch.net/watch/"
  Pattern match: "http://lavender.2ch.net/smoking/"
  Pattern match: "http://matsuri.2ch.net/knife/"
  Pattern match: "http://lavender.2ch.net/doll/"
  Pattern match: "http://lavender.2ch.net/engei/"
  Pattern match: "http://mao.2ch.net/dog/"
  Pattern match: "http://mao.2ch.net/pet/"
  Pattern match: "http://lavender.2ch.net/aquarium/"
  Pattern match: "http://matsuri.2ch.net/cat/"
  Pattern match: "http://mevius.2ch.net/army/"
  Pattern match: "http://lavender.2ch.net/radio/"
  Pattern match: "http://lavender.2ch.net/mokei/"
  Pattern match: "http://matsuri.2ch.net/radiocontrol/"
  Pattern match: "http://lavender.2ch.net/gun/"
  Pattern match: "http://matsuri.2ch.net/fireworks/"
  Pattern match: "http://mao.2ch.net/warhis/"
  Pattern match: "http://matsuri.2ch.net/chinahero/"
  Pattern match: "http://matsuri.2ch.net/sengoku/"
  Pattern match: "http://matsuri.2ch.net/nanminhis/"
  Pattern match: "http://lavender.2ch.net/dance/"
  Pattern match: "http://fate.2ch.net/yoga/"
  Pattern match: "http://lavender.2ch.net/bird/"
  Pattern match: "http://lavender.2ch.net/collect/"
  Pattern match: "http://matsuri.2ch.net/photo/"
  Pattern match: "http://agree.2ch.net/oekaki/"
  Pattern match: "http://egg.2ch.net/bike/"
  Pattern match: "http://krsw.2ch.net/motorbike/"
  Pattern match: "http://medaka.2ch.net/car/"
  Pattern match: "http://mao.2ch.net/kcar/"
  Pattern match: "http://fate.2ch.net/auto/"
  Pattern match: "http://mao.2ch.net/usedcar/"
  Pattern match: "http://mao.2ch.net/truck/"
  Pattern match: "http://mevius.2ch.net/train/"
  Pattern match: "http://mevius.2ch.net/rail/"
  Pattern match: "http://mao.2ch.net/jnr/"
  Pattern match: "http://matsuri.2ch.net/ice/"
  Pattern match: "http://matsuri.2ch.net/gage/"
  Pattern match: "http://mao.2ch.net/bus/"
  Pattern match: "http://lavender.2ch.net/airline/"
  Pattern match: "http://mao.2ch.net/sposaloon/"
  Pattern match: "http://mao.2ch.net/sports/"
  Pattern match: "http://mao.2ch.net/rsports/"
  Pattern match: "http://mao.2ch.net/stadium/"
  Pattern match: "http://medaka.2ch.net/athletics/"
  Pattern match: "http://mao.2ch.net/gymnastics/"
  Pattern match: "http://mao.2ch.net/muscle/"
  Pattern match: "http://mao.2ch.net/noroma/"
  Pattern match: "http://mao.2ch.net/wsports/"
  Pattern match: "http://mao.2ch.net/ski/"
  Pattern match: "http://mevius.2ch.net/skate/"
  Pattern match: "http://mao.2ch.net/swim/"
  Pattern match: "http://mao.2ch.net/msports/"
  Pattern match: "http://mao.2ch.net/boat/"
  Pattern match: "http://mao.2ch.net/birdman/"
  Pattern match: "http://medaka.2ch.net/fish/"
  Pattern match: "http://mao.2ch.net/bass/"
  Pattern match: "http://medaka.2ch.net/bicycle/"
  Pattern match: "http://mao.2ch.net/equestrian/"
  Pattern match: "http://mao.2ch.net/f1/"
  Pattern match: "http://mao.2ch.net/olympic/"
  Pattern match: "http://mao.2ch.net/bullseye/"
  Pattern match: "http://mao.2ch.net/parksports/"
  Pattern match: "http://mao.2ch.net/amespo/"
  Pattern match: "http://mao.2ch.net/cheerleading/"
  Pattern match: "http://mao.2ch.net/xsports/"
  Pattern match: "http://rio2016.2ch.net/base/"
  Pattern match: "http://medaka.2ch.net/npb/"
  Pattern match: "http://rio2016.2ch.net/meikyu/"
  Pattern match: "http://lavender.2ch.net/mlb/"
  Pattern match: "http://medaka.2ch.net/hsb/"
  Pattern match: "http://medaka.2ch.net/kyozin/"
  Pattern match: "http://matsuri.2ch.net/soccer/"
  Pattern match: "http://mevius.2ch.net/eleven/"
  Pattern match: "http://rio2016.2ch.net/wc/"
  Pattern match: "http://matsuri.2ch.net/football/"
  Pattern match: "http://medaka.2ch.net/basket/"
  Pattern match: "http://mao.2ch.net/tennis/"
  Pattern match: "http://mao.2ch.net/volley/"
  Pattern match: "http://mao.2ch.net/ovalball/"
  Pattern match: "http://mao.2ch.net/pingpong/"
  Pattern match: "http://mao.2ch.net/gutter/"
  Pattern match: "http://mao.2ch.net/golf/"
  Pattern match: "http://mao.2ch.net/billiards/"
  Pattern match: "http://mao.2ch.net/ballgame/"
  Pattern match: "http://medaka.2ch.net/k1/"
  Pattern match: "http://medaka.2ch.net/wres/"
  Pattern match: "http://mao.2ch.net/budou/"
  Pattern match: "http://medaka.2ch.net/boxing/"
  Pattern match: "http://mao.2ch.net/sumou/"
  Pattern match: "http://mao.2ch.net/jyudo/"
  Pattern match: "http://krsw.2ch.net/mma/"
  Pattern match: "http://matsuri.2ch.net/oversea/"
  Pattern match: "http://egg.2ch.net/21oversea/"
  Pattern match: "http://matsuri.2ch.net/travel/"
  Pattern match: "http://matsuri.2ch.net/hotel/"
  Pattern match: "http://matsuri.2ch.net/localfoods/"
  Pattern match: "http://matsuri.2ch.net/tropical/"
  Pattern match: "http://matsuri.2ch.net/onsen/"
  Pattern match: "http://mevius.2ch.net/park/"
  Pattern match: "http://matsuri.2ch.net/zoo/"
  Pattern match: "http://matsuri.2ch.net/museum/"
  Pattern match: "http://matsuri.2ch.net/out/"
  Pattern match: "http://fate.2ch.net/sapa/"
  Pattern match: "http://egg.2ch.net/tvsaloon/"
  Pattern match: "http://rio2016.2ch.net/kouhaku/"
  Pattern match: "http://mevius.2ch.net/tv/"
  Pattern match: "http://matsuri.2ch.net/natsutv/"
  Pattern match: "http://lavender.2ch.net/tvd/"
  Pattern match: "http://nhk2.2ch.net/nhkdrama/"
  Pattern match: "http://matsuri.2ch.net/natsudora/"
  Pattern match: "http://egg.2ch.net/kin/"
  Pattern match: "http://egg.2ch.net/radiosaloon/"
  Pattern match: "http://egg.2ch.net/am/"
  Pattern match: "http://rio2016.2ch.net/rradio/"
  Pattern match: "http://egg.2ch.net/tv2/"
  Pattern match: "http://rio2016.2ch.net/hanryu/"
  Pattern match: "http://egg.2ch.net/cs/"
  Pattern match: "http://egg.2ch.net/skyp/"
  Pattern match: "http://egg.2ch.net/bs/"
  Pattern match: "http://nhk2.2ch.net/nhk/"
  Pattern match: "http://egg.2ch.net/cm/"
  Pattern match: "http://egg.2ch.net/geino/"
  Pattern match: "http://egg.2ch.net/celebrity/"
  Pattern match: "http://rio2016.2ch.net/4sama/"
  Pattern match: "http://egg.2ch.net/kyon2/"
  Pattern match: "http://egg.2ch.net/actor/"
  Pattern match: "http://egg.2ch.net/actress/"
  Pattern match: "http://mevius.2ch.net/geinin/"
  Pattern match: "http://medaka.2ch.net/ana/"
  Pattern match: "http://egg.2ch.net/ami/"
  Pattern match: "http://egg.2ch.net/apple/"
  Pattern match: "http://egg.2ch.net/mendol/"
  Pattern match: "http://fate.2ch.net/idol/"
  Pattern match: "http://egg.2ch.net/geinoj/"
  Pattern match: "http://egg.2ch.net/ainotane/"
  Pattern match: "http://egg.2ch.net/zurui/"
  Pattern match: "http://matsuri.2ch.net/morningcoffee/"
  Pattern match: "http://fate.2ch.net/momoclo/"
  Pattern match: "http://fate.2ch.net/babymetal/"
  Pattern match: "http://krsw.2ch.net/exile/"
  Pattern match: "http://egg.2ch.net/smap/"
  Pattern match: "http://egg.2ch.net/jan/"
  Pattern match: "http://egg.2ch.net/jr/"
  Pattern match: "http://egg.2ch.net/jr2/"
  Pattern match: "http://rosie.2ch.net/akb/"
  Pattern match: "http://fate.2ch.net/akbsaloon/"
  Pattern match: "http://lavender.2ch.net/uraidol/"
  Pattern match: "http://fate.2ch.net/world48/"
  Pattern match: "http://mevius.2ch.net/nogizaka/"
  Pattern match: "http://rio2016.2ch.net/keyakizaka46/"
  Pattern match: "http://rio2016.2ch.net/ske/"
  Pattern match: "http://fate.2ch.net/sdn/"
  Pattern match: "http://medaka.2ch.net/nmb/"
  Pattern match: "http://krsw.2ch.net/hkt/"
  Pattern match: "http://mao.2ch.net/ngt/"
  Pattern match: "http://fate.2ch.net/stu/"
  Pattern match: "http://krsw.2ch.net/teamcrerekko/"
  Pattern match: "http://egg.2ch.net/netidol/"
  Pattern match: "http://egg.2ch.net/indieidol/"
  Pattern match: "http://egg.2ch.net/mj/"
  Pattern match: "http://medaka.2ch.net/pachi/"
  Pattern match: "http://medaka.2ch.net/pachij/"
  Pattern match: "http://medaka.2ch.net/pachik/"
  Pattern match: "http://medaka.2ch.net/slot/"
  Pattern match: "http://medaka.2ch.net/slotj/"
  Pattern match: "http://egg.2ch.net/slotk/"
  Pattern match: "http://lavender.2ch.net/keiba/"
  Pattern match: "http://medaka.2ch.net/uma/"
  Pattern match: "http://mao.2ch.net/keirin/"
  Pattern match: "http://medaka.2ch.net/kyotei/"
  Pattern match: "http://mao.2ch.net/autorace/"
  Pattern match: "http://mao.2ch.net/gamble/"
  Pattern match: "http://mao.2ch.net/loto/"
  Pattern match: "http://headline.2ch.net/bbygame1/"
  Pattern match: "http://headline.2ch.net/bbygame2/"
  Pattern match: "http://headline.2ch.net/bbygame3/"
  Pattern match: "http://mevius.2ch.net/gsaloon/"
  Pattern match: "http://medaka.2ch.net/gameover/"
  Pattern match: "http://medaka.2ch.net/goveract/"
  Pattern match: "http://medaka.2ch.net/goverrpg/"
  Pattern match: "http://krsw.2ch.net/gamesm/"
  Pattern match: "http://rosie.2ch.net/gamerpg/"
  Pattern match: "http://krsw.2ch.net/ff/"
  Pattern match: "http://medaka.2ch.net/gamesrpg/"
  Pattern match: "http://mevius.2ch.net/gamerobo/"
  Pattern match: "http://mevius.2ch.net/gal/"
  Pattern match: "http://medaka.2ch.net/ggirl/"
  Pattern match: "http://medaka.2ch.net/gamespo/"
  Pattern match: "http://medaka.2ch.net/gamehis/"
  Pattern match: "http://medaka.2ch.net/otoge/"
  Pattern match: "http://matsuri.2ch.net/gamefight/"
  Pattern match: "http://medaka.2ch.net/gamestg/"
  Pattern match: "http://fate.2ch.net/gamef/"
  Pattern match: "http://fate.2ch.net/touhou/"
  Pattern match: "http://medaka.2ch.net/fly/"
  Pattern match: "http://rosie.2ch.net/famicom/"
  Pattern match: "http://egg.2ch.net/zgame/"
  Pattern match: "http://medaka.2ch.net/retro/"
  Pattern match: "http://medaka.2ch.net/retro2/"
  Pattern match: "http://medaka.2ch.net/game90/"
  Pattern match: "http://mevius.2ch.net/arc/"
  Pattern match: "http://egg.2ch.net/rarc/"
  Pattern match: "http://medaka.2ch.net/amusement/"
  Pattern match: "http://medaka.2ch.net/gecen/"
  Pattern match: "http://egg.2ch.net/game/"
  Pattern match: "http://mao.2ch.net/gameama/"
  Pattern match: "http://rio2016.2ch.net/gameswf/"
  Pattern match: "http://medaka.2ch.net/cgame/"
  Pattern match: "http://egg.2ch.net/tcg/"
  Pattern match: "http://mevius.2ch.net/bgame/"
  Pattern match: "http://medaka.2ch.net/gamestones/"
  Pattern match: "http://medaka.2ch.net/quiz/"
  Pattern match: "http://krsw.2ch.net/ghard/"
  Pattern match: "http://fate.2ch.net/hunter/"
  Pattern match: "http://medaka.2ch.net/gameurawaza/"
  Pattern match: "http://medaka.2ch.net/gamechara/"
  Pattern match: "http://medaka.2ch.net/gamemusic/"
  Pattern match: "http://krsw.2ch.net/minecraft/"
  Pattern match: "http://krsw.2ch.net/aimasu/"
  Pattern match: "http://fate.2ch.net/yugioh/"
  Pattern match: "http://krsw.2ch.net/pokego/"
  Pattern match: "http://krsw.2ch.net/steam/"
  Pattern match: "http://lavender.2ch.net/card/"
  Pattern match: "http://krsw.2ch.net/handygame/"
  Pattern match: "http://medaka.2ch.net/handygover/"
  Pattern match: "http://mevius.2ch.net/handygrpg/"
  Pattern match: "http://medaka.2ch.net/poke/"
  Pattern match: "http://medaka.2ch.net/wifi/"
  Pattern match: "http://medaka.2ch.net/rhandyg/"
  Pattern match: "http://medaka.2ch.net/pokechara/"
  Pattern match: "http://mao.2ch.net/mmonews/"
  Pattern match: "http://medaka.2ch.net/mmoqa/"
  Pattern match: "http://matsuri.2ch.net/ogame/"
  Pattern match: "http://lavender.2ch.net/ogame2/"
  Pattern match: "http://lavender.2ch.net/ogame3/"
  Pattern match: "http://medaka.2ch.net/mmosaloon/"
  Pattern match: "http://krsw.2ch.net/netgame/"
  Pattern match: "http://mevius.2ch.net/mmo/"
  Pattern match: "http://medaka.2ch.net/mmominor/"
  Pattern match: "http://egg.2ch.net/pso/"
  Pattern match: "http://egg.2ch.net/dqo/"
  Pattern match: "http://egg.2ch.net/ffo/"
  Pattern match: "http://lavender.2ch.net/asaloon/"
  Pattern match: "http://rio2016.2ch.net/anime4vip/"
  Pattern match: "http://rosie.2ch.net/anime/"
  Pattern match: "http://matsuri.2ch.net/anime2/"
  Pattern match: "http://mao.2ch.net/anime3/"
  Pattern match: "http://fate.2ch.net/antianime/"
  Pattern match: "http://mao.2ch.net/ranime/"
  Pattern match: "http://mao.2ch.net/ranimeh/"
  Pattern match: "http://medaka.2ch.net/animovie/"
  Pattern match: "http://mao.2ch.net/anichara/"
  Pattern match: "http://matsuri.2ch.net/anichara2/"
  Pattern match: "http://medaka.2ch.net/cosp/"
  Pattern match: "http://krsw.2ch.net/cosplayer/"
  Pattern match: "http://rio2016.2ch.net/voice/"
  Pattern match: "http://matsuri.2ch.net/voiceactor/"
  Pattern match: "http://medaka.2ch.net/doujin/"
  Pattern match: "http://rio2016.2ch.net/comiket/"
  Pattern match: "http://medaka.2ch.net/csaloon/"
  Pattern match: "http://fate.2ch.net/comic/"
  Pattern match: "http://medaka.2ch.net/rcomic/"
  Pattern match: "http://medaka.2ch.net/ymag/"
  Pattern match: "http://matsuri.2ch.net/wcomic/"
  Pattern match: "http://medaka.2ch.net/gcomic/"
  Pattern match: "http://medaka.2ch.net/4koma/"
  Pattern match: "http://medaka.2ch.net/cchara/"
  Pattern match: "http://mao.2ch.net/sakura/"
  Pattern match: "http://mao.2ch.net/eva/"
  Pattern match: "http://medaka.2ch.net/cartoon/"
  Pattern match: "http://medaka.2ch.net/iga/"
  Pattern match: "http://mevius.2ch.net/bookall/"
  Pattern match: "http://matsuri.2ch.net/magazin/"
  Pattern match: "http://mevius.2ch.net/mystery/"
  Pattern match: "http://mevius.2ch.net/sf/"
  Pattern match: "http://rio2016.2ch.net/litechara/"
  Pattern match: "http://mevius.2ch.net/zassi/"
  Pattern match: "http://mevius.2ch.net/books/"
  Pattern match: "http://rio2016.2ch.net/ebooks/"
  Pattern match: "http://mevius.2ch.net/ehon/"
  Pattern match: "http://mevius.2ch.net/juvenile/"
  Pattern match: "http://mevius.2ch.net/illustrator/"
  Pattern match: "http://krsw.2ch.net/idolmaster/"
  Pattern match: "http://medaka.2ch.net/magicalgirls/"
  Pattern match: "http://lavender.2ch.net/msaloon/"
  Pattern match: "http://lavender.2ch.net/mjsaloon/"
  Pattern match: "http://lavender.2ch.net/musicj/"
  Pattern match: "http://lavender.2ch.net/musicjm/"
  Pattern match: "http://lavender.2ch.net/musicjf/"
  Pattern match: "http://mevius.2ch.net/musicjg/"
  Pattern match: "http://rio2016.2ch.net/natsumeloj/"
  Pattern match: "http://lavender.2ch.net/enka/"
  Pattern match: "http://lavender.2ch.net/mesaloon/"
  Pattern match: "http://lavender.2ch.net/musice/"
  Pattern match: "http://matsuri.2ch.net/natsumeloe/"
  Pattern match: "http://lavender.2ch.net/music/"
  Pattern match: "http://rio2016.2ch.net/beatles/"
  Pattern match: "http://egg.2ch.net/visual/"
  Pattern match: "http://mevius.2ch.net/visualb/"
  Pattern match: "http://lavender.2ch.net/dj/"
  Pattern match: "http://lavender.2ch.net/disco/"
  Pattern match: "http://lavender.2ch.net/randb/"
  Pattern match: "http://lavender.2ch.net/punk/"
  Pattern match: "http://lavender.2ch.net/hrhm/"
  Pattern match: "http://lavender.2ch.net/hiphop/"
  Pattern match: "http://lavender.2ch.net/techno/"
  Pattern match: "http://lavender.2ch.net/progre/"
  Pattern match: "http://matsuri.2ch.net/healmusic/"
  Pattern match: "http://lavender.2ch.net/wmusic/"
  Pattern match: "http://egg.2ch.net/reggae/"
  Pattern match: "http://lavender.2ch.net/classic/"
  Pattern match: "http://matsuri.2ch.net/fusion/"
  Pattern match: "http://lavender.2ch.net/classical/"
  Pattern match: "http://lavender.2ch.net/contemporary/"
  Pattern match: "http://lavender.2ch.net/nika/"
  Pattern match: "http://lavender.2ch.net/suisou/"
  Pattern match: "http://matsuri.2ch.net/chorus/"
  Pattern match: "http://lavender.2ch.net/doyo/"
  Pattern match: "http://medaka.2ch.net/asong/"
  Pattern match: "http://matsuri.2ch.net/soundtrack/"
  Pattern match: "http://lavender.2ch.net/karaok/"
  Pattern match: "http://lavender.2ch.net/legend/"
  Pattern match: "http://lavender.2ch.net/minor/"
  Pattern match: "http://matsuri.2ch.net/band/"
  Pattern match: "http://lavender.2ch.net/compose/"
  Pattern match: "http://matsuri.2ch.net/piano/"
  Pattern match: "http://fate.2ch.net/hogaku/"
  Pattern match: "http://rio2016.2ch.net/healing/"
  Pattern match: "http://rio2016.2ch.net/jinsei/"
  Pattern match: "http://rio2016.2ch.net/psy/"
  Pattern match: "http://rio2016.2ch.net/body/"
  Pattern match: "http://fate.2ch.net/keihatsu/"
  Pattern match: "http://rio2016.2ch.net/stretch/"
  Pattern match: "http://mao.2ch.net/handicap/"
  Pattern match: "http://mao.2ch.net/cancer/"
  Pattern match: "http://rio2016.2ch.net/nanbyou/"
  Pattern match: "http://matsuri.2ch.net/infection/"
  Pattern match: "http://mevius.2ch.net/hiv/"
  Pattern match: "http://rio2016.2ch.net/atopi/"
  Pattern match: "http://rio2016.2ch.net/hage/"
  Pattern match: "http://mevius.2ch.net/pure/"
  Pattern match: "http://mevius.2ch.net/furin/"
  Pattern match: "http://mevius.2ch.net/gay/"
  Pattern match: "http://mevius.2ch.net/utu/"
  Pattern match: "http://mevius.2ch.net/break/"
  Pattern match: "http://headline.2ch.net/bbymobile/"
  Pattern match: "http://mao.2ch.net/pc2nanmin/"
  Pattern match: "http://mevius.2ch.net/win/"
  Pattern match: "http://mao.2ch.net/jobs/"
  Pattern match: "http://egg.2ch.net/mac/"
  Pattern match: "http://medaka.2ch.net/os/"
  Pattern match: "http://mevius.2ch.net/desktop/"
  Pattern match: "http://medaka.2ch.net/pc/"
  Pattern match: "http://egg.2ch.net/notepc/"
  Pattern match: "http://egg.2ch.net/jisaku/"
  Pattern match: "http://medaka.2ch.net/printer/"
  Pattern match: "http://mevius.2ch.net/hard/"
  Pattern match: "http://mevius.2ch.net/cdr/"
  Pattern match: "http://egg.2ch.net/software/"
  Pattern match: "http://egg.2ch.net/mobile/"
  Pattern match: "http://mevius.2ch.net/bsoft/"
  Pattern match: "http://mevius.2ch.net/unix/"
  Pattern match: "http://mevius.2ch.net/db/"
  Pattern match: "http://mao.2ch.net/linux/"
  Pattern match: "http://medaka.2ch.net/prog/"
  Pattern match: "http://mevius.2ch.net/tech/"
  Pattern match: "http://mevius.2ch.net/cg/"
  Pattern match: "http://egg.2ch.net/dtm/"
  Pattern match: "http://mevius.2ch.net/avi/"
  Pattern match: "http://mevius.2ch.net/swf/"
  Pattern match: "http://mevius.2ch.net/gamedev/"
  Pattern match: "http://matsuri.2ch.net/i4004/"
  Pattern match: "http://mevius.2ch.net/internet/"
  Pattern match: "http://lavender.2ch.net/download/"
  Pattern match: "http://mevius.2ch.net/hp/"
  Pattern match: "http://mevius.2ch.net/affiliate/"
  Pattern match: "http://mevius.2ch.net/hosting/"
  Pattern match: "http://mao.2ch.net/mysv/"
  Pattern match: "http://medaka.2ch.net/php/"
  Pattern match: "http://mevius.2ch.net/hack/"
  Pattern match: "http://medaka.2ch.net/sec/"
  Pattern match: "http://mao.2ch.net/network/"
  Pattern match: "http://fate.2ch.net/cryptocoin/"
  Pattern match: "http://mevius.2ch.net/friend/"
  Pattern match: "http://mao.2ch.net/isp/"
  Pattern match: "http://mao.2ch.net/netspot/"
  Pattern match: "http://medaka.2ch.net/nifty/"
  Pattern match: "http://mevius.2ch.net/google/"
  Pattern match: "http://mao.2ch.net/mmag/"
  Pattern match: "http://rosie.2ch.net/nanmin/"
  Pattern match: "http://mao.2ch.net/ad/"
  Pattern match: "http://mevius.2ch.net/esite/"
  Pattern match: "http://egg.2ch.net/streaming/"
  Pattern match: "http://mao.2ch.net/mstreaming/"
  Pattern match: "http://lavender.2ch.net/mdis/"
  Pattern match: "http://mao.2ch.net/netradio/"
  Pattern match: "http://mevius.2ch.net/blog/"
  Pattern match: "http://egg.2ch.net/sns/"
  Pattern match: "http://lavender.2ch.net/net/"
  Pattern match: "http://rio2016.2ch.net/twwatch/"
  Pattern match: "http://fate.2ch.net/watchbakusai/"
  Pattern match: "http://egg.2ch.net/yahoo/"
  Pattern match: "http://medaka.2ch.net/nntp/"
  Pattern match: "http://fate.2ch.net/starwars/"
  Pattern match: "http://matsuri.2ch.net/bobby/"
  Pattern match: "http://egg.2ch.net/lobby/"
  Pattern match: "http://matsuri.2ch.net/maru/"
  Pattern match: "http://lavender.2ch.net/mog2/"
  Pattern match: "http://matsuri.2ch.net/mukashi/"
  Pattern match: "http://mevius.2ch.net/kitchen/"
  Pattern match: "http://egg.2ch.net/tubo/"
  Pattern match: "http://matsuri.2ch.net/joke/"
  Pattern match: "http://egg.2ch.net/shugi/"
  Pattern match: "http://egg.2ch.net/rights/"
  Pattern match: "http://agree.2ch.net/anarchy/"
  Pattern match: "http://mao.2ch.net/accuse/"
  Pattern match: "http://mao.2ch.net/ranking/"
  Pattern match: "http://egg.2ch.net/record/"
  Pattern match: "http://rosie.2ch.net/siberia/"
  Pattern match: "http://hebi.2ch.net/news4vip/"
  Pattern match: "http://hayabusa9.2ch.net/news4viptasu/"
  Pattern match: "http://leia.2ch.net/poverty/"
  Pattern match: "http://fate.2ch.net/poverlution/"
  Pattern match: "http://agree.2ch.net/news4anarchy/"
  Pattern match: "http://egg.2ch.net/heaven4vip/"
  Pattern match: "http://egg.2ch.net/neet4vip/"
  Pattern match: "http://mao.2ch.net/aniki/"
  Pattern match: "http://egg.2ch.net/frenchfry/"
  Pattern match: "http://agree.2ch.net/anime8/"
  Pattern match: "http://agree.2ch.net/book8/"
  Pattern match: "http://agree.2ch.net/carcom8/"
  Pattern match: "http://agree.2ch.net/comp8/"
  Pattern match: "http://agree.2ch.net/food8/"
  Pattern match: "http://agree.2ch.net/games8/"
  Pattern match: "http://agree.2ch.net/img8/"
  Pattern match: "http://agree.2ch.net/lang8/"
  Pattern match: "http://agree.2ch.net/lounge8/"
  Pattern match: "http://agree.2ch.net/music8/"
  Pattern match: "http://agree.2ch.net/neet4vip8/"
  Pattern match: "http://agree.2ch.net/vip8/"
  Pattern match: "http://agree.2ch.net/newnew8/"
  Pattern match: "http://agree.2ch.net/newpol8/"
  Pattern match: "http://agree.2ch.net/prog8/"
  Pattern match: "http://agree.2ch.net/poverty8/"
  Pattern match: "http://agree.2ch.net/sci8/"
  Pattern match: "http://agree.2ch.net/sjis8/"
  Pattern match: "http://agree.2ch.net/sports8/"
  Pattern match: "http://agree.2ch.net/tech8/"
  Pattern match: "http://agree.2ch.net/tele8/"
  Pattern match: "http://headline.2ch.net/bbyanarchy/"
  Pattern match: "http://egg.2ch.net/sugiuraayano/"
  Pattern match: "http://agree.2ch.net/akari/"
  Pattern match: "http://hayabusa9.2ch.net/hayabusa8tr/"
  Pattern match: "http://egg.2ch.net/matsumotorise/"
  Pattern match: "http://egg.2ch.net/gorakubu/"
  Pattern match: "http://himawari.2ch.net/himawari/"
  Pattern match: "http://agree.2ch.net/mango/"
  Pattern match: "http://info.2ch.net/?curid=2078"
  Pattern match: "http://www.bbspink.com/"
  Pattern match: "http://ronin.bbspink.com/"
  Pattern match: "http://nyan.bbspink.com/"
  Pattern match: "http://update.bbspink.com/"
  Pattern match: "http://headline.2ch.net/bbypinkH0/"
  Pattern match: "http://headline.2ch.net/bbypinkH1/"
  Pattern match: "http://headline.2ch.net/bbypinkH2/"
  Pattern match: "http://headline.2ch.net/bbypinkH3/"
  Pattern match: "http://headline.2ch.net/bbypinkH4/"
  Pattern match: "http://headline.2ch.net/bbypinkH5/"
  Pattern match: "http://mercury.bbspink.com/hnews/"
  Pattern match: "http://mercury.bbspink.com/pinkj/"
  Pattern match: "http://mercury.bbspink.com/news4pink/"
  Pattern match: "http://mercury.bbspink.com/pinkqa/"
  Pattern match: "http://mercury.bbspink.com/sureh/"
  Pattern match: "http://mercury.bbspink.com/erolive/"
  Pattern match: "http://mercury.bbspink.com/xvideos/"
  Pattern match: "http://mercury.bbspink.com/dmm/"
  Pattern match: "http://phoebe.bbspink.com/hneta/"
  Pattern match: "http://mercury.bbspink.com/pinkcafe/"
  Pattern match: "http://mercury.bbspink.com/eromog2/"
  Pattern match: "http://mercury.bbspink.com/ogefin/"
  Pattern match: "http://mercury.bbspink.com/bishojo/"
  Pattern match: "http://mercury.bbspink.com/dere/"
  Pattern match: "http://phoebe.bbspink.com/801saloon/"
  Pattern match: "http://phoebe.bbspink.com/pinknanmin/"
  Pattern match: "http://mercury.bbspink.com/erobbs/"
  Pattern match: "http://mercury.bbspink.com/housekeeping/"
  Pattern match: "http://mercury.bbspink.com/ccc/"
  Pattern match: "http://mercury.bbspink.com/yama/"
  Pattern match: "http://mercury.bbspink.com/21oversea2/"
  Pattern match: "http://phoebe.bbspink.com/hgame/"
  Pattern match: "http://phoebe.bbspink.com/hgame2/"
  Pattern match: "http://mercury.bbspink.com/erog/"
  Pattern match: "http://mercury.bbspink.com/leaf/"
  Pattern match: "http://phoebe.bbspink.com/gagame/"
  Pattern match: "http://mercury.bbspink.com/adultsite/"
  Pattern match: "http://mercury.bbspink.com/webmaster/"
  Pattern match: "http://mercury.bbspink.com/avideo/"
  Pattern match: "http://mercury.bbspink.com/avideo2/"
  Pattern match: "http://mercury.bbspink.com/debut/"
  Pattern match: "http://mercury.bbspink.com/nude/"
  Pattern match: "http://mercury.bbspink.com/eroanime/"
  Pattern match: "http://mercury.bbspink.com/erocomic/"
  Pattern match: "http://mercury.bbspink.com/erodoujin/"
  Pattern match: "http://mercury.bbspink.com/natuero/"
  Pattern match: "http://mercury.bbspink.com/kgirls/"
  Pattern match: "http://mercury.bbspink.com/erocosp/"
  Pattern match: "http://mercury.bbspink.com/butler/"
  Pattern match: "http://mercury.bbspink.com/maid/"
  Pattern match: "http://mercury.bbspink.com/eroacademy/"
  Pattern match: "http://mercury.bbspink.com/mcheck/"
  Pattern match: "http://mercury.bbspink.com/couple/"
  Pattern match: "http://mercury.bbspink.com/kageki/"
  Pattern match: "http://mercury.bbspink.com/kageki2/"
  Pattern match: "http://mercury.bbspink.com/onatech/"
  Pattern match: "http://mercury.bbspink.com/loveho/"
  Pattern match: "http://mercury.bbspink.com/adultgoods/"
  Pattern match: "http://mercury.bbspink.com/adultaccessory/"
  Pattern match: "http://mercury.bbspink.com/lovedoll/"
  Pattern match: "http://mercury.bbspink.com/sm/"
  Pattern match: "http://mercury.bbspink.com/feti/"
  Pattern match: "http://mercury.bbspink.com/feet/"
  Pattern match: "http://mercury.bbspink.com/armpits/"
  Pattern match: "http://mercury.bbspink.com/uniform/"
  Pattern match: "http://mercury.bbspink.com/eyes/"
  Pattern match: "http://mercury.bbspink.com/glasses/"
  Pattern match: "http://mercury.bbspink.com/swimsuit/"
  Pattern match: "http://mercury.bbspink.com/hitozuma/"
  Pattern match: "http://mercury.bbspink.com/mature/"
  Pattern match: "http://mercury.bbspink.com/cougar/"
  Pattern match: "http://mercury.bbspink.com/pregnant/"
  Pattern match: "http://mercury.bbspink.com/senpai/"
  Pattern match: "http://mercury.bbspink.com/sensei/"
  Pattern match: "http://mercury.bbspink.com/mom/"
  Pattern match: "http://mercury.bbspink.com/okama/"
  Pattern match: "http://mercury.bbspink.com/gaypink/"
  Pattern match: "http://mercury.bbspink.com/lesbian/"
  Pattern match: "http://mercury.bbspink.com/brocon/"
  Pattern match: "http://mercury.bbspink.com/siscon/"
  Pattern match: "http://mercury.bbspink.com/eroaa/"
  Pattern match: "http://mercury.bbspink.com/erochara/"
  Pattern match: "http://mercury.bbspink.com/erochara2/"
  Pattern match: "http://mercury.bbspink.com/801/"
  Pattern match: "http://mercury.bbspink.com/futanari/"
  Pattern match: "http://mercury.bbspink.com/erocg/"
  Pattern match: "http://mercury.bbspink.com/eroparo/"
  Pattern match: "http://mercury.bbspink.com/makeup/"
  Pattern match: "http://mercury.bbspink.com/plastic/"
  Pattern match: "http://phoebe.bbspink.com/ascii/"
  Pattern match: "http://mercury.bbspink.com/ascii2d/"
  Pattern match: "http://phoebe.bbspink.com/ascii2kana/"
  Pattern match: "http://mercury.bbspink.com/girls/"
  Pattern match: "http://mercury.bbspink.com/sportgirls/"
  Pattern match: "http://phoebe.bbspink.com/club/"
  Pattern match: "http://phoebe.bbspink.com/pub/"
  Pattern match: "http://mercury.bbspink.com/host/"
  Pattern match: "http://phoebe.bbspink.com/nuki/"
  Pattern match: "http://phoebe.bbspink.com/soap/"
  Pattern match: "http://mercury.bbspink.com/neet4pink/"
  Pattern match: "http://phoebe.bbspink.com/cherryboy/"
  Pattern match: "http://phoebe.bbspink.com/megami/"
  Pattern match: "http://mercury.bbspink.com/livemegami/"
  Pattern match: "http://phoebe.bbspink.com/meow/"
  Pattern match: "http://phoebe.bbspink.com/mobpink/"
  Pattern match: "http://phoebe.bbspink.com/3shuchaku/"
  Pattern match: "http://mercury.bbspink.com/scat/"
  Pattern match: "http://mercury.bbspink.com/bukkake/"
  Pattern match: "http://mercury.bbspink.com/tentacle/"
  Pattern match: "http://phoebe.bbspink.com/bbbb/"
  
  source
  
  File/Memory
  
  relevance
  
  10/10
Spyware/Information Retrieval
- Found a reference to a known community page
 
 details
 
 "<A HREF=http://egg.2ch.net/streaming/>YouTube</A> " (Indicator: "youtube")
 "egg.2ch.netstreamingYouTube" (Indicator: "youtube")
 
 source
 
 File/Memory
 
 relevance
 
 7/10
Unusual Characteristics
- Found Delphi 4 - Delphi 2006 artifact
  
  details
  
  "b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin" has a PE timestamp using the buggy magic timestamp 0x2A425E19.
  
  source
  
  Static Parser
  
  relevance
  
  10/10
- Matched Compiler/Packer signature
  
  details
  
  "b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin" was detected as "BobSoft Mini Delphi -> BoB / BobSoft"
  
  source
  
  Static Parser
  
  relevance
  
  10/10

File Details

All Details:

Jane2ch - コピー.exe

Filename: Jane2ch - コピー.exe
Size: 3.6MiB (3726504 bytes)
Type: peexe executable
Description: PE32 executable (GUI) Intel 80386, for MS Windows
Architecture
: WINDOWS
SHA256
: b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7
MD5
: cf7e9c0cda1572c41919799813447cf3
SHA1
: 2f4b7734cb2310d3eea1b456cd11eb5e061db506
ssdeep
: 49152:+97DpEG+Gk5GPXnkt60K3++Kw7BRm3o+XQYOWKGZq:+5XMl49BRm3o+ABHGk
imphash
: 0175cec28d966141dfa50d5dfbba13e0
authentihash
: 154aaec215cc8d433e4f4be0d0609f06a9c0949d8ebb31c987b502d0abfcb9b6
Compiler/Packer
: BobSoft Mini Delphi -> BoB / BobSoft
PDB Pathway

Resources

Language
: NEUTRAL,GERMAN
Icon

Visualization

Input File (PortEx)

Version Info

LegalCopyright: Jane, Inc.
InternalName: Jane2ch.exe
FileVersion: 3.8.3.0
CompanyName: Jane, Inc.
LegalTrademarks: -
Comments: -
ProductName: Jane Style
ProductVersion: 3.83
FileDescription: 2ch
OriginalFilename: Jane2ch.exe
Translation: 0x0411 0x03a4

Classification (TrID)

39.1% (.EXE) InstallShield setup
37.8% (.EXE) Win32 EXE PECompact compressed (generic)
13.3% (.EXE) Win32 Executable Delphi generic
4.1% (.EXE) Win32 Executable (generic)
1.8% (.EXE) Win16/32 Executable Delphi generic

File Sections

Details	Name	Entropy	Virtual Address	Virtual Size	Raw Size	MD5	Characteristics
Name CODE Entropy 6.55963661113 Virtual Address 0x1000 Virtual Size 0x28c8b4 Raw Size 0x28ca00 MD5 43fc3073dabbcd585aa641ba08f1eba5	CODE	6.55963661113	0x1000	0x28c8b4	0x28ca00	43fc3073dabbcd585aa641ba08f1eba5	-
Name DATA Entropy 4.56986855976 Virtual Address 0x28e000 Virtual Size 0x9640 Raw Size 0x9800 MD5 762675c1876ac9e2056dca3a76158c6f	DATA	4.56986855976	0x28e000	0x9640	0x9800	762675c1876ac9e2056dca3a76158c6f	-
Name BSS Entropy 0 Virtual Address 0x298000 Virtual Size 0x4a21 Raw Size 0x0 MD5 d41d8cd98f00b204e9800998ecf8427e	BSS	0	0x298000	0x4a21	0x0	d41d8cd98f00b204e9800998ecf8427e	-
Name .idata Entropy 5.02563739047 Virtual Address 0x29d000 Virtual Size 0x3a4c Raw Size 0x3c00 MD5 4e05ea7b1a2612ade9c26868485855ed	.idata	5.02563739047	0x29d000	0x3a4c	0x3c00	4e05ea7b1a2612ade9c26868485855ed	-
Name .tls Entropy 0 Virtual Address 0x2a1000 Virtual Size 0x24 Raw Size 0x0 MD5 d41d8cd98f00b204e9800998ecf8427e	.tls	0	0x2a1000	0x24	0x0	d41d8cd98f00b204e9800998ecf8427e	-
Name .rdata Entropy 0.205445628135 Virtual Address 0x2a2000 Virtual Size 0x18 Raw Size 0x200 MD5 3156a2814d16ad3747872947a79798f9	.rdata	0.205445628135	0x2a2000	0x18	0x200	3156a2814d16ad3747872947a79798f9	-
Name .reloc Entropy 6.70731043973 Virtual Address 0x2a3000 Virtual Size 0x26dc0 Raw Size 0x26e00 MD5 61845d4f69b22e0168133c4f2b1e8f6f	.reloc	6.70731043973	0x2a3000	0x26dc0	0x26e00	61845d4f69b22e0168133c4f2b1e8f6f	-
Name .rsrc Entropy 5.76481881275 Virtual Address 0x2ca000 Virtual Size 0xcb000 Raw Size 0xcb000 MD5 7678a811acbbe14a65222770e4bf76c0	.rsrc	5.76481881275	0x2ca000	0xcb000	0xcb000	7678a811acbbe14a65222770e4bf76c0	-

File Resources

Details	Name	RVA	Size	Type	Language
Name RT_CURSOR RVA 0x2cc2c8 Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc2c8	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cc3fc Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc3fc	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cc530 Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc530	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cc664 Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc664	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cc798 Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc798	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cc8cc Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cc8cc	0x134	data	Neutral
Name RT_CURSOR RVA 0x2cca00 Size 0x134 Type data Language Neutral	RT_CURSOR	0x2cca00	0x134	data	Neutral
Name RT_CURSOR RVA 0x2ccb34 Size 0x2ec Type data Language German	RT_CURSOR	0x2ccb34	0x2ec	data	German
Name RT_CURSOR RVA 0x2cce20 Size 0x2ec Type data Language German	RT_CURSOR	0x2cce20	0x2ec	data	German
Name RT_CURSOR RVA 0x2cd10c Size 0x2ec Type data Language German	RT_CURSOR	0x2cd10c	0x2ec	data	German
Name RT_CURSOR RVA 0x2cd3f8 Size 0x2ec Type data Language German	RT_CURSOR	0x2cd3f8	0x2ec	data	German
Name RT_CURSOR RVA 0x2cd6e4 Size 0x134 Type AmigaOS bitmap font Language German	RT_CURSOR	0x2cd6e4	0x134	AmigaOS bitmap font	German
Name RT_CURSOR RVA 0x2cd818 Size 0x134 Type data Language German	RT_CURSOR	0x2cd818	0x134	data	German
Name RT_CURSOR RVA 0x2cd94c Size 0x2ec Type data Language German	RT_CURSOR	0x2cd94c	0x2ec	data	German
Name RT_CURSOR RVA 0x2cdc38 Size 0x2ec Type data Language German	RT_CURSOR	0x2cdc38	0x2ec	data	German
Name RT_CURSOR RVA 0x2cdf24 Size 0x2ec Type data Language German	RT_CURSOR	0x2cdf24	0x2ec	data	German
Name RT_CURSOR RVA 0x2ce210 Size 0x2ec Type data Language German	RT_CURSOR	0x2ce210	0x2ec	data	German
Name RT_CURSOR RVA 0x2ce4fc Size 0x2ec Type data Language German	RT_CURSOR	0x2ce4fc	0x2ec	data	German
Name RT_CURSOR RVA 0x2ce7e8 Size 0x2ec Type data Language German	RT_CURSOR	0x2ce7e8	0x2ec	data	German
Name RT_BITMAP RVA 0x2cead4 Size 0x958 Type data Language Neutral	RT_BITMAP	0x2cead4	0x958	data	Neutral
Name RT_BITMAP RVA 0x2cf42c Size 0x958 Type data Language Neutral	RT_BITMAP	0x2cf42c	0x958	data	Neutral
Name RT_BITMAP RVA 0x2cfd84 Size 0x7f4 Type data Language Japanese	RT_BITMAP	0x2cfd84	0x7f4	data	Japanese
Name RT_BITMAP RVA 0x2d0578 Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d0578	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d0748 Size 0x1e4 Type data Language Neutral	RT_BITMAP	0x2d0748	0x1e4	data	Neutral
Name RT_BITMAP RVA 0x2d092c Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d092c	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d0afc Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d0afc	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d0ccc Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d0ccc	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d0e9c Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d0e9c	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d106c Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d106c	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d123c Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d123c	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d140c Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d140c	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d15dc Size 0x1d0 Type data Language Neutral	RT_BITMAP	0x2d15dc	0x1d0	data	Neutral
Name RT_BITMAP RVA 0x2d17ac Size 0xc0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d17ac	0xc0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d186c Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d186c	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d194c Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d194c	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1a2c Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1a2c	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1b0c Size 0xc0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1b0c	0xc0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1bcc Size 0xc0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1bcc	0xc0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1c8c Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1c8c	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1d6c Size 0xc0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1d6c	0xc0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1e2c Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1e2c	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1f0c Size 0xe8 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1f0c	0xe8	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d1ff4 Size 0xc0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x2d1ff4	0xc0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x2d20b4 Size 0x46528 Type data Language Neutral	RT_BITMAP	0x2d20b4	0x46528	data	Neutral
Name RT_BITMAP RVA 0x3185dc Size 0xd0 Type data Language Neutral	RT_BITMAP	0x3185dc	0xd0	data	Neutral
Name RT_BITMAP RVA 0x3186ac Size 0xd0 Type data Language Neutral	RT_BITMAP	0x3186ac	0xd0	data	Neutral
Name RT_BITMAP RVA 0x31877c Size 0xd0 Type data Language Neutral	RT_BITMAP	0x31877c	0xd0	data	Neutral
Name RT_BITMAP RVA 0x31884c Size 0xd0 Type data Language Neutral	RT_BITMAP	0x31884c	0xd0	data	Neutral
Name RT_BITMAP RVA 0x31891c Size 0xd0 Type data Language Neutral	RT_BITMAP	0x31891c	0xd0	data	Neutral
Name RT_BITMAP RVA 0x3189ec Size 0xd0 Type data Language Neutral	RT_BITMAP	0x3189ec	0xd0	data	Neutral
Name RT_BITMAP RVA 0x318abc Size 0xe0 Type GLS_BINARY_LSB_FIRST Language Neutral	RT_BITMAP	0x318abc	0xe0	GLS_BINARY_LSB_FIRST	Neutral
Name RT_BITMAP RVA 0x318b9c Size 0xce8 Type data Language Neutral	RT_BITMAP	0x318b9c	0xce8	data	Neutral
Name RT_BITMAP RVA 0x319884 Size 0xce8 Type data Language Neutral	RT_BITMAP	0x319884	0xce8	data	Neutral
Name RT_BITMAP RVA 0x31a56c Size 0xce8 Type data Language Neutral	RT_BITMAP	0x31a56c	0xce8	data	Neutral
Name RT_BITMAP RVA 0x31b254 Size 0x268 Type dBase IV DBT, block length 512, next free block index 40, next free block 572654216, next used block 572662306 Language Neutral	RT_BITMAP	0x31b254	0x268	dBase IV DBT, block length 512, next free block index 40, next free block 572654216, next used block 572662306	Neutral
Name RT_BITMAP RVA 0x31b4bc Size 0x268 Type dBase IV DBT, block length 512, next free block index 40, next free block 572662306, next used block 572662306 Language Neutral	RT_BITMAP	0x31b4bc	0x268	dBase IV DBT, block length 512, next free block index 40, next free block 572662306, next used block 572662306	Neutral
Name RT_BITMAP RVA 0x31b724 Size 0x268 Type dBase IV DBT, block length 512, next free block index 40, next free block 572654216, next used block 572662306 Language Neutral	RT_BITMAP	0x31b724	0x268	dBase IV DBT, block length 512, next free block index 40, next free block 572654216, next used block 572662306	Neutral
Name RT_BITMAP RVA 0x31b98c Size 0xce8 Type data Language Neutral	RT_BITMAP	0x31b98c	0xce8	data	Neutral
Name RT_BITMAP RVA 0x31c674 Size 0xce8 Type data Language Neutral	RT_BITMAP	0x31c674	0xce8	data	Neutral
Name RT_BITMAP RVA 0x31d35c Size 0xd28 Type data Language Neutral	RT_BITMAP	0x31d35c	0xd28	data	Neutral
Name RT_BITMAP RVA 0x31e084 Size 0x4b2a Type data Language Neutral	RT_BITMAP	0x31e084	0x4b2a	data	Neutral
Name RT_BITMAP RVA 0x322bb0 Size 0x126 Type data Language Neutral	RT_BITMAP	0x322bb0	0x126	data	Neutral
Name RT_BITMAP RVA 0x322cd8 Size 0x126 Type data Language Neutral	RT_BITMAP	0x322cd8	0x126	data	Neutral
Name RT_ICON RVA 0x322e00 Size 0x468 Type GLS_BINARY_LSB_FIRST Language Japanese	RT_ICON	0x322e00	0x468	GLS_BINARY_LSB_FIRST	Japanese
Name RT_ICON RVA 0x323268 Size 0x10a8 Type dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0 Language Japanese	RT_ICON	0x323268	0x10a8	dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0	Japanese
Name RT_ICON RVA 0x324310 Size 0x25a8 Type dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0 Language Japanese	RT_ICON	0x324310	0x25a8	dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0	Japanese
Name RT_ICON RVA 0x3268b8 Size 0x94a8 Type dBase IV DBT of \300.DBF, block length 36864, next free block index 40, next free block 0, next used block 0 Language Japanese	RT_ICON	0x3268b8	0x94a8	dBase IV DBT of \300.DBF, block length 36864, next free block index 40, next free block 0, next used block 0	Japanese
Name RT_DIALOG RVA 0x32fd60 Size 0x52 Type data Language Neutral	RT_DIALOG	0x32fd60	0x52	data	Neutral
Name RT_STRING RVA 0x32fdb4 Size 0x100 Type data Language Neutral	RT_STRING	0x32fdb4	0x100	data	Neutral
Name RT_STRING RVA 0x32feb4 Size 0x3ac Type data Language Neutral	RT_STRING	0x32feb4	0x3ac	data	Neutral
Name RT_STRING RVA 0x330260 Size 0x438 Type data Language Neutral	RT_STRING	0x330260	0x438	data	Neutral
Name RT_STRING RVA 0x330698 Size 0xc3c Type data Language Neutral	RT_STRING	0x330698	0xc3c	data	Neutral
Name RT_STRING RVA 0x3312d4 Size 0x4b0 Type data Language Neutral	RT_STRING	0x3312d4	0x4b0	data	Neutral
Name RT_STRING RVA 0x331784 Size 0x358 Type data Language Neutral	RT_STRING	0x331784	0x358	data	Neutral
Name RT_STRING RVA 0x331adc Size 0x404 Type data Language Neutral	RT_STRING	0x331adc	0x404	data	Neutral
Name RT_STRING RVA 0x331ee0 Size 0x3f8 Type data Language Neutral	RT_STRING	0x331ee0	0x3f8	data	Neutral
Name RT_STRING RVA 0x3322d8 Size 0x310 Type data Language Neutral	RT_STRING	0x3322d8	0x310	data	Neutral
Name RT_STRING RVA 0x3325e8 Size 0x324 Type data Language Neutral	RT_STRING	0x3325e8	0x324	data	Neutral
Name RT_STRING RVA 0x33290c Size 0x45c Type data Language Neutral	RT_STRING	0x33290c	0x45c	data	Neutral
Name RT_STRING RVA 0x332d68 Size 0x4cc Type data Language Neutral	RT_STRING	0x332d68	0x4cc	data	Neutral
Name RT_STRING RVA 0x333234 Size 0x3d0 Type data Language Neutral	RT_STRING	0x333234	0x3d0	data	Neutral
Name RT_STRING RVA 0x333604 Size 0x180 Type data Language Neutral	RT_STRING	0x333604	0x180	data	Neutral
Name RT_STRING RVA 0x333784 Size 0x138 Type Hitachi SH big-endian COFF object, not stripped Language Neutral	RT_STRING	0x333784	0x138	Hitachi SH big-endian COFF object, not stripped	Neutral
Name RT_STRING RVA 0x3338bc Size 0x78 Type data Language Neutral	RT_STRING	0x3338bc	0x78	data	Neutral
Name RT_STRING RVA 0x333934 Size 0x274 Type data Language Neutral	RT_STRING	0x333934	0x274	data	Neutral
Name RT_STRING RVA 0x333ba8 Size 0x278 Type data Language Neutral	RT_STRING	0x333ba8	0x278	data	Neutral
Name RT_STRING RVA 0x333e20 Size 0x100 Type data Language Neutral	RT_STRING	0x333e20	0x100	data	Neutral
Name RT_STRING RVA 0x333f20 Size 0xf8 Type data Language Neutral	RT_STRING	0x333f20	0xf8	data	Neutral
Name RT_STRING RVA 0x334018 Size 0x12c Type data Language Neutral	RT_STRING	0x334018	0x12c	data	Neutral
Name RT_STRING RVA 0x334144 Size 0x204 Type data Language Neutral	RT_STRING	0x334144	0x204	data	Neutral
Name RT_STRING RVA 0x334348 Size 0x344 Type data Language Neutral	RT_STRING	0x334348	0x344	data	Neutral
Name RT_STRING RVA 0x33468c Size 0x2d0 Type data Language Neutral	RT_STRING	0x33468c	0x2d0	data	Neutral
Name RT_STRING RVA 0x33495c Size 0x230 Type data Language Neutral	RT_STRING	0x33495c	0x230	data	Neutral
Name RT_STRING RVA 0x334b8c Size 0x284 Type data Language Neutral	RT_STRING	0x334b8c	0x284	data	Neutral
Name RT_STRING RVA 0x334e10 Size 0x260 Type data Language Neutral	RT_STRING	0x334e10	0x260	data	Neutral
Name RT_STRING RVA 0x335070 Size 0xe0 Type data Language Neutral	RT_STRING	0x335070	0xe0	data	Neutral
Name RT_STRING RVA 0x335150 Size 0xbc Type data Language Neutral	RT_STRING	0x335150	0xbc	data	Neutral
Name RT_STRING RVA 0x33520c Size 0x260 Type data Language Neutral	RT_STRING	0x33520c	0x260	data	Neutral
Name RT_STRING RVA 0x33546c Size 0x288 Type data Language Neutral	RT_STRING	0x33546c	0x288	data	Neutral
Name RT_STRING RVA 0x3356f4 Size 0x1c0 Type data Language Neutral	RT_STRING	0x3356f4	0x1c0	data	Neutral
Name RT_STRING RVA 0x3358b4 Size 0x230 Type AmigaOS bitmap font Language Neutral	RT_STRING	0x3358b4	0x230	AmigaOS bitmap font	Neutral
Name RT_RCDATA RVA 0x335ae4 Size 0x10 Type data Language Neutral	RT_RCDATA	0x335ae4	0x10	data	Neutral
Name RT_RCDATA RVA 0x335af4 Size 0xfcc Type data Language Neutral	RT_RCDATA	0x335af4	0xfcc	data	Neutral
Name RT_RCDATA RVA 0x336ac0 Size 0x6d6 Type Delphi compiled form 'TAddAAForm' Language Neutral	RT_RCDATA	0x336ac0	0x6d6	Delphi compiled form 'TAddAAForm'	Neutral
Name RT_RCDATA RVA 0x337198 Size 0xefc Type Delphi compiled form 'TAdvAboneRegist' Language Neutral	RT_RCDATA	0x337198	0xefc	Delphi compiled form 'TAdvAboneRegist'	Neutral
Name RT_RCDATA RVA 0x338094 Size 0x439 Type Delphi compiled form 'TBugReport' Language Neutral	RT_RCDATA	0x338094	0x439	Delphi compiled form 'TBugReport'	Neutral
Name RT_RCDATA RVA 0x3384d0 Size 0x326 Type Delphi compiled form 'TChottoForm' Language Neutral	RT_RCDATA	0x3384d0	0x326	Delphi compiled form 'TChottoForm'	Neutral
Name RT_RCDATA RVA 0x3387f8 Size 0x1988 Type Delphi compiled form '\010TGrepDlg\007GrepDlg\004Left\003\267\002\003Top\003\240' Language Neutral	RT_RCDATA	0x3387f8	0x1988	Delphi compiled form '\010TGrepDlg\007GrepDlg\004Left\003\267\002\003Top\003\240'	Neutral
Name RT_RCDATA RVA 0x33a180 Size 0x3f3 Type Delphi compiled form 'TGrepTargetDlg' Language Neutral	RT_RCDATA	0x33a180	0x3f3	Delphi compiled form 'TGrepTargetDlg'	Neutral
Name RT_RCDATA RVA 0x33a574 Size 0x555f Type Delphi compiled form 'TImageForm' Language Neutral	RT_RCDATA	0x33a574	0x555f	Delphi compiled form 'TImageForm'	Neutral
Name RT_RCDATA RVA 0x33fad4 Size 0xe7c Type Delphi compiled form 'TImageViewCacheListForm' Language Neutral	RT_RCDATA	0x33fad4	0xe7c	Delphi compiled form 'TImageViewCacheListForm'	Neutral
Name RT_RCDATA RVA 0x340950 Size 0x33b0 Type Delphi compiled form 'TImageViewPreference' Language Neutral	RT_RCDATA	0x340950	0x33b0	Delphi compiled form 'TImageViewPreference'	Neutral
Name RT_RCDATA RVA 0x343d00 Size 0x2c8 Type Delphi compiled form 'TInputDlg' Language Neutral	RT_RCDATA	0x343d00	0x2c8	Delphi compiled form 'TInputDlg'	Neutral
Name RT_RCDATA RVA 0x343fc8 Size 0x38a6d Type Delphi compiled form 'TMainWnd' Language Neutral	RT_RCDATA	0x343fc8	0x38a6d	Delphi compiled form 'TMainWnd'	Neutral
Name RT_RCDATA RVA 0x37ca38 Size 0x392 Type Delphi compiled form 'TMemoResButtonResizeDlg' Language Neutral	RT_RCDATA	0x37ca38	0x392	Delphi compiled form 'TMemoResButtonResizeDlg'	Neutral
Name RT_RCDATA RVA 0x37cdcc Size 0x640 Type Delphi compiled form 'TQuickAboneRegist' Language Neutral	RT_RCDATA	0x37cdcc	0x640	Delphi compiled form 'TQuickAboneRegist'	Neutral
Name RT_RCDATA RVA 0x37d40c Size 0x668 Type Delphi compiled form 'TRegBoardDlg' Language Neutral	RT_RCDATA	0x37d40c	0x668	Delphi compiled form 'TRegBoardDlg'	Neutral
Name RT_RCDATA RVA 0x37da74 Size 0x42c Type Delphi compiled form 'TSavePointDialog' Language Neutral	RT_RCDATA	0x37da74	0x42c	Delphi compiled form 'TSavePointDialog'	Neutral
Name RT_RCDATA RVA 0x37dea0 Size 0x172 Type Delphi compiled form 'TTransparentForm' Language Neutral	RT_RCDATA	0x37dea0	0x172	Delphi compiled form 'TTransparentForm'	Neutral
Name RT_RCDATA RVA 0x37e014 Size 0x11dc0 Type Delphi compiled form 'TUIConfig' Language Neutral	RT_RCDATA	0x37e014	0x11dc0	Delphi compiled form 'TUIConfig'	Neutral
Name RT_RCDATA RVA 0x38fdd4 Size 0x1a40 Type Delphi compiled form 'TUpdateDlg' Language Neutral	RT_RCDATA	0x38fdd4	0x1a40	Delphi compiled form 'TUpdateDlg'	Neutral
Name RT_RCDATA RVA 0x391814 Size 0x1b50 Type Delphi compiled form 'TVersionInfo' Language Neutral	RT_RCDATA	0x391814	0x1b50	Delphi compiled form 'TVersionInfo'	Neutral
Name RT_RCDATA RVA 0x393364 Size 0x17bd Type Delphi compiled form 'TWriteForm' Language Neutral	RT_RCDATA	0x393364	0x17bd	Delphi compiled form 'TWriteForm'	Neutral
Name RT_GROUP_CURSOR RVA 0x394b24 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b24	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b38 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b38	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b4c Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b4c	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b60 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b60	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b74 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b74	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b88 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b88	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394b9c Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394b9c	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394bb0 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394bb0	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394bc4 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394bc4	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394bd8 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394bd8	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394bec Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394bec	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394c00 Size 0x14 Type MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0 Language Neutral	RT_GROUP_CURSOR	0x394c00	0x14	MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0	Neutral
Name RT_GROUP_CURSOR RVA 0x394c14 Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c14	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c28 Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c28	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c3c Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c3c	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c50 Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c50	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c64 Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c64	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c78 Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c78	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_CURSOR RVA 0x394c8c Size 0x14 Type MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1 Language Neutral	RT_GROUP_CURSOR	0x394c8c	0x14	MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1	Neutral
Name RT_GROUP_ICON RVA 0x394ca0 Size 0x3e Type MS Windows icon resource - 4 icons, 16x16 Language Japanese	RT_GROUP_ICON	0x394ca0	0x3e	MS Windows icon resource - 4 icons, 16x16	Japanese
Name RT_VERSION RVA 0x394ce0 Size 0x2e0 Type data Language Japanese	RT_VERSION	0x394ce0	0x2e0	data	Japanese

File Imports

CryptAcquireContextA

CryptCreateHash

CryptDecrypt

CryptDeriveKey

CryptDestroyHash

CryptDestroyKey

CryptEncrypt

CryptExportKey

CryptGenKey

CryptGetHashParam

CryptGetUserKey

CryptHashData

CryptImportKey

CryptReleaseContext

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegEnumKeyExA

RegEnumValueA

RegFlushKey

RegOpenKeyExA

RegQueryInfoKeyA

RegQueryValueExA

RegSetValueExA

_TrackMouseEvent

ImageList_Add

ImageList_BeginDrag

ImageList_Create

ImageList_Destroy

ImageList_DragEnter

ImageList_DragLeave

ImageList_DragMove

ImageList_DragShowNolock

ImageList_Draw

ImageList_DrawEx

ImageList_EndDrag

ImageList_GetBkColor

ImageList_GetDragImage

ImageList_GetIconSize

ImageList_GetImageCount

ImageList_Read

ImageList_Remove

ImageList_Replace

ImageList_ReplaceIcon

ImageList_SetBkColor

ImageList_SetDragCursorImage

ImageList_SetIconSize

ImageList_Write

InitCommonControls

ChooseColorA

ChooseFontA

GetOpenFileNameA

GetSaveFileNameA

GetRandomRgn

BitBlt

CloseEnhMetaFile

CombineRgn

CopyEnhMetaFileA

CreateBitmap

CreateBrushIndirect

CreateCompatibleBitmap

CreateCompatibleDC

CreateDCA

CreateDIBitmap

CreateDIBSection

CreateEnhMetaFileA

CreateFontIndirectA

CreateHalftonePalette

CreateICA

CreatePalette

CreatePatternBrush

CreatePen

CreatePenIndirect

CreateRectRgn

CreateRectRgnIndirect

CreateSolidBrush

DeleteDC

DeleteEnhMetaFile

DeleteObject

Ellipse

EndDoc

EndPage

ExcludeClipRect

ExtCreatePen

ExtCreateRegion

ExtTextOutA

ExtTextOutW

GdiFlush

GetBitmapBits

GetBkColor

GetBrushOrgEx

GetClipBox

GetClipRgn

GetCurrentObject

GetCurrentPositionEx

GetDCOrgEx

GetDeviceCaps

GetDIBColorTable

GetDIBits

GetEnhMetaFileBits

GetEnhMetaFileDescriptionA

GetEnhMetaFileHeader

GetEnhMetaFilePaletteEntries

GetMapMode

GetNearestPaletteIndex

GetObjectA

GetObjectType

GetPaletteEntries

GetPixel

GetRgnBox

GetStockObject

GetSystemPaletteEntries

GetTextAlign

GetTextColor

GetTextExtentPoint32A

GetTextExtentPoint32W

GetTextExtentPointA

GetTextMetricsA

GetWindowOrgEx

GetWinMetaFileBits

IntersectClipRect

LineTo

LPtoDP

MaskBlt

MoveToEx

OffsetRgn

PatBlt

PlayEnhMetaFile

Polygon

Polyline

PolyPolyline

RealizePalette

Rectangle

RectVisible

RestoreDC

RoundRect

SaveDC

SelectClipRgn

SelectObject

SelectPalette

SetBkColor

SetBkMode

SetBrushOrgEx

SetDIBColorTable

SetEnhMetaFileBits

SetMapMode

SetPixel

SetROP2

SetStretchBltMode

SetTextAlign

SetTextColor

SetViewportExtEx

SetViewportOrgEx

SetWindowExtEx

SetWindowOrgEx

SetWinMetaFileBits

StretchBlt

StretchDIBits

TextOutA

TextOutW

UnrealizeObject

ImmGetContext

ImmGetOpenStatus

ImmReleaseContext

ImmSetCompositionStringA

CloseHandle

CompareStringA

CompareStringW

CopyFileA

CreateDirectoryA

CreateEventA

CreateFileA

CreateFileMappingA

CreateFileW

CreateMutexA

CreateProcessA

CreateThread

DeleteCriticalSection

DeleteFileA

EnterCriticalSection

EnumCalendarInfoA

ExitProcess

ExitThread

FileTimeToDosDateTime

FileTimeToLocalFileTime

FindClose

FindFirstFileA

FindNextFileA

FindResourceA

FlushInstructionCache

FormatMessageA

FormatMessageW

FreeLibrary

FreeResource

GetACP

GetCommandLineA

GetComputerNameA

GetCPInfo

GetCurrentDirectoryA

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDateFormatA

GetDiskFreeSpaceA

GetExitCodeThread

GetFileAttributesA

GetFileSize

GetFileTime

GetFullPathNameA

GetFullPathNameW

GetLastError

GetLocaleInfoA

GetLocalTime

GetModuleFileNameA

GetModuleHandleA

GetProcAddress

GetProfileStringA

GetStartupInfoA

GetStdHandle

GetStringTypeExA

GetSystemDirectoryA

GetSystemInfo

GetSystemTime

GetTempPathA

GetThreadLocale

GetTickCount

GetTimeZoneInformation

GetUserDefaultLangID

GetUserDefaultLCID

GetVersion

GetVersionExA

GetWindowsDirectoryA

GlobalAddAtomA

GlobalAlloc

GlobalDeleteAtom

GlobalFindAtomA

GlobalFree

GlobalHandle

GlobalLock

GlobalMemoryStatus

GlobalReAlloc

GlobalSize

GlobalUnlock

InitializeCriticalSection

InterlockedDecrement

InterlockedExchange

InterlockedIncrement

LCMapStringA

LeaveCriticalSection

LoadLibraryA

LoadLibraryExA

LoadResource

LocalAlloc

LocalFree

LocalLock

LocalUnlock

LockResource

lstrcmpA

lstrcpyA

lstrcpynA

lstrlenA

lstrlenW

MapViewOfFile

MoveFileA

MoveFileExA

MulDiv

MultiByteToWideChar

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadFile

ReleaseMutex

RemoveDirectoryA

ResetEvent

ResumeThread

RtlUnwind

SetCurrentDirectoryA

SetEndOfFile

SetErrorMode

SetEvent

SetFilePointer

SetLastError

SetThreadLocale

SetThreadPriority

SizeofResource

Sleep

SuspendThread

TerminateThread

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

UnmapViewOfFile

VirtualAlloc

VirtualFree

VirtualProtect

VirtualQuery

WaitForSingleObject

WideCharToMultiByte

WriteFile

CoCreateInstance

CoGetClassObject

CoInitialize

CoTaskMemAlloc

CoTaskMemFree

CoUninitialize

CreateDataAdviseHolder

CreateStreamOnHGlobal

DoDragDrop

IsAccelerator

IsEqualGUID

OleDraw

OleGetClipboard

OleInitialize

OleSetClipboard

OleSetMenuDescriptor

OleUninitialize

ProgIDFromCLSID

RegisterDragDrop

ReleaseStgMedium

RevokeDragDrop

StringFromCLSID

GetActiveObject

GetErrorInfo

SafeArrayCreate

SafeArrayGetLBound

SafeArrayGetUBound

SafeArrayPtrOfIndex

SysAllocStringLen

SysFreeString

SysReAllocStringLen

VariantChangeType

VariantClear

VariantCopy

VariantInit

DoFileDownload

DragAcceptFiles

DragFinish

DragQueryFileA

ExtractIconExA

SHBrowseForFolderA

Shell_NotifyIconA

ShellExecuteA

SHGetDesktopFolder

SHGetMalloc

SHGetPathFromIDListA

AssocQueryStringA

CoInternetCreateSecurityManager

CoInternetCreateZoneManager

ActivateKeyboardLayout

AdjustWindowRectEx

BeginDeferWindowPos

BeginPaint

CallNextHookEx

CallWindowProcA

CallWindowProcW

ChangeClipboardChain

CharLowerA

CharLowerBuffA

CharNextA

CharToOemA

CharUpperBuffA

CheckMenuItem

ChildWindowFromPoint

ClientToScreen

CloseClipboard

CopyImage

CreateCaret

CreateIcon

CreateMenu

CreatePopupMenu

CreateWindowExA

CreateWindowExW

DeferWindowPos

DefFrameProcA

DefMDIChildProcA

DefWindowProcA

DefWindowProcW

DeleteMenu

DestroyCaret

DestroyCursor

DestroyIcon

DestroyMenu

DestroyWindow

DispatchMessageA

DispatchMessageW

DrawEdge

DrawFocusRect

DrawFrameControl

DrawIcon

DrawIconEx

DrawMenuBar

DrawTextA

DrawTextExA

DrawTextW

EmptyClipboard

EnableMenuItem

EnableScrollBar

EnableWindow

EndDeferWindowPos

EndPaint

EnumClipboardFormats

EnumThreadWindows

EnumWindows

EqualRect

FillRect

FindWindowA

FindWindowExA

FrameRect

GetActiveWindow

GetCapture

GetCaretPos

GetClassInfoA

GetClassInfoW

GetClassNameA

GetClassNameW

GetClientRect

GetClipboardData

GetClipboardFormatNameA

GetCursor

GetCursorPos

GetDC

GetDCEx

GetDesktopWindow

GetDlgItem

GetDoubleClickTime

GetFocus

GetForegroundWindow

GetIconInfo

GetKeyboardLayout

GetKeyboardLayoutList

GetKeyboardState

GetKeyboardType

GetKeyNameTextA

GetKeyNameTextW

GetKeyState

GetLastActivePopup

GetMenu

GetMenuItemCount

GetMenuItemID

GetMenuItemInfoA

GetMenuItemInfoW

GetMenuItemRect

GetMenuState

GetMenuStringA

GetMenuStringW

GetMessagePos

GetMessageTime

GetParent

GetPropA

GetScrollInfo

GetScrollPos

GetScrollRange

GetSubMenu

GetSysColor

GetSysColorBrush

GetSystemMenu

GetSystemMetrics

GetTopWindow

GetUpdateRect

GetWindow

GetWindowDC

GetWindowLongA

GetWindowLongW

GetWindowPlacement

GetWindowRect

GetWindowRgn

GetWindowTextA

GetWindowTextLengthA

GetWindowTextLengthW

GetWindowTextW

GetWindowThreadProcessId

HideCaret

InflateRect

InsertMenuA

InsertMenuItemA

IntersectRect

InvalidateRect

IsCharAlphaA

IsCharAlphaNumericA

IsChild

IsClipboardFormatAvailable

IsDialogMessageA

IsDialogMessageW

IsIconic

IsRectEmpty

IsWindow

IsWindowEnabled

IsWindowUnicode

IsWindowVisible

IsZoomed

keybd_event

KillTimer

LoadBitmapA

LoadCursorA

LoadIconA

LoadKeyboardLayoutA

LoadMenuA

LoadStringA

LockWindowUpdate

MapVirtualKeyA

MapVirtualKeyW

MapWindowPoints

MessageBeep

MessageBoxA

MoveWindow

MsgWaitForMultipleObjects

NotifyWinEvent

OemToCharA

OffsetRect

OpenClipboard

PeekMessageA

PostMessageA

PostMessageW

PostQuitMessage

PtInRect

RedrawWindow

RegisterClassA

RegisterClassW

RegisterClipboardFormatA

RegisterWindowMessageA

ReleaseCapture

ReleaseDC

RemoveMenu

RemovePropA

ScreenToClient

ScrollDC

ScrollWindow

ScrollWindowEx

SendDlgItemMessageA

SendMessageA

SendMessageW

SetActiveWindow

SetCapture

SetCaretPos

SetClassLongA

SetClipboardData

SetClipboardViewer

SetCursor

SetDlgItemTextA

SetFocus

SetForegroundWindow

SetKeyboardState

SetMenu

SetMenuItemInfoA

SetMenuItemInfoW

SetParent

SetPropA

SetRect

SetScrollInfo

SetScrollPos

SetScrollRange

SetTimer

SetWindowLongA

SetWindowLongW

SetWindowPlacement

SetWindowPos

SetWindowRgn

SetWindowsHookExA

SetWindowsHookExW

SetWindowTextA

SetWindowTextW

ShowCaret

ShowCursor

ShowOwnedPopups

ShowScrollBar

ShowWindow

SubtractRect

SystemParametersInfoA

ToAscii

TrackPopupMenu

TrackPopupMenuEx

TranslateMDISysAccel

TranslateMessage

UnhookWindowsHookEx

UnionRect

UnregisterClassA

UnregisterClassW

UpdateWindow

ValidateRect

VkKeyScanW

WaitMessage

WindowFromDC

WindowFromPoint

WinHelpA

GetFileVersionInfoA

GetFileVersionInfoSizeA

VerQueryValueA

InternetCloseHandle

InternetCombineUrlA

InternetConnectA

InternetOpenA

InternetSetOptionA

PlaySoundA

timeBeginPeriod

timeEndPeriod

timeGetTime

ClosePrinter

DocumentPropertiesA

EnumPrintersA

OpenPrinterA

File Certificates

Certificate chain was successfully validated.

Download Certificate File (6.7KiB)

Owner	Issuer	Validity	Hashes (MD5, SHA1)
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE Serial: 40000000001154b5ac394	09/01/1998 13:00:00 01/28/2028 13:00:00	3E:45:52:15:09:51:92:E1:B7:5D:37:9F:B1:87:29:8A B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C
CN=GlobalSign Timestamping CA - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE Serial: 400000000012f4ee152d7	04/13/2011 11:00:00 01/28/2028 13:00:00	95:C7:FF:05:1A:81:D4:5B:FA:80:B2:CA:4D:92:4F:A0 C0:E4:9D:2D:7D:90:A5:CD:42:7F:02:D9:12:56:94:D5:D6:EC:5B:71
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE Serial: 400000000012f4ee1355c	04/13/2011 11:00:00 04/13/2019 11:00:00	F8:A5:9A:1B:BE:4B:6D:90:06:29:16:1B:33:AB:21:B6 90:00:40:17:77:DD:2B:43:39:3D:7B:59:4D:2F:F4:CB:A4:51:6B:38
CN=GlobalSign TSA for MS Authenticode - G2, O=GMO GlobalSign Pte Ltd, C=SG	CN=GlobalSign Timestamping CA - G2, O=GlobalSign nv-sa, C=BE Serial: 112106a081d33fd87ae5824cc16b52094e03	02/03/2015 01:00:00 03/03/2026 01:00:00	F5:42:28:BB:F6:BD:67:C6:A5:50:95:79:26:76:4E:D4 B3:63:08:B4:D4:CD:ED:4F:CF:BD:66:B9:55:FA:E3:BF:B1:2C:29:E6
EMAILADDRESS=info@janesoft.net, CN="Jane, Inc.", O="Jane, Inc.", L=Osaka, ST=Osaka, C=JP	CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE Serial: 11217545833fe6184076c0e6945b7bcd5d6c	07/04/2013 10:38:31 08/13/2015 08:49:51	FE:F9:EB:A9:94:A6:6D:A2:35:BF:D5:70:95:BD:79:96 4D:01:85:1E:AA:6C:8C:B5:86:F5:2E:B6:19:AA:42:DA:63:CB:D4:24

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 3 processes in total (System Resource Monitor).

Input Sample (PID: 3360)
- iexplore.exe -nohome (PID: 3316)
  - iexplore.exe SCODEF:3316 CREDAT:79873 (PID: 3392)

Logged Script Calls	Logged Stdout	Extracted Streams	Memory Dumps
Reduced Monitoring	Network Activityy	Network Error	Multiscan Match

Network Analysis

DNS Requests

Domain

Address

Registrar

Country

api.2ch.net
OSINT

Associated Artifacts for api.2ch.net

Whois Field	Value
Address	Cityland 10, Tower 1 Suite 2303
City	Makati
Country	PH
Creation Date	Thu, 22 Jul 1999 08:39:48 GMT
DNSSEC	unsigned
Domain Name	2CH.NET
EMail	domainabuse@tucows.com
EMail	2ch@racequeen.ph
Expiration Date	Sun, 22 Jul 2018 08:39:48 GMT
name	Jim Watkins
Name Server	BEN.NS.CLOUDFLARE.COM
Name Server	ISLA.NS.CLOUDFLARE.COM
Organization	Race Queen, Inc
Reigstrar	TUCOWS, INC.
State	NCR
Status	clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Status	clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Last Update	Fri, 23 Jun 2017 03:50:33 GMT
Whois Server	whois.tucows.com
Zip Code	1226

104.20.50.205

TUCOWS, INC.
Organization: Race Queen, Inc
Name Server: BEN.NS.CLOUDFLARE.COM
Creation Date: Thu, 22 Jul 1999 08:39:48 GMT

United States

menu.2ch.net
OSINT

Associated Artifacts for menu.2ch.net

Whois Field	Value
Address	Cityland 10, Tower 1 Suite 2303
City	Makati
Country	PH
Creation Date	Thu, 22 Jul 1999 08:39:48 GMT
DNSSEC	unsigned
Domain Name	2CH.NET
EMail	domainabuse@tucows.com
EMail	2ch@racequeen.ph
Expiration Date	Sun, 22 Jul 2018 08:39:48 GMT
name	Jim Watkins
Name Server	BEN.NS.CLOUDFLARE.COM
Name Server	ISLA.NS.CLOUDFLARE.COM
Organization	Race Queen, Inc
Reigstrar	TUCOWS, INC.
State	NCR
Status	clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Status	clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Last Update	Fri, 23 Jun 2017 03:50:33 GMT
Whois Server	whois.tucows.com
Zip Code	1226

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4 Threat Level no verdict Positives - Scan Date 04/02/2017 17:49:54 Reference AlienVault	146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4	no verdict	-	04/02/2017 17:49:54	AlienVault
Associated SHA256 625d2c9ec59e36d16af17b76ee87c992b8619bf1605f3cfbc7b226ff72d062f1 Threat Level no verdict Positives - Scan Date 04/26/2015 13:20:09 Reference AlienVault	625d2c9ec59e36d16af17b76ee87c992b8619bf1605f3cfbc7b226ff72d062f1	no verdict	-	04/26/2015 13:20:09	AlienVault

104.20.50.205

TUCOWS, INC.
Organization: Race Queen, Inc
Name Server: BEN.NS.CLOUDFLARE.COM
Creation Date: Thu, 22 Jul 1999 08:39:48 GMT

United States

janesoft.net
OSINT

Associated Artifacts for janesoft.net

Whois Field	Value
Creation Date	Sat, 20 Dec 2008 00:00:00 GMT
Domain Name	JANESOFT.NET
Expiration Date	Thu, 20 Dec 2018 00:00:00 GMT
Name Server	NS1.DNS.NE.JP
Name Server	NS2.DNS.NE.JP
Referral URL	http://www.tucowsdomains.com
Reigstrar	TUCOWS DOMAINS INC.
Status	ok https://icann.org/epp#ok
Last Update	Tue, 14 Jun 2016 00:00:00 GMT
Whois Server	whois.tucows.com

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4 Threat Level no verdict Positives - Scan Date 04/02/2017 17:49:54 Reference AlienVault	146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4	no verdict	-	04/02/2017 17:49:54	AlienVault

219.94.155.244

TUCOWS DOMAINS INC.
Name Server: NS1.DNS.NE.JP
Creation Date: Sat, 20 Dec 2008 00:00:00 GMT

Japan

Contacted Hosts

IP Address

Port/Protocol

Associated Process

Details

104.20.50.205

Associated Artifacts for 104.20.50.205

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://dubai.2ch.net/ghard/ Threat Level malicious Positives 3/64 Scan Date 10/11/2017 18:58:45 Reference -	http://dubai.2ch.net/ghard/	malicious	3/64	10/11/2017 18:58:45	-

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain pc5.2ch.net Threat Level - Positives - Last Resolved 10/12/2017 00:00:00 VirusTotal Report	pc5.2ch.net	-	-	10/12/2017 00:00:00	Report
Domain book2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	book2.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain cheese.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	cheese.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain etc2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	etc2.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain hayabusa2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	hayabusa2.2ch.net	-	-	10/11/2017 00:00:00	Report

TCP

<Input Sample>
PID: 3360

United States

219.94.155.244

Associated Artifacts for 219.94.155.244

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://tapcreate.jp/ Threat Level suspicious Positives 1/64 Scan Date 02/15/2017 04:23:39 Reference -	http://tapcreate.jp/	suspicious	1/64	02/15/2017 04:23:39	-
Associated URL http://aiboku.com/joubashop/shopaccess.html Threat Level suspicious Positives 1/68 Scan Date 08/10/2016 04:19:41 Reference -	http://aiboku.com/joubashop/shopaccess.html	suspicious	1/68	08/10/2016 04:19:41	-
Associated URL http://shonannoen.com/pdf_files/1445190467.pdf Threat Level malicious Positives 4/66 Scan Date 01/15/2016 19:12:19 Reference -	http://shonannoen.com/pdf_files/1445190467.pdf	malicious	4/66	01/15/2016 19:12:19	-
Associated URL http://rakuichido.sakura.ne.jp/ Threat Level suspicious Positives 1/66 Scan Date 11/30/2015 12:37:43 Reference -	http://rakuichido.sakura.ne.jp/	suspicious	1/66	11/30/2015 12:37:43	-

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4 Threat Level no verdict Positives - Scan Date 04/02/2017 17:49:54 Reference AlienVault	146835580a21f4775aa63082055235bd02c0a8d7d4c1d88bfa9bae16c67dd1d4	no verdict	-	04/02/2017 17:49:54	AlienVault
Associated SHA256 c84c86223e7d96b9e261080a39026634e059454a630177bf06a05d16d5737c4e Threat Level malicious Positives 15/57 Scan Date 01/15/2016 19:12:22 Reference VirusTotal	c84c86223e7d96b9e261080a39026634e059454a630177bf06a05d16d5737c4e	malicious	15/57	01/15/2016 19:12:22	VirusTotal
Associated SHA256 ba654cb65f8e3623b910713094e77ec564bb21d8b0a9c5961400b71962ae3465 Threat Level suspicious Positives 1/55 Scan Date 12/07/2015 13:11:24 Reference VirusTotal	ba654cb65f8e3623b910713094e77ec564bb21d8b0a9c5961400b71962ae3465	suspicious	1/55	12/07/2015 13:11:24	VirusTotal
Associated SHA256 bff90608318906bda8f556a9692e3690b7aa8d5d2d1be9551a1a77c5eee9bbc0 Threat Level malicious Positives 3/57 Scan Date 04/24/2015 03:54:58 Reference VirusTotal	bff90608318906bda8f556a9692e3690b7aa8d5d2d1be9551a1a77c5eee9bbc0	malicious	3/57	04/24/2015 03:54:58	VirusTotal
Associated SHA256 e280acd6f6e98aa55d5d6faaf9b9bec5cc45306a45760dae8659c48f2a048c84 Threat Level malicious Positives 7/56 Scan Date 12/01/2014 03:58:02 Reference VirusTotal	e280acd6f6e98aa55d5d6faaf9b9bec5cc45306a45760dae8659c48f2a048c84	malicious	7/56	12/01/2014 03:58:02	VirusTotal
Associated SHA256 3da8c60562d50339aaa2ce5e637e28cd85a4c2aa5b3310c1db9b0c3661638594 Threat Level malicious Positives 6/55 Scan Date 11/23/2014 13:16:22 Reference VirusTotal	3da8c60562d50339aaa2ce5e637e28cd85a4c2aa5b3310c1db9b0c3661638594	malicious	6/55	11/23/2014 13:16:22	VirusTotal

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain rec-kanri.sakura.ne.jp Threat Level - Positives - Last Resolved 09/30/2017 00:00:00 VirusTotal Report	rec-kanri.sakura.ne.jp	-	-	09/30/2017 00:00:00	Report
Domain koguma.shikokumeitetsu.co.jp Threat Level - Positives - Last Resolved 09/26/2017 00:00:00 VirusTotal Report	koguma.shikokumeitetsu.co.jp	-	-	09/26/2017 00:00:00	Report
Domain takainereinetsu.co.jp Threat Level - Positives - Last Resolved 09/10/2017 00:00:00 VirusTotal Report	takainereinetsu.co.jp	-	-	09/10/2017 00:00:00	Report
Domain aroma-mure.com Threat Level - Positives - Last Resolved 09/05/2017 00:00:00 VirusTotal Report	aroma-mure.com	-	-	09/05/2017 00:00:00	Report
Domain www.rusticjapan.jp Threat Level - Positives - Last Resolved 08/31/2017 00:00:00 VirusTotal Report	www.rusticjapan.jp	-	-	08/31/2017 00:00:00	Report

TCP

<Input Sample>
PID: 3360

Japan

104.20.50.205

Associated Artifacts for 104.20.50.205

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://dubai.2ch.net/ghard/ Threat Level malicious Positives 3/64 Scan Date 10/11/2017 18:58:45 Reference -	http://dubai.2ch.net/ghard/	malicious	3/64	10/11/2017 18:58:45	-

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain pc5.2ch.net Threat Level - Positives - Last Resolved 10/12/2017 00:00:00 VirusTotal Report	pc5.2ch.net	-	-	10/12/2017 00:00:00	Report
Domain book2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	book2.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain cheese.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	cheese.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain etc2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	etc2.2ch.net	-	-	10/11/2017 00:00:00	Report
Domain hayabusa2.2ch.net Threat Level - Positives - Last Resolved 10/11/2017 00:00:00 VirusTotal Report	hayabusa2.2ch.net	-	-	10/11/2017 00:00:00	Report

TCP

<Input Sample>
PID: 3360

United States

Contacted Countries

HTTP Traffic

Endpoint

Request

URL

Data

104.20.50.205:80 (menu.2ch.net)

GET

menu.2ch.net/bbsmenu.html

GET /bbsmenu.html HTTP/1.1 Connection: close Host: menu.2ch.net Accept: text/html, */* Accept-Encoding: gzip User-Agent: Monazilla/1.00 (JaneStyle/3.83) 200 OK
More Details

Format

Details

Request

GET /bbsmenu.html HTTP/1.1
Connection: close
Host: menu.2ch.net
Accept: text/html, */*
Accept-Encoding: gzip
User-Agent: Monazilla/1.00 (JaneStyle/3.83)

Raw Hex

     0 : 0A 00 27 00 00 00 0A 00 27 45 AB DE 08 00 45 00 [..'.....'E....E.]
    10 : 00 C9 0D 64 40 00 80 06 59 2D C0 A8 38 14 68 14 [...d@...Y-..8.h.]
    20 : 32 CD E2 2D 00 50 A9 45 C7 3B 06 39 93 15 50 18 [2..-.P.E.;.9..P.]
    30 : 01 00 B8 79 00 00 47 45 54 20 2F 62 62 73 6D 65 [...y..GET /bbsme]
    40 : 6E 75 2E 68 74 6D 6C 20 48 54 54 50 2F 31 2E 31 [nu.html HTTP/1.1]
    50 : 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C [..Connection: cl]
    60 : 6F 73 65 0D 0A 48 6F 73 74 3A 20 6D 65 6E 75 2E [ose..Host: menu.]
    70 : 32 63 68 2E 6E 65 74 0D 0A 41 63 63 65 70 74 3A [2ch.net..Accept:]
    80 : 20 74 65 78 74 2F 68 74 6D 6C 2C 20 2A 2F 2A 0D [ text/html, */*.]
    90 : 0A 41 63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 [.Accept-Encoding]
    A0 : 3A 20 67 7A 69 70 0D 0A 55 73 65 72 2D 41 67 65 [: gzip..User-Age]
    B0 : 6E 74 3A 20 4D 6F 6E 61 7A 69 6C 6C 61 2F 31 2E [nt: Monazilla/1.]
    C0 : 30 30 20 28 4A 61 6E 65 53 74 79 6C 65 2F 33 2E [00 (JaneStyle/3.]
    D0 : 38 33 29 0D 0A 0D 0A [83)....]

219.94.155.244:80 (janesoft.net)

GET

janesoft.net/janestyle/version.txt

GET /janestyle/version.txt HTTP/1.1 Connection: close Host: janesoft.net Accept: text/html, */* Accept-Encoding: gzip User-Agent: JaneStyle/3.83 200 OK
More Details

Format

Details

Request

GET /janestyle/version.txt HTTP/1.1
Connection: close
Host: janesoft.net
Accept: text/html, */*
Accept-Encoding: gzip
User-Agent: JaneStyle/3.83

Raw Hex

     0 : 0A 00 27 00 00 00 0A 00 27 45 AB DE 08 00 45 00 [..'.....'E....E.]
    10 : 00 C1 0D 65 40 00 80 06 7C C2 C0 A8 38 14 DB 5E [...e@...|...8..^]
    20 : 9B F4 E2 2B 00 50 7C B0 C6 F5 7F B0 86 E4 50 18 [...+.P|.......P.]
    30 : 01 00 C3 48 00 00 47 45 54 20 2F 6A 61 6E 65 73 [...H..GET /janes]
    40 : 74 79 6C 65 2F 76 65 72 73 69 6F 6E 2E 74 78 74 [tyle/version.txt]
    50 : 20 48 54 54 50 2F 31 2E 31 0D 0A 43 6F 6E 6E 65 [ HTTP/1.1..Conne]
    60 : 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 0D 0A 48 6F [ction: close..Ho]
    70 : 73 74 3A 20 6A 61 6E 65 73 6F 66 74 2E 6E 65 74 [st: janesoft.net]
    80 : 0D 0A 41 63 63 65 70 74 3A 20 74 65 78 74 2F 68 [..Accept: text/h]
    90 : 74 6D 6C 2C 20 2A 2F 2A 0D 0A 41 63 63 65 70 74 [tml, */*..Accept]
    A0 : 2D 45 6E 63 6F 64 69 6E 67 3A 20 67 7A 69 70 0D [-Encoding: gzip.]
    B0 : 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4A 61 6E [.User-Agent: Jan]
    C0 : 65 53 74 79 6C 65 2F 33 2E 38 33 0D 0A 0D 0A [eStyle/3.83....]

219.94.155.244:80 (janesoft.net)

GET

janesoft.net/janestyle/setting.php

GET /janestyle/setting.php HTTP/1.1 Connection: close Host: janesoft.net Accept: text/html, */* Accept-Encoding: gzip User-Agent: JaneStyle/3.83 200 OK
More Details

Format

Details

Request

GET /janestyle/setting.php HTTP/1.1
Connection: close
Host: janesoft.net
Accept: text/html, */*
Accept-Encoding: gzip
User-Agent: JaneStyle/3.83

Raw Hex

     0 : 0A 00 27 00 00 00 0A 00 27 45 AB DE 08 00 45 00 [..'.....'E....E.]
    10 : 00 C1 0D 79 40 00 80 06 7C AE C0 A8 38 14 DB 5E [...y@...|...8..^]
    20 : 9B F4 E2 2E 00 50 6E 4F F3 F5 BC 49 19 ED 50 18 [.....PnO...I..P.]
    30 : 01 00 E5 14 00 00 47 45 54 20 2F 6A 61 6E 65 73 [......GET /janes]
    40 : 74 79 6C 65 2F 73 65 74 74 69 6E 67 2E 70 68 70 [tyle/setting.php]
    50 : 20 48 54 54 50 2F 31 2E 31 0D 0A 43 6F 6E 6E 65 [ HTTP/1.1..Conne]
    60 : 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 0D 0A 48 6F [ction: close..Ho]
    70 : 73 74 3A 20 6A 61 6E 65 73 6F 66 74 2E 6E 65 74 [st: janesoft.net]
    80 : 0D 0A 41 63 63 65 70 74 3A 20 74 65 78 74 2F 68 [..Accept: text/h]
    90 : 74 6D 6C 2C 20 2A 2F 2A 0D 0A 41 63 63 65 70 74 [tml, */*..Accept]
    A0 : 2D 45 6E 63 6F 64 69 6E 67 3A 20 67 7A 69 70 0D [-Encoding: gzip.]
    B0 : 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4A 61 6E [.User-Agent: Jan]
    C0 : 65 53 74 79 6C 65 2F 33 2E 38 33 0D 0A 0D 0A [eStyle/3.83....]

Memory Forensics

String	Context	Stream UID
http://www.amazon.co.jp/exec/obidos/external-search/?mode=blended&tag=janestyle-22&field-keywords=	Domain/IP reference	27334-12867-005DB1F8
http://jbbs.shitaraba.net/	Domain/IP reference	27334-16912-005A04EC
http://be.2ch.net	Domain/IP reference	27334-13329-00621864
offlaw2.so	Domain/IP reference	27334-2030-006467FC
machibbs.com	Domain/IP reference	27334-12145-00673E0C
window.ad	Domain/IP reference	27334-17399-005DE991
http://menu.2ch.net/bbsmenu.html	Domain/IP reference	27334-12155-00671570
api.2ch.net/subject/	Domain/IP reference	27334-13492-006518C8
http://ime.st/	Domain/IP reference	27334-12545-005BE4F8
http://janesoft.net/janestyle/version.txt	Domain/IP reference	27334-12222-005CF424
http://find.2ch.net/	Domain/IP reference	27334-10673-00638760
https://api.2ch.net/v1/auth/	Domain/IP reference	27334-1966-00670388
shitaraba.net	Domain/IP reference	27334-12731-005CB5A8
read.so	Domain/IP reference	27334-2707-006457CC
ime.nu/	Domain/IP reference	27334-13470-0064AB68
http://nun.nu/?http://	Domain/IP reference	27334-12545-005BE4F8
be.2ch.net	Domain/IP reference	27334-13484-00650420
jbbs.shitaraba.net/	Domain/IP reference	27334-12363-005A00C4
http://ime.nu/http://	Domain/IP reference	27334-12545-005BE4F8
http://jbbs.shitaraba.net/bbs/api/setting.cgi/	Domain/IP reference	27334-12939-005DF670
http://be.2ch.net/test/p.php?i=	Domain/IP reference	27334-11985-0058D4F0
jbbs.shitaraba.net	Domain/IP reference	27334-12145-00673E0C
http://ime.nu/	Domain/IP reference	27334-12545-005BE4F8
http://janesoft.net/janestyle/setting.php	Domain/IP reference	27334-12221-005CFF1C
www.ime.st/	Domain/IP reference	27334-12729-005CAD8C
jbbs.shitaraba.com	Domain/IP reference	27334-12145-00673E0C
http://img.2ch.net/	Domain/IP reference	27334-10676-0065CA08
http://be.2ch.net/index.php	Domain/IP reference	27334-12698-0061BDAC
http://info.2ch.net/	Domain/IP reference	27334-10673-00638760
read.pl	Domain/IP reference	27334-2707-006457CC
http://search.yahoo.co.jp/search?p	Domain/IP reference	27334-13661-0068CCD4
127.0.0.1	Domain/IP reference	27334-10142-004E57AC
2ch.net	Domain/IP reference	27334-18490-006158BB
https://api.2ch.net/v1/	Domain/IP reference	27334-13426-0063CF6C
http://www.monazilla.org	Domain/IP reference	27334-13393-0062F95C
http://ff2ch.syoboi.jp/?q=	Domain/IP reference	27334-12593-005B9250
bbspink.com	Domain/IP reference	27334-12357-00612D7C
http://premium.2ch.net/?id=janestyle	Domain/IP reference	27334-25284-005DA7E2
http://jbbs.livedoor.jp/	Domain/IP reference	27334-12073-00636864
http://blog.bbspink.com/	Domain/IP reference	27334-10676-0065CA08
http://janesoft.net/janestyle/	Domain/IP reference	27334-12632-005BEB7C
jbbs.livedoor.com	Domain/IP reference	27334-12145-00673E0C
api.2ch.net	Domain/IP reference	27334-1008-0066E56C
http://janesoft.net/janestyle	Domain/IP reference	27334-13393-0062F95C
http://ff2ch.syoboi.jp/	Domain/IP reference	27334-12594-005B9590
img.2ch.net/	Domain/IP reference	27334-1676-00642F00
machi.to	Domain/IP reference	27334-12145-00673E0C
jbbs.livedoor.jp	Domain/IP reference	27334-12145-00673E0C
info.2ch.net	Domain/IP reference	27334-12269-00637FA0
http://jbbs.shitaraba.net/internet/8173/	Domain/IP reference	27334-12967-005DD4CC
https://2chv.tora3.net/futen.cgi	Domain/IP reference	27334-2003-00670964

Extracted Strings

Download All Memory Strings (2.9KiB)

!"#$%&*;<=>@[]^_`{|}

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!EIdSocksServerNetUnreachableError

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!MenuScrollRelativeViewPosRevClick!

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!MenuViewLinkBarToggleVisibleClick+

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!MenuViewToolBarToggleVisibleClick(

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!PopupTreeOpenNewResFavoritesClick

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!TAnsiStringsForWideStringsAdapter

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!TAnsiStringsForWideStringsAdapterd

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!TextPopupTrensferToWriteFormClick#

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!TLVAdvancedCustomDrawSubItemEvent

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

!ToolButtonWriteTitleAutoHideClick%

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

" height="

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

" selected="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"COMODO RSA Certification Authority0

Ansi based on PCAP Processing (network.pcap)

"EIdSocksServerHostUnreachableError

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"MS UI Gothic",1,-12,9,0,80000017

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"MS UI Gothic",128,-12,9,0,00FFFFFF

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"MS UI Gothic",128,-12,9,0,80000008

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"Operation not supported on socket.

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"PopupViewCloseAfterSetReadPosClick'

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

"VirtualFavoriteViewGetImageIndexEx%

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

###0.0000

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

#MenuViewSearchBarToggleVisibleClick%

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

#ViewPopupScrollToNewResAnytimeClick%

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$2CHSEARCH

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$Asterisk

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$Backslash

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$BASEPATH

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$BOARDNAME

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EIdSocksServerConnectionRefusedError

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT1

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT2

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT3

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT4

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT5

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT6

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT7

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT8

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$EXTRACT9

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$LOCALDAT

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$LOCALIDX

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$LOGPATH

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$MenuViewAddressBarToggleVisibleClick*

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$OnShow/OnHide

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$Question

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$TextPopupRegisterBroCraSelectionURLs

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

$TMultiReadExclusiveWriteSynchronizer

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%0.2d%0.2d

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%08.8x,%d

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%d.%d(Win32s)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%dpt "%s";

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s (%s)|%1:s|%s

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s (%s, %d

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s -r %d "%s" %s

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s [%s]%s%s%s

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s is not a valid IP address.

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s is not a valid service.

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s%s (*.%s)|*.%2:s

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s%s%s%s%s%s%s%s%s%s

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s, %.2d %s %.4d %s %s

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s, %d %s %d %s %s

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s. %s3GroupIndex

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s.Count

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

%s:Susie Plugin

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

>>><SA i="0"/>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

&https://www.globalsign.com/repository/0

Ansi based on PCAP Processing (network.pcap)

&MESSAGE=

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

&NOFIRST=TRUE

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

&submit=

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

&TextPopupDeleteCacheSelectionURLsClick0

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

' AS Histry

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

' AS places

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

'%s' is not supported.

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

'Object type not supported for operation

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

( %d/%dbyte)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

( %d/%dKB)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

(%s%.8x)%s

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

(*.*)|*.*

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

(?:location\.href|window\.location)="([^"]+)"

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

(EIdAlreadyRegisteredAuthenticationMethod

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

(Shift+Enter)

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

) - <font

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

)

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

)B,)BH)B\)Bp

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

)sh)sd)kT

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

)TextPopupOpenBackgroundSelectionURLsClick-

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

)TextPopupRegisterBroCraSelectionURLsClick0

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

*(*:*H*^*j*|*

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

*.2ch.net

Ansi based on PCAP Processing (network.pcap)

*.jpg;*.jpeg;

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

+PopupViewReplyWithQuotationOnWriteMemoClick

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

, about to go

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

, Bufsize =

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

, finished at

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

,!'-.__1_

Ansi based on Image Processing (screen_2.png)

,,n,,_,,_

Ansi based on Image Processing (screen_2.png)

- <a href=

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

--------------------

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

--------------------------------------------

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

-TabPosition

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

-TabStyle

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.2ch.net

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.2ch.net,.bbspink.com

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.bbspink.com

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.biz.com.edu.gov.info.int.mil.net.org

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.info

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.machi.to

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.machibbs.com,.machi.to

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.noborder{border-style:

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.noborder{border-style:none;

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.normalborder {border-top:none; border-left:none;

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

.UnicodeClass

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/"</script>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/bbs/rawmode.cgi/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/bbs/read.cgi/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/bbs/read.cgi?BBS=

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/bbs/write.cgi

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/bbsmenu.html

Ansi based on PCAP Processing (PCAP)

/blockquote

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/COMODO RSA Domain Validation Secure Server CA 20

Ansi based on PCAP Processing (network.pcap)

/GlobalSign CodeSigning CA - G2 - OCSP Responder0

Ansi based on PCAP Processing (network.pcap)

/head.txt

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0%

Ansi based on PCAP Processing (network.pcap)

/janestyle/setting.php

Ansi based on PCAP Processing (PCAP)

/janestyle/version.txt

Ansi based on PCAP Processing (PCAP)

/SETTING.TXT

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/storage/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/test/bbs.cgi

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/test/offlaw.cgi/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/test/offlaw2.so?shiro=kuma&sid=ERROR&bbs=

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/test/p.php?

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

/test/read.cgi/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

0, 0, 800, 530

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

0,0y@\z0Cyz0Cnk0headline.2ch.netbbynamazunkheadlineegg.2ch.netnamazuplusnkmao.2ch.neteqnkhimawari.2ch.neteqplusnk+rio2016.2ch.netlifeline}RQbe0medaka.2ch.netbel^newsmatsuri.2ch.netnandemomatsuri.2ch.netarguej[X0headline.2ch.netbbynewsheadlinehayabusa9.2ch.netnewsj[Xasahi.2ch.netnewsplusj[X+fate.2ch.netfakenewsj[X(R)asahi.2ch.netfakenewsplusj[X(R)+rosie.2ch.netchinasmogXbO(PM2.5)mevius.2ch.netnews2j[Xc_rosie.2ch.netliveplusj[X+hayabusa9.2ch.netmnewsplus|X|+matsuri.2ch.netmusicnews|\yasahi.2ch.netidolplusAChj[X+fate.2ch.netseijinewsplusj[X+lavender.2ch.netnews4plusAWAnews+lavender.2ch.netnews4plusdAWA+egg.2ch.netasiaj[Xegg.2ch.netbizplusrWlXnews+egg.2ch.netticketplusCxgnews+egg.2ch.netsciencepluswj[X+phoebe.bbspink.compinkplusPINKj[X+mercury.bbspink.comavplusAV+fate.2ch.netsnsplusSNSj[X+egg.2ch.netwildplusCj[X+egg.2ch.netfemnewsplus[Jnews+egg.2ch.netdqnplusj[X+egg.2ch.netmoeplusGj[X+mao.2ch.netcomicnewsAjlavender.2ch.netgamenewsQ[medaka.2ch.netpcnewsPCj[Xegg.2ch.netowabiplusl+matsuri.2ch.nettrafficinforio2016.

Ansi based on Dropped File (jane2ch.brd)

000000_1___0_sm._

Ansi based on Image Processing (screen_2.png)

000530104838Z

Ansi based on PCAP Processing (network.pcap)

0123456789ABCDEF

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

1)151>1E1o1

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

120 sec)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

127.0.0.1

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

140514201017Z

Ansi based on PCAP Processing (network.pcap)

140925000000Z

Ansi based on PCAP Processing (network.pcap)

141125000000Z0

Ansi based on PCAP Processing (network.pcap)

160107000000Z0

Ansi based on PCAP Processing (network.pcap)

170419000000Z0

Ansi based on PCAP Processing (network.pcap)

170905033519Z

Ansi based on PCAP Processing (network.pcap)

170922000000Z

Ansi based on PCAP Processing (network.pcap)

171007000000Z

Ansi based on PCAP Processing (network.pcap)

171206033519Z0y1

Ansi based on PCAP Processing (network.pcap)

180115000000Z0

Ansi based on PCAP Processing (network.pcap)

180331235959Z0l1!0

Ansi based on PCAP Processing (network.pcap)

1999, 2008 Mike Lischke

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

1:</a> <a href="#1">

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

200, 60, 100, 100, 200, 200, 60, 200

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

2001, 2002 Mike Lischke

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

200530104838Z0

Ansi based on PCAP Processing (network.pcap)

20161011214252Z0

Ansi based on PCAP Processing (network.pcap)

2017090500071806

Ansi based on PCAP Processing (network.pcap)

20171011214252Z

Ansi based on PCAP Processing (network.pcap)

20171011214252Z0

Ansi based on PCAP Processing (network.pcap)

20171015214252Z

Ansi based on PCAP Processing (network.pcap)

290924235959Z0

Ansi based on PCAP Processing (network.pcap)

2ch.net

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

2ch.net0

Ansi based on PCAP Processing (network.pcap)

2ch

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

2chServers

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

2chSun, 08 Oct 2017 16:57:06 GMT

Ansi based on Dropped File (bbsmenu.idx)

3http://crl.usertrust.com/AddTrustExternalCARoot.crl05

Ansi based on PCAP Processing (network.pcap)

440513202154Z

Ansi based on PCAP Processing (network.pcap)

457.PK..</a>

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

6 6$6(6,6064686<6

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

6___0________

Ansi based on Image Processing (screen_2.png)

7C8O8c8v8

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

8"8&8*8;{;x<

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

816/bwNE</a>

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

8UrlHistory

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

:7;F;O;^;

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

::_RESOURCE/

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

:</a> <a href="#

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

:Cannot Open DataBase

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

:HelpIntfs

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

:SETTING.TXT:

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

; ;$;(;,;

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

; ;8;@;U;

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

;C<N<w=/>a><?

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0r

Ansi based on PCAP Processing (network.pcap)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<#t&<0t%<.t,<,t3<'t5<"t1<Et:<et6<;tF

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<#t'<0t#<.t

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<*t"<0r=<9w9i

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</a></li>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</a> <a href="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</a>]</li>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</a>]

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</blockquote>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</body></html>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</dd></dl>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</dd><dt>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</div> info panel panel-default-->

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</dl></td></tr></table>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</dl> =================================================

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</favorite>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</folder>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<dt>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<dt>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<dd>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</h1></body></html>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</SCRIPT>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</script>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</style>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</STYLE>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</table>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</textarea>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

</title>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<8<W<~<9=

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<;=Y=N>[>~>k?

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<a href="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<a href="(http.+?)">(.+?)</a> $(\d{1,4})$

Unicode based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<a href="http://

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<a href="mailto:

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/anarchy/>Anarchy</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/anime8/>Anime & Manga</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/book8/>Books</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/carcom8/>Comics & Cartoons</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/comp8/>Computers</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/games8/>Video Games</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/img8/>Imageboard Discussion</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/lang8/>Foreign Language</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/liveanarchy/>Anarchy</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/lounge8/>Lounge</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/mango/>MANGO</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/music8/>Music</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/newnew8/>World News</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/newpol8/>Politics</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/news4anarchy/>j[(Anarchy)</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/poverty8/>Revolution News</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/prog8/>Programming</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/sci8/>Science & Math</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/sports8/>Sports</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/tech8/>Technology</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://agree.2ch.net/tele8/>Television & Film</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/android/>Android</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/bizplus/>rWlXnews+</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/femnewsplus/>[Jnews+</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/mac/>VEmac</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/netidol/>lbgACh</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/software/>\tgEFA</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/streaming/>YouTube</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/ticketplus/>Cxgnews+</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://egg.2ch.net/ticketplus/>Walker+</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/babymetal/>BABYMETAL</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/gamef/>PCANV</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/poverlution/>POVERLUTION</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/starwars/>STARWARS</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/touhou/>project</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://fate.2ch.net/world48/>COAKB48G</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbyanarchy/>rwbhC</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbylive/>headline</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbylivej/>JwbhC</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbymobile/>X}zwbhC</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbynamazu/>nkheadline</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbynews/>headline</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbypinkH3/>OwbhC</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://headline.2ch.net/bbypinkH4/>GwbhC</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://info.2ch.net/wiki/>5chvWFNg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://krsw.2ch.net/exile/>EXILE</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://krsw.2ch.net/ff/>FFEhNG</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://krsw.2ch.net/minecraft/>Minecraft</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://krsw.2ch.net/netflix/>Netflix</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://krsw.2ch.net/steam/>Steam</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/craft/>nhNtg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/dj/>ciENu</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/download/>Download</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/english/>ENGLISH</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/europa/>BECIS</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/hiphop/>HIPHOP</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/hrhm/>HREHM</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/net/>lbgwatch</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/news4plus/>AWAnews+</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/nika/>GNgjJ</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/phs/>gEogr</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/randb/>R&BESOUL</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://lavender.2ch.net/techno/>TECHNO</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/apple2/>Apple</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/apple2/>Apple</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/bus/>oXEoXH</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/handicap/>nfBLbv</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/linux/>Linux</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/muscle/>EGCgg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/netradio/>lbgWI</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/netspot/>lbgJtF</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mao.2ch.net/xsports/>xsports</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://matsuri.2ch.net/football/>COTbJ[</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://matsuri.2ch.net/goods/>ObYXg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://matsuri.2ch.net/mascot/>}XRbgL</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://matsuri.2ch.net/radiocontrol/>RCiWR)</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://matsuri.2ch.net/supplement/>NHETv</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/2chbook/>lmEnE</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/basket/>oXPbg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/gamespo/>X|[cERACE</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/goveract/>QACTU</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/goverrpg/>QRPGU</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/nifty/>Nifty</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/php/>WebProg</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://medaka.2ch.net/quiz/>NCYGw</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/ccc/>PINKKc_</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/eroacademy/>PINKw</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/erobbs/>pinkn</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/host/>zXgNu</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/leaf/>LeafEkey</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/pinkqa/>pinkS</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/sureh/>XHEGb</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mercury.bbspink.com/xvideos/>XVIDEOS</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/antispam/>Espam</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/bsoft/>rWlXsoft</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/desktop/>fXNgbv</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/friend/>|XyEirc</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/google/>Google</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/swf/>FLASH</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://mevius.2ch.net/win/>Windows</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://phoebe.bbspink.com/bbbb/>English</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://phoebe.bbspink.com/pinkplus/>PINKj[X+</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rio2016.2ch.net/anime4vip/>AjTex</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rio2016.2ch.net/dejima/>dejima</A>

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rio2016.2ch.net/denki/>dCEdq</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rio2016.2ch.net/jasmine/>streaming</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rio2016.2ch.net/wikileaks/>WikiLeaks</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://ronin.bbspink.com/>RONIN</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://rosie.2ch.net/kousinetu/>kEbMz</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<A HREF=http://update.bbspink.com/>PINK update</A>

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

<SA i="2"/><<<

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<base href="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Dropped File (bbsmenu.dat)

^c

Ansi based on Dropped File (bbsmenu.dat)

AA

Ansi based on Dropped File (bbsmenu.dat)

ACh

Ansi based on Dropped File (bbsmenu.dat)

BBSPINK 18I qI

Ansi based on Dropped File (bbsmenu.dat)

be

Ansi based on Dropped File (bbsmenu.dat)

ch

Ansi based on Dropped File (bbsmenu.dat)

di

Ansi based on Dropped File (bbsmenu.dat)

E

Ansi based on Dropped File (bbsmenu.dat)

EE

Ansi based on Dropped File (bbsmenu.dat)

er

Ansi based on Dropped File (bbsmenu.dat)

EwZ

Ansi based on Dropped File (bbsmenu.dat)

g

Ansi based on Dropped File (bbsmenu.dat)

g^Q[

Ansi based on Dropped File (bbsmenu.dat)

GknQ

Ansi based on Dropped File (bbsmenu.dat)

H

Ansi based on Dropped File (bbsmenu.dat)

iZ

Ansi based on Dropped File (bbsmenu.dat)

j[X

Ansi based on Dropped File (bbsmenu.dat)

JeSGk

Ansi based on Dropped File (bbsmenu.dat)

l^Gk

Ansi based on Dropped File (bbsmenu.dat)

lbgQ[

Ansi based on Dropped File (bbsmenu.dat)

lbgW

Ansi based on Dropped File (bbsmenu.dat)

Mu

Ansi based on Dropped File (bbsmenu.dat)

n

Ansi based on Dropped File (bbsmenu.dat)

nk

Ansi based on Dropped File (bbsmenu.dat)

o

Ansi based on Dropped File (bbsmenu.dat)

ob

Ansi based on Dropped File (bbsmenu.dat)

Q[

Ansi based on Dropped File (bbsmenu.dat)

r

Ansi based on Dropped File (bbsmenu.dat)

sEOo

Ansi based on Dropped File (bbsmenu.dat)

Sg

Ansi based on Dropped File (bbsmenu.dat)

TCg

Ansi based on Dropped File (bbsmenu.dat)

u

Ansi based on Dropped File (bbsmenu.dat)

wEn

Ansi based on Dropped File (bbsmenu.dat)

X|[c

Ansi based on Dropped File (bbsmenu.dat)

y

Ansi based on Dropped File (bbsmenu.dat)

Z

Ansi based on Dropped File (bbsmenu.dat)

|\

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

================================================= <dl>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

v <A HREF=http://qb5.2ch.net/saku2ch/></A>

Ansi based on Dropped File (bbsmenu.dat)

XV 2017/10/09

Ansi based on Dropped File (bbsmenu.dat)

<dd><form method=POST

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<dt><a href="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<Et$<et <;tS

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<favorite top="

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (favorites.dat)

Ansi based on Dropped File (favorites.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (favorites.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<h1><a href="http://janesoft.net/janestyle/">Jane Style Version 3.83</a></h1>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<html><body>Binary Data</body></html>

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<HTML><HEAD><META http-equiv="Content-Type" content="text/html; charset=Shift_JIS"><TITLE>BBS MENU for 5ch</TITLE><BASE TARGET="cont"></HEAD><BODY TEXT="#CC3300" BGCOLOR="#FFFFFF" link="#0000FF" alink="#ff0000" vlink="#660099"><a href=http://www.bb-chat.tv/?2ch_m><img src=http://img.bbchat.tv/images/bannar/7575.gif width=75 height=75 border=0></A> <A HREF=http://www.2ch.net/ TARGET="_top">5ch</A> <A HREF=http://info.2ch.net/>5ch</A> <A HREF=http://search.2ch.net/>[x[^]</A> <A HREF=http://dig.2ch.net/>X^C</A> <A HREF=http://stat.2ch.net/SPARROW>5che</A> <A HREF=http://o.8ch.net/>G`</A> <A HREF=http://i.2ch.net/>X}zj[</A> <A HREF=http://www.2ch.net/kakolog.html>Oq</A> <A HREF=http://8ch.net/>W</A> <form method="GET" action="//find.2ch.net/search" accept-charset="UTF-8" style="margin:0;"><input type="text" name="q" style="width: 80px;"> <button type="submit">X^C</button></form> nk <A HREF=http://headline.2ch.net/bbynamazu/>nkheadline</A> <A HREF=

Ansi based on Dropped File (bbsmenu.dat)

<html><head><META http-equiv=Content-Type content="text/html; charset=utf-8"></head><body> StartFragment-->

Ansi based on Memory/File Scan (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<IDCOUNT:

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<input type=hidden

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Dropped File (bbsmenu.dat)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

Powered by <a href="http://www.monazilla.org/">Monazilla Project</a>.

Ansi based on Hybrid Analysis (b3ef97d53ff9ae1372e15dc3489aa190000b2b9274e4dd7a7535ef1ff8bfe0f7.exe.bin)

<PageIndex