From 22dafa8a35a290f06662ccd762d89798f7cdf8d6 Mon Sep 17 00:00:00 2001 From: LuiginoCamastra Date: Mon, 21 Mar 2022 15:45:28 +0100 Subject: [PATCH] init IoCs:OperationDragonCastling --- OperationDragonCastling/README.md | 144 +++++++++++++++++++++++++ OperationDragonCastling/samples.md5 | 80 ++++++++++++++ OperationDragonCastling/samples.sha1 | 80 ++++++++++++++ OperationDragonCastling/samples.sha256 | 80 ++++++++++++++ 4 files changed, 384 insertions(+) create mode 100644 OperationDragonCastling/README.md create mode 100644 OperationDragonCastling/samples.md5 create mode 100644 OperationDragonCastling/samples.sha1 create mode 100644 OperationDragonCastling/samples.sha256 diff --git a/OperationDragonCastling/README.md b/OperationDragonCastling/README.md new file mode 100644 index 0000000..a1c8f5a --- /dev/null +++ b/OperationDragonCastling/README.md @@ -0,0 +1,144 @@ +# IoC from Operation Dragon Castling + +Malware analysis and more technical information at + + +### Table of Contents +* [Samples (SHA-256)](#samples-sha-256) +* [Network indicators](#network-indicators) + +## Samples (SHA-256) +``` +setup_CN_2052_11.1.0.8830_PersonalDownload_Triale.exe +b9bea7d1822d9996e0f04cb5bf5103c48828c5121b82e3eb9860e7c4577e2954 + +QMSpeedupRocketTrayInjectHelper64.exe +a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341 + +QMSpeedupRocketTrayStub64.dll +76adf4fd93b70c4dece4b536b4fae76793d9aa7d8d6ee1750c1ad1f0ffa75491 + +IcbcLog +FFylbet0825.exe, icbc_logtmp.exe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log.dll,logexts.dll, xps1.dll, kwsui64.dll, MainLdr.dll +97c392ca71d11de76b69d8bf6caf06fa3802d0157257764a0e3d6f0159436c42 +e5adbe232c40ebc8fb01eb255e53780f8d2802917dac3bff46c891532766c43f +cad70ba1f6d84f24c9fdfdedde4b7ba30eafb1df0fd44d31f5c7fe79c3101d5c +97c392ca71d11de76b69d8bf6caf06fa3802d0157257764a0e3d6f0159436c42 +8597851af00c45643b32385f087d4f738b646db99b7d7b1c1de347441513be13 +50a02323e184ce986338c32f22017045432179be5ae23f3154ac214b7966a7fe +0de5029181ae2a9e20bf63afb27bbf0ba4c4b99ed042780af0dfd3c568f3c8aa + + +Proto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ulCom +ABA89668C6E9681671A95B3D7A08AAE2A067DEED2D835BA6F6FD18556C88A5F2 +F1B96BD59CDF8F180DDDB7F374777A1A9C34FAA6FC14AA3F1EEB5A185702F888 + +Atomx.dll,xps1.dll +2abc43865e49f8835844d30372697fda55992e5a6a13808cfeed1c37ba8f7876 +3988d3fc02f3139d16536e5e7b34fd0fbe8cd19102a2c8ed56c2d77d105b3119 +ea1bd2a9a76ce691f729f3a1b71e35abe68e2150f72538fa31ef9d5183e8a16d + +kb%num%.dll +4C73A62A9F19EEBB4FEFF4FDB88E4682EF852E37FFF957C9E1CFF27C5E5D47AD +2152cfc0ba9efeb10ef4b1578bf75c507503e7c8fa1c4dd7d21080ef6327c69f +ae357f0965758777950f8554c69f836eba20be0568eea98cd714f6d16411277f +b1d0ec3a0779132afe3b4f9ca8b84c59ebf036a40e64d85deec2b21ca0344a85 +c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0 +2d80b1562cc68d68ff1ebf9b46d901ad5db12464bb4c8533432d30aba608b896 +fc4c4d523708432defdf7f68d3c13efbac06d57173feb45bbbd76442ba37cdaa +652f4ac2143ffd69366caf53c26bdf5a5197f0145d86cb8cb7fbfc97b7fac1e9 +ee21e0964bf4609a5fcfab0b207e550f14e434567352e81f1abd08ee794eada0 +7dfab9618fdc46fcf9c072a2bb93be8360c90a67b5e21da0359b636387955d82 +8cdfb7c4bf1102bd7cbc5806bddc983b8ba6a2158d2efd31d76eb1b4ebe08fdc +99553649c24af7d5e72c26ea50302fb165fc2407985a536284a52670eb02b625 +0adc108340ec513f0f73991ff1f60952be7f9b8a8448f4663b711b1c9c8acb73 +3d29a00fe8c3b79efbb745216971286b331e5791959eff92a6a2064506e2fdc2 +e9990aa62a587ddd5b33fb1f251d3c4a8de3a0cd5d5e99a326dd70ce2245f9fe +176b5808fb0e8de31912121aec8802898ca648149ec5de1830c64c283bebecd0 +2b946ceed774dd9961e8cf60f633144fca5c558d4b4922102daa3b3cade2db6b +547c6a00c623fa4d88bac6be46ffff076d6e35dc20f9ab91327a6bc5f5de4f9e +66e7f55a02a53ce43272ae3fabbbd47191d02292d8b4ffd2aa5f590ed6f2245e +a2ce1f19522ce3a88b4c90b8db5fd688e18366ad3a7d1831141b449c1e854305 +5676f1a9de017dafff2dab09a8ff269945d900bea6d2ce7d53fdb7d4d7e5311a +f94ec386ced1cd5e480b4a483a5c55586d157be69808f83afa50c75150c5da0d +88658a1d5e6758c098ac7e5ab7284ff53e172aaadf4a6a4bf8b0f0e7fefff14a +77890e3c6f1228408abda3722e69a0c43c4517bf060734850878af144724fa1a +263e7da3d34b1753b75f3423a52790e8f666fe5c9f9c8cb6accdec186d50d24c +796accd99b52b646cc6622792d7fa08baf53c741ac5fe88fb1f9b51de7b5de51 +5a42d03593d17f6440be019b55e54b11fbcff74aa02b9399eb23fafd6f2d7310 +7acc7c25cfede4c7a30185d61853b887f799773e5d6ad4251260871bbc68131f +4c73a62a9f19eebb4feff4fdb88e4682ef852e37fff957c9e1cff27c5e5d47ad + +``` + +## Network indicators +### C&C servers +``` +103.140.187[.]16 - DNS resolution on htxp://update.wps[.]cn/newupdate111111111111111111111/2052/bigpatch/setup_CN_2052_11.1.0.8830_PersonalDownload_Triale.exe +23.106.123[.]196 +207.148.125[.]97 - in smcache.dat + +server.avastbusines[.]com +api.gpk-demo[.]com +api.geming8888[.]com +cdn2.twmicrosoft[.]com +http://www.ffyl-bet[.]com/ +help.tiger266[.]com +www.animal777[.]com +mirrors.centos.8788912[.]com +themerecord.com +yd.full-subscription[.]com +zk.full-subscription[.]com +cdn.1685810[.]com +static.1685810[.]com +login.good-enough-8fe4[.]com +http://23.106.124[.]136:7865 + +time.daytimegamers[.]com +static.daytodayup[.]com +http://cache.download.banner.dragonfish88[.]com +cachedownload.goldenrose88[.]com +``` diff --git a/OperationDragonCastling/samples.md5 b/OperationDragonCastling/samples.md5 new file mode 100644 index 0000000..d332b01 --- /dev/null +++ b/OperationDragonCastling/samples.md5 @@ -0,0 +1,80 @@ +18f4a01dc6640db5daacf4c675f2cee9 +86a8e90632bbc634101b770817dcc653 +3503166417763b3639312640021e08a3 +581bd03fb3feb72bb3377cc26531ba17 +7bdf90f8a29994fc1d054ea68fe4e665 +bf421d42174edb2f31007cbede9cf5b9 +5b15a367518b70a9b69751acba6eaff9 +c85827aff3b69e5ee34c4fecee478fb4 +81d9be954a09774887eb75b5a23db9b4 +13dc9f3f5ddb7f72bfb053a305079beb +e64edb61b151a9ff44d5ce14c0c73882 +4768094590f4dc63d0c36349f27dad8f +f584234e3a1e6164db2c3cdd825104f7 +f4ef7869dbb7b9fdc5da9baa908f3da8 +7a0c4e190d218a724ae7ed23aab32343 +cab4269a1feeb53b776736a5fa06218f +24c960ea38fa4aa907767641cadab28d +7f3d55dd7ebc1ace6996089f9435ecfe +d72fbefe2f995b7e6b9ce6dfb8fc8651 +55bd1e2462a7ddc9ac2364bf228dec67 +2db31acbfc6b6dddd1bfc82b9689873d +36dc309e026ec037e5b96493d0e3846e +1c51697a5820e2d52af36818a8ba62c6 +c268e5a9b87c30a574ad41606cc9052b +9bda29d6732fe4c3be989bcdb5860f11 +581a5d8775ba7bb113977f68d7191c4b +668a99b42df2fc210ebf07f4a0baec6e +57dfbdee5bb8a32b4fbaa4dcc5954875 +641d23463a53bcb29673d179379e1a8f +6099eacd2cf117dacea1cfcc4da56b66 +576fe6cf008461f56e9c76cc9a9edbd0 +9f92c5ae76b82d895723bc3c863ddd87 +57a3abe13572277ede814e37854e64eb +7913cc2bda56bdcf96a7ce822d115341 +dfcd5fc7f00ad543b69c4373a553d9f0 +a99bfc7d32428b271a8b0025942af53c +ef8b929fdd4471aad0d46d7464faa554 +35ff91515ad4a7de6f9f7feae7c0e01c +1e634e80c2717a9c9be7f55d861ac394 +a9409715a6bb7013108b096e2f8cb8e1 +f79df46c62e1616bc352b3b981bb037f +c2e5d631b4615a2f80343df1ea414124 +286ec2e9582c76f9a819ae1d8f9d0d6c +72210fd53fdec89bd1a8416ff484ba81 +0d5a2e5762b8bf9e0bad960dae352176 +d1cef9309f03c3424e32035f7c2fcc93 +acdb67210f3fa52991858a956fff9a77 +3513f2cc6aeb2c047347722d1d6b1bd7 +ff96f6d48f6580a465f6bf06fd350cc5 +efa8d3608d0059acb0ee04692c0196e3 +6cdd42e211e64d564c7c838eef4a5cf7 +9783496e234ccc48568c68a0e6b0b944 +f06387eb7c3b17154351fb3a88b9f7da +ea76ad28a3916f52a748a4f475700987 +0879125ed34df60a70ed5bb8d58f3a19 +26f2a8736a7c02d548680106a0f98214 +768f55c36a7d177da89eb479a8b339dd +f0398b5ed1d44a8a21b09fff02e5dd36 +727d969984595cf2bbc198773d6c1113 +ea2e29b351d4e07460e5955b8e1b4d5d +88ef23d0ddc41d3cfd7e353acdd32fd2 +4400d05115355c461e86cfebda35debb +e4cb0852683232cc0d5aef31e031282c +57e5fba9f615d62370f5acd5330ea7a1 +42ef4d1c360bf313f818cd862f9fe2bb +82f52660dba693d012ded3e5fa23855a +d23392f055d6eace34a7bfb22bc9470b +5daacc048152bc535ee9169441122100 +59138717e64950f050120de3cae87aa3 +800012382b8120cdcdb9dd4967056fed +a13664dc68dc2e98e0032591bbe827f4 +47b3627c3900e29bdef6d36cfdf61bbf +a7990bdf58617eb53dcf657503a8a01f +219529da9ca60707f113d501491031fc +82cdfa52165b47d81b1fb52982cc6e1e +d4d665a8b8c5ebf11295139ff363dba3 +8b6a63e522fd6b3f23f476a101720bf9 +49f95a2a1fbf2399fcdafa88d6132c85 +190fb373497b5d1b4f41400b6aa5fd22 +bfa657d3eca9df2b122d0908ac23c1ed diff --git a/OperationDragonCastling/samples.sha1 b/OperationDragonCastling/samples.sha1 new file mode 100644 index 0000000..ec1cbc0 --- /dev/null +++ b/OperationDragonCastling/samples.sha1 @@ -0,0 +1,80 @@ +cc816c7f032c1cfb28b57c24b7afdd7a5534b59a +64c6529568eaebc57b34419fbd91041b312ba412 +16bc3aa05ffd61490b1d49f4a026c09926c60c8e +719d6ba9ca4dc255497a15ff8083c9d5f98dc1e1 +9cf21535fbd5f4fe75f6f4fcdc8008487772dd5a +3213fd43c8c9f47c8e70c36ddc0db5bae8b54897 +b4017c3094da5b378c0c8ffacac9b4542900c4a0 +64eb3fb8ec1373b96aa7b05d1996f36ea14653be +0e179805b2e7a8998c27e97f3abd91de8b3810bd +8e07445b4e0d2f41a7e9873f3849acf7b802e67a +4f250a8881f4ca12bfc0090dfb242e4eac076ddc +8e741a050037448b45f4e10210a19a311777ef12 +9344a42903eadbb67cc70dc18377fcdc8bf790b3 +df89681ed5830c3505d566b8fcff54a236d8d17d +4d91b106e11f22f988065a4ab5da1a97ee7fa2ba +4c7c0e647d79de21498f5b5429c250ca2b168f4d +12d05d55c76f372126985e2f19b88b5faa4c877e +d125c5ff2c33ce23f6962213696c55e93ae0599a +120071b499fdbbe26fc9b168a45ceabea787f2da +025d741a49407fce3f3ed98ac276db4faf08789e +70c1383858585b685784cdabd0d72d36a8980544 +53197ad6e9f9d3cfc690e7b3f45d17f23dbee7ca +66e229725f306b7235677468e8eaf234d903ca8e +34d9439d8a40075bf7e8a0fadf660b7ad0c5a219 +203b77c01683e0a333318088ad56ef4ed4181aab +eaa794366414902f8d91ea70412e1fe3cb3a3fc6 +58f510a95b9aa02f3511d0f00739a45accf0b43d +bf651dc80a6a62261669b87aa3ca822c0529c89f +18c8fba06a8b85afd84219d62ea10f1c63a8ef7e +e61ed689b288d56336f8277e1e5951070ff07ef0 +371b0684cfd5c40e5aa390d4c20d38924fe7af21 +6f6e2835651c39b5ba2986aa0fed1b8ce8f32026 +17c958bc4f11f2669e7f822fd4eab9fe2efef873 +38bf188672962a4d7f4668e6289fc09dafba25fc +5865e4a25b5fbdb9485dd4e287c3831bd41c7236 +9f2ba32fd939fc2ad92b282310e5aefae3718db9 +e1bad452dc815b78e08b0b9dc81290beaeb596d8 +2ce69a872fd56ed9cba86747a14f37f3d33067aa +f1c5bdfc3005262bad5ad7a8fbd89e0d955eecb2 +ff7125bcebac9e05c67f7db9caf5bd2a9a82cbe9 +172da034a133bd6ea54f33712a99cf8b2a350f43 +ef49d2fcea2dfac162609a4fa90f4355f8418cfa +8f980e4bad3ba36cebac6caa3785dbad0466986a +4d961480992ad82ce88764667d4063030f6cac0f +8e077d161137830df31327c38ab1247a55d9dded +ecdeea44aba3a6b90d842c2af875f361f2f64ba4 +59a2645c529d28c3ab10114813af16dc7b52725b +960366f4c36366ebc77c08c6875bec2d7a18c45b +b7dff7cdf9e93fb93ea786de04dd7f4cd344d5cd +73a8d53ade55b2b3fe9d8c12a3c15776b7d40142 +3ceb63fc6de8e6f85c526425fb9f62ea5b6731bd +dd0c48ce93cc0ee4c474d7087d521218b1b37d4a +fb67519e50f8885afbfbef59627557636a664396 +c764a2a1a1aae110def058377d4bd168fa39060f +fb858fd40a405f78489a9aed7cd6b229756492f9 +4e658e3109da448bf0921238fe20cc276411f789 +6cfc7105e75b38ef178fb66cdf746a5d1dded850 +b28045863963e0de8e198bdea46d8bfd52efba05 +424f6ffaa4daa4323311d164c6d16daf74feeb23 +e93a3156fca5aba418e7fcb1fed8608238bdc7a2 +81713a12dcd41bad8607da0e99593802fa20d180 +d8cdd8144f929e2d75e3f3565caa889d2434a15d +e09e50c7a8d691e6a6040a78b720cd60cf125a73 +b18b381672c1a5ba2326bee6c3271562070fd11b +2c2dcd665eec988e346dae2ae2d185e0bbf5fe8e +91d96ac1846a7f2f2124734c292033c57d243697 +44b5c1f80c0a0d1de45aaf5d9bc79afe0ce8a802 +7caf578f3ff4ec3a0dc0172f87fabe39c204d99d +02f40abf4590c0de2fbbc1e2acb95da8e97f31b2 +371536b196b44ba87b9685bea4657fe63ca3e3ca +5e5c040e143cb10bcdb39203451a366256995aeb +9f4ece12b5f9cd1c9ba64fd2d619574e393ed369 +0269813d7685a82bf10b747dde2ab4cd929d5000 +1f178f1b66fecd21e1ed53b394f1871b55c4a536 +14476b30fe22d9b7c01c755ce6e9df1b392815fe +96ebb8661ecedabb732b66dfdbe3abdd8d81f333 +1f8b83c01b213210be84c50333f01a92537c2ec3 +b21a9f48b046b3f293def2368cd0fa5337158895 +4db39bd74e96b9e4077b7d1cc852530784f6660c +0166602f19294dd65f97882771df66ccb7c56895 diff --git a/OperationDragonCastling/samples.sha256 b/OperationDragonCastling/samples.sha256 new file mode 100644 index 0000000..0f06414 --- /dev/null +++ b/OperationDragonCastling/samples.sha256 @@ -0,0 +1,80 @@ +07e9a7732890cf06e479fee41218eefe404eff1bb29f888d9384752ec8d51e6c +0a7b22d9736964187ffe62b90e94024ec877351089ab08de21e617dc1b412087 +0adc108340ec513f0f73991ff1f60952be7f9b8a8448f4663b711b1c9c8acb73 +0de5029181ae2a9e20bf63afb27bbf0ba4c4b99ed042780af0dfd3c568f3c8aa +0fc8216be472b8ca45aaac5ac0bc50ddb9655b5fd8cbfe743482f4c9cba27de9 +1099523c5509db1c60c9c5d57aa625636cfd820db4ac60e08e881c256d20eb72 +176b5808fb0e8de31912121aec8802898ca648149ec5de1830c64c283bebecd0 +1c8f486475a433b908599e4a38ded1293a492421e9c476f62c0d499066b76904 +2039388615e2e23b1ad18bab3325610b1efa384cd9bbb35046b18fb6c8c9434f +2152cfc0ba9efeb10ef4b1578bf75c507503e7c8fa1c4dd7d21080ef6327c69f +21ec1dd34d4b7e13a474a1f31373ad041486111eb490527b6533ae2f5a38b73c +21f20033ad20070bccdb4502a50844172ebb0707b8a2f17f573417c861cdde33 +24cb273098e09256bcd512daa980c1260533ea7133ebf1d8f2169c059431f2fb +263e7da3d34b1753b75f3423a52790e8f666fe5c9f9c8cb6accdec186d50d24c +2abc43865e49f8835844d30372697fda55992e5a6a13808cfeed1c37ba8f7876 +2b946ceed774dd9961e8cf60f633144fca5c558d4b4922102daa3b3cade2db6b +2d80b1562cc68d68ff1ebf9b46d901ad5db12464bb4c8533432d30aba608b896 +2dca8979132502986f63ac9ea31bc97b94f057767445ac13f4e973c8d6c41dc9 +2dfde7fa4f4d5e0dfac3e62a18cff7a8eb148dcc114dc9a641b7cbd7715ed252 +3361e03ad94152f1b7823f8256f4dcb857a43bb84dcbb44e6e84a5338d5029d1 +3988d3fc02f3139d16536e5e7b34fd0fbe8cd19102a2c8ed56c2d77d105b3119 +3d29a00fe8c3b79efbb745216971286b331e5791959eff92a6a2064506e2fdc2 +48f11027ef15d68c3e6d943f21b948d346ef16bec3e0f3e0e658929c96505275 +4c73a62a9f19eebb4feff4fdb88e4682ef852e37fff957c9e1cff27c5e5d47ad +50a02323e184ce986338c32f22017045432179be5ae23f3154ac214b7966a7fe +547c6a00c623fa4d88bac6be46ffff076d6e35dc20f9ab91327a6bc5f5de4f9e +5676f1a9de017dafff2dab09a8ff269945d900bea6d2ce7d53fdb7d4d7e5311a +573423da0efa9b5e46948c75d1bb9552e2723ba4fa075e65bf0cd4b1fe91441c +598cb15cd9238505f52254e4fb21820ea7778c370d2be7e3b855b2d89b2e07bd +5a42d03593d17f6440be019b55e54b11fbcff74aa02b9399eb23fafd6f2d7310 +6101f635240ee5805c29ec2cb3a9ac0d34f7f7e05d021fbc55eea3e0b8d4d55f +63acbca38798b7c22bce921625aa6698bfc831ac78b62d4e17a9c56e224d1a46 +652f4ac2143ffd69366caf53c26bdf5a5197f0145d86cb8cb7fbfc97b7fac1e9 +66e7f55a02a53ce43272ae3fabbbd47191d02292d8b4ffd2aa5f590ed6f2245e +6d0c6985409fa2be2a22e187877c8318914a53dbdb760561e1d8162db7e29371 +725e252b9a759587bffe569832c002108b57127dbdc4ed7bddfec04c6a2e1d41 +76adf4fd93b70c4dece4b536b4fae76793d9aa7d8d6ee1750c1ad1f0ffa75491 +77890e3c6f1228408abda3722e69a0c43c4517bf060734850878af144724fa1a +796accd99b52b646cc6622792d7fa08baf53c741ac5fe88fb1f9b51de7b5de51 +7acc7c25cfede4c7a30185d61853b887f799773e5d6ad4251260871bbc68131f +7dfab9618fdc46fcf9c072a2bb93be8360c90a67b5e21da0359b636387955d82 +8597851af00c45643b32385f087d4f738b646db99b7d7b1c1de347441513be13 +88658a1d5e6758c098ac7e5ab7284ff53e172aaadf4a6a4bf8b0f0e7fefff14a +88a55aeb2a66e71ed20c5e852c7af04686c1d9a1c36769f5094fb68d2047f8ea +8c6762907239cc90bf35b7b37708d98d25b374a3bba8e6da45caa12785050224 +8cdfb7c4bf1102bd7cbc5806bddc983b8ba6a2158d2efd31d76eb1b4ebe08fdc +93318870a3f07e37da24d779599ea49d678599a9bb853dffc9a5680320886f04 +97c392ca71d11de76b69d8bf6caf06fa3802d0157257764a0e3d6f0159436c42 +98cdab8e5b0ed2f36f02b3b4b8dcb7c87a64e6295166f9b55324463cb327a454 +99553649c24af7d5e72c26ea50302fb165fc2407985a536284a52670eb02b625 +9f1cfc0c76527627e05ed9a4517861173309d30b624baa4db0e2d105c3c47960 +a2ce1f19522ce3a88b4c90b8db5fd688e18366ad3a7d1831141b449c1e854305 +a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341 +a428351dcb235b16dc5190c108e6734b09c3b7be93c0ef3d838cf91641b328b3 +aba89668c6e9681671a95b3d7a08aae2a067deed2d835ba6f6fd18556c88a5f2 +ae357f0965758777950f8554c69f836eba20be0568eea98cd714f6d16411277f +b1d0ec3a0779132afe3b4f9ca8b84c59ebf036a40e64d85deec2b21ca0344a85 +b9bea7d1822d9996e0f04cb5bf5103c48828c5121b82e3eb9860e7c4577e2954 +c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0 +c7f5d2e0c9e70b850ec49e817a5018dad6676c77d50dce3b1b4292156486c57f +c834c78f38e6be48af2d28777d9d2abec06b665307da78c31f652eda19a52ffe +cad70ba1f6d84f24c9fdfdedde4b7ba30eafb1df0fd44d31f5c7fe79c3101d5c +ddb2edb9096674a916c0cd88c81be333defc7d01d0c36848e57246debccc6dd2 +e074da895e4c030d047c7785d3dc95b9256ee40a1bdf16d58e569be421901e0d +e1c6a75bcb10f2f058f8896fb30fa3087f3f39e1b26ca1567a8092165dbce6fc +e5adbe232c40ebc8fb01eb255e53780f8d2802917dac3bff46c891532766c43f +e97c242c5a520f3c34e844032d9545e4b492d45643ed16f4e4884382769c75f2 +e9990aa62a587ddd5b33fb1f251d3c4a8de3a0cd5d5e99a326dd70ce2245f9fe +ea1bd2a9a76ce691f729f3a1b71e35abe68e2150f72538fa31ef9d5183e8a16d +ea5fd29fd8bde88061f96f009fa7c2f34b128d9b4713779b2f8d2bb33b42fdb7 +edc0e6b563a0ff923399fa001797d634dbddba83e6b724b190ef6d07943bce87 +ee0f0728298d82d776d8aea6acb74b05b0fc0662b547b2808a21b96102d491f4 +ee21e0964bf4609a5fcfab0b207e550f14e434567352e81f1abd08ee794eada0 +f1b96bd59cdf8f180dddb7f374777a1a9c34faa6fc14aa3f1eeb5a185702f888 +f3ed09ee3fe869e76f34eee1ef974d1b24297a13a58ebff20ea4541b9a2d86c7 +f94ec386ced1cd5e480b4a483a5c55586d157be69808f83afa50c75150c5da0d +f95441b1cd6399887e99dbe6aa0ceb0ca907e8175192e71f8f1a4cca49e8fc82 +fc4c4d523708432defdf7f68d3c13efbac06d57173feb45bbbd76442ba37cdaa +fc79292d018d012a862df3410843d46c0ed98c7bd31d6d14a6fe37e31f029854 +ff556c45bb1734bc2f29d7465291a3a4c209ef4deb91aebff81634934466c00d