API tools faq
paste
malware_traffic

2020-06-03 - Valak (Soft_sig: mad29)

malware_traffic
Jun 4th, 2020
8,955
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.94 KB | None | 0 0
raw download clone embed print report
  1. 2020-06-03 - VALAK (SOFT_SIG: MAD29)
  2.  
  3. NOTE:
  4.  
  5. Valak malware for this campaign is distributed through password-protected zip archives attached to emails spoofing legitimate email chains. Passwords are usually different for each zip archive, but the password is included in the email message text as the most recent message in the spoofed email chain.
  6.  
  7. The zip archives contain a Word doc with macros for Valak.
  8.  
  9. Valak DLLs are run with: regsvr32.exe -s [file name or path]
  10.  
  11. DOMAINS HOSTING INITIAL VALAK DLL:
  12.  
  13. 2zvdoq8grm7vwed20-zz[.]com
  14. awh93dhkylps5ulnq-be[.]com
  15. e2o4bd6sh2b1sjk56-fv[.]com
  16. eed9jqjd4b600bu2b-md[.]com
  17. k1n3pxnd5e6x2h09a-df[.]com
  18. le7dv4wry1qy0dozb-df[.]com
  19. le7dv4wry1qy0dozb-df[.]com
  20. nbwvg2egflr8t2da1-wo[.]com
  21. nwwgbluv65j6g0xgr-xk[.]com
  22.  
  23. IP ADDRESSES AND URLS GENERATED BY WORD MACROS FOR INITIAL VALAK DLL:
  24.  
  25. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap1.cab
  26. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap2.cab
  27. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap3.cab
  28. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap4.cab
  29. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap5.cab
  30. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap6.cab
  31. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap7.cab
  32. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap8.cab
  33. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap9.cab
  34. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap10.cab
  35. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap11.cab
  36. 2.57.184[.]111 port 80 - hxxp://nwwgbluv65j6g0xgr-xk[.]com/czwih/fxla.php?l=gap12.cab
  37. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap1.cab
  38. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap2.cab
  39. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap3.cab
  40. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap4.cab
  41. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap5.cab
  42. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap6.cab
  43. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap7.cab
  44. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap8.cab
  45. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap9.cab
  46. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap10.cab
  47. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap11.cab
  48. 51.75.41[.]185 port 80 - hxxp://le7dv4wry1qy0dozb-df[.]com/czwih/fxla.php?l=gap12.cab
  49. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap1.cab
  50. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap2.cab
  51. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap3.cab
  52. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap4.cab
  53. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap5.cab
  54. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap6.cab
  55. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap7.cab
  56. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap8.cab
  57. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap9.cab
  58. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap10.cab
  59. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap11.cab
  60. 83.166.246[.]93 port 80 - hxxp://eed9jqjd4b600bu2b-md[.]com/czwih/fxla.php?l=gap12.cab
  61. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap1.cab
  62. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap2.cab
  63. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap3.cab
  64. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap4.cab
  65. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap5.cab
  66. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap6.cab
  67. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap7.cab
  68. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap8.cab
  69. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap9.cab
  70. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap10.cab
  71. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap11.cab
  72. 91.215.169[.]253 port 80 - hxxp://2zvdoq8grm7vwed20-zz[.]com/czwih/fxla.php?l=gap12.cab
  73. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap1.cab
  74. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap2.cab
  75. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap3.cab
  76. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap4.cab
  77. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap5.cab
  78. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap6.cab
  79. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap7.cab
  80. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap8.cab
  81. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap9.cab
  82. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap10.cab
  83. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap11.cab
  84. 91.228.218[.]6 port 80 - hxxp://e2o4bd6sh2b1sjk56-fv[.]com/czwih/fxla.php?l=gap12.cab
  85. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap1.cab
  86. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap2.cab
  87. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap3.cab
  88. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap4.cab
  89. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap5.cab
  90. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap6.cab
  91. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap7.cab
  92. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap8.cab
  93. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap9.cab
  94. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap10.cab
  95. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap11.cab
  96. 91.240.87[.]3 port 80 - hxxp://k1n3pxnd5e6x2h09a-df[.]com/czwih/fxla.php?l=gap12.cab
  97. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap1.cab
  98. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap2.cab
  99. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap3.cab
  100. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap4.cab
  101. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap5.cab
  102. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap6.cab
  103. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap7.cab
  104. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap8.cab
  105. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap9.cab
  106. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap10.cab
  107. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap11.cab
  108. 93.189.41[.]175 port 80 - hxxp://nbwvg2egflr8t2da1-wo[.]com/czwih/fxla.php?l=gap12.cab
  109. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap1.cab
  110. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap2.cab
  111. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap3.cab
  112. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap4.cab
  113. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap5.cab
  114. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap6.cab
  115. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap7.cab
  116. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap8.cab
  117. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap9.cab
  118. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap10.cab
  119. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap11.cab
  120. 185.118.164[.]8 port 80 - hxxp://awh93dhkylps5ulnq-be[.]com/czwih/fxla.php?l=gap12.cab
  121.  
  122. USER AGENT STRING TO CURL OR WGET THES URLS:
  123.  
  124. Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
  125.  
  126. SHA256 HASHES FOR EXAMPLES WORD DOCS WITH MACROS FOR VALAK SOFT_SIG MAD29 (FROM 2020-06-03):
  127.  
  128. 939be3a09e1f41c2623765168b6c1638309e1ddb9d8431e96a3730accb8210d8
  129. 7f4ca2a35d97765521669ea299c0e41ac7f8fa61f859db9e0ad75675c9ba8425
  130. 4c0d7b112dfd99c751a85ad9539152c413ede7e5d976f75ae13a8b46ebf53e66
  131. 6363a0f8b660b2c32b5e757d61667eb3207122549a646fb781df3fbf2ef267ae
  132. 1b1f3e9e5ab35041d0d09ae9d4682f9bff2b63e7f3d2195f171398c62071ff7a
  133. b0710746140031f452e4663e2bc5b32f10da2e6edda91160806965c3cf98b344
  134. 277dcc0d699301cc39c5c5dacd7a7ff4c898cda7c85c23f7043079514aa75055
  135. c28e10c63ef9007a2e760607d87554555cb8880bf3a91b009dcc3570b7d1e2d1
  136. 4112f8874b4240e5dcc923e67250e283599f1990358b80ffd26fef0e4acd47d5
  137. 00c3e066ba5c8ea899b6887df6639d4ca9d324694eff5af47525e6fd2438903f
  138. 180a813aea5c836aa6f3f539c0877cc018eac59a472cbc0d0581eab6069a8734
  139. a7aacf018ee7e1d4cfd9ec6830403bd8d23a70e332a4bebc365d5f7a7ca413a8
  140. 998bb598d699748b7aa75a43784806415b92093433b4ab301942d55b19663541
  141. a0b361553e8fadd453476c52e2e2d07861e97162fc4733b68b871c1a94db9ae7
  142. 1b7b82422dc5e8a2e3c61ab70574ec91d8cf978fd87d25d605b44f0034b78072
  143. a5e6e6bd07a3c4b90baf9c378621d21ad8542e16c4850572f06a4bd890c07ea6
  144. e0ec847b4d0d6a141bf2be947767f7968e0109271e303b3afc6859a811620bee
  145. a4f1ea5dd434deee93bdf312f658a7a26f767c7683601fa8b23ef096392eef17
  146. 8882c90c693b92c1665633a0a1da0ded7b1d9e1d7efee43efc122fc7530c9f8f
  147. 811cb89b37295be044b78e1fc13348b49925804bcdd0bff4b88c78c5d421259d
  148. 5e0350c8a686af378f46ae21ab1e131afd1fb6c5f70d6f3892abd0bf1f4459a0
  149. f3ed856f79eff8b593753d866fc360caf728caf570b4373deb75a87be3c484be
  150. 0bc00f31cca927a670a3e55425c2096a84b5df5f20ba3f24deefcca49e8f1cec
  151. 4997524a5ea99f382ff4908505168e2330082fd051d18e079a05b77af0bb0c01
  152. c11f748d62652649d64f430d522298c08a0099077be7a2f029842d94162e4eb0
  153. df793fbab135f764ea14025558e11ae2bce1c685f3bab85d3fae7f4d2584fa1b
  154. 3798fa02df60072f55214a80c0bc3b6f264954c66d5dfcb1f40109e513b71c5b
  155. bc8f76b0c48fb200692630fce1ced1958728f6521f4af14ebe4fa79e98066f40
  156. cb072cbce0c03efb86b9e1dfe70f3826b146172c2f6395b413c5153746773b06
  157. 6ddc132ac4105aacc1ee8fdb90b258e5f932a361d53bc3574fe7d1d5d938ce81
  158. d96c43637362753e5fcc862cb06342076eb9deb93d2ed463f44f2b717e96f344
  159. 88531e3cb20fddfd057663f39253626134d973958c1c971fff9f6faf92b43c28
  160. af6eb7d8ce04e6162342b99669461158a771ff625a70a781704665759a113e35
  161. 2b3d6a9d4f8113de8f227acc1f34fc16877cf8d473253db49651e8b39ee4e806
  162. f3ad5b4e050fdc72b05f32d5cc47abfe5e0d6424e74e93228b37aebbb1723433
  163. 32c1496646a3839c02dea5bc2fe732a7237a69a5b522eb22266d435e287cdd28
  164. 0990a0d506157ce0c451d41e4f225cc9b031ae03ac56e347af3e7ee7607819c9
  165. 137537980eaa9840f77ba148f051110b23af06a4564871ad4ffbe69483e30069
  166. c05b3417a8864608e41c534c824d7ccea49e885e06df210709048d07c35995d8
  167. 5832dd64acb752b890ea59d4696560a4bc06e34cc56b3aa78e7ecd2eebcf196b
  168. 671b874f1015f4e13afab6ef26983ab698ba54cc96055d8084f90d40146b4c40
  169. a477757c3d14a6075c691ae2e831793d81bf2998232979abb955a85a3f88714d
  170. adea6bef4e41ad8b36dc73df782c9599888e64b867976a6cdce2033c2873d82f
  171. d2932ff3e1909396d9e111c6c2a3032a270370f8eda0a819adc2b6037c986502
  172. 329d1998566aae23da89ec5868b957a4456f71beae4144d708cba56223d4b385
  173. 6160f11feec4e64ee5a590a7f5564d74b3cf3c294ff34703459c947527156308
  174. 8c3b5ad0bf00a810e676bda45db77ddccf777ca6fcfc346ec5b23b2c0a13f244
  175. 2832d1ef9a7dda483b2090645de0bb48f8da6d2ab2c2bc22a825a7a7bcc4155a
  176. 6a7f9fb667a3bbc899716a1f045999cc22d4b7c8006ef8bd7743fef9287185fd
  177. a46272a304c026d5691447bf090cc5c96fda901a9aef65318b1b7fcca3e726b8
  178. ba70b3bc32e5d8fb6825ccdb4110be909054926300720508884b4d6d07d94550
  179. c56af6a9505a8283100944016a367fbb026abad23e98e8051dc70d237eaf98e8
  180. 47b325eae542499a855c66759c45ee42c98ed7e0013e7deb1b943ae097767f36
  181. 38e275426bb045c69a877cc0c3e77291d798f8a5a35832e76942c2e6c229636d
  182. 62d42787eba43f85e85288722661ab08a20045420b1ee7ec254cc2ec315ebb69
  183. 7ca81e629148736a98647396982617b1ebf93194d194fae06edecbc387eb4b03
  184. 1939a717324ebd3f5e2d20c234fc4221aa63268229232726f6f35c36edf0218c
  185. 7a05f11c5078456f48aa4751a141ee68b3237a7e380054b44f35bb08db81801c
  186. 8ae3c0c5dd6c0502557579a8b273eeb5a3f32b64c5e95cddb2e26d89a010d648
  187. 8f1c033e947ea0293cdc2b4afbb9b04cc6e7e50e2970ef1297eea64114be50bd
  188. 031b59f288018eb179d65df4373b07d8d3458cb0b0ea60c17cd42ebebffc450d
  189. 0579e2479c87356a273ae8442eb489fa4575c8777903e27fc5f6f8f9c2714275
  190. 42a536c9c973e1714b8d97b5298d4f42f8bd16f528048ac40b6a9d98c55ee42d
  191. 516114600e91601b91ce3062861389942f78da1427c4efcc1f656ea59cc6b5c5
  192.  
  193. SHA256 HASHES FOR VALAK DLL RETRIEVED BY WORD MACRO:
  194.  
  195. 3769a84dbe7ba74ad7b0b355a864483d3562888a67806082ff094a56ce73bf7e
  196. bc77df5d4e9b7d0038ed2f21eec35df8aee6108fe4eec8b1dfa17b12c57f6704
  197. 04a83c6bafaec5ac7c4d9630038cb1d5790664e49d15fa21666436f1586dceea
  198. 62bb6473a50491841aaa84b05e8bbd7c9f6af4ba1e4c37d3f7103c4e8ff83a1f
  199. c7a14c6e5b3dd5635ea8b416f1df61ea98d9b22861e27529655dd41f6bb0ce81
  200. dd0faee2b8122db2e5b4310209d089fe18b925b9eb91d82c7317831c9116f76c
  201. 2c75e5005993fff65b5b8310c3c50c2e0ac219ba7014f5c480736636e7c5dcd5
  202. 62816e920878164a07cddb3cdfbf8c6e57e23be75637d47c854baacb14d90c81
  203. 2e4a3055526dbfcdf6ba08895891b77cefedf348cc89bffcee3bb103e1ba2313
  204. dd7aae027917a3af5e906916941f5f3288b68aa1d9eb2bb3e0f7a76008671791
  205. 762ac227d1e708d4595c0918745426aa38217be59beee15f876d67bbeb1604ba
  206. 2f46fb6c13d55475b50adec14baf7ff86e8b7c8afeff4a7dc9ee765afc3f0fd7
  207. 4a63ce4b53d0aa7c8b205c3b1bdd68e96cf9d4b12c67f68d2f4f3ab7bcc78349
  208. b44f045d517b85faa3fe3ae02398f8b74cfcece0c9bacf2ef5d64c8c9a197974
  209. 49bd7cd65cb56ef927ce8ba4f490848cdd4ec72757f32e9a8d75bbedc78aa111
  210. beebbfd0c1f558995eac21aa4d7fc3fb5354d6b6f94bca2751175c1cafe22bac
  211. a2f08791531ae85cf1dff28d6726975c38a755c88b776799aaf4798d5ba51fb5
  212. 92c3ba6def48aa0d6b17a9b126570012a9f15044ebf013d65f8a929b7ec53c72
  213. e34aabad2be266e6836ac7df7042ec212a5f4b7100d1aef534c94672307e7a72
  214. a129edb57c54271ee95c0a8ca53f8c606f3cd02472676fba1001b0d07388fcde
  215. 3e6f71c46c93a19b000a6305b5651ab19b31623cf4b319e2c4d0c45033521d64
  216. 253901260fb295c4fce1efc9d6755e621d673e6ef8b80b2309099a872a22fa95
  217. 8f0c359dabc9f3b43223405243d8c319f0ba27a93982ce756d3b933dac2e69fc
  218. 8d4ce2d059e301fd9def85f3fa4e297460e35e6960fd686a9dd0c3041f04d04f
  219. 10454e0bf2fda5a308003e902d57ce6e775b9b019f0f014d7530cd648a73c8a7
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!