Alpha Team Flash Report: FireEye Hack

On 8 December 2020, FireEye, a publicly-traded cybersecurity company, disclosed a data breach to the Securities and Exchange Commission (SEC). The form submitted to the SEC stated that the company was recently attacked by a “highly sophisticated cyber threat actor, one whose discipline, operational security, and techniques lead us to believe it was a state-sponsored attack”. FireEye’s internal investigation uncovered that the attackers targeted, accessed, and downloaded internal Red Team assessment tools used which “provide essential diagnostic security services to the company’s customers”. In an effort to be transparent, FireEye released a set of Yara, Snort, ClamAV, and HXIOC rules for detection. In addition, the security community issued a VirusTotal Yara retrohunt to find potential samples. As of 10 December 2020, approximately 655 positive samples were returned on VirusTotal, and there has been no publicly known use of these tools in the wild.

Recommendations

Patch systems appropriately for all vulnerabilities listed by FireEye at https://github.com/fireeye/red_team_tool_countermeasures/blob/master/CVEs_red_team_tools.md
Download and review the publicly accessible detection rules released by FireEye at https://github.com/fireeye/red_team_tool_countermeasures
Perform continuous monitoring of news related to this breach for associated indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)

Details

According to Kevin Mandia’s statement captured in the SEC filing, FireEye “..concluded we are witnessing an attack by a nation with top-tier offensive capabilities”. The company also stated that the attackers specifically targeted FireEye, and their internal investigation showed a highly-trained and focused adversary. According to a Washington Post article, APT29 was attributed to the attack. At the time of writing this advisory, there has been no publicly-disclosed evidence or technical analysis that implicates APT29 to be responsible for the FireEye attack.

While FireEye did not provide any additional insight into TTPs and IOCs associated with the incident, it made public a set of Yara, Snort, ClamAV, and HXIOC rules for detection through its GitHub repository. FireEye claimed that none of these toolsets contained 0-days and used publicly known vulnerabilities.

These tools have the potential to be leveraged in activity targeting organizations worldwide. While the threat actors responsible for the theft could retain the tools for their sole use, publicly leaking them will likely result in additional threat actors attempting to leverage them against a wide range of victims. Successful compromise of target systems could result in the exfiltration of sensitive information as well as potential further remote compromise with other malicious code.

ZeroFOX Alpha Team has not identified any notable chatter in any of the cybercriminal underground forums, in addition to what has already been publicly reported.

Indicators of Compromise

ZeroFOX Threat Feed users can access md5, sha1 and sha2 hashes of the samples via campaign ID 124

md5 hashes are as follows:

MD5
024670c69003ff85995afc5931d6b2f5
7306bce6a6a56e7d2bc8c373e0b53319
6065e2888e1d8dc6716cde626a7011ae
b9c7deb0d1783c971f7eb9d08ad9c8c8
07ada342dcdc48d1ffa28b5520604826
9eeb9f134c061220e0cfbab357dab36e
34d15c627c281326921d33568fcbba84
f22bc9b65217e2d1d8bbd0819d16a6ee
b72e30801f6ab1a299bf807c665c9476
6ebb5608a16db021118e328828dfd345
f4a4c34ce46490fec6ce00fedd1a4091
263a9b181637c674a18c7aef59e04da9
69ec0f3162afb4e200da5267d7a36ef0
b72b3615f07f55b83b0201d32c8557ee
618e30a0f5aa6119ea7687399227e776
d6a69f04e8747428f7dab5b03b50e7fa
c7ba98e66673f9404f680e14d625eb3e
6ffaa9b13ef9def7f7851b8aa8000deb
42ed6e6cc7783a964c9233194c0ddcf1
6209ede165635859acb395148c0755a4
c41491abf73cc37ccc2068914442263d
6a9a114928554c26675884eeb40cc01b
fe511ad15d9dfd1c8981128d7f969437
b2c06c23f55abaae7fa52591c5fb6e12
445be3f122e96867ea6a5e2930f6d880
9cceabe93da096fcd04d072d7e842cb2
f1ecf486d86575326eefe826e202efb7
bd50c2a36a9e5903f11f9fcff6b94145
086110f79152975b4259659b377902ba
8ca9a62faf71949ae165f5effd0557d7
7cac98df1f9a382a3e3e1a45e8ea357d
ffb41e9ffd824784b6ab5f24fabcad14
0340b5641499158ac0d0403d788575db
c4ab274b0371084ec4d0c9f9442e6be9
96e05f8fb769032feadab36f31b6c6aa
59bfc05922cc04fba8c7f4cf220ba27c
6aa5a7cb62a32e13b36f66a30de55f64
e78cfa3c8c63eff71020f4f709321a2e
0bbb414decac416a5299b39372c9ae7d
c62dc2bc7e8cd266328e31f1709d3fb2
5876d32a0b19428bd8355fac58eaab25
525da8247758d996e38fdcbbf2843308
a586e48af444bfcea181d10eb1f16c10
abe7b46f5f70c3ca4a37dff6187d446e
3f22546168b28570e5060d560ea3bda8
cb752b27030f60b3993394f2ca899012
bbaca7cb1ba8f613cd50c86695e8dd7c
9cacdb4b14a94bff07ce9cde90f6680a
c21667b26a69d1c59e34b7c72b213afc
b87fef7911c6abce6d90effea6a12947
2d9907b293a408c5264b3a49a28c0ffa
00944e3901e8df234bdef456888389fe
3144529baf360edbc6fa15a2310aad5b
a538467c6711f84a3d80cbb2c94f2967
91aeba7d239fb32ad596f86dfd0c283e
d6010686c2646a6c6ff24adc47442004
dcbd2764723279013cbdcacaa51fe1f3
40869ff348bdecf701d6aabcc5e16e67
5697e3f79eab29e35fcac9df7b5d4969
33e028e4ad035ff7710db1eccdddeaf4
6b95f18d979aed1242f34f2a6a081c53
2744f6cd65f3224acc15da1f376c2c89
136d2814dece8c76e18395418da8efb9
dcc6dbc8b054d6fcfe2d10224d6adc84
319b252af562e858d707818c142113c0
37821cc1570359bffe8a39c232313be7
c250f2242e4e8b0ebc88dd22096be1a0
ce539f4036d74a9390c66eb100450223
29889d4e0257fcb9b2115fbaf60a288d
457af86f65e9a9cf90c8191970bc5024
b997b8b40e229a14d59bb50f95650558
fb032f3ea41e352e4023d1a0b773c693
dd718ab313ca8b2230baf244a07ea316
988d515ce035787c9b6ab72879b7dd96
e66f9d44e3eead16613ca5cf2f299f4d
46b5946483b8429456529dd66a3e2cf8
d2be8c7ab64648efd20ea60defc8348f
5f12d2c543273f1cdd0d16f035c0d56e
8ddd8e6745f29c0258a3b83fee6ba6cd
8cb9bb259a36488d482f9dd40ee27840
8711071f5327cb7dc43525e35d541560
063a21668fac6562e947322855b1c8f8
eb0182a29fa1a6425b25861ed07daf44
699db1a5ccf7d05068046fb8306e758b
d5c200fd68fe6cf05e34b81192b6c114
a71cbdad24ebb32acf22ea59051829e6
f6a19eedb35645ce68d74627b5639e56
2aa34871b1d36c01896968050c662d18
116d42931d61b88cd8d8da07705fb50d
08710f09afdb9824d76b7e74a7ff619a
c9d0b06d938e6efe263ceaf0790ea602
ee1d0fef589e878ba96a922d7ffddc5e
d507987ed2022e929ec5b43a002a8d6f
242277087f19766185f31a5d1a31f47e
826257e6b8b3c6ad16e80078ee9d8ead
5a30d955c13eb19c2b3d059257d141b5
6c6c27920f3d64aa13cbb0154936c4df
c98afd024687bd55c00fdf89fbd62f5a
474284645ea42528b7cedf4f683607c9
99bca59e14c269c791068055da192fec
81d07e6ffa1cc6fd77b4118f1ff66ca1
c2f04d44cb2bbdcc9e24869ec8d09af5
d530a03d4a1764cc6c4a350dc13230e3
858144932ef403919af4d13abd676178
9cb1fa49d92d6473693acf507802bfae
d64836ec51680502aff624243c41239b
3888cbc027fbb4aa9bac2f49241d26b8
5a71f1027cd2812a3efbfabb0cb10d94
0a3eab38da226b087683b97bdac1de42
a57d43194c07ae33776a9b01202b31db
94f691d9e79c7035c1b4bc1c183cc77e
59a33d4903dae1ad4631a719ed33bb9b
bad7563c27a446f7eed0e5c9a575c46f
752730c624ff5b052c07c80d577efacc
41e42ff3b7c0b3fae7fe05f42c8a1803
c76204c99d04fe8c3f4fcdd4b53cdfd4
c567faa6f84185d31c1d66d93f48b4c3
36a0f1c05eef4e746e4355a4571a2915
a3c54384eaab6855ee5df401385f86b0
ce58aab12a9a31173cd8c99b12ef00f5
8ec65a8e0267e9a2cb3305556daa394d
11c2e71dcf1ef597e368e9e2668a7f58
45368240409933f9ea667f49c27d337a
b4669d5c3ba5fa312d1ca31f6c778642
5f8bdd2bbce5ecc885f75fde44d1cca5
1ee3e25948e86393d3d8dc4d643c9820
bf18a516dae5567acaf57899085b3d26
46034a214cb9c27e22227aca3f704341
18b4b628af390212182fc083946e0f92
055cda6fdd1816579192667d59b9bf63
1985ec69f39400e1c6acbe6f31d04906
4c3092034c3f12737f039e7d715a96e6
c60cd46a33777c4bbad2afafb6be833a
6ace9804c0d1d41fbc702d008e9ede2c
c14a15ce81d6502be845619d79ab4625
1bbb835a3ce6b50f12aa33404a78ec1d
3452fcdc86c04d73b9d6e248360aa70d
786f3ecc156331087d4eb2a6b68a12b8
b15018c3ffd9cc96d24d1616c6b9fbc2
bc3481a0b79808239df9deb0ae084a87
e706be261788cf47af581cfe4fe9b56b
7b08407da058e57e7f3e9dfd92c12a08
85d0f4c7d8638dfbefbfc88fe0f88130
d6c86ad30833bf1705c66d7c39dc14f6
6106ab1ea4b9b422e5ca797f5cc36f10
61675d096c0e295216b2b655a8eddf1c
7b345c1b92d4f815baad9388133d4a94
95d8737bbd131b63b1643c0cd9feb7aa
42b75eb19f46f5ee2bc6a5e95273f796
07276af1abac0b6e1caf57347e5a0c2e
49e79714de1568a389907438752ef9ba
5503d202e0fe7b20b56f7c929052fa99
c6537ddadc747bb27bb1dbc1f452b1dc
755e3b13378a2ccc6a860cf061ede643
97c45c5b1fdf07ad76c52cd947f01564
a5e3e0473d9d719f5bbbc431f938d6c8
f2487fcbc8adda790066487c4f74d130
7e4c4e0d2bd7ca52df8de7a9742327c7
a9813ad9955e393f3726e2e1181ba57e
865d38f4e63e97421b62ac62104f1a58
cd83128ca49aeae056787b1ec1a9be84
56253060ada23c9e0c906e532d887275
27043f417be0f0344946aab38af508d3
da3bb22225959fbbfba6d55369d19845
31128d6e74fd565d74df7e324e9261c1
d55e6a67c457971fda5b41486aa70e56
be8f789d43c18322de93ddb0ba15fd93
bbb1d1840319e1016f313855a26b59cb
83dfeb9458015b3285382a1aa788c888
bda301c887268084175c5236ed08960f
e106ded243c37c0d0fbb8338921e148b
4361075d0aa1b25fccefd65f4f86d707
6e2e126fdd23f9d45ac29a8481f0bc73
8629df42329efc0c4651394371153072
7e65c144fe75e1759497190668f48444
50f6d6a572850bb9d54db53f6b819338
67e49fbe2a0a11971d3f3b9cff799f35
d9406dd88aa46d968cb3a96c8947cf2e
37e88291c8b7106b0d02edb76fe58f22
df5297f94e5953f06a5fe3724f1a136e
10aeb19f59c1f35b5182bdade92e6504
cd2d341dbbc9a72514f6e9944e557d15
fde978fbdba1cba5e1ad07a4f0d68f80
30b40f4c88cc0072f143c4123ffc2bbc
3e4a6982f9b4bc0e52644a0ed1068257
0d32671b8c928b0382dea4644f0fc957
006deae9efd716d4aa283b6b433e7bf9
27ffeee6bde9f2ccda680bb04eb08153
66e0681a500c726ed52e5ea9423d2654
f451fd2fd6a0947cad6f89536c128f48
4917546cbfe983f87b5a4ed516f37913
21f40f5ed2e08422ce7339f587b2f594
760ff2c18dda4102631e9309926b676b
315b9d17983236af8283fe610b8b8a27
69e51ef01af747fbeeadd5944f829f5b
e0e9b71e9d4496c626e087aa0ede8dd9
c06807337bed1744c787b10e1bed759c
d01a5bac93efd751471d2a251fe03d1f
050a3b5f2889e021f1e324fb8296ca31
87c9b121624aec2ece4922682d11926e
d1da53e8257561b481daa64de2ac1a60
dd2715ccc4b37ba3da3adecf8c1e6c00
e252b73e4bb25956b959badbaf4c6364
a6c6f30c9818ed1990c9f0d61ee50dd0
1e0e4d7feec3a0efe25c5c853bae6fb3
8bc105a3c3ab16583c06a1b0d9833ae8
302db7655a76c6453489329b81958414
be46e04964bf1efce9a91b06fc4f2302
8fc971be1c1898cb4a94d1c6c5435f22
d30b1aa7c379794987432d607c390f5c
efcfdcbbfdde0a98702a18c8f5b835f9
1620245c600b1e2df9ddf5954bfcf742
0a7ea0954fafcda38f27a62d231e0659
379b513149edd19373850a52bd993385
a33091786d1e261bda3dc34c1664d536
17fcbb747fd75d2c4ad8fbe7cff458ac
2200341d3b4510db3a20f9018631d87f
87f4110490ab649ecf8e0af46237a9a9
7bde6aa7965caed5df51be5cb1ff9007
7562670411f09bf0187c2d14e6283662
8d1c1ea43d70713ddf1694336e0be4f5
39aa003268c99ceeb9007510a42252df
44e6f42a558f3090b8b0ffd4da2c0698
2439cc085aecc4b5e994d14fbff8d317
24e1ee25aab475d362e4d41d70fd43c7
6980188ea928da064df8c4efcdb8903a
ed00e37b7f294a775fea7870c534b9bc
7bb3b6497013d554a42c8e0e95660175
fa5ab510fd00f9765c01a423232504a6
7ceb7f3dc2f65aa829e65ee7650da010
c727316f7ecc42b8163defde7fda756b
747b9c81919fe462a1ff61df0645ad2a
cf22ebafd3860942810595c2466ad3c0
40d0bd5be5b7fd2e16d1e90daf79275a
cc7f7908d6dc59f7c5364926adae3163
e1da7cd90b7501ad9c83b29186df6381
1fa0665a44cfb8ce46a47ff4e259f0b1
9cea32ead9a6f07015f4d0d97c34cc07
cd8c3b2935c47642f84a79da611e70e4
7d280516fc77a4ca07fbd61dfb27702b
2641c812d3809efd5c763828a7dddaf4
f7f5201ea25bd7872547d18fcd309ec3
1a1ec9548b87a4d459784ff4577668d0
ab0a26d8039adda9123b2340ace09639
ad5032486190f7eadef573b288e4df47
8934b980f65e54a6daf4e7e742855df0
032c26166bff2fe4e99af44e0c2f66e7
264c9d20febac430d794860e9d0a7ae1
0f474c928958b0906f1622d14bc7c0d3
25b0f95c3f16ffa2e13bbdd1cc0dd842
b188cec9b3b6d3ea2c51ee231a8a02d5
cfdd9a8ee217696070e5377ec2d921a6
f8dcf98925f5ab71c6d4360c37d50d83
785967c4f252639d2aaff0063093f7cc
03c689f3749dea092a508847d8ced308
f08478ba67e9cfe15dcc63c07d86f9f9
610c69a274ea0a484b04879c0ecc5681
dfeff6b932eef5bafc4de93d10c6ae22
02e02b0307748c880fd43fc17866f366
fb85f04416bd0f35fdd6121439e2d5d2
a6437a6cba4b44237bf99c0324b1ca19
0b6e6d43d52be65fd0c9f92106461732
d456dd650a16db47cfb3676455da3bcb
9808ca4e3bc1c0e5fa7d1ac1358bcc7b
dae087e18ea7ba404a6aaac56c51c6de
0ef8d2461e6795e7f6f353d77cf4d51e
d5011ff3ee14f1cc835dc5542ce16599
6d7f3488c1fdd6d03c9dcea6150dd1de
d4944d8adc6d98e34c262455b5970f42
48932588514b09f5b702da9afd4f414f
cf1a2975b2444b2b1b114c8a1cc521bd
47023cd133cac915c6d8a9d67f72ada2
dfd2b08cf023394c1948362f582290e1
1ced74bc521e7eac8b499d33cb0e20cc
ffa5a38829507d78999734f6ed657171
b39b312b9e1b31f901abe94377584028
a63a74c764f960ae5c32d2affc4333b6
0622297a43e74dc7a0c265577c0c755e
83184ae7b5c666e88143b6415b09999d
7d9523f57eaf1884eea1dfbf8d43f66a
5db1b76c7ef12063dbf644d4a60c7dae
fbc342d75d884b69bf2cf842220456cd
a36d504a05cecd7e535d0ce8dc0db121
ea69c221cbc8d173b9c5dcba8ddd79ab
47c094368f162076a6aa52cbfcc6517d
8a7e46f4ae06cbf39ce189465c4516fe
6a8679c5674105373724496b66648a3e
ff8e83f1e1bc0cb779826964e629aa64
e435e860be02ef385974e69d940498a9
7e8fdd36e8f7efa175f4a85df6495504
d38ee5e049b55a1b2c0efa3eded54a9d
933cb0903ee8f08244f80af255932cde
790705882b87e089d8cd8ea81d28144f
12a4c44d4e46f433d0eb85bbef243895
79cecfb96efcab12d8229835cf138635
4cfc7feb1c206ba1aa9b415777de8c44
449b868a91975e1cdce0401c58adb1b5
00e14c10f07be59dac5c701fb46e9ce2
3fdc613293f94f469d4e5c6a12b95dc8
8c15fb6a10f2186af2a60dfa3bb8c4e8
8706665628d3a61836b965bbe66adf13
8a664cc39c5bf13cec1a94fc4f7cfc32
600c406a78546364498c237a1ef7e367
473c3c0af6a0a0f2eec6468954126dbb
e4c4f8178bfa710b213fde91815947fb
3925eaf7944f5a000d781c32745e4ca3
09df7292ad999560e5db0159c0b76620
5a40286e2a672b5c69b5aa66281453a3
a101fd2cdad044a721bf0d5873200fc1
4a3af1146f8621ca8085031ceebfab70
53f1da08cb874c4251b807057d95752d
75d3478a71670ef3342fafab85f8dd1b
f57edb68fd431b90ded17ad47290f975
1bd0c9a5acdcff7dc2a293c77071709a
965fd442c3c5b2050c9900f862262bb2
a206ce70809ef67cdc93353181122387
729d0f33b84753f6451927b286a74336
fe1b85c5a5893abe70f978b9bea875ea
37dce134614bfe61c2865a245528f215
f1579433e33a0fb01b84ac6f46d23ce5
28a7e58e782b9e549d538c12afb54d36
6fe9587d472d860566ae104ebd1cc58a
9ac7ed4133ddd513f988887facb85d0a
fa4f1a53806ed122ab35edf8a190048c
0c7a7ff5442b5240e481f94d8e94306b
671189a8f0e8de17198a74195679523c
39176c4f54ba908ac98150e54ab95f68
d9cd410a84051139c94b231553e57455
463e2438a409feada7d47ebdeb91dc5d
75a5e066fd21ee5c61b66a16bf03280c
f480ef24d4e7c59d34ad0da9476c424c
c280980a8d9b104090f935778f7ff16d
37afdd968f222a06e1067af3a33e7c71
f34992817ad91af1fdc3bf5d398f312f
9d9f264baec696129066c6f2f15a1431
e5f69f985cd417f97ab5b6a02134e390
8ca636782f930f865cba26bf37e9ee77
33c9fd910760bbf9186913692bd2a4cb
e8de957b31e47a968c10dcfca4151076
e1c4d18e670281d932cb1d241d824680
bc40becf2a376a49d12ca42cc2f05d5b
8fe31d0d29e7d1d107afc210079a0a6d
50842330e342a17974dcfc5a742a78b8
b22d32ad00ec200debe1ccb56fbfa2c4
c4f633401814ac5fd6bf40aedcdf2647
2e62bb9a969fe281969eef647c646def
efa48f5547dec2dc822934e075d36f0a
7f3f4400d302db11b00f78f58b3efb9a
c92c1364cdcf0d43b3b7028902470c0f
095050d91d8d51c1346370ea71caeac8
5d4bb8af43c9c35f10f0815a5e0a9d59
8c8bae76fa9df16445aa43588c9d3e25
98d8b7ab238507a2788f2f7862f037e7
b54715b68999089673276c28ed77d469
39449124ab737eeff5bd3614f5ab0def
29321457a14c9722d76c9134781cf328
7a2cb8ed3a64cabbb567dccf25bb4c81
378fa91dfb9b9976dc5f8907625848b5
73dab31985309480a51b7c0d1964a87d
b6bcf39ed259efdc807b907b559ab523
51e908bc21c3897cf824391677b3d3e1
1278663528c7646542ae2f8a3a2d5abb
006f1e19d47902c3a1ce00a6e8b8b79a
10310d0b09e4f558440fe0b79235a61a
45a417545660b1f227a0dd1bfcd8dcda
00efae70ad1e80c2229f6b105ce7c76c
911ef4b4f5949e4bf3a16f4a959d43bd
891e0421f997b64a8072934892796eae
6cedd451de369a34e3ac038ae5ade6e0
7d7b8f3d223ddbfd6238402de8db5286
b0c55c96bb436cbe475b072fc71b32bb
01ff7e87b87df799a27fca327e3f3ec7
ac66b99b9ffdb7772c5d0abf55f07bce
97665dd5c72b0d8238e9f9237e58c834
c571818941fefa27d57395875471705a
22a1fa6fe8d3cb18986f186893495f60
8bb9caac1d7df97c43ab283fd6704c2c
fedc8c554106e8380987bed396136402
b78e37d0dea7370c95162f591ca7e5a0
44530ec9c1b4a0e61260dbe48e33c7d3
7412e4fd1335a459f9b60aaaaca8f6a8
c52eed027377080e852aad26bf441e99
31757c3bff9c3280485fc3266e6fc2a8
b2c1273e27b8c319aa4119e1ea1355b3
ba85c1910b45c1b0a8a57e1b15964226
39d33938c9efef41f64d2ea00c7da99e
daf28ebfc40452714ecc4cc626c7eb55
f2bdf2062748d85912c0b20da0a4fb8a
00d65ff74b00daf575896fa33bfc86bb
27dc34c8675132df51bb1f0e3b83103c
07772f4db21577547cdccada075d5fd5
33ae401909e6d1e5676ab2cfb6f7a431
5a2848210a14e630cbcea661c40f3d59
5ddb697051cb782de8b6871b065520b1
23c3a0b6c00617567ba68f5b07470d04
2ab45bf1db2f0e797116b26248580704
3221d60cc531d6f56844f75d6fe8830e
d36b59d597f9510676d49fe3029d915b
6d2545074fe93ac4999e6380e1bc5385
2090e4d4a79df2baa60b357f32a41218
f28968705737f43ec7f253e22e1b7146
86886fb2713f7aa804fb2e9fc639d85e
f40de926e33bcefe7fc468be8997c401
ad00e6ef52fbf4a03ea71a9735ffb766
06cbd04225959b7f3e19596b6bc09782
6e2f5cab804cf4c80e5b7af2ddad556d
6499c773e53174862bea79cfe0f43caf
75eb22b2b19004a5bccc999dcfca5909
2e3fdda04c4c0f580cdbe4e9ed277970
ec2e8fa7e6737b298317d100adeee15c
ff10d6ab62f64aff22348a8cc6dab72a
f7b9b2e1c9bf9f1eaa45ea3be915e581
9fcec749cd2cd90175981c2e1ca67a21
06d7d94ac231c5b5a1dbb77628c7db31
14b8b2a44505daae35584dac2c51ec58
dd85dd41958ff70542a5373c0bc949c8
9be8d7df6a50374441868502973d0e4c
3c48ac4312765b53133ffde4d67dd410
22faa16e6f79e25b81b60b9bb80a2fdf
277f59ecb4d83da90717ad8d36328f7d
2c4fcacd1c6e195e04759fd03ff08eed
7116fbeae12f8f164e05470de846fcae
1b97f2199cfb4bc00fc84d3b75087feb
373a9799dd8dd74d683c0ffccf04da66
ed478d7ffaba83547517fdcb00854a4a
f9e2b1007c4752b808b8acb0060c12cb
5c0a5d1df830dcd6987c9bf0f3ec68c5
a9c7192aea725d2d1895b3c1c72c1eaf
043ca908ecd1eedf81cd1352d16941e7
8d75218528956fa78f84fdc483f38adb
d6cfb1fd03ae76d002b9e56cbb90fb43
1ae021c5c8ebf8cd4477f29bad61f145
6c0b1821ae9220f683eeec03826427f1
bc839be5432cc261a5e147bf1a52c0f9
6221f936ccfce259f0b1b6da063742c9
8028bb01477b32ff99b627d75444bd22
ec198a49179324791531480674007164
85e96c2781bf67ce6ddd04a1bf35f39d
c16d31577d4ddb6869f7e2a7977b7c42
dadafa8a7a65f6a7511fbd6913eed350
f54f37eeae6bc36a09cc12288b38cd14
fd57e965fd3047378a47e472d771951a
1726e5cdc4e0c3ca91192b8ad1142434
8a428813afefa7ef1b548729770ce394
f7ce677e44f8b9d144b79c6bdc0a728c
d82767c7e0c5efbc3939295546b82f40
fe3641d1b4663d40deb3d5d45807739c
1ffe0be5906155b25ec88e7c8a19adb9
e06b24113cab27ff5a1173fa3f9e1615
16d573b2934adf494479df34fa714148
85417e7e366c44c41a3bc79a6270dfbe
b50fc4bd8ab67da2df34c1e413c85e5f
dd96fb1d8512271a6ca83602019fbfb1
17e89a951d44b085bb246728be64167f
829a9dfd2cdcf50519a1cec1f529854b
2bf2152585802c91277d8b2ea2498b46
f20b57fb5308f1873689d2e5f6638d05
513d35b572b05caa1571a48db1ae24de
21000dd8499333555fc719f6c8e6fd9e
ee48aa8d8768b023fb1dc1e4f43a1644
699a0ff14ec256dd081788681e1fe60b
652edb60ad6d5ffc3635dbf173c684ee
bbeaa607d75fb69a4153a5d9c85887c9
eecbc064453ad748ce4673579dfc1b16
8e47d768a512732d4b4a55d460d82da5
c8f45e173728d8f05124465ea2609aef
18865b4ba318611c72e6d710bc405572
00860334d6b9a1ea4d36b5b7e05370d6
951c70e7a5bc10ef8c75a43dd1dd99c5
56892c6ef6c14c51d32c950bf5bc4564
b143268b829bd215e45acf5d6b2b2182
31773023c9bf8a03979fbae05e6ef44a
fb18f3a021a5dd914ba8070adb1e840b
d1edda13743b5d60d26ecf7bbd36537d
25f0c32ec9f858f446380760ee357088
7477da8b06ad7cf0b404ccd4bee76b75
bb4bf0a311fe278967dcb90ef6a476d3
bb41cac47544dd60f6a133215724318c
e356461e5b5f1e0392c78522d3b9dfa8
70d8633492822c28e6cdf61250917c08
2cfb8b63f78bfcf4ea1f21961b9cf49e
57033fac758cd2a6338f6a5e2e911bc2
a1434686fd02306cf1f369c03cf592e0
55c2a8bd2cd2e882fa3ca9065de263a1
56af7ca7b6f882424ba479b78dde3098
01fc73bc2b4733453045d56e1bade86b
5fe77487edf060e799f469927d57a03d
57d4161bebee7031ead0bca7365fe507
3205e905bdb7fec25ac62d5a33288f0d
f8bd06a5c06b29280317a3f8bf912827
1a83d9c57fd7425f1f203a416de81562
7748fd8d4294b0005d4d1ab6cf041461
b5a34a13bf2ba5f7575e7c48e64de1d8
5abb75846f58f4a68c83ae5a32695c64
3699f0800ede16456e74813b7a66ab5d
d92400c34a42cbb14773ef313496ab0d
4997b818540e90aca36c910e9422009f
220919b6f36ae9505d13429e4013be9f
358a2e2a12ac950229fb057a2c8cffa8
70a816c4babbce8f5e1bb003e23fe18d
ce35a560faca8d2193e2f6fb1d5bbf84
f9116f6c5e7ce0d050bae485579d75b7
99b851769815ccef925083e876a0ea11
1e0ab2692fffa4aa14e029bc3bbb2c9c
a50a4aab6384aa3f750c063a895facfd
8029e4ed13bfb7b9c7a2c3265c50e696
cc31b335da37e864acdc52f001c5e153
736211a979b437fff22bdcaaa66adb6e
372f24a02a2a50fddfa2cc30818c9e70
7d6d79dc64c00b38bfdbc4f55cf27030
c471aa3491c176fac03546223e6c9c73
18ef846b444726a747a4b107acb88752
4bc217374731ae8289936ba2e422af76
d2d9898666f79d1a372aaf3abf3a3782
bae847e8f1be533f52db37112dd93650
cb569dcc22fe9faca96a510a4757bc98
0b1110eeceee2d24cb4e50ac00f62e13
dd60d9d1a166dfc306aeed7f66f3f302
4dfcd5e9710ab35fbcaf40ed74f18295
9d38a2d307e6b95861d00603f18a2a4d
9e47e52c634f6d7f331c11e9be39350d
06b6f677d64eef9c4f69ef105b76fba8
7124347bfd1259ef51933fb262102f3e
106ef839714757ba77228be9987669e0
5df0ac0497d644606e9ded5aff874f3b
8900e6e2e028afa95a4f6681c8adbb36
15716a78708386b7d9596e848a43da8a
93743e4ba5b3607729304a7dd14b2ced
eda3e30ad86e88c2ef008498c1bd5b42
52be8e5714a3985f2107ace194b1a510
35d06a4024287030f86314db99cfd30c
3a19f9f8204d71d89ad8afd7705ec495
139d68d27d8be0694c797fba126ac9f8
562ecbba043552d59a0f23f61cea0983
77d7dcea99391d74de8d5033f981b563
6de3c6590551c2527d9b6eeafd5ee75e
dd74de8206f80e5095221e3b388f585f
8990d02d8d271b75d0ea986154d55a7d
ab8cf11e09e17911e2936a675f88fc24
89448066384809f71d25b046d64367ca
b57228d318598c8637cfcdde203abf6c
c74ebb6c238bbfaefd5b32d2bf7c7fcc
7b3561fce2b9d6d70eaaa1e065d11abf
b056b362f417d15b12ed21be34f33276
ca30ead913aaf9003dbd35cf75c4d8d0
b1ce595882aedfe2f1bab4667b49f348
cc51011f5a65d1bb955ab8b292dbb5d7
f290569bc8343777b44e3141975f7b9a
a666f8fb6c4aa2dd001429698e8ce860
ca1631eabff44c7a3130e9e2ed678d13
f3d733f316105ff4646851161772b459
d977a95fd2932b7883aaad9bd5558475
5506856d1a3ef53e2e6422125ce28c46
b97b3bc5c85eccec183d8a0a98b51cc4
7e2dbdf30957e37dcf065f113412c2e9
fe15bc25376c7e4ae06ead4d2ce085e8
3500a3b86842fef727f4dd8cdc58a2c7
3fb9341fb11eca439b50121c6f7c59c7
6bada95ef787f957ccf84aaec945cc41
d4dbd9e0d1217e3cd3497a91514b01d4
eda37c9efe34723e4d1763e8077b32bc
447ee2578507f8e4b187e450c5cea8c9
cfb38e4c46fcd03a4da94b5a5d614380
e35f517edf7b242ba6f38303fff04b0c
d492f27c14a9f26f2664f3b1287b440f
dd9df15581d069a877d271e8441c7588
65254c999e93859b1441eda254cc8903
f5632779a42fb0dc728002bc08f153cd
36c5903b3667397a2f890656e024bc22
2e93792a5df2c950a8dadf7ae651deac
6713da24319d02708b4b23e38c092d93
00825e0b95f383594c423058436c9cbd
254c9e9809d2a563ad6ea0aadfab9021
6d3fd86ff1dac6243d29e922f7ddab66
62828cc53002e995866abd3f7401cb80
23c8c466b6cda9cb1962660586967b95
2e67c62bd0307c04af469ee8dcb220f2
96ac5ad7320f973a6ae91c0477b3b7b4
19f0d8cd354ca325cd9ddda3c5b1a59e
db4ae41c18bfe2f4d45989fb1bf3ccc3
716dcaf57f07be7dc0f62d6b5fe5f2e4
ee3f46349f557daf66e79bd30eb769a0
3af2193abd74e3ebd1204732a3c28f35
5125979110847d35a338caac6bff2aa8
2f7482674dc1afd28adce108442ec65b
d742108905ee10a09c8a99d7cd0302ba
ebc1b637bc1dc6398658b2159abfef57
0d27e01c7bf4e84eddbdee9b8d53faf5
861b00ef8dae5432fe8cacb37bfa4c5e
ef8508c03e35a27641e5ff300dc11946
aae9ff90d75adca31fbb4deafac7d195
332d4625dfde3bb979a23da1697b483d
2121927f4f8108f19036901c7fc30bbb
d816dc166a73153560f618df02a47793
6ee3d80a40b01ecae5d2329854c86455
5e8343ce6c6e2894f46648c532b241e3
91a9930c59d314ec8ff6f4eb5e1b9c99
074fa513bd1a43b20c48737af2b0f1ff
4071f886f25a922ee77443262d127f0a
051d2382e45269136e10afa617dd00c7
847b8e1ce962bb65b690e44c0f420076
33611335354cf21b4945c39355e4db43
5911f8d673ea75b06df0e109fb391ccf
82dadcfdddc0d12a53f0d4c57e92bd36
d64523194a384353f89ee8041828ec96
c4cc1abc0b15f45faaa3181a2b0f6a13
10bd0e9fcc97c70851ecbcbe570760c3
11a66eebc9c0d1844fde5e993269cb04
bd3bb3152d72f1ea4bd8c4376815f586
4e500633c64f485b060e489f942a986f
bab955353674b0ffef7623a68387200e
69cf26f0f5050c263d415c1279bd0845
b55c5d9bbabff45742d5e90005663869
2990b693444009c177efffa10c5c26bb
45ffe04ac41dc8957410f95fcadebeda
bc4fc9bdfa9cb4599396c25ff32998bb
326e6ba54572a0e84b7fd0d81a70eac0
04db9edeb0e673cfffc039d135f7e377
8d01a93ef4cb6482d7aad4271c382032
cd6372110a9168d26382c36e8464a37f
aad6174afbda77a6a2c4524572c7e784
61fe12dac50694ac6c1c627644a10c0a
6d8ba23bba87635334caf85063170357
668745b2d1a6ebf9ca0014841256f5df
3d8a4835197d827082e8c444b9043fa9
3bcea6d85a0189bfb71059b1081585c9
8d4334a12b3004c16a39fd16c4f73db3
158eb6eaaf4728e485a4f03d70e4eaa7
6606b58c19d7975c15ca33fded697df4
9da35f6bcd53d319a99ecfa2cbaad087
330354032845ccabe82469f6fa3c20f0
5619362c0a1c98b06065f908bdbb259f
9bbb9e8edc1465f6e79b16e10e2b9728
87d150b5790fa2de5ba29ecb84f8d60f
48802b3fb9355df399039b9ba1dd0043
044417089984eaf3c5ba42416959683a
6cb3642b7c7e9d836a7f1ef66c11fc17
511415db109c7d5abe250323bbf0e7b5
1323153274f3a30b3650b23e6bc8618c
fc1bfc7004c0d886096297872e971b87
8907eb8db3883bd48b4335a6fbf6d9e4
64e861ecf5d2290cd8c35742a7649eff
a3a004e8b40235e0bd2a13c04991a98a
8cc2d5e1b518d866eb2a4d3b8e0a0e0f
1fbeb8b6572745f8c4dc5c7d3931f65c
717865242ca77b7a7e2071d19c78e77b
9f552c047bd0836f109323c558f24fd0
e150cffb955c4e10ee94d1efbb46d06e
1a369016143fe5d6dc090a3d9b7a02f0
a198216798ca38f280dc413f8c57f2c2
90e2bf416595be6ddac061530be13161
e36c6c58da6f5906294c7358afa9d241
0d4a2a8399f2fd2119fd39214414df02
becf06a6a5f984f2304661c8f3d34962