diary2013

8770

ripemd128(5396185) ripemd128(5396346) ripemd128(539665) ripemd128(539676) ripemd128(5397) ripemd128(539709) ripemd128(5397136) ripemd128(539722) ripemd128(5397354a) ripemd128(539755) ripemd128(539780) ripemd128(5398) ripemd128(5398159) ripemd128(5398538) ripemd128(53985398) ripemd128(5398605) ripemd128(53987) ripemd128(5398Guy) ripemd128(5398otay) ripemd128(5398simp) ripemd128(5399) ripemd128(539900) ripemd128(539935) ripemd128(53993794) ripemd128(539944) ripemd128(5399890) ripemd128(539a515A) ripemd128(53ahh98l) ripemd128(53B5KXaB) ripemd128(53bccr) ripemd128(53bHa) ripemd128(53bkid) ripemd128(53C7pQSVJ1HEE) ripemd128(53chevy) ripemd128(53crew) ripemd128(53crust9) ripemd128(53cur1ty) ripemd128(53DLwul6JWLzI) ripemd128(53E9TeWd3LwaQ) ripemd128(53Ehg9eUqLq2k) ripemd128(53F031) ripemd128(53F2IIK) ripemd128(53ford) ripemd128(53gKDuHhrrqlM) ripemd128(53Gw33UXafkfA) ripemd128(53gymi) ripemd128(53gymi1) ripemd128(53hold68) ripemd128(53huge) ripemd128(53i57hcd) ripemd128(53johnny56depp67) ripemd128(53kid) ripemd128(53l34EuZKLvsg) ripemd128(53legroom) ripemd128(53m292nTishGM) ripemd128(53Mbhy109idNc) ripemd128(53merk) ripemd128(53ming56) ripemd128(53nANyH7l1y9M) ripemd128(53Omo) ripemd128(53ormele) ripemd128(53oXDfx2aSgGE) ripemd128(53pgoFxhQ8Vp2) ripemd128(53q836ws) ripemd128(53QevhpzOLkmE) ripemd128(53racer) ripemd128(53rcg8ta) ripemd128(53re1AQURpcas) ripemd128(53rrs57) ripemd128(53S) ripemd128(53SkQxP) ripemd128(53Styvj) ripemd128(53tiger) ripemd128(53USHCewDpPNs) ripemd128(53V2TbEy) ripemd128(53v45GgIzn0pE) ripemd128(53vett) ripemd128(53vette) ripemd128(53viking) ripemd128(53wO4TymOlMYE) ripemd128(53woofss) ripemd128(53WsNyE7B1LVE) ripemd128(53Xg0M9fKbIXQ) ripemd128(53XjCH9YN6n1Y) ripemd128(53xp455) ripemd128(53xP8C7aGyxls) ripemd128(53ylk0H972) ripemd128(5400) ripemd128(540000) ripemd128(540004dim) ripemd128(54001) ripemd128(54002000) ripemd128(540033) ripemd128(540047) ripemd128(540054) ripemd128(54005400) ripemd128(5400628) ripemd128(540063) ripemd128(540084) ripemd128(54008723) ripemd128(5400Kimb) ripemd128(5401) ripemd128(540101) ripemd128(540110) ripemd128(540123) ripemd128(5401294) ripemd128(5401321) ripemd128(5401491) ripemd128(54015401) ripemd128(5401569) ripemd128(54017361) ripemd128(54018208) ripemd128(5402) ripemd128(540200) ripemd128(54021) ripemd128(540215) ripemd128(540217) ripemd128(5402204a) ripemd128(54025402) ripemd128(5402590) ripemd128(5402669) ripemd128(5403) ripemd128(540303) ripemd128(54031) ripemd128(540310) ripemd128(540312) ripemd128(54031636) ripemd128(54033) ripemd128(540332) ripemd128(5403438) ripemd128(54035403) ripemd128(540362) ripemd128(540388) ripemd128(5404) ripemd128(540424) ripemd128(5404403) ripemd128(5404519) ripemd128(54045404) ripemd128(54046) ripemd128(5404645) ripemd128(5404659) ripemd128(540472) ripemd128(5404piss) ripemd128(5405) ripemd128(540507) ripemd128(540513) ripemd128(54051artema) ripemd128(540528) ripemd128(540540) ripemd128(540549) ripemd128(54055) ripemd128(54055405) ripemd128(5405604) ripemd128(5406) ripemd128(5406072) ripemd128(540614540614qwe) ripemd128(5406221) ripemd128(54064221) ripemd128(5406490) ripemd128(54065001) ripemd128(54065406) ripemd128(5406692) ripemd128(5407) ripemd128(540713) ripemd128(5407521) ripemd128(5407652) ripemd128(5407pumpkins) ripemd128(5408) ripemd128(540805) ripemd128(540817) ripemd128(5408181) ripemd128(540822leo) ripemd128(5408484) ripemd128(540851) ripemd128(540890) ripemd128(5408th) ripemd128(5409) ripemd128(5409060) ripemd128(540915) ripemd128(540921) ripemd128(5409490) ripemd128(540989) ripemd128(540bigsk) ripemd128(540i2006) ripemd128(5410) ripemd128(54100) ripemd128(541009) ripemd128(541033) ripemd128(541045) ripemd128(541048) ripemd128(54105410) ripemd128(541065) ripemd128(5410bcxx) ripemd128(5410tomg) ripemd128(5411) ripemd128(541103) ripemd128(541111) ripemd128(5411178) ripemd128(541121) ripemd128(541138) ripemd128(541145) ripemd128(541148) ripemd128(54115) ripemd128(54115411) ripemd128(54118) ripemd128(541187) ripemd128(5411pimo) ripemd128(5412) ripemd128(541200) ripemd128(541204) ripemd128(541212) ripemd128(541221) ripemd128(541222) ripemd128(541224) ripemd128(54123) ripemd128(541233) ripemd128(541233432442) ripemd128(541234) ripemd128(5412354123) ripemd128(541236) ripemd128(541236987) ripemd128(5412442) ripemd128(541253) ripemd128(541254) ripemd128(5412582) ripemd128(541260s) ripemd128(541270) ripemd128(5412881) ripemd128(5412894) ripemd128(5413) ripemd128(541321) ripemd128(5413213) ripemd128(5413232ab) ripemd128(54132442) ripemd128(541333) ripemd128(54135413) ripemd128(541376) ripemd128(541377) ripemd128(5413alan) ripemd128(5413dad) ripemd128(5413dana) ripemd128(5413dove) ripemd128(5413mark) ripemd128(5414) ripemd128(5414028) ripemd128(541414) ripemd128(541422) ripemd128(541438) ripemd128(541444) ripemd128(541445) ripemd128(541454) ripemd128(54145414) ripemd128(541474154) ripemd128(541476) ripemd128(541477) ripemd128(5414838) ripemd128(5414wqav) ripemd128(5415) ripemd128(541500) ripemd128(541524) ripemd128(5415259) ripemd128(541529) ripemd128(541541) ripemd128(541542kaio) ripemd128(541542pp) ripemd128(54155270) ripemd128(541553) ripemd128(541554) ripemd128(54155415) ripemd128(5415545) ripemd128(5415609) ripemd128(5415747) ripemd128(541580) ripemd128(5415bb) ripemd128(5416) ripemd128(541661) ripemd128(5416670) ripemd128(5416689) ripemd128(541694) ripemd128(5416olt03) ripemd128(5417) ripemd128(541712) ripemd128(541719) ripemd128(541743) ripemd128(541746) ripemd128(54175417) ripemd128(541762) ripemd128(5417720) ripemd128(5418) ripemd128(54181452) ripemd128(541821a) ripemd128(5418239) ripemd128(54183232) ripemd128(5418465f) ripemd128(541848) ripemd128(54185418) ripemd128(541873) ripemd128(5418740) ripemd128(5418945) ripemd128(5418i2) ripemd128(5419) ripemd128(541900) ripemd128(541917313) ripemd128(541920) ripemd128(54192961) ripemd128(5419515) ripemd128(541954a) ripemd128(541957) ripemd128(541963) ripemd128(541966) ripemd128(541968) ripemd128(54197) ripemd128(541978) ripemd128(541979) ripemd128(541985) ripemd128(541986) ripemd128(541987) ripemd128(541990) ripemd128(541996) ripemd128(541ful) ripemd128(541skyview) ripemd128(5420) ripemd128(542000) ripemd128(542001) ripemd128(5420297) ripemd128(5420311) ripemd128(54205420) ripemd128(542072Q) ripemd128(542090Aa) ripemd128(5420924) ripemd128(5420972) ripemd128(5420abyz) ripemd128(5421) ripemd128(5421021) ripemd128(542111) ripemd128(542112) ripemd128(5421172ctac) ripemd128(5421282) ripemd128(54213) ripemd128(542130) ripemd128(5421324) ripemd128(542133m) ripemd128(54215421) ripemd128(5421566) ripemd128(542158) ripemd128(54216) ripemd128(542163) ripemd128(542174) ripemd128(5421895) ripemd128(5422) ripemd128(542213bnm) ripemd128(542222) ripemd128(54223) ripemd128(542251) ripemd128(542254) ripemd128(54225422) ripemd128(542256) ripemd128(542263) ripemd128(542279) ripemd128(5422908) ripemd128(5422bea) ripemd128(5423) ripemd128(542302) ripemd128(54231) ripemd128(54231542) ripemd128(5423187) ripemd128(542320) ripemd128(5423310) ripemd128(54235423) ripemd128(5423756) ripemd128(5423892) ripemd128(5424) ripemd128(5424014) ripemd128(5424159985) ripemd128(5424194) ripemd128(542420) ripemd128(5424213) ripemd128(542423) ripemd128(542424) ripemd128(54245424) ripemd128(542455) ripemd128(54246acb) ripemd128(5424954249) ripemd128(5424Luce) ripemd128(5424pooh) ripemd128(5424xj) ripemd128(5425) ripemd128(542522) ripemd128(542525) ripemd128(5425296) ripemd128(5425389) ripemd128(542542) ripemd128(5425517) ripemd128(54255259) ripemd128(5425531) ripemd128(54255425) ripemd128(542570) ripemd128(5425829) ripemd128(542584) ripemd128(5425ratt) ripemd128(5426) ripemd128(542600) ripemd128(542621) ripemd128(542623) ripemd128(542625) ripemd128(542645) ripemd128(54265426) ripemd128(542678) ripemd128(5426997) ripemd128(5426leo) ripemd128(5427) ripemd128(54270) ripemd128(542700) ripemd128(542704) ripemd128(542723) ripemd128(5427241) ripemd128(5427408) ripemd128(542742) ripemd128(5427536) ripemd128(54275427) ripemd128(542760) ripemd128(5427846) ripemd128(5427855) ripemd128(5428) ripemd128(5428295) ripemd128(54285) ripemd128(5428513) ripemd128(54285428) ripemd128(54286573) ripemd128(5428793Dff) ripemd128(542881) ripemd128(5429) ripemd128(542926) ripemd128(5429303) ripemd128(542933) ripemd128(5429415) ripemd128(54295429) ripemd128(5429583) ripemd128(5429818flower) ripemd128(542br5) ripemd128(542radio) ripemd128(542t0604) ripemd128(5430) ripemd128(543000) ripemd128(543008) ripemd128(543011) ripemd128(543012) ripemd128(54302010) ripemd128(5430300) ripemd128(543045z) ripemd128(5430hoga) ripemd128(5431) ripemd128(54312) ripemd128(543123) ripemd128(543125) ripemd128(543125a) ripemd128(5431267) ripemd128(54314) ripemd128(5431405) ripemd128(543144) ripemd128(543145) ripemd128(543154) ripemd128(54315431) ripemd128(54315644) ripemd128(54317980550) ripemd128(54319) ripemd128(5-=432=-) ripemd128(5432) ripemd128(543201) ripemd128(543202) ripemd128(5432036) ripemd128(54321) ripemd128(543210) ripemd128(54321009) ripemd128(543210bkmz) ripemd128(543211) ripemd128(543211111) ripemd128(54321123) ripemd128(5432112345) ripemd128(543212) ripemd128(543212000) ripemd128(543212345) ripemd128(54321234s) ripemd128(543215) ripemd128(5432154) ripemd128(54321543) ripemd128(5432154321) ripemd128(5432156789) ripemd128(543216) ripemd128(5432167) ripemd128(54321678) ripemd128(543216789) ripemd128(5432167890) ripemd128(5432176) ripemd128(543219) ripemd128(5432198) ripemd128(543219876) ripemd128(5432199) ripemd128(54321a) ripemd128(54321A) ripemd128(54321abc) ripemd128(54321da) ripemd128(54321e) ripemd128(54321f) ripemd128(54321fuck) ripemd128(54321g) ripemd128(54321gecr) ripemd128(54321geo) ripemd128(54321gfdsa) ripemd128(54321j) ripemd128(54321k) ripemd128(54321ke) ripemd128(54321LA) ripemd128(54321m) ripemd128(54321n) ripemd128(54321o) ripemd128(54321p) ripemd128(54321pusk) ripemd128(54321q) ripemd128(54321qaz) ripemd128(54321qw) ripemd128(54321qwe) ripemd128(54321qwert) ripemd128(54321qwerty) ripemd128(54321r) ripemd128(54321rewq) ripemd128(54321ruslan) ripemd128(54321s) ripemd128(54321trewq) ripemd128(54321v) ripemd128(54321w) ripemd128(54321z) ripemd128(54322) ripemd128(543220) ripemd128(543221) ripemd128(54322212) ripemd128(54322345) ripemd128(54322q22345) ripemd128(543231) ripemd128(54325) ripemd128(5432523) ripemd128(54325432) ripemd128(5432643) ripemd128(5432671) ripemd128(543275) ripemd128(543277) ripemd128(543279937954lol) ripemd128(54329) ripemd128(5432a) ripemd128(5432a1) ripemd128(5432oleg) ripemd128(5433) ripemd128(543300) ripemd128(543310) ripemd128(543321) ripemd128(54333) ripemd128(54333290) ripemd128(543333) ripemd128(54333333) ripemd128(543335) ripemd128(543342) ripemd128(543345) ripemd128(543354) ripemd128(54335433) ripemd128(5433706) ripemd128(5433756) ripemd128(5434) ripemd128(5434077) ripemd128(54341) ripemd128(543420) ripemd128(543424) ripemd128(543427) ripemd128(54343) ripemd128(543434) ripemd128(543435) ripemd128(5434474) ripemd128(543454) ripemd128(54345434) ripemd128(5434659) ripemd128(543477) ripemd128(5434809) ripemd128(5434894) ripemd128(5434eaw) ripemd128(5435) ripemd128(54354) ripemd128(5435417) ripemd128(543542) ripemd128(543543) ripemd128(5435431r) ripemd128(543543543) ripemd128(543545) ripemd128(5435454) ripemd128(54354542) ripemd128(543546) ripemd128(54355435) ripemd128(54358803) ripemd128(54359) ripemd128(5435942) ripemd128(5435994) ripemd128(5436) ripemd128(543641) ripemd128(543654) ripemd128(54365436) ripemd128(543665) ripemd128(543666) ripemd128(543678) ripemd128(5436976) ripemd128(5436988) ripemd128(54369963vasilii) ripemd128(5437) ripemd128(543700) ripemd128(5437322) ripemd128(543754) ripemd128(54375437) ripemd128(5437622) ripemd128(5437748) ripemd128(54378) ripemd128(543788) ripemd128(5437umbr) ripemd128(5438) ripemd128(5438142) ripemd128(543821) ripemd128(5438350) ripemd128(543853as) ripemd128(54385438) ripemd128(543876) ripemd128(5438god) ripemd128(5438golf) ripemd128(5439) ripemd128(543909) ripemd128(5439428) ripemd128(543972) ripemd128(543981) ripemd128(543989) ripemd128(543ert) ripemd128(543NanoM) ripemd128(543r21) ripemd128(5440) ripemd128(544006) ripemd128(544018781) ripemd128(544030) ripemd128(54405440) ripemd128(544057) ripemd128(5440715) ripemd128(5440926) ripemd128(5440fite) ripemd128(5441) ripemd128(5441021) ripemd128(544123) ripemd128(54415441) ripemd128(544166) ripemd128(5442) ripemd128(54420) ripemd128(5442000) ripemd128(544216) ripemd128(54422533) ripemd128(5442263a) ripemd128(544228jm) ripemd128(544244) ripemd128(544252) ripemd128(54425442) ripemd128(544278) ripemd128(544296) ripemd128(5443) ripemd128(544300) ripemd128(544321) ripemd128(544322) ripemd128(54432dura) ripemd128(5443311) ripemd128(544332) ripemd128(544342) ripemd128(5443477) ripemd128(544351) ripemd128(5443542) ripemd128(54435443) ripemd128(5443560) ripemd128(544368dragon) ripemd128(5444) ripemd128(544414) ripemd128(544415) ripemd128(544444) ripemd128(54445) ripemd128(54445444) ripemd128(5444605) ripemd128(544462) ripemd128(544480) ripemd128(5444850) ripemd128(544497) ripemd128(5444t7f7) ripemd128(5445) ripemd128(5445012) ripemd128(54450544) ripemd128(544514) ripemd128(5445303) ripemd128(5445322) ripemd128(54454) ripemd128(5445424) ripemd128(544544) ripemd128(544545) ripemd128(544554) ripemd128(54455445) ripemd128(544555) ripemd128(5445552) ripemd128(54456262) ripemd128(54456569q) ripemd128(544566) ripemd128(544582627) ripemd128(544585) ripemd128(544594) ripemd128(5445973) ripemd128(5445maci) ripemd128(5446) ripemd128(5446045) ripemd128(54460818) ripemd128(54461575) ripemd128(5446162) ripemd128(544625678) ripemd128(544635) ripemd128(5446414) ripemd128(544654) ripemd128(54465446) ripemd128(544667) ripemd128(544681) ripemd128(5446814) ripemd128(5446863) ripemd128(5446bmw) ripemd128(5447) ripemd128(544700) ripemd128(544705) ripemd128(5447155) ripemd128(5447157) ripemd128(544734) ripemd128(544742) ripemd128(54475447) ripemd128(5447765) ripemd128(544777) ripemd128(544789301) ripemd128(54479) ripemd128(5447cats) ripemd128(5448) ripemd128(5448058) ripemd128(5448212) ripemd128(5448269) ripemd128(54485448) ripemd128(544860) ripemd128(544886) ripemd128(5449) ripemd128(544900) ripemd128(544904511) ripemd128(5449162) ripemd128(5449259) ripemd128(544930251) ripemd128(54495449) ripemd128(544970717) ripemd128(544973) ripemd128(5449859) ripemd128(544999) ripemd128(5449zenek) ripemd128(544ugm) ripemd128(5450) ripemd128(545012) ripemd128(545045334) ripemd128(545053qwe) ripemd128(54505450) ripemd128(5450559) ripemd128(5450655634) ripemd128(545095a3) ripemd128(5451) ripemd128(545100) ripemd128(545111) ripemd128(545117) ripemd128(545152) ripemd128(54518746206179u) ripemd128(5452) ripemd128(5452080kd) ripemd128(5452095) ripemd128(545213) ripemd128(545245) ripemd128(545248) ripemd128(545250) ripemd128(545252) ripemd128(545254) ripemd128(54525452) ripemd128(54525817) ripemd128(5453) ripemd128(545300) ripemd128(5453077) ripemd128(54532395) ripemd128(54532919) ripemd128(5453485) ripemd128(545352) ripemd128(54535251) ripemd128(54535453) ripemd128(5453656) ripemd128(54537778) ripemd128(545380) ripemd128(5453destiny) ripemd128(5454) ripemd128(545400) ripemd128(5454084) ripemd128(54541040) ripemd128(5454105) ripemd128(5454113) ripemd128(545413003) ripemd128(54541485) ripemd128(545421) ripemd128(545424) ripemd128(545426) ripemd128(5454334) ripemd128(545441) ripemd128(545442) ripemd128(54545) ripemd128(545454) ripemd128(54545425) ripemd128(5454545) ripemd128(54545454) ripemd128(5454545454) ripemd128(545454z) ripemd128(54545512) ripemd128(545455cr) ripemd128(545456) ripemd128(54545656) ripemd128(54545846k) ripemd128(54545854) ripemd128(545465) ripemd128(545468) ripemd128(54547698) ripemd128(545477) ripemd128(545489) ripemd128(545498) ripemd128(5454step) ripemd128(5455) ripemd128(545500) ripemd128(54550960) ripemd128(5455248) ripemd128(545531) ripemd128(5455318) ripemd128(54553183) ripemd128(545531x) ripemd128(5455332) ripemd128(54554205) ripemd128(545545) ripemd128(54555455) ripemd128(5455555) ripemd128(545556) ripemd128(545565) ripemd128(545569) ripemd128(54556pOSter) ripemd128(5455797) ripemd128(5455880) ripemd128(5456) ripemd128(545603) ripemd128(545614) ripemd128(545626) ripemd128(5456303) ripemd128(5456372) ripemd128(54564217) ripemd128(545645) ripemd128(5456456) ripemd128(545652) ripemd128(545652585) ripemd128(54565267msneteli) ripemd128(54565357) ripemd128(545654) ripemd128(54565456) ripemd128(545658) ripemd128(54565852) ripemd128(5456654566) ripemd128(545677) ripemd128(545682) ripemd128(545697) ripemd128(5456cc) ripemd128(5457) ripemd128(545711) ripemd128(545747) ripemd128(545754) ripemd128(54575457) ripemd128(545762) ripemd128(54577354577) ripemd128(5457838) ripemd128(545788) ripemd128(5457949) ripemd128(5458) ripemd128(545809) ripemd128(5458096qwerty) ripemd128(545844) ripemd128(545845) ripemd128(545854) ripemd128(54585458) ripemd128(545856123) ripemd128(54585652) ripemd128(545856525) ripemd128(54586636) ripemd128(545881) ripemd128(5459) ripemd128(545906) ripemd128(545907) ripemd128(5459113) ripemd128(545942) ripemd128(54595459) ripemd128(54597658) ripemd128(5459st) ripemd128(545ettvy) ripemd128(5460) ripemd128(546000) ripemd128(5460183) ripemd128(54607) ripemd128(546082) ripemd128(546086) ripemd128(5461) ripemd128(5461020) ripemd128(546124) ripemd128(546125) ripemd128(546126) ripemd128(546147) ripemd128(5461546) ripemd128(54615461) ripemd128(5461635) ripemd128(5461753) ripemd128(5461ab) ripemd128(5462) ripemd128(54620) ripemd128(546200) ripemd128(546213) ripemd128(546222) ripemd128(546231) ripemd128(5462356) ripemd128(546252) ripemd128(546252A) ripemd128(54625462) ripemd128(546259) ripemd128(5462642) ripemd128(54626481) ripemd128(5462656) ripemd128(5462843) ripemd128(5462949) ripemd128(546296561947) ripemd128(5463) ripemd128(546300) ripemd128(54632) ripemd128(546321) ripemd128(54632645) ripemd128(546341) ripemd128(54634566) ripemd128(546346) ripemd128(546349) ripemd128(54635422val1992) ripemd128(54635463) ripemd128(546356) ripemd128(546372) ripemd128(5463724) ripemd128(5463728) ripemd128(54637281) ripemd128(546372819) ripemd128(54637824t) ripemd128(5463az) ripemd128(5464) ripemd128(54645) ripemd128(54645368) ripemd128(546454) ripemd128(54645464) ripemd128(546456) ripemd128(54645645645) ripemd128(546459) ripemd128(546474) ripemd128(54647gdf) ripemd128(546498) ripemd128(5465) ripemd128(54652) ripemd128(546523) ripemd128(54654) ripemd128(546545) ripemd128(546546) ripemd128(546546546) ripemd128(5465467275) ripemd128(54655465) ripemd128(5465549) ripemd128(54658691) ripemd128(5465960) ripemd128(5466) ripemd128(546603) ripemd128(546606) ripemd128(5466368) ripemd128(546639) ripemd128(546645) ripemd128(54665433221) ripemd128(54665466) ripemd128(546666) ripemd128(546671) ripemd128(546698800) ripemd128(5467) ripemd128(546739) ripemd128(546749) ripemd128(5467540) ripemd128(54675467) ripemd128(5467683) ripemd128(546777) ripemd128(54677777) ripemd128(5467841k) ripemd128(5467857) ripemd128(546789) ripemd128(5467906) ripemd128(546798) ripemd128(5468) ripemd128(54680) ripemd128(54681734) ripemd128(54682) ripemd128(546820) ripemd128(546822) ripemd128(5468380) ripemd128(546858963) ripemd128(546861) ripemd128(546865) ripemd128(546879) ripemd128(546879213) ripemd128(54689) ripemd128(546895) ripemd128(5469) ripemd128(546900) ripemd128(546912) ripemd128(54695469) ripemd128(546969) ripemd128(546985) ripemd128(5469957) ripemd128(5469regt) ripemd128(546dag) ripemd128(5470) ripemd128(547000) ripemd128(5470006) ripemd128(5470039) ripemd128(547054) ripemd128(54705470) ripemd128(54706405) ripemd128(5470688) ripemd128(5470848) ripemd128(5471) ripemd128(547100) ripemd128(5471159) ripemd128(5471248) ripemd128(547132) ripemd128(54715471) ripemd128(54717263) ripemd128(5471886) ripemd128(5471901) ripemd128(54719611a) ripemd128(5471973) ripemd128(5472) ripemd128(5472109) ripemd128(547211) ripemd128(547212) ripemd128(547222) ripemd128(5472239) ripemd128(547229) ripemd128(547244) ripemd128(54725) ripemd128(54725472) ripemd128(54727) ripemd128(54728479) ripemd128(547289) ripemd128(547290) ripemd128(547299) ripemd128(5473) ripemd128(5473133) ripemd128(547346) ripemd128(54734701) ripemd128(54735473) ripemd128(547360) ripemd128(5473688) ripemd128(547382) ripemd128(5473883mal) ripemd128(547392) ripemd128(54739e) ripemd128(5474) ripemd128(54743865Xa) ripemd128(54744) ripemd128(5474547) ripemd128(54745474) ripemd128(547455) ripemd128(547455034) ripemd128(5474563) ripemd128(547482) ripemd128(547490) ripemd128(5475) ripemd128(54751320373) ripemd128(547517N) ripemd128(5475194) ripemd128(547522) ripemd128(547542) ripemd128(547546) ripemd128(547555) ripemd128(547581) ripemd128(547588) ripemd128(5476) ripemd128(547600) ripemd128(547601) ripemd128(5476223) ripemd128(547623) ripemd128(547626) ripemd128(547632) ripemd128(5476383) ripemd128(54765476) ripemd128(5476610) ripemd128(54768754t) ripemd128(5477) ripemd128(547701) ripemd128(547714) ripemd128(54773) ripemd128(54774) ripemd128(547744) ripemd128(547754) ripemd128(5477540) ripemd128(54775477) ripemd128(547777) ripemd128(5477kell) ripemd128(5478) ripemd128(54781ad) ripemd128(54783) ripemd128(54785478) ripemd128(547879) ripemd128(5478950) ripemd128(547896) ripemd128(547896321) ripemd128(5478963210) ripemd128(5478973) ripemd128(547899) ripemd128(5479) ripemd128(547900) ripemd128(5479279) ripemd128(54795479) ripemd128(5479668) ripemd128(54798) ripemd128(547980) ripemd128(547ya9gb) ripemd128(5480) ripemd128(548000) ripemd128(54800282) ripemd128(5480373) ripemd128(5480386) ripemd128(54804) ripemd128(5481) ripemd128(5481141) ripemd128(5481159) ripemd128(54813) ripemd128(548133) ripemd128(5481615) ripemd128(54817) ripemd128(5481718) ripemd128(548172) ripemd128(5481782) ripemd128(548199) ripemd128(5482) ripemd128(5482022) ripemd128(548207) ripemd128(54821234) ripemd128(5482173) ripemd128(548218) ripemd128(548219) ripemd128(5482200) ripemd128(548235) ripemd128(54825) ripemd128(5482542) ripemd128(54825482) ripemd128(5482683) ripemd128(54826838) ripemd128(5482823) ripemd128(5482839) ripemd128(5482vbif) ripemd128(5483) ripemd128(548320) ripemd128(548326) ripemd128(548395) ripemd128(5483V) ripemd128(5484) ripemd128(548456) ripemd128(548467) ripemd128(548486) ripemd128(548488) ripemd128(5485) ripemd128(548525) ripemd128(548548) ripemd128(548575) ripemd128(548577) ripemd128(548596) ripemd128(5486) ripemd128(548621) ripemd128(548621793) ripemd128(548625) ripemd128(548627913) ripemd128(5486315308) ripemd128(54865486) ripemd128(548667) ripemd128(5487) ripemd128(54871154) ripemd128(54875487) ripemd128(548755) ripemd128(5487g) ripemd128(5487gj) ripemd128(5488) ripemd128(548837) ripemd128(54885488) ripemd128(548887) ripemd128(548887q) ripemd128(5488fn) ripemd128(5489) ripemd128(548900) ripemd128(5489140) ripemd128(548935) ripemd128(54893662) ripemd128(548947) ripemd128(5489502) ripemd128(5489548) ripemd128(5489661) ripemd128(548973) ripemd128(548991) ripemd128(548baSVQO1zM6) ripemd128(548xhvPYehm3) ripemd128(5490) ripemd128(549011) ripemd128(5490307) ripemd128(549045) ripemd128(549065) ripemd128(549069) ripemd128(549081) ripemd128(5491) ripemd128(54911) ripemd128(549136) ripemd128(54915491) ripemd128(549159) ripemd128(5491shas) ripemd128(5492) ripemd128(549207) ripemd128(5492337) ripemd128(5492351) ripemd128(54925492) ripemd128(549256) ripemd128(549277) ripemd128(549294) ripemd128(5493) ripemd128(549300) ripemd128(54932) ripemd128(54934) ripemd128(5493530) ripemd128(54935493) ripemd128(54937) ripemd128(5493963) ripemd128(5493matt) ripemd128(5494) ripemd128(549401) ripemd128(5494017) ripemd128(549422) ripemd128(549433) ripemd128(54945494) ripemd128(5494762) ripemd128(5494827) ripemd128(5495) ripemd128(549537) ripemd128(549549) ripemd128(54955495) ripemd128(549560) ripemd128(549573517) ripemd128(5495751) ripemd128(5495768) ripemd128(549582) ripemd128(5495990) ripemd128(5495bstf) ripemd128(5496) ripemd128(5496031) ripemd128(5496058) ripemd128(5496468) ripemd128(54965) ripemd128(54965526) ripemd128(549661) ripemd128(549687) ripemd128(549687Aa) ripemd128(5496la) ripemd128(5497) ripemd128(549711) ripemd128(5497409) ripemd128(54975497) ripemd128(5497587) ripemd128(5497598) ripemd128(5497vern) ripemd128(5498) ripemd128(54981) ripemd128(54983) ripemd128(549830271327stas) ripemd128(54984949) ripemd128(549872) ripemd128(5498oleg) ripemd128(5499) ripemd128(549900) ripemd128(5499262) ripemd128(54995499) ripemd128(5499701) ripemd128(549974) ripemd128(5499915) ripemd128(549n7A6W01rr6) ripemd128(54abx9) ripemd128(54AUgsSHU1WRw) ripemd128(54b40p) ripemd128(54babe74) ripemd128(54bAZ) ripemd128(54bears) ripemd128(54Beo7tuiPIow) ripemd128(54bill) ripemd128(54BLscIj0bSXE) ripemd128(54Bwlhxow3CsU) ripemd128(54carlos) ripemd128(54cheste) ripemd128(54chevy) ripemd128(54CHEvy) ripemd128(54cntLGXmy02c) ripemd128(54colt45) ripemd128(54cymrv) ripemd128(54cZE) ripemd128(54d0e) ripemd128(54d0e26) ripemd128(54DQ) ripemd128(54dww2a) ripemd128(54eider) ripemd128(54erdf) ripemd128(54ford) ripemd128(54fVEVcPq49Zw) ripemd128(54gfd65) ripemd128(54gfp2SwK4dH2) ripemd128(54gjtdfd) ripemd128(54gv76) ripemd128(54gv768) ripemd128(54h3n) ripemd128(54hht9) ripemd128(54inBaNCiA7pw) ripemd128(54jBUattcps1w) ripemd128(54jleech) ripemd128(54jouf) ripemd128(54kTMowz) ripemd128(54L22GEY) ripemd128(54L64s5K) ripemd128(54lapuly) ripemd128(54lPlKVbjjoFQ) ripemd128(54luke54) ripemd128(54mom54) ripemd128(54mont56) ripemd128(54morbya) ripemd128(54mz76cn33a) ripemd128(54national) ripemd128(54nv23ReBX8kM) ripemd128(54o841964g) ripemd128(54oNw0qUHSOJ) ripemd128(54R1gYWd) ripemd128(54rattler) ripemd128(54RDH) ripemd128(54RWa) ripemd128(54sPgHs8sXyUk) ripemd128(54spYADjAErFg) ripemd128(54STANG) ripemd128(54T9e9) ripemd128(54tr21) ripemd128(54VO9wg5O) ripemd128(54vpbotr) ripemd128(54vQiEcqDLpYc) ripemd128(54vve56) ripemd128(54VYlvUHx7crM) ripemd128(54wSzzmonKwSs) ripemd128(54xe131) ripemd128(54xKpdTH) ripemd128(54xmax) ripemd128(54Y47a) ripemd128(54yu5ra) ripemd128(54zhgt) ripemd128(5500) ripemd128(55000) ripemd128(550000)

8770

Golang binaries are a bit hard to analyze but there are some tricks to locate the things and view what is doing the code.

Is possible to list all the go files compiled in the binary even in an striped binaries, in this case we have only one file gohello.go this is a good clue to guess what is doing the program.

On stripped binaries the runtime functions are not resolved so is more difficult to locate the user algorithms:

If we start from the entry point, we will found this mess:

The golang string initialization are encoded and is not displayed on the strings window.

How to locate main? if its not stripped just bp on [package name].main for example bp main.main, (you can locate the package-name searching strings with ".main")

And here is our main.main:

The code is:

So in a stripped binary we cant find the string "hello world" neither the initialization 0x1337 nor the comparator 0x1337, all this is obfuscated.

The initialization sequence is:

The procedure for locating main.main in stripped binaries is:

1. Click on the entry point and locate the runtime.mainPC pointer:

2. click on runtime.main function (LAB_0042B030):

3. locate the main.main call after the zero ifs:

4. click on it and here is the main:

The runtime is not obvious for example the fmt.Scanf() call perform several internal calls until reach the syscall, and in a stripped binary there are no function names.

In order to identify the functions one option is compile another binary with symbols and make function fingerprinting.

In Ghidra we have the script golang_renamer.py which is very useful:

After applying this plugin the main looks like more clear:

This script is an example of function fingerprinting, in this case all the opcodes are included on the crc hashing:

# This script fingerprints the functions
#@author: sha0coder
#@category fingerprinting

print "Fingerprinting..."

import zlib


# loop through program functions
function = getFirstFunction()
while function is not None:
    name = str(function.getName())
    entry = function.getEntryPoint()
    body = function.getBody()
    addresses = body.getAddresses(True)

    if not addresses.hasNext():
        # empty function
        continue 

    ins = getInstructionAt(body.getMinAddress())
    opcodes = ''
    while ins and ins.getMinAddress() <= body.getMaxAddress():
        for b in ins.bytes:
            opcodes += chr(b & 0xff)
        ins = getInstructionAfter(ins)
    
    
    crchash = zlib.crc32(opcodes) & 0xffffffff

    print name, hex(crchash)


    function = getFunctionAfter(function)

More articles

8770

What is keylogger?

How does hacker use keylogger to hack social media account and steal important data for money extortion and many uses of keylogger ?

Types of keylogger?

===================

Keylogger is a tool that hacker use to monitor and record the keystroke you made on your keyboard. Keylogger is the action of recording the keys struck on a keyboard and it has capability to record every keystroke made on that system as well as monitor screen recording also. This is the oldest forms of malware.

Sometimes it is called a keystroke logger or system monitor is a type of surveillance technology used to monitor and record each keystroke type a specific computer's keyboard. It is also available for use on smartphones such as Apple,I-phone and Android devices.

A keylogger can record instant messages,email and capture any information you type at any time using your keyboard,including usernames password of your social media ac and personal identifying pin etc thats the reason some hacker use it to hack social media account for money extortion.

======================

Use of keylogger are as follows-

1-Employers to observe employee's computer activity.

2-Attacker / Hacker used for hacking some crucial data of any organisation for money extortion.

3-Parental Control is use to supervise their children's internet usage and check to control the browsing history of their child.

4-Criminals use keylogger to steal personal or financial information such as banking details credit card details etc and then which they will sell and earn a good profit.

5-Spouse/Gf tracking-if you are facing this issue that your Spouse or Gf is cheating on you then you can install a keylogger on her cell phone to monitor her activities over the internet whatever you want such as check Whats app, facebook and cell phone texts messages etc .

=====================

Basically there are two types of keylogger either the software or hardware but the most common types of keylogger across both these are as follows-

1-API based keylogger

2-Form Grabbing Based Keylogger

3-Kernal Based Keylogger

4-Acoustic Keylogger ETC .

====================

How to detect keylogger on a system?

An antikeylogger is a piece of software specially designed to detect it on a computer.

Sometype of keylogger are easily detected and removed by the best antivirus software.

You can view the task manager(list of current programs) on a windows PC by Ctrl+Alt+Del to detect it.

Use of any software to perform any illegal activity is a crime, Do at your own risk.

More articles

8770

When the Kerberos elevation of privilege (CVE-2014-6324 / MS14-068) vulnerability has been made public, the remediation paragraph of the following blog post made some waves:
http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx

"The only way a domain compromise can be remediated with a high level of certainty is a complete rebuild of the domain."

Personally, I agree with this, but .... But whether this is the real solution, I'm not sure. And the same applies to compromised computers. When it has been identified that malware was able to run on the computer (e.g. scheduled scan found the malware), there is no easy way to determine with 100% certainty that there is no rootkit on the computer. Thus rebuilding the computer might be a good thing to consider. For paranoids, use new hardware ;)

But rebuilding a single workstation and rebuilding a whole domain is not on the same complexity level. Rebuilding a domain can take weeks or months (or years, which will never happen, as the business will close before that).

There are countless documented methods to backdoor a computer, but I have never seen a post where someone collects all the methods to backdoor a domain. In the following, I will refer to domain admin, but in reality, I mean Domain Admins, Enterprise Admins, and Schema Admins.

Ways to backdoor a domain

So here you go, an incomplete list to backdoor a domain:

Create a new domain admin user. Easy to do, easy to detect, easy to remediate
Dump password hashes. The attacker can either crack those or just pass-the-hash. Since KB2871997, pass-the-hash might be trickier (https://technet.microsoft.com/library/security/2871997), but not impossible. Easy to do, hard to detect, hard to remediate - just think about service user passwords. And during remediation, consider all passwords compromised, even strong ones.
Logon scripts - modify the logon scripts and add something malicious in it. Almost anything detailed in this post can be added :D
Use an already available account, and add domain admin privileges to that. Reset its password. Mess with current group memberships - e.g. http://www.exploit-db.com/papers/17167/
Backdoor any workstation where domain admins login. While remediating workstations, don't forget to clean the roaming profile. The type of backdoor can use different forms: malware, local admin, password (hidden admin with 500 RID), sticky keys, etc.
Backdoor any domain controller server. For advanced attacks, see Skeleton keys
Backdoor files on network shares which are commonly used by domain admins by adding malware to commonly used executables - Backdoor factory
Change ownership/permissions on AD partitions - if you have particular details on how to do this specifically, please comment
Create a new domain user. Hide admin privileges with SID history. Easy to do, hard to detect, easy to remediate - check Mimikatz experimental for addsid
Golden tickets - easy to do, hard to detect, medium remediation
Silver tickets - easy to do, hard to detect, medium/hard remediation
Backdoor workstations/servers via group policy

HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ CurrentVersion\ RunOnce,
scheduled tasks (run task 2 years later),
sticky-keys with debug

Backdoor patch management tool, see slides here

[Update 2017.01.10]

Assign SeEnableDelegationPrivilege to a user
Directory Service Restore Mode (DSRM)
Malicious Security Support Provider (SSP)
DSRMv2
AdminSDHolder
Edit GPO

Other tricks

The following list does not fit in the previous "instant admin" tips, but still, it can make the attackers life easier if their primary foothold has been disabled:

Backdoor recent backups - and when the backdoor is needed, destroy the files, so the files will be restored from the backdoored backup
Backdoor the Exchange server - get a copy of emails
Backdoor workstation/server golden image
Change permission of logon scripts to allow modification later
Place malicious symlinks to file shares, collect hashes via SMB auth tries on specified IP address, grab password hashes later
Backdoor remote admin management e.g. HP iLO - e.g. create new user or steal current password
Backdoor files e.g. on shares to use in SMB relay
Backdoor source code of in-house-developed software
Use any type of sniffed or reused passwords in new attacks, e.g. network admin, firewall admin, VPN admin, AV admin, etc.
Change the content of the proxy pac file (change browser configuration if necessary), including special exception(s) for a chosen domain(s) to use proxy on malicious IP. Redirect the traffic, enforce authentication, grab password hashes, ???, profit.
Create high privileged users in applications running with high privileges, e.g. MSSQL, Tomcat, and own the machine, impersonate users, grab their credentials, etc. The typical pentest path made easy.
Remove patches from servers, change patch policy not to install those patches.
Steal Windows root/intermediate CA keys
Weaken AD security by changing group policy (e.g. re-enabling LM-hashes)

Update [2015-09-27]: I found this great presentation from Jakob Heidelberg. It mentions (at least) the following techniques, it is worth to check these:

Microsoft Local Administrator Password Solution
Enroll virtual smart card certificates for domain admins

Forensics

If you have been chosen to remediate a network where attackers gained domain admin privileges, well, you have a lot of things to look for :)

I can recommend two tools which can help you during your investigation:

Lessons learned

But guess what, not all of these problems are solved by rebuilding the AD. One has to rebuild all the computers from scratch as well. Which seems quite impossible. When someone is creating a new AD, it is impossible not to migrate some configuration/data/files from the old domain. And whenever this happens, there is a risk that the new AD will be backdoored as well.

Ok, we are doomed, but what can we do? I recommend proper log analysis, analyze trends, and detect strange patterns in your network. Better spend money on these, than on the domain rebuild. And when you find something, do a proper incident response. And good luck!

Ps: Thanks to Andrew, EQ, and Tileo for adding new ideas to this post.

Check out the host backdooring post as well! :)