A858DE45F56D9BC9 archive

201302151559 18lmzz

explained decrypted filler

seed 640

Metadata

Post ID
18lmzz
Title
201302151559 → 2013-02-15 15:59 on A858's clock
Posted (UTC)
2013-02-15 20:59:58
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,856 hex characters · 1,928 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302151559) = 6202c954b9d432a24cf31d4086a7ec47 (name+title)
GUIDs
60
Filler GUID seed
new Random(640).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
3 · predicted N = 60 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: probable

From the post to its content

As posted (encrypted)

45B6ECB60F605EC6 26D0C599925525A2 D6D9A2E912257AB3 3FD111376B4384E9 C453E36C22B7FBD6 3823EB9AE07B15F9 C5D57197EF22C896 08B7BDA4AD947B19 29457CD2DA285DB9 0CF3E717ABE87CC0 D87EFA4C0C9A1907 9C38748DB5217867 B01FB9220BC6470E D1D1BF5A81A727F3 6E0CDB8753058DD9 5CBD623C1598D508 23FED75633C89DCD B7B0754EB7036F42 8D51C538A6F2E08B 84EAE85E9DEE09AA 8A6395F31E750E02 CF3EE19206BC2F9C 47FF56A12813B5BA E753BBB705DD129E 550169E3B5B7AAA6 3BEA1933B603053C 1086679CBEA3390F 8EEAC7310AF1628F 3D74A33341A2FF8D D333519E2F173979 838D77CEF07FB551 AF9C5853AACB0186 C182901AB694BB73 FAAB5CB73DE35EB3 EA4CD29A8C5D7A1B BAD0A5800871DB3D 13D11735F6F0A7D2 CBCEE63AC9D59E10 B27208D865D47E0D 51492CDBB9D6EBFE CAF56AE9106D6312 8EA4D234CD3B1D4D BD573E83E7FF1379 0EBC8ECED18EC010 524FB2BA929D31B5 B2BE8F54C0782B36 C3A118F6EB052E29 4EE79FD7EB7D2785 BEF1AFC69A7B5159 FB535CCAF38F378D 59E6630147C763FB D1C81D180E17AD33 4FE283EE57C5BB6A 46368394F0B3DB5C 5A216D13CB0A435D 41FF24E79A1C1D62 A699BD3E5DFFF738 D0FE74B193D5531C 0C7DC9C696096E02 522CBA9A218F9282 BEC8CDE4C096311E C5A8AB51B199EF82 622DB9CCEDA6C72B 499E5E7BD430E40E 11CDB1689CD7838C 52BBE2427DEC1344 DB28CCAA6F473636 1A764F6BA770B96E 519F30B25C6B4CAF 28889BF2E0379DB5 7D171FC7827CFC5C F1813920ECF54604 4395D804C6B729B3 5DD13CC30FC8478A 0034E3DAC7E46A5B 72F75B0B18248FA2 D3ADE02E8535E226 8AF75AA9384B4397 443713DC2B9BECB8 CEA78DCDEEFA48ED 7DE573DBB68CF0EA 82AA78F068C58270 5D31238C9DD10380 E76014D4ABBB4EC4 F5718E34C881C974 2D652A51749A75F7 9F97082C4528819D 5AFEE18A12CBE306 CBBA2A724773F95F B507E16FCC759585 0C51ADEB6A258FC1 69651998A48AE43F 38B7110E386DB3BC 37C132CE116C8C2D 7DDF5D3DB4C1A703 9D7C929A8C4AA257 E3ABFE354576D049 8C642813A4BD2CE4 6EB60372CA819153 7D34F01467A4EA0C 4B9190375BB7DFF4 04666F8737A8A0E1 2E16C9CF88E88318 6D27022F7C14B233 BDBC03CD8E94BA0D 2A55A56C3014C046 C0AC3759BDE8C948 56B78E11817AAAB4 1F7A98D8FA8FD6D9 5E0946BE11194752 72E9D70DA4F34998 A1CE061B479874F5 61302AD1026363E9 A1A85EE225DAD461 F1449E0A91A292DC C743CE6F64533DA5 A612F1B4E8FF49FE B4C3E933DAF3D742 452AAFD592406CBA 6A9F21C47FBDF241 67AB7AC393A232F4 5EECBEF15FAD72F7 63324DFC8D5651AF C4589E66B0997080 147CB943967EFD2A DEC928E259CB4FFE D549EAEFBE35E4BC 3C36C6C48247B7BD 4DE5C3C044BDAFFD F74FA02DD1D72424 1EA0F9ED5CAED0CE 284245EE99FEB144 5C2311CCA2E8D8EE F0A3483905BD0C13 BE24134959AAEBF4 80BD874110CAAEBE 00E3BEC5342FFCC1 FFC0D9283CA15102 D1B935C30B2EAD18 E7FAED6DB753E3C2 61048691FED2514A 7142A01AF036DE1C 296B54952DA2399E 21A2300D65C15199 623C3E2A318855D7 97F45B47D1CC7629 41470DC141D6AB55 164E21B3D64B9A6F 7E249597B7FCA4CD 5AE0DD1C82B08006 90E9DF827EC3D7C2 672EED40C3CBCFF9 F6C65EF5A403A460 23FB9EBEDC1A0DBC AD043B9027AEB2D7 1FA11BF7A5ECB475 90766C65B9D5D6E9 0902D6CAAAB30E89 46E717EE6DB2ECCB 3B52732C5C4D44BF D3CC305EB0BC06B0 B03B62E37D38767E AE1AE1DFDB35BDB8 62097DCEBC9582A3 0F6A217C6A144F8B 4AA634E56788F1A9 9CEF9D106B3239DC 71541D58162977B1 E481D335C7928807 C787564AFA670FC3 4697B894C90AD129 697E268EDBEC0607 F2828A8C48F091D3 B41D66008D581AC2 AAE6B7544ECBB322 B05354BBA2C05C99 59B8C884127DC063 264E90C89DC1D144 43900CAD4CFA206B E51CF91715520CBA 5AB5DE93DF15F44E BD4E12B20FC1006A 1180818926F1BC2C 2E7A61F43E28938B BDE221F140CEE79D A5E85EACCA3B703A 80DD203DDDC5A71B 31E460116F544764 0DC1653CCEA9CEBB 98B393CEE9C4BD0C 91A46984025F99C4 48B33442D3077AE1 B8E18C4EED8E4DE4 ABF026A8CA3AC9E5 B7EC123A100D1C20 CB6950682F3CC5C2 6986667D50F9A853 ADF0E38AD88D12CA 27A100E16BE6D4C8 5EEFD0E33B471D97 7AE5B448A410DE08 BA23AA860A22F806 87B656BDE34419DA 42058AC0A94C2D2E 2DF77CC7DD56C321 E71765074EEA14A6 ACC89A118EA9EF28 095D64206AD91B4A 1DA163FFA939E721 93A4477212CE771A A1C6AC7A9FAE12A8 0942B32B51204F4D FD9BFD04F995FF53 52A337552F8A10EA 1B33985F9B625C0D A0B9CF8C172FFE59 0681878146503C76 E84E1455C7123DC9 EEBD39C466D3F2B3 CF05A7291047D528 045BC4631E49D872 3F39E5B4F36997C0 704D50474B3D35BD 22B23F66FD622807 EDAA5EBBC8D9C2E0 97A7A215A15A2A32 C73F2181C99CD9AB 9EF9323FABA01919 0B9AAD330F6A8616 990A3354124F515B DC32570C22370065 5DE03B418DE7CCA6 1CCDAA535E11A29B 6C4ED6C155A21989 063A7C6E0260C83A A29493FFE5FF0585 28EC0D8744FC012B 8A544988461343F5 CA21244006BB2F8D FB66CDE2AF911B88 5C6038F704480088
  • Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302151559 (name+title). Key = MD5(password) = 6202c954b9d432a24cf31d4086a7ec47, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0594e5ff-2b73-052f-99b6-c7eff91ac2a8
  2 45a63570-514a-52d5-857b-701bcc8b2659
  3 f86af0f5-963d-1eed-bd7d-6ae90bc53971
  4 414ae178-307c-1763-9e2a-191b0183cece
  5 bda6880f-b7c3-1d9b-ac14-5aea3252833a
  6 87831079-3b19-75fd-9e2a-08a050ae6ade
  7 79c98aef-23e9-55da-ab11-a325e2de9ab7
  8 556bad4e-c7fc-4fff-9a06-e77972890878
  9 57427a2a-8068-15af-a8fb-9e714af9fd82
 10 24d1fb40-2492-2d6f-adc8-9df1f0999cd6
 11 5c6e85f6-8626-74da-a74a-7f76c475cb96
 12 4c40c27b-804a-135d-900c-ef9a6abae007
 13 f964d414-e283-53dc-bb56-3d6acba00af8
 14 69ba72e3-b774-3283-acd0-6ef38e674ef6
 15 5fd06483-10f4-834e-a5b0-5be0bcb4752b
 16 56c20dfe-0c11-6661-a5a2-673cb96f6aac
 17 198cdfaa-d25d-8afc-b4bb-4f96a489b4fe
 18 c293e4a3-dc36-7bd9-925c-5adcd326a650
 19 5a160bf5-ebb1-08b6-953f-43619c60174e
 20 cc222d43-cc35-124f-adad-dd9688fa0076
 21 de68bec9-69de-770c-9c65-c954b45aa443
 22 a9dbbe44-bb9d-791d-b3e4-adf1dd0dc15d
 23 4956634d-66e3-19d4-8033-9487fb009bd5
 24 dd7bd2b6-11d5-5163-af72-5c6597f25926
 25 923d33c5-b1b5-3a7d-a3ed-aaf8203b2601
 26 e8c16f0e-c81d-1e35-95e3-df09208e6236
 27 eb617e42-a415-1eeb-aa0e-90fcf1a78758
 28 f06c2c8e-1973-2aa6-b8db-9d45b8c64cbf
 29 a7801d9d-1b01-222a-982f-369182688eca
 30 e510c65c-7f1e-4062-b448-09627b46b88c
 31 cd41ca46-1615-4d70-a53e-e428b871d76f
 32 3420678b-821f-0251-b291-4f2c398639f6
 33 98f26d63-7117-5d01-bda2-4dbcf4e49cc8
 34 33cf7e66-0d2a-01d6-bb65-4dff9877cf23
 35 905fc8e1-9451-1e10-a64e-7142e71ed847
 36 4da65ed3-ef87-44ca-b0fd-63d9e618c06d
 37 139b7e90-6849-1a84-8dd7-86d17b087867
 38 8014d5c0-a5cc-40a9-bb91-aef4576127ac
 39 097fd3bb-e361-8284-a912-ec263e5b5593
 40 39192097-0da2-39a1-ba5b-40fd2280141d
 41 af17e028-7e58-7a86-b6ac-e9238787f430
 42 3bb1fb7a-d539-43c3-a93d-41e2e8bf04ab
 43 8ddf06f7-1d2a-24a0-8cf5-09b4583b25f4
 44 cc54097d-8eba-6c27-80f3-ee47cc105b9a
 45 60d72496-6420-3a34-97d5-2b544dac9748
 46 1f2ac343-1707-38a8-b31d-b912d251af67
 47 4f704709-88a5-0b0c-9e4c-01644c07bce8
 48 c98407f7-8107-4686-b785-b423edf160eb
 49 ed7f8a3f-48e5-670c-918d-f31830af2de6
 50 da75a7be-3791-7545-9e91-1416400e26dd
 51 56c32edf-2519-612c-b6f3-1de2ac7681d3
 52 740bb5dc-ec71-1a2a-82cc-417a0943d750
 53 773e8f24-4d1f-6b79-8bca-f50df35552f7
 54 a94598d4-8c83-78e3-8725-c06a2e509b55
 55 6702e164-ebf6-39be-99ca-0737ae98e800
 56 cae5cb13-ac3f-1473-bafa-25f764363213
 57 97e43c51-f9e7-4b88-8ef6-418215a8ab86
 58 48096995-6c8d-4f97-ba4c-650d39bf02d0
 59 5a86c9d8-8ac3-6437-ba3a-3c62d7583b64
 60 9dd1a207-eec1-8712-9a5b-5ea0d86936d8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 051117541271538687017715311224405014148374263304676167314468. Exactly this sequence comes out of new Random(640).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs