I noticed that the Corporate SKU of CSME v18.104.22.16899 has certain wrong SHA-256 hashes at partitions "WCOD with Instance ID 0x24F3" and "WCOD with Instance ID 0x24FD". Specifically, the hashes are wrong for modules "mu_d0d3", "mu_init" and "umac_d0". It seems that the actual module data/code are identical those found at the Corporate SKU of CSME v22.214.171.12490 and in that firmware, their hashes also check out. Since the RSA Signatures of the two WCOD partitions at v126.96.36.19999 do check out, either the modules are proper but their hashes are wrong or new modules were inserted but you forgot to update their hashes.
I understand that Corporate SKU of CSME v188.8.131.5299 has certain wrong hashes.
Let me apologize for any inconvenience this issue may be causing to you.
I recommend contacting our developers so they can assist you better with CSME. This link will give you their contact information https://software.intel.com/en-us/support