WCry ransomware explodes in massive distribution wave

 In APT, Backdoor, Botnet, Exploits, Malware, News, Ransomware, Threat Intelligence

The ransomware is using an NSA exploit leaked by The Shadow Brokers, and has made tens of thousands of victims worldwide, including the Russian Interior Ministry, Chinese universities, Hungarian telcos, FedEx branches, and more. 

A ransomware outbreak is wreaking havoc all over the world, but especially in Spain, where Telefonica — one of the country’s biggest telecommunications companies — has fallen victim, and its IT staff is desperately telling employees to shut down computers and VPN connections in order to limit the ransomware’s reach.

Version 1.0 of this ransomware was discovered by Malwarebytes researcher S!Ri on February 10 and then spotted in a brief campaign on March 25 by GData security researcher Karsten Hahn.

Version 2.0 was detected for the first time around four hours ago by independent security researcher MalwareHunter. The security researcher says the ransomware came out of nowhere and started spreading like wildfire.

In these first four hours, WCry 2.0 made more victims than Jaff, a ransomware spotted this week distributed via the Necurs botnet, the former home of the Locky ransomware. In numbers, in just four hours WCry made 1.5 times more victims than Jaff did all week.

Currently, researchers weren’t able to pinpoint the exact origin of the WCry distribution campaign. At the moment, it could be from malvertising, exploit kits, email spam, or hand-cranked RDP attacks.

WCry outbreak making high-profile victims in Spain

Citing data from ID-Ransomware, a service that helps users identify ransomware infections, MalwareHunter told Bleeping Computer the ransomware had made victims all over the world, in countries such as Taiwan, Russia, Turkey, Kazakhstan, Indonesia, Vietnam, Japan, Spain, Germany, Ukraine, and the Philippines.

By far, the most affected country seems to be Spain. According to Spanish newspaper El Mundo, there are hundreds of PCs infected with WCry 2.0 at Telefonica, a local ISP.

The publication has confirmed the infections, and also heard back from employees, who told the newspaper they’ve been advised to shut down their computers and not use any of the company’s internal VPNs.

Wana Decrypt0r uses NSA’s ETERNALBLUE exploit

What was clear about this ransomware was that Wana Decrypt0r was extremely virulent. The one who unraveled the mystery was French security researcher Kafeine, who was the first to spot that Wana Decrypt0r triggered security alerts for ETERNALBLUE, an alleged NSA exploit leaked online last month by a nefarious group known as The Shadow Brokers.

ETERNALBLUE works by exploiting a vulnerability in the SMBv1 protocol to get a foothold on vulnerable machines connected online. Microsoft patched the flaw in MS17-010, released in March, but that doesn’t mean all Windows PC owners have applied the security update.

Unpatched Windows machines exposed online today risk being exploited with ETERNALBLUE, and then infected with Wana Decrypt0r.

UPDATE: After this article’s publication CERT Spain and other security experts confirmed seeing the Wana Decrypt0r actors also dropping the NSA’s DOUBLEPULSAR malware on infected systems as well. This is a Windows kernel Ring-0 exploit — also developed by the NSA and leaked by the Shadow Brokers — that was used by an unknown actor in late April to infect over 36,000 computers worldwide. DOUBLEPULSAR is what’s called a “malware loader,” used to download and install other malware.

Mjolnir Security customers were automatically protected against this threat and continue to be against ongoing variants.

Recommended Actions:

These are the Indicators of Compromise that we have seen and compiled from our partners:

Indicator type Indicator
FileHash-SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
FileHash-SHA256 2584e1521065e45ec3c17767c065429038fc6291c091097ea8b22c8a502c41dd
FileHash-SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
FileHash-SHA256 09a46b3e1be080745a6d8d88d6b5bd351b1c7586ae0dc94d0c238ee36421cafa
FileHash-SHA256 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
FileHash-SHA256 f8812f1deb8001f3b7672b6fc85640ecb123bc2304b563728e6235ccbe782d85
hostname www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
FileHash-MD5 509c41ec97bb81b0567b059aa2f50fe8
FileHash-MD5 7bf2b57f2a205768755c07f238fb32cc
FileHash-MD5 7f7ccaa16fb15eb1c7399d422f8363e8
FileHash-MD5 84c82835a5d21bbcf75a61706d8ab549
FileHash-MD5 db349b97c37d22f5ea1d1841e3c89eb4
FileHash-MD5 f107a717f76f4f910ae9cb4dc5290594
FileHash-SHA1 51e4307093f8ca8854359c0ac882ddca427a813c
FileHash-SHA1 87420a2791d18dad3f18be436045280a4cc16fc4
FileHash-SHA1 e889544aff85ffaf8b0d0da705105dee7c97fe26
FilePath C:\WINDOWS\tasksche.exe
FilePath C:\Windows\mssecsvc.exe
FileHash-SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
FileHash-SHA1 bd44d0ab543bf814d93b719c24e90d8dd7111234
FileHash-SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
FileHash-SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
domain 57g7spgrzlojinas.onion
domain 76jdd2ir2embyv47.onion
domain cwwnhwhlz52maqm7.onion
domain gx7ekbenv2riucmf.onion
domain sqjolphimrr7jqw6.onion
domain xxlvbrloxvriy2c5.onion
FileHash-MD5 4fef5e34143e646dbf9907c4374276f5
FileHash-MD5 5bef35496fcbdbe841c82f4d1ab8b7c2
FileHash-MD5 775a0631fb8229b2aa3d7621427085ad
FileHash-MD5 8495400f199ac77853c53b5a3f278f3e
FileHash-MD5 86721e64ffbd69aa6944b9672bcabb6d
FileHash-MD5 8dd63adb68ef053e044a5a2f46e0d2cd
FileHash-MD5 b0ad5902366f860f85b892867e5b1e87
FileHash-MD5 d6114ba5f10ad67a4131ab72531f02da
FileHash-MD5 e372d07207b4da75b3434584cd9f3450
FileHash-MD5 f529f4556a5126bba499c26d67892240
CVE CVE-2017-0144
FileHash-SHA256 149601e15002f78866ab73033eb8577f11bd489a4cea87b10c52a70fdf78d9ff
FileHash-SHA256 4186675cb6706f9d51167fb0f14cd3f8fcfb0065093f62b10a15f7d9a6c8d982
FileHash-SHA256 593bbcc8f34047da9960b8456094c0eaf69caaf16f1626b813484207df8bd8af
FileHash-SHA256 6bf1839a7e72a92a2bb18fbedf1873e4892b00ea4b122e48ae80fac5048db1a7
FileHash-SHA256 b3c39aeb14425f137b5bd0fd7654f1d6a45c0e8518ef7e209ad63d8dc6d0bac7
FileHash-SHA256 c365ddaa345cfcaff3d629505572a484cff5221933d68e4a52130b8bb7badaf9
FileHash-SHA256 7a828afd2abf153d840938090d498072b7e507c7021e4cdd8c6baf727cafc545
FileHash-SHA256 a897345b68191fd36f8cefb52e6a77acb2367432abb648b9ae0a9d708406de5b
FileHash-SHA256 b43b234012b8233b3df6adb7c0a3b2b13cc2354dd6de27e092873bf58af2693c
FileHash-SHA256 c73633e55a1d66af88a3dc2d46e7d47e0a47ce0bab0930a70b97b003adafc9af
FileHash-SHA256 f5cbff5c100866dd744dcbb68ee65e711f86c257dfcc41790a8f63759220881e
FileHash-MD5 05a00c320754934782ec5dec1d5c0476
FileHash-MD5 26b205ffe4adaadbb442442cae653bdd
FileHash-MD5 29365f675b69ffa0ec17ad00649ce026
FileHash-MD5 46d140a0eb13582852b5f778bb20cf0e
FileHash-MD5 5ad5075d8d66cd7c05899d8044fdab65
FileHash-MD5 835fff032c51075c0c27946f6ebd64a3
FileHash-MD5 83e5a812a371e0790066c6fb038f0d26
FileHash-MD5 f9992dfb56a9c6c20eb727e6a26b0172
FileHash-MD5 f9cee5e75b7f1298aece9145ea80a1d2
hostname www.ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com
FileHash-SHA1 50049556b3406e07347411767d6d01a704b6fee6
FileHash-SHA1 08e7f80c697d0b658c3d3a87272df630d76bbd01
FileHash-SHA1 14249e7fb3fb6f4b363c47d5aae9f46dab2083c1
FileHash-SHA1 1e4858d9a807ddaa791516d3b7a9272eb8d8ab82
FileHash-SHA1 314c4704ed6a9871a86d3276b135195d05f154a4
FileHash-SHA1 51bfdd1eb973cd8fda5df33d916e74cb641d1d06
FileHash-SHA1 571dfbe51a38dc94585a2f35c9b4e426d187a0f3
FileHash-SHA1 61b9ae415fbe95bf4e6c616ce433cd20dce7dfe3
FileHash-SHA1 69ac81a5f69653ac16be7d95e736816902813e85
FileHash-SHA1 90873b0d61ab387d4f95a79407a0bdec7ff06896
FileHash-SHA1 af7db69cbaa6ab3e4730af8763ae4bf7b7c0c9b2
FileHash-SHA1 b9ce098e5172542fc9c76d62848b2e9291af46be
FileHash-SHA1 c5e6c97e27331b6d38717e156ba89df1387d94f7
FileHash-SHA1 df815d6a5fbfc135d588bf8f7e9d71319aef2a8d
FileHash-SHA1 e27fd07aba2b00eb189c5d968a9a552c88eee51d
FileHash-SHA1 e5356730123eddd45faab91de057a88d48c6651e
FileHash-SHA1 eea7386f7b938c6785cf14221ad3f00516d271db
FileHash-SHA1 8ddc724558a9bad2e516402f34523e28c666f222
FileHash-SHA1 97222f83a6561fe54d5fa124f96158f79be64b44
FileHash-SHA1 b4f80034fbb1769fccf3fd37253d61e32c821c61
FileHash-SHA1 e16ca5d31964e7cffae1fc7940ef6aef840a90c9
FileHash-SHA1 1268f08347a304032f1cb2f8252dbee32644fb0a
FileHash-SHA1 14892185e80c8fab2f885b773d88b16b04976cd7
FileHash-SHA1 196867757a0a6c712995b12c6e1e6f6601e1f73f
FileHash-SHA1 1afa61b8cd73531e897175306cf40bdcbe9f4e62
FileHash-SHA1 257b997d7948c7389714ebf07bb0487b40cd7920
FileHash-SHA1 2a9f370db4c51b11b56119abf8944ee3de6bbce1
FileHash-SHA1 2c16e5eac176b91f19c7a5dce2825f10e9638843
FileHash-SHA1 2f3303c2f4924905a41aabb79d1abca7f79e7287
FileHash-SHA1 3b5eaeddcee6d8179843240c3dc2f64444e027ca
FileHash-SHA1 58272400a6e9bcd04ecfb73094bc0c1a7384c4c7
FileHash-SHA1 5edf0ec7b70014a07b5aa38661770e72dc4d2df0
FileHash-SHA1 652445fd6d463b977a9272bf510aad65eca95a1d
FileHash-SHA1 65a1e41b65303ce14a8624446ae5f8a2730e2f3c
FileHash-SHA1 6ed77e1110a6bd84adddf572389d9af3934f031b
FileHash-SHA1 765cb8f5e079c9efd147ba94305317a5ed5b383b
FileHash-SHA1 79dc157dd9f24e42e8b61332aca0c0278fcd21e3
FileHash-SHA1 7cdc7cc7b457b145fd1c0600b5e9853a2482d2bf
FileHash-SHA1 89f5de9b21c6d6ce1950e36b39947b08717a0de6
FileHash-SHA1 8b35d3792a34b0d7d6f52567e8562835a57b571c
FileHash-SHA1 93aea8636909c6141b45a4638a0310673a1c344f
FileHash-SHA1 9b850b4ffb70f62d8658801363ff1d127cbd77c1
FileHash-SHA1 a0feb46b9d9d6575f159606ff598fa72bef251da
FileHash-SHA1 b7c4a5786e828cd1e7cee81f6688560cf419f1c5
FileHash-SHA1 c33e52ec4bd76d292aa8ae83345e5e6c452f227d
FileHash-SHA1 c84ac8f312cb5ef8c3f1472211a12f51a6b74610
FileHash-SHA1 cf60fa60d2f461dddfdfcebf16368e6b539cd9ba
FileHash-SHA1 d150d18ad37197140a5e966d5c45ec4a7f109f25
FileHash-SHA1 d5f5a68ef26ca47197c44bd685c25e40e7db658a
FileHash-SHA1 e40660a8f367bba6c664d9f1d261bfad44308190
FileHash-SHA1 e6a817c1d6e7e884d63e176ecb33b6dff303ac88
FileHash-SHA1 eba84b75362fa0b1486e9458b6a2f2bdc25d19fb
FileHash-SHA1 f54e7070bfdf0d8ae0bf51088101baa89edcae15
FileHash-SHA1 fbe421b583ff1212c91f3f4d07e9bc198cfa8d88
FileHash-SHA256 11d0f63c06263f50b972287b4bbd1abe0089bc993f73d75768b6b41e3d6f6d49
FileHash-SHA256 16493ecc4c4bc5746acbe96bd8af001f733114070d694db76ea7b5a0de7ad0ab
FileHash-SHA256 190d9c3e071a38cb26211bfffeb6c4bb88bd74c6bf99db9bb1f084c6a7e1df4e
FileHash-SHA256 5ad4efd90dcde01d26cc6f32f7ce3ce0b4d4951d4b94a19aa097341aff2acaec
FileHash-SHA256 7c465ea7bcccf4f94147add808f24629644be11c0ba4823f16e8c19e0090f0ff
FileHash-SHA256 9b60c622546dc45cca64df935b71c26dcf4886d6fa811944dbc4e23db9335640
FileHash-SHA256 9fb39f162c1e1eb55fbf38e670d5e329d84542d3dfcdc341a99f5d07c4b50977
FileHash-SHA256 b47e281bfbeeb0758f8c625bed5c5a0d27ee8e0065ceeadd76b0010d226206f0
FileHash-SHA256 b66db13d17ae8bcaf586180e3dcd1e2e0a084b6bc987ac829bbff18c3be7f8b4
FileHash-SHA256 d8a9879a99ac7b12e63e6bcae7f965fbf1b63d892a8649ab1d6b08ce711f7127
FileHash-SHA256 e14f1a655d54254d06d51cd23a2fa57b6ffdf371cf6b828ee483b1b1d6d21079
FileHash-SHA256 e8450dd6f908b23c9cbd6011fe3d940b24c0420a208d6924e2d920f92c894a96
FileHash-SHA256 201f42080e1c989774d05d5b127a8cd4b4781f1956b78df7c01112436c89b2c9
FileHash-SHA256 4b76e54de0243274f97430b26624c44694fbde3289ed81a160e0754ab9f56f32
FileHash-SHA256 ca29de1dc8817868c93e54b09f557fe14e40083c0955294df5bd91f52ba469c8
FileHash-SHA256 dff26a9a44baa3ce109b8df41ae0a301d9e4a28ad7bd7721bbb7ccd137bfd696
FileHash-SHA256 f7c7b5e4b051ea5bd0017803f40af13bed224c4b0fd60b890b6784df5bd63494
FileHash-MD5 66ddbd108b0c347550f18bb953e1831d
FileHash-SHA256 043e0d0d8b8cda56851f5b853f244f677bd1fd50f869075ef7ba1110771f70c2
FileHash-SHA256 5d26835be2cf4f08f2beeff301c06d05035d0a9ec3afacc71dff22813595c0b9
FileHash-SHA256 76a3666ce9119295104bb69ee7af3f2845d23f40ba48ace7987f79b06312bbdf
FileHash-SHA256 aee20f9188a5c3954623583c6b0e6623ec90d5cd3fdec4e1001646e27664002c
FileHash-SHA256 be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844
FileHash-SHA256 0a73291ab5607aef7db23863cf8e72f55bcb3c273bb47f00edf011515aeb5894
FileHash-SHA256 2d8b8a8000817d3cfe118c68c4d99068e8bcb7fa64df88e1698e1db73a268373
FileHash-SHA256 3f3a9dde96ec4107f67b0559b4e95f5f1bca1ec6cb204bfe5fea0230845e8301
FileHash-SHA256 5c1f4f69c45cff9725d9969f9ffcf79d07bd0f624e06cfa5bcbacd2211046ed6
FileHash-SHA256 62d828ee000e44f670ba322644c2351fe31af5b88a98f2b2ce27e423dcf1d1b1
FileHash-MD5 942c6a039724ed5326c3c247bfce3461
FileHash-SHA256 1be07198c324c9732d4e2676945ec021eeacd78775aea2100f49ca0483d3f901
FileHash-SHA256 b55d23b9df8ffe5678234a2ebc473afb3024015c2a79dfef33a1824d08396139
FileHash-MD5 ab5f53278c24077be9bba7c7af9951e9
FileHash-SHA256 01b628fa60560c0cb4a332818cb380a65d0616d19976c084e0c3eaa433288b88
FileHash-SHA256 0bb221bf62d875cca625778324fe5bd6907640f6998d21f3106a0447aabc1e3c
FileHash-SHA256 11011a590796f6c52b046262f2f60694310fa71441363d9116ada7248e58509a
FileHash-SHA256 1e6753f948fa648ef9e0d85795b7f090968ee1f240efc0628283776ea55ccb0f
FileHash-SHA256 22ccdf145e5792a22ad6349aba37d960db77af7e0b6cae826d228b8246705092
FileHash-SHA256 31c2024d0df684a968115e4c3fc5703ef0ea2de1b69ece581589e86ba084568a
FileHash-SHA256 4c69f22dfd92b54fbc27f27948af15958adfbc607d68d6ed0faca394c424ccee
FileHash-SHA256 5dee2ac983640d656f9c0ef2878ee34cda5e82a52d3703f84278ac372877346d
FileHash-SHA256 5f2b33deee53390913fd5fb3979685a3db2a7a1ee872d47efc4f8f7d9438341f
FileHash-SHA256 63bd325cc229226377342237f59a0af21ae18889ae7c7a130fbe9fd5652707af
FileHash-SHA256 7e369022da51937781b3efe6c57f824f05cf43cbd66b4a24367a19488d2939e4
FileHash-SHA256 85ce324b8f78021ecfc9b811c748f19b82e61bb093ff64f2eab457f9ef19b186
FileHash-SHA256 940dec2039c7fca4a08d08601971836916c6ad5193be07a88506ba58e06d4b4d
FileHash-SHA256 a141e45c3b121aa084f23ebbff980c4b96ae8db2a8d6fde459781aa6d8a5e99a
FileHash-SHA256 a1d23db1f1e3cc2c4aa02f33fec96346d9d5d5039ffc2ed4a3c65c34b79c5d93
FileHash-SHA256 a50d6db532a658ebbebe4c13624bc7bdada0dbf4b0f279e0c151992f7271c726
FileHash-SHA256 ac7f0fb9a7bb68640612567153a157e91d457095eadfd2a76d27a7f65c53ba82
FileHash-SHA256 b4d607fae7d9745f9ced081a92a2dcf96f2d0c72389a66e20059e021f0b58618
FileHash-SHA256 c1f929afa37253d28074e8fdaf62f0e3447ca3ed9b51203f676c1244b5b86955
FileHash-SHA256 ceb51f66c371b5233e474a605a945c05765906494cd272b0b20b5eca11626c61
FileHash-SHA256 e0ec1ad116d44030ad9ef5b51f18ff6160a227a46ffcf64693335c7fb946fad6
FileHash-SHA256 e2d1e34c79295e1163481b3683633d031cab9e086b9ae2ac5e30b08def1b0b47
FileHash-SHA256 ec9d3423338d3a0bfccacaf685366cfb8a9ece8dedbd08e8a3d6446a85019d3a
FileHash-SHA256 72af12d8139a80f317e851a60027fdf208871ed334c12637f49d819ab4b033dd
FileHash-SHA256 03363f9f6938f430a58f3f417829aa3e98875703eb4c2ae12feccc07fff6ba47
FileHash-SHA256 498b8b889bb1f02a377a6a8f0e39f9db4e70cccad820c6e5bc5652e989ae6204
FileHash-SHA256 7966d843e5760ece99bd32a15d5cd58dc71b1324fdc87e33be46f377486a1b4b
FileHash-MD5 08bab082019257268a3726ae75463f47
FileHash-MD5 1c615bf80a47848f17f935e689ae7ee2
FileHash-MD5 246c2781b88f58bc6b0da24ec71dd028
FileHash-MD5 2b4e8612d9f8cdcf520a8b2e42779ffa
FileHash-MD5 3175e4ba26e1e75e52935009a526002c
FileHash-MD5 31dab68b11824153b4c975399df0354f
FileHash-MD5 32f5d4bb6e967ac8c15950322b69975b
FileHash-MD5 38089fd3b6f1faa54cfe974fd1e29f0a
FileHash-MD5 3c6375f586a49fc12a4de9328174f0c1
FileHash-MD5 4362e287ca45a4862b7fe9ecaf46e985
FileHash-MD5 4e1f1183a31740618213f4e4c619b31c
FileHash-MD5 52ba0c7470f214486da9a6c7a710afa0
FileHash-MD5 54a116ff80df6e6031059fc3036464df
FileHash-MD5 57aaa19f66b1eab6bea9891213ae9cf1
FileHash-MD5 638f9235d038a0a001d5ea7f5c5dc4ae
FileHash-MD5 7c742d6cc135784323395ecc7d526bf6
FileHash-MD5 7d31adca26c6c830f6ea78ed68de166b
FileHash-MD5 80a2af99fd990567869e9cf4039edf73
FileHash-MD5 82fc5885862b097be5ec9ec2176e30f1
FileHash-MD5 82fd8635ff349f2f0d8d42c27d18bcb7
FileHash-MD5 84a912cc30e697c4aab6978fb2fceb7c
FileHash-MD5 92cc807fa1ff0936ef7bcd59c76b123b
FileHash-MD5 93ebec8b34a4894c34c54cca5039c089
FileHash-MD5 947d69c0531504ee3f7821574ea405a7
FileHash-MD5 b7f7ad4970506e8547e0f493c80ba441
FileHash-MD5 b8a7b71bfbde9901d20ab179e4dead58
FileHash-MD5 bdda04ebcc92840a64946fc222edc563
FileHash-MD5 bec0b7aff4b107edd5b9276721137651
FileHash-MD5 c61256583c6569ac13a136bfd440ca09
FileHash-MD5 eb7009df4951e18ccbe4f035985b635c
FileHash-MD5 f0d9ffefa20cdadf5b47b96b7f8d1f60
FileHash-MD5 ff81d72a277ff5a3d2e5a4777eb28b7b
FileHash-SHA256 57c12d8573d2f3883a8a0ba14e3eec02ac1c61dee6b675b6c0d16e221c3777f4
FileHash-SHA256 5d8123db7094540954061ab1fbc56eedcd9e01110b62d0f54206e3e75a39776a
FileHash-SHA256 78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df
FileHash-SHA256 8321dfdf54fa41c6ef19abe98df0f5ef80387790e8df000f6fd6dc71ea566c07
FileHash-SHA256 a3900daf137c81ca37a4bf10e9857526d3978be085be265393f98cb075795740
FileHash-SHA256 eeb9cd6a1c4b3949b2ff3134a77d6736b35977f951b9c7c911483b5caeb1c1fb
FileHash-SHA256 fc626fe1e0f4d77b34851a8c60cdd11172472da3b9325bfe288ac8342f6c710a
FileHash-MD5 c39ed6f52aaa31ae0301c591802da24b
FileHash-SHA256 7108d6793a003695ee8107401cfb17af305fa82ff6c16b7a5db45f15e5c9e12d
FileHash-MD5 3bc855bfadfea71a445080ba72b26c1c
FileHash-MD5 4da1f312a214c07143abeeafb695d904
FileHash-MD5 5c7fb0927db37372da25f270708103a2
FileHash-MD5 808182340fb1b0b0b301c998e855a7c8
FileHash-MD5 b675498639429b85af9d70be1e8a8782
FileHash-MD5 b6ded2b8fe83be35341936e34aa433e5
FileHash-MD5 b9b3965d1b218c63cd317ac33edcb942
FileHash-SHA256 0b1ea4458dbc6e6f71c8c548da2d2ef21cc51d938240b2168252c188a797d5dc
FileHash-SHA256 0c2d3094ce5f7b2d5aa1788503e37b8db2e550d10a87650e6a0c4dcca2af8ff6
FileHash-SHA256 0caa1566e439c01d88c953382b26f9d2f7f279594ebe986c06e7781a71cf9d74
FileHash-SHA256 0db91ff8822f1623fe36d712b5f56d339dc21008f1ecc617a5de2f522039c5b3
FileHash-SHA256 0fc245e8a1134e31b7687fb7501faa05628813c87b9561ee26f2092cb76e5a36
FileHash-SHA256 14f124f2dff97ca2d0fa8c53f1225c5307b50b43b4a401d2a708b0c1c12584dc
FileHash-SHA256 191f3e94249f21fb596b4dba7eb197ab89bacae93f1b1fdbd9db733904bd5438
FileHash-SHA256 1b974d46cde9f6e837ec369120dd2727eb774ca58fa8d552b9baeb2c41fc0cdc
FileHash-SHA256 1be0b96d502c268cb40da97a16952d89674a9329cb60bac81a96e01cf7356830
FileHash-SHA256 1cbcbf5a77d2d235bfc6dcf769169f6b0d96c0377bcaa128589025bb9d8cec9a
FileHash-SHA256 1ce9cfab8886af1fb9c87f1220986e6324ebd5c73ef64499768d57197882c2cc
FileHash-SHA256 1d55e742356c5318e59ff68111f0b6468fc75daad48d3cf9c277d8123b5baac3
FileHash-SHA256 1d992e07ec603918e361c404aa11c8a4451073d3a06f39c0f9d03982f32902b0
FileHash-SHA256 1dfa22143394b00caf97089f4405a73d0568419aa1f31e4ffa294db356a6647d
FileHash-SHA256 1f14937ccb88737f786a247fc91ea99338f8f99a42852d8fbc3fdce4d7b5ce75
FileHash-SHA256 2134dd25d73096e4c0c88fd2496c1774b8f4d3a9d576b9060318d78cf31feb69
FileHash-SHA256 255898006562e324aa875f10d68b903aaf5d76bf612cedd956caa1d2e1e2c663
FileHash-SHA256 277c52696e37fbb47bc581711b1ae640f77a626374622f7fa578fe108dc11b9e
FileHash-SHA256 29611b3b709c2faab693d1d6cb2d104f48f4ef0dfee9d3e0d82e61673902934d
FileHash-SHA256 2a5f6043855a9bd09c9d765c438a33efd0fbca3c9199a68e73103eb3685a722c
FileHash-SHA256 2bc87f1bbfdb23fe503ef89bcbf6908ffd7218433e0fbfa51282c0dc51dece01
FileHash-SHA256 2bf05a1e4cba313e400d48e9a40e1b4bb1cdee9dd5b539b5a1d5420d74cc6a0f
FileHash-SHA256 2c53cb08978c62cebcb561cbc7edf59592544c13cf60cc0ef317f94a9f48e1a2
FileHash-SHA256 2cea9032615df2e36a25bdc95542c2865a009589c8bd8bc612d903a268be37b9
FileHash-SHA256 2d043b68afd3a5e2cd97030c3657aaab8357c741f5dd79cb0b7e769dd5dc5e63
FileHash-SHA256 2f1b9bab6fb911ae02c381df00892f94b25876f2c3808623d13089069e6ee380
FileHash-SHA256 3463ea99389ef4836cfe0565539ee80c4c3a8159930c408f86147a59632d593a
FileHash-SHA256 3530b7890c22096693fd473d8c6455b9992ac4aa400e1b8ce14d0049234c489d
FileHash-SHA256 3739ce45a5a5f575e7acb2d7dbe24ca0f4a7d9925b440001ab8e78063307a89c
FileHash-SHA256 3857448d484e1257dc9f19e940b3422c5c8ddac3ff759fa568087c6c5b4303f4
FileHash-SHA256 38c6efb48b32a3f22cc4c307e9043d59aedb0e008300663f83803819e5f260b3
FileHash-SHA256 38ec73a46e7a6a7171c91dc003d135f01134e2311a5e868c797a1c8eaeb62583
FileHash-SHA256 3aac36c35e24b913f2b3740364cd4d15936b7b65a8799918eb1ff843cebbe1db
FileHash-SHA256 3bdb6c85d9b8d3024f47112c18bbb8e653f7624893e27af8e0e226acc92cc634
FileHash-SHA256 3dc6191c1255cfbaf94461e9a44f5b698c5563bbf846c94c4edd343828943a1e
FileHash-SHA256 3dcbb0c3ede91f8f2e9efb0680fe0d479ff9b9cd94906a86dec415f760c163e1
FileHash-SHA256 3e6de9e2baacf930949647c399818e7a2caea2626df6a468407854aaa515eed9
FileHash-SHA256 4384bf4530fb2e35449a8e01c7e0ad94e3a25811ba94f7847c1e6612bbb45359
FileHash-SHA256 470dfc18e05c01ebd66fb8b320ff7e6e76d8017feb530fb23b981982c737b490
FileHash-SHA256 4d67e6c708062e970d020413e460143ed92bebd622e4b8efd6d6a9fdcd07bda8
FileHash-SHA256 4e452d88eadd0ca11539d18bbf7a0ef243dc06c6df230f5dbb7310dc00ec62e3
FileHash-SHA256 5078f8440c25ddb5b85beb8edeae143c716a1a01c8a49c5a8d856cf507510c96
FileHash-SHA256 51e3ea5d000e25696c63bc52c6d56d8c9660cb088afe77de070e3ded36e2e02f
FileHash-SHA256 5366d1a9a5c277e382ad745e01909effa777731e448354389ab706e17a8a7577
FileHash-SHA256 55454390f7be33ab5c11b5e0683800dd9a892ce136f1962b0989526fff5592d5
FileHash-SHA256 55640108459b93e85c66c1f099b5e3df145da8700b0573fc7619b921d2cde4a8
FileHash-SHA256 55e1f8362676a8f79c3af8d1605f330d58443d0509888703f37edfb77a5aec28
FileHash-SHA256 57e3e45af5b9e84b8a548765f90e2232d471535f2844f5196107a24de9f63624
FileHash-SHA256 5a7c7f50d61c3c3de0ce6970f8b244186bf34bef7ed193eb33005f3d66fe2545
FileHash-SHA256 5b3d3b7fd6b70a18570a0fcde6860cc5eb8f298dba8a386c46eb8e1cf43d921d
FileHash-SHA256 5b4322ec672fdfeb292941057125d00afcf1a904e31f9ec0fb9e650177dba500
FileHash-SHA256 5cdf2a496d037cf2bcd0c779a952c26137c7b501fced71fc2a7fd5573e9dda2f
FileHash-SHA256 5e4e5966d893c1ba3ff427c893d6ddd635a117878de265787ee96abfe3e728f4
FileHash-SHA256 5e720c71af80c4bcf6971de8fbe214eb7ea7534f10cc84e4327a594138163c49
FileHash-SHA256 5ea6b688997a26a10d788a76b6ea1ec264d23ef9c015c9ebb7c259a627e272ea
FileHash-SHA256 5fe88059cf0239a2d1cdf60a604b382ec033d7672e364cd576d0ff4bda4c3dcb
FileHash-SHA256 602b7290fb0d300096b6f84f5cad8653c9f4853356d2c1d9cea780ed5bb5a635
FileHash-SHA256 63c8a30963265353532d80a41cae5d54b31e5c2d6b2a92551d6f6dcadd0dedeb
FileHash-SHA256 67eaab37318df65a2ee8480b4a408f7ba823a2f15eb6d23af0aca28a9cca1d27
FileHash-SHA256 69af3c36cec9cf007a77b834560a4309352e3fd85f6728e15ce707119a5b6a67
FileHash-SHA256 6a1da955b2eb6be429b2e3b4b515436f5f76fd62802d4e2aa79dc63770d80be0
FileHash-SHA256 6cb7e4f6539ee9f9107922549d83860399ffc1eb3adb177defde52b1eec1eb3d
FileHash-SHA256 6cefed15f21b9e2a50536ed1b58f94b889c58c71e64bfd304183f9e49354ab25
FileHash-SHA256 6da9873d6e3bec4639856fbd5cb66616fb05a525fc44da14cd9513b33f6e7328
FileHash-SHA256 7391f0253302f194f06fdc8a52526f35f62db7f88490d4ecda1a44526f051b3f
FileHash-SHA256 7536ffe85a0729d67b48847b2ebc6c6860d6a3cec9a733e0ae43b92a412e0b45
FileHash-SHA256 792961858de7e94ca69e3873094d0c5e98e93df05e408d6dbf22c213b2420ba4
FileHash-SHA256 7a515968c18102f5fa2d66573e94dc0d18745d9c5abd5781d80bec9b47960295
FileHash-SHA256 7c096cadac0301cb6063db981f37bfb19f987a18fe6311bbd25658a7b26daf4d
FileHash-SHA256 7ef92632e6aead41919a3e6cfcc1bec2e06eb3d86d49eb0a045a0a39d0ea828a
FileHash-SHA256 802d815d1cd9e4193cf586124622bde16ecb5d7127a1c0aa9a13d1e3e46f564a
FileHash-SHA256 812fedc37236d3d91ff8fd3d34cf8f185f2ce3d6c55acbe8529a80230e535253
FileHash-SHA256 8215640b3572bc67478365f42913b247a18702df4155492f4feed59860cfd56a
FileHash-SHA256 839d70d985d762b4d272eb1c7b9c1a563a47d664c99256af614c20de10e81a61
FileHash-SHA256 8428b02701fda8492fd65826089d2495284c019f659e3000b18c473f190c6268
FileHash-SHA256 85902641e94618b3927b8ac494636042d115891d9c09486e8f43e2aa8309cbe4
FileHash-SHA256 871d6c43cc02afc9fa156ab9aa8a2d15fbff0e4c22cb633ccdde57e1116986df
FileHash-SHA256 87c4e25151480df647fd1e7acbd59ed6e44df02256f03978fa2f6c69efbf0b34
FileHash-SHA256 88be9ee3ce0f85086aec1f2f8409247e8ab4a2a7c8a07af851f8df9814adeee5
FileHash-SHA256 8b82dcf297752fc46a6b755f836b6aca297fca41b1d2387f4fd17b3a9c20bd40
FileHash-SHA256 8c5cd5d074336cece53daeefc90adb3af76cee4c7edf19408f01f71a8040236c
FileHash-SHA256 8c6c481e18b96eb4bcae87cdd3aa104757cb1a19740bc145d73d653c34274c81
FileHash-SHA256 8e5b5841a3fe81cade259ce2a678ccb4451725bba71f6662d0cc1f08148da8df
FileHash-SHA256 90245f11ccd958849f9237bc51a6e28dfa0cedff9d74b8273f7d77be5b4cc3b9
FileHash-SHA256 90a9a556f32a1baf1a0e4907bd8912d7ce0e370a2d89e1203252e055eb6511e8
FileHash-SHA256 90e80d2d34afe6887b15147ee7a2b4b68cd804b491f7af096563dfc6ab4a4eb8
FileHash-SHA256 91ca0febaa0c337e7d098bd0628e47abf9c4cea25efe9f367bd21a9b344af3e0
FileHash-SHA256 92bb4aa2577150e4101c7346f9f16ee6b694fbe0a9a9c2c8ca87f2fab79514d7
FileHash-SHA256 942bd43d9e3fbce9b110964b3b4af284b62da86b278b8145d97c455ee10a355c
FileHash-SHA256 9642e21fd94c1caa75a9714bf7add0fe080c1f580fcf221eb2b304dca01d2ba1
FileHash-SHA256 99c0d50b088df94cb0b150a203de6433cb97d4f8fd3b106ce442757c5faa35c4
FileHash-SHA256 99ef8c1bb5b4060958e6db5b092ddd167e307a7cf34d366afabdb5ceb1a9035d
FileHash-SHA256 9bdef2063ede87385b2e4d0436e03db4d81fcbbdfdbd7cca6eacc494cfe41881
FileHash-SHA256 9cc32c94ce7dc6e48f86704625b6cdc0fda0d2cd7ad769e4d0bb1776903e5a13
FileHash-SHA256 9fc129c37c545ec23b3c59e3319d31509cb9ecdd2eeed90ff8a1a99a39bfcd1c
FileHash-SHA256 9fe91d542952e145f2244572f314632d93eb1e8657621087b2ca7f7df2b0cb05
FileHash-SHA256 a02748c3078a897cff8c4c66292662712d62e39b580465251bca6851ab6931a3
FileHash-SHA256 a0be20c014e384c5f38847723d11a20c82a34315f8303a2825df6f352ca29503
FileHash-SHA256 a22ac0fb3272c8ce65eddacc44b6aabcca9c85be6345248491d9510a05e46462
FileHash-SHA256 a4915232a46759dd27bd939e5a9161571a5e00038e4f2bd95c6b2213edf09b38
FileHash-SHA256 a74783bb813b2e053013a8ac9afdc89d250c2c086bbe9f793bec6b64bb95c9f4
FileHash-SHA256 aa958f00e889dc65530ced1797ebaf366a18ec17d2c82ffcb7747e570da7e0ea
FileHash-SHA256 aa98d85b6a5a50c91899824a6f6fac52d9580e91e1d6390610d520f66d1ce49f
FileHash-SHA256 ab126afab8ebf378534f7799c3a3da96b98da43a95994ed7012cabc2ff04acef
FileHash-SHA256 adde7a2eeb44b400610de1141a57a45eb3201417d7c084fa2fc40d1f46ffc611
FileHash-SHA256 ae0ab8cb25dbf55cf19a5d928eba38be34b105b492295dc5b710b774447d8711
FileHash-SHA256 aea79945c0f2f60de43193e1973fd30485b81d06f3397d397cb02986b31e30d9
FileHash-SHA256 b57bef5f9463d750c363929bea537ce7dd5593a16e2cc18f5ab21f0c0bf49a06
FileHash-SHA256 b8611a4468acb1c980282182eb10d2d9de7518753d1621018f0b99d337028af8
FileHash-SHA256 ba471a114092812161da8b0473a80ffedad64764f445bfd1caef96181dbb8e57
FileHash-SHA256 bb829a0394fb865eed381eb77ac9de039ad19e0f2318baaf9483b4f817250021
FileHash-SHA256 bbc793daa67196de6bcf441ced5df0745300ba6bc8ca43da32e9000b42055b9e
FileHash-SHA256 bc8136b40b4164afcbcb4e14f6fd54ca02275ff75b674eb6fd0a8f436f9b1181
FileHash-SHA256 bd7824d2d96aca1f4260c92e6888c93ef6a64bd8f98d5a0ef0bbe217f0a3b9fa
FileHash-SHA256 bf29ee9b6ff3c8609f3d6908bd0aeaa38f2c66eb76fa18ce69811f7a888fa7d7
FileHash-SHA256 bf446589a7208b81b436a0c0fe7e54c6e2994a80b07097bfef6091af3a4fe710
FileHash-SHA256 c192f1b1cfdcec1d454dc57915a06abe19b7e6782c7c5b3afb1858d512d020a4
FileHash-SHA256 c354a9a0bbb975c15e884916dce251807aae788e68725b512a95f7b580828c64
FileHash-SHA256 c38eea1588b8bffe4e19a8af09bfe17281e6e6afc7e2fbbecef3af96df9a347a
FileHash-SHA256 c8c2131e1d22bff3ef6342254a43d658a3c5fc8081c4ffb7d9b0ced78b7892f1
FileHash-SHA256 c8d816410ebfb134ee14d287a34cea9d34d627a2c5e16234ab726cf9fde47ec6
FileHash-SHA256 c960cc5f624b871cb3c1504f432933244c8f2b0042dc368b123a6779c70280b4
FileHash-SHA256 ca7e4b3374e1e6ad1cbd7a9155631c28dc1db1e8b15827d49da8e608f6efeebd
FileHash-SHA256 cb788066b7be02e3611f95645f743456f1629caa1cf846bd2ea3f9a765190a64
FileHash-SHA256 cce675d3970408c16a6e4fd559aaac69c30a296cc55445835594a958fe5d831c
FileHash-SHA256 d59ac84d6c9892f032502471c5863d812640b7eef4d18b25539650f71a116508
FileHash-SHA256 d849067bf9365d99088cbb935a98477cd38519e3ab8ac1bfe662588f8177d22d
FileHash-SHA256 db1b99e4a352adfefed4dadf0af26cf985874a81ddb020e90c0d74902c3154da
FileHash-SHA256 dca3aaeb2070f63e2ee7c6971e41ef3a9ac2f93885d9cdc317b76035e9114cc6
FileHash-SHA256 ddf27a57f3988279fcad527bab0c558957f5248ec4f605647957195fc6ad570e
FileHash-SHA256 df039caf180d9c7befc8c4b47885231721005c02344824153c65e694bf17d7b8
FileHash-SHA256 e0543f9224d95f7616654905e019355084c86b3d8fba760ececc1e2d0e9f7db5
FileHash-SHA256 e498f936eb56fb1f4300d973c1c869fa65e0ae368c74285dfc2feae3ae1a4f4e
FileHash-SHA256 e5c117233e22d08a547c278ae7027815e22c196a083679126ab9646c781acb6c
FileHash-SHA256 e7a39735ee8777473c7405a70f470a0e00d6266d3126d3af59660e6a78dab2cf
FileHash-SHA256 e9122d4518b23b836a9dc700a872fdbeaea1459be3e65b68aa9f57b930112a6e
FileHash-SHA256 e9d1d718f760ce40f8c1d36f99abba247d8b4bcb12d6960b5e60997c896cda19
FileHash-SHA256 ea428033152445a507f4c1afb7734c8f801f27a687d8cb62bd8f393a2b0c466c
FileHash-SHA256 ea685e119f712ed646594e90e95a2b63a7422a2049dfaf71615d9e8888584ee7
FileHash-SHA256 ed43c819cc24b76ac1c48a94680ae1e85f834d6ca128f6e1c0635ede13cb3dc1
FileHash-SHA256 ee52964b832e1a44b92a4f0e6cde2e876d70131640856b120c0379ff8cc431aa
FileHash-SHA256 f029548806c8074a36435241d5f5586cd7b37fc651dd2a9178e915d2cef27bae
FileHash-SHA256 f0eb62d9726857df9ccb8dc63187b6965d5af28b9ad1dbd34891b72bf3fd4e38
FileHash-SHA256 f4918e6e0dd52a8636d1dce97426c2fda9ec0ff6b3cf898f36789b9b15ab5f01
FileHash-SHA256 f51164bd4b95b8f1ecfb73c254048a317ff223f0b26e6dace79eb64f811c4826
FileHash-SHA256 f5ea4c4f9a37bc84124a9ce114bb7b3dc7a35de498c6c50f457765cc7a3e7611
FileHash-SHA256 f6101718090f0f7796ed000b9a612f6c4ef4ab920ee99ac25bbb4e3eaaa41b75
FileHash-SHA256 f667032757d04569f5e5605b8015b0c9c23ea669675317c7c1e28f237781a119
FileHash-SHA256 f8d786c7b7777873826431d2e36cec484d1ba2de10578ef3a9ad29fe9df2492f
FileHash-SHA256 f8db38a8b64e48d1e6acfff659485480802c733ae68e75167c7fda1c1e788896
FileHash-SHA256 fb1cec49c659a35d8529e318437ff46e33fe52d8e39e921bc2e6b6b775fd2626
FileHash-SHA256 fe43045fe3ea26b42b75d0eec447a666a87edbeb1194c902896167b72e7f2358
FileHash-SHA256 fe4a90768de3aad02a56de713c57962b33719776d6aa694cd11f0590828abd33
FileHash-SHA256 ff2d32717e83c6320de88681a727377376ea2ff9382fd2659a5ca2ec23da1c2f
FileHash-SHA256 ff8c6a2bd919496ae639347611681259c60a21762f3411da230998e443aa90cf
FileHash-SHA256 ff8fcdc4cae2c9ed5207e53bb5bf1d97eef8147977d2bddfe8f55be91410f32c
FileHash-MD5 00e7a5cc39e6e11d7a2fe98c94dc2515
FileHash-MD5 0156edf6d8d35def2bf71f4d91a7dd22
FileHash-MD5 038907087c19583fd4fa6911ea19a72d
FileHash-MD5 03f2f0d3a096b44f083cfd870d995962
FileHash-MD5 05480f5a3237cb12416459c2660367b0
FileHash-MD5 0921fbd8f733de148149e1ef0beb971b
FileHash-MD5 09bedda2dd64d3eaefad3f347fe58934
FileHash-MD5 09c19badedebfb99957742cc803e010e
FileHash-MD5 0cb40a8a51539e2c5727c3ec87af8a56
FileHash-MD5 0d859c69106e05931beb5fc2b4ad4db3
FileHash-MD5 0e4f7226021af5036354aa84b1f35f04
FileHash-MD5 0fb1ce09b168987ce7f47bcd82fa034d
FileHash-MD5 11246a318ea51e9bd4c2f37bfd4da633
FileHash-MD5 1177e33203cb8b1d71fe9147364328fe
FileHash-MD5 13d702666bb8eadcd60d0c3940c39228
FileHash-MD5 14e74b903e0ba3372328361b592e4ecc
FileHash-MD5 15c8af3e260cc12caa2389125ec36aeb
FileHash-MD5 16aa3809de7a2a87d97de34ed7747638
FileHash-MD5 17a78da38674678f201a2d250aa9c022
FileHash-MD5 186d57f94d1666b0e429957608cb154a
FileHash-MD5 18ad48cf2ed0cfeda8636187169ab181
FileHash-MD5 19f28e4f56b1796cf7ab44b46546a504
FileHash-MD5 1a03cdf7f08c2b082af724b3de130d82
FileHash-MD5 1ad9291f035b92c058afd7156bc62a43
FileHash-MD5 1fd3d102d83758e8317df2380821e807
FileHash-MD5 22a42f1a088ca55c14c2abc0169e3e5f
FileHash-MD5 2302249413a30684bea3951115d32630
FileHash-MD5 254d785f692e4590609df7018ed69035
FileHash-MD5 27cb59db5793febd7d20748fd2f589b2
FileHash-MD5 289fb0815a35d88e4e716881561d8d83
FileHash-MD5 29473a0f1ade113c4fbaaeb454db1d22
FileHash-MD5 2da3e222c9697af6f429f7b3257cba18
FileHash-MD5 310e9351f093f4409aaed9faa1da27ff
FileHash-MD5 33f60e64db3104796d8595b0a463aae9
FileHash-MD5 358dff8d2be4aff312073979ad025f9b
FileHash-MD5 3600607ab080736dd31859c02eaff188
FileHash-MD5 38a92fa34353ecb8777a8044248f56f2
FileHash-MD5 397a1e1fbe5b5b8676bb78554435a84f
FileHash-MD5 39821838ff6b6cc3fe43ea8a8135dbfd
FileHash-MD5 3a0c2e7a2af223cc993f076aa6afdf00
FileHash-MD5 3a1ec359d8b62f7aae52f8f245ed19a9
FileHash-MD5 3ba61bfdf94b6fa75b81fa8f07f1aedb
FileHash-MD5 3c1ab42f5dd52f217ec57d270ffc8960
FileHash-MD5 3d072024c6a63c2befaaa965a610c6df
FileHash-MD5 3f5717004f900ad1c3834a0442b8cc96
FileHash-MD5 40d3f292910a8a439c8b2cf01caff758
FileHash-MD5 41059d14ea7813c0f0cca43c2e722a77
FileHash-MD5 42fcf5f97f224c53a0434856016c706c
FileHash-MD5 445a81decd8dacbb591f6675773165a9
FileHash-MD5 468d1f5e0b048c16fd6d5364add58640
FileHash-MD5 48cc752207498438e2c557f34c2c4126
FileHash-MD5 49498e014c0a1a6c84b9587086ac2d6e
FileHash-MD5 4ae9ee1c7e4b97e46ff02266c5cd35cb
FileHash-MD5 4b27c04d8c3befc0b534c1e41933245d
FileHash-MD5 4d87b4461ba0c37848a08c3ac031bb67
FileHash-MD5 4f437dabe9a31fc4523bf6af8e8d098d
FileHash-MD5 51e7d2cde395ba71078fcd998427c119
FileHash-MD5 5655c0f3885389c3852867b80b5cc5e9
FileHash-MD5 573a15b128431309c6af6caeb27dd44c
FileHash-MD5 57b5c96abfd7ab5f33d9e3c20067687a
FileHash-MD5 58156fd68ce047dd332209b69dad22d0
FileHash-MD5 5902d0ea85b00f59a44c6d1c9174da56
FileHash-MD5 59815ca85fa772753ca37fa0399c668c
FileHash-MD5 59fc71209d74f2411580f6e1b6daf8d8
FileHash-MD5 5a39ed257d5eee187c0b25e0f01dc453
FileHash-MD5 5cf4e1f4da030b14ee6741e72f09f1bc
FileHash-MD5 5d52703011722dff7a501884fecc0c73
FileHash-MD5 61c0b4ab71713f213427aaba7524ee26
FileHash-MD5 63446bef3c45ca34c91d956a98182b40
FileHash-MD5 63ff8e84e4aea1217eb0490757a49ae7
FileHash-MD5 64387062bc097c5c78e6facde84247d1
FileHash-MD5 679cc29afff2f02a56f12a64da083e7b
FileHash-MD5 6a4041616699ec27b42f98bbf111a448
FileHash-MD5 6f6645403d00511fccf3065a88a77392
FileHash-MD5 736a07927dc13dffe87abdf8dcdd81d2
FileHash-MD5 76ae56ccf469e2b84909bda911a640dd
FileHash-MD5 7b8649571847cedf86f708eefad9f640
FileHash-MD5 7de2e4f0db359886a8875faa982ad515
FileHash-MD5 7f6b03cbf3d17606e688eec5698c97d8
FileHash-MD5 7f8c62279c3c994d3f2fd58767abc11e
FileHash-MD5 802d2274f695d3f9b864ff395e9f0583
FileHash-MD5 80ce983d22c6213f35867053bec1c293
FileHash-MD5 823564f14cdac838c31bbae713ff1ff6
FileHash-MD5 835674d14de9d8212b7b23b6907d0547
FileHash-MD5 8375303f99d562187c410ee5ff696136
FileHash-MD5 841f028f4abcd3f55431c8bdfa67796a
FileHash-MD5 8424e87370e83d18d1239f43238b318b
FileHash-MD5 844025d6aa8a670dde9891fbe9a7806d
FileHash-MD5 84f25ee99cdb28a3e362a0e853fb0c69
FileHash-MD5 8a8867441d89de126f8e9591e767af9b
FileHash-MD5 8fea128988340b9d290cd4ace66a12b5
FileHash-MD5 8ff9c908dea430ce349cc922cee3b7dc
FileHash-MD5 9095280e232045782c1499baf561bfa5
FileHash-MD5 91af057a94244cf7da49da701ab0bd72
FileHash-MD5 9258b62bc2cdc2b26600d08cec35dd02
FileHash-MD5 9558191ebb53c775b272354ab01d461a
FileHash-MD5 977a72ee38755d8b9c476dc52054378a
FileHash-MD5 992f572361bd1d9885099cffa587abd9
FileHash-MD5 9985b2b1c4bbaf1ca7f38a60e8501188
FileHash-MD5 998ea85d3e72824a8480d606d33540a6
FileHash-MD5 9ad742612d57612dccb4d8ddd0c4e51d
FileHash-MD5 9bea1cba22e9f4a8f2d56ee0c28b5006
FileHash-MD5 9c528e3a0f1ca47a8f4d6fc8baeff3be
FileHash-MD5 9c7c7149387a1c79679a87dd1ba755bc
FileHash-MD5 a0a46b3ea8b643acd8b1b9220701d45d
FileHash-MD5 a0feeb586e91376a36e586504f25c863
FileHash-MD5 a155e4564f9ec62d44bf3ea2351fd6ce
FileHash-MD5 a2ded86d6ddc7d1fca74925c111d6a95
FileHash-MD5 a6aad46f69d3ba3359e4343ab7234bb9
FileHash-MD5 a77d1e53dd2089e2a040c8b96a523132
FileHash-MD5 a8cbe969d69c63a263b40c3321f49a05
FileHash-MD5 abcb7d4353abee5083ddd8057c7cd1ff
FileHash-MD5 ac29e5bbe740c883baf1e83ba99eba85
FileHash-MD5 ae72a3d3b9ee295436ba281171c50538
FileHash-MD5 af2e4ccd663ee4fa7facba742d042397
FileHash-MD5 afe878b1db6e2bb24a6b0b9faf1cabed
FileHash-MD5 b005bec34a379ea8aebe23ba6f5cc39b
FileHash-MD5 b0a61ac3f9665e6c967b8d58a2db9fcc
FileHash-MD5 b27f095f305cf940ba4e85f3cb848819
FileHash-MD5 b33c6822e68a5a1a666579681fdc5429
FileHash-MD5 b433e578c2bddb0693010bbcf760c0ed
FileHash-MD5 b77288deb5e9ebced8a27c5ea533d029
FileHash-MD5 bb54f7f62e845ce054d1b3234ea52b22
FileHash-MD5 bc7b20c6bcc8a7712305b265e94fccfc
FileHash-MD5 bd27321f55d9691f6857cc4e9a082c35
FileHash-MD5 be74e91f1ef8b4cb9e3918911e429124
FileHash-MD5 c1b5e18f78b644d5d59e8958fcfa8b0d
FileHash-MD5 c1bb92ed610e6677582b2ef09558a2ed
FileHash-MD5 c21200c655deb19ef1e1e570cd0393ec
FileHash-MD5 c27b7ada9cf2d87809d67bcdbd04f102
FileHash-MD5 c29d733523cb6cc3ff331021fbe7d554
FileHash-MD5 c399037e0eec39ab50fa3939309c608b
FileHash-MD5 c39f774f7b4257f0ec3a7329063fc39c
FileHash-MD5 c3e7343ae0de8f6c6a907ba06925fe19
FileHash-MD5 c52847787b787d3f0530d585fa1f0070
FileHash-MD5 c57d8756604ccba15c055c023a500299
FileHash-MD5 c652556a204ed1e6a26ff19e0ba8d19f
FileHash-MD5 c906087fbfe90924bc4f903e527e52e8
FileHash-MD5 cb19124c28445253daa84bac29ce3052
FileHash-MD5 cbb8b6a93aabe62282da9abd0142df97
FileHash-MD5 cc1621c48272bb557846ead43118d894
FileHash-MD5 cee8d1683a187a477ee319c2ddd09d4d
FileHash-MD5 cf1416074cd7791ab80a18f9e7e219d9
FileHash-MD5 cf7d967cf7f37075b74ae1956609f33b
FileHash-MD5 d285e27c3e6623492d9c90e13d3e26e0
FileHash-MD5 d47ed61ec133f7e2dbf765f123b22bbb
FileHash-MD5 d545a745c4fc198798e590b00ba7dd59
FileHash-MD5 d5c0caf39de29dc769204d33e76c21fc
FileHash-MD5 d5cb20b54996eac0c9c8473cfc6f0489
FileHash-MD5 df535dcb74ab9e2ba0a63b3519eee2bb
FileHash-MD5 dfbcbd9227212229cc4f1582d8621c11
FileHash-MD5 e16b903789e41697ecab21ba6e14fa2b
FileHash-MD5 e319c77ab3bfb6ed9fe1e2f67d266a51
FileHash-MD5 e333604e0d214d03328a854df130377f
FileHash-MD5 e3b01f0c004fad057b7f30cd99486c42
FileHash-MD5 e539e6ef3ea816cafc1ad0cddaf346ce
FileHash-MD5 e72e0b318bfe367b5bd236f8b59ece25
FileHash-MD5 e80e47869698d7f8924c6c234b9defdc
FileHash-MD5 e84f6797bfe52566e9c97480ca6fee20
FileHash-MD5 e88445c09622f906ac759f509915f62c
FileHash-MD5 e8d2d6925c5581cff64670c829e5a473
FileHash-MD5 eac0133cec98c1338d721c6dff14128e
FileHash-MD5 ec7aa695e821cd46f4e07d6fbd5e367e
FileHash-MD5 efa8cda6aa188ef8564c94a58b75639f
FileHash-MD5 f21338df70ac5de0251bfab40ffc42bc
FileHash-MD5 f351e1fcca0c4ea05fc44d15a17f8b36
FileHash-MD5 f4658d343cec9f0f43f2d2ae8402dc65
FileHash-MD5 f75b0a879aa40db2bece5553a9eaa069
FileHash-MD5 fa44f2474ba1c807ad2aae6f841b8b09
FileHash-MD5 fad4b98c046f693513880195c2bef2dd
FileHash-MD5 fccbe686b494530791adc2281c52bd35
CVE CVE-2017-0147
FileHash-SHA256 3351c7e77d06b512cedb8fbbf91c197bff95479a346de858699726b0fe6fb3f5
FileHash-SHA256 aed43e324f67e8b04eeb839696739b619f2615841970870ceb04979419003345
FileHash-MD5 1d6b0506c7a45a43efa4687d055a2080
FileHash-MD5 b6043ef3f8b238e4f5be6e2aa061c845
FileHash-SHA1 05d914237e5daa95949147e0cc9bb084611206ab
FileHash-SHA1 3df418d3bf24f738ac15d4115f0f95eddc96a610
IPv4 128.31.0.39
IPv4 149.202.160.69
IPv4 46.101.166.19
IPv4 197.231.221.221

 

Reference:

  • https://www.ccn-cert.cni.es/seguridad-al-dia/comunicados-ccn-cert/4491-updated-version-of-ccn-cert-s-tool-to-prevent-the-execution-of-the-ransomware-wannacry.html
  • https://www.bleepingcomputer.com/news/security/wana-decrypt0r-ransomware-using-nsa-exploit-leaked-by-shadow-brokers-is-on-a-rampage/
  • https://www.bleepingcomputer.com/news/security/telefonica-tells-employees-to-shut-down-computers-amid-massive-ransomware-outbreak/
  • https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
  • https://gist.github.com/Blevene/42bed05ecb51c1ca0edf846c0153974a
  • https://ghostbin.com/paste/xgvdv
  • Header image from  https://intel.malwaretech.com/botnet/wcrypt
Recent Posts

Start typing and press Enter to search