├── LICENSE ├── README.md ├── malware.md ├── malware2.md ├── tools ├── README.md ├── genreport.py ├── getnotfound.py ├── getsize.py ├── listmd5s.py ├── podesta.py ├── sortsize.py ├── vtscanhash.py └── wlget.py └── wlscrape.py /LICENSE: -------------------------------------------------------------------------------- 1 | The MIT License (MIT) 2 | 3 | Copyright (c) 2016 Vesselin Bontchev 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | #WLScrape.py - A tool for scrapping the possible malware from the Wikileaks AKP leak 2 | 3 | ##Introduction 4 | 5 | [Wikileaks](https://www.wikileaks.org) has released a large set of e-mails leaked from the Turkish party AKP. Unfortunately, no processing of any kind has been performed on these e-mails - they are just a raw dump. Since many of the AKP members have been recipients of malware sent by e-mail (most likely random spam but could have also been targeted attacks), the received malware in the e-mails is also present in the dump. As a result, the Wikileaks site is hosting malware. For the record, I consider this to be extremely irresponsible from the part of Wikileaks. Malware distribution is __not__ "journalism" by _any_ definition of the term. 6 | 7 | This script was written for the purpose of getting information about the attached files with suspicious extensions, so that they could be scanned - either by downloading them and scanning them locally, or by obtaining their MD5 hashes and submitting those to [VirusTotal](https://www.virustotal.com/). 8 | 9 | ##Installation 10 | 11 | The script should work both in Python 2.6+ and 3.x, although I've been using it only with Python 2.7.6. It depends on the several Python modules, some which are not part of the default installation, so they will have to be installed before the script is able to run. They can all be installed via the command 12 | 13 | pip install module_name 14 | 15 | If you are on Linux and want to install the module system-wide, use 16 | 17 | sudo pip install module_name 18 | 19 | In particular, the following modules have to be installed: 20 | 21 | virustotal 22 | itertools 23 | argparse 24 | requests 25 | locale 26 | lxml 27 | json 28 | wget 29 | stat 30 | sys 31 | os 32 | 33 | In addition, if the script produces bizarre `InsecurePlatform` errors, you should run the command 34 | 35 | pip install "requests[security]" 36 | 37 | The above is for Windows. If you use a different command shell (e.g., `bash` or `zsh` on Linux), you might need to escape the brackets in a different way, e.g. 38 | 39 | sudo pip install requests\[security\] 40 | 41 | ##Usage 42 | 43 | The script takes as a command-line argument one or more file extensions. It fetches information from the Wikileaks site (and the AKP e-mail dump area on it, in particular) about the e-mail file attachments matching these extensions. By default, it outputs a JSON array containing the URL where the file resides, the MD5 hash of the file, and the extension of the file. 44 | 45 | Suggested extensions that might contain malware are: `docm`, `exe`, `jar`, `ace`, `arj`, `cab`, `gz`, `js`, `pps`, `ppt`, `rar`, `rtf`, `pdf`, `zip`. Attention: the `pdf` and `zip` extensions will result in thousands of files! 46 | 47 | ###Command-line options 48 | 49 | `-h`, `--help` Displays a short explanation how to use the script and what the command-line options are. 50 | 51 | `-v`, `--version` Displays the version of the script. 52 | 53 | `-m`, `--md5only` Instead of a JSON array, the script outputs only the MD5 hashes of the files, one per line, in upper case. 54 | 55 | `-d`, `--download` The script downloads the files that match the specified extension(s). The files are saved in the with a name equal to their MD5 hash in upper case (and not the original name in the e-mail attachment, in order to prevent different files with the same names from overwriting each other) and extension equal to the matching extension. If there are duplicated files, `(N)` will be appended to the file name, where `N` is the duplicate number. The files are saved in the current directory if there is only one page of search results, or in subdirectories named `000`, `001`, etc., one subdirectory per page of search results. 56 | 57 | `-s`, `--spam` Look for the specified file extension(s) in the spam folder, too. 58 | 59 | `-p`, `--duplicates` Search the duplicated e-mails too, whatever Wikileaks means by that. 60 | 61 | `-u`, `--unique` Retrieve only the entries unique by MD5. 62 | 63 | `-e`, `--elements` N Number of elements per results page. Must be in the range of [10,200]. Default is 200. Makes sense to use it only with the `-d` option; it will determine the number of downloaded files per subdirectory. 64 | 65 | `-b`, `--blacklist` `BLACKLiST` Specify a file (`BLACKLIST`) containing one URL per line. The links with these URLs will be ignored. 66 | 67 | `-a`, `--pages` `PAGES` Specify a list of ranges (e.g., 2-5,7,9-10) of search result pages to process. 68 | 69 | ##Change log 70 | 71 | Version 1.00: Initial version. 72 | 73 | Version 1.01: Wikileaks changed slightly the format of the page and the script was able to process only the first page of a multi-page output. Fixed. 74 | 75 | Version 1.02: Implemented the option to check the e-mails marked as spam too. 76 | 77 | Version 1.03: Removed the code that was ignoring the duplicate files, since the idea is to find _all_ links on the Wikileaks site that contain malware. Added the option to search the duplicated e-mails too, whatever Wikileaks means by that. Added the option to specify a list of links to ignore (e.g., because they no longer point to malware). 78 | 79 | Version 1.04: Implemented the option to retrieve only files unique by MD5. If there is more than one, only the first one found will be listed. Implemented the option to specify which pages of the search results to process. Implemented the option to specify the number of entries per page of search results. 80 | 81 | Version 1.05: The JSON data now includes file size information. Slightly improved the parsing of user-specified ranges when the `-a` option is used. 82 | 83 | Version 1.06: Fixed a minor bug leading to the creation of one unnecessary directory when the number of files to download was an exact multiple of the argument of the `-e` option. 84 | 85 | Version 1.07: Fixed another bug related to downloading a specified number of files per directory. 86 | -------------------------------------------------------------------------------- /malware2.md: -------------------------------------------------------------------------------- 1 | Number | Wikileaks e-mail | Wikileaks URL to the malicious attachment | VirusTotal analysis 2 | --- | --- | --- | --- 3 | 1 | [1787](https://wikileaks.org/akp-emails/emailid/1787) | hxxxx://wikileaks[.]org/akp-emails/fileid/1787/1060 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 4 | 2 | [1830](https://wikileaks.org/akp-emails/emailid/1830) | hxxxx://wikileaks[.]org/akp-emails/fileid/1830/1079 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 5 | 3 | [25561](https://wikileaks.org/akp-emails/emailid/25561) | hxxxx://wikileaks[.]org/akp-emails/fileid/25561/13495 | [9D8B291BCBECCEF9D624A2B3BDC703EE](https://www.virustotal.com/en/search/?query=9D8B291BCBECCEF9D624A2B3BDC703EE) 6 | 4 | [26358](https://wikileaks.org/akp-emails/emailid/26358) | hxxxx://wikileaks[.]org/akp-emails/fileid/26358/14324 | [9D8B291BCBECCEF9D624A2B3BDC703EE](https://www.virustotal.com/en/search/?query=9D8B291BCBECCEF9D624A2B3BDC703EE) 7 | 5 | [37143](https://wikileaks.org/akp-emails/emailid/37143) | hxxxx://wikileaks[.]org/akp-emails/fileid/37143/20565 | [39ADBF110324F6B8A9D89B4105AFDC14](https://www.virustotal.com/en/search/?query=39ADBF110324F6B8A9D89B4105AFDC14) 8 | 6 | [256708](https://wikileaks.org/akp-emails/emailid/256708) | hxxxx://wikileaks[.]org/akp-emails/fileid/256708/52414 | [39ADBF110324F6B8A9D89B4105AFDC14](https://www.virustotal.com/en/search/?query=39ADBF110324F6B8A9D89B4105AFDC14) 9 | 7 | [267931](https://wikileaks.org/akp-emails/emailid/267931) | hxxxx://wikileaks[.]org/akp-emails/fileid/267931/57838 | [9D8B291BCBECCEF9D624A2B3BDC703EE](https://www.virustotal.com/en/search/?query=9D8B291BCBECCEF9D624A2B3BDC703EE) 10 | 8 | [268728](https://wikileaks.org/akp-emails/emailid/268728) | hxxxx://wikileaks[.]org/akp-emails/fileid/268728/58667 | [9D8B291BCBECCEF9D624A2B3BDC703EE](https://www.virustotal.com/en/search/?query=9D8B291BCBECCEF9D624A2B3BDC703EE) 11 | 9 | [285939](https://wikileaks.org/akp-emails/emailid/285939) | hxxxx://wikileaks[.]org/akp-emails/fileid/285939/66077 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 12 | 10 | [285982](https://wikileaks.org/akp-emails/emailid/285982) | hxxxx://wikileaks[.]org/akp-emails/fileid/285982/66096 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 13 | 11 | [330287](https://wikileaks.org/akp-emails/emailid/330287) | hxxxx://wikileaks[.]org/akp-emails/fileid/330287/134329 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 14 | 12 | [333277](https://wikileaks.org/akp-emails/emailid/333277) | hxxxx://wikileaks[.]org/akp-emails/fileid/333277/136125 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 15 | 13 | [338424](https://wikileaks.org/akp-emails/emailid/338424) | hxxxx://wikileaks[.]org/akp-emails/fileid/338424/139741 | [648E7CBB1B952BD78ACFE02C1F680853](https://www.virustotal.com/en/search/?query=648E7CBB1B952BD78ACFE02C1F680853) 16 | 14 | [338424](https://wikileaks.org/akp-emails/emailid/338424) | hxxxx://wikileaks[.]org/akp-emails/fileid/338424/139742 | [C5C91A4C711395F06D240F3213EA8184](https://www.virustotal.com/en/search/?query=C5C91A4C711395F06D240F3213EA8184) 17 | 15 | [347279](https://wikileaks.org/akp-emails/emailid/347279) | hxxxx://wikileaks[.]org/akp-emails/fileid/347279/143454 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 18 | 16 | [359480](https://wikileaks.org/akp-emails/emailid/359480) | hxxxx://wikileaks[.]org/akp-emails/fileid/359480/149654 | [EAE0827F3801FAA2A58B57850F8DA9F5](https://www.virustotal.com/en/search/?query=EAE0827F3801FAA2A58B57850F8DA9F5) 19 | 17 | [359489](https://wikileaks.org/akp-emails/emailid/359489) | hxxxx://wikileaks[.]org/akp-emails/fileid/359489/149670 | [2A03AC24042FC35CAA92C847638CA7C2](https://www.virustotal.com/en/search/?query=2A03AC24042FC35CAA92C847638CA7C2) 20 | 18 | [359495](https://wikileaks.org/akp-emails/emailid/359495) | hxxxx://wikileaks[.]org/akp-emails/fileid/359495/149678 | [2897C57B2F3E02412C89B6BF44E6643D](https://www.virustotal.com/en/search/?query=2897C57B2F3E02412C89B6BF44E6643D) 21 | 19 | [359505](https://wikileaks.org/akp-emails/emailid/359505) | hxxxx://wikileaks[.]org/akp-emails/fileid/359505/149688 | [2897C57B2F3E02412C89B6BF44E6643D](https://www.virustotal.com/en/search/?query=2897C57B2F3E02412C89B6BF44E6643D) 22 | 20 | [361333](https://wikileaks.org/akp-emails/emailid/361333) | hxxxx://wikileaks[.]org/akp-emails/fileid/361333/150854 | [89839FA52903A365E7933A0E8EFE4DB7](https://www.virustotal.com/en/search/?query=89839FA52903A365E7933A0E8EFE4DB7) 23 | 21 | [364050](https://wikileaks.org/akp-emails/emailid/364050) | hxxxx://wikileaks[.]org/akp-emails/fileid/364050/154411 | [1FE42768EF040587B069A09FBF17513C](https://www.virustotal.com/en/search/?query=1FE42768EF040587B069A09FBF17513C) 24 | 22 | [364296](https://wikileaks.org/akp-emails/emailid/364296) | hxxxx://wikileaks[.]org/akp-emails/fileid/364296/154508 | [F61BA586C63BFE1EEB5D4FC13470CF9C](https://www.virustotal.com/en/search/?query=F61BA586C63BFE1EEB5D4FC13470CF9C) 25 | 23 | [2425](https://wikileaks.org/akp-emails/emailid/2425) | hxxxx://wikileaks[.]org/akp-emails/fileid/2425/1677 | [C540F5582ACB9593C7B97169B82206BA](https://www.virustotal.com/en/search/?query=C540F5582ACB9593C7B97169B82206BA) 26 | 24 | [2663](https://wikileaks.org/akp-emails/emailid/2663) | hxxxx://wikileaks[.]org/akp-emails/fileid/2663/1943 | [0F372621850B960CF0DD7D388D730E64](https://www.virustotal.com/en/search/?query=0F372621850B960CF0DD7D388D730E64) 27 | 25 | [2694](https://wikileaks.org/akp-emails/emailid/2694) | hxxxx://wikileaks[.]org/akp-emails/fileid/2694/1971 | [1140E97B78F2BADBF435EC730FEAD97A](https://www.virustotal.com/en/search/?query=1140E97B78F2BADBF435EC730FEAD97A) 28 | 26 | [3044](https://wikileaks.org/akp-emails/emailid/3044) | hxxxx://wikileaks[.]org/akp-emails/fileid/3044/2282 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 29 | 27 | [3075](https://wikileaks.org/akp-emails/emailid/3075) | hxxxx://wikileaks[.]org/akp-emails/fileid/3075/2292 | [E8CB95F2C400607DD253B7ED8CAFEF08](https://www.virustotal.com/en/search/?query=E8CB95F2C400607DD253B7ED8CAFEF08) 30 | 28 | [3128](https://wikileaks.org/akp-emails/emailid/3128) | hxxxx://wikileaks[.]org/akp-emails/fileid/3128/2329 | [A0AAE7097CBABE2A432E6F9440706E67](https://www.virustotal.com/en/search/?query=A0AAE7097CBABE2A432E6F9440706E67) 31 | 29 | [3497](https://wikileaks.org/akp-emails/emailid/3497) | hxxxx://wikileaks[.]org/akp-emails/fileid/3497/2702 | [5A6137DFEA322F2C2C1F01A55FC04480](https://www.virustotal.com/en/search/?query=5A6137DFEA322F2C2C1F01A55FC04480) 32 | 30 | [3887](https://wikileaks.org/akp-emails/emailid/3887) | hxxxx://wikileaks[.]org/akp-emails/fileid/3887/2969 | [18946DAD0D4FF2B54F51124B8C5B04F2](https://www.virustotal.com/en/search/?query=18946DAD0D4FF2B54F51124B8C5B04F2) 33 | 31 | [4510](https://wikileaks.org/akp-emails/emailid/4510) | hxxxx://wikileaks[.]org/akp-emails/fileid/4510/3730 | [BD7FBE42F21AC032A65954D2F19CB319](https://www.virustotal.com/en/search/?query=BD7FBE42F21AC032A65954D2F19CB319) 34 | 32 | [5603](https://wikileaks.org/akp-emails/emailid/5603) | hxxxx://wikileaks[.]org/akp-emails/fileid/5603/4813 | [75170877C60D21B3C9B234E4E76D9CA8](https://www.virustotal.com/en/search/?query=75170877C60D21B3C9B234E4E76D9CA8) 35 | 33 | [6089](https://wikileaks.org/akp-emails/emailid/6089) | hxxxx://wikileaks[.]org/akp-emails/fileid/6089/5198 | [FE3261FD73E6BB2D7206FDC07D86C41A](https://www.virustotal.com/en/search/?query=FE3261FD73E6BB2D7206FDC07D86C41A) 36 | 34 | [6610](https://wikileaks.org/akp-emails/emailid/6610) | hxxxx://wikileaks[.]org/akp-emails/fileid/6610/5487 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 37 | 35 | [6905](https://wikileaks.org/akp-emails/emailid/6905) | hxxxx://wikileaks[.]org/akp-emails/fileid/6905/5705 | [80D75B840DACBA7A522C89195B181FFE](https://www.virustotal.com/en/search/?query=80D75B840DACBA7A522C89195B181FFE) 38 | 36 | [6905](https://wikileaks.org/akp-emails/emailid/6905) | hxxxx://wikileaks[.]org/akp-emails/fileid/6905/5706 | [1226C4A8A0814AD0AEC85B249104CABC](https://www.virustotal.com/en/search/?query=1226C4A8A0814AD0AEC85B249104CABC) 39 | 37 | [6996](https://wikileaks.org/akp-emails/emailid/6996) | hxxxx://wikileaks[.]org/akp-emails/fileid/6996/5736 | [9E18F88DA27D092A6F4978721434448B](https://www.virustotal.com/en/search/?query=9E18F88DA27D092A6F4978721434448B) 40 | 38 | [7603](https://wikileaks.org/akp-emails/emailid/7603) | hxxxx://wikileaks[.]org/akp-emails/fileid/7603/6264 | [1B853B2962BB6D5CAA7AB4A64B83EEFF](https://www.virustotal.com/en/search/?query=1B853B2962BB6D5CAA7AB4A64B83EEFF) 41 | 39 | [8385](https://wikileaks.org/akp-emails/emailid/8385) | hxxxx://wikileaks[.]org/akp-emails/fileid/8385/6890 | [BDB264F890E5189D6F988A9889678A87](https://www.virustotal.com/en/search/?query=BDB264F890E5189D6F988A9889678A87) 42 | 40 | [8586](https://wikileaks.org/akp-emails/emailid/8586) | hxxxx://wikileaks[.]org/akp-emails/fileid/8586/7040 | [C5CA294FAFA9F2AA3B04CC029E77D291](https://www.virustotal.com/en/search/?query=C5CA294FAFA9F2AA3B04CC029E77D291) 43 | 41 | [8658](https://wikileaks.org/akp-emails/emailid/8658) | hxxxx://wikileaks[.]org/akp-emails/fileid/8658/7114 | [FF88C710903EB21A174A705F5A7B4BEA](https://www.virustotal.com/en/search/?query=FF88C710903EB21A174A705F5A7B4BEA) 44 | 42 | [9008](https://wikileaks.org/akp-emails/emailid/9008) | hxxxx://wikileaks[.]org/akp-emails/fileid/9008/7377 | [DD5D8B121304DB4B1A9A5FC525AA493E](https://www.virustotal.com/en/search/?query=DD5D8B121304DB4B1A9A5FC525AA493E) 45 | 43 | [9423](https://wikileaks.org/akp-emails/emailid/9423) | hxxxx://wikileaks[.]org/akp-emails/fileid/9423/7559 | [4C177D58946AEEC8411F5A9E2B9300DB](https://www.virustotal.com/en/search/?query=4C177D58946AEEC8411F5A9E2B9300DB) 46 | 44 | [9423](https://wikileaks.org/akp-emails/emailid/9423) | hxxxx://wikileaks[.]org/akp-emails/fileid/9423/7560 | [2DC0B4190FD61426BDA6D9EA97C9BBDD](https://www.virustotal.com/en/search/?query=2DC0B4190FD61426BDA6D9EA97C9BBDD) 47 | 45 | [9428](https://wikileaks.org/akp-emails/emailid/9428) | hxxxx://wikileaks[.]org/akp-emails/fileid/9428/7564 | [F737105A82A8F4BE489EE2A80BF01E8B](https://www.virustotal.com/en/search/?query=F737105A82A8F4BE489EE2A80BF01E8B) 48 | 46 | [9929](https://wikileaks.org/akp-emails/emailid/9929) | hxxxx://wikileaks[.]org/akp-emails/fileid/9929/7785 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 49 | 47 | [12752](https://wikileaks.org/akp-emails/emailid/12752) | hxxxx://wikileaks[.]org/akp-emails/fileid/12752/8597 | [2F2A95565803493B7CD5644A25AAB832](https://www.virustotal.com/en/search/?query=2F2A95565803493B7CD5644A25AAB832) 50 | 48 | [16560](https://wikileaks.org/akp-emails/emailid/16560) | hxxxx://wikileaks[.]org/akp-emails/fileid/16560/8964 | [28AAEA05C59D27A089A4E037D056195D](https://www.virustotal.com/en/search/?query=28AAEA05C59D27A089A4E037D056195D) 51 | 49 | [17187](https://wikileaks.org/akp-emails/emailid/17187) | hxxxx://wikileaks[.]org/akp-emails/fileid/17187/9495 | [8D9700872ED68C4540EAC6CE4CAEA7DB](https://www.virustotal.com/en/search/?query=8D9700872ED68C4540EAC6CE4CAEA7DB) 52 | 50 | [17247](https://wikileaks.org/akp-emails/emailid/17247) | hxxxx://wikileaks[.]org/akp-emails/fileid/17247/9552 | [03FE72EC7F47F2723285A95F7A32703B](https://www.virustotal.com/en/search/?query=03FE72EC7F47F2723285A95F7A32703B) 53 | 51 | [17369](https://wikileaks.org/akp-emails/emailid/17369) | hxxxx://wikileaks[.]org/akp-emails/fileid/17369/9656 | [9E1801CE0D70993CD7866FE447B28241](https://www.virustotal.com/en/search/?query=9E1801CE0D70993CD7866FE447B28241) 54 | 52 | [17437](https://wikileaks.org/akp-emails/emailid/17437) | hxxxx://wikileaks[.]org/akp-emails/fileid/17437/9703 | [DB5D826916B190EDE6B9D27B024327E4](https://www.virustotal.com/en/search/?query=DB5D826916B190EDE6B9D27B024327E4) 55 | 53 | [17773](https://wikileaks.org/akp-emails/emailid/17773) | hxxxx://wikileaks[.]org/akp-emails/fileid/17773/9791 | [9E1801CE0D70993CD7866FE447B28241](https://www.virustotal.com/en/search/?query=9E1801CE0D70993CD7866FE447B28241) 56 | 54 | [21224](https://wikileaks.org/akp-emails/emailid/21224) | hxxxx://wikileaks[.]org/akp-emails/fileid/21224/10763 | [47679F7201EE5127B063436077EE4E59](https://www.virustotal.com/en/search/?query=47679F7201EE5127B063436077EE4E59) 57 | 55 | [21309](https://wikileaks.org/akp-emails/emailid/21309) | hxxxx://wikileaks[.]org/akp-emails/fileid/21309/10792 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 58 | 56 | [22872](https://wikileaks.org/akp-emails/emailid/22872) | hxxxx://wikileaks[.]org/akp-emails/fileid/22872/11304 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 59 | 57 | [23212](https://wikileaks.org/akp-emails/emailid/23212) | hxxxx://wikileaks[.]org/akp-emails/fileid/23212/11579 | [3CE47603F435BE5312962F586D38A37A](https://www.virustotal.com/en/search/?query=3CE47603F435BE5312962F586D38A37A) 60 | 58 | [23508](https://wikileaks.org/akp-emails/emailid/23508) | hxxxx://wikileaks[.]org/akp-emails/fileid/23508/11918 | [D89A43BF108029667D34CA50010DFE35](https://www.virustotal.com/en/search/?query=D89A43BF108029667D34CA50010DFE35) 61 | 59 | [23638](https://wikileaks.org/akp-emails/emailid/23638) | hxxxx://wikileaks[.]org/akp-emails/fileid/23638/12013 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 62 | 60 | [23918](https://wikileaks.org/akp-emails/emailid/23918) | hxxxx://wikileaks[.]org/akp-emails/fileid/23918/12312 | [0C0A614F74BA2764FF1948C2AAE02B8F](https://www.virustotal.com/en/search/?query=0C0A614F74BA2764FF1948C2AAE02B8F) 63 | 61 | [23989](https://wikileaks.org/akp-emails/emailid/23989) | hxxxx://wikileaks[.]org/akp-emails/fileid/23989/12372 | [0FD2CC9DF505EF66F00537CDD9D1360B](https://www.virustotal.com/en/search/?query=0FD2CC9DF505EF66F00537CDD9D1360B) 64 | 62 | [23991](https://wikileaks.org/akp-emails/emailid/23991) | hxxxx://wikileaks[.]org/akp-emails/fileid/23991/12374 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 65 | 63 | [24014](https://wikileaks.org/akp-emails/emailid/24014) | hxxxx://wikileaks[.]org/akp-emails/fileid/24014/12391 | [80ED03C7C397979052E03BF643DB1470](https://www.virustotal.com/en/search/?query=80ED03C7C397979052E03BF643DB1470) 66 | 64 | [24146](https://wikileaks.org/akp-emails/emailid/24146) | hxxxx://wikileaks[.]org/akp-emails/fileid/24146/12477 | [F3509F4D635658874D2455111B352EF6](https://www.virustotal.com/en/search/?query=F3509F4D635658874D2455111B352EF6) 67 | 65 | [24152](https://wikileaks.org/akp-emails/emailid/24152) | hxxxx://wikileaks[.]org/akp-emails/fileid/24152/12480 | [C387F668A47907AF14D6508A3CBC8BEA](https://www.virustotal.com/en/search/?query=C387F668A47907AF14D6508A3CBC8BEA) 68 | 66 | [24382](https://wikileaks.org/akp-emails/emailid/24382) | hxxxx://wikileaks[.]org/akp-emails/fileid/24382/12714 | [FED38E5B60763DB68B7F4B4DD42FAC6D](https://www.virustotal.com/en/search/?query=FED38E5B60763DB68B7F4B4DD42FAC6D) 69 | 67 | [24475](https://wikileaks.org/akp-emails/emailid/24475) | hxxxx://wikileaks[.]org/akp-emails/fileid/24475/12799 | [B3BDECD1238650F17D0A7DEFCE0E32AC](https://www.virustotal.com/en/search/?query=B3BDECD1238650F17D0A7DEFCE0E32AC) 70 | 68 | [26314](https://wikileaks.org/akp-emails/emailid/26314) | hxxxx://wikileaks[.]org/akp-emails/fileid/26314/14268 | [C02BA9235CAA7270EAC684F3C2D9C7B3](https://www.virustotal.com/en/search/?query=C02BA9235CAA7270EAC684F3C2D9C7B3) 71 | 69 | [26612](https://wikileaks.org/akp-emails/emailid/26612) | hxxxx://wikileaks[.]org/akp-emails/fileid/26612/14900 | [9F158C3EB2F37DF7E4A5AC72ABD06043](https://www.virustotal.com/en/search/?query=9F158C3EB2F37DF7E4A5AC72ABD06043) 72 | 70 | [26897](https://wikileaks.org/akp-emails/emailid/26897) | hxxxx://wikileaks[.]org/akp-emails/fileid/26897/15476 | [27524906F0626DA2E99EBA09F9F3E4E0](https://www.virustotal.com/en/search/?query=27524906F0626DA2E99EBA09F9F3E4E0) 73 | 71 | [401002](https://wikileaks.org/akp-emails/emailid/401002) | hxxxx://wikileaks[.]org/akp-emails/fileid/401002/171559 | [9018CEF4C73C8CE0486BCEEBF0ED4849](https://www.virustotal.com/en/search/?query=9018CEF4C73C8CE0486BCEEBF0ED4849) 74 | 72 | [407324](https://wikileaks.org/akp-emails/emailid/407324) | hxxxx://wikileaks[.]org/akp-emails/fileid/407324/171761 | [9018CEF4C73C8CE0486BCEEBF0ED4849](https://www.virustotal.com/en/search/?query=9018CEF4C73C8CE0486BCEEBF0ED4849) 75 | 73 | [27081](https://wikileaks.org/akp-emails/emailid/27081) | hxxxx://wikileaks[.]org/akp-emails/fileid/27081/15733 | [D8DA70303E8A0085290BCEEA857F12F3](https://www.virustotal.com/en/search/?query=D8DA70303E8A0085290BCEEA857F12F3) 76 | 74 | [27570](https://wikileaks.org/akp-emails/emailid/27570) | hxxxx://wikileaks[.]org/akp-emails/fileid/27570/16112 | [AE39729C50D9136189E61D96993A7AF5](https://www.virustotal.com/en/search/?query=AE39729C50D9136189E61D96993A7AF5) 77 | 75 | [31197](https://wikileaks.org/akp-emails/emailid/31197) | hxxxx://wikileaks[.]org/akp-emails/fileid/31197/17436 | [F737105A82A8F4BE489EE2A80BF01E8B](https://www.virustotal.com/en/search/?query=F737105A82A8F4BE489EE2A80BF01E8B) 78 | 76 | [31562](https://wikileaks.org/akp-emails/emailid/31562) | hxxxx://wikileaks[.]org/akp-emails/fileid/31562/17504 | [4C177D58946AEEC8411F5A9E2B9300DB](https://www.virustotal.com/en/search/?query=4C177D58946AEEC8411F5A9E2B9300DB) 79 | 77 | [31562](https://wikileaks.org/akp-emails/emailid/31562) | hxxxx://wikileaks[.]org/akp-emails/fileid/31562/17505 | [2DC0B4190FD61426BDA6D9EA97C9BBDD](https://www.virustotal.com/en/search/?query=2DC0B4190FD61426BDA6D9EA97C9BBDD) 80 | 78 | [34218](https://wikileaks.org/akp-emails/emailid/34218) | hxxxx://wikileaks[.]org/akp-emails/fileid/34218/18278 | [4E5C9BF38C794137D6730F8FAAFA1DB3](https://www.virustotal.com/en/search/?query=4E5C9BF38C794137D6730F8FAAFA1DB3) 81 | 79 | [34334](https://wikileaks.org/akp-emails/emailid/34334) | hxxxx://wikileaks[.]org/akp-emails/fileid/34334/18343 | [8D9700872ED68C4540EAC6CE4CAEA7DB](https://www.virustotal.com/en/search/?query=8D9700872ED68C4540EAC6CE4CAEA7DB) 82 | 80 | [35850](https://wikileaks.org/akp-emails/emailid/35850) | hxxxx://wikileaks[.]org/akp-emails/fileid/35850/19947 | [53820CEC3211891AA8D6679C7AAE6072](https://www.virustotal.com/en/search/?query=53820CEC3211891AA8D6679C7AAE6072) 83 | 81 | [36880](https://wikileaks.org/akp-emails/emailid/36880) | hxxxx://wikileaks[.]org/akp-emails/fileid/36880/20514 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 84 | 82 | [37064](https://wikileaks.org/akp-emails/emailid/37064) | hxxxx://wikileaks[.]org/akp-emails/fileid/37064/20550 | [EF9C122B5C6355BD32543F870A4C47BC](https://www.virustotal.com/en/search/?query=EF9C122B5C6355BD32543F870A4C47BC) 85 | 83 | [37341](https://wikileaks.org/akp-emails/emailid/37341) | hxxxx://wikileaks[.]org/akp-emails/fileid/37341/20620 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 86 | 84 | [37427](https://wikileaks.org/akp-emails/emailid/37427) | hxxxx://wikileaks[.]org/akp-emails/fileid/37427/20641 | [C387F668A47907AF14D6508A3CBC8BEA](https://www.virustotal.com/en/search/?query=C387F668A47907AF14D6508A3CBC8BEA) 87 | 85 | [37601](https://wikileaks.org/akp-emails/emailid/37601) | hxxxx://wikileaks[.]org/akp-emails/fileid/37601/20722 | [0FD2CC9DF505EF66F00537CDD9D1360B](https://www.virustotal.com/en/search/?query=0FD2CC9DF505EF66F00537CDD9D1360B) 88 | 86 | [37679](https://wikileaks.org/akp-emails/emailid/37679) | hxxxx://wikileaks[.]org/akp-emails/fileid/37679/20761 | [F3509F4D635658874D2455111B352EF6](https://www.virustotal.com/en/search/?query=F3509F4D635658874D2455111B352EF6) 89 | 87 | [37854](https://wikileaks.org/akp-emails/emailid/37854) | hxxxx://wikileaks[.]org/akp-emails/fileid/37854/20823 | [80ED03C7C397979052E03BF643DB1470](https://www.virustotal.com/en/search/?query=80ED03C7C397979052E03BF643DB1470) 90 | 88 | [37897](https://wikileaks.org/akp-emails/emailid/37897) | hxxxx://wikileaks[.]org/akp-emails/fileid/37897/20839 | [0C0A614F74BA2764FF1948C2AAE02B8F](https://www.virustotal.com/en/search/?query=0C0A614F74BA2764FF1948C2AAE02B8F) 91 | 89 | [37899](https://wikileaks.org/akp-emails/emailid/37899) | hxxxx://wikileaks[.]org/akp-emails/fileid/37899/20840 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 92 | 90 | [38265](https://wikileaks.org/akp-emails/emailid/38265) | hxxxx://wikileaks[.]org/akp-emails/fileid/38265/21008 | [FED38E5B60763DB68B7F4B4DD42FAC6D](https://www.virustotal.com/en/search/?query=FED38E5B60763DB68B7F4B4DD42FAC6D) 93 | 91 | [38278](https://wikileaks.org/akp-emails/emailid/38278) | hxxxx://wikileaks[.]org/akp-emails/fileid/38278/21018 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 94 | 92 | [38315](https://wikileaks.org/akp-emails/emailid/38315) | hxxxx://wikileaks[.]org/akp-emails/fileid/38315/21025 | [D89A43BF108029667D34CA50010DFE35](https://www.virustotal.com/en/search/?query=D89A43BF108029667D34CA50010DFE35) 95 | 93 | [39860](https://wikileaks.org/akp-emails/emailid/39860) | hxxxx://wikileaks[.]org/akp-emails/fileid/39860/21998 | [3CA0060E61E786B7163ED2D86E414299](https://www.virustotal.com/en/search/?query=3CA0060E61E786B7163ED2D86E414299) 96 | 94 | [43615](https://wikileaks.org/akp-emails/emailid/43615) | hxxxx://wikileaks[.]org/akp-emails/fileid/43615/22570 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 97 | 95 | [44997](https://wikileaks.org/akp-emails/emailid/44997) | hxxxx://wikileaks[.]org/akp-emails/fileid/44997/22779 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 98 | 96 | [47222](https://wikileaks.org/akp-emails/emailid/47222) | hxxxx://wikileaks[.]org/akp-emails/fileid/47222/23157 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 99 | 97 | [52508](https://wikileaks.org/akp-emails/emailid/52508) | hxxxx://wikileaks[.]org/akp-emails/fileid/52508/23943 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 100 | 98 | [65945](https://wikileaks.org/akp-emails/emailid/65945) | hxxxx://wikileaks[.]org/akp-emails/fileid/65945/26043 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 101 | 99 | [66238](https://wikileaks.org/akp-emails/emailid/66238) | hxxxx://wikileaks[.]org/akp-emails/fileid/66238/26068 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 102 | 100 | [104533](https://wikileaks.org/akp-emails/emailid/104533) | hxxxx://wikileaks[.]org/akp-emails/fileid/104533/31673 | [CD88498D3BCF97AACE1795B3BFAEC7BF](https://www.virustotal.com/en/search/?query=CD88498D3BCF97AACE1795B3BFAEC7BF) 103 | 101 | [112756](https://wikileaks.org/akp-emails/emailid/112756) | hxxxx://wikileaks[.]org/akp-emails/fileid/112756/32988 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 104 | 102 | [119476](https://wikileaks.org/akp-emails/emailid/119476) | hxxxx://wikileaks[.]org/akp-emails/fileid/119476/33873 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 105 | 103 | [125655](https://wikileaks.org/akp-emails/emailid/125655) | hxxxx://wikileaks[.]org/akp-emails/fileid/125655/34855 | [DE32C2308F73CD357978226981ED1115](https://www.virustotal.com/en/search/?query=DE32C2308F73CD357978226981ED1115) 106 | 104 | [156202](https://wikileaks.org/akp-emails/emailid/156202) | hxxxx://wikileaks[.]org/akp-emails/fileid/156202/36154 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 107 | 105 | [157584](https://wikileaks.org/akp-emails/emailid/157584) | hxxxx://wikileaks[.]org/akp-emails/fileid/157584/36363 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 108 | 106 | [159809](https://wikileaks.org/akp-emails/emailid/159809) | hxxxx://wikileaks[.]org/akp-emails/fileid/159809/36741 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 109 | 107 | [165095](https://wikileaks.org/akp-emails/emailid/165095) | hxxxx://wikileaks[.]org/akp-emails/fileid/165095/37527 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 110 | 108 | [178532](https://wikileaks.org/akp-emails/emailid/178532) | hxxxx://wikileaks[.]org/akp-emails/fileid/178532/39627 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 111 | 109 | [178825](https://wikileaks.org/akp-emails/emailid/178825) | hxxxx://wikileaks[.]org/akp-emails/fileid/178825/39652 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 112 | 110 | [217120](https://wikileaks.org/akp-emails/emailid/217120) | hxxxx://wikileaks[.]org/akp-emails/fileid/217120/45257 | [CD88498D3BCF97AACE1795B3BFAEC7BF](https://www.virustotal.com/en/search/?query=CD88498D3BCF97AACE1795B3BFAEC7BF) 113 | 111 | [225343](https://wikileaks.org/akp-emails/emailid/225343) | hxxxx://wikileaks[.]org/akp-emails/fileid/225343/46572 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 114 | 112 | [232063](https://wikileaks.org/akp-emails/emailid/232063) | hxxxx://wikileaks[.]org/akp-emails/fileid/232063/47457 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 115 | 113 | [238242](https://wikileaks.org/akp-emails/emailid/238242) | hxxxx://wikileaks[.]org/akp-emails/fileid/238242/48439 | [DE32C2308F73CD357978226981ED1115](https://www.virustotal.com/en/search/?query=DE32C2308F73CD357978226981ED1115) 116 | 114 | [245811](https://wikileaks.org/akp-emails/emailid/245811) | hxxxx://wikileaks[.]org/akp-emails/fileid/245811/49575 | [F5053E6588CD22BBA10A20BE27985DC5](https://www.virustotal.com/en/search/?query=F5053E6588CD22BBA10A20BE27985DC5) 117 | 115 | [250249](https://wikileaks.org/akp-emails/emailid/250249) | hxxxx://wikileaks[.]org/akp-emails/fileid/250249/50429 | [D3458E517B15BB2CE10FAE8D4DA5BCC2](https://www.virustotal.com/en/search/?query=D3458E517B15BB2CE10FAE8D4DA5BCC2) 118 | 116 | [251667](https://wikileaks.org/akp-emails/emailid/251667) | hxxxx://wikileaks[.]org/akp-emails/fileid/251667/50707 | [0BB1A0A712B90CD5D281972263AAF675](https://www.virustotal.com/en/search/?query=0BB1A0A712B90CD5D281972263AAF675) 119 | 117 | [254902](https://wikileaks.org/akp-emails/emailid/254902) | hxxxx://wikileaks[.]org/akp-emails/fileid/254902/51467 | [3CA0060E61E786B7163ED2D86E414299](https://www.virustotal.com/en/search/?query=3CA0060E61E786B7163ED2D86E414299) 120 | 118 | [256445](https://wikileaks.org/akp-emails/emailid/256445) | hxxxx://wikileaks[.]org/akp-emails/fileid/256445/52363 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 121 | 119 | [256629](https://wikileaks.org/akp-emails/emailid/256629) | hxxxx://wikileaks[.]org/akp-emails/fileid/256629/52399 | [EF9C122B5C6355BD32543F870A4C47BC](https://www.virustotal.com/en/search/?query=EF9C122B5C6355BD32543F870A4C47BC) 122 | 120 | [256906](https://wikileaks.org/akp-emails/emailid/256906) | hxxxx://wikileaks[.]org/akp-emails/fileid/256906/52469 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 123 | 121 | [256992](https://wikileaks.org/akp-emails/emailid/256992) | hxxxx://wikileaks[.]org/akp-emails/fileid/256992/52490 | [C387F668A47907AF14D6508A3CBC8BEA](https://www.virustotal.com/en/search/?query=C387F668A47907AF14D6508A3CBC8BEA) 124 | 122 | [257166](https://wikileaks.org/akp-emails/emailid/257166) | hxxxx://wikileaks[.]org/akp-emails/fileid/257166/52571 | [0FD2CC9DF505EF66F00537CDD9D1360B](https://www.virustotal.com/en/search/?query=0FD2CC9DF505EF66F00537CDD9D1360B) 125 | 123 | [257244](https://wikileaks.org/akp-emails/emailid/257244) | hxxxx://wikileaks[.]org/akp-emails/fileid/257244/52610 | [F3509F4D635658874D2455111B352EF6](https://www.virustotal.com/en/search/?query=F3509F4D635658874D2455111B352EF6) 126 | 124 | [257419](https://wikileaks.org/akp-emails/emailid/257419) | hxxxx://wikileaks[.]org/akp-emails/fileid/257419/52672 | [80ED03C7C397979052E03BF643DB1470](https://www.virustotal.com/en/search/?query=80ED03C7C397979052E03BF643DB1470) 127 | 125 | [257462](https://wikileaks.org/akp-emails/emailid/257462) | hxxxx://wikileaks[.]org/akp-emails/fileid/257462/52688 | [0C0A614F74BA2764FF1948C2AAE02B8F](https://www.virustotal.com/en/search/?query=0C0A614F74BA2764FF1948C2AAE02B8F) 128 | 126 | [257464](https://wikileaks.org/akp-emails/emailid/257464) | hxxxx://wikileaks[.]org/akp-emails/fileid/257464/52689 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 129 | 127 | [257830](https://wikileaks.org/akp-emails/emailid/257830) | hxxxx://wikileaks[.]org/akp-emails/fileid/257830/52857 | [FED38E5B60763DB68B7F4B4DD42FAC6D](https://www.virustotal.com/en/search/?query=FED38E5B60763DB68B7F4B4DD42FAC6D) 130 | 128 | [257843](https://wikileaks.org/akp-emails/emailid/257843) | hxxxx://wikileaks[.]org/akp-emails/fileid/257843/52867 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 131 | 129 | [257880](https://wikileaks.org/akp-emails/emailid/257880) | hxxxx://wikileaks[.]org/akp-emails/fileid/257880/52874 | [D89A43BF108029667D34CA50010DFE35](https://www.virustotal.com/en/search/?query=D89A43BF108029667D34CA50010DFE35) 132 | 130 | [259008](https://wikileaks.org/akp-emails/emailid/259008) | hxxxx://wikileaks[.]org/akp-emails/fileid/259008/53616 | [53820CEC3211891AA8D6679C7AAE6072](https://www.virustotal.com/en/search/?query=53820CEC3211891AA8D6679C7AAE6072) 133 | 131 | [260318](https://wikileaks.org/akp-emails/emailid/260318) | hxxxx://wikileaks[.]org/akp-emails/fileid/260318/55018 | [8D9700872ED68C4540EAC6CE4CAEA7DB](https://www.virustotal.com/en/search/?query=8D9700872ED68C4540EAC6CE4CAEA7DB) 134 | 132 | [260397](https://wikileaks.org/akp-emails/emailid/260397) | hxxxx://wikileaks[.]org/akp-emails/fileid/260397/55091 | [4E5C9BF38C794137D6730F8FAAFA1DB3](https://www.virustotal.com/en/search/?query=4E5C9BF38C794137D6730F8FAAFA1DB3) 135 | 133 | [263499](https://wikileaks.org/akp-emails/emailid/263499) | hxxxx://wikileaks[.]org/akp-emails/fileid/263499/55945 | [F737105A82A8F4BE489EE2A80BF01E8B](https://www.virustotal.com/en/search/?query=F737105A82A8F4BE489EE2A80BF01E8B) 136 | 134 | [263864](https://wikileaks.org/akp-emails/emailid/263864) | hxxxx://wikileaks[.]org/akp-emails/fileid/263864/56013 | [4C177D58946AEEC8411F5A9E2B9300DB](https://www.virustotal.com/en/search/?query=4C177D58946AEEC8411F5A9E2B9300DB) 137 | 135 | [263864](https://wikileaks.org/akp-emails/emailid/263864) | hxxxx://wikileaks[.]org/akp-emails/fileid/263864/56014 | [2DC0B4190FD61426BDA6D9EA97C9BBDD](https://www.virustotal.com/en/search/?query=2DC0B4190FD61426BDA6D9EA97C9BBDD) 138 | 136 | [267091](https://wikileaks.org/akp-emails/emailid/267091) | hxxxx://wikileaks[.]org/akp-emails/fileid/267091/57254 | [AE39729C50D9136189E61D96993A7AF5](https://www.virustotal.com/en/search/?query=AE39729C50D9136189E61D96993A7AF5) 139 | 137 | [267401](https://wikileaks.org/akp-emails/emailid/267401) | hxxxx://wikileaks[.]org/akp-emails/fileid/267401/57546 | [D8DA70303E8A0085290BCEEA857F12F3](https://www.virustotal.com/en/search/?query=D8DA70303E8A0085290BCEEA857F12F3) 140 | 138 | [268684](https://wikileaks.org/akp-emails/emailid/268684) | hxxxx://wikileaks[.]org/akp-emails/fileid/268684/58611 | [C02BA9235CAA7270EAC684F3C2D9C7B3](https://www.virustotal.com/en/search/?query=C02BA9235CAA7270EAC684F3C2D9C7B3) 141 | 139 | [268982](https://wikileaks.org/akp-emails/emailid/268982) | hxxxx://wikileaks[.]org/akp-emails/fileid/268982/59243 | [9F158C3EB2F37DF7E4A5AC72ABD06043](https://www.virustotal.com/en/search/?query=9F158C3EB2F37DF7E4A5AC72ABD06043) 142 | 140 | [269267](https://wikileaks.org/akp-emails/emailid/269267) | hxxxx://wikileaks[.]org/akp-emails/fileid/269267/59819 | [27524906F0626DA2E99EBA09F9F3E4E0](https://www.virustotal.com/en/search/?query=27524906F0626DA2E99EBA09F9F3E4E0) 143 | 141 | [270682](https://wikileaks.org/akp-emails/emailid/270682) | hxxxx://wikileaks[.]org/akp-emails/fileid/270682/60605 | [47679F7201EE5127B063436077EE4E59](https://www.virustotal.com/en/search/?query=47679F7201EE5127B063436077EE4E59) 144 | 142 | [270767](https://wikileaks.org/akp-emails/emailid/270767) | hxxxx://wikileaks[.]org/akp-emails/fileid/270767/60634 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 145 | 143 | [272330](https://wikileaks.org/akp-emails/emailid/272330) | hxxxx://wikileaks[.]org/akp-emails/fileid/272330/61146 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 146 | 144 | [272670](https://wikileaks.org/akp-emails/emailid/272670) | hxxxx://wikileaks[.]org/akp-emails/fileid/272670/61421 | [3CE47603F435BE5312962F586D38A37A](https://www.virustotal.com/en/search/?query=3CE47603F435BE5312962F586D38A37A) 147 | 145 | [272966](https://wikileaks.org/akp-emails/emailid/272966) | hxxxx://wikileaks[.]org/akp-emails/fileid/272966/61760 | [D89A43BF108029667D34CA50010DFE35](https://www.virustotal.com/en/search/?query=D89A43BF108029667D34CA50010DFE35) 148 | 146 | [273096](https://wikileaks.org/akp-emails/emailid/273096) | hxxxx://wikileaks[.]org/akp-emails/fileid/273096/61855 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 149 | 147 | [273376](https://wikileaks.org/akp-emails/emailid/273376) | hxxxx://wikileaks[.]org/akp-emails/fileid/273376/62154 | [0C0A614F74BA2764FF1948C2AAE02B8F](https://www.virustotal.com/en/search/?query=0C0A614F74BA2764FF1948C2AAE02B8F) 150 | 148 | [273447](https://wikileaks.org/akp-emails/emailid/273447) | hxxxx://wikileaks[.]org/akp-emails/fileid/273447/62214 | [0FD2CC9DF505EF66F00537CDD9D1360B](https://www.virustotal.com/en/search/?query=0FD2CC9DF505EF66F00537CDD9D1360B) 151 | 149 | [273449](https://wikileaks.org/akp-emails/emailid/273449) | hxxxx://wikileaks[.]org/akp-emails/fileid/273449/62216 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 152 | 150 | [273472](https://wikileaks.org/akp-emails/emailid/273472) | hxxxx://wikileaks[.]org/akp-emails/fileid/273472/62233 | [80ED03C7C397979052E03BF643DB1470](https://www.virustotal.com/en/search/?query=80ED03C7C397979052E03BF643DB1470) 153 | 151 | [273604](https://wikileaks.org/akp-emails/emailid/273604) | hxxxx://wikileaks[.]org/akp-emails/fileid/273604/62319 | [F3509F4D635658874D2455111B352EF6](https://www.virustotal.com/en/search/?query=F3509F4D635658874D2455111B352EF6) 154 | 152 | [273610](https://wikileaks.org/akp-emails/emailid/273610) | hxxxx://wikileaks[.]org/akp-emails/fileid/273610/62322 | [C387F668A47907AF14D6508A3CBC8BEA](https://www.virustotal.com/en/search/?query=C387F668A47907AF14D6508A3CBC8BEA) 155 | 153 | [273840](https://wikileaks.org/akp-emails/emailid/273840) | hxxxx://wikileaks[.]org/akp-emails/fileid/273840/62556 | [FED38E5B60763DB68B7F4B4DD42FAC6D](https://www.virustotal.com/en/search/?query=FED38E5B60763DB68B7F4B4DD42FAC6D) 156 | 154 | [273933](https://wikileaks.org/akp-emails/emailid/273933) | hxxxx://wikileaks[.]org/akp-emails/fileid/273933/62641 | [B3BDECD1238650F17D0A7DEFCE0E32AC](https://www.virustotal.com/en/search/?query=B3BDECD1238650F17D0A7DEFCE0E32AC) 157 | 155 | [276403](https://wikileaks.org/akp-emails/emailid/276403) | hxxxx://wikileaks[.]org/akp-emails/fileid/276403/63466 | [9E1801CE0D70993CD7866FE447B28241](https://www.virustotal.com/en/search/?query=9E1801CE0D70993CD7866FE447B28241) 158 | 156 | [276471](https://wikileaks.org/akp-emails/emailid/276471) | hxxxx://wikileaks[.]org/akp-emails/fileid/276471/63513 | [DB5D826916B190EDE6B9D27B024327E4](https://www.virustotal.com/en/search/?query=DB5D826916B190EDE6B9D27B024327E4) 159 | 157 | [276807](https://wikileaks.org/akp-emails/emailid/276807) | hxxxx://wikileaks[.]org/akp-emails/fileid/276807/63601 | [9E1801CE0D70993CD7866FE447B28241](https://www.virustotal.com/en/search/?query=9E1801CE0D70993CD7866FE447B28241) 160 | 158 | [277321](https://wikileaks.org/akp-emails/emailid/277321) | hxxxx://wikileaks[.]org/akp-emails/fileid/277321/63734 | [03FE72EC7F47F2723285A95F7A32703B](https://www.virustotal.com/en/search/?query=03FE72EC7F47F2723285A95F7A32703B) 161 | 159 | [277451](https://wikileaks.org/akp-emails/emailid/277451) | hxxxx://wikileaks[.]org/akp-emails/fileid/277451/63851 | [8D9700872ED68C4540EAC6CE4CAEA7DB](https://www.virustotal.com/en/search/?query=8D9700872ED68C4540EAC6CE4CAEA7DB) 162 | 160 | [278065](https://wikileaks.org/akp-emails/emailid/278065) | hxxxx://wikileaks[.]org/akp-emails/fileid/278065/64370 | [28AAEA05C59D27A089A4E037D056195D](https://www.virustotal.com/en/search/?query=28AAEA05C59D27A089A4E037D056195D) 163 | 161 | [281351](https://wikileaks.org/akp-emails/emailid/281351) | hxxxx://wikileaks[.]org/akp-emails/fileid/281351/64755 | [2F2A95565803493B7CD5644A25AAB832](https://www.virustotal.com/en/search/?query=2F2A95565803493B7CD5644A25AAB832) 164 | 162 | [284783](https://wikileaks.org/akp-emails/emailid/284783) | hxxxx://wikileaks[.]org/akp-emails/fileid/284783/65668 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 165 | 163 | [285385](https://wikileaks.org/akp-emails/emailid/285385) | hxxxx://wikileaks[.]org/akp-emails/fileid/285385/65821 | [4C177D58946AEEC8411F5A9E2B9300DB](https://www.virustotal.com/en/search/?query=4C177D58946AEEC8411F5A9E2B9300DB) 166 | 164 | [285385](https://wikileaks.org/akp-emails/emailid/285385) | hxxxx://wikileaks[.]org/akp-emails/fileid/285385/65822 | [2DC0B4190FD61426BDA6D9EA97C9BBDD](https://www.virustotal.com/en/search/?query=2DC0B4190FD61426BDA6D9EA97C9BBDD) 167 | 165 | [285390](https://wikileaks.org/akp-emails/emailid/285390) | hxxxx://wikileaks[.]org/akp-emails/fileid/285390/65826 | [F737105A82A8F4BE489EE2A80BF01E8B](https://www.virustotal.com/en/search/?query=F737105A82A8F4BE489EE2A80BF01E8B) 168 | 166 | [285651](https://wikileaks.org/akp-emails/emailid/285651) | hxxxx://wikileaks[.]org/akp-emails/fileid/285651/65908 | [DD5D8B121304DB4B1A9A5FC525AA493E](https://www.virustotal.com/en/search/?query=DD5D8B121304DB4B1A9A5FC525AA493E) 169 | 167 | [286577](https://wikileaks.org/akp-emails/emailid/286577) | hxxxx://wikileaks[.]org/akp-emails/fileid/286577/66694 | [C540F5582ACB9593C7B97169B82206BA](https://www.virustotal.com/en/search/?query=C540F5582ACB9593C7B97169B82206BA) 170 | 168 | [286815](https://wikileaks.org/akp-emails/emailid/286815) | hxxxx://wikileaks[.]org/akp-emails/fileid/286815/66960 | [0F372621850B960CF0DD7D388D730E64](https://www.virustotal.com/en/search/?query=0F372621850B960CF0DD7D388D730E64) 171 | 169 | [286846](https://wikileaks.org/akp-emails/emailid/286846) | hxxxx://wikileaks[.]org/akp-emails/fileid/286846/66988 | [1140E97B78F2BADBF435EC730FEAD97A](https://www.virustotal.com/en/search/?query=1140E97B78F2BADBF435EC730FEAD97A) 172 | 170 | [287196](https://wikileaks.org/akp-emails/emailid/287196) | hxxxx://wikileaks[.]org/akp-emails/fileid/287196/67299 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 173 | 171 | [287227](https://wikileaks.org/akp-emails/emailid/287227) | hxxxx://wikileaks[.]org/akp-emails/fileid/287227/67309 | [E8CB95F2C400607DD253B7ED8CAFEF08](https://www.virustotal.com/en/search/?query=E8CB95F2C400607DD253B7ED8CAFEF08) 174 | 172 | [287280](https://wikileaks.org/akp-emails/emailid/287280) | hxxxx://wikileaks[.]org/akp-emails/fileid/287280/67346 | [A0AAE7097CBABE2A432E6F9440706E67](https://www.virustotal.com/en/search/?query=A0AAE7097CBABE2A432E6F9440706E67) 175 | 173 | [287649](https://wikileaks.org/akp-emails/emailid/287649) | hxxxx://wikileaks[.]org/akp-emails/fileid/287649/67719 | [5A6137DFEA322F2C2C1F01A55FC04480](https://www.virustotal.com/en/search/?query=5A6137DFEA322F2C2C1F01A55FC04480) 176 | 174 | [288039](https://wikileaks.org/akp-emails/emailid/288039) | hxxxx://wikileaks[.]org/akp-emails/fileid/288039/67986 | [18946DAD0D4FF2B54F51124B8C5B04F2](https://www.virustotal.com/en/search/?query=18946DAD0D4FF2B54F51124B8C5B04F2) 177 | 175 | [288662](https://wikileaks.org/akp-emails/emailid/288662) | hxxxx://wikileaks[.]org/akp-emails/fileid/288662/68747 | [BD7FBE42F21AC032A65954D2F19CB319](https://www.virustotal.com/en/search/?query=BD7FBE42F21AC032A65954D2F19CB319) 178 | 176 | [289755](https://wikileaks.org/akp-emails/emailid/289755) | hxxxx://wikileaks[.]org/akp-emails/fileid/289755/69830 | [75170877C60D21B3C9B234E4E76D9CA8](https://www.virustotal.com/en/search/?query=75170877C60D21B3C9B234E4E76D9CA8) 179 | 177 | [290241](https://wikileaks.org/akp-emails/emailid/290241) | hxxxx://wikileaks[.]org/akp-emails/fileid/290241/70215 | [FE3261FD73E6BB2D7206FDC07D86C41A](https://www.virustotal.com/en/search/?query=FE3261FD73E6BB2D7206FDC07D86C41A) 180 | 178 | [290762](https://wikileaks.org/akp-emails/emailid/290762) | hxxxx://wikileaks[.]org/akp-emails/fileid/290762/70504 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 181 | 179 | [291057](https://wikileaks.org/akp-emails/emailid/291057) | hxxxx://wikileaks[.]org/akp-emails/fileid/291057/70722 | [80D75B840DACBA7A522C89195B181FFE](https://www.virustotal.com/en/search/?query=80D75B840DACBA7A522C89195B181FFE) 182 | 180 | [291057](https://wikileaks.org/akp-emails/emailid/291057) | hxxxx://wikileaks[.]org/akp-emails/fileid/291057/70723 | [1226C4A8A0814AD0AEC85B249104CABC](https://www.virustotal.com/en/search/?query=1226C4A8A0814AD0AEC85B249104CABC) 183 | 181 | [291148](https://wikileaks.org/akp-emails/emailid/291148) | hxxxx://wikileaks[.]org/akp-emails/fileid/291148/70753 | [9E18F88DA27D092A6F4978721434448B](https://www.virustotal.com/en/search/?query=9E18F88DA27D092A6F4978721434448B) 184 | 182 | [291755](https://wikileaks.org/akp-emails/emailid/291755) | hxxxx://wikileaks[.]org/akp-emails/fileid/291755/71281 | [1B853B2962BB6D5CAA7AB4A64B83EEFF](https://www.virustotal.com/en/search/?query=1B853B2962BB6D5CAA7AB4A64B83EEFF) 185 | 183 | [292537](https://wikileaks.org/akp-emails/emailid/292537) | hxxxx://wikileaks[.]org/akp-emails/fileid/292537/71907 | [BDB264F890E5189D6F988A9889678A87](https://www.virustotal.com/en/search/?query=BDB264F890E5189D6F988A9889678A87) 186 | 184 | [292738](https://wikileaks.org/akp-emails/emailid/292738) | hxxxx://wikileaks[.]org/akp-emails/fileid/292738/72057 | [C5CA294FAFA9F2AA3B04CC029E77D291](https://www.virustotal.com/en/search/?query=C5CA294FAFA9F2AA3B04CC029E77D291) 187 | 185 | [292810](https://wikileaks.org/akp-emails/emailid/292810) | hxxxx://wikileaks[.]org/akp-emails/fileid/292810/72131 | [FF88C710903EB21A174A705F5A7B4BEA](https://www.virustotal.com/en/search/?query=FF88C710903EB21A174A705F5A7B4BEA) 188 | 186 | [294977](https://wikileaks.org/akp-emails/emailid/294977) | hxxxx://wikileaks[.]org/akp-emails/fileid/294977/73664 | [AB47369E113235C81A4F66CE663859B7](https://www.virustotal.com/en/search/?query=AB47369E113235C81A4F66CE663859B7) 189 | 187 | [296356](https://wikileaks.org/akp-emails/emailid/296356) | hxxxx://wikileaks[.]org/akp-emails/fileid/296356/74888 | [4F023C334EBC4445AC5C989491A3BA04](https://www.virustotal.com/en/search/?query=4F023C334EBC4445AC5C989491A3BA04) 190 | 188 | [299090](https://wikileaks.org/akp-emails/emailid/299090) | hxxxx://wikileaks[.]org/akp-emails/fileid/299090/76935 | [EAE2A01ECA177B6E7613180DC76F4BCA](https://www.virustotal.com/en/search/?query=EAE2A01ECA177B6E7613180DC76F4BCA) 191 | 189 | [300028](https://wikileaks.org/akp-emails/emailid/300028) | hxxxx://wikileaks[.]org/akp-emails/fileid/300028/77530 | [605C84E64A09F0B8FA385AA4A13F603B](https://www.virustotal.com/en/search/?query=605C84E64A09F0B8FA385AA4A13F603B) 192 | 190 | [300697](https://wikileaks.org/akp-emails/emailid/300697) | hxxxx://wikileaks[.]org/akp-emails/fileid/300697/78148 | [3944CDA391BB766169103A61F4EDBD9F](https://www.virustotal.com/en/search/?query=3944CDA391BB766169103A61F4EDBD9F) 193 | 191 | [302601](https://wikileaks.org/akp-emails/emailid/302601) | hxxxx://wikileaks[.]org/akp-emails/fileid/302601/82461 | [D1AA344ABA1FF57C13AB1AD65EF0F388](https://www.virustotal.com/en/search/?query=D1AA344ABA1FF57C13AB1AD65EF0F388) 194 | 192 | [310321](https://wikileaks.org/akp-emails/emailid/310321) | hxxxx://wikileaks[.]org/akp-emails/fileid/310321/108561 | [A31C71334281ACE2FD7AB3F9BE3FE5F6](https://www.virustotal.com/en/search/?query=A31C71334281ACE2FD7AB3F9BE3FE5F6) 195 | 193 | [314256](https://wikileaks.org/akp-emails/emailid/314256) | hxxxx://wikileaks[.]org/akp-emails/fileid/314256/123461 | [EFDD182D425F2E8CB10896247F3D81D0](https://www.virustotal.com/en/search/?query=EFDD182D425F2E8CB10896247F3D81D0) 196 | 194 | [314282](https://wikileaks.org/akp-emails/emailid/314282) | hxxxx://wikileaks[.]org/akp-emails/fileid/314282/123576 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 197 | 195 | [314450](https://wikileaks.org/akp-emails/emailid/314450) | hxxxx://wikileaks[.]org/akp-emails/fileid/314450/123661 | [BD7FBE42F21AC032A65954D2F19CB319](https://www.virustotal.com/en/search/?query=BD7FBE42F21AC032A65954D2F19CB319) 198 | 196 | [314533](https://wikileaks.org/akp-emails/emailid/314533) | hxxxx://wikileaks[.]org/akp-emails/fileid/314533/123695 | [5A6137DFEA322F2C2C1F01A55FC04480](https://www.virustotal.com/en/search/?query=5A6137DFEA322F2C2C1F01A55FC04480) 199 | 197 | [314603](https://wikileaks.org/akp-emails/emailid/314603) | hxxxx://wikileaks[.]org/akp-emails/fileid/314603/123725 | [FF88C710903EB21A174A705F5A7B4BEA](https://www.virustotal.com/en/search/?query=FF88C710903EB21A174A705F5A7B4BEA) 200 | 198 | [314617](https://wikileaks.org/akp-emails/emailid/314617) | hxxxx://wikileaks[.]org/akp-emails/fileid/314617/123744 | [9E18F88DA27D092A6F4978721434448B](https://www.virustotal.com/en/search/?query=9E18F88DA27D092A6F4978721434448B) 201 | 199 | [314902](https://wikileaks.org/akp-emails/emailid/314902) | hxxxx://wikileaks[.]org/akp-emails/fileid/314902/123842 | [7DF8C754A44F497301ADE4EBE718F81B](https://www.virustotal.com/en/search/?query=7DF8C754A44F497301ADE4EBE718F81B) 202 | 200 | [314902](https://wikileaks.org/akp-emails/emailid/314902) | hxxxx://wikileaks[.]org/akp-emails/fileid/314902/123843 | [D40B0899C85983B990E0B6220EF6237C](https://www.virustotal.com/en/search/?query=D40B0899C85983B990E0B6220EF6237C) 203 | 201 | [315170](https://wikileaks.org/akp-emails/emailid/315170) | hxxxx://wikileaks[.]org/akp-emails/fileid/315170/124026 | [18946DAD0D4FF2B54F51124B8C5B04F2](https://www.virustotal.com/en/search/?query=18946DAD0D4FF2B54F51124B8C5B04F2) 204 | 202 | [315288](https://wikileaks.org/akp-emails/emailid/315288) | hxxxx://wikileaks[.]org/akp-emails/fileid/315288/124097 | [80D75B840DACBA7A522C89195B181FFE](https://www.virustotal.com/en/search/?query=80D75B840DACBA7A522C89195B181FFE) 205 | 203 | [315288](https://wikileaks.org/akp-emails/emailid/315288) | hxxxx://wikileaks[.]org/akp-emails/fileid/315288/124098 | [1226C4A8A0814AD0AEC85B249104CABC](https://www.virustotal.com/en/search/?query=1226C4A8A0814AD0AEC85B249104CABC) 206 | 204 | [315443](https://wikileaks.org/akp-emails/emailid/315443) | hxxxx://wikileaks[.]org/akp-emails/fileid/315443/124247 | [1140E97B78F2BADBF435EC730FEAD97A](https://www.virustotal.com/en/search/?query=1140E97B78F2BADBF435EC730FEAD97A) 207 | 205 | [315564](https://wikileaks.org/akp-emails/emailid/315564) | hxxxx://wikileaks[.]org/akp-emails/fileid/315564/124334 | [0F372621850B960CF0DD7D388D730E64](https://www.virustotal.com/en/search/?query=0F372621850B960CF0DD7D388D730E64) 208 | 206 | [315777](https://wikileaks.org/akp-emails/emailid/315777) | hxxxx://wikileaks[.]org/akp-emails/fileid/315777/124536 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 209 | 207 | [315779](https://wikileaks.org/akp-emails/emailid/315779) | hxxxx://wikileaks[.]org/akp-emails/fileid/315779/124537 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 210 | 208 | [315802](https://wikileaks.org/akp-emails/emailid/315802) | hxxxx://wikileaks[.]org/akp-emails/fileid/315802/124550 | [C540F5582ACB9593C7B97169B82206BA](https://www.virustotal.com/en/search/?query=C540F5582ACB9593C7B97169B82206BA) 211 | 209 | [316408](https://wikileaks.org/akp-emails/emailid/316408) | hxxxx://wikileaks[.]org/akp-emails/fileid/316408/124974 | [0A60DF3F571187D76BC65BF6C4BAE903](https://www.virustotal.com/en/search/?query=0A60DF3F571187D76BC65BF6C4BAE903) 212 | 210 | [320089](https://wikileaks.org/akp-emails/emailid/320089) | hxxxx://wikileaks[.]org/akp-emails/fileid/320089/126848 | [EFDD182D425F2E8CB10896247F3D81D0](https://www.virustotal.com/en/search/?query=EFDD182D425F2E8CB10896247F3D81D0) 213 | 211 | [321101](https://wikileaks.org/akp-emails/emailid/321101) | hxxxx://wikileaks[.]org/akp-emails/fileid/321101/127046 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 214 | 212 | [323609](https://wikileaks.org/akp-emails/emailid/323609) | hxxxx://wikileaks[.]org/akp-emails/fileid/323609/127915 | [BE4044FDB89FF2BB65BBDB52CEDA1DB5](https://www.virustotal.com/en/search/?query=BE4044FDB89FF2BB65BBDB52CEDA1DB5) 215 | 213 | [324040](https://wikileaks.org/akp-emails/emailid/324040) | hxxxx://wikileaks[.]org/akp-emails/fileid/324040/128041 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 216 | 214 | [324041](https://wikileaks.org/akp-emails/emailid/324041) | hxxxx://wikileaks[.]org/akp-emails/fileid/324041/128042 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 217 | 215 | [324042](https://wikileaks.org/akp-emails/emailid/324042) | hxxxx://wikileaks[.]org/akp-emails/fileid/324042/128043 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 218 | 216 | [324079](https://wikileaks.org/akp-emails/emailid/324079) | hxxxx://wikileaks[.]org/akp-emails/fileid/324079/128110 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 219 | 217 | [324080](https://wikileaks.org/akp-emails/emailid/324080) | hxxxx://wikileaks[.]org/akp-emails/fileid/324080/128111 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 220 | 218 | [324083](https://wikileaks.org/akp-emails/emailid/324083) | hxxxx://wikileaks[.]org/akp-emails/fileid/324083/128112 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 221 | 219 | [324085](https://wikileaks.org/akp-emails/emailid/324085) | hxxxx://wikileaks[.]org/akp-emails/fileid/324085/128116 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 222 | 220 | [324086](https://wikileaks.org/akp-emails/emailid/324086) | hxxxx://wikileaks[.]org/akp-emails/fileid/324086/128117 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 223 | 221 | [324087](https://wikileaks.org/akp-emails/emailid/324087) | hxxxx://wikileaks[.]org/akp-emails/fileid/324087/128118 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 224 | 222 | [324088](https://wikileaks.org/akp-emails/emailid/324088) | hxxxx://wikileaks[.]org/akp-emails/fileid/324088/128119 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 225 | 223 | [324089](https://wikileaks.org/akp-emails/emailid/324089) | hxxxx://wikileaks[.]org/akp-emails/fileid/324089/128120 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 226 | 224 | [324090](https://wikileaks.org/akp-emails/emailid/324090) | hxxxx://wikileaks[.]org/akp-emails/fileid/324090/128121 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 227 | 225 | [324091](https://wikileaks.org/akp-emails/emailid/324091) | hxxxx://wikileaks[.]org/akp-emails/fileid/324091/128122 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 228 | 226 | [324093](https://wikileaks.org/akp-emails/emailid/324093) | hxxxx://wikileaks[.]org/akp-emails/fileid/324093/128123 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 229 | 227 | [324094](https://wikileaks.org/akp-emails/emailid/324094) | hxxxx://wikileaks[.]org/akp-emails/fileid/324094/128124 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 230 | 228 | [324099](https://wikileaks.org/akp-emails/emailid/324099) | hxxxx://wikileaks[.]org/akp-emails/fileid/324099/128126 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 231 | 229 | [324123](https://wikileaks.org/akp-emails/emailid/324123) | hxxxx://wikileaks[.]org/akp-emails/fileid/324123/128224 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 232 | 230 | [324131](https://wikileaks.org/akp-emails/emailid/324131) | hxxxx://wikileaks[.]org/akp-emails/fileid/324131/128230 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 233 | 231 | [327263](https://wikileaks.org/akp-emails/emailid/327263) | hxxxx://wikileaks[.]org/akp-emails/fileid/327263/130990 | [1B853B2962BB6D5CAA7AB4A64B83EEFF](https://www.virustotal.com/en/search/?query=1B853B2962BB6D5CAA7AB4A64B83EEFF) 234 | 232 | [327355](https://wikileaks.org/akp-emails/emailid/327355) | hxxxx://wikileaks[.]org/akp-emails/fileid/327355/131175 | [FE3261FD73E6BB2D7206FDC07D86C41A](https://www.virustotal.com/en/search/?query=FE3261FD73E6BB2D7206FDC07D86C41A) 235 | 233 | [329561](https://wikileaks.org/akp-emails/emailid/329561) | hxxxx://wikileaks[.]org/akp-emails/fileid/329561/133869 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 236 | 234 | [329637](https://wikileaks.org/akp-emails/emailid/329637) | hxxxx://wikileaks[.]org/akp-emails/fileid/329637/133901 | [BD7FBE42F21AC032A65954D2F19CB319](https://www.virustotal.com/en/search/?query=BD7FBE42F21AC032A65954D2F19CB319) 237 | 235 | [329665](https://wikileaks.org/akp-emails/emailid/329665) | hxxxx://wikileaks[.]org/akp-emails/fileid/329665/133919 | [5A6137DFEA322F2C2C1F01A55FC04480](https://www.virustotal.com/en/search/?query=5A6137DFEA322F2C2C1F01A55FC04480) 238 | 236 | [329676](https://wikileaks.org/akp-emails/emailid/329676) | hxxxx://wikileaks[.]org/akp-emails/fileid/329676/133924 | [FF88C710903EB21A174A705F5A7B4BEA](https://www.virustotal.com/en/search/?query=FF88C710903EB21A174A705F5A7B4BEA) 239 | 237 | [329677](https://wikileaks.org/akp-emails/emailid/329677) | hxxxx://wikileaks[.]org/akp-emails/fileid/329677/133925 | [9E18F88DA27D092A6F4978721434448B](https://www.virustotal.com/en/search/?query=9E18F88DA27D092A6F4978721434448B) 240 | 238 | [329778](https://wikileaks.org/akp-emails/emailid/329778) | hxxxx://wikileaks[.]org/akp-emails/fileid/329778/133994 | [18946DAD0D4FF2B54F51124B8C5B04F2](https://www.virustotal.com/en/search/?query=18946DAD0D4FF2B54F51124B8C5B04F2) 241 | 239 | [329789](https://wikileaks.org/akp-emails/emailid/329789) | hxxxx://wikileaks[.]org/akp-emails/fileid/329789/133999 | [80D75B840DACBA7A522C89195B181FFE](https://www.virustotal.com/en/search/?query=80D75B840DACBA7A522C89195B181FFE) 242 | 240 | [329789](https://wikileaks.org/akp-emails/emailid/329789) | hxxxx://wikileaks[.]org/akp-emails/fileid/329789/134000 | [1226C4A8A0814AD0AEC85B249104CABC](https://www.virustotal.com/en/search/?query=1226C4A8A0814AD0AEC85B249104CABC) 243 | 241 | [329809](https://wikileaks.org/akp-emails/emailid/329809) | hxxxx://wikileaks[.]org/akp-emails/fileid/329809/134014 | [1140E97B78F2BADBF435EC730FEAD97A](https://www.virustotal.com/en/search/?query=1140E97B78F2BADBF435EC730FEAD97A) 244 | 242 | [329831](https://wikileaks.org/akp-emails/emailid/329831) | hxxxx://wikileaks[.]org/akp-emails/fileid/329831/134018 | [0F372621850B960CF0DD7D388D730E64](https://www.virustotal.com/en/search/?query=0F372621850B960CF0DD7D388D730E64) 245 | 243 | [329866](https://wikileaks.org/akp-emails/emailid/329866) | hxxxx://wikileaks[.]org/akp-emails/fileid/329866/134035 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 246 | 244 | [329867](https://wikileaks.org/akp-emails/emailid/329867) | hxxxx://wikileaks[.]org/akp-emails/fileid/329867/134036 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 247 | 245 | [329871](https://wikileaks.org/akp-emails/emailid/329871) | hxxxx://wikileaks[.]org/akp-emails/fileid/329871/134037 | [C540F5582ACB9593C7B97169B82206BA](https://www.virustotal.com/en/search/?query=C540F5582ACB9593C7B97169B82206BA) 248 | 246 | [329978](https://wikileaks.org/akp-emails/emailid/329978) | hxxxx://wikileaks[.]org/akp-emails/fileid/329978/134081 | [0A60DF3F571187D76BC65BF6C4BAE903](https://www.virustotal.com/en/search/?query=0A60DF3F571187D76BC65BF6C4BAE903) 249 | 247 | [330933](https://wikileaks.org/akp-emails/emailid/330933) | hxxxx://wikileaks[.]org/akp-emails/fileid/330933/134826 | [C6DAA13C696831C843D1055F93CE768E](https://www.virustotal.com/en/search/?query=C6DAA13C696831C843D1055F93CE768E) 250 | 248 | [331076](https://wikileaks.org/akp-emails/emailid/331076) | hxxxx://wikileaks[.]org/akp-emails/fileid/331076/134962 | [79A92AFF2FB317434A63979AE76C37B8](https://www.virustotal.com/en/search/?query=79A92AFF2FB317434A63979AE76C37B8) 251 | 249 | [331326](https://wikileaks.org/akp-emails/emailid/331326) | hxxxx://wikileaks[.]org/akp-emails/fileid/331326/135146 | [DD5D8B121304DB4B1A9A5FC525AA493E](https://www.virustotal.com/en/search/?query=DD5D8B121304DB4B1A9A5FC525AA493E) 252 | 250 | [331351](https://wikileaks.org/akp-emails/emailid/331351) | hxxxx://wikileaks[.]org/akp-emails/fileid/331351/135170 | [9FE18401D900FC5768A9ADFBFAF205B2](https://www.virustotal.com/en/search/?query=9FE18401D900FC5768A9ADFBFAF205B2) 253 | 251 | [331891](https://wikileaks.org/akp-emails/emailid/331891) | hxxxx://wikileaks[.]org/akp-emails/fileid/331891/135601 | [59D0F876AE244012A300EE32815EE700](https://www.virustotal.com/en/search/?query=59D0F876AE244012A300EE32815EE700) 254 | 252 | [332203](https://wikileaks.org/akp-emails/emailid/332203) | hxxxx://wikileaks[.]org/akp-emails/fileid/332203/135815 | [1AAAAC4B8EAA31C954EFD3C964264739](https://www.virustotal.com/en/search/?query=1AAAAC4B8EAA31C954EFD3C964264739) 255 | 253 | [332443](https://wikileaks.org/akp-emails/emailid/332443) | hxxxx://wikileaks[.]org/akp-emails/fileid/332443/135869 | [BD7FBE42F21AC032A65954D2F19CB319](https://www.virustotal.com/en/search/?query=BD7FBE42F21AC032A65954D2F19CB319) 256 | 254 | [332466](https://wikileaks.org/akp-emails/emailid/332466) | hxxxx://wikileaks[.]org/akp-emails/fileid/332466/135871 | [5A6137DFEA322F2C2C1F01A55FC04480](https://www.virustotal.com/en/search/?query=5A6137DFEA322F2C2C1F01A55FC04480) 257 | 255 | [332499](https://wikileaks.org/akp-emails/emailid/332499) | hxxxx://wikileaks[.]org/akp-emails/fileid/332499/135876 | [FF88C710903EB21A174A705F5A7B4BEA](https://www.virustotal.com/en/search/?query=FF88C710903EB21A174A705F5A7B4BEA) 258 | 256 | [332506](https://wikileaks.org/akp-emails/emailid/332506) | hxxxx://wikileaks[.]org/akp-emails/fileid/332506/135877 | [9E18F88DA27D092A6F4978721434448B](https://www.virustotal.com/en/search/?query=9E18F88DA27D092A6F4978721434448B) 259 | 257 | [332718](https://wikileaks.org/akp-emails/emailid/332718) | hxxxx://wikileaks[.]org/akp-emails/fileid/332718/135900 | [18946DAD0D4FF2B54F51124B8C5B04F2](https://www.virustotal.com/en/search/?query=18946DAD0D4FF2B54F51124B8C5B04F2) 260 | 258 | [332734](https://wikileaks.org/akp-emails/emailid/332734) | hxxxx://wikileaks[.]org/akp-emails/fileid/332734/135903 | [80D75B840DACBA7A522C89195B181FFE](https://www.virustotal.com/en/search/?query=80D75B840DACBA7A522C89195B181FFE) 261 | 259 | [332734](https://wikileaks.org/akp-emails/emailid/332734) | hxxxx://wikileaks[.]org/akp-emails/fileid/332734/135904 | [1226C4A8A0814AD0AEC85B249104CABC](https://www.virustotal.com/en/search/?query=1226C4A8A0814AD0AEC85B249104CABC) 262 | 260 | [332760](https://wikileaks.org/akp-emails/emailid/332760) | hxxxx://wikileaks[.]org/akp-emails/fileid/332760/135917 | [1140E97B78F2BADBF435EC730FEAD97A](https://www.virustotal.com/en/search/?query=1140E97B78F2BADBF435EC730FEAD97A) 263 | 261 | [332786](https://wikileaks.org/akp-emails/emailid/332786) | hxxxx://wikileaks[.]org/akp-emails/fileid/332786/135923 | [0F372621850B960CF0DD7D388D730E64](https://www.virustotal.com/en/search/?query=0F372621850B960CF0DD7D388D730E64) 264 | 262 | [332828](https://wikileaks.org/akp-emails/emailid/332828) | hxxxx://wikileaks[.]org/akp-emails/fileid/332828/135937 | [8E3641C279AFE7BA345D550BBDF454B8](https://www.virustotal.com/en/search/?query=8E3641C279AFE7BA345D550BBDF454B8) 265 | 263 | [332832](https://wikileaks.org/akp-emails/emailid/332832) | hxxxx://wikileaks[.]org/akp-emails/fileid/332832/135939 | [C540F5582ACB9593C7B97169B82206BA](https://www.virustotal.com/en/search/?query=C540F5582ACB9593C7B97169B82206BA) 266 | 264 | [332978](https://wikileaks.org/akp-emails/emailid/332978) | hxxxx://wikileaks[.]org/akp-emails/fileid/332978/136006 | [0A60DF3F571187D76BC65BF6C4BAE903](https://www.virustotal.com/en/search/?query=0A60DF3F571187D76BC65BF6C4BAE903) 267 | 265 | [333466](https://wikileaks.org/akp-emails/emailid/333466) | hxxxx://wikileaks[.]org/akp-emails/fileid/333466/136190 | [3BC0B664C3AC0408E863D7D2BAFD176E](https://www.virustotal.com/en/search/?query=3BC0B664C3AC0408E863D7D2BAFD176E) 268 | 266 | [337049](https://wikileaks.org/akp-emails/emailid/337049) | hxxxx://wikileaks[.]org/akp-emails/fileid/337049/139126 | [778848732A27D0085FB2D7D94184A47F](https://www.virustotal.com/en/search/?query=778848732A27D0085FB2D7D94184A47F) 269 | 267 | [337927](https://wikileaks.org/akp-emails/emailid/337927) | hxxxx://wikileaks[.]org/akp-emails/fileid/337927/139544 | [C02BA9235CAA7270EAC684F3C2D9C7B3](https://www.virustotal.com/en/search/?query=C02BA9235CAA7270EAC684F3C2D9C7B3) 270 | 268 | [338287](https://wikileaks.org/akp-emails/emailid/338287) | hxxxx://wikileaks[.]org/akp-emails/fileid/338287/139657 | [A3F6D3089AF272650B38136AB0AD5F0E](https://www.virustotal.com/en/search/?query=A3F6D3089AF272650B38136AB0AD5F0E) 271 | 269 | [338325](https://wikileaks.org/akp-emails/emailid/338325) | hxxxx://wikileaks[.]org/akp-emails/fileid/338325/139686 | [F4EFF7E1F064FA4C82788333C080B46D](https://www.virustotal.com/en/search/?query=F4EFF7E1F064FA4C82788333C080B46D) 272 | 270 | [338531](https://wikileaks.org/akp-emails/emailid/338531) | hxxxx://wikileaks[.]org/akp-emails/fileid/338531/139822 | [9FE18401D900FC5768A9ADFBFAF205B2](https://www.virustotal.com/en/search/?query=9FE18401D900FC5768A9ADFBFAF205B2) 273 | 271 | [339715](https://wikileaks.org/akp-emails/emailid/339715) | hxxxx://wikileaks[.]org/akp-emails/fileid/339715/140586 | [3BC0B664C3AC0408E863D7D2BAFD176E](https://www.virustotal.com/en/search/?query=3BC0B664C3AC0408E863D7D2BAFD176E) 274 | 272 | [340463](https://wikileaks.org/akp-emails/emailid/340463) | hxxxx://wikileaks[.]org/akp-emails/fileid/340463/141010 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 275 | 273 | [340464](https://wikileaks.org/akp-emails/emailid/340464) | hxxxx://wikileaks[.]org/akp-emails/fileid/340464/141011 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 276 | 274 | [340466](https://wikileaks.org/akp-emails/emailid/340466) | hxxxx://wikileaks[.]org/akp-emails/fileid/340466/141012 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 277 | 275 | [340467](https://wikileaks.org/akp-emails/emailid/340467) | hxxxx://wikileaks[.]org/akp-emails/fileid/340467/141013 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 278 | 276 | [340468](https://wikileaks.org/akp-emails/emailid/340468) | hxxxx://wikileaks[.]org/akp-emails/fileid/340468/141014 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 279 | 277 | [340469](https://wikileaks.org/akp-emails/emailid/340469) | hxxxx://wikileaks[.]org/akp-emails/fileid/340469/141015 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 280 | 278 | [340471](https://wikileaks.org/akp-emails/emailid/340471) | hxxxx://wikileaks[.]org/akp-emails/fileid/340471/141016 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 281 | 279 | [340472](https://wikileaks.org/akp-emails/emailid/340472) | hxxxx://wikileaks[.]org/akp-emails/fileid/340472/141017 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 282 | 280 | [344099](https://wikileaks.org/akp-emails/emailid/344099) | hxxxx://wikileaks[.]org/akp-emails/fileid/344099/142027 | [927DCEDFF68A2EF804E38221CE502E5F](https://www.virustotal.com/en/search/?query=927DCEDFF68A2EF804E38221CE502E5F) 283 | 281 | [344954](https://wikileaks.org/akp-emails/emailid/344954) | hxxxx://wikileaks[.]org/akp-emails/fileid/344954/142345 | [9FE18401D900FC5768A9ADFBFAF205B2](https://www.virustotal.com/en/search/?query=9FE18401D900FC5768A9ADFBFAF205B2) 284 | 282 | [345093](https://wikileaks.org/akp-emails/emailid/345093) | hxxxx://wikileaks[.]org/akp-emails/fileid/345093/142403 | [218EC9E8C4C8E0F6D4DEDDDEABB3B5B2](https://www.virustotal.com/en/search/?query=218EC9E8C4C8E0F6D4DEDDDEABB3B5B2) 285 | 283 | [345095](https://wikileaks.org/akp-emails/emailid/345095) | hxxxx://wikileaks[.]org/akp-emails/fileid/345095/142404 | [27C03273627381EE6ED993F9A06C771F](https://www.virustotal.com/en/search/?query=27C03273627381EE6ED993F9A06C771F) 286 | 284 | [345096](https://wikileaks.org/akp-emails/emailid/345096) | hxxxx://wikileaks[.]org/akp-emails/fileid/345096/142405 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 287 | 285 | [345165](https://wikileaks.org/akp-emails/emailid/345165) | hxxxx://wikileaks[.]org/akp-emails/fileid/345165/142472 | [DD5D8B121304DB4B1A9A5FC525AA493E](https://www.virustotal.com/en/search/?query=DD5D8B121304DB4B1A9A5FC525AA493E) 288 | 286 | [347454](https://wikileaks.org/akp-emails/emailid/347454) | hxxxx://wikileaks[.]org/akp-emails/fileid/347454/143586 | [98D69A5D297FD967C26F0899C762E18F](https://www.virustotal.com/en/search/?query=98D69A5D297FD967C26F0899C762E18F) 289 | 287 | [347904](https://wikileaks.org/akp-emails/emailid/347904) | hxxxx://wikileaks[.]org/akp-emails/fileid/347904/143743 | [018464064DA42B830239E6BF101DDF3A](https://www.virustotal.com/en/search/?query=018464064DA42B830239E6BF101DDF3A) 290 | 288 | [347905](https://wikileaks.org/akp-emails/emailid/347905) | hxxxx://wikileaks[.]org/akp-emails/fileid/347905/143744 | [1753B97B413E89C7F84BCD1CA93856E9](https://www.virustotal.com/en/search/?query=1753B97B413E89C7F84BCD1CA93856E9) 291 | 289 | [350874](https://wikileaks.org/akp-emails/emailid/350874) | hxxxx://wikileaks[.]org/akp-emails/fileid/350874/144993 | [B7350F1EE5641CB310E139999AF8EF54](https://www.virustotal.com/en/search/?query=B7350F1EE5641CB310E139999AF8EF54) 292 | 290 | [350967](https://wikileaks.org/akp-emails/emailid/350967) | hxxxx://wikileaks[.]org/akp-emails/fileid/350967/145065 | [194BF637913CC140A594596434F04AA2](https://www.virustotal.com/en/search/?query=194BF637913CC140A594596434F04AA2) 293 | 291 | [352309](https://wikileaks.org/akp-emails/emailid/352309) | hxxxx://wikileaks[.]org/akp-emails/fileid/352309/145780 | [DD5D8B121304DB4B1A9A5FC525AA493E](https://www.virustotal.com/en/search/?query=DD5D8B121304DB4B1A9A5FC525AA493E) 294 | 292 | [354583](https://wikileaks.org/akp-emails/emailid/354583) | hxxxx://wikileaks[.]org/akp-emails/fileid/354583/147442 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 295 | 293 | [354584](https://wikileaks.org/akp-emails/emailid/354584) | hxxxx://wikileaks[.]org/akp-emails/fileid/354584/147443 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 296 | 294 | [354586](https://wikileaks.org/akp-emails/emailid/354586) | hxxxx://wikileaks[.]org/akp-emails/fileid/354586/147447 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 297 | 295 | [354587](https://wikileaks.org/akp-emails/emailid/354587) | hxxxx://wikileaks[.]org/akp-emails/fileid/354587/147448 | [5F4A1F03BD7425CE292BA6D812D2090A](https://www.virustotal.com/en/search/?query=5F4A1F03BD7425CE292BA6D812D2090A) 298 | 296 | [354627](https://wikileaks.org/akp-emails/emailid/354627) | hxxxx://wikileaks[.]org/akp-emails/fileid/354627/147458 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 299 | 297 | [354630](https://wikileaks.org/akp-emails/emailid/354630) | hxxxx://wikileaks[.]org/akp-emails/fileid/354630/147461 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 300 | 298 | [354632](https://wikileaks.org/akp-emails/emailid/354632) | hxxxx://wikileaks[.]org/akp-emails/fileid/354632/147464 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 301 | 299 | [354633](https://wikileaks.org/akp-emails/emailid/354633) | hxxxx://wikileaks[.]org/akp-emails/fileid/354633/147465 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 302 | 300 | [354638](https://wikileaks.org/akp-emails/emailid/354638) | hxxxx://wikileaks[.]org/akp-emails/fileid/354638/147477 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 303 | 301 | [354639](https://wikileaks.org/akp-emails/emailid/354639) | hxxxx://wikileaks[.]org/akp-emails/fileid/354639/147478 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 304 | 302 | [354641](https://wikileaks.org/akp-emails/emailid/354641) | hxxxx://wikileaks[.]org/akp-emails/fileid/354641/147480 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 305 | 303 | [354642](https://wikileaks.org/akp-emails/emailid/354642) | hxxxx://wikileaks[.]org/akp-emails/fileid/354642/147481 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 306 | 304 | [354643](https://wikileaks.org/akp-emails/emailid/354643) | hxxxx://wikileaks[.]org/akp-emails/fileid/354643/147482 | [08DA107194CD245BB509F632CE70E868](https://www.virustotal.com/en/search/?query=08DA107194CD245BB509F632CE70E868) 307 | 305 | [354647](https://wikileaks.org/akp-emails/emailid/354647) | hxxxx://wikileaks[.]org/akp-emails/fileid/354647/147485 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 308 | 306 | [354648](https://wikileaks.org/akp-emails/emailid/354648) | hxxxx://wikileaks[.]org/akp-emails/fileid/354648/147486 | [FFE6912B6483EFB2A684A1E7AE970F1A](https://www.virustotal.com/en/search/?query=FFE6912B6483EFB2A684A1E7AE970F1A) 309 | 307 | [354672](https://wikileaks.org/akp-emails/emailid/354672) | hxxxx://wikileaks[.]org/akp-emails/fileid/354672/147508 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 310 | 308 | [354673](https://wikileaks.org/akp-emails/emailid/354673) | hxxxx://wikileaks[.]org/akp-emails/fileid/354673/147509 | [02CC515AC936DF96F80E184DCC0529ED](https://www.virustotal.com/en/search/?query=02CC515AC936DF96F80E184DCC0529ED) 311 | 309 | [358502](https://wikileaks.org/akp-emails/emailid/358502) | hxxxx://wikileaks[.]org/akp-emails/fileid/358502/148923 | [1B853B2962BB6D5CAA7AB4A64B83EEFF](https://www.virustotal.com/en/search/?query=1B853B2962BB6D5CAA7AB4A64B83EEFF) 312 | 310 | [358621](https://wikileaks.org/akp-emails/emailid/358621) | hxxxx://wikileaks[.]org/akp-emails/fileid/358621/149001 | [FE3261FD73E6BB2D7206FDC07D86C41A](https://www.virustotal.com/en/search/?query=FE3261FD73E6BB2D7206FDC07D86C41A) 313 | 311 | [359399](https://wikileaks.org/akp-emails/emailid/359399) | hxxxx://wikileaks[.]org/akp-emails/fileid/359399/149594 | [DC98088BC827760E7B07204C3FF10107](https://www.virustotal.com/en/search/?query=DC98088BC827760E7B07204C3FF10107) 314 | 312 | [359400](https://wikileaks.org/akp-emails/emailid/359400) | hxxxx://wikileaks[.]org/akp-emails/fileid/359400/149595 | [DC98088BC827760E7B07204C3FF10107](https://www.virustotal.com/en/search/?query=DC98088BC827760E7B07204C3FF10107) 315 | 313 | [359504](https://wikileaks.org/akp-emails/emailid/359504) | hxxxx://wikileaks[.]org/akp-emails/fileid/359504/149687 | [2897C57B2F3E02412C89B6BF44E6643D](https://www.virustotal.com/en/search/?query=2897C57B2F3E02412C89B6BF44E6643D) 316 | 314 | [359507](https://wikileaks.org/akp-emails/emailid/359507) | hxxxx://wikileaks[.]org/akp-emails/fileid/359507/149689 | [675BE1D78FF51819CF1D292BB81420EC](https://www.virustotal.com/en/search/?query=675BE1D78FF51819CF1D292BB81420EC) 317 | 315 | [359835](https://wikileaks.org/akp-emails/emailid/359835) | hxxxx://wikileaks[.]org/akp-emails/fileid/359835/149910 | [BDB264F890E5189D6F988A9889678A87](https://www.virustotal.com/en/search/?query=BDB264F890E5189D6F988A9889678A87) 318 | 316 | [359977](https://wikileaks.org/akp-emails/emailid/359977) | hxxxx://wikileaks[.]org/akp-emails/fileid/359977/150015 | [A0AAE7097CBABE2A432E6F9440706E67](https://www.virustotal.com/en/search/?query=A0AAE7097CBABE2A432E6F9440706E67) 319 | 317 | [360208](https://wikileaks.org/akp-emails/emailid/360208) | hxxxx://wikileaks[.]org/akp-emails/fileid/360208/150143 | [A75C875670083CD1C8E9B9BDF51BBDC2](https://www.virustotal.com/en/search/?query=A75C875670083CD1C8E9B9BDF51BBDC2) 320 | 318 | [360887](https://wikileaks.org/akp-emails/emailid/360887) | hxxxx://wikileaks[.]org/akp-emails/fileid/360887/150713 | [37A15278E4008D17DA37D00B0AE66ED7](https://www.virustotal.com/en/search/?query=37A15278E4008D17DA37D00B0AE66ED7) 321 | 319 | [361797](https://wikileaks.org/akp-emails/emailid/361797) | hxxxx://wikileaks[.]org/akp-emails/fileid/361797/150933 | [7DE7706AB70A440069EF17C2B8656919](https://www.virustotal.com/en/search/?query=7DE7706AB70A440069EF17C2B8656919) 322 | 320 | [361798](https://wikileaks.org/akp-emails/emailid/361798) | hxxxx://wikileaks[.]org/akp-emails/fileid/361798/150934 | [38368EF451CBE4120F427E4B79405C6C](https://www.virustotal.com/en/search/?query=38368EF451CBE4120F427E4B79405C6C) 323 | 321 | [363399](https://wikileaks.org/akp-emails/emailid/363399) | hxxxx://wikileaks[.]org/akp-emails/fileid/363399/154246 | [CEF5A13A7CEAA36203EEF94C144ED52E](https://www.virustotal.com/en/search/?query=CEF5A13A7CEAA36203EEF94C144ED52E) 324 | 322 | [363430](https://wikileaks.org/akp-emails/emailid/363430) | hxxxx://wikileaks[.]org/akp-emails/fileid/363430/154253 | [AE9C2194F951AC1DE05CCFF2CEBCA576](https://www.virustotal.com/en/search/?query=AE9C2194F951AC1DE05CCFF2CEBCA576) 325 | 323 | [363431](https://wikileaks.org/akp-emails/emailid/363431) | hxxxx://wikileaks[.]org/akp-emails/fileid/363431/154254 | [FDC261EB395EA786B93DC382FFE50139](https://www.virustotal.com/en/search/?query=FDC261EB395EA786B93DC382FFE50139) 326 | 324 | [364326](https://wikileaks.org/akp-emails/emailid/364326) | hxxxx://wikileaks[.]org/akp-emails/fileid/364326/154512 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 327 | 325 | [364431](https://wikileaks.org/akp-emails/emailid/364431) | hxxxx://wikileaks[.]org/akp-emails/fileid/364431/154573 | [528F9EEC233BD2E0750310A4C50B77AB](https://www.virustotal.com/en/search/?query=528F9EEC233BD2E0750310A4C50B77AB) 328 | 326 | [364432](https://wikileaks.org/akp-emails/emailid/364432) | hxxxx://wikileaks[.]org/akp-emails/fileid/364432/154574 | [528F9EEC233BD2E0750310A4C50B77AB](https://www.virustotal.com/en/search/?query=528F9EEC233BD2E0750310A4C50B77AB) 329 | 327 | [364472](https://wikileaks.org/akp-emails/emailid/364472) | hxxxx://wikileaks[.]org/akp-emails/fileid/364472/154594 | [3833071131EDB654D475EF983E174A01](https://www.virustotal.com/en/search/?query=3833071131EDB654D475EF983E174A01) 330 | 328 | [364473](https://wikileaks.org/akp-emails/emailid/364473) | hxxxx://wikileaks[.]org/akp-emails/fileid/364473/154595 | [E0594A4809750F9F5D04A6E230FE05B6](https://www.virustotal.com/en/search/?query=E0594A4809750F9F5D04A6E230FE05B6) 331 | 329 | [366420](https://wikileaks.org/akp-emails/emailid/366420) | hxxxx://wikileaks[.]org/akp-emails/fileid/366420/155977 | [71E855B0D213F966C906B8CDB0634666](https://www.virustotal.com/en/search/?query=71E855B0D213F966C906B8CDB0634666) 332 | 330 | [368764](https://wikileaks.org/akp-emails/emailid/368764) | hxxxx://wikileaks[.]org/akp-emails/fileid/368764/157576 | [EEAC9826A40E12D6470143E77117D3C1](https://www.virustotal.com/en/search/?query=EEAC9826A40E12D6470143E77117D3C1) 333 | 331 | [370828](https://wikileaks.org/akp-emails/emailid/370828) | hxxxx://wikileaks[.]org/akp-emails/fileid/370828/158713 | [EBEEC0F5AE83E66BE695BEC33114394B](https://www.virustotal.com/en/search/?query=EBEEC0F5AE83E66BE695BEC33114394B) 334 | 332 | [379607](https://wikileaks.org/akp-emails/emailid/379607) | hxxxx://wikileaks[.]org/akp-emails/fileid/379607/162129 | [896B17676B4A6F713921A995F60C9277](https://www.virustotal.com/en/search/?query=896B17676B4A6F713921A995F60C9277) 335 | 333 | [379871](https://wikileaks.org/akp-emails/emailid/379871) | hxxxx://wikileaks[.]org/akp-emails/fileid/379871/162168 | [1AE0229CC6244EB51A1357A72C142181](https://www.virustotal.com/en/search/?query=1AE0229CC6244EB51A1357A72C142181) 336 | 334 | [379894](https://wikileaks.org/akp-emails/emailid/379894) | hxxxx://wikileaks[.]org/akp-emails/fileid/379894/162175 | [E3FBCF11F169D8C5660C8CA177D2B526](https://www.virustotal.com/en/search/?query=E3FBCF11F169D8C5660C8CA177D2B526) 337 | 335 | [379905](https://wikileaks.org/akp-emails/emailid/379905) | hxxxx://wikileaks[.]org/akp-emails/fileid/379905/162179 | [A21F66C8842C4C390A8D7C892C5CEA68](https://www.virustotal.com/en/search/?query=A21F66C8842C4C390A8D7C892C5CEA68) 338 | 336 | [379958](https://wikileaks.org/akp-emails/emailid/379958) | hxxxx://wikileaks[.]org/akp-emails/fileid/379958/162194 | [CD61E1405DC1925856BEA103E7D83487](https://www.virustotal.com/en/search/?query=CD61E1405DC1925856BEA103E7D83487) 339 | 337 | [379964](https://wikileaks.org/akp-emails/emailid/379964) | hxxxx://wikileaks[.]org/akp-emails/fileid/379964/162197 | [D70489542C12FD37861F5DEFDD74F053](https://www.virustotal.com/en/search/?query=D70489542C12FD37861F5DEFDD74F053) 340 | 338 | [380000](https://wikileaks.org/akp-emails/emailid/380000) | hxxxx://wikileaks[.]org/akp-emails/fileid/380000/162214 | [195CEBABD8BF715A9DB7619CB00D1CB3](https://www.virustotal.com/en/search/?query=195CEBABD8BF715A9DB7619CB00D1CB3) 341 | 339 | [380068](https://wikileaks.org/akp-emails/emailid/380068) | hxxxx://wikileaks[.]org/akp-emails/fileid/380068/162241 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 342 | 340 | [380150](https://wikileaks.org/akp-emails/emailid/380150) | hxxxx://wikileaks[.]org/akp-emails/fileid/380150/162314 | [DFE3E09C03A7ECEB956938FDA6F1B0EB](https://www.virustotal.com/en/search/?query=DFE3E09C03A7ECEB956938FDA6F1B0EB) 343 | 341 | [381115](https://wikileaks.org/akp-emails/emailid/381115) | hxxxx://wikileaks[.]org/akp-emails/fileid/381115/162582 | [9D63167C2B972D46DB9BAC6E7AECDFD6](https://www.virustotal.com/en/search/?query=9D63167C2B972D46DB9BAC6E7AECDFD6) 344 | 342 | [381318](https://wikileaks.org/akp-emails/emailid/381318) | hxxxx://wikileaks[.]org/akp-emails/fileid/381318/162698 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 345 | 343 | [382904](https://wikileaks.org/akp-emails/emailid/382904) | hxxxx://wikileaks[.]org/akp-emails/fileid/382904/163228 | [9D63167C2B972D46DB9BAC6E7AECDFD6](https://www.virustotal.com/en/search/?query=9D63167C2B972D46DB9BAC6E7AECDFD6) 346 | 344 | [383080](https://wikileaks.org/akp-emails/emailid/383080) | hxxxx://wikileaks[.]org/akp-emails/fileid/383080/163331 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 347 | 345 | [384128](https://wikileaks.org/akp-emails/emailid/384128) | hxxxx://wikileaks[.]org/akp-emails/fileid/384128/163694 | [4EA20758500B3D197D33477DFA56B99E](https://www.virustotal.com/en/search/?query=4EA20758500B3D197D33477DFA56B99E) 348 | 346 | [384933](https://wikileaks.org/akp-emails/emailid/384933) | hxxxx://wikileaks[.]org/akp-emails/fileid/384933/164010 | [85C8999A8B1823595C2E42CEDC78C165](https://www.virustotal.com/en/search/?query=85C8999A8B1823595C2E42CEDC78C165) 349 | 347 | [385768](https://wikileaks.org/akp-emails/emailid/385768) | hxxxx://wikileaks[.]org/akp-emails/fileid/385768/164261 | [99915EF07C6BCDBBAD7A186797C0D00E](https://www.virustotal.com/en/search/?query=99915EF07C6BCDBBAD7A186797C0D00E) 350 | 348 | [385768](https://wikileaks.org/akp-emails/emailid/385768) | hxxxx://wikileaks[.]org/akp-emails/fileid/385768/164262 | [BF72FB32A4A3AB182CB3B9CB54CF40BB](https://www.virustotal.com/en/search/?query=BF72FB32A4A3AB182CB3B9CB54CF40BB) 351 | 349 | [385768](https://wikileaks.org/akp-emails/emailid/385768) | hxxxx://wikileaks[.]org/akp-emails/fileid/385768/164263 | [BEDE59EAAA6293E724D46A4FE0457BF7](https://www.virustotal.com/en/search/?query=BEDE59EAAA6293E724D46A4FE0457BF7) 352 | 350 | [385791](https://wikileaks.org/akp-emails/emailid/385791) | hxxxx://wikileaks[.]org/akp-emails/fileid/385791/164338 | [E357FF203C971732813C3C162B395796](https://www.virustotal.com/en/search/?query=E357FF203C971732813C3C162B395796) 353 | 351 | [386254](https://wikileaks.org/akp-emails/emailid/386254) | hxxxx://wikileaks[.]org/akp-emails/fileid/386254/164622 | [4A49B2C5612A2F9FF5EB9B483853B363](https://www.virustotal.com/en/search/?query=4A49B2C5612A2F9FF5EB9B483853B363) 354 | 352 | [387312](https://wikileaks.org/akp-emails/emailid/387312) | hxxxx://wikileaks[.]org/akp-emails/fileid/387312/165486 | [F73161A7EE7986EEB8CCBCCBF146D97D](https://www.virustotal.com/en/search/?query=F73161A7EE7986EEB8CCBCCBF146D97D) 355 | 353 | [387634](https://wikileaks.org/akp-emails/emailid/387634) | hxxxx://wikileaks[.]org/akp-emails/fileid/387634/165686 | [FE1C401D4D58C59D30CB51594C40E673](https://www.virustotal.com/en/search/?query=FE1C401D4D58C59D30CB51594C40E673) 356 | 354 | [387668](https://wikileaks.org/akp-emails/emailid/387668) | hxxxx://wikileaks[.]org/akp-emails/fileid/387668/165690 | [1A6A6EE6905AF3ED7D5F07917A4DB45D](https://www.virustotal.com/en/search/?query=1A6A6EE6905AF3ED7D5F07917A4DB45D) 357 | 355 | [388006](https://wikileaks.org/akp-emails/emailid/388006) | hxxxx://wikileaks[.]org/akp-emails/fileid/388006/165747 | [68D6E3B8B97DBC8A8D49FDAFED8FD276](https://www.virustotal.com/en/search/?query=68D6E3B8B97DBC8A8D49FDAFED8FD276) 358 | 356 | [388006](https://wikileaks.org/akp-emails/emailid/388006) | hxxxx://wikileaks[.]org/akp-emails/fileid/388006/165748 | [C337FD8A5030EFE1F1A70EF2FC73BF56](https://www.virustotal.com/en/search/?query=C337FD8A5030EFE1F1A70EF2FC73BF56) 359 | 357 | [388013](https://wikileaks.org/akp-emails/emailid/388013) | hxxxx://wikileaks[.]org/akp-emails/fileid/388013/165749 | [97523BB7043F5B924E9DF6940F8C14D2](https://www.virustotal.com/en/search/?query=97523BB7043F5B924E9DF6940F8C14D2) 360 | 358 | [388013](https://wikileaks.org/akp-emails/emailid/388013) | hxxxx://wikileaks[.]org/akp-emails/fileid/388013/165750 | [3A7F4EB7A90018BB089FFC24EB0AF6E3](https://www.virustotal.com/en/search/?query=3A7F4EB7A90018BB089FFC24EB0AF6E3) 361 | 359 | [388020](https://wikileaks.org/akp-emails/emailid/388020) | hxxxx://wikileaks[.]org/akp-emails/fileid/388020/165753 | [CD61E1405DC1925856BEA103E7D83487](https://www.virustotal.com/en/search/?query=CD61E1405DC1925856BEA103E7D83487) 362 | 360 | [388660](https://wikileaks.org/akp-emails/emailid/388660) | hxxxx://wikileaks[.]org/akp-emails/fileid/388660/165919 | [FF8974F8E5C9364498127805629ABFAD](https://www.virustotal.com/en/search/?query=FF8974F8E5C9364498127805629ABFAD) 363 | 361 | [388689](https://wikileaks.org/akp-emails/emailid/388689) | hxxxx://wikileaks[.]org/akp-emails/fileid/388689/165922 | [7DDB5C3929985CE36F258B7F3E693A8D](https://www.virustotal.com/en/search/?query=7DDB5C3929985CE36F258B7F3E693A8D) 364 | 362 | [389125](https://wikileaks.org/akp-emails/emailid/389125) | hxxxx://wikileaks[.]org/akp-emails/fileid/389125/166084 | [97523BB7043F5B924E9DF6940F8C14D2](https://www.virustotal.com/en/search/?query=97523BB7043F5B924E9DF6940F8C14D2) 365 | 363 | [389125](https://wikileaks.org/akp-emails/emailid/389125) | hxxxx://wikileaks[.]org/akp-emails/fileid/389125/166085 | [3A7F4EB7A90018BB089FFC24EB0AF6E3](https://www.virustotal.com/en/search/?query=3A7F4EB7A90018BB089FFC24EB0AF6E3) 366 | 364 | [389132](https://wikileaks.org/akp-emails/emailid/389132) | hxxxx://wikileaks[.]org/akp-emails/fileid/389132/166087 | [CD61E1405DC1925856BEA103E7D83487](https://www.virustotal.com/en/search/?query=CD61E1405DC1925856BEA103E7D83487) 367 | 365 | [389163](https://wikileaks.org/akp-emails/emailid/389163) | hxxxx://wikileaks[.]org/akp-emails/fileid/389163/166101 | [9D63167C2B972D46DB9BAC6E7AECDFD6](https://www.virustotal.com/en/search/?query=9D63167C2B972D46DB9BAC6E7AECDFD6) 368 | 366 | [398820](https://wikileaks.org/akp-emails/emailid/398820) | hxxxx://wikileaks[.]org/akp-emails/fileid/398820/170728 | [264FD9233A1E9D36A9959FD247AC71E8](https://www.virustotal.com/en/search/?query=264FD9233A1E9D36A9959FD247AC71E8) 369 | 367 | [399418](https://wikileaks.org/akp-emails/emailid/399418) | hxxxx://wikileaks[.]org/akp-emails/fileid/399418/171249 | [264FD9233A1E9D36A9959FD247AC71E8](https://www.virustotal.com/en/search/?query=264FD9233A1E9D36A9959FD247AC71E8) 370 | 368 | [400205](https://wikileaks.org/akp-emails/emailid/400205) | hxxxx://wikileaks[.]org/akp-emails/fileid/400205/171523 | [CE15E724BC07E72EA47C42DF52213F3A](https://www.virustotal.com/en/search/?query=CE15E724BC07E72EA47C42DF52213F3A) 371 | 369 | [402534](https://wikileaks.org/akp-emails/emailid/402534) | hxxxx://wikileaks[.]org/akp-emails/fileid/402534/171565 | [264FD9233A1E9D36A9959FD247AC71E8](https://www.virustotal.com/en/search/?query=264FD9233A1E9D36A9959FD247AC71E8) 372 | 370 | [402854](https://wikileaks.org/akp-emails/emailid/402854) | hxxxx://wikileaks[.]org/akp-emails/fileid/402854/171567 | [264FD9233A1E9D36A9959FD247AC71E8](https://www.virustotal.com/en/search/?query=264FD9233A1E9D36A9959FD247AC71E8) 373 | -------------------------------------------------------------------------------- /tools/README.md: -------------------------------------------------------------------------------- 1 | #Various tools for processing the wlscrape.py output 2 | 3 | ##genreport.py 4 | 5 | The script takes two arguments on the command line. The first argument is a JSON-formatted file that has been created by saving the standard output of `wlscape.py`. The second argument is a file, containing a list of MD5 hashes (one per line; only the first word on the line is used) that have been determined to be malware known to at least one of the scanners used by [VirusTotal](https://www.virustotal.com/). The script outputs a markdown-formatted table, ready to be included in a [GitHub report](https://github.com/bontchev/wlscrape/blob/master/malware.md). If the option `-m` is specified, the script outputs the report in HTML format instead of in markdown format. If the option `-n` is specified, the script does not create a header for the table in the report. If the `-f` option is specified, the script does not produce a footer for the table in the report. (The latter makes sense only when used together with the `-m` option, otherwise it has no effect.) 6 | 7 | ##getnotfound.py 8 | 9 | The script takes two arguments on the command line. The first argument is a JSON-formatted file that has been created by saving the standard output of `wlscape.py`. The second argument is a file, containing a list of MD5 hashes (one per line; only the first word on the line is used), the malicious status of which is not known to [VirusTotal](https://www.virustotal.com/) (either because they have never been submitted for scanning, or because none of the scanners detects anything in them). If an MD5 hash is present more than once, the additional ones are ignored. The script then downloads these files from the [Wikileaks](https://www.wikileaks.org) site for manual examination. If the `-e` option is used, it must be followed by an integer number `N`, greater than zero. Then the downloaded files will be split into subdirectories (named `000`, `001`, etc.), with no more than `N` files per subdirectory. If no option is specified, the files are downloaded to the current directory. 10 | 11 | ##getsize.py 12 | 13 | The script takes as one or more arguments on the command line JSON-formatted files that have been created by saving the standard output of `wlscrape.py`. It outputs the number of files on the [Wikileaks](https://www.wikileaks.org) site that are listed in the JSON data, as well as their total size. This is useful to plan how much free disk space one would need before starting to download these files. 14 | 15 | ##listmd5s.py 16 | 17 | The script takes as one or more arguments on the command line JSON-formatted files that have been created by saving the standard output of `wlscrape.py`. It outputs only the MD5 hash of each entry, one hash per line, converted to upper case, ready for `vtscanhash.py` to submit them to [VirusTotal](https://www.virustotal.com/). The result is equivalent to running `wlscrape.py` with the option `--md5only` (or `-m`) but this script is handy if you have already run `wlscrape.py`, have produced JSON-formatted data, and need just the list of MD5 hashes without having to scrape the [Wikileaks](https://www.wikileaks.org) site again. 18 | 19 | ##sortsize.py 20 | 21 | The script takes as one or more arguments on the command line JSON-formatted files that have been created by saving the standard output of `wlscrape.py`. It outputs the combined JSON-formatted information sorted by the "size" key. 22 | 23 | ##vtscanhash.py 24 | 25 | The script takes as a command-line argument a text file, containing MD5 hashes of potentially malicious files, one hash per line (everything after the first word on the line is ignored) and searches [VirusTotal](https://www.virustotal.com) for each of these hashes. It takes the _mandatory_ command-line option `-k`, followed by a VirusTotal API key. In order to obtain such a key, you need to register at the VirusTotal site, log into your account, click your login name (in the upper right corner of the page) and select "My API key" from the dropdown menu that appears (JavaScript must be enabled in your browser). The option `-r` can be used to specify how often the script should query VirusTotal; the default is 4 times per minute, which is the quota for free (public) API keys. 26 | 27 | #wlget.py 28 | 29 | The script takes as one or more arguments on the command line JSON-formatted files that have been created by saving the standard output of `wlscrape.py`. It downloads the files from the [Wikileaks](https://www.wikileaks.org) site that are described in the JSON data. This script is useful when you have already obtained the necessary JSON-formatted file information by running `wlscrape.py` with the appropriate options and want to just download the files, without searching the [Wikileaks](https://www.wikileaks.org) site again. If two or more entries share the same MD5 hash, only the first one will be used. If the `-e` option is used, it must be followed by an integer number `N`, greater than zero. Then the downloaded files will be split into subdirectories (named `000`, `001`, etc.), with no more than `N` files per subdirectory. If no option is specified, the files are downloaded to the current directory. 30 | -------------------------------------------------------------------------------- /tools/genreport.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import json 6 | import sys 7 | 8 | __author__ = "Vesselin Bontchev " 9 | __license__ = "GPL" 10 | __VERSION__ = "1.01" 11 | 12 | site = "https://wikileaks.org" 13 | area = "/akp-emails/" 14 | 15 | def generateReport(jsonData, hashes, options): 16 | if (not options.noheader): 17 | if (options.html): 18 | print('') 19 | print('') 20 | print('') 21 | print('\t') 22 | print('\tMalicious files found in the AKP leak on the Wikileaks site') 23 | print('') 24 | print('') 25 | print('') 26 | print('') 27 | print('\t') 28 | print('\t\t') 29 | print('\t\t\t') 30 | print('\t\t\t') 31 | print('\t\t\t') 32 | print('\t\t\t') 33 | print('\t\t') 34 | print('\t') 35 | print('\t') 36 | else: 37 | print("Number | Wikileaks e-mail | Wikileaks URL to the malicious attachment | VirusTotal analysis") 38 | print("--- | --- | --- | ---") 39 | row = 0 40 | for element in jsonData: 41 | hash = element["md5"].upper() 42 | if (hash in hashes): 43 | urlParts = element["url"].split("/") 44 | emailID = urlParts[5] 45 | fileID = urlParts[6] 46 | row += 1 47 | if (options.html): 48 | print('\t\t') 49 | print('\t\t\t') 50 | print('\t\t\t') 52 | print('\t\t\t') 54 | print('\t\t\t') 56 | print('\t\t') 57 | else: 58 | print(str(row) + " | [" + emailID + "](" + site + area + "emailid/" + emailID + 59 | ") | hxxxx://wikileaks[.]org" + area + "fileid/" + emailID + "/" + fileID + 60 | " | [" + hash + "](https://www.virustotal.com/en/search/?query=" + hash + ")") 61 | if (options.html and not options.nofooter): 62 | print('\t') 63 | print('
NumberWikileaks e-mailWikileaks URL to the malicious attachmentVirusTotal analysis
' + str(row) + '' + emailID + 'hxxxx://wikileaks[.]org' + area + 'fileid/' + 53 | emailID + '/' + fileID + '' + hash + '
') 64 | print('') 65 | print('') 66 | print('') 67 | 68 | if __name__ == "__main__": 69 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 70 | description="Generates report about malware on the Wikileaks site.") 71 | parser.add_argument("-m", "--html", action="store_true", help="Use HTML format") 72 | parser.add_argument("-n", "--noheader", action="store_true", help="Don't generate table header") 73 | parser.add_argument("-f", "--nofooter", action="store_true", help="Don't generate table footer") 74 | parser.add_argument("jsonfile", help="JSON data file") 75 | parser.add_argument("foundhashes", help="file with MD5 hashes of infected files") 76 | args = parser.parse_args() 77 | try: 78 | with open(args.jsonfile, "r") as contentFile: 79 | content = contentFile.read() 80 | jsonData = json.loads(content) 81 | with open(args.foundhashes, "r") as hashFile: 82 | hashes = [line.split()[0].upper() for line in hashFile] 83 | except Exception as e: 84 | print("Error: %s." % e, file=sys.stderr) 85 | sys.exit(-1) 86 | generateReport(jsonData, hashes, args) 87 | sys.exit(0) 88 | -------------------------------------------------------------------------------- /tools/getnotfound.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import requests 6 | import json 7 | import wget 8 | import sys 9 | import os 10 | 11 | __author__ = "Vesselin Bontchev " 12 | __license__ = "GPL" 13 | __VERSION__ = "1.02" 14 | 15 | def error(e): 16 | print("Error: %s." % e, file=sys.stderr) 17 | sys.exit(-1) 18 | 19 | def makeOutputDir(pageNum): 20 | outputDir = str(pageNum).zfill(3) 21 | try: 22 | if (not os.path.exists(outputDir)): 23 | os.mkdir(outputDir) 24 | except Exception as e: 25 | error(e) 26 | return outputDir 27 | 28 | def downloadTheFiles(jsonData, hashes, elementsPerDir): 29 | seen = set() 30 | i = 0 31 | paginate = False 32 | outputDir = "" 33 | elementNum = 1 34 | if ((elementsPerDir > 0) and (len(jsonData) > elementsPerDir)): 35 | paginate = True 36 | pageNum = 1 37 | outputDir = makeOutputDir(pageNum) 38 | for element in jsonData: 39 | url = element["url"] 40 | ext = element["ext"] 41 | hash = element["md5"].upper() 42 | if (hash in hashes and not hash in seen): 43 | seen.add(hash) 44 | i += 1 45 | fileName = hash + "." + ext 46 | if (paginate): 47 | if (elementNum > elementsPerDir): 48 | elementNum = 1 49 | pageNum += 1 50 | outputDir = makeOutputDir(pageNum) 51 | fileName = os.path.join(outputDir, fileName) 52 | print("[%d] %s -> %s" % (i, url, fileName), file=sys.stderr) 53 | try: 54 | outputFile = wget.download(url, out=fileName) 55 | except Exception as e: 56 | error(e) 57 | print("") 58 | elementNum += 1 59 | 60 | if __name__ == "__main__": 61 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 62 | description="Downloads suspected malware from Wikileaks.") 63 | parser.add_argument("-e", "--elements", type=int, help="elements per page") 64 | parser.add_argument("jsonfile", help="JSON data file") 65 | parser.add_argument("notfoundhashes", help="file with MD5 hashes of unknown files") 66 | args = parser.parse_args() 67 | elements = args.elements 68 | if (elements < 1): 69 | elements = 0 70 | try: 71 | with open(args.jsonfile, "r") as contentFile: 72 | content = contentFile.read() 73 | jsonData = json.loads(content) 74 | with open(args.notfoundhashes, "r") as hashFile: 75 | hashes = [line.split()[0].upper() for line in hashFile] 76 | except Exception as e: 77 | error(e) 78 | downloadTheFiles(jsonData, hashes, elements) 79 | sys.exit(0) 80 | -------------------------------------------------------------------------------- /tools/getsize.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import locale 6 | import json 7 | import sys 8 | 9 | __author__ = "Vesselin Bontchev " 10 | __license__ = "GPL" 11 | __VERSION__ = "1.00" 12 | 13 | def error(e): 14 | print("Error: %s." % e, file=sys.stderr) 15 | sys.exit(-1) 16 | 17 | def humanBytes(B): 18 | 'Return the given bytes as a human friendly KB, MB, GB, or TB string' 19 | B = float(B) 20 | KB = float(1024) 21 | MB = float(KB ** 2) # 1,048,576 22 | GB = float(KB ** 3) # 1,073,741,824 23 | TB = float(KB ** 4) # 1,099,511,627,776 24 | if B < KB: 25 | return '{0} {1}'.format(B,'Bytes' if 0 == B > 1 else 'Byte') 26 | elif KB <= B < MB: 27 | return '{0:.2f} Kb'.format(B/KB) 28 | elif MB <= B < GB: 29 | return '{0:.2f} Mb'.format(B/MB) 30 | elif GB <= B < TB: 31 | return '{0:.2f} Gb'.format(B/GB) 32 | elif TB <= B: 33 | return '{0:.2f} Tb'.format(B/TB) 34 | 35 | def getTrueSize(number, unit): 36 | if (unit == "B"): 37 | return number 38 | elif (unit == "KiB"): 39 | return number * 1024 40 | elif (unit == "MiB"): 41 | return number * 1024 ** 2 42 | elif (unit == "GiB"): 43 | return number * 1024 ** 3 44 | else: 45 | error("Unknown unit: " + unit) 46 | 47 | if __name__ == "__main__": 48 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 49 | description="Computes the total files size of a wlscrape.py output.") 50 | parser.add_argument("file", nargs="+", help="JSON data file") 51 | args = parser.parse_args() 52 | numFiles = 0 53 | totalSize = 0.0 54 | for argument in args.file: 55 | try: 56 | with open(argument, "r") as contentFile: 57 | content = contentFile.read() 58 | jsonData = json.loads(content) 59 | for element in jsonData: 60 | numFiles += 1 61 | parts = element["size"].split(None) 62 | totalSize += getTrueSize(float(parts[0]), parts[1]) 63 | except Exception as e: 64 | error(e) 65 | locale.setlocale(locale.LC_ALL, "") 66 | print("Number of files found: %s." % locale.format("%d", numFiles, grouping=True), file=sys.stderr) 67 | print("Total size: {0}.".format(humanBytes(totalSize)), file=sys.stderr) 68 | sys.exit(0) 69 | -------------------------------------------------------------------------------- /tools/listmd5s.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import json 6 | import sys 7 | 8 | __author__ = "Vesselin Bontchev " 9 | __license__ = "GPL" 10 | __VERSION__ = "1.00" 11 | 12 | if __name__ == "__main__": 13 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 14 | description="Lists the MD5 hashes of a wlscrape.py output.") 15 | parser.add_argument("file", nargs="+", help="JSON data file") 16 | args = parser.parse_args() 17 | for argument in args.file: 18 | try: 19 | with open(argument, "r") as contentFile: 20 | content = contentFile.read() 21 | jsonData = json.loads(content) 22 | except Exception as e: 23 | print("Error: %s." % e, file=sys.stderr) 24 | sys.exit(-1) 25 | for element in jsonData: 26 | print(element["md5"].upper()) 27 | sys.exit(0) 28 | -------------------------------------------------------------------------------- /tools/podesta.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | from lxml import html 5 | import itertools 6 | import argparse 7 | import requests 8 | import wget 9 | import sys 10 | import os 11 | 12 | __author__ = "Vesselin Bontchev " 13 | __license__ = "GPL" 14 | __VERSION__ = "1.00" 15 | 16 | site = "https://wikileaks.org" 17 | area = "/podesta-emails/" 18 | 19 | def error(e): 20 | print("Error: %s." % e, file=sys.stderr) 21 | sys.exit(-1) 22 | 23 | def makeOutputDir(pageNum): 24 | outputDir = str(pageNum).zfill(3) 25 | try: 26 | if (not os.path.exists(outputDir)): 27 | os.mkdir(outputDir) 28 | except Exception as e: 29 | error(e) 30 | return outputDir 31 | 32 | def printTheEmails(theData, options): 33 | download = options.download 34 | elementsPerPage = options.elements 35 | try: 36 | if (download): 37 | paginate = False 38 | outputDir = "" 39 | elementNum = 1 40 | if (len(theData) > elementsPerPage): 41 | paginate = True 42 | pageNum = 1 43 | outputDir = makeOutputDir(pageNum) 44 | for url in theData: 45 | if (download): 46 | fileName = url.replace(site + area + "get/", "") + ".eml" 47 | if (paginate): 48 | if (elementNum > elementsPerPage): 49 | elementNum = 1 50 | pageNum += 1 51 | outputDir = makeOutputDir(pageNum) 52 | fileName = os.path.join(outputDir, fileName) 53 | outputFile = wget.download(url, out=fileName) 54 | elementNum += 1 55 | else: 56 | print(url) 57 | except Exception as e: 58 | error(e) 59 | 60 | def processData(tree, blacklist, options): 61 | elementsPerPage = options.elements 62 | theData = [] 63 | try: 64 | links = tree.xpath("//*[@id='searchresult']/tbody/tr/td[@colspan='4']/a/@href") 65 | for i in range(len(links)): 66 | theUrl = site + area + links[i].replace("emailid", "get") 67 | if (not theUrl in blacklist): 68 | theData.append(theUrl) 69 | except Exception as e: 70 | error(e) 71 | return theData 72 | 73 | def getTheEmails(blacklist, options): 74 | pageNums = options.pages 75 | url = site + area + "?q=&sort=1" 76 | url += "&count=" + str(options.elements) + "&page=1&#searchresult" 77 | print(url, file=sys.stderr) 78 | pageNum = 1 79 | theData = [] 80 | try: 81 | page = requests.get(url) 82 | tree = html.fromstring(page.content) 83 | if ((len(pageNums) == 0) or (pageNum in pageNums)): 84 | newData = processData(tree, blacklist, options) 85 | theData += newData 86 | nextButtonXPath = "//*[@id='right-pane']/div[3]/div/ul/li[last()]/a/@href" 87 | next = tree.xpath(nextButtonXPath) 88 | while len(next): 89 | url = site + next[0] 90 | print (url, file=sys.stderr) 91 | pageNum += 1 92 | page = requests.get(url) 93 | tree = html.fromstring(page.content) 94 | if ((len(pageNums) == 0) or (pageNum in pageNums)): 95 | newData = processData(tree, blacklist, options) 96 | theData += newData 97 | next = tree.xpath(nextButtonXPath) 98 | except Exception as e: 99 | error(e) 100 | return theData 101 | 102 | def getList(argument): 103 | return list(set(itertools.chain.from_iterable([range(int(y[0]), int(y[1]) + 1) for y in [(x.split('-') + [x])[:2] for x in argument.split(',')]]))) 104 | 105 | def main(args): 106 | theData = [] 107 | theBlacklist = [] 108 | if (args.blacklist != None): 109 | try: 110 | with open(args.blacklist, "r") as blacklistFile: 111 | theBlacklist = [line.split()[0] for line in blacklistFile.read().split('\n') if line.strip()] 112 | except Exception as e: 113 | error(e) 114 | if (args.elements < 10): 115 | args.elements = 10 116 | if (args.elements > 200): 117 | args.elements = 200 118 | printTheEmails(getTheEmails(theBlacklist, args), args) 119 | 120 | if __name__ == "__main__": 121 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 122 | description="Scapes the Podesta e-mails from Wikileaks.") 123 | parser.add_argument("-d", "--download", action="store_true", help="download the e-mails") 124 | parser.add_argument("-e", "--elements", type=int, default=200, help="e-mails per page") 125 | parser.add_argument("-b", "--blacklist", dest="blacklist", default=None, help="blacklist file") 126 | parser.add_argument("-a", "--pages", type=getList, dest="pages", default=[], help="list of pages to process") 127 | args = parser.parse_args() 128 | main(args) 129 | sys.exit(0) 130 | -------------------------------------------------------------------------------- /tools/sortsize.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import json 6 | import sys 7 | 8 | __author__ = "Vesselin Bontchev " 9 | __license__ = "GPL" 10 | __VERSION__ = "1.00" 11 | 12 | def error(e): 13 | print("Error: %s." % e, file=sys.stderr) 14 | sys.exit(-1) 15 | 16 | def cmp_to_key(mycmp): 17 | 'Convert a cmp= function into a key= function' 18 | class K(object): 19 | def __init__(self, obj, *args): 20 | self.obj = obj 21 | def __lt__(self, other): 22 | return mycmp(self.obj, other.obj) < 0 23 | def __gt__(self, other): 24 | return mycmp(self.obj, other.obj) > 0 25 | def __eq__(self, other): 26 | return mycmp(self.obj, other.obj) == 0 27 | def __le__(self, other): 28 | return mycmp(self.obj, other.obj) <= 0 29 | def __ge__(self, other): 30 | return mycmp(self.obj, other.obj) >= 0 31 | def __ne__(self, other): 32 | return mycmp(self.obj, other.obj) != 0 33 | return K 34 | 35 | def getTrueSize(number, unit): 36 | if (unit == "B"): 37 | return number 38 | elif (unit == "KiB"): 39 | return number * 1024 40 | elif (unit == "MiB"): 41 | return number * 1024 ** 2 42 | elif (unit == "GiB"): 43 | return number * 1024 ** 3 44 | else: 45 | error("Unknown unit: " + unit) 46 | 47 | def compare(x, y): 48 | try: 49 | parts = x["size"].split(None) 50 | sizeX = int(getTrueSize(float(parts[0]), parts[1])) 51 | parts = y["size"].split(None) 52 | sizeY = int(getTrueSize(float(parts[0]), parts[1])) 53 | except Excepton as e: 54 | error(e) 55 | return sizeX - sizeY 56 | 57 | if __name__ == "__main__": 58 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 59 | description='Sorts by the "size" key JSON files produced by wlscrape.py.') 60 | parser.add_argument("file", nargs="+", help="JSON data file") 61 | args = parser.parse_args() 62 | fullContent = [] 63 | try: 64 | for argument in args.file: 65 | with open(argument, "r") as contentFile: 66 | content = contentFile.read() 67 | fullContent.extend(json.loads(content)) 68 | print(json.dumps(sorted(fullContent, key=cmp_to_key(compare)), indent=4)) 69 | except Exception as e: 70 | error(e) 71 | sys.exit(0) 72 | -------------------------------------------------------------------------------- /tools/vtscanhash.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | from stat import * 5 | import virustotal 6 | import argparse 7 | import sys 8 | import os 9 | 10 | __author__ = "Vesselin Bontchev " 11 | __license__ = "GPL" 12 | __VERSION__ = "1.00" 13 | 14 | if __name__ == "__main__": 15 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 16 | description="Queries VirusTotal for a list of hashes.") 17 | parser.add_argument("-k", "--key", required=True, help="API key") 18 | parser.add_argument("-r", "--rate", type=int, default=4, help="requests per minute") 19 | parser.add_argument("hashFile", nargs="+", help="file with MD5 hashes of files") 20 | args = parser.parse_args() 21 | stdoutIsRedirected = S_ISREG(os.fstat(sys.stdout.fileno()).st_mode) 22 | hashes = [] 23 | try: 24 | for fileArg in args.hashFile: 25 | with open(fileArg, "r") as hashFile: 26 | hashes += [line.split()[0].upper() for line in hashFile] 27 | v = virustotal.VirusTotal(args.key, limit_per_min=args.rate) 28 | for hash in hashes: 29 | if (stdoutIsRedirected): 30 | print("%s" % hash, file=sys.stderr) 31 | report = v.get(hash) 32 | if (report == None): 33 | print("%s\tNot found!" % hash) 34 | else: 35 | report.join() 36 | assert report.done == True 37 | if (report.positives > 0): 38 | for scanner, malware in report: 39 | if (not malware is None): 40 | print("%s\t%s: %s" % (hash, scanner[0], malware)) 41 | break 42 | else: 43 | print("%s\tNot found!" % hash) 44 | sys.stdout.flush() 45 | except Exception as e: 46 | print("Error: %s." % e, file=sys.stderr) 47 | sys.exit(-1) 48 | sys.exit(0) 49 | -------------------------------------------------------------------------------- /tools/wlget.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | import argparse 5 | import requests 6 | import json 7 | import wget 8 | import sys 9 | import os 10 | 11 | __author__ = "Vesselin Bontchev " 12 | __license__ = "GPL" 13 | __VERSION__ = "1.02" 14 | 15 | def error(e): 16 | print("Error: %s." % e, file=sys.stderr) 17 | sys.exit(-1) 18 | 19 | def makeOutputDir(pageNum): 20 | outputDir = str(pageNum).zfill(3) 21 | try: 22 | if (not os.path.exists(outputDir)): 23 | os.mkdir(outputDir) 24 | except Exception as e: 25 | error(e) 26 | return outputDir 27 | 28 | def downloadTheData(theData, elementsPerDir): 29 | try: 30 | jsonData = json.loads(theData) 31 | paginate = False 32 | outputDir = "" 33 | seen = set() 34 | elementNum = 1 35 | if ((elementsPerDir > 0) and (len(theData) > elementsPerDir)): 36 | paginate = True 37 | pageNum = 1 38 | outputDir = makeOutputDir(pageNum) 39 | for element in jsonData: 40 | hash = element["md5"].upper() 41 | if (not hash in seen): 42 | seen.add(hash) 43 | fileName = hash + "." + element["ext"] 44 | if (paginate): 45 | if (elementNum > elementsPerDir): 46 | elementNum = 1 47 | pageNum += 1 48 | outputDir = makeOutputDir(pageNum) 49 | fileName = os.path.join(outputDir, fileName) 50 | outputFile = wget.download(element["url"], out=fileName) 51 | elementNum += 1 52 | except Exception as e: 53 | error(e) 54 | 55 | if __name__ == "__main__": 56 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 57 | description="Downloads suspected malware from Wikileaks.") 58 | parser.add_argument("-e", "--elements", type=int, help="elements per page") 59 | parser.add_argument("file", nargs="+", help="JSON data file") 60 | args = parser.parse_args() 61 | elements = args.elements 62 | if (elements < 1): 63 | elements = 0 64 | for argument in args.file: 65 | try: 66 | with open(argument, "r") as contentFile: 67 | content = contentFile.read() 68 | downloadTheData(content, elements) 69 | except Exception as e: 70 | error(e) 71 | sys.exit(0) 72 | -------------------------------------------------------------------------------- /wlscrape.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | from __future__ import print_function 4 | from lxml import html 5 | import itertools 6 | import argparse 7 | import requests 8 | import json 9 | import wget 10 | import sys 11 | import os 12 | 13 | __author__ = "Vesselin Bontchev " 14 | __license__ = "GPL" 15 | __VERSION__ = "1.07" 16 | 17 | site = "https://wikileaks.org" 18 | area = "/akp-emails/" 19 | 20 | def error(e): 21 | print("Error: %s." % e, file=sys.stderr) 22 | sys.exit(-1) 23 | 24 | def processData(tree, ext, blacklist): 25 | try: 26 | links = tree.xpath("//*[@id='searchresult']/tbody/tr/td[2]/a/@href") 27 | sizes = tree.xpath("//*[@id='searchresult']/tbody/tr/td[3]/text()") 28 | md5s = tree.xpath("//*[@id='searchresult']/tbody/tr/td[4]/text()") 29 | except Exception as e: 30 | error(e) 31 | data = [] 32 | for i in range(len(links)): 33 | theUrl = site + area + links[i] 34 | if (not theUrl in blacklist): 35 | data.append({"md5" : md5s[i], "url" : theUrl, "ext" : ext, "size" : sizes[i]}) 36 | return data 37 | 38 | def processExtension(ext, blacklist, options): 39 | unique = options.unique 40 | pageNums = options.pages 41 | url = site + area + "?file=" + ext 42 | if (options.spam): 43 | url += "&spam=1" 44 | if (options.duplicates): 45 | url += "&dupl=1" 46 | url += "&count=" + str(options.elements) + "&page=1&#searchresult" 47 | print(url, file=sys.stderr) 48 | pageNum = 1 49 | theData = [] 50 | seen = set() 51 | try: 52 | page = requests.get(url) 53 | tree = html.fromstring(page.content) 54 | if ((len(pageNums) == 0) or (pageNum in pageNums)): 55 | newData = processData(tree, ext, blacklist) 56 | if (unique): 57 | for element in newData: 58 | if (not element["md5"] in seen): 59 | seen.add(element["md5"]) 60 | theData.append(element) 61 | else: 62 | theData += newData 63 | #nextButtonXPath = "//*[@id='right-pane']/div[5]/div/ul/li[last()]/a/@href" 64 | nextButtonXPath = "//*[@id='right-pane']/div[3]/div/ul/li[last()]/a/@href" 65 | next = tree.xpath(nextButtonXPath) 66 | while len(next): 67 | url = site + next[0] 68 | print (url, file=sys.stderr) 69 | pageNum += 1 70 | page = requests.get(url) 71 | tree = html.fromstring(page.content) 72 | if ((len(pageNums) == 0) or (pageNum in pageNums)): 73 | newData = processData(tree, ext, blacklist) 74 | if (unique): 75 | for element in newData: 76 | if (not element["md5"] in seen): 77 | seen.add(element["md5"]) 78 | theData.append(element) 79 | else: 80 | theData += newData 81 | next = tree.xpath(nextButtonXPath) 82 | except Exception as e: 83 | error(e) 84 | return theData 85 | 86 | def makeOutputDir(pageNum): 87 | outputDir = str(pageNum).zfill(3) 88 | try: 89 | if (not os.path.exists(outputDir)): 90 | os.mkdir(outputDir) 91 | except Exception as e: 92 | error(e) 93 | return outputDir 94 | 95 | def printTheData(theData, options): 96 | md5only = options.md5only 97 | download = options.download 98 | elementsPerPage = options.elements 99 | print("Number of files found: %d." % len(theData), file=sys.stderr) 100 | try: 101 | jsonData = json.dumps(theData, indent=4) 102 | if (not md5only and not download): 103 | print(jsonData) 104 | else: 105 | if (download): 106 | paginate = False 107 | outputDir = "" 108 | elementNum = 1 109 | if (len(theData) > elementsPerPage): 110 | paginate = True 111 | pageNum = 1 112 | outputDir = makeOutputDir(pageNum) 113 | for element in theData: 114 | md5 = element["md5"].upper() 115 | if (md5only): 116 | print(md5) 117 | if (download): 118 | fileName = md5 + "." + element["ext"] 119 | if (paginate): 120 | if (elementNum > elementsPerPage): 121 | elementNum = 1 122 | pageNum += 1 123 | outputDir = makeOutputDir(pageNum) 124 | fileName = os.path.join(outputDir, fileName) 125 | outputFile = wget.download(element["url"], out=fileName) 126 | elementNum += 1 127 | except Exception as e: 128 | error(e) 129 | 130 | def getList(argument): 131 | return list(set(itertools.chain.from_iterable([range(int(y[0]), int(y[1]) + 1) for y in [(x.split('-') + [x])[:2] for x in argument.split(',')]]))) 132 | 133 | def main(args): 134 | theData = [] 135 | theBlacklist = [] 136 | if (args.blacklist != None): 137 | try: 138 | with open(args.blacklist, "r") as blacklistFile: 139 | theBlacklist = [line.split()[0] for line in blacklistFile.read().split('\n') if line.strip()] 140 | except Exception as e: 141 | error(e) 142 | if (args.elements < 10): 143 | args.elements = 10 144 | if (args.elements > 200): 145 | args.elements = 200 146 | for ext in args.ext: 147 | theData += processExtension(ext, theBlacklist, args) 148 | printTheData(theData, args) 149 | 150 | if __name__ == "__main__": 151 | parser = argparse.ArgumentParser(version="%(prog)s version " + __VERSION__, 152 | description="Scapes suspected malware from Wikileaks.") 153 | parser.add_argument("-m", "--md5only", action="store_true", help="only list the hashes") 154 | parser.add_argument("-d", "--download", action="store_true", help="download the files") 155 | parser.add_argument("-s", "--spam", action="store_true", help="look in the spam folder too") 156 | parser.add_argument("-p", "--duplicates", action="store_true", help="include duplicates") 157 | parser.add_argument("-u", "--unique", action="store_true", help="fetch only one entry per unique MD5") 158 | parser.add_argument("-e", "--elements", type=int, default=200, help="elements per page") 159 | parser.add_argument("-b", "--blacklist", dest="blacklist", default=None, help="blacklist file") 160 | parser.add_argument("-a", "--pages", type=getList, dest="pages", default=[], help="list of pages to process") 161 | parser.add_argument("ext", nargs="+", help="file extension") 162 | args = parser.parse_args() 163 | main(args) 164 | sys.exit(0) 165 | --------------------------------------------------------------------------------