Hancitor Nov 19

below thanks to @wwp96
hxxp://cargd.ru/dup-installer/srpablotorrico.php
hxxp://cdd.binsolexpert.com/f0no/tolsen27.php
hxxp://dailywork.in/.quarantine/rsouter247.php
hxxp://financasideal.online/wp-admin/stephenv.php
hxxp://harddigit.com/wp-admin/torno382.php
hxxp://iaf.miprimerafotografia.co/.well-known/tkelso1071.php
hxxp://lollipopnews.in/wp-content/tomalice011.php
hxxp://mtl.cloud/img/shamika.kennedy.php
hxxp://nournews.temporaryprojects.net/.well-known/schneeberger-hannes.php
hxxp://onemanshow.pl/wp-admin/ronteson1.php
hxxp://palettenmobelideenge.club/web_map/walnutman1947.php
hxxp://regner.dev/wp-admin/smootbro34.php
hxxp://selbermachendekorationge.club/wp-includes/williamtrombley.php
hxxp://selbermachenfurkinderge.club/wp-admin/tedbarrett377.php
hxxp://skup-katalizatorow.biz/wp-includes/travis734502.php
hxxp://start.moibizness.ru/cgi-bin/richard.hedman.php
hxxp://u32apartments.com/wp-admin/thebostonguru.php
hxxp://weihnachtsentwurfege.club/wp-includes/shupe4_1.php
hxxp://wp.pertler.cn//swiggard.php
hxxp://www.amicidivini.it//www.m.bachert.php
hxxp://www.arredopellanda.com/wp-content/xdout2.php
hxxp://www.astrikainfotech.com/ocecom/wdbow12003.php
hxxp://www.coktailerie.com/wp-content/saro.php
hxxp://www.ilovegorgonzola.it/wp-content/tedwhelan.php
hxxp://www.inparplast.com/cgi-bin/wd4burd.php
hxxp://www.lucianotavazza.it/ugibeonj/rolfanderson.php
hxxp://www.shalunshimeiseo.com/wp-includes/rphalp.php
hxxp://www.sistemiplm.it/home/thomasauto71.php
hxxp://www.tikso168.com/wp-content/rhuber.php
hxxp://www.viplink.cn/tcda/zoysiagrass12.php
hxxp://www.wielfix.nl/wp-content/slaney.php
hxxp://zeyre.com/temp/teakelly1919.php

additional dl links
http://therightestimate.net/7834_4367.php
http://7godzapparal.com/11
http://7godzapparal.com/22
http://7godzapparal.com/33
http://gigantic-friends.com/11
http://gigantic-friends.com/22
http://gigantic-friends.com/33
http://kidsstudio.store/a
http://leaguedealer.com/11
http://leaguedealer.com/22
http://leaguedealer.com/33
http://okpiramos.online/11
http://okpiramos.online/22
http://okpiramos.online/33
http://osesama.jp/a
http://tuisumi.info/a
http://velisnackindonesia.com/a
http://yudiartawan.com/a
http://zefleks.rs/11
http://zefleks.rs/22
http://zefleks.rs/33

hashes
9059535c4c046e8292e3b7528c624af59886aeea8509f289b2a195b0fc83c559  tCsVXROpEZxZpX.dll
8370b5aaf5d21fdfe7052c90b1e6b8fd3e0fa0bc26007badd416b1d4a99bc3cd  a.exe
24c4de2fe0396a351fe621ce9158ad05e7f6a5593d7477a5fdecf0b8a86c2eaf  11.dll
293c2a7c3504d6b5f0ecfdd0e76248864eab452290ebfbdb1d0fdda6922b37a4  22.exe
7943875b4482c8893854ef9b127b995270fe365be81d0db978b3937811c68bd1  33.exe
b4cccb26cc66ad3ae48b29dd8ce99238da904048db7aba4f54690f5398ff9c7e  W7386558917216849_1229.zip
87a8b0e2557fb3b259bc446571359a4bae73452077dbd32fc35693f93228be7a  WHO_7386558917216849.vbs

hancitor c2
http://elesengrity.com/4/forum.php
http://lardempotr.ru/4/forum.php
http://dethavare.ru/4/forum.php

pony c2
http://elesengrity.com/mlu/forum.php
http://lardempotr.ru/mlu/forum.php
http://dethavare.ru/mlu/forum.php

evilpony c2
http://elesengrity.com/d2/about.php
http://lardempotr.ru/d2/about.php
http://dethavare.ru/d2/about.php

ursnif info
Oct 31 2019
2000
550
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
Gwe9HMygngWe8kPK
has.votaritar.at/webstore
8.8.8.8
195.10.195.195
8.8.4.4
95.216.174.175
193.30.123.44
94.247.43.254