Hancitor Nov 20

http://planex-001-site5.atempurl.com/calendar/willisrobert.php
http://globe.co.th/wp-admin/stevenc242.php

additional dl
islaholics.com/6732_234732.php
http://7godzapparal.com/11
http://7godzapparal.com/22
http://7godzapparal.com/44
http://gigantic-friends.com/11
http://gigantic-friends.com/22
http://gigantic-friends.com/44
http://leaguedealer.com/11
http://leaguedealer.com/22
http://okpiramos.online/11
http://okpiramos.online/22
http://zefleks.rs/11
http://zefleks.rs/22

hashes
24c4de2fe0396a351fe621ce9158ad05e7f6a5593d7477a5fdecf0b8a86c2eaf  11.dll
293c2a7c3504d6b5f0ecfdd0e76248864eab452290ebfbdb1d0fdda6922b37a4  22.exe
76ddc226ac080268501eb4c240090e933e4b19562f6ec63456ff8711c5556c5b  44.exe
6c876839d35754f43e2e06a66b64554b03b9d2bc8b4d1ab128692271639070a2  gfkcoPLZicsYTd.dll
5dba7be148c31c506f370b4ec9410e4cf62e7d4e2cce7d1194e0c5a2417e9342  WEL_5475901728234709.vbs

hancitor c2
http://elesengrity.com/4/forum.php
http://lardempotr.ru/4/forum.php
http://dethavare.ru/4/forum.php

pony c2
http://elesengrity.com/mlu/forum.php
http://lardempotr.ru/mlu/forum.php
http://dethavare.ru/mlu/forum.php

evilpony c2
http://elesengrity.com/d2/about.php
http://lardempotr.ru/d2/about.php
http://dethavare.ru/d2/about.php

ursnif info
Oct 31 2019
2000
550
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
Gwe9HMygngWe8kPK
has.votaritar.at/webstore
8.8.8.8
195.10.195.195
8.8.4.4
95.216.174.175
193.30.123.44
94.247.43.254