Hancitor Oct 24

http://eurostarenterprises.in.net/wp-content/woodcock_jack.php
http://www.studiolama.it/sdlkitj8kfd/treefrogg1954.php
http://www.wallstreetbusinessloans.com/wp-includes/themikebeaulieu.php
http://www.ssgs-sol.co.uk/x8yslok/wgpinla.php
http://www.webvome.com/viync/savickied.php
http://www.vlconsultancy.in/wobqnwvvls/zolling9.php
below thanks to @jaythl
http://anilmehandiart.in/calendar/seanwilkes.php
http://ashuscrap.co.in/admin/tjhenika.php
http://boettcher-melsdorf.de/tmp/tecumseh.php
http://boomziki.com/boomgossip.com/ttanoos.php
http://entrepreneurbite.com//tbone0810.php
http://eurostarenterprises.in.net/wp-content/woodcock_jack.php
http://gilltravels.in.net/images/twalterlakes.php
http://groupjuris.com/cgi-bin/youngd.php
http://mjmehandiart.co.in/E-Trust_files/rickn1574.php
http://moviev.online/cgi-bin/sm999c.php
http://proficienttaxindia.com/siddzbed/teclogistics2.php
http://promotion-maroc.com//wendy.php
http://rahulmehandi.in.net/fontawesome/rogerwall69.php
http://redcarpeteventplaner.in.net/js/tomfant73.php
http://tecnopressitaly.it/wp-includes/richard.php
http://www.sicurance.com/cgi-bin/tord.trondsen.php
http://www.soulsurvivorink.com/publicfiles/waremporter.php
http://www.ssgs-sol.co.uk/x8yslok/wgpinla.php
http://www.studiolama.it/sdlkitj8kfd/treefrogg1954.php
http://www.teacademy.org.uk/class.exact/swisscom55.php
http://www.tshirtprintlab.com/wp-admin/zafreen_sajawal.php
http://www.unalavukatlik.com/9vtf/rwellborn51.php
http://www.virgile-crelier.ch/wp-content/steven.slepian.php
http://www.vlconsultancy.in/wobqnwvvls/zolling9.php
http://www.wallstreetbusinessloans.com/wp-includes/themikebeaulieu.php
http://www.webvome.com/viync/savickied.php
http://boomziki.com/boomgossip.com/ttanoos.php
http://promotion-maroc.com//wendy.php
http://www.tshirtprintlab.com/wp-admin/zafreen_sajawal.php
http://ashuscrap.co.in/admin/tjhenika.php
http://www.unalavukatlik.com/9vtf/rwellborn51.php
http://www.sicurance.com/cgi-bin/tord.trondsen.php
ttp://www.teacademy.org.uk/class.exact/swisscom55.php

additional dl
below thanks to @jaythl
blakejordan.com/4234_32423.php
http://dobresmaki.eu/wp-content/plugins/duplicate-post/1
http://dobresmaki.eu/wp-content/plugins/duplicate-post/2
http://dobresmaki.eu/wp-content/plugins/duplicate-post/3
http://msdfirstchurch.org/download/1
http://msdfirstchurch.org/download/2
http://msdfirstchurch.org/download/3
http://nanohair.com.au/wp-content/plugins/wordpress-seo/inc/1
http://nanohair.com.au/wp-content/plugins/wordpress-seo/inc/2
http://nanohair.com.au/wp-content/plugins/wordpress-seo/inc/3
http://qne.com.sg/wp-includes/pomo/1
http://qne.com.sg/wp-includes/pomo/2
http://qne.com.sg/wp-includes/pomo/3
http://www.hollyhomefinders.com/1
http://www.hollyhomefinders.com/2
http://www.hollyhomefinders.com/3

hashes
4268691f4954d3a94974f9be4eceaa7eacc97df3d8c7f5e302652d148c8344c3  1.dll
f54baaebbe788e6a010eafdf7810ff1ac45eb8e89feb1b60755d7908a2610b8a  2.exe
f3e277db1d028b9677594bbe8be3addf0fd6f511a078aa6bf4cc4293b506664d  3.exe
f54dca2a70c6b51637f83a9055a00fe7a7a98b08843757dc4d340d3209247865  DOC4162686173303988_4718.zip
a226aa83b9f1ecd7acb69c2be1823d79cbb46ed8c01e3536e8a9c9ef6bcfc27e  DOC4162686173303988.vbs
17454b5c4de7f3404668c1bf54a691c577b9c26adf5987b7c6fa748fc1267963  rdRRdzF.log.dll

hancitor c2
http://wickawbarrysci.com/4/forum.php
http://scangescangomu.ru/4/forum.php
http://penreleaplif.ru/4/forum.php

pony c2
http://wickawbarrysci.com/mlu/forum.php
http://scangescangomu.ru/mlu/forum.php
http://penreleaplif.ru/mlu/forum.php

evilpony c2
http://wickawbarrysci.com/d2/about.php
http://scangescangomu.ru/d2/about.php
http://penreleaplif.ru/d2/about.php

Oct 10 2019
2000
550
Gwe9HMygngWe8kPK
constitution.org/usdeclar.txt
0x4eb7d2ca
com ru org
has.votaritar.at/webstore
8.8.8.8
195.10.195.195
8.8.4.4
95.216.174.175
193.30.123.44
94.247.43.254