Hancitor Oct 29

http://www.primemotionz.com/getfile/rwhayne.php
http://www.indicator-eg.com/login/tjholden.php
below thanks to @wwp96
http://www.memskaarten.nl/sdlkitj8kfd/rocan3.php
http://www.leckastella.com/nlpo9bw/torrie75.php
http://www.livestreamtvnow.com/wp-content/williamfrohn.php
http://www.rinconadadelmaipo.cl/wp-content/travelogue101.php
http://www.marketingwix.com/.tmb/samuel_galloway.php
http://www.istanbullamps.com/wp-includes/stephen.php
http://www.homeofficeenterprisers.com/cgi-bin/zinho.fonseca.php
http://www.lemaliziuselle.it/sally.class/yfb1948.php
http://www.mmsoft.vn/wp-admin/rwrwings.php
http://www.jcecpainting.com/wp-admin/superslava009.php
http://www.mag-au.com/wp-admin/wjbard_9.php
http://www.mag-au.com/wp-admin/wjbard_9.php
http://www.marketingwix.com/.tmb/samuel_galloway.php

additional dl
below thanks to @jaythl
tullosscapitalmanagement.net/342578_4378.php
http://selcukluticaret.com/yeni/wp-content/plugins/chika2/1
http://selcukluticaret.com/yeni/wp-content/plugins/chika2/2
http://shanemoodie.com/1
http://shanemoodie.com/2
http://sharjahas.com/plugins/content/apismtp/1
http://sharjahas.com/plugins/content/apismtp/2
http://stroytrest19.by/libraries/1
http://stroytrest19.by/libraries/2
http://websitetechy.com/1
http://websitetechy.com/2

hashes
9bad350a2a9c32b47ab863e8b0212bac46ba831acda9a771689318e75d8ac7e4  RUTABAGA-90162.vbs
c3a9cc70500a3aaf0cbbf054a9e83ef183f7f4d1051de7b18beccfe62401f844  waGsEYCPB.txt.dll
8ac8eecb87cdb3ed9bb4b52eaf06ca32668e85972326ccf6a17a4ba3599375da  1.dll
d004465858a1f8a1dbfc2e0341f9901d99c4713bd1630bf88d8dea094359500c  2.exe

hancitor c2
http://wingritydet.com/4/forum.php
http://thaverenta.ru/4/forum.php
http://selesesteq.ru/4/forum.php

pony c2
http://wingritydet.com/mlu/forum.php
http://thaverenta.ru/mlu/forum.php
http://selesesteq.ru/mlu/forum.php

evilpony c2
http://wingritydet.com/d2/about.php
http://thaverenta.ru/d2/about.php
http://selesesteq.ru/d2/about.php