Hancitor Jan 28

http://stockmarketrevolution.com/wp-includes/zecos333.php

additional dl
http://executivejeepram.com/478_74324.php
http://www.delhiaerocityescorts.com/assets/images/1
http://www.delhiaerocityescorts.com/assets/images/2
http://www.dialanescorts.in/js/wow/1
http://www.dialanescorts.in/js/wow/2
http://www.escortjobs.in/wp-content/upgrade/1
http://www.escortjobs.in/wp-content/upgrade/2
http://www.goaescort.net.in/blog/wp-includes/1
http://www.goaescort.net.in/blog/wp-includes/2
http://www.loansupports.com/library/mailer/1
http://www.loansupports.com/library/mailer/2

hashes
436f9776580ea0dceb25215539f4d3b85d0f9eee7d912671c84846e43008f6fe  1.dll
a04205fda87d5ad5ba22d117eb0c7236c29f735f88a611d7c80d7f3d336f1d5c  2.dll
ee6d6adc3dadd202c36f7f7226395fcd511bc0c39487f8f26cd65159b1aee1d9  BJGl.txt.dll
7ef3fb17dcf2ba0ad76ebe76e07a90b7bddbefa088d8767d105728f5d2bd71e1  RU436852346291.vbs

hancitor c2
http://buctintson.com/4/forum.php
http://andentrog.ru/4/forum.php
http://ensisedg.ru/4/forum.php

pony c2
http://buctintson.com/mlu/forum.php
http://andentrog.ru/mlu/forum.php
http://ensisedg.ru/mlu/forum.php

evilpony c2
http://buctintson.com/d2/about.php
http://andentrog.ru/d2/about.php
http://ensisedg.ru/d2/about.php