Hancitor Nov 5

http://wisdomtoken.info/wp-content/rpdilemmo.php
http://www.casapallanza.com/rd9dl6/wlchck.php
http://www.archimusa.com/wp-admin/whitewoodie4u.php
http://underconstructions.gr/wp-content/wjs145.php

additional dl
http://cliffordbrown.com/236743_543.php
http://diplomi.by/1
http://diplomi.by/2
http://drnafas.com/1
http://drnafas.com/2
http://ingmetalicasos.com/1
http://ingmetalicasos.com/2
http://javcastle.com/1
http://javcastle.com/2
http://joshsacrey.com/1
http://joshsacrey.com/2

hashes
6267337893e5dae6e2fc841e60d44e10c13e4a5bf4ebb20db6160d66265883fa  1.dll
9517482e9127750f40e041cdf29ef0daf03250a695dc46c3cc445bebb43b4967  2.exe
be24efa360cb3ac01a4f2e0e651e18ed3b28e24b344edb8f37761678293ebe36  CA_862833226948.vbs
c7060cc0745637ce6affaeb99ffe553c4f8ef13293317420e5cfc167f9ec4b43  uFbwzZiMEXVNwo.txt.dll

hancitor c2
http://froloccenatr.com/4/forum.php
http://magnowin.ru/4/forum.php
http://imajobalgun.ru/4/forum.php

pony c2
http://froloccenatr.com/mlu/forum.php
http://magnowin.ru/mlu/forum.php
http://imajobalgun.ru/mlu/forum.php

evilpony c2
http://froloccenatr.com/d2/about.php
http://magnowin.ru/d2/about.php
http://imajobalgun.ru/d2/about.php