http://win55.local.net

http://system123.local.net/10.6.2.10

http://system123.local.net/10.10.1.8

http://www.welivesecurity.com/2014/05/20/miniduke-still-duking/

https://github.com/darkquasar/WMI_Persistence

http://server44.local.net/10.23.3.1

http://server44.local.net/1.253.103.134

http://server44.local.net/10.7.1.100

https://sysforensics.org/2014/01/know-your-windows-processes/

http://server22.local.net/10.6.19.8

http://server.local.net/10.1.19.2

http://.lookipv6.com

http://www.swiftforensics.com/2013/12/amcachehve-in-windows-8-goldmine-for.html

https://windowsir.blogspot.de/2017/03/incorporating-amcache-data-into.html

http://server4448.local.net/10.0.10.1

http://server23.local.net/10.19.2.17

http://server77.local.net/10.10.9.19

http://system444.local.net/172.27.2.7

http://60.10.1.183.in-addr.arpa

http://system88.local.net/10.10.9.15

http://altftp.compsys.biz

http://vpnaccess.companybranch.info

http://in-add.arpa

http://ipv6.com

http://benign-site-ipv6.com

http://servftp.companyname.biz

http://www2.companybranch.cn

https://blog.malwarebytes.com/cybercrime/2016/09/hosts-file-hijacks/

http://server555.local.net/10.7.1.14

http://master.comp-a.net

http://server99.local.net/10.1.1.55

http://ctldl.windowsupdate.com

http://www.company-intranet.net

http://update1.f-secure.com

http://server55.local.net/10.16.1.44

http://server55.local.net/10.1.12.2

http://server88.local.net/10.10.9.33

http://server77.local.net/10.1.90.18

http://server66.local.net/147.2.20.16

http://server66.local.net/10.1.30.2

http://server44.local.net/10.216.2.186

http://server44.local.net/10.16.3.7

http://goo.gl/Fm00Q8

http://1dns.dubkill.com.in

http://s3newss.effers.com

http://upport.proxydns.com

http://e.authorizeddns.org

http://server44.local.net/10.10.1.4

http://server44.local.net/10.16.22.2

https://www.virustotal.com/en/

http://Virustotal.com

https://www.virustotal.com

https://www.virustotal.com/en/domain/DOMAIN/information/

https://www.virustotal.com/en/ip-address/58.158.177.102/information/

http://virustotal.com

https://www.winitor.com

https://www.passivetotal.org

https://cymon.io

https://censys.io

https://www.threatcrowd.org

https://cse.google.com/cse/publicurl?cx=003248445720253387346:turlh5vi4xc

https://www.hybrid-analysis.com

http://munin.py

https://github.com/Neo23x0/munin