See: https://urlquery.net/report/2029610d-f962-4859-8efd-04d85775adb2
and also given here in this blocklist: https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/ransomware_feed.ipset
and here: https://github.com/firehol/blocklist-ipsets/blob/master/ransomware_feed.ipset
also analysis: https://www.hybrid-analysis.com/sample/a21057ca6208979d938fa03496e90352bcbdef7e1bbe45bafe2d0ced9034bf9c?environmentId=100
reported: https://ransomwaretracker.abuse.ch/ip/123.242.224.116/
polonus