Monitoring for new badness, I came across a handful of domains housed on 18.104.22.168. A quick dig later, and I had me a list of 754 URLs, each leading to badness your machine could do without.
Though there's 754 URLs, there's actually only a handful of unique MD5s (58).
The IP itself, belongs to Netherlands based, Snel Internet Services B.V. (they're a customer of AS42267 22.214.171.124/21 SHIRYO-AS Shiryo Networks B.V., and have the entire 126.96.36.199/22).
They've been reported, but in the meantime, you'll want to put a block on the IP.
Malwarebytes users will be pleased to know, the files are already detected.