Rename tor2web signature to torgateway and give it a fuller set of indicators from CryptoWall to the latest CryptoWall 2.0 sets.  Also append all matches instead of just the first.