An exploit kit appears to be tracking Windows systems using a list of installed fonts. Landing page has a hard coded list of fonts, checks to see which ones are present. Submits a MD5 hash of the list of the fonts to the server, which then iterates through six different exploits. It also verifies the JavaScript MD5 algorithm works as expected by MD5 hashing “hello”, thus the name of this kit. This is actually as the “LightsOut” exploit kit used by different groups.”]
Source: https://blog.talosintelligence.com/2014/03/hello-new-exploit-kit.html