{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":21,"n_cols":7,"rows_kept":21,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["107.172.217.220:80",null,"107.172.217.220","United States","Buffalo","ColoCrossing","27.12.2025 11:01:29"]
["107.172.217.220:443",null,"107.172.217.220","United States","Buffalo","ColoCrossing","27.12.2025 11:01:29"]
["1.12.231.30:8080",null,"1.12.231.30","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building,38 Haidian St,\nHaidian District Beijing","27.12.2025 10:18:06"]
["43.201.53.65:8888",null,"43.201.53.65","United States",null,"Amazon.com, Inc.\n605 5th Ave S","27.12.2025 10:18:06"]
["47.105.55.111:8888",null,"47.105.55.111","China",null,"Aliyun Computing Co., LTD\n5F, Builing D, the West Lake International Plaza of S&T\nNo.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099","27.12.2025 10:18:05"]
["194.180.158.154:10000",null,"194.180.158.154",null,null,null,"27.12.2025 09:43:47"]
["103.212.187.23:4444",null,"103.212.187.23","Hong Kong",null,"Ampus Limited","27.12.2025 09:43:42"]
["111.230.66.165:8080",null,"111.230.66.165","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building,38 Haidian St,\nHaidian District Beijing","27.12.2025 09:43:40"]
["c22.yourbigbro.shop",{"$nulls":5},"27.12.2025 17:48:37"]
["43.153.60.198:8443",null,"43.153.60.198","United States",null,"6 COLLYER QUAY","27.12.2025 15:51:32"]
["139.196.223.82:8443",null,"139.196.223.82","China",null,"Aliyun Computing Co., LTD\n5F, Builing D, the West Lake International Plaza of S&T\nNo.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099","27.12.2025 15:49:43"]
["zh.goog1e.dpdns.org",null,"104.21.13.166","United States","San Francisco","Cloudflare, Inc.","27.12.2025 15:49:04"]
["zh.goog1e.dpdns.org",null,"2606:4700:3034::ac43:c8d4",null,null,null,"27.12.2025 15:49:04"]
["zh.goog1e.dpdns.org",null,"2606:4700:3036::6815:da6",null,null,null,"27.12.2025 15:49:04"]
["zh.goog1e.dpdns.org",null,"172.67.200.212","United States","San Francisco","Cloudflare, Inc.","27.12.2025 15:49:04"]
["45.249.208.252:3334",null,"45.249.208.252","China",null,"Jiangsu Leaf Cloud Computing Co., Ltd.\nNo. 127, Dabao Group, Heping Community, Dachang Street, Jiangbei New District, Nanjing","27.12.2025 19:01:31"]
["83.229.125.215:4433",null,"83.229.125.215","Hong Kong",null,"S-G-IX","27.12.2025 19:01:29"]
["45.249.208.252:3334/02.08.2022.exe",null,"45.249.208.252","China",null,"Jiangsu Leaf Cloud Computing Co., Ltd.\nNo. 127, Dabao Group, Heping Community, Dachang Street, Jiangbei New District, Nanjing","27.12.2025 19:20:09"]
["107.172.217.220/02.08.2022.exe",null,"107.172.217.220","United States","Buffalo","ColoCrossing","27.12.2025 19:20:08"]
["119.3.156.32:80",null,"119.3.156.32","China",null,"Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)\nNo.2018 Xuegang Road,Bantian street,Longgang District,\nShenzhen,Guangdong Province, 518129 P.R.China","27.12.2025 23:01:31"]

{"sheet":"Malware","index":1,"n_rows":11,"n_cols":7,"rows_kept":11,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["202.162.99.237/02.08.2022.exe","0f7484f5a4aef2aceb8a534fd87ab5f18bc4cb784e284144dfd58576649338e4",null,"6144:PfclNjTPsj/Tu8mKiMp4WN8CHWbWK042QIN6pC+fO0zStEwc:3IpTYudKzqWDHWbdj2QMqjO0zX","02.08.2022.exe","exe","27.12.2025 09:36:39"]
["103.241.72.221/02.08.2022.exe","ca84832ca5fc6676d1ed3e7378ba6023df3cc0166adfa27caa1661f99b8ab1dd",null,"3072:Ao1WkMZvlkjWtNp5PrO6uGt5SqwXj2rDV5GPug4qeD0Y/jGhk+mPb9cL:Ag0vlGWtROqSqwz2/V5GPneQwjck3BA","02.08.2022.exe","exe","27.12.2025 09:36:42"]
["165.22.48.119:4444/02.08.2022.exe","7f3b61cd1c34133433521c26717c4c80991472776942dc8125fc98c92b69be5f",null,"6144:vpRcqkLM/flzlf5LJ1rLH923rInsVOs8uL3fG:TiLM/Pf5LXLHMCsksVL3fG","02.08.2022.exe","exe","27.12.2025 09:37:24"]
["188.166.178.198/02.08.2022.exe","13922904b96d29434f05faa90becc254e9f7ef85a796cb1f934a316db33384ba",null,"6144:F7T+pJlfNP4ES4zj8TZsZkiUp4OGjG1JLmxzpCyVH3OcF88:F7i3lfJTkZOLOQGLty3OC","02.08.2022.exe","exe","27.12.2025 09:37:26"]
["84.241.22.227:9090/02.08.2022.exe","e40d14a16c5738592c6f982fd8d312b2e1b0370e427349b510db77162398c286",null,"6144:mIh6Bz4+22s1FKpvOoPICQWYCeN7F9CE0p94AB1IP:mu6B0+22e0hPICQbCeNZ93G4AB1S","02.08.2022.exe","exe","27.12.2025 09:37:28"]
["43.134.7.96/02.08.2022.exe","c101273a2cb9d5341fdea31680f53e0ddd2f5cedd3716c6dea163cd9eaaa3269",null,"6144:P6dLNxhhrLkdAeBFPLUcS5vMrRaXOMSugPS:P4xjxLGASPIco0rRaXAuB","02.08.2022.exe","exe","27.12.2025 09:38:50"]
["115.190.160.206:443/02.08.2022.exe","fff9a59375e2c5b65fa397a460042e62d11d39819d8bf7edd12b30c27e281824",null,"6144:PSSuSURBjn8vYIhsMrzvYrnn8o4M31D1mCzNoifsne588Z:aSwRBT8vLmn2M3xkCz/sei8Z","02.08.2022.exe","exe","27.12.2025 09:38:53"]
["38.55.99.179:8082/02.08.2022.exe","72b59984c0540b339d30e34693b1180a545150468ddd837bcbc591fccefc6b2b",null,"3072:Rps07WQf+MqXsBB6UulQl0ujF4bep+3YuykiOttS3+ogHfJ+vFNAp71HDFQZhcvr:RJ7t2iB72rbfYuy7lg8FKp7dByh8","02.08.2022.exe","exe","27.12.2025 09:40:59"]
["ghostbin.axel.org/paste/evwgo/raw","6b606028cbe6df20f93b2ba8ed0c071cdc4cf480001c9f93fc1dadb760fcb6a6",null,"24:HONa5BPJlqRTWvV/dxGE4fLn2DOIRu8Icysfjg36FWeB03Rrv7N2rxvJEF3ptbK3:HONoBPJYAnyCO83fjKuzE9TkEhpRt9PU","raw.txt","txt","27.12.2025 13:45:49"]
["anywherehost.site/xms/k1.sh","6291ce457347ee0f162258e1d48c5adacf3c98bbc741bc622c98df3d9dc3c77e",null,"192:pWpZAmiJVW+hajPmktMo1EcfYMkmrgxVjF6YJ0ICinq5F:d4gxVTfCrF","k1.sh.exe","exe","27.12.2025 13:45:54"]