{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":41,"n_cols":7,"rows_kept":41,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["43.153.222.28:4545/match",null,"43.153.222.28","Japan","Tokyo","6 COLLYER QUAY","06.10.2025 10:32:34"]
["frienel-blog.duckdns.org",null,"192.169.69.26","United States","Seattle","Stealthy Hosting","06.10.2025 05:48:29"]
["196.251.114.120:443",null,"196.251.114.120","Seychelles",null,"internet-security-Nybula","06.10.2025 03:00:28"]
["147.45.45.164:443",null,"147.45.45.164","Netherlands",null,null,"06.10.2025 05:49:12"]
["api.updatesreview.com",null,"147.45.45.164","Netherlands",null,null,"06.10.2025 05:48:24"]
["evil.ritademo.io.vn",null,"222.255.214.236","Viet Nam",null,"ip range belong to VDC and was sub assigned for Cable Modem Service\nVung dia chi VNPT phan bo cho VDC\nVDC cap phat lai cho dich vu truy cap Internet qua Cable TV","06.10.2025 10:32:34"]
["evil.ritademo.io.vn/ca",null,"222.255.214.236","Viet Nam",null,"ip range belong to VDC and was sub assigned for Cable Modem Service\nVung dia chi VNPT phan bo cho VDC\nVDC cap phat lai cho dich vu truy cap Internet qua Cable TV","06.10.2025 10:32:34"]
["47.109.83.84:18484/ul4H",null,"47.109.83.84","China",null,"Aliyun Computing Co., LTD\n5F, Builing D, the West Lake International Plaza of S&T\nNo.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099","06.10.2025 10:32:34"]
["160.250.128.197:8080/ga.js",null,"160.250.128.197","Viet Nam",null,"VPS Nava Company Limited\n749/64 Tran Hung Dao, Le Hong Phong Ward, Quy Nhon City, Binh Dinh Province, Vietnam","06.10.2025 10:32:34"]
["156.251.162.29/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books",null,"156.251.162.29","United States","Johannesburg","GLOBALDATA INVESTMENTS INC","06.10.2025 10:32:34"]
["156.234.239.226:9030/admin/Display/Server/friends/API/35CQOD0HPPH2CN",null,"156.234.239.226","Hong Kong",null,"YANCY LIMITED","06.10.2025 10:32:34"]
["116.203.31.207:9999/pixel.gif",null,"116.203.31.207","Germany",null,null,"06.10.2025 10:32:34"]
["115.190.127.89:50000/activity",null,"115.190.127.89","China",null,"Beijing Volcano Engine Technology Co., Ltd.\n1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing","06.10.2025 10:32:34"]
["114.132.238.70:9899/hm.gif",null,"114.132.238.70","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building,38 Haidian St,\nHaidian District Beijing","06.10.2025 10:32:34"]
["193.112.251.31:8989/sEKZ",null,"193.112.251.31","China",null,"Tencent Cloud Computing (Beijing) Co., Ltd\nFloor 6, Yinke Building, 38 Haidian St, Haidian District","06.10.2025 13:25:48"]
["193.112.251.31:8989/EiKd",null,"193.112.251.31","China",null,"Tencent Cloud Computing (Beijing) Co., Ltd\nFloor 6, Yinke Building, 38 Haidian St, Haidian District","06.10.2025 13:25:47"]
["193.112.251.31:1234/VYAm",null,"193.112.251.31","China",null,"Tencent Cloud Computing (Beijing) Co., Ltd\nFloor 6, Yinke Building, 38 Haidian St, Haidian District","06.10.2025 13:25:46"]
["119.29.177.237:8080/02.08.2022.exe",null,"119.29.177.237","Hong Kong",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building,38 Haidian St,\nHaidian District Beijing","06.10.2025 20:04:11"]
["152.136.159.25:6666/02.08.2022.exe",null,"152.136.159.25","China",null,"Tencent Cloud Computing (Beijing) Co., Ltd\nFloor 6, Yinke Building, 38 Haidian St, Haidian District","06.10.2025 20:04:09"]
["124.220.48.168:2379/02.08.2022.exe",null,"124.220.48.168","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building, 38 Haidian St, Haidian District Beijing","06.10.2025 20:04:09"]
["45.204.216.82:8848/02.08.2022.exe",null,"45.204.216.82","Hong Kong",null,"HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED","06.10.2025 20:04:09"]
["47.106.132.231:30003/02.08.2022.exe",null,"47.106.132.231","China",null,"Aliyun Computing Co., LTD\n5F, Builing D, the West Lake International Plaza of S&T\nNo.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099","06.10.2025 20:04:09"]
["143.92.43.231:8011/02.08.2022.exe",null,"143.92.43.231","Hong Kong",null,"CTG Server Ltd.","06.10.2025 20:04:09"]
["124.222.32.187:9850/02.08.2022.exe",null,"124.222.32.187","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building, 38 Haidian St, Haidian District Beijing","06.10.2025 20:04:09"]
["85.208.84.240/02.08.2022.exe",null,"85.208.84.240","Russian Federation",null,null,"06.10.2025 20:04:08"]
["85.208.84.240:443/02.08.2022.exe",null,"85.208.84.240","Russian Federation",null,null,"06.10.2025 20:04:08"]
["194.180.49.76/02.08.2022.exe",null,"194.180.49.76","Bulgaria",null,"MNT-NETERRA","06.10.2025 20:04:07"]
["45.204.222.196:53",null,"45.204.222.196","Hong Kong",null,"HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED","06.10.2025 19:51:28"]
["138.124.113.71:53",null,"138.124.113.71","Netherlands",null,null,"06.10.2025 19:50:23"]
["ns3.sotawatanabi.trade",null,"0.0.0.0",null,null,null,"06.10.2025 19:49:37"]
["ns2.littllee365c.top",{"$nulls":5},"06.10.2025 19:49:35"]
["ns2.sotawatanabi.trade",null,"0.0.0.0",null,null,null,"06.10.2025 19:49:35"]
["ns1.littllee365c.top",{"$nulls":5},"06.10.2025 19:49:33"]
["ns1.sotawatanabi.trade",null,"0.0.0.0",null,null,null,"06.10.2025 19:49:33"]
["47.109.145.158:443",null,"47.109.145.158","China",null,"Aliyun Computing Co., LTD\n5F, Builing D, the West Lake International Plaza of S&T\nNo.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099","06.10.2025 23:00:32"]
[null,null,"114.132.238.70","China",null,"Tencent cloud computing (Beijing) Co., Ltd.\nFloor 6, Yinke Building,38 Haidian St,\nHaidian District Beijing","06.10.2025 10:32:34"]
[null,null,"160.250.128.197","Viet Nam",null,"VPS Nava Company Limited\n749/64 Tran Hung Dao, Le Hong Phong Ward, Quy Nhon City, Binh Dinh Province, Vietnam","06.10.2025 10:32:34"]
[null,null,"156.234.239.226","Hong Kong",null,"YANCY LIMITED","06.10.2025 10:32:34"]
[null,null,"115.190.127.89","China",null,"Beijing Volcano Engine Technology Co., Ltd.\n1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing","06.10.2025 10:32:34"]
[null,null,"23.235.182.123","United States","Cheyenne","RedLuff, LLC","06.10.2025 10:32:34"]

{"sheet":"Malware","index":1,"n_rows":2,"n_cols":7,"rows_kept":2,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["47.109.83.84:18484/ul4H","32115482c8e87c2f5c2837a930d968052f60f46dc734d2ede6d6a0333934620d",null,"6144:zad4HBwXXsBowV9KVGgfsLQiv3hqTlnYHnkbRnEPvxViaZ:pHB7owVIVGgfssivRwkynEh0aZ","ul4H.exe","exe","06.10.2025 12:02:20"]