{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":6,"n_cols":7,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["github.com/mimmort88/lan/raw/refs/heads/main/payload.hta",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","05.06.2025 08:40:08"]
["github.com/mimmort88/popino/raw/main/jij.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","05.06.2025 08:39:06"]
["arcticprivate.duckdns.go",{"$nulls":5},"05.06.2025 13:22:39"]
["arcticprivate.duckdns.org",null,"192.169.69.26","United States","Seattle","Stealthy Hosting","05.06.2025 13:22:39"]
["194.38.20.80:54984",null,"194.38.20.80","Ukraine",null,null,"05.06.2025 13:15:24"]

{"sheet":"Malware","index":1,"n_rows":4,"n_cols":7,"rows_kept":4,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["15.204.239.164/Movies/clean.exe","36769c54a1eb761351d6349bb778d7d8ac7504ab09e56aaef92b185b7c48b021","20ff7a11513e88d0f5188b2ee188ef8e","6144:uLV6Bta6dtJmakIM5sG9lT9E6CvvHPfI2xJ:uLV6BtpmkPGrBfCvPPfIWJ","clean.exe","exe","05.06.2025 10:50:46"]
["15.204.239.164/Movies/greencaca.exe","474f58ecbb4bd0f594b3fa312503e912215de583313b9b199539fa2fb7144b6f","20ff7a11513e88d0f5188b2ee188ef8e","3072:MzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIe2svu1SEImfAF8V7m8CJvflRR:MLV6Bta6dtJmakIM51uvImfVqflRj0vK","greencaca.exe","exe","05.06.2025 10:50:47"]
["github.com/mimmort88/lan/raw/refs/heads/main/payload.hta","0bce5cb564de0e147198dd491b1b645c3f84b8a919ee0d4d852dc792be7245c0",null,"24:hMNmMvy4GqptEIjb18qezOQp8xuY8yu5yocl88e/ZM8E4olEC:ImMqopOIjb18Jd4uco7yt40F","payload.hta.txt","txt","05.06.2025 18:11:39"]