{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":31,"n_cols":7,"rows_kept":31,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["196.251.116.86:5000",null,"196.251.116.86","Seychelles",null,"internet-security-Nybula","06.10.2025 03:00:51"]
["olgamostova.com/plank/pUzlw136.bin",null,"185.67.2.5","Ukraine",null,null,"06.10.2025 15:10:07"]
["olgamostova.com/plank/Signifik.snp",null,"185.67.2.5","Ukraine",null,null,"06.10.2025 15:09:07"]
["hostphpwindowsdriversapps1.duckdns.org/Nueva%20carpeta/copi.txt",null,"181.206.158.190","Colombia",null,"Colombia Mvil","06.10.2025 15:10:30"]
["185.29.9.98/166/2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.hta",null,"185.29.9.98","Sweden",null,"Virtual Servers","06.10.2025 14:21:07"]
["185.29.9.98/img/KKBC/2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3edc.hta",null,"185.29.9.98","Sweden",null,"Virtual Servers","06.10.2025 14:19:08"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.251.39.106","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"2a00:1450:400e:811::200a",null,null,null,"06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.250.179.170","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"216.58.208.106","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"172.217.23.202","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"2a00:1450:400e:80f::200a",null,null,null,"06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.251.36.42","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"216.58.214.10","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.250.179.202","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.250.179.138","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"2a00:1450:400e:805::200a",null,null,null,"06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"142.251.36.10","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"2a00:1450:400e:802::200a",null,null,null,"06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"172.217.168.202","United States","Mountain View","Google LLC","06.10.2025 14:13:10"]
["firebasestorage.googleapis.com/v0/b/loloer3434.firebasestorage.app/o/ab23%2Fdllskyyyyyyyyyyyyyyy.txt?alt=media&token=ba6fc66c-551c-42b7-934c-808e6e48e247",null,"2a00:1450:400e:803::200a",null,null,null,"06.10.2025 14:13:10"]
["94.156.6.253:2401",null,"94.156.6.253","Netherlands",null,null,"06.10.2025 21:00:46"]
["194.5.98.120:5100",null,"194.5.98.120","Norway",null,"WebHorizon Norway","06.10.2025 21:00:45"]
["198.12.83.94:45450",null,"198.12.83.94","United States","Buffalo","HostPapa","06.10.2025 21:00:45"]
["45.83.89.136:50542",null,"45.83.89.136","United States",null,null,"06.10.2025 19:00:54"]
["128.90.113.65:2404",null,"128.90.113.65","United States","Austin","Unus, Inc.","06.10.2025 19:00:53"]
["191.96.94.180:29000",null,"191.96.94.180","Germany",null,null,"06.10.2025 19:00:53"]
["172.245.209.167:2404",null,"172.245.209.167","United States","Buffalo","HostPapa","06.10.2025 18:30:09"]
["192.227.144.49:2404",null,"192.227.144.49","United States","Buffalo","HostPapa","06.10.2025 23:02:03"]
["161.248.179.208:2404",null,"161.248.179.208","Viet Nam",null,"CAO GIA NANOMEDECINE TECHNOLOGY JOINT STOCK COMPANY\n84 Nguyen Nhac, Ngo May Ward, Quy Nhon City, Binh Dinh","06.10.2025 23:02:01"]

{"sheet":"Malware","index":1,"n_rows":3,"n_cols":7,"rows_kept":3,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["185.29.9.98/166/2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.hta","1153c26944fe51d9b6cbde3e89ed0c5d3a19d3bd5810197b010ce01ebbd2641c",null,"384:JJPLxKSLxLmog87xRUkF1/L6syoBKCBv39eGUWP/Axkyhcy:LZMmyoBKqftqcy","2bd335e94be53168%252525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3.hta.hta",null,"06.10.2025 22:12:21"]
["185.29.9.98/img/KKBC/2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3edc.hta","5ac0ee0a818308fa2290ae476b96833d700d292ed7a946e75ba895f3b19a418e",null,"384:21JgLwKyLJpoPCX+dY0RUvMl6R77Hb1PSR5lY57xL+1Ujzo36/TY78d2KPvzir44:NQYPCX+8YoBKXKRqcy","2bd335e94be53168%2525252523GGa1dX3rXsr2Ny5ziLC2ojnzGyEarrw2RGU9Yyrnfhasde3edc.hta.hta",null,"06.10.2025 22:12:22"]