{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":32,"n_cols":7,"rows_kept":32,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["195.178.136.2:443",null,"195.178.136.2","Moldova, Republic of",null,null,"18.11.2025 07:02:13"]
["dizelexcel.xyz/open/HVqKmlyoJ145.bin",{"$nulls":5},"18.11.2025 09:47:12"]
["dizelexcel.xyz/open/Urkrfters.mdp",{"$nulls":5},"18.11.2025 09:46:07"]
["198.23.177.196:4242",null,"198.23.177.196","United States","Buffalo","HostPapa","18.11.2025 11:03:16"]
["161.132.67.41:2404",null,"161.132.67.41","Peru",null,"Red Cientifica Peruana","18.11.2025 11:03:15"]
["104.168.34.187:2404",null,"104.168.34.187","United States","Buffalo","HostPapa","18.11.2025 10:21:29"]
["172.245.209.196:1989",null,"172.245.209.196","United States","Buffalo","HostPapa","18.11.2025 10:21:29"]
["johnsmith0777.zapto.org",null,"104.37.172.150","United States","Carrollton","Majestic Hosting Solutions, LLC","18.11.2025 10:21:12"]
["164.132.75.23:2404",null,"164.132.75.23",null,null,null,"18.11.2025 10:05:06"]
["185.208.158.21:2404",null,"185.208.158.21","Switzerland",null,null,"18.11.2025 10:00:38"]
["candrikatravel.com/arquivo_20251118031956.txt",null,"103.160.37.195","Indonesia",null,"PT Jetorbit Teknologi Indonesia\nCorporate / Direct Member IDNIC\nJln Godean KM 4,5. Ruko Godean Permai KAV 3\nNogotirto, Gamping, Sleman, DI Yogyakarta, Indonesia","18.11.2025 10:19:13"]
["sits.inter.net.pk/SfyHmsQLeXRtjEtIQyDOG74.bin",null,"188.40.167.108","Germany",null,"HOSTSEO-LTD","18.11.2025 10:18:12"]
["dexios.co.za/SfyHmsQLeXRtjEtIQyDOG74.bin",null,"196.41.123.146","South Africa",null,"These IPs are allocated to our collocated clients.","18.11.2025 10:18:10"]
["clarune.life/plaque/XhtVGIsEZHz142.bin",null,"172.93.123.10","United States","WALNUT","Host4Geeks LLC","18.11.2025 10:17:18"]
["da.denker.gq/res/Extremes.aca",null,"185.221.216.119","United Kingdom (Great Britain)",null,null,"18.11.2025 10:17:17"]
["clarune.life/plaque/Skimmede60.pcz",null,"172.93.123.10","United States","WALNUT","Host4Geeks LLC","18.11.2025 10:16:08"]
["on-bu2.s3.cubbit.eu/remcos_raw_file_isa1mupload.txt",null,"195.154.72.140","France",null,"Scaleway","18.11.2025 11:28:12"]
["on-bu2.s3.cubbit.eu/remcos_raw_file_isa1mupload.txt",null,"51.159.87.107","France",null,null,"18.11.2025 11:28:12"]
["on-bu2.s3.cubbit.eu/remcos_raw_file_isa1mupload.txt",null,"195.154.68.69","France",null,"Scaleway","18.11.2025 11:28:12"]
["on-bu2.s3.cubbit.eu/remcos_raw_file_isa1mupload.txt",null,"51.159.84.185","France",null,null,"18.11.2025 11:28:12"]
["sits.inter.net.pk/sudernesk.emz",null,"188.40.167.108","Germany",null,"HOSTSEO-LTD","18.11.2025 10:18:12"]
["rajasas35safael6.duckdns.org",{"$nulls":5},"18.11.2025 21:02:59"]
["rajasas35safael5.duckdns.org",{"$nulls":5},"18.11.2025 21:02:57"]
["rajasas35safael4.duckdns.org",{"$nulls":5},"18.11.2025 21:02:55"]
["rajasas35safael3.duckdns.org",{"$nulls":5},"18.11.2025 21:02:53"]
["rajasas35safael2.duckdns.org",null,"104.250.169.66","United States","Houston","Secure Internet LLC","18.11.2025 21:02:50"]
["64.111.93.169:8829",null,"64.111.93.169","United States","Sheridan","BL Networks","18.11.2025 21:02:48"]
["217.76.57.196:2404",null,"217.76.57.196","Germany",null,"MNT-CONTABO","18.11.2025 19:02:35"]
["80.253.249.241:23581",null,"80.253.249.241","Germany",null,null,"18.11.2025 19:02:34"]
["77.110.98.159:3033",null,"77.110.98.159","Finland",null,null,"18.11.2025 22:01:33"]
["212.162.149.72:5000",null,"212.162.149.72","Canada",null,"mnt-ca-heymman15-1","18.11.2025 21:54:00"]

{"sheet":"Malware","index":1,"n_rows":4,"n_cols":7,"rows_kept":4,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["clarune.life/plaque/XhtVGIsEZHz142.bin","e2b6f676a11550655b13dc2e3190848c264c06b60236f1dee80be3ecd0b1e149",null,"12288:DhApD9hbdMFXzFg+n9hpDaWChRUWj1HE5pMj4:tApD98vpPChDjNapMj4","XhtVGIsEZHz142.bin","bin","18.11.2025 16:51:56"]
["da.denker.gq/res/Extremes.aca","ff48ed35a29543884dcaec145e6d5178fa043cc7e17b267575e845874a0fb594",null,"6144:+NoP1sdA3CdFO3ivgFpmKZqJJw2V4BZsRz8ZlDxL3bj5IRujBqHRZYMrYva:AoPJqNA8Ju2GBuRz8ZDbPeRujBCt","Extremes.aca",null,"18.11.2025 16:51:59"]
["clarune.life/plaque/Skimmede60.pcz","6f6102945b247a14cf3acaabb4116a8f8e0180a10bc45a421ef8f63910610639",null,"12288:9Dq5aPlUVn2mC9IvqxKba5h5Wtcm98MTnZYE0Vp:k5a2gBIIv9Wym9DZQVp","Skimmede60.pcz",null,"18.11.2025 16:52:05"]