{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":32,"n_cols":7,"rows_kept":32,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["trustconnectsoftware.com",null,"185.182.187.10","Germany",null,"Contabo GmbH","19.02.2026 14:40:25"]
["networkservice.cyou",null,"2606:4700:3032::ac43:a954",null,null,null,"19.02.2026 14:40:25"]
["networkservice.cyou",null,"104.21.87.96","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["networkservice.cyou",null,"172.67.169.84","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["networkservice.cyou",null,"2606:4700:3032::6815:5760",null,null,null,"19.02.2026 14:40:25"]
["worldwide-www19.pages.dev",null,"2606:4700:310c::ac42:2f76",null,null,null,"19.02.2026 14:40:25"]
["worldwide-www19.pages.dev",null,"172.66.47.118","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["worldwide-www19.pages.dev",null,"172.66.44.138","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["worldwide-www19.pages.dev",null,"2606:4700:310c::ac42:2c8a",null,null,null,"19.02.2026 14:40:25"]
["adobe.caladzy.com",null,"193.233.112.90","Finland",null,null,"19.02.2026 14:40:25"]
["vurul.click",null,"2606:4700:3032::ac43:b2f3",null,null,null,"19.02.2026 14:40:25"]
["vurul.click",null,"2606:4700:3034::6815:11fb",null,null,null,"19.02.2026 14:40:25"]
["vurul.click",null,"172.67.178.243","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["vurul.click",null,"104.21.17.251","United States","San Francisco","Cloudflare, Inc.","19.02.2026 14:40:25"]
["stewise.top",null,"176.123.7.144","Moldova, Republic of",null,null,"19.02.2026 14:40:25"]
["statementstview.online",{"$nulls":5},"19.02.2026 14:40:25"]
["smallmartdirectintense.com",null,"194.15.36.109","Germany",null,"Datalix","19.02.2026 14:40:25"]
["memphiswawu.com",null,"124.198.132.55","United States",null,null,"19.02.2026 14:40:25"]
["elev8souvenirs.com",null,"91.204.209.33","United Kingdom (Great Britain)",null,null,"19.02.2026 14:40:25"]
["ametax.net",{"$nulls":5},"19.02.2026 14:40:25"]
["aerobickarlaurbanovas.top",null,"172.86.127.159","United States","Cheyenne","FranTech Solutions","19.02.2026 14:40:25"]
["trustconnectsoftware.com/downloads/brands/organization_name/MsTeams.exe",null,"185.182.187.10","Germany",null,"Contabo GmbH","19.02.2026 14:40:25"]
["stewise.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",null,"176.123.7.144","Moldova, Republic of",null,null,"19.02.2026 14:40:25"]
["smallmartdirectintense.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest=",null,"194.15.36.109","Germany",null,"Datalix","19.02.2026 14:40:25"]
["memphiswawu.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",null,"124.198.132.55","United States",null,null,"19.02.2026 14:40:25"]
["aerobickarlaurbanovas.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest=",null,"172.86.127.159","United States","Cheyenne","FranTech Solutions","19.02.2026 14:40:25"]
["192.227.211.41:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",null,"192.227.211.41","United States","Buffalo","HostPapa","19.02.2026 14:40:25"]
["192.159.99.83/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest",null,"192.159.99.83","United States",null,null,"19.02.2026 14:40:25"]
[null,null,"178.128.69.245","United States",null,null,"19.02.2026 14:40:25"]
[null,null,"192.227.211.41","United States","Buffalo","HostPapa","19.02.2026 14:40:25"]
[null,null,"192.159.99.83","United States",null,null,"19.02.2026 14:40:25"]

{"sheet":"Malware","index":1,"n_rows":1,"n_cols":7,"rows_kept":1,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]