{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":50,"n_cols":7,"rows_kept":50,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["49.12.116.30:443",null,"49.12.116.30","Germany",null,null,"10.12.2025 11:19:09"]
["hto.ejmali.store",{"$nulls":5},"10.12.2025 11:18:50"]
["95.217.26.38:443",null,"95.217.26.38","Finland",null,null,"10.12.2025 11:19:09"]
["hto.demisemarzban.top",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 11:18:50"]
["hto.demisemarzban.top",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 11:18:50"]
["hto.ejmali.store/",{"$nulls":5},"10.12.2025 11:18:36"]
["95.217.26.38/",null,"95.217.26.38","Finland",null,null,"10.12.2025 11:18:36"]
["hto.demisemarzban.top/",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 11:18:35"]
["hto.demisemarzban.top/",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 11:18:35"]
["178.16.55.189/files/8035438604/N6ezi92.exe",null,"178.16.55.189","United States",null,"METASPINNERNET","10.12.2025 15:47:11"]
["178.16.55.189/files/1103877553/fn1YaZS.exe",null,"178.16.55.189","United States",null,"METASPINNERNET","10.12.2025 15:34:07"]
["tom.demisemarzban.top",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 16:13:08"]
["tom.demisemarzban.top",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 16:13:08"]
["tom.demisemarzban.top/",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 16:12:52"]
["tom.demisemarzban.top/",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 16:12:52"]
["tom.firsttech-llc.com/",null,"5.75.222.111","Germany",null,null,"10.12.2025 16:12:52"]
["jer.firsttech-llc.com",null,"5.75.222.111","Germany",null,null,"10.12.2025 20:06:04"]
["tom.firsttech-llc.com",null,"5.75.222.111","Germany",null,null,"10.12.2025 15:54:08"]
["5.75.222.111:443",null,"5.75.222.111","Germany",null,null,"10.12.2025 15:54:08"]
["5.161.31.61",null,"5.161.31.61","United States",null,null,"10.12.2025 15:50:26"]
["jer.demisemarzban.top",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 20:06:04"]
["jer.demisemarzban.top",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 20:06:04"]
["jer.demisemarzban.top/",null,"172.67.171.211","United States","San Francisco","Cloudflare, Inc.","10.12.2025 20:05:52"]
["jer.demisemarzban.top/",null,"104.21.39.232","United States","San Francisco","Cloudflare, Inc.","10.12.2025 20:05:52"]
["jer.firsttech-llc.com/",null,"5.75.222.111","Germany",null,null,"10.12.2025 20:05:52"]
["github.com/kk3LL/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:59:06"]
["github.com/cann1ere/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:58:06"]
["github.com/scaL3X/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:55:11"]
["github.com/amm1eld/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:55:08"]
["github.com/emm1ls/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:54:06"]
["github.com/clerrs/FortniteSpoofer/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:54:06"]
["github.com/callstheor/FortniteSpoofer/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:53:24"]
["github.com/colleshake/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:52:07"]
["github.com/arcellys/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:51:09"]
["github.com/n1elcery/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:51:07"]
["github.com/uffelth/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:50:08"]
["github.com/h0nneyl/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:41:07"]
["github.com/recctan1o/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:41:05"]
["github.com/kesslyy27/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:38:23"]
["github.com/calldur/FortniteSpoofer/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:38:06"]
["github.com/n01liey/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:34:06"]
["github.com/clarrs/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:31:07"]
["github.com/rawwyh/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:24:08"]
["github.com/ssten1/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:20:10"]
["github.com/tgak1s/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.4","United States","San Francisco","GitHub, Inc.","10.12.2025 23:18:06"]
["github.com/carleends/FortniteSpoofer/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.3","United States","San Francisco","GitHub, Inc.","10.12.2025 22:43:07"]
["github.com/ddan1s/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe",null,"140.82.121.3","United States","San Francisco","GitHub, Inc.","10.12.2025 22:43:06"]
["github.com/ccer1l/Monotone-HWID-Spoofer/raw/refs/heads/main/Monotone.exe",null,"140.82.121.3","United States","San Francisco","GitHub, Inc.","10.12.2025 21:16:16"]
["github.com/emmaflys/Temp-Spoofer-LifeTime/raw/refs/heads/main/TempSpoofer.exe",null,"140.82.121.3","United States","San Francisco","GitHub, Inc.","10.12.2025 21:15:07"]

{"sheet":"Malware","index":1,"n_rows":2,"n_cols":7,"rows_kept":2,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["178.16.55.189/files/8035438604/N6ezi92.exe","6fa1b950d439825f8ef1b1a9e9b5cb5ba81a09fd1bd598af2b1a5b174e1dad77","f73c6a7c47053d807256877f079ae0ff","49152:2Mi0kzACpTDYjUpXU1L7mT579QE1ZZMpPop:xi3UCpgjh1Lsx5Me","N6ezi92.exe","exe","10.12.2025 20:45:47"]