{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["URLs & IP","Malware"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"URLs & IP","index":0,"n_rows":38,"n_cols":7,"rows_kept":38,"cut":false,"hidden":false,"merged":[]}
["url","registrator","ip","country","city","provider","datetime"]
["147.185.221.30:43956",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 03:50:20"]
["147.93.177.187:45500",null,"147.93.177.187","Germany",null,"Contabo GmbH","31.07.2025 02:10:20"]
["193.161.193.99:53471",null,"193.161.193.99","Russian Federation","Saint Petersburg",null,"31.07.2025 05:10:21"]
["147.185.221.30:35600",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 04:50:24"]
["45.148.18.44:57489",null,"45.148.18.44",null,null,null,"31.07.2025 10:45:28"]
["notes-creates.gl.at.ply.gg",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 09:00:21"]
["notes-creates.gl.at.ply.gg",null,"2602:fbaf:85c:1::1e",null,null,null,"31.07.2025 09:00:21"]
["WindowsManager-53471.portmap.host",null,"193.161.193.99","Russian Federation","Saint Petersburg",null,"31.07.2025 09:00:20"]
["5.141.88.140:7565",null,"5.141.88.140","Russian Federation",null,null,"31.07.2025 09:00:20"]
["svhost56.duckdns.org",null,"147.93.177.187","Germany",null,"Contabo GmbH","31.07.2025 09:00:19"]
["numbers-sally.gl.at.ply.gg",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 08:42:59"]
["numbers-sally.gl.at.ply.gg",null,"2602:fbaf:85c:1::1e",null,null,null,"31.07.2025 08:42:59"]
["suezax50.ddns.net",null,"35.247.211.6","United States","Mountain View","Google LLC","31.07.2025 08:42:59"]
["third-threaded.gl.at.ply.gg",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 08:42:59"]
["third-threaded.gl.at.ply.gg",null,"2602:fbaf:85c:1::1e",null,null,null,"31.07.2025 08:42:59"]
["109.195.166.184:7777",null,"109.195.166.184","Russian Federation",null,"CJSC \"ER-Telecom Holding\" Ryazan' branch\nRyazan', Russia\nMain network","31.07.2025 13:20:24"]
["89.40.31.59:1111",null,"89.40.31.59","Canada",null,"-----BEGIN TOKEN-----e61c1bd0bb449a2e23f0e99ab958abbfb033f5ed2978253e4d5dd960a79d11fbb8df539253ad3137e1a1a630e6c0839c6e27b1f741e9be79f001a8e12fbe839d-----END TOKEN-----","31.07.2025 12:05:25"]
["31.13.190.2:26842",null,"31.13.190.2","Germany",null,"M247 LTD Frankfurt Infrastructure","31.07.2025 12:00:43"]
["155.94.155.42:6000",null,"155.94.155.42","United States","Buffalo","HostPapa","31.07.2025 11:25:21"]
["WhiteShadow1-47388.portmap.host",null,"193.161.193.99","Russian Federation","Saint Petersburg",null,"31.07.2025 15:00:25"]
["LaserJet-32220.portmap.host",null,"193.161.193.99","Russian Federation","Saint Petersburg",null,"31.07.2025 15:00:25"]
["xwormblast6.duckdns.org",null,"89.40.31.59","Canada",null,"-----BEGIN TOKEN-----e61c1bd0bb449a2e23f0e99ab958abbfb033f5ed2978253e4d5dd960a79d11fbb8df539253ad3137e1a1a630e6c0839c6e27b1f741e9be79f001a8e12fbe839d-----END TOKEN-----","31.07.2025 15:00:24"]
["multi-designing.gl.at.ply.gg",null,"147.185.221.24","United States","Carson City","Developed Methods LLC","31.07.2025 15:00:24"]
["multi-designing.gl.at.ply.gg",null,"2602:fbaf:85c:1::18",null,null,null,"31.07.2025 15:00:24"]
["94.19.26.210:5000",null,"94.19.26.210","Russian Federation",null,null,"31.07.2025 15:00:24"]
["privatedns.jiahouse.com",null,"31.13.190.2","Germany",null,"M247 LTD Frankfurt Infrastructure","31.07.2025 15:00:24"]
["qwerty1223.ddns.net",null,"109.195.166.184","Russian Federation",null,"CJSC \"ER-Telecom Holding\" Ryazan' branch\nRyazan', Russia\nMain network","31.07.2025 15:00:23"]
["structure-nov.gl.at.ply.gg",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 21:00:24"]
["structure-nov.gl.at.ply.gg",null,"2602:fbaf:85c:1::1e",null,null,null,"31.07.2025 21:00:24"]
["lower-sam.gl.at.ply.gg",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 21:00:24"]
["lower-sam.gl.at.ply.gg",null,"2602:fbaf:85c:1::1e",null,null,null,"31.07.2025 21:00:24"]
["anything-desired.gl.at.ply.gg",null,"147.185.221.23","United States","Carson City","Developed Methods LLC","31.07.2025 21:00:24"]
["anything-desired.gl.at.ply.gg",null,"2602:fbaf:85c:1::17",null,null,null,"31.07.2025 21:00:24"]
["147.185.221.30:44183",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 20:50:27"]
["147.185.221.30:44132",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 19:15:27"]
["147.185.221.30:4444",null,"147.185.221.30","United States","Carson City","Developed Methods LLC","31.07.2025 23:20:22"]
["4.tcp.eu.ngrok.io:10992",{"$nulls":5},"31.07.2025 12:06:24"]

{"sheet":"Malware","index":1,"n_rows":2,"n_cols":7,"rows_kept":2,"cut":false,"hidden":false,"merged":[]}
["url","sha256","imphash","ssdeep","name","extension","datetime"]
["6mzdf1z0w.localto.net","3e0c2ecf512c2239ee33ce3cf11d019bd190a49058bbb12b9cfcd01ff404acc8",null,"48:ThbOQc12O5B8FFqm5qw2jL2RO1oET5LBQI+Iw7tb:Tx2CgL2RgVHQpIwxb","6mzdf1z0w.localto.net",null,"31.07.2025 16:29:53"]