Xls.Dropper.Agent-9013000-0 — Office (OLE) malware analysis

Static analysis result for SHA-256 a84b64638aec6b7c…

MALICIOUS

Office (OLE)

877.5 KB Created: 2020-07-21 10:43:11 Authoring application: Microsoft Excel First seen: 2020-09-07
MD5: fa56ac621c5a849b43a718ea9b5c37fe SHA-1: 9f4e1dfeab64b0ead255ed986731a48b3def7938 SHA-256: a84b64638aec6b7c9734cb81afeb2896c6c321ffec5749b11441ff590b82aa9f
240 Risk Score

Malware Insights

Xls.Dropper.Agent-9013000-0 · confidence 95%

MITRE ATT&CK
T1059.005 Visual Basic T1566.001 Spearphishing Attachment

The file is identified as malicious by ClamAV and exhibits critical heuristics for Excel 4.0 macros, including an Auto_Open defined name and the use of dangerous formula APIs like RUN. The embedded XLM macro sheet contains an Auto_Open entry, indicating it will execute automatically upon opening. The macro sheet also contains a hardcoded URL, likely used to download and execute a second-stage payload.

Heuristics 5

  • ClamAV: Xls.Dropper.Agent-9013000-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Dropper.Agent-9013000-0
  • Excel 4.0 Auto_Open defined name critical OLE_XLM_AUTOOPEN_DEFINEDNAME
    oletools recovered an Auto_Open / Auto_Close entry from an Excel 4.0 macro sheet. The raw BIFF name can be tokenized or partially opaque to byte-string checks, but the recovered macro listing confirms the workbook has an XLM auto-execution entry.
  • XLM Auto_Open with dangerous formula APIs critical OLE_XLM_DANGEROUS_FN
    Excel 4.0 macro sheet contains an Auto_Open / Auto_Close entry and dangerous XLM formula APIs that can invoke programs, write files, or transfer control without VBA.
  • NOP sled detected high SC_NOP_SLED
    Found 20+ consecutive 0x90 bytes
    Disassembly
    Attempted x86 opcode disassembly
    000333E9  90                nop
    000333EA  90                nop
    000333EB  90                nop
    000333EC  90                nop
    000333ED  90                nop
    000333EE  90                nop
    000333EF  90                nop
    000333F0  90                nop
    000333F1  90                nop
    000333F2  90                nop
    000333F3  90                nop
    000333F4  90                nop
    000333F5  90                nop
    000333F6  90                nop
    000333F7  90                nop
    000333F8  90                nop
    000333F9  90                nop
    000333FA  90                nop
    000333FB  90                nop
    000333FC  90                nop
    000333FD  90                nop
    000333FE  90                nop
    000333FF  90                nop
    00033400  90                nop
    00033401  90                nop
    00033402  90                nop
    00033403  90                nop
    00033404  90                nop
    00033405  90                nop
    00033406  90                nop
    00033407  90                nop
    00033408  90                nop
    00033409  90                nop
    0003340A  90                nop
    0003340B  90                nop
    0003340C  90                nop
    0003340D  90                nop
    0003340E  90                nop
    0003340F  90                nop
    00033410  90                nop
    00033411  90                nop
    00033412  90                nop
    00033413  90                nop
    00033414  90                nop
    00033415  90                nop
    00033416  90                nop
    00033417  90                nop
    00033418  90                nop
    00033419  90                nop
    0003341A  90                nop
    0003341B  90                nop
    0003341C  90                nop
    0003341D  90                nop
    0003341E  90                nop
    0003341F  90                nop
    00033420  90                nop
    00033421  90                nop
    00033422  90                nop
    00033423  90                nop
    00033424  90                nop
    00033425  90                nop
    00033426  90                nop
    00033427  90                nop
    00033428  90                nop
    00033429  90                nop
    0003342A  90                nop
    0003342B  90                nop
    0003342C  90                nop
    0003342D  90                nop
    0003342E  90                nop
    0003342F  90                nop
    00033430  90                nop
    00033431  90                nop
    00033432  90                nop
    00033433  90                nop
    00033434  90                nop
    00033435  90                nop
    00033436  90                nop
    00033437  90                nop
    00033438  33b2088e0000      xor esi, dword ptr [edx + 0x8e08]
    0003343E  fff4              push esp
    00033440  49                dec ecx
    00033441  44                inc esp
    00033442  41                inc ecx
    00033443  54                push esp
    00033444  90                nop
    00033445  90                nop
    00033446  90                nop
    00033447  90                nop
    00033448  90                nop
  • Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPEN
    Workbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
xlm_macros.txt xlm-macro oletools.olevba.extract_all_macros (XLM macro listing) 26879 bytes
SHA-256: 97aebecfcc6383cbf05a9fce15a45ab658eaa690790b4c72c574008768119210
Preview script
First 1,000 lines of the extracted script
' 0085     17 BOUNDSHEET : Sheet Information - Excel 4.0 macro sheet, hidden -  cYMgXOcm
' 0085     14 BOUNDSHEET : Sheet Information - worksheet or dialog sheet, visible -  Sheet
' 0018     23 LABEL : Cell Value, String Constant - built-in-name 1 Auto_Open len=7 ptgRef3d  cYMgXOcm!GN49422 
' 0018     27 LABEL : Cell Value, String Constant - NBmOkwLsKvza len=0 
' 0018     29 LABEL : Cell Value, String Constant - OMGYVrOmrozDSn len=0 
' 0018     29 LABEL : Cell Value, String Constant - oxIDgvP len=7 ptgRef3d  cYMgXOcm!CG52890 
' 002a      2 PRINTHEADERS : Print Row/Column Labels
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 00fd     10 LABELSST : Cell Value, String Constant/ SST
' 002a      2 PRINTHEADERS : Print Row/Column Labels
' Sheet,Reference,Formula,Value
'  cYMgXOcm,CM65,"",12651.00000000000000000000
'  cYMgXOcm,CM66,"",193.00000000000000000000
'  cYMgXOcm,FL2607,"DEFINE.NAME("NBmOkwLsKvza",BA1097&CP5080&FM57688&BC29544&EC13371&B28566&GZ53664&BF9551,3,"K",TRUE,"rtOqvJToC",FALSE)",""
'  cYMgXOcm,FL2608,"DEFINE.NAME("OMGYVrOmrozDSn",JL32987,3,"p",TRUE,"bD",FALSE)",""
'  cYMgXOcm,FL2609,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,FL2610,IW27892(),""
'  cYMgXOcm,DQ5393,"",3.00000000000000000000
'  cYMgXOcm,JG9293,"DEFINE.NAME("NBmOkwLsKvza",EJ43702&DI53599&EP14972&FC9308&BV6833&GK40670&O23641&CB56188&BA54971&GR47683&BF56260&GB11356,3,"s",TRUE,"ExQzWGQW",FALSE)",""
'  cYMgXOcm,JG9294,"DEFINE.NAME("OMGYVrOmrozDSn",DP46852,3,"S",TRUE,"evKST",FALSE)",""
'  cYMgXOcm,JG9295,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,JG9296,EK18020(),""
'  cYMgXOcm,JO9823,"DEFINE.NAME("NBmOkwLsKvza",CV6300&IP5917&II19536,3,"u",TRUE,"MMijsQxb",FALSE)",""
'  cYMgXOcm,JO9824,"DEFINE.NAME("OMGYVrOmrozDSn",CR12826,3,"q",TRUE,"Xdw",FALSE)",""
'  cYMgXOcm,JO9825,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,JO9826,HR50597(),""
'  cYMgXOcm,FH12534,"DEFINE.NAME("NBmOkwLsKvza",EK54559&EP44565&BP41818&FS43496&BY37739&JN37756&GY53400&BB11167&EW22917&IQ2136&Z26080&FS16063&V57677&DG22027&FK9733&Z5578&IQ15401&HD21600&JI23273&Y24905&FU5402&IR44955&DB34440&HQ13668&JM7614&EA270&GC24945&DX48050&DR21241&IK110,3,"x",TRUE,"c",FALSE)",""
'  cYMgXOcm,FH12535,"DEFINE.NAME("OMGYVrOmrozDSn",K38527,3,"p",TRUE,"oF",FALSE)",""
'  cYMgXOcm,FH12536,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,FH12537,R38655(),""
'  cYMgXOcm,JC12634,"",2.00000000000000000000
'  cYMgXOcm,HK12651,"DEFINE.NAME("NBmOkwLsKvza",DB59611&IB21020&DO50133&EO18338&BP15061&FM35565&BL59032&V51824&IP20541&JD49935&EK11096&CG36095&BQ53547&HI36728&DO24023&O43951&CC52138&HZ17554&EL13872&P7021&ER29601&GN11130&HH49577&HB28510&GU45991&CK43559&FU17370&JA28834&GZ19736&A52937&IX5682&EB19172&BN23268&GI4380&BD9514&JI5239&BR27487&HY1706&HQ8678&HQ40181&Y47030&IO34441&EL42336&JK35925&GQ50050&S17534&FT54878&CE22211&FD22702,3,"n",TRUE,"GBp",FALSE)",""
'  cYMgXOcm,HK12652,"DEFINE.NAME("OMGYVrOmrozDSn",CB54,3,"W",TRUE,"efdiTN",FALSE)",""
'  cYMgXOcm,HK12653,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,HK12654,FH12534(),""
'  cYMgXOcm,EK18020,"DEFINE.NAME("NBmOkwLsKvza",P47228&HZ54669&I50310&L8049&EA33464&FH9404&HH20927&JI20038&DY24303&FQ53552&HI37165&CY46688,3,"M",TRUE,"k",FALSE)",""
'  cYMgXOcm,EK18021,"DEFINE.NAME("OMGYVrOmrozDSn",DM24389,3,"e",TRUE,"IKqwQYOto",FALSE)",""
'  cYMgXOcm,EK18022,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,EK18023,FA40903(),""
'  cYMgXOcm,DK18704,"",3.00000000000000000000
'  cYMgXOcm,IO19001,"DEFINE.NAME("NBmOkwLsKvza",HE34349&HH59&BY54077&HA40944,3,"J",TRUE,"WvvXfr",FALSE)",""
'  cYMgXOcm,IO19002,"DEFINE.NAME("OMGYVrOmrozDSn",P34155,3,"U",TRUE,"nTqJi",FALSE)",""
'  cYMgXOcm,IO19003,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,IO19004,JG9293(),""
'  cYMgXOcm,DS19409,"DEFINE.NAME("NBmOkwLsKvza",CW55931&ER46886&DC50077&EQ51978&GI53260&M45180,3,"Z",TRUE,"MmJIkRiV",FALSE)",""
'  cYMgXOcm,DS19410,"DEFINE.NAME("OMGYVrOmrozDSn",HK34364,3,"Z",TRUE,"yZk",FALSE)",""
'  cYMgXOcm,DS19411,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,DS19412,GF26951(),""
'  cYMgXOcm,JI20038,"",2.00000000000000000000
'  cYMgXOcm,HH20927,"",3.00000000000000000000
'  cYMgXOcm,O23641,"",3.00000000000000000000
'  cYMgXOcm,BZ24194,"DEFINE.NAME("NBmOkwLsKvza",BT55013&FH1809&HA56123&GW28542&GB20653&DU29843&ED30512&CK19546&BD27660&FX48726&DR5199&IX44219&CK36021,3,"P",TRUE,"Pe",FALSE)",""
'  cYMgXOcm,BZ24195,"DEFINE.NAME("OMGYVrOmrozDSn",EZ576,3,"i",TRUE,"lcC",FALSE)",""
'  cYMgXOcm,BZ24196,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,BZ24197,CL28401(),""
'  cYMgXOcm,J25112,"",2.00000000000000000000
'  cYMgXOcm,JK26486,"DEFINE.NAME("NBmOkwLsKvza",FV58527&IW895&I19407&DW5552&FI57899&IP12282&CA22639&BQ29606&EU37874&GE6370&G10188&IA55717,3,"x",TRUE,"bDnEIK",FALSE)",""
'  cYMgXOcm,JK26487,"DEFINE.NAME("OMGYVrOmrozDSn",C50241,3,"F",TRUE,"eHmWS",FALSE)",""
'  cYMgXOcm,JK26488,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,JK26489,DB45349(),""
'  cYMgXOcm,GF26951,"DEFINE.NAME("NBmOkwLsKvza",CK23821&F43709&DZ41585&HK49895&BZ34389&GL10930&IL47426&DU457&FB9706&H50155&EE6175&FG21648&JO49175&IN9738&BJ20317&FU28884&DO30079&GX50940,3,"R",TRUE,"jgEZxpm",FALSE)",""
'  cYMgXOcm,GF26952,"DEFINE.NAME("OMGYVrOmrozDSn",HD52612,3,"x",TRUE,"PdymvUO",FALSE)",""
'  cYMgXOcm,GF26953,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,GF26954,CP30686(),""
'  cYMgXOcm,IW27892,"DEFINE.NAME("NBmOkwLsKvza",B47575&CA8457&DG50350&JO30984&DF12801&HL3412&HG24894&Z4336,3,"v",TRUE,"HB",FALSE)",""
'  cYMgXOcm,IW27893,"DEFINE.NAME("OMGYVrOmrozDSn",EN2930,3,"T",TRUE,"Q",FALSE)",""
'  cYMgXOcm,IW27894,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,IW27895,"IF(GN49423(),,)",""
'  cYMgXOcm,CL28401,"DEFINE.NAME("NBmOkwLsKvza",FT2646&GO22894&DL1688&GZ34017&BC53471&FO41704&T48235,3,"x",TRUE,"qaI",FALSE)",""
'  cYMgXOcm,CL28402,"DEFINE.NAME("OMGYVrOmrozDSn",DL6498,3,"L",TRUE,"fIMaW",FALSE)",""
'  cYMgXOcm,CL28403,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,CL28404,IO19001(),""
'  cYMgXOcm,FH30503,"DEFINE.NAME("NBmOkwLsKvza",IJ31774&DD14864&GS43266&JN22754&FV55683&JK37116&DK18704&JC12634,3,"L",TRUE,"ZjSSFGg",FALSE)",""
'  cYMgXOcm,FH30504,"DEFINE.NAME("OMGYVrOmrozDSn",IZ37782,3,"p",TRUE,"CexcBTeT",FALSE)",""
'  cYMgXOcm,FH30505,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,FH30506,CE53239(),""
'  cYMgXOcm,CP30686,"DEFINE.NAME("NBmOkwLsKvza",CI22135&FG34915&BY24162&IS59060&GK59425&IT30197,3,"y",TRUE,"B",FALSE)",""
'  cYMgXOcm,CP30687,"DEFINE.NAME("OMGYVrOmrozDSn",EX55123,3,"g",TRUE,"BGOE",FALSE)",""
'  cYMgXOcm,CP30688,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,CP30689,HS37705(),""
'  cYMgXOcm,HS37705,"DEFINE.NAME("NBmOkwLsKvza",FQ999&EE28071&HJ3255&HQ37490&DQ10152&DQ5393&J25112,3,"Q",TRUE,"ZZ",FALSE)",""
'  cYMgXOcm,HS37706,"DEFINE.NAME("OMGYVrOmrozDSn",G15744,3,"Y",TRUE,"dBHOs",FALSE)",""
'  cYMgXOcm,HS37707,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,HS37708,BZ24194(),""
'  cYMgXOcm,R38655,"DEFINE.NAME("NBmOkwLsKvza",FQ29915&EB23975&GK17246&BC40922&BP14516&IC7105&CJ19765&EI9446&CB8573&FR45933&EX54896&BD18635&IS4118&EN13612&HL43032&FI16158&HQ53563&CL58601&HB9416&FX44969&ED3162&CW8688&EQ8030&IF42961&CN49547&GZ22613&GI22779&EO47010&GJ14123&EF2017,3,"C",TRUE,"FwVkdNuxS",FALSE)",""
'  cYMgXOcm,R38656,"DEFINE.NAME("OMGYVrOmrozDSn",ES19957,3,"u",TRUE,"yNXsG",FALSE)",""
'  cYMgXOcm,R38657,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,R38658,DS19409(),""
'  cYMgXOcm,EA39122,"DEFINE.NAME("NBmOkwLsKvza",FK28474&CY49315&BH11953&DP33385&P25829&L7227&HU17198&EN23392,3,"z",TRUE,"uYnGatnd",FALSE)",""
'  cYMgXOcm,EA39123,"DEFINE.NAME("OMGYVrOmrozDSn",GA12878,3,"J",TRUE,"STRWHzHly",FALSE)",""
'  cYMgXOcm,EA39124,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,EA39125,FL2607(),""
'  cYMgXOcm,FA40903,"DEFINE.NAME("NBmOkwLsKvza",CG20957&BL51430&IH50410&GY28620&JH48180&DT13169&K58081&IJ25119&EJ21746&DU36819,3,"v",TRUE,"tyk",FALSE)",""
'  cYMgXOcm,FA40904,"DEFINE.NAME("OMGYVrOmrozDSn",EA55400,3,"q",TRUE,"xPpoF",FALSE)",""
'  cYMgXOcm,FA40905,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,FA40906,BQ44834(),""
'  cYMgXOcm,IV44717,"DEFINE.NAME("NBmOkwLsKvza",W54115&IG19863&DL19925&X23709&GP45783&IB44981&CS25124&EY13529,3,"z",TRUE,"wq",FALSE)",""
'  cYMgXOcm,IV44718,"DEFINE.NAME("OMGYVrOmrozDSn",DI10645,3,"J",TRUE,"GdyX",FALSE)",""
'  cYMgXOcm,IV44719,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,IV44720,EA39122(),""
'  cYMgXOcm,BQ44834,"DEFINE.NAME("NBmOkwLsKvza",HK49813&EE39379&JE43868&HV31642&JG40670&F54865&DX56281&GR36766&EM28938&GK9146&FV20428&P6774&CT45015&HM7265&BN6652&HA12011&BG29173&DU36256,3,"h",TRUE,"kcB",FALSE)",""
'  cYMgXOcm,BQ44835,"DEFINE.NAME("OMGYVrOmrozDSn",CY11581,3,"e",TRUE,"JHodxo",FALSE)",""
'  cYMgXOcm,BQ44836,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,BQ44837,FH30503(),""
'  cYMgXOcm,DB45349,"DEFINE.NAME("NBmOkwLsKvza",T6183&HS52948&BM16492&FR25165,3,"K",TRUE,"eULZjSS",FALSE)",""
'  cYMgXOcm,DB45350,"DEFINE.NAME("OMGYVrOmrozDSn",JB3782,3,"F",TRUE,"rT",FALSE)",""
'  cYMgXOcm,DB45351,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,DB45352,IV44717(),""
'  cYMgXOcm,GN49422,"IF(HK12651(),,)",""
'  cYMgXOcm,GN49423,"IF(CALL(IZ37782,BW31553,CR12826,EA55400,0),,)",""
'  cYMgXOcm,GN49424,"IF(CALL(IZ37782,BW31553,CR12826,CY11581,0),,)",""
'  cYMgXOcm,GN49426,"IF(CALL(HK34364,HD52612,EX55123,0,CB54,ES19957,0,0),,)",""
'  cYMgXOcm,GN49428,IF(GN49427<>0),""
'  cYMgXOcm,GN49429,"IF(CALL(BJ34125,C50241,JB3782,CB54,ES19957,1),,)",""
'  cYMgXOcm,GN49431,*STACKERROR* not enough arguments for function: END.IF,""
'  cYMgXOcm,GN49433,"IF(CALL(G15744,EZ576,DL6498,0,P34155,K38527,,0,0),,)",""
'  cYMgXOcm,GN49436,HALT(),""
'  cYMgXOcm,HR50597,"DEFINE.NAME("NBmOkwLsKvza",FD10802&IZ58307&BL48355&EW54318&DB47569&JH53327,3,"L",TRUE,"Bgbc",FALSE)",""
'  cYMgXOcm,HR50598,"DEFINE.NAME("OMGYVrOmrozDSn",BJ34125,3,"a",TRUE,"fQK",FALSE)",""
'  cYMgXOcm,HR50599,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,HR50600,JK26486(),""
'  cYMgXOcm,CG52890,OMGYVrOmrozDSn,""
'  cYMgXOcm,CE53239,"DEFINE.NAME("NBmOkwLsKvza",HU29022&DN24517&CK953&FP14651&FG56381&IO578&HK18090&HX53719&M15210&GE30335&BB37702&ED41319&IP26199&JL3356&BQ31746&FO15163,3,"D",TRUE,"wPMjT",FALSE)",""
'  cYMgXOcm,CE53240,"DEFINE.NAME("OMGYVrOmrozDSn",BW31553,3,"d",TRUE,"jf",FALSE)",""
'  cYMgXOcm,CE53241,"IF(oxIDgvP(),,)",""
'  cYMgXOcm,CE53242,JO9823(),""
'  cYMgXOcm,CB56188,"",2.00000000000000000000