I see. Since I have no clue about SCPI programming, I will not further investigate.
But I managed to perform the BW hack. The mainboard of my scope has minor differences, but after removing the four caps, it seems that I can measure up to 300 MHz. I do not have a signal generator which is capable of providing such a high frequency. Hence I used my SSA 3021X TG and set the output to 0 dBm. For low frequencys the scope measures 1 Vpp. At 300 MHz configured at TG it still has a reliable reading of 300 MHz and 0.9 Vpp. I tried to increase the frequency, but it becomes unreliable beyond 320 MHz. At 400 MHz Nyquist comes in and the scope shows 332 MHz...
For those who are interested in photos, I attached some here.
Thanks to everybody who contributed to the BW hack and the modified FW.
Best regards
Andreas