a8f5fb2f8f9d470d839a66f97fac8993_JaffaCakes118
- SHA256 5677454eb78a84614f74908647124a2694f72a39c557b5c51a48cdafff4a224f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
[RHX]-GameLauncher.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
[RHX]-GameLauncher.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
[RHX]-Launcher.exe
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
[RHX]-Launcher.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
[RHX]-RestoreGame.exe
Resource
win7-20240611-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
[RHX]-RestoreGame.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral7
Sample
ogg.dll
Resource
win7-20240508-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral8
Sample
ogg.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target a8f5fb2f8f9d470d839a66f97fac8993_JaffaCakes118
- Size 8.1MB
- Sample240614-lebvfsvanc
- SHA256 5677454eb78a84614f74908647124a2694f72a39c557b5c51a48cdafff4a224f
- MD5 a8f5fb2f8f9d470d839a66f97fac8993
- SHA1 cb85c2d2bffd00d6efc2fa7c3348623be90af2dc
- SHA512 3758b428f7f4acf472c73b631338b9e0fc65c3c41f0804f404a666e5fa450555e631cc1db70bf8a500324550866af24c68ea9148a5b2b541dc3d0037fccc85db
- SSDEEP 196608:D07P0CcJMIL5EAH/RL/NOk6YN9VF887iV+:D07PsLL/RROkVp
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/[RHX]-GameLauncher.exe unpack001/[RHX]-Launcher.exe unpack001/ogg.dll
File Explorer
-
a8f5fb2f8f9d470d839a66f97fac8993_JaffaCakes118.rar 8.1MB
-
[RHX]-GameLauncher.exe.exe 2.9MB
-
[RHX]-Launcher.exe.exe 2.9MB
-
[RHX]-RestoreGame.exe.exe 1.5MB
-
ogg.dll.dll 1.4MB
[RHX]-GameLauncher.exe
- SHA256 cd99a001384d80999040cd6e6f56f4d506af42843f26ac1062ac4a33c7ab6a85
- MD5 d5ce668ca41496b7ff00f39dcc489c35
- SHA1 c9d2f0d35a72c83ec33a9c8a6efb78b6953f3a63
- SHA512 d6779ee68d0074a7caa52951112763a37488fe7c065f44ed123b704462dc278a4cb452a7a3b28f6793c2189f444caa6495c62075d4925c95bcc0b9deff5913c7
- SSDEEP 49152:7hLoucnBY4NztPXhLwnir9o5L2Q7iBjGyW5X3I0pcU/Po7xorpDgUM:7JcnBNNzLwir9o56FeX3I06vNupDgUM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
326578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
597KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
67KB
Virtual Size
296KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
8KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
224KB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
49KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
738KB
Virtual Size
740KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
166KB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=152, version=20115,
count=13, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=158, productName=VS2010 build 30319, version=30319,
count=206, id=170, productName=VS2010 build 30319, version=30319,
count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=847, id=1, productName=Unmarked objects,
count=443, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
[RHX]-Launcher.exe
- SHA256 f08cbecf30b70fab86cdd6b4b79bdd653c0fdf519903bb2fd3b9b83661b0e97d
- MD5 129f64c2487d5106d849cf5cce741840
- SHA1 3194ed8cd3a5b83b192da0da2e74fcd7bd82a918
- SHA512 16db7840809188edcdbd31fd0db274a7754ad48648fd3ad47594b26fb69806ddb0d5c66dba1fd3797c59e7e0de031db18a3f65aabac75aa6212e3dc5aa8c84f7
- SSDEEP 49152:9bd2aVNHYGv/RtQMeQXJHRvIV4DTmuLmIo+JrCAfufAlxKIBmA/4vxW2pyfM2TuY:tdB6wHbJHWV4DTmuaIo+Jru4K5s4ZWqs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
1105865
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
??0CLog@@QAE@ABV0@@Z
??0CLog@@QAE@XZ
??1CLog@@UAE@XZ
??4CLog@@QAEAAV0@ABV0@@Z
??_7CLog@@6B@
?CloseAndRelease@CLog@@QAEXXZ
?CloseLog@CLog@@QAEXXZ
?DebugLog@CLog@@QAAXHPADH0ZZ
?DebugMBox@@YAXPADHPAUHWND__@@0ZZ
?LOG@@3VCLog@@A
?MBox@@YAXPAUHWND__@@PAD1ZZ
?OpenLog@CLog@@QAEXHPBD_N@Z
?PrintConsoleLog@CLog@@QAAXHPADZZ
?PrintLog@CLog@@QAAXHPADZZ
?PrintNoEnterLog@CLog@@QAAXHPADZZ
?PrintTimeAndLog@CLog@@QAAXHPADZZ
?WriteReadyFolderAndFiles@CLog@@IAEXPBD@Z
Name
Size
1.1MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
176KB
Virtual Size
700KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
11KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
302KB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
90KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
166KB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=152, version=20115,
count=16, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=17, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=46, id=158, productName=VS2010 build 30319, version=30319,
count=229, id=170, productName=VS2010 build 30319, version=30319,
count=870, id=1, productName=Unmarked objects,
count=43, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=497, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
[RHX]-RestoreGame.exe
- IMPHASH 27c70d9664257c3f87ffcb37c3dd0784
- SHA256 deeff150444eef7f9d07168e959fe77ad2d03bf31e0e7699b198d4718001828c
- MD5 ff6fa58f762c467ddae949b9d1ea2186
- SHA1 7229c9b6e7e9b4d1d0b9a1524478d19b1f033582
- SHA512 ec05047e7b5181010b5945f4e55c39f45ca5d0918db2a62f909dfab63572d46aa098565e51f2e48e55adb343b6bd253d156ebce64bba9ecd5df80bfa812fd2cd
- SSDEEP 24576:yT9RLkaS6kZjZV8Hc+BKIlep1j/WEtIdgYKkOf+HPZiPofoaBBXhS2Ll5V5blhF:udtSda3xSBZtafT4PogOhTXV5l
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Serial Number
34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 17, 2006 - Jul 16, 2036
Subject
CN=Wemade Entertainment co.\,Ltd,OU=IT Team,O=Wemade Entertainment co.\,Ltd,L=Guro-gu,ST=SEOUL,C=KR
Serial Number
47:84:fb:9c:d3:d0:9b:c7:12:cf:c2:fe:7d:13:cf:7b
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jan 22, 2013 - Nov 21, 2013
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
1
Major OS version
5
Entry point
760275
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcpy
ExitProcess
avifil32
DllGetClassObject
Name
.text
Size
738KB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
145KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
868KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
678KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=152, version=20115,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=158, productName=VS2010 build 30319, version=30319,
count=206, id=170, productName=VS2010 build 30319, version=30319,
count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=847, id=1, productName=Unmarked objects,
count=440, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
ogg.dll
- SHA256 1fe79275e1f2c0f8727d6a06b4f1ee4f6c6297d2b13df59232d45c1c8f38ae64
- MD5 c2d17ce369705c09eb1df4f1ba1fc71b
- SHA1 bdbdd632f97df57e07933a7a788c50286c14567e
- SHA512 87c3ad03c1ba9954775c47bb1386725db8d16ecd94de457d9034179c90de772dce2040c64ed66e9eb97d683a7086d7aef96a5bfdc669e4136beee552295dacb8
- SSDEEP 24576:dI9vXhPu+/akwaBOkGEdm2AWE5nKxpXz/jn6JTT5ld0SrU:dIZX8aVntE5Kxhrn61/d0SA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
4516724
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_check
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_flush_fill
ogg_stream_init
ogg_stream_iovecin
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_pageout_fill
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_check
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writecheck
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writecheck
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc
Name
Size
119KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
23KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
166KB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=152, version=20115,
count=6, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, version=2067,
count=6, id=18, version=8444,
count=122, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=6, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=17, id=123, productName=VS2005 build 50727, version=50727,
count=315, id=1, productName=Unmarked objects,
count=11, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,