6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135

Sharing

Copy URL Twitter E-mail

General

Target
6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135
Size 6.2MB
Sample260721-t89yca1ake
SHA256 6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135
MD5 71012878bb316e09a02cce44db6335c7
SHA1 ebf8c465694aa344d151e920dfa6fc8c4187e105
SHA512 4d2a7bfa070e9a7a385f38c21a1dbe78ab05d91f698551918db908879d8272a60bf53a9e8364c15c8c0d5854b11c1b939447446526f4e95ce92318bba0ff9c02
SSDEEP 98304:YZW89CqY4VDepIMyf5OXWz9N+knmdcvLJUj3RU:YXQJ4bnRgBU
TLSH
T10D567C207901C471E6C211B5EDBCFBFE879CA43817F655E3B3D41EEAAA601D23A31946
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135

File Explorer

6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135

.exe 6.2MB

6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135

IMPHASH 2e8d12d9821c8f3778f26d14fe7ae970
SHA256 6d39e98d7e81cc37bf3c872532da6513f24dc52f300303bb271831b93f70a135
MD5 71012878bb316e09a02cce44db6335c7
SHA1 ebf8c465694aa344d151e920dfa6fc8c4187e105
SHA512 4d2a7bfa070e9a7a385f38c21a1dbe78ab05d91f698551918db908879d8272a60bf53a9e8364c15c8c0d5854b11c1b939447446526f4e95ce92318bba0ff9c02
SSDEEP 98304:YZW89CqY4VDepIMyf5OXWz9N+knmdcvLJUj3RU:YXQJ4bnRgBU
TLSH
T10D567C207901C471E6C211B5EDBCFBFE879CA43817F655E3B3D41EEAAA601D23A31946
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3148490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\repo\dy_client_source\VSFiles\UserInterface\Release\Metin2Release.pdb

kernel32

GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc SetStdHandle CreateProcessW GetExitCodeProcess SetConsoleCtrlHandler DeleteFileW FindClose FindNextFileA FindFirstFileA SetFileAttributesA OutputDebugStringW SetThreadPriority CreateEventA InitializeCriticalSection LeaveCriticalSection ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapAlloc HeapFree GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc SetFilePointerEx GetFileSizeEx GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType ExitProcess GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RaiseException InterlockedFlushSList InterlockedPushEntrySList RtlUnwind GetThreadTimes SetLastError WaitNamedPipeW EnterCriticalSection GetModuleFileNameW GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter GetCPInfo CompareStringEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks HeapSize CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFileW CreateDirectoryExW GetModuleHandleW DeviceIoControl AreFileApisANSI GetTempPathW SetFileTime SetFileInformationByHandle SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindFirstFileW CreateFileW CreateDirectoryW SetCurrentDirectoryW GetLocaleInfoEx LocalFree QueryPerformanceFrequency GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive FormatMessageA QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock LoadLibraryA GetProcAddress FreeLibrary GetVersionExA GetSystemDirectoryA WriteFile SetFilePointer ReadFile OutputDebugStringA GetModuleHandleA DeleteCriticalSection WaitForSingleObject SetEvent Process32Next Sleep OpenProcess Process32First GetSystemInfo ReadProcessMemory GetCurrentProcess Module32Next CloseHandle Module32First GetCurrentProcessId CreateToolhelp32Snapshot HeapQueryInformation WriteConsoleW SetEndOfFile GetModuleFileNameA MoveFileA GetCurrentDirectoryA lstrlenA GetPrivateProfileStringA DeleteFileA CreateMutexA ReleaseMutex SetThreadpoolTimer GlobalFree CreateProcessA GetCurrentThreadId GetCurrentThread SetUnhandledExceptionFilter CreateFileMappingA UnmapViewOfFile MapViewOfFile GetFileSize CreateFileA GetTempFileNameA GetTempPathA RemoveDirectoryA CreateDirectoryA AllocConsole GlobalAlloc GetTickCount GetCurrentDirectoryW MultiByteToWideChar PeekNamedPipe GetLastError

user32

ScreenToClient GetCursorPos PostQuitMessage GetAsyncKeyState SetRect OffsetRect GetClientRect ClientToScreen PeekMessageA ReleaseDC FillRect GetDC EndPaint BeginPaint InvalidateRect FindWindowA LoadIconA SetWindowPos SystemParametersInfoA FlashWindowEx DestroyIcon SendMessageA GetDesktopWindow CharPrevExA CharNextExA LoadStringA GetSystemMetrics GetCapture DestroyMenu TrackPopupMenu SetForegroundWindow InsertMenuA CreatePopupMenu ShowWindow ChangeDisplaySettingsA ReleaseCapture SetCapture SetCursorPos SetCursor ShowCursor DestroyCursor LoadImageA GetKeyState DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow MoveWindow SetFocus MessageBoxA CharNextW GetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA TranslateMessage GetMessageA LoadCursorA AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu RegisterClassA SetWindowLongA GetWindowLongA UpdateWindow

gdi32

CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W SelectObject SetBkColor SetTextColor TextOutW EnumFontFamiliesExA CreateSolidBrush GetStockObject DeleteObject StretchBlt GetTextExtentPoint32A PatBlt GetPixel TextOutA CreateDIBSection SetDIBitsToDevice SetBkMode DeleteDC CreateCompatibleDC

advapi32

RegCloseKey RegQueryValueExA RegCreateKeyExW RegSetValueExW CryptAcquireContextA CryptReleaseContext CryptGenRandom RegOpenKeyExW RegOpenKeyExA RegQueryValueExW

shell32

ShellExecuteA Shell_NotifyIconA SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize CoInitializeEx OleSetContainedObject OleUninitialize OleInitialize CoGetClassObject CoCreateInstance

winmm

timeEndPeriod timeGetDevCaps timeBeginPeriod timeGetTime

d3d9

Direct3DCreate9Ex

d3dx9_43

D3DXQuaternionRotationYawPitchRoll D3DXPlaneNormalize D3DXSaveSurfaceToFileA D3DXMatrixRotationY D3DXGetFVFVertexSize D3DXCreateTextureFromFileInMemoryEx D3DXVec3Transform D3DXCreateSphere D3DXCreateCylinder D3DXCreateMatrixStack D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovRH D3DXMatrixTranspose D3DXGetImageInfoFromFileInMemory D3DXVec3Unproject D3DXMatrixRotationYawPitchRoll D3DXVec3Project D3DXMatrixScaling D3DXVec3Normalize D3DXMatrixRotationZ D3DXVec3TransformCoord D3DXMatrixTranslation D3DXMatrixMultiply D3DXQuaternionMultiply D3DXQuaternionRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixDeterminant D3DXMatrixInverse D3DXMatrixRotationX D3DXMatrixTransformation D3DXVec3TransformNormal D3DXMatrixRotationAxis D3DXVec4Transform D3DXVec2Normalize D3DXMatrixLookAtRH

python27

PyString_FromString PyList_Append PyTuple_New PyTuple_SetItem PyInt_FromLong Py_InitModule4 PyModule_AddIntConstant PyTuple_Size PyTuple_GetItem PyDict_GetItemString PyLong_AsLong PyLong_FromLongLong PyImport_AddModule PyObject_GetAttrString PyList_SetItem PyDict_New PyDict_SetItem PyDict_Size PyDict_Next PyInt_AsLong PyList_Size PyList_GetItem PyDict_Keys PyDict_Values PyLong_AsUnsignedLong PyDict_GetItem PyLong_AsLongLong PyArg_ParseTuple PyImport_ImportModule PyString_InternFromString Py_IsInitialized PyObject_GetAttr PyExc_RuntimeError PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check _Py_NoneStruct PyDict_SetItemString PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyUnicodeUCS2_DecodeUTF8 _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyErr_Occurred PyErr_SetString PyString_AsString _PyThreadState_Current Py_BuildValue PyList_New PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyCallable_Check PyExc_ValueError

wininet

InternetConnectA InternetCloseHandle HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestA HttpQueryInfoA InternetOpenA

devil

ilEnable ilBindImage ilGetInteger ilOriginFunc ilLoad ilConvertImage ilShutDown ilSave ilTexImage ilCopyPixels ilGenImages ilInit ilDeleteImages ilSetPixels

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

imagehlp

SymGetSymFromAddr SymInitialize SymGetLineFromAddr SymGetModuleBase SymGetModuleInfo SymFunctionTableAccess EnumerateLoadedModules SymCleanup SymSetOptions GetTimestampForLoadedLibrary StackWalk

granny2

_GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannySetLogCallback@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyConvertSingleObject@20 _GrannyFreeFileSection@8 _GrannyUpdateModelMatrix@20 _GrannyFindMatchingMember@16 _GrannyGetMaterialTextureByType@8 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPoseBoneCount@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyGetSourceModel@4 _GrannyFindTrackGroupForModel@12 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertexType@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshTriangleGroupCount@4 _GrannySetTrackGroupLOD@16 _GrannySetTrackGroupTarget@12 _GrannyEndControlledAnimation@4 _GrannyBeginControlledAnimation@8 _GrannyPlayControlledAnimation@12 _GrannySetControlRawLocalClock@8 _GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannyGetControlLoopCount@4 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyReadEntireFileFromMemory@8

mss32

_AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_close_3D_provider@4 _AIL_startup@0 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_mem_free_lock@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_set_file_callbacks@16 _AIL_stream_status@4 _AIL_file_read@8 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_start_sample@4

speedtreert

?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ

dinput8

DirectInput8Create

ws2_32

WSAGetLastError ntohl ntohs htons gethostname send socket gethostbyname inet_addr htonl WSACleanup WSAStartup select recv ioctlsocket connect closesocket __WSAFDIsSet

ddraw

DirectDrawCreate

dbghelp

MiniDumpWriteDump

oleaut32

SysAllocString SafeArrayCreate SafeArrayAccessData VariantInit VariantClear SysFreeString SafeArrayDestroy

discord_game_sdk

DiscordCreate

Name

.text

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

928KB

Virtual Size

927KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

164KB

Virtual Size

920KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=48, id=259, version=33145,

count=51, id=260, productName=VS2019 v16.8.4 build 29336, version=29336,

count=60, id=261, productName=VS2019 v16.8.4 build 29336, version=29336,

count=2, id=25, version=9210,

count=225, id=261, version=33145,

count=2, id=262, version=33145,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=11, id=261, version=32824,

count=2, id=257, version=27045,

count=5, id=261, version=33521,

count=60, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=2, id=253, version=35207,

count=26, id=259, version=35207,

count=18, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=101, id=261, version=35207,

count=213, id=261, version=35228,

count=1, id=260, version=35228,

count=42, id=260, version=33145,

count=33, id=257, version=33145,

count=627, id=1, productName=Unmarked objects,

count=118, id=265, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,