e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b

Sharing

Copy URL Twitter E-mail

General

Target
e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b
Size 2.3MB
Sample261102-e3mhjag17l
SHA256 e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b
MD5 5002881c211ec4b7bf23c3011f61d55b
SHA1 d118f9526aec7ebe4601e4ac1dc361fd560bda6a
SHA512 4677e1a0ae04abb7e1265f80efc8f22a18fa8d0d60ffa52dd999026445bb06b931f2b8e8ddbad2afdb79049481410dba410b58382314b1d851bfc7b9c756b857
SSDEEP 49152:/hOzu+m57u9G/mKVSdKgHUaZ0/PPRYjpUDSoe2VK:wmw9G/bVSyaAPRcUeoeA
TLSH
T168B5AF207B84C236D6A305B0E87EAA5E501DAD610B6645C7E3C53F1E9C73ED22E3365B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b

File Explorer

e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b

.exe 2.3MB

e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b

IMPHASH 369128f348ba882deb36ca7ccdb05537
SHA256 e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b
MD5 5002881c211ec4b7bf23c3011f61d55b
SHA1 d118f9526aec7ebe4601e4ac1dc361fd560bda6a
SHA512 4677e1a0ae04abb7e1265f80efc8f22a18fa8d0d60ffa52dd999026445bb06b931f2b8e8ddbad2afdb79049481410dba410b58382314b1d851bfc7b9c756b857
SSDEEP 49152:/hOzu+m57u9G/mKVSdKgHUaZ0/PPRYjpUDSoe2VK:wmw9G/bVSyaAPRcUeoeA
TLSH
T168B5AF207B84C236D6A305B0E87EAA5E501DAD610B6645C7E3C53F1E9C73ED22E3365B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1004455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\build\trunk_en_multi\simulator\bin\dnmultiplayerex.pdb

cximagecrt

?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z ?AlphaCopy@CxImage@@QAE_NAAV1@@Z ?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z ?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z ?GetHeight@CxImage@@QBEIXZ ?GetWidth@CxImage@@QBEIXZ ??0CxImage@@QAE@I@Z

libcurl

curl_easy_cleanup curl_global_init curl_global_cleanup curl_easy_init curl_easy_setopt curl_easy_strerror curl_easy_perform curl_slist_append

kernel32

TerminateProcess GlobalUnlock TerminateThread ExitProcess FreeResource LoadResource LockResource SizeofResource FindResourceW MulDiv QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent DecodePointer EncodePointer GlobalLock CreateMutexW CreateThread GlobalAlloc GlobalFree GetVersionExW WriteFile GetTickCount GetLastError CreateFileW CloseHandle DeleteCriticalSection InitializeCriticalSection CreateEventW SetEvent EnterCriticalSection LeaveCriticalSection WaitForSingleObject WideCharToMultiByte GetPrivateProfileStringW MultiByteToWideChar GetLocalTime GetUserDefaultUILanguage ReleaseSemaphore GetProcAddress LoadLibraryW GetModuleFileNameW FreeLibrary GetModuleHandleW Sleep GetFileTime WritePrivateProfileStringW OpenMutexW GetSystemInfo GlobalMemoryStatusEx GetSystemDirectoryW CreatePipe GetStartupInfoW CreateProcessW ReadFile GetCurrentProcessId GetExitCodeProcess OpenProcess K32EnumProcessModules K32GetModuleFileNameExW GetWindowsDirectoryW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThreadId GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile CopyFileW FindFirstFileW FindNextFileW DeleteFileW FindClose GetSystemTimeAsFileTime RemoveDirectoryW SetFilePointer CreateSemaphoreW

user32

DefWindowProcW EnumWindows GetClassNameW FindWindowExW GetWindowThreadProcessId DispatchMessageW TranslateMessage CreateWindowExW SetWindowLongW DestroyWindow GetWindowLongW GetSystemMetrics GetMonitorInfoW MonitorFromWindow GetMessageW MoveWindow EnableWindow GetWindowRect SetTimer KillTimer EnumDisplaySettingsW PostQuitMessage EnumDisplayMonitors SystemParametersInfoW ReleaseDC GetWindowDC ClientToScreen MapVirtualKeyW GetKeyState wsprintfW IsZoomed IsIconic SendMessageW IsWindowVisible ShowWindow PostMessageW SetParent SetWindowTextW GetDC GetDesktopWindow BringWindowToTop SetForegroundWindow SetWindowPos LoadCursorW GetCursorInfo GetClientRect ScreenToClient GetParent wvsprintfW GetGUIThreadInfo InvalidateRgn CreateAcceleratorTableW GetSysColor SetCaretPos ShowCaret HideCaret CreateCaret SetRect FillRect DrawTextW CharPrevW GetCaretPos GetCaretBlinkTime GetWindowTextLengthW GetWindowTextW LoadImageW AdjustWindowRectEx GetMenu GetClassInfoExW RegisterClassExW CallWindowProcW GetWindow IsRectEmpty IntersectRect MapWindowPoints InvalidateRect GetUpdateRect EndPaint BeginPaint ReleaseCapture SetCapture GetFocus GetActiveWindow SetFocus CharNextW OffsetRect UnionRect SetCursor RegisterClassW MessageBoxW SetWindowRgn PtInRect GetPropW SetPropW IsWindow GetCursorPos

gdi32

GdiFlush ExtTextOutW TextOutW MoveToEx CreateDIBSection SetStretchBltMode StretchBlt SetBkColor ExtSelectClipRgn SelectClipRgn RoundRect LineTo GetTextExtentPoint32W GetClipBox GetCharABCWidthsW CreateRectRgnIndirect CreatePenIndirect CombineRgn SetTextColor SetBkMode CreateSolidBrush CreatePatternBrush GetObjectA SetWindowOrgEx GetTextMetricsW SaveDC RestoreDC Rectangle CreatePen CreateFontIndirectW CreateRoundRectRgn DeleteObject BitBlt CreateCompatibleBitmap CreateCompatibleDC GetStockObject GetObjectW DeleteDC RemoveFontResourceW AddFontResourceExW GetDeviceCaps SelectObject

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegQueryValueExA RegOpenKeyExA RegQueryValueExW RegOpenKeyExW RegSetValueExW DuplicateTokenEx OpenProcessToken RegOpenKeyW RegCloseKey

shell32

ShellExecuteW ShellExecuteExW ord165 SHGetFolderPathW SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal OleLockRunning CLSIDFromProgID CLSIDFromString CoTaskMemFree CoCreateInstance CoUninitialize OleUninitialize CoInitializeSecurity OleInitialize CoInitialize CoCreateGuid

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

msvcp120

?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_BADOFF@std@@3_JB ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z _Mtx_lock _Mtx_unlock ?_Throw_future_error@std@@YAXABVerror_code@1@@Z ?_Future_error_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z _Cnd_wait ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z _Cnd_register_at_thread_exit _Cnd_broadcast ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Unlink@sys@tr2@std@@YAHPB_W@Z ?_Winerror_map@std@@YAPBDH@Z ?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z ??0_Lockit@std@@QAE@H@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?flags@ios_base@std@@QBEHXZ ?width@ios_base@std@@QBE_JXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?width@ios_base@std@@QAE_J_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Make_dir@sys@tr2@std@@YAHPB_W@Z ?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z ?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z ?_Close_dir@sys@tr2@std@@YAXPAX@Z ?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z ?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z _Xtime_get_ticks ?_2@placeholders@std@@3V?$_Ph@$01@2@A ?_1@placeholders@std@@3V?$_Ph@$00@2@A _Call_onceEx _Do_call _Thrd_join _Cnd_timedwait _Mtx_current_owns ?_Throw_Cpp_error@std@@YAXH@Z _Thrd_current _Thrd_equal ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??Bios_base@std@@QBE_NXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z ??1_Pad@std@@QAE@XZ ?_Release@_Pad@std@@QAEXXZ ??0_Pad@std@@QAE@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z _Cnd_unregister_at_thread_exit _Cnd_destroy _Cnd_init ?_Throw_C_error@std@@YAXH@Z _Mtx_init _Mtx_destroy ?_Xinvalid_argument@std@@YAXPBD@Z ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ _Wcscoll ?id@?$collate@_W@std@@2V0locale@2@A ??Bid@locale@std@@QAEIXZ ?id@?$ctype@_W@std@@2V0locale@2@A ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ??0facet@locale@std@@IAE@I@Z ??_7facet@locale@std@@6B@ ??1facet@locale@std@@MAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ??1_Lockit@std@@QAE@XZ ??1_Locinfo@std@@QAE@XZ ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Incref@facet@locale@std@@UAEXXZ _Wcsxfrm ?is@?$ctype@_W@std@@QBE_NF_W@Z ?tolower@?$ctype@_W@std@@QBE_W_W@Z ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_function_call@std@@YAXXZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7_Facet_base@std@@6B@ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ

gdiplus

GdipGetImageWidth GdipCreateFromHDC GdipDeleteGraphics GdipSetCompositingQuality GdipSetSmoothingMode GdipSetPixelOffsetMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipGraphicsClear GdipDrawImage GdipDrawImageRectI GdipDeleteFontFamily GdipCreateFontFromDC GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushI GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipCreateFontFromLogfontA GdipDeleteFont GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipCreateBitmapFromScan0 GdipLoadImageFromStream GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipGetFamily

msvcr120

malloc swscanf_s strchr ??0exception@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@ABV01@@Z ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z _snwprintf_s _snprintf_s ?terminate@@YAXXZ _setjmp3 sprintf_s _time64 ??_V@YAXPAX@Z _wtoi _errno ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrToBool@@YA_NPBX@Z rand ?wait@event@Concurrency@@QAEII@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z ?set@event@Concurrency@@QAEXXZ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ??0exception@std@@QAE@ABQBDH@Z ??1scoped_lock@critical_section@Concurrency@@QAE@XZ ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z ?Free@Concurrency@@YAXPAX@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ ??1event@Concurrency@@QAE@XZ ??1critical_section@Concurrency@@QAE@XZ ??0event@Concurrency@@QAE@XZ ??0critical_section@Concurrency@@QAE@XZ ?Alloc@Concurrency@@YAPAXI@Z _wcsicmp longjmp _snwprintf fclose fwrite fputc fflush setvbuf fgetpos _fseeki64 fsetpos memcpy_s ungetc fgetc _unlock_file _lock_file srand vswprintf_s ??0exception@std@@QAE@ABQBD@Z sscanf_s ??8type_info@@QBE_NABV0@@Z wcsrchr _vswprintf _wcslwr wcscpy_s toupper isalnum sprintf atoi wcschr tolower _wcsnicmp isdigit _beginthreadex vsprintf_s _CxxThrowException __CxxFrameHandler3 memcpy memset wcsncpy wcsstr _vsnwprintf _itow wcstod _wtof iswalnum wcsncmp _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _XcptFilter __crtGetShowWindowMode _amsg_exit __wgetmainargs __set_app_type exit _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm _wcmdln _fmode _commode _except1 _except_handler4_common __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s realloc wcstol iswdigit swprintf_s free wcstoul mbstowcs_s memmove ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW VerQueryValueA GetFileVersionInfoSizeW

shlwapi

PathFileExistsW

wininet

InternetCrackUrlW InternetOpenW InternetConnectW HttpOpenRequestW HttpSendRequestW InternetReadFile HttpQueryInfoW InternetCloseHandle

msi

ord173 ord217

comctl32

_TrackMouseEvent ord17

imm32

ImmGetVirtualKey ImmGetContext ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow

generic

count=2, id=199, version=41118,

count=10, id=223, productName=VS2013 build 21005, version=21005,

count=19, id=224, productName=VS2013 build 21005, version=21005,

count=1, id=209, version=65501,

count=4, id=221, productName=VS2013 build 21005, version=21005,

count=7, id=225, productName=VS2013 build 21005, version=21005,

count=14, id=206, version=65501,

count=1, id=208, version=65501,

count=34, id=203, version=65501,

count=5, id=221, productName=VS2013 UPD5 build 40629, version=40629,

count=708, id=1, productName=Unmarked objects,

count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=35, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=74, id=229, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,