*******************************************************************************
CHECKSYM V2.3.2 - Symbol Verification Program
*******************************************************************************

***** COLLECTION OPTIONS *****

Collect Information From File(s) Specified by the User
	-F C:\Windows\System32\*.EXE

***** INFORMATION CHECKING OPTIONS *****

Output Symbol Information From Modules
	-S

Collect Version and File-System Information From Modules
	-R

***** OUTPUT OPTIONS *****

Output Results to STDOUT

Output Collected Module Information To a CSV File
	-O C:\Windows\HPSReports\Enhanced\Report\ALARM1_System32_EXE.CSV
-------------------------------------------------------------------------------

Collecting Modules Data from file path.... (this may take a few minutes)

*******************************************************************************
[FILESYSTEM MODULES] - Printing Module Information for 378 Modules.
[FILESYSTEM MODULES] - Context: Filesystem Modules
*******************************************************************************

Module[  1] [C:\WINDOWS\SYSTEM32\ADAPTERTROUBLESHOOTER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Problembehandlung für Grafikkarten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40448
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc9a0 - Tue Jul 14 01:56:16 2009
    Module Checksum      = 0x00017071
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [AdapterTroubleshooter.pdb]
    Module PDB Guid = {99FD7E32-61AE-4922-80C6-97058A88E1F8}
    Module PDB Age = 0x1

Module[  2] [C:\WINDOWS\SYSTEM32\AITAGENT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Anwendungswirkungstelemetrie-Agent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 124416
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc190 - Tue Jul 14 01:21:52 2009
    Module Checksum      = 0x000263f2
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [AitAgent.pdb]
    Module PDB Guid = {79382FAE-BFD3-470E-A5A2-FF896027E1D9}
    Module PDB Age = 0x1

Module[  3] [C:\WINDOWS\SYSTEM32\ALG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gatewaydienst auf Anwendungsebene
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 79360
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bcc8e - Tue Jul 14 02:08:46 2009
    Module Checksum      = 0x00015118
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [ALG.pdb]
    Module PDB Guid = {C2C0BEC9-52A8-41C3-91F7-B1E6A8E85BBA}
    Module PDB Age = 0x1

Module[  4] [C:\WINDOWS\SYSTEM32\APPIDCERTSTORECHECK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  AppID Certificate Store Verification Task
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17920
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc8c8 - Tue Jul 14 01:52:40 2009
    Module Checksum      = 0x0000c661
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [appidcertstorecheck.pdb]
    Module PDB Guid = {B015B012-6C87-41A0-AD69-58A9CE80A906}
    Module PDB Age = 0x1

Module[  5] [C:\WINDOWS\SYSTEM32\APPIDPOLICYCONVERTER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  AppID Policy Converter Task
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 146944
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc8d8 - Tue Jul 14 01:52:56 2009
    Module Checksum      = 0x0002fbdc
    Module SizeOfImage   = 0x00028000
  Module Pointer to PDB = [appidpolicyconverter.pdb]
    Module PDB Guid = {B7D194C2-8BB6-4788-9812-1103B039AFEF}
    Module PDB Age = 0x1

Module[  6] [C:\WINDOWS\SYSTEM32\ARP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl ARP
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bccfe - Tue Jul 14 02:10:38 2009
    Module Checksum      = 0x00010616
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [arp.pdb]
    Module PDB Guid = {AE1C1B4C-8DFD-4CE5-8F8E-90A3D680093B}
    Module PDB Age = 0x1

Module[  7] [C:\WINDOWS\SYSTEM32\AT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm für Zeitplandienst
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28672
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc8fa - Tue Jul 14 01:53:30 2009
    Module Checksum      = 0x00010789
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [at.pdb]
    Module PDB Guid = {775D22B1-A39E-4AA4-BA3F-6F70A8D5A10F}
    Module PDB Age = 0x1

Module[  8] [C:\WINDOWS\SYSTEM32\ATBROKER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Transitions Accessible technologies between desktops
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bd26c - Tue Jul 14 02:33:48 2009
    Module Checksum      = 0x000182a3
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [ATBroker.pdb]
    Module PDB Guid = {8255A343-C3FB-42AD-9DD8-BE7979353ED2}
    Module PDB Age = 0x1

Module[  9] [C:\WINDOWS\SYSTEM32\ATI2MDXX.EXE] 
  Company Name:      ATI Technologies, Inc.
  File Description:  ATI2MDXX
  Product Version:   (6.14:10.2495)
  File Version:      (6.14:10.2495)
  File Size (bytes): 35840
  File Date:         Mi Jun 24 22:28:44 2009
  Module has NO symbols!

Module[ 10] [C:\WINDOWS\SYSTEM32\ATTRIB.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Attribute-Programm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18432
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x0000fc5b
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [attrib.pdb]
    Module PDB Guid = {B16AD126-44C3-44FB-909A-FE62720E11F8}
    Module PDB Age = 0x1

Module[ 11] [C:\WINDOWS\SYSTEM32\AUDIODG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Graphisolierung für Audiogeräte 
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 126464
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bced5 - Tue Jul 14 02:18:29 2009
    Module Checksum      = 0x0002bd91
    Module SizeOfImage   = 0x00024000
  Module Pointer to PDB = [AudioDG.pdb]
    Module PDB Guid = {F404CE95-A4B9-46E1-BB52-5847F486A34E}
    Module PDB Age = 0x1

Module[ 12] [C:\WINDOWS\SYSTEM32\AUDITPOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Überwachungsrichtlinienprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 64000
  File Date:         Di Jul 14 02:38:55 2009
    Module TimeDateStamp = 0x4a5bc84e - Tue Jul 14 01:50:38 2009
    Module Checksum      = 0x0001af52
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [auditpol.pdb]
    Module PDB Guid = {8F8CECB5-D95A-4D32-AA83-9F58E634EAB8}
    Module PDB Age = 0x1

Module[ 13] [C:\WINDOWS\SYSTEM32\AUTOCHK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto Check Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 777728
  File Date:         Di Jul 14 02:38:56 2009
    Module TimeDateStamp = 0x4a5bc270 - Tue Jul 14 01:25:36 2009
    Module Checksum      = 0x000be51b
    Module SizeOfImage   = 0x000c1000
  Module Pointer to PDB = [autochk.pdb]
    Module PDB Guid = {AADED723-BFEE-4BCE-B72B-F01C52474C99}
    Module PDB Age = 0x1

Module[ 14] [C:\WINDOWS\SYSTEM32\AUTOCONV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto File System Conversion Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 793088
  File Date:         Di Jul 14 02:38:56 2009
    Module TimeDateStamp = 0x4a5bc270 - Tue Jul 14 01:25:36 2009
    Module Checksum      = 0x000d1073
    Module SizeOfImage   = 0x000c5000
  Module Pointer to PDB = [autoconv.pdb]
    Module PDB Guid = {E41A2AC8-6D11-417F-AE7D-6798DC9CD445}
    Module PDB Age = 0x1

Module[ 15] [C:\WINDOWS\SYSTEM32\AUTOFMT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto File System Format Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 763904
  File Date:         Di Jul 14 02:38:56 2009
    Module TimeDateStamp = 0x4a5bc270 - Tue Jul 14 01:25:36 2009
    Module Checksum      = 0x000bdaaa
    Module SizeOfImage   = 0x000be000
  Module Pointer to PDB = [autofmt.pdb]
    Module PDB Guid = {F4BDF8DD-F338-4262-8CBE-083BAE309A0E}
    Module PDB Age = 0x1

Module[ 16] [C:\WINDOWS\SYSTEM32\BCDBOOT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bcdboot-Dienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 175616
  File Date:         Di Jul 14 02:38:56 2009
    Module TimeDateStamp = 0x4a5bc1d3 - Tue Jul 14 01:22:59 2009
    Module Checksum      = 0x0003508e
    Module SizeOfImage   = 0x0002e000
  Module Pointer to PDB = [bcdboot.pdb]
    Module PDB Guid = {1E44CE39-85C6-4CA9-A93F-CC3B91E52BE2}
    Module PDB Age = 0x1

Module[ 17] [C:\WINDOWS\SYSTEM32\BCDEDIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Startkonfigurationsdaten-Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 345088
  File Date:         Di Jul 14 02:38:56 2009
    Module TimeDateStamp = 0x4a5bc1cf - Tue Jul 14 01:22:55 2009
    Module Checksum      = 0x00056ec4
    Module SizeOfImage   = 0x00057000
  Module Pointer to PDB = [bcdedit.pdb]
    Module PDB Guid = {87458B2C-F6B5-4563-B2EF-7BDB595C68A2}
    Module PDB Age = 0x1

Module[ 18] [C:\WINDOWS\SYSTEM32\BITSADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  BITS-Verwaltungsprogramm
  Product Version:   (7.5:7600.16385)
  File Version:      (7.5:7600.16385)
  File Size (bytes): 232448
  File Date:         Di Jul 14 02:38:57 2009
    Module TimeDateStamp = 0x4a5bc754 - Tue Jul 14 01:46:28 2009
    Module Checksum      = 0x0003d935
    Module SizeOfImage   = 0x00051000
  Module Pointer to PDB = [bitsadmin.pdb]
    Module PDB Guid = {74298ED1-29DF-4045-80F2-9BCE6968F55A}
    Module PDB Age = 0x1

Module[ 19] [C:\WINDOWS\SYSTEM32\BOOTCFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  BootCfg - Zeigt Starteinstellungen an und ändert diese.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 94720
  File Date:         Di Jul 14 02:38:57 2009
    Module TimeDateStamp = 0x4a5bc7ca - Tue Jul 14 01:48:26 2009
    Module Checksum      = 0x0001e8aa
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [bootcfg.pdb]
    Module PDB Guid = {119114B2-AA04-4368-A275-9AC41B5EF821}
    Module PDB Age = 0x1

Module[ 20] [C:\WINDOWS\SYSTEM32\BRIDGEUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bridge Unattend Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:38:57 2009
    Module TimeDateStamp = 0x4a5bcc81 - Tue Jul 14 02:08:33 2009
    Module Checksum      = 0x0001015a
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [bridgeunattend.pdb]
    Module PDB Guid = {1F074582-F5A1-466E-8D64-863A455E5E75}
    Module PDB Age = 0x1

Module[ 21] [C:\WINDOWS\SYSTEM32\CACLS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ACL-Steuerungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:38:57 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x000174d5
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [cacls.pdb]
    Module PDB Guid = {B66CA867-DE7B-47B4-B5C5-D0D2CDFFAE9E}
    Module PDB Age = 0x1

Module[ 22] [C:\WINDOWS\SYSTEM32\CALC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Rechner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 918528
  File Date:         Di Jul 14 02:38:57 2009
    Module TimeDateStamp = 0x4a5bc9d4 - Tue Jul 14 01:57:08 2009
    Module Checksum      = 0x000eb7cb
    Module SizeOfImage   = 0x000e3000
  Module Pointer to PDB = [calc.pdb]
    Module PDB Guid = {E95BB5E0-8CE6-40A0-9C3D-BF3DFA3ABCB4}
    Module PDB Age = 0x2

Module[ 23] [C:\WINDOWS\SYSTEM32\CEIPDATA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Server-Programm zur Verbesserung der Benutzerfreundlichkeit
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 246272
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bc7e8 - Tue Jul 14 01:48:56 2009
    Module Checksum      = 0x00041cdf
    Module SizeOfImage   = 0x00040000
  Module Pointer to PDB = [ceipdata.pdb]
    Module PDB Guid = {57654C67-C4FF-418A-937E-D5602D44609E}
    Module PDB Age = 0x1

Module[ 24] [C:\WINDOWS\SYSTEM32\CEIPROLE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Server-Rollensammlung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 39424
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bc7e0 - Tue Jul 14 01:48:48 2009
    Module Checksum      = 0x0000a4d1
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [ceiprole.pdb]
    Module PDB Guid = {BC5211C2-464E-4B63-B685-490301DEB85A}
    Module PDB Age = 0x1

Module[ 25] [C:\WINDOWS\SYSTEM32\CERTENROLLCTRL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zertifikatregistrierungs-Steuerelement
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 70144
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bc822 - Tue Jul 14 01:49:54 2009
    Module Checksum      = 0x00015cd6
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [CertEnrollCtrl.pdb]
    Module PDB Guid = {0883B9B0-37B4-4AC6-BC93-21F10F49FA1E}
    Module PDB Age = 0x1

Module[ 26] [C:\WINDOWS\SYSTEM32\CERTREQ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CertReq.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 326144
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bc81e - Tue Jul 14 01:49:50 2009
    Module Checksum      = 0x00054ade
    Module SizeOfImage   = 0x00053000
  Module Pointer to PDB = [certreq.pdb]
    Module PDB Guid = {D04AE1B8-428C-441B-9DBD-13BA3957BC2F}
    Module PDB Age = 0x1

Module[ 27] [C:\WINDOWS\SYSTEM32\CERTUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CertUtil.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1175552
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bc833 - Tue Jul 14 01:50:11 2009
    Module Checksum      = 0x001285ea
    Module SizeOfImage   = 0x00124000
  Module Pointer to PDB = [certutil.pdb]
    Module PDB Guid = {E0D7BA1E-57E4-4648-A095-E2DBD43D1392}
    Module PDB Age = 0x1

Module[ 28] [C:\WINDOWS\SYSTEM32\CHANGE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Ändern von Remotedesktopdiensten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:38:58 2009
    Module TimeDateStamp = 0x4a5bce7f - Tue Jul 14 02:17:03 2009
    Module Checksum      = 0x00013ada
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [change.pdb]
    Module PDB Guid = {BACCE06E-E384-4EF4-9ECC-BB7E5FEE5D4F}
    Module PDB Age = 0x1

Module[ 29] [C:\WINDOWS\SYSTEM32\CHGLOGON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Anmeldungsänderung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bce80 - Tue Jul 14 02:17:04 2009
    Module Checksum      = 0x00014cc8
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [chglogon.pdb]
    Module PDB Guid = {EEEF21E4-AB70-4C0C-AD0D-DA1F3BA9BA37}
    Module PDB Age = 0x1

Module[ 30] [C:\WINDOWS\SYSTEM32\CHGPORT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Ändern von Anschlüssen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bce7f - Tue Jul 14 02:17:03 2009
    Module Checksum      = 0x00011b76
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [chgport.pdb]
    Module PDB Guid = {5C1A3C46-5949-432D-B43A-5528D816E11C}
    Module PDB Age = 0x1

Module[ 31] [C:\WINDOWS\SYSTEM32\CHGUSR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Ändern der Dateizuordnung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bce82 - Tue Jul 14 02:17:06 2009
    Module Checksum      = 0x00006ae2
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [chgusr.pdb]
    Module PDB Guid = {33754E56-0E3F-4D71-B961-6A8B121E3C5B}
    Module PDB Age = 0x1

Module[ 32] [C:\WINDOWS\SYSTEM32\CHKDSK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Dateiträgerüberprüfung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36864
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x0000cee9
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [chkdsk.pdb]
    Module PDB Guid = {A2AA91BA-686D-4099-8DE2-7D08FF44D99C}
    Module PDB Age = 0x1

Module[ 33] [C:\WINDOWS\SYSTEM32\CHKNTFS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur NTFS-Volumewartung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18944
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x0000f254
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [chkntfs.pdb]
    Module PDB Guid = {A2C09E3B-AAFD-45E1-A865-983BC364218F}
    Module PDB Age = 0x1

Module[ 34] [C:\WINDOWS\SYSTEM32\CHOICE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bietet eine Auswahl an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36352
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bc26c - Tue Jul 14 01:25:32 2009
    Module Checksum      = 0x00016ae3
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [choice.pdb]
    Module PDB Guid = {56A903C4-9DFA-466B-B596-4B33786A41D1}
    Module PDB Age = 0x1

Module[ 35] [C:\WINDOWS\SYSTEM32\CIPHER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm zur Dateiverschlüsselung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x00012311
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [cipher.pdb]
    Module PDB Guid = {D5417C6B-AC50-4DC5-930A-27914F64CCB9}
    Module PDB Age = 0x1

Module[ 36] [C:\WINDOWS\SYSTEM32\CLICONFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SQL Client Configuration Utility EXE
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 49152
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bd13b - Tue Jul 14 02:28:43 2009
    Module Checksum      = 0x00012d2a
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [cliconfg.pdb]
    Module PDB Guid = {5D3E6A18-45C6-43CC-91F5-882604035C6B}
    Module PDB Age = 0x1

Module[ 37] [C:\WINDOWS\SYSTEM32\CLIP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Clip - Kopiert Daten in die Zwischenablage.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 32256
  File Date:         Di Jul 14 02:38:59 2009
    Module TimeDateStamp = 0x4a5bc26f - Tue Jul 14 01:25:35 2009
    Module Checksum      = 0x0000ddc7
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [clip.pdb]
    Module PDB Guid = {680F5938-F567-413B-BB46-AA9042DD29CD}
    Module PDB Age = 0x1

Module[ 38] [C:\WINDOWS\SYSTEM32\CMD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Befehlsprozessor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 344576
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc48d - Tue Jul 14 01:34:37 2009
    Module Checksum      = 0x00060cee
    Module SizeOfImage   = 0x00058000
  Module Pointer to PDB = [cmd.pdb]
    Module PDB Guid = {AA624EB7-0515-4071-8774-2D0E5A093203}
    Module PDB Age = 0x2

Module[ 39] [C:\WINDOWS\SYSTEM32\CMDKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm für die Anmeldeinformationsverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc840 - Tue Jul 14 01:50:24 2009
    Module Checksum      = 0x0000de5e
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [cmdkey.pdb]
    Module PDB Guid = {85D9E22C-C168-4A90-8226-179838ECCB2C}
    Module PDB Age = 0x1

Module[ 40] [C:\WINDOWS\SYSTEM32\CMDL32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Autodownload
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 80384
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bccd9 - Tue Jul 14 02:10:01 2009
    Module Checksum      = 0x000195f4
    Module SizeOfImage   = 0x00019000
  Module Pointer to PDB = [cmdl32.pdb]
    Module PDB Guid = {CA9DBF3B-C629-4A7A-BCD8-E2CA17621210}
    Module PDB Age = 0x1

Module[ 41] [C:\WINDOWS\SYSTEM32\CMMON32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Monitor
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 45056
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bccf2 - Tue Jul 14 02:10:26 2009
    Module Checksum      = 0x0001480d
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [cmmon32.pdb]
    Module PDB Guid = {2A1D60DC-F266-477D-8968-20D61FC18E39}
    Module PDB Age = 0x1

Module[ 42] [C:\WINDOWS\SYSTEM32\CMSTP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Profilinstallation
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 92160
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bccf2 - Tue Jul 14 02:10:26 2009
    Module Checksum      = 0x0001bc07
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [cmstp.pdb]
    Module PDB Guid = {359C1882-CD99-4242-AC1E-65B02DB53DB9}
    Module PDB Age = 0x1

Module[ 43] [C:\WINDOWS\SYSTEM32\COFIRE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Client zum Wiederherstellen von beschädigten Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc3eb - Tue Jul 14 01:31:55 2009
    Module Checksum      = 0x000095d7
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [cofire.pdb]
    Module PDB Guid = {383F0B8E-C01C-4AED-95AD-32B4B69C9AE5}
    Module PDB Age = 0x1

Module[ 44] [C:\WINDOWS\SYSTEM32\COLORCPL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft-Farbsystemsteuerung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 86528
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc56d - Tue Jul 14 01:38:21 2009
    Module Checksum      = 0x0001e2a9
    Module SizeOfImage   = 0x00019000
  Module Pointer to PDB = [colorcpl.pdb]
    Module PDB Guid = {8E4B162A-74D1-4DEF-A0DD-660F65E0A5AE}
    Module PDB Age = 0x1

Module[ 45] [C:\WINDOWS\SYSTEM32\COMP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Vergleichen von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x000078f9
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [comp.pdb]
    Module PDB Guid = {2393C931-7B31-405A-97A0-795513FFDBC0}
    Module PDB Age = 0x1

Module[ 46] [C:\WINDOWS\SYSTEM32\COMPACT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm für die Dateikomprimierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19968
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x0000a73b
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [compact.pdb]
    Module PDB Guid = {CD62D987-C844-4B02-9F04-4745EEACC1D3}
    Module PDB Age = 0x1

Module[ 47] [C:\WINDOWS\SYSTEM32\COMPMGMTLAUNCHER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Startprogramm für Computerverwaltungs-Snap-In
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 145920
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc7d7 - Tue Jul 14 01:48:39 2009
    Module Checksum      = 0x0002bb64
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [CompMgmtLauncher.pdb]
    Module PDB Guid = {3B24CFB8-0FFA-46F3-8842-9DA6F6B9CDAC}
    Module PDB Age = 0x1

Module[ 48] [C:\WINDOWS\SYSTEM32\COMPUTERDEFAULTS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerung für Programmzugriff und Computerstandards
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 37376
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc9a0 - Tue Jul 14 01:56:16 2009
    Module Checksum      = 0x0000a1c9
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [ComputerDefaults.pdb]
    Module PDB Guid = {3019DD1B-FDBE-441C-B876-467624D6644C}
    Module PDB Age = 0x1

Module[ 49] [C:\WINDOWS\SYSTEM32\CONHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Host für Konsolenfenster
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 338432
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc571 - Tue Jul 14 01:38:25 2009
    Module Checksum      = 0x0005e94b
    Module SizeOfImage   = 0x00057000
  Module Pointer to PDB = [conhost.pdb]
    Module PDB Guid = {1C6A72FB-BAAE-4711-879C-BD38AE318922}
    Module PDB Age = 0x2

Module[ 50] [C:\WINDOWS\SYSTEM32\CONSENT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zustimmungsbenutzeroberfläche für Verwaltungsanwendungen
  Product Version:   (6.1:7600.16688)
  File Version:      (6.1:7600.16688)
  File Size (bytes): 112000
  File Date:         Sa Okt 16 06:23:13 2010
    Module TimeDateStamp = 0x4cb916d3 - Sat Oct 16 05:06:59 2010
    Module Checksum      = 0x00027fbf
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [consent.pdb]
    Module PDB Guid = {8245AB5D-C1F8-427F-BA9A-5F5FF2B71F1C}
    Module PDB Age = 0x1

Module[ 51] [C:\WINDOWS\SYSTEM32\CONTROL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Control Panel
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 114688
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc989 - Tue Jul 14 01:55:53 2009
    Module Checksum      = 0x0002a53b
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [control.pdb]
    Module PDB Guid = {4FADA6BD-8CE3-49F6-A09C-2E8631163852}
    Module PDB Age = 0x1

Module[ 52] [C:\WINDOWS\SYSTEM32\CONVERT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  File System Conversion Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20480
  File Date:         Di Jul 14 02:39:01 2009
    Module TimeDateStamp = 0x4a5bc255 - Tue Jul 14 01:25:09 2009
    Module Checksum      = 0x000077b2
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [convert.pdb]
    Module PDB Guid = {9B944F8A-8FA7-42CF-AB76-8B7E60EC8D14}
    Module PDB Age = 0x1

Module[ 53] [C:\WINDOWS\SYSTEM32\CREDWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent zum Sichern und Wiederherstellen von Anmeldeinformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34304
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc840 - Tue Jul 14 01:50:24 2009
    Module Checksum      = 0x0000d07e
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [credwiz.pdb]
    Module PDB Guid = {D33F0285-3186-49F3-B6A5-EE1F01393B2F}
    Module PDB Age = 0x1

Module[ 54] [C:\WINDOWS\SYSTEM32\CSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft ® Console Based Script Host
  Product Version:   (5.8:7600.16385)
  File Version:      (5.8:7600.16385)
  File Size (bytes): 156160
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bca2a - Tue Jul 14 01:58:34 2009
    Module Checksum      = 0x000331a1
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [cscript.pdb]
    Module PDB Guid = {978E55C0-25AA-4638-BE48-945654EDEF7C}
    Module PDB Age = 0x2

Module[ 55] [C:\WINDOWS\SYSTEM32\CSRSS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Client-Server-Laufzeitprozess
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 7680
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc115 - Tue Jul 14 01:19:49 2009
    Module Checksum      = 0x000072b8
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [csrss.pdb]
    Module PDB Guid = {E8979C26-A0EE-47A6-9575-E54FA6C7F6BE}
    Module PDB Age = 0x1

Module[ 56] [C:\WINDOWS\SYSTEM32\CTFMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CTF-Ladeprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9728
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc599 - Tue Jul 14 01:39:05 2009
    Module Checksum      = 0x00005dec
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [ctfmon.pdb]
    Module PDB Guid = {36FBE6EC-E668-441B-A157-FF91A2BEBC78}
    Module PDB Age = 0x1

Module[ 57] [C:\WINDOWS\SYSTEM32\CTTUNE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ClearType-Tuner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 322048
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc9b3 - Tue Jul 14 01:56:35 2009
    Module Checksum      = 0x00059057
    Module SizeOfImage   = 0x00053000
  Module Pointer to PDB = [cttune.pdb]
    Module PDB Guid = {73BFE242-2CFE-4C93-A9ED-DDE28B98217E}
    Module PDB Age = 0x1

Module[ 58] [C:\WINDOWS\SYSTEM32\CTTUNESVR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ClearType-Tuner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40448
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc9ab - Tue Jul 14 01:56:27 2009
    Module Checksum      = 0x0000ff48
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [cttunesvr.pdb]
    Module PDB Guid = {4D2F52E7-E019-4520-8AFB-5698904FD497}
    Module PDB Age = 0x1

Module[ 59] [C:\WINDOWS\SYSTEM32\DCGPOFIX.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft (C) Wiederherstellungsprogramm für Standard-Gruppenrichtlinienobjekte
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 41472
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc939 - Tue Jul 14 01:54:33 2009
    Module Checksum      = 0x0000b161
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [dcgpofix.pdb]
    Module PDB Guid = {586800F8-DE48-4DCA-A895-2E75D80C758E}
    Module PDB Age = 0x1

Module[ 60] [C:\WINDOWS\SYSTEM32\DCOMCNFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM+
  Product Version:   (6.1:7600.16385)
  File Version:      (2001.12:8530.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bca6d - Tue Jul 14 01:59:41 2009
    Module Checksum      = 0x0000d243
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [DCOMCnfg.pdb]
    Module PDB Guid = {DFE8EB6C-0132-486A-99FB-32AB7164F57E}
    Module PDB Age = 0x1

Module[ 61] [C:\WINDOWS\SYSTEM32\DCPROMO.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Installationsprogramm für die Active Directory-Domänendienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 183808
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc763 - Tue Jul 14 01:46:43 2009
    Module Checksum      = 0x00030bc6
    Module SizeOfImage   = 0x00030000
  Module Pointer to PDB = [dcpromo.pdb]
    Module PDB Guid = {8BEDC477-20FA-4639-B4C6-C1942BFC4C22}
    Module PDB Age = 0x1

Module[ 62] [C:\WINDOWS\SYSTEM32\DDODIAG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DDODiag is a tool that collects Device Display Object (DDO) information from the system and logs it
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc52d - Tue Jul 14 01:37:17 2009
    Module Checksum      = 0x000143a2
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [DDODiag.pdb]
    Module PDB Guid = {586F922B-161B-417E-8E5E-6D4EC17ED4D1}
    Module PDB Age = 0x1

Module[ 63] [C:\WINDOWS\SYSTEM32\DEFRAG.EXE] 
  Company Name:      Microsoft Corp.
  File Description:  Defragmentierungsmodul
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 183296
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc4f7 - Tue Jul 14 01:36:23 2009
    Module Checksum      = 0x00034282
    Module SizeOfImage   = 0x00030000
  Module Pointer to PDB = [defrag.pdb]
    Module PDB Guid = {B0951F41-0F9D-439B-94C0-D9D1126AFD75}
    Module PDB Age = 0x1

Module[ 64] [C:\WINDOWS\SYSTEM32\DEVICEDISPLAYOBJECTPROVIDER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Device Display Object Function Discovery Provider
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 111616
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc52c - Tue Jul 14 01:37:16 2009
    Module Checksum      = 0x0001dfcc
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [DeviceDisplayObjectProvider.pdb]
    Module PDB Guid = {905B7A6F-54FF-44D9-980C-8D4E55C44E0E}
    Module PDB Age = 0x1

Module[ 65] [C:\WINDOWS\SYSTEM32\DEVICEEJECT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eject Device
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25600
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bc2b0 - Tue Jul 14 01:26:40 2009
    Module Checksum      = 0x0000f0d5
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [DeviceEject.pdb]
    Module PDB Guid = {93CEEFA2-BA4F-4BE9-9BEB-5631698FB5C0}
    Module PDB Age = 0x1

Module[ 66] [C:\WINDOWS\SYSTEM32\DEVICEPAIRINGWIZARD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Device Pairing Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 74752
  File Date:         Di Jul 14 02:39:02 2009
    Module TimeDateStamp = 0x4a5bca00 - Tue Jul 14 01:57:52 2009
    Module Checksum      = 0x0001400c
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [DevicePairingWizard.pdb]
    Module PDB Guid = {B58D3B8B-0F72-4ED5-8334-B71E43AB4C9E}
    Module PDB Age = 0x1

Module[ 67] [C:\WINDOWS\SYSTEM32\DEVICEPROPERTIES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Geräteigenschaften
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 92672
  File Date:         Di Jul 14 02:39:03 2009
    Module TimeDateStamp = 0x4a5bc9a0 - Tue Jul 14 01:56:16 2009
    Module Checksum      = 0x0002083f
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [DeviceProperties.pdb]
    Module PDB Guid = {FFDDF98F-792E-471C-BF1F-F244AC284F77}
    Module PDB Age = 0x1

Module[ 68] [C:\WINDOWS\SYSTEM32\DFRGUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Defragmentierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 606208
  File Date:         Di Jul 14 02:39:03 2009
    Module TimeDateStamp = 0x4a5bc502 - Tue Jul 14 01:36:34 2009
    Module Checksum      = 0x000a0dc1
    Module SizeOfImage   = 0x00097000
  Module Pointer to PDB = [dfrgui.pdb]
    Module PDB Guid = {D3502897-5602-4055-BB6C-4330C87CFF55}
    Module PDB Age = 0x1

Module[ 69] [C:\WINDOWS\SYSTEM32\DFSFRSHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DfsFrs-Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:39:03 2009
    Module TimeDateStamp = 0x4a5bc1ff - Tue Jul 14 01:23:43 2009
    Module Checksum      = 0x00013b16
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [dfsfrsHost.pdb]
    Module PDB Guid = {A37CAB4E-BE20-4EC6-98B6-0DCFF96C72DA}
    Module PDB Age = 0x1

Module[ 70] [C:\WINDOWS\SYSTEM32\DIALER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows-Wählhilfe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bd415 - Tue Jul 14 02:40:53 2009
    Module Checksum      = 0x00016bed
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [dialer.pdb]
    Module PDB Guid = {B12E02B4-853D-4235-885A-9A4C2400DF4D}
    Module PDB Age = 0x1

Module[ 71] [C:\WINDOWS\SYSTEM32\DIANTZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Cabinet Maker
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 116224
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc17e - Tue Jul 14 01:21:34 2009
    Module Checksum      = 0x0002bbd1
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [diantz.pdb]
    Module PDB Guid = {23E7F340-942B-4240-B927-B3A6DC7B4566}
    Module PDB Age = 0x1

Module[ 72] [C:\WINDOWS\SYSTEM32\DINOTIFY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Geräteinstallation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8704
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc2b1 - Tue Jul 14 01:26:41 2009
    Module Checksum      = 0x00004afd
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [dinotify.pdb]
    Module PDB Guid = {3DFAF390-F51F-4580-ACBB-CB33E454C2D9}
    Module PDB Age = 0x1

Module[ 73] [C:\WINDOWS\SYSTEM32\DISKPART.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskPart
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 166400
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc52e - Tue Jul 14 01:37:18 2009
    Module Checksum      = 0x00036028
    Module SizeOfImage   = 0x0002c000
  Module Pointer to PDB = [diskpart.pdb]
    Module PDB Guid = {8C396476-68A2-431F-BE84-3FE34E8F152A}
    Module PDB Age = 0x1

Module[ 74] [C:\WINDOWS\SYSTEM32\DISKPERF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konfigurationsprogramm für Datenträgerleistung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19456
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc3de - Tue Jul 14 01:31:42 2009
    Module Checksum      = 0x00006cad
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [diskperf.pdb]
    Module PDB Guid = {B6722CFD-8E52-4FED-950B-D7A3F84B475C}
    Module PDB Age = 0x1

Module[ 75] [C:\WINDOWS\SYSTEM32\DISKRAID.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskRAID
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 363520
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc537 - Tue Jul 14 01:37:27 2009
    Module Checksum      = 0x0005c858
    Module SizeOfImage   = 0x0005d000
  Module Pointer to PDB = [diskraid.pdb]
    Module PDB Guid = {6C2CAD02-86C2-4FB3-AD29-4C970BA98561}
    Module PDB Age = 0x1

Module[ 76] [C:\WINDOWS\SYSTEM32\DISKSHADOW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskShadow
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 584704
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc535 - Tue Jul 14 01:37:25 2009
    Module Checksum      = 0x0009c0ad
    Module SizeOfImage   = 0x00092000
  Module Pointer to PDB = [diskshadow.pdb]
    Module PDB Guid = {7977A72F-41DA-45BD-9B19-9F2DF58CB46F}
    Module PDB Age = 0x1

Module[ 77] [C:\WINDOWS\SYSTEM32\DISM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DISM-Dienstprogramm für die Abbildwartung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 274944
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc394 - Tue Jul 14 01:30:28 2009
    Module Checksum      = 0x00049f71
    Module SizeOfImage   = 0x0007a000
  Module Pointer to PDB = [Dism.pdb]
    Module PDB Guid = {EF134809-20E2-41AF-BC39-0A2E53385EF5}
    Module PDB Age = 0x1

Module[ 78] [C:\WINDOWS\SYSTEM32\DISPDIAG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Display Diagnostics
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 159232
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc580 - Tue Jul 14 01:38:40 2009
    Module Checksum      = 0x0002a9cd
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [dispdiag.pdb]
    Module PDB Guid = {FB6DDE3F-779F-4826-950F-95C27FB49237}
    Module PDB Age = 0x1

Module[ 79] [C:\WINDOWS\SYSTEM32\DISPLAYSWITCH.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Anzeigewechsel
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 529408
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc965 - Tue Jul 14 01:55:17 2009
    Module Checksum      = 0x00081b1f
    Module SizeOfImage   = 0x00085000
  Module Pointer to PDB = [DisplaySwitch.pdb]
    Module PDB Guid = {D0740FD4-75E3-4488-9DD4-1CEBAE34F287}
    Module PDB Age = 0x1

Module[ 80] [C:\WINDOWS\SYSTEM32\DITRACE.EXE] 
  Company Name:      Dialogic
  File Description:  Maintenance_Tools
  Product Version:   (4.2:3.639)
  File Version:      (4.2:3.639)
  File Size (bytes): 443392
  File Date:         Fr Jul 02 09:59:42 2010
    Module TimeDateStamp = 0x4baccbcc - Fri Mar 26 15:59:24 2010
    Module Checksum      = 0x00000000
    Module SizeOfImage   = 0x0007f000
  Module Pointer to PDB = [W:\src\maint\4\nt\bin\50\AMD64\FREE\ditrace.pdb]
    Module PDB Guid = {6F92787F-298F-424A-A5A7-E4AA9AC43CD6}
    Module PDB Age = 0x16

Module[ 81] [C:\WINDOWS\SYSTEM32\DJOIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner Befehl der unbeaufsichtigten Installation für den Domänenbeitritt
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 61440
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc904 - Tue Jul 14 01:53:40 2009
    Module Checksum      = 0x0001cace
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [djoin.pdb]
    Module PDB Guid = {8DF26175-DA79-496C-84BB-C1D3129C9CF0}
    Module PDB Age = 0x1

Module[ 82] [C:\WINDOWS\SYSTEM32\DLLHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9728
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bca54 - Tue Jul 14 01:59:16 2009
    Module Checksum      = 0x00011545
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [dllhost.pdb]
    Module PDB Guid = {3FC369EE-2E4F-44D3-90F1-2D69B94B9B53}
    Module PDB Age = 0x2

Module[ 83] [C:\WINDOWS\SYSTEM32\DLLHST3G.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8192
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bca53 - Tue Jul 14 01:59:15 2009
    Module Checksum      = 0x00006c1c
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [dllhst3g.pdb]
    Module PDB Guid = {88CC00B9-CCDE-45AA-BF92-47C06E7D2F42}
    Module PDB Age = 0x1

Module[ 84] [C:\WINDOWS\SYSTEM32\DNSCACHEUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DNSCache Unattend Generic Command
  Product Version:   (6.1:7600.16772)
  File Version:      (6.1:7600.16772)
  File Size (bytes): 30208
  File Date:         Do Mrz 03 07:14:38 2011
    Module TimeDateStamp = 0x4d6f158c - Thu Mar 03 05:14:04 2011
    Module Checksum      = 0x000103a7
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [dnscacheugc.pdb]
    Module PDB Guid = {0DB01666-F58E-4DE4-9ED0-77844DFA2C16}
    Module PDB Age = 0x1

Module[ 85] [C:\WINDOWS\SYSTEM32\DOSKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm für den Tastaturverlauf
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18944
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x00012be9
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [doskey.pdb]
    Module PDB Guid = {A5E4A844-587E-4CFC-AA54-19E85628BF57}
    Module PDB Age = 0x1

Module[ 86] [C:\WINDOWS\SYSTEM32\DPAPIMIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DPAPI-Schlüsselmigrations-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 74752
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bc7fe - Tue Jul 14 01:49:18 2009
    Module Checksum      = 0x000143cc
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [dpapimig.pdb]
    Module PDB Guid = {ADC4D5AF-DD1B-4E1A-B3C9-8EE349F27107}
    Module PDB Age = 0x1

Module[ 87] [C:\WINDOWS\SYSTEM32\DPISCALING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerungsoption "Bildschirm"
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 77312
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bc9a0 - Tue Jul 14 01:56:16 2009
    Module Checksum      = 0x0001e714
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [DpiScaling.pdb]
    Module PDB Guid = {EF2C8847-31D3-40E3-8263-7BC40075F023}
    Module PDB Age = 0x1

Module[ 88] [C:\WINDOWS\SYSTEM32\DPNSVR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft DirectPlay8-Server
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34304
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bcf36 - Tue Jul 14 02:20:06 2009
    Module Checksum      = 0x000143db
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [dpnsvr.pdb]
    Module PDB Guid = {8110CA21-6EB0-4018-9047-B298B03DC230}
    Module PDB Age = 0x1

Module[ 89] [C:\WINDOWS\SYSTEM32\DRIVERQUERY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberabfrage eines Systems
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 96256
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bc263 - Tue Jul 14 01:25:23 2009
    Module Checksum      = 0x00023c50
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [drvqry.pdb]
    Module PDB Guid = {8F9003B6-218E-4CD2-B481-ED7663BDEB3A}
    Module PDB Age = 0x1

Module[ 90] [C:\WINDOWS\SYSTEM32\DRVINST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberinstallationsmodul
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 102912
  File Date:         Di Jul 14 02:39:07 2009
    Module TimeDateStamp = 0x4a5bc2c6 - Tue Jul 14 01:27:02 2009
    Module Checksum      = 0x0001ef72
    Module SizeOfImage   = 0x0001d000
  Module Pointer to PDB = [DrvInst.pdb]
    Module PDB Guid = {724DD8A6-8A4E-4CBE-8ABB-E46ED729B1BC}
    Module PDB Age = 0x1

Module[ 91] [C:\WINDOWS\SYSTEM32\DVDPLAY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  dvdplay placeholder Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11264
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bced9 - Tue Jul 14 02:18:33 2009
    Module Checksum      = 0x00012af9
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [dvdplay.pdb]
    Module PDB Guid = {917CEFE0-1981-459F-B6A7-CA19A66690B4}
    Module PDB Age = 0x1

Module[ 92] [C:\WINDOWS\SYSTEM32\DVDUPGRD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DVD-Upgrade
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bcedd - Tue Jul 14 02:18:37 2009
    Module Checksum      = 0x0000f46e
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [dvdupgrd.pdb]
    Module PDB Guid = {DAFA8D78-6176-444A-B64B-45B1A7C7A0A5}
    Module PDB Age = 0x1

Module[ 93] [C:\WINDOWS\SYSTEM32\DWM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Desktopfenster-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 120320
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bc541 - Tue Jul 14 01:37:37 2009
    Module Checksum      = 0x0002274c
    Module SizeOfImage   = 0x00023000
  Module Pointer to PDB = [dwm.pdb]
    Module PDB Guid = {4D8CE4A9-64BB-4783-BFB2-F446D13DAF45}
    Module PDB Age = 0x2

Module[ 94] [C:\WINDOWS\SYSTEM32\DWWIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Watson Client
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 152576
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x00032e8b
    Module SizeOfImage   = 0x00028000
  Module Pointer to PDB = [dwwin.pdb]
    Module PDB Guid = {8F13B25B-0C41-4CA9-B539-AD3D549D3A2F}
    Module PDB Age = 0x1

Module[ 95] [C:\WINDOWS\SYSTEM32\DXDIAG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft DirectX-Diagnoseprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 343552
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bc64d - Tue Jul 14 01:42:05 2009
    Module Checksum      = 0x00061353
    Module SizeOfImage   = 0x00059000
  Module Pointer to PDB = [dxdiag.pdb]
    Module PDB Guid = {7DF6FCD5-6CBB-4D14-B355-4497DB52D0BA}
    Module PDB Age = 0x1

Module[ 96] [C:\WINDOWS\SYSTEM32\DXPSERVER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Device Stage Platform-Server
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 265216
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bcf86 - Tue Jul 14 02:21:26 2009
    Module Checksum      = 0x0004b081
    Module SizeOfImage   = 0x00044000
  Module Pointer to PDB = [DXPServer.pdb]
    Module PDB Guid = {CC57BF6A-6460-4DB4-8355-CB9577E71FDF}
    Module PDB Age = 0x1

Module[ 97] [C:\WINDOWS\SYSTEM32\EAP3HOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eap Third Party Surrogate Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11776
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bcd5f - Tue Jul 14 02:12:15 2009
    Module Checksum      = 0x0000f249
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [Eap3Host.pdb]
    Module PDB Guid = {A517D516-D00A-4F92-A61A-F10B6347FF6F}
    Module PDB Age = 0x1

Module[ 98] [C:\WINDOWS\SYSTEM32\EFSUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  EFS UI Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12800
  File Date:         Di Jul 14 02:39:08 2009
    Module TimeDateStamp = 0x4a5bc83f - Tue Jul 14 01:50:23 2009
    Module Checksum      = 0x00005efa
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [efsui.pdb]
    Module PDB Guid = {4FB60688-EBAF-483B-A498-F958FB93BB29}
    Module PDB Age = 0x1

Module[ 99] [C:\WINDOWS\SYSTEM32\EHSTORAUTHN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Kennwortauthentifizierungsprogramm für erweitertes Speichern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 140288
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bcad1 - Tue Jul 14 02:01:21 2009
    Module Checksum      = 0x0002a43a
    Module SizeOfImage   = 0x00026000
  Module Pointer to PDB = [EhStorAuthn.pdb]
    Module PDB Guid = {8F1ACC6C-FD0E-4427-A1EB-4BE0A7CC7A5D}
    Module PDB Age = 0x1

Module[100] [C:\WINDOWS\SYSTEM32\ESCUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IE ESC 7.0 Unattended Install Utility
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 12288
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bca25 - Tue Jul 14 01:58:29 2009
    Module Checksum      = 0x0000948b
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [escUnattend.pdb]
    Module PDB Guid = {BC35A9BB-41F8-4EF6-97FB-E0C89E1FBCD9}
    Module PDB Age = 0x1

Module[101] [C:\WINDOWS\SYSTEM32\ESENTUTL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extensible Storage Engine Utilities for Microsoft(R) Windows(R)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 139264
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bc7f3 - Tue Jul 14 01:49:07 2009
    Module Checksum      = 0x0002e43c
    Module SizeOfImage   = 0x00045000
  Module Pointer to PDB = [esentutl.pdb]
    Module PDB Guid = {580C4FA2-3B26-49A0-9913-4D460A4DBC99}
    Module PDB Age = 0x1

Module[102] [C:\WINDOWS\SYSTEM32\EVENTCREATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Event Create - Erstellt ein benutzerdefiniertes Ereignis für ein Ereignisprotokoll.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 45056
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bc7bc - Tue Jul 14 01:48:12 2009
    Module Checksum      = 0x00017e21
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [evcreate.pdb]
    Module PDB Guid = {5FC45E8A-261F-4761-9CB3-19DE744E0506}
    Module PDB Age = 0x1

Module[103] [C:\WINDOWS\SYSTEM32\EVENTVWR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Startprogramm für Ereignisanzeige-Snap-In
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bc731 - Tue Jul 14 01:45:53 2009
    Module Checksum      = 0x0001f906
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [eventvwr.pdb]
    Module PDB Guid = {7EEBB27D-FCC7-498C-A208-C239E8736886}
    Module PDB Age = 0x1

Module[104] [C:\WINDOWS\SYSTEM32\EXPAND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  LZ-Expandierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 65536
  File Date:         Di Jul 14 02:39:09 2009
    Module TimeDateStamp = 0x4a5bc18a - Tue Jul 14 01:21:46 2009
    Module Checksum      = 0x0001ca67
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [expand.pdb]
    Module PDB Guid = {3A762D7B-14CF-4F17-86B7-F666563B81F8}
    Module PDB Age = 0x1

Module[105] [C:\WINDOWS\SYSTEM32\EXTRAC32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® CAB-Dekomprimierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62464
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc18a - Tue Jul 14 01:21:46 2009
    Module Checksum      = 0x0001901b
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [extrac32.pdb]
    Module PDB Guid = {87D0EF82-6893-46AC-BAA2-B9459F4ADAF1}
    Module PDB Age = 0x1

Module[106] [C:\WINDOWS\SYSTEM32\FC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Vergleichen von DOS 5-Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x00010b5c
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [fc.pdb]
    Module PDB Guid = {E6BB6C3E-9C5B-48BD-BF12-78E04E0B003D}
    Module PDB Age = 0x1

Module[107] [C:\WINDOWS\SYSTEM32\FIND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Zeichenfolgensuche (grep)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15872
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x000048b0
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [find.pdb]
    Module PDB Guid = {D76549E2-D969-4297-BAC0-386B32805FAB}
    Module PDB Age = 0x1

Module[108] [C:\WINDOWS\SYSTEM32\FINDSTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm "Find String" (QGREP)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 70656
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc264 - Tue Jul 14 01:25:24 2009
    Module Checksum      = 0x0001e3df
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [findstr.pdb]
    Module PDB Guid = {1289BF42-B496-4099-A565-FA4060589D97}
    Module PDB Age = 0x2

Module[109] [C:\WINDOWS\SYSTEM32\FINGER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl Finger
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11264
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bccfd - Tue Jul 14 02:10:37 2009
    Module Checksum      = 0x00006a19
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [finger.pdb]
    Module PDB Guid = {93836F9C-8796-443F-9180-EAD511F4132F}
    Module PDB Age = 0x1

Module[110] [C:\WINDOWS\SYSTEM32\FIXMAPI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  FIXMAPI 1.0 MAPI Repair Tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bd15a - Tue Jul 14 02:29:14 2009
    Module Checksum      = 0x0000b58e
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [fixmapi.pdb]
    Module PDB Guid = {521F459D-223E-4776-A459-9E990BCAB1D8}
    Module PDB Age = 0x1

Module[111] [C:\WINDOWS\SYSTEM32\FLTMC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Filter-Manager-Steuerungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc1f9 - Tue Jul 14 01:23:37 2009
    Module Checksum      = 0x0000c6e3
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [fltMC.pdb]
    Module PDB Guid = {C91E9F82-432B-4F93-A6CA-474787FF7267}
    Module PDB Age = 0x1

Module[112] [C:\WINDOWS\SYSTEM32\FONTVIEW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Schriftartenanzeige
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 109056
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc9c0 - Tue Jul 14 01:56:48 2009
    Module Checksum      = 0x00028dbb
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [fontview.pdb]
    Module PDB Guid = {43835EC2-98BD-4B3F-A498-77C635362D57}
    Module PDB Age = 0x1

Module[113] [C:\WINDOWS\SYSTEM32\FORFILES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ForFiles - Führt einen Befehl auf ausgewählten Dateien aus.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 51712
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc273 - Tue Jul 14 01:25:39 2009
    Module Checksum      = 0x0001b4dc
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [forfiles.pdb]
    Module PDB Guid = {3087F33B-F96A-4865-AC39-93EC45872392}
    Module PDB Age = 0x1

Module[114] [C:\WINDOWS\SYSTEM32\FSUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  fsutil.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 96256
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x000272ce
    Module SizeOfImage   = 0x0001c000
  Module Pointer to PDB = [fsutil.pdb]
    Module PDB Guid = {55174ABC-CE46-425C-9F78-4F1486FD68DD}
    Module PDB Age = 0x1

Module[115] [C:\WINDOWS\SYSTEM32\FTP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Dateiübertragung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 48128
  File Date:         Di Jul 14 02:39:10 2009
    Module TimeDateStamp = 0x4a5bcd03 - Tue Jul 14 02:10:43 2009
    Module Checksum      = 0x0000f814
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [ftp.pdb]
    Module PDB Guid = {29C431A0-16DC-49FE-A558-D356FCE6BC90}
    Module PDB Age = 0x1

Module[116] [C:\WINDOWS\SYSTEM32\GETMAC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt NIC-MAC-Informationen an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 89600
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc7bf - Tue Jul 14 01:48:15 2009
    Module Checksum      = 0x0001df69
    Module SizeOfImage   = 0x00019000
  Module Pointer to PDB = [getmac.pdb]
    Module PDB Guid = {60B57940-E7E7-4E71-95C7-1D7C2695F96D}
    Module PDB Age = 0x1

Module[117] [C:\WINDOWS\SYSTEM32\GPRESULT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gruppenrichtlinien-RSOP-Datenabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 166912
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc93c - Tue Jul 14 01:54:36 2009
    Module Checksum      = 0x00038b8a
    Module SizeOfImage   = 0x0002c000
  Module Pointer to PDB = [gprslt.pdb]
    Module PDB Guid = {3F06BF14-8D59-4437-AE65-A3BA23E6A8F3}
    Module PDB Age = 0x1

Module[118] [C:\WINDOWS\SYSTEM32\GPSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Group Policy Script Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25600
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc929 - Tue Jul 14 01:54:17 2009
    Module Checksum      = 0x000162f6
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [gpscript.pdb]
    Module PDB Guid = {651AE56C-E20E-4942-98A8-8BA094D6AA53}
    Module PDB Age = 0x1

Module[119] [C:\WINDOWS\SYSTEM32\GPUPDATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Grupppenrichtlinien-Aktualisierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc941 - Tue Jul 14 01:54:41 2009
    Module Checksum      = 0x0000cada
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [gpupdate.pdb]
    Module PDB Guid = {86680554-BFBB-4918-9A01-8D446E56D76B}
    Module PDB Age = 0x1

Module[120] [C:\WINDOWS\SYSTEM32\GRPCONV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konvertierung für Windows-Programmgruppen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18432
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc993 - Tue Jul 14 01:56:03 2009
    Module Checksum      = 0x0000c001
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [grpconv.pdb]
    Module PDB Guid = {1BC9F6C3-160B-4FBF-BD33-439A8BC82A28}
    Module PDB Age = 0x1

Module[121] [C:\WINDOWS\SYSTEM32\HDWWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hardware-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 64000
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc2c4 - Tue Jul 14 01:27:00 2009
    Module Checksum      = 0x00019621
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [HdwWiz.pdb]
    Module PDB Guid = {52994BEA-647B-41C7-AFE1-CF60F36DB1C3}
    Module PDB Age = 0x1

Module[122] [C:\WINDOWS\SYSTEM32\HELP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfeprogramm zur Befehlseingabe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:11 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x00005b4a
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [help.pdb]
    Module PDB Guid = {23B74F9F-222D-4A1E-8318-EFFE7BF7DF89}
    Module PDB Age = 0x1

Module[123] [C:\WINDOWS\SYSTEM32\HOSTNAME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostnamen-APP
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9728
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bccfd - Tue Jul 14 02:10:37 2009
    Module Checksum      = 0x0000f807
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [hostname.pdb]
    Module PDB Guid = {2C80A97D-7D35-4A09-8550-512912D14896}
    Module PDB Age = 0x1

Module[124] [C:\WINDOWS\SYSTEM32\IASHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IAS Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bcc97 - Tue Jul 14 02:08:55 2009
    Module Checksum      = 0x0000ba1c
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [iashost.pdb]
    Module PDB Guid = {12202C6B-8B48-4FA5-BA28-056209C68D5E}
    Module PDB Age = 0x1

Module[125] [C:\WINDOWS\SYSTEM32\ICACLS.EXE] 
  Company Name:      Microsoft Corporation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34816
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bc274 - Tue Jul 14 01:25:40 2009
    Module Checksum      = 0x000159f6
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [icacls.pdb]
    Module PDB Guid = {C8D17AF0-930F-4CE2-8EAD-4B71B11E7431}
    Module PDB Age = 0x1

Module[126] [C:\WINDOWS\SYSTEM32\ICSUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ICS Unattend Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bcc80 - Tue Jul 14 02:08:32 2009
    Module Checksum      = 0x00005ca6
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [icsunattend.pdb]
    Module PDB Guid = {C08E98F8-F22B-40B8-A7A5-B55A17B74807}
    Module PDB Age = 0x1

Module[127] [C:\WINDOWS\SYSTEM32\IE4UINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IE-Hilfsprogramm für Pro-Benutzerinitalisierung
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 73728
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bca31 - Tue Jul 14 01:58:41 2009
    Module Checksum      = 0x0001e159
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [ie4uinit.pdb]
    Module PDB Guid = {3E101D14-73E1-4BC0-BDD9-F396644714C2}
    Module PDB Age = 0x1

Module[128] [C:\WINDOWS\SYSTEM32\IEUNATT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für unbeaufsichtigte Installation von IE 7.0
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 171008
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bca31 - Tue Jul 14 01:58:41 2009
    Module Checksum      = 0x0002a12a
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [ieUnAtt.pdb]
    Module PDB Guid = {93E4D010-4F41-46A2-9FED-B950878A5A36}
    Module PDB Age = 0x1

Module[129] [C:\WINDOWS\SYSTEM32\IEXPRESS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wizard
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 251904
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bca23 - Tue Jul 14 01:58:27 2009
    Module Checksum      = 0x0004a315
    Module SizeOfImage   = 0x00044000
  Module Pointer to PDB = [iexpress.pdb]
    Module PDB Guid = {0D2A9D26-4C0A-48B7-A772-19F726B5DF14}
    Module PDB Age = 0x1

Module[130] [C:\WINDOWS\SYSTEM32\INFDEFAULTINSTALL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  INF-Standardinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:13 2009
    Module TimeDateStamp = 0x4a5bc2b3 - Tue Jul 14 01:26:43 2009
    Module Checksum      = 0x0000aead
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [InfDefaultInstall.pdb]
    Module PDB Guid = {87A3D88E-F824-45BD-B5AA-501B02A2A847}
    Module PDB Age = 0x1

Module[131] [C:\WINDOWS\SYSTEM32\IPCONFIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IP-Konfigurationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 58368
  File Date:         Di Jul 14 02:39:13 2009
    Module TimeDateStamp = 0x4a5bcd06 - Tue Jul 14 02:10:46 2009
    Module Checksum      = 0x000165f2
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [ipconfig.pdb]
    Module PDB Guid = {7B2C67E6-B86C-4863-A2C3-047AF73B053B}
    Module PDB Age = 0x1

Module[132] [C:\WINDOWS\SYSTEM32\ISCSICLI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  iSCSI-Ermittlungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 152064
  File Date:         Di Jul 14 02:39:13 2009
    Module TimeDateStamp = 0x4a5bcad4 - Tue Jul 14 02:01:24 2009
    Module Checksum      = 0x00027159
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [iscsicli.pdb]
    Module PDB Guid = {4D3C506F-5792-4131-BA75-E8F966CA5C1D}
    Module PDB Age = 0x1

Module[133] [C:\WINDOWS\SYSTEM32\ISCSICPL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft iSCSI-Initiatorkonfigurationstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 121344
  File Date:         Di Jul 14 02:39:13 2009
    Module TimeDateStamp = 0x4a5bcad3 - Tue Jul 14 02:01:23 2009
    Module Checksum      = 0x000209b5
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [iscsicpl.pdb]
    Module PDB Guid = {FDC10BC2-F7CF-46D2-A9DB-1E5C7C811940}
    Module PDB Age = 0x1

Module[134] [C:\WINDOWS\SYSTEM32\KLIST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Tool für die Verwaltung des Kerberos-Ticket-Cache
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bc85c - Tue Jul 14 01:50:52 2009
    Module Checksum      = 0x00013ae2
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [klist.pdb]
    Module PDB Guid = {278CE66A-D291-4B9A-89C2-8A86321C7BAE}
    Module PDB Age = 0x1

Module[135] [C:\WINDOWS\SYSTEM32\KSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Kerberos-Setuptool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bc863 - Tue Jul 14 01:50:59 2009
    Module Checksum      = 0x0000d8fc
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [ksetup.pdb]
    Module PDB Guid = {530D821F-2A4A-463B-B36E-5E96AD288D67}
    Module PDB Age = 0x1

Module[136] [C:\WINDOWS\SYSTEM32\KTMUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zur Kerneltransaktionsverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:14 2009
    Module TimeDateStamp = 0x4a5bc274 - Tue Jul 14 01:25:40 2009
    Module Checksum      = 0x00004f89
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [ktmutil.pdb]
    Module PDB Guid = {2A825858-8FA5-4232-9F45-0107C7B5DB2F}
    Module PDB Age = 0x1

Module[137] [C:\WINDOWS\SYSTEM32\KTPASS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Kerberos keytab tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 144896
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bc85e - Tue Jul 14 01:50:54 2009
    Module Checksum      = 0x0002a4e5
    Module SizeOfImage   = 0x00027000
  Module Pointer to PDB = [ktpass.pdb]
    Module PDB Guid = {E092C958-0FDB-4CF0-84B3-47FEB3A788A0}
    Module PDB Age = 0x1

Module[138] [C:\WINDOWS\SYSTEM32\LABEL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Datenträgerbeschriftung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:39:14 2009
    Module TimeDateStamp = 0x4a5bc262 - Tue Jul 14 01:25:22 2009
    Module Checksum      = 0x0000c56e
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [label.pdb]
    Module PDB Guid = {7242135B-817D-4AA8-BFC9-1DDFF82DB5EC}
    Module PDB Age = 0x1

Module[139] [C:\WINDOWS\SYSTEM32\LOCATOR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Rpc Locator
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:15 2009
    Module TimeDateStamp = 0x4a5bca51 - Tue Jul 14 01:59:13 2009
    Module Checksum      = 0x00007f90
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [locator.pdb]
    Module PDB Guid = {0E022498-BFF8-4F42-BBD5-B6CA570AA1D3}
    Module PDB Age = 0x1

Module[140] [C:\WINDOWS\SYSTEM32\LODCTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  PerfMon-Leistungsindikatoren laden
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50176
  File Date:         Di Jul 14 02:39:15 2009
    Module TimeDateStamp = 0x4a5bc3ca - Tue Jul 14 01:31:22 2009
    Module Checksum      = 0x000117a0
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [lodctr.pdb]
    Module PDB Guid = {7285EDA1-5774-4F39-AFCC-77EE59D6E545}
    Module PDB Age = 0x1

Module[141] [C:\WINDOWS\SYSTEM32\LOGMAN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Leistungsprotokollierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 103936
  File Date:         Di Jul 14 02:39:15 2009
    Module TimeDateStamp = 0x4a5bc3e0 - Tue Jul 14 01:31:44 2009
    Module Checksum      = 0x0001c61a
    Module SizeOfImage   = 0x0001d000
  Module Pointer to PDB = [logman.pdb]
    Module PDB Guid = {E7D6B32C-7D1C-42BE-8AD3-1D4E736B9EE0}
    Module PDB Age = 0x1

Module[142] [C:\WINDOWS\SYSTEM32\LOGOFF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Abmelden von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:39:15 2009
    Module TimeDateStamp = 0x4a5bce82 - Tue Jul 14 02:17:06 2009
    Module Checksum      = 0x00007e80
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [logoff.pdb]
    Module PDB Guid = {CE4A3B1F-486A-4EC7-955D-7048343B58B5}
    Module PDB Age = 0x1

Module[143] [C:\WINDOWS\SYSTEM32\LOGONUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Logon User Interface Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27648
  File Date:         Di Jul 14 02:39:15 2009
    Module TimeDateStamp = 0x4a5bc8ba - Tue Jul 14 01:52:26 2009
    Module Checksum      = 0x0000d840
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [logonui.pdb]
    Module PDB Guid = {9E350E9D-E5C3-4D1F-AA12-7C23C5A69332}
    Module PDB Age = 0x1

Module[144] [C:\WINDOWS\SYSTEM32\LPKSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sprachpaketinstaller
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 652800
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bc9cd - Tue Jul 14 01:57:01 2009
    Module Checksum      = 0x000a00a6
    Module SizeOfImage   = 0x000a6000
  Module Pointer to PDB = [lpksetup.pdb]
    Module PDB Guid = {FC339145-C67F-4BDD-9FF9-C6CADA9B62C2}
    Module PDB Age = 0x1

Module[145] [C:\WINDOWS\SYSTEM32\LPREMOVE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  MUI-Sprachpaket - Bereinigung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 71168
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bc9bc - Tue Jul 14 01:56:44 2009
    Module Checksum      = 0x00017288
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [lpremove.pdb]
    Module PDB Guid = {9D60D524-11E3-4D54-83DC-458608BBE5DD}
    Module PDB Age = 0x1

Module[146] [C:\WINDOWS\SYSTEM32\LSASS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Local Security Authority Process
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bc155 - Tue Jul 14 01:20:53 2009
    Module Checksum      = 0x000151dc
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [lsass.pdb]
    Module PDB Guid = {4DC3E910-ADAC-4093-8BF5-70A149C1F30A}
    Module PDB Age = 0x2

Module[147] [C:\WINDOWS\SYSTEM32\LSM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Lokaler Sitzungs-Manager-Dienst
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 333312
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bce9c - Tue Jul 14 02:17:32 2009
    Module Checksum      = 0x0005e338
    Module SizeOfImage   = 0x00054000
  Module Pointer to PDB = [lsm.pdb]
    Module PDB Guid = {C01B4C8B-616E-483F-B193-4E484AC0D189}
    Module PDB Age = 0x2

Module[148] [C:\WINDOWS\SYSTEM32\MAGNIFY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft-Bildschirmlupe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 652800
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bd26d - Tue Jul 14 02:33:49 2009
    Module Checksum      = 0x000a3d84
    Module SizeOfImage   = 0x000a2000
  Module Pointer to PDB = [Magnify.pdb]
    Module PDB Guid = {4845A5B0-618D-442C-9F1F-8470D1417823}
    Module PDB Age = 0x1

Module[149] [C:\WINDOWS\SYSTEM32\MAKECAB.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Cabinet Maker
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 117248
  File Date:         Di Jul 14 02:39:16 2009
    Module TimeDateStamp = 0x4a5bc17e - Tue Jul 14 01:21:34 2009
    Module Checksum      = 0x00020241
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [makecab.pdb]
    Module PDB Guid = {55726A32-A1E3-4D50-A365-C406F13DA594}
    Module PDB Age = 0x1

Module[150] [C:\WINDOWS\SYSTEM32\MCBUILDER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Resource cache builder tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 349184
  File Date:         Di Jul 14 02:39:17 2009
    Module TimeDateStamp = 0x4a5bc1c4 - Tue Jul 14 01:22:44 2009
    Module Checksum      = 0x0005f03b
    Module SizeOfImage   = 0x0005b000
  Module Pointer to PDB = [mcbuilder.pdb]
    Module PDB Guid = {F35D7756-F155-4843-9D77-64D6B81BC2E3}
    Module PDB Age = 0x1

Module[151] [C:\WINDOWS\SYSTEM32\MDRES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Speicherdiagnose
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 88576
  File Date:         Di Jul 14 02:39:17 2009
    Module TimeDateStamp = 0x4a5bc41a - Tue Jul 14 01:32:42 2009
    Module Checksum      = 0x0001958d
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [mdres.pdb]
    Module PDB Guid = {6CE10A1A-CBD4-498F-8040-CCC50E6887C9}
    Module PDB Age = 0x1

Module[152] [C:\WINDOWS\SYSTEM32\MDSCHED.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Speicherdiagnosetool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 146944
  File Date:         Di Jul 14 02:39:17 2009
    Module TimeDateStamp = 0x4a5bc41a - Tue Jul 14 01:32:42 2009
    Module Checksum      = 0x000324e4
    Module SizeOfImage   = 0x00027000
  Module Pointer to PDB = [mdsched.pdb]
    Module PDB Guid = {B547CBD4-26F9-4023-B563-300F5E2CF35A}
    Module PDB Age = 0x1

Module[153] [C:\WINDOWS\SYSTEM32\MMC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Management Console
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 2144256
  File Date:         Di Jul 14 02:39:19 2009
    Module TimeDateStamp = 0x4a5bc808 - Tue Jul 14 01:49:28 2009
    Module Checksum      = 0x002161d2
    Module SizeOfImage   = 0x00210000
  Module Pointer to PDB = [mmc.pdb]
    Module PDB Guid = {3AE943E2-6F0C-491D-968E-1708199DAEB0}
    Module PDB Age = 0x2

Module[154] [C:\WINDOWS\SYSTEM32\MOUNTVOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Volume-Bereitstellungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:39:20 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x0000e9dd
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [mountvol.pdb]
    Module PDB Guid = {CFD58242-45E2-40FA-9961-AF4295958768}
    Module PDB Age = 0x1

Module[155] [C:\WINDOWS\SYSTEM32\MPNOTIFY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows NT Multiple Provider Notification Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:39:20 2009
    Module TimeDateStamp = 0x4a5bc8bd - Tue Jul 14 01:52:29 2009
    Module Checksum      = 0x00011452
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [mpnotify.pdb]
    Module PDB Guid = {C0B15193-3A47-4C11-927C-E0E99A453FD5}
    Module PDB Age = 0x1

Module[156] [C:\WINDOWS\SYSTEM32\MRINFO.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Multicastinformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12800
  File Date:         Di Jul 14 02:39:20 2009
    Module TimeDateStamp = 0x4a5bcd00 - Tue Jul 14 02:10:40 2009
    Module Checksum      = 0x00003cfa
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [mrinfo.pdb]
    Module PDB Guid = {7579947B-AE56-42A6-8125-5FCFD3A09A60}
    Module PDB Age = 0x1

Module[157] [C:\WINDOWS\SYSTEM32\MRT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows-Tool zum Entfernen bösartiger Software
  Product Version:   (3.20:5000.0)
  File Version:      (3.20:5000.0)
  File Size (bytes): 49454024
  File Date:         Fr Jun 03 17:30:04 2011
    Module TimeDateStamp = 0x4de98991 - Sat Jun 04 03:25:37 2011
    Module Checksum      = 0x02f37266
    Module SizeOfImage   = 0x02f2c000
  Module Pointer to PDB = [mrt.pdb]
    Module PDB Guid = {20ED09EC-52C2-4EF9-852F-01B5EC4E595A}
    Module PDB Age = 0x1

Module[158] [C:\WINDOWS\SYSTEM32\MSCONFIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemkonfigurationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 300032
  File Date:         Di Jul 14 02:39:20 2009
    Module TimeDateStamp = 0x4a5bc3eb - Tue Jul 14 01:31:55 2009
    Module Checksum      = 0x0005151d
    Module SizeOfImage   = 0x0004d000
  Module Pointer to PDB = [msconfig.pdb]
    Module PDB Guid = {8588D365-D92C-441D-B390-B69324A18540}
    Module PDB Age = 0x1

Module[159] [C:\WINDOWS\SYSTEM32\MSDT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent für Problembehandlung per Diagnose
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1076736
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bc3f8 - Tue Jul 14 01:32:08 2009
    Module Checksum      = 0x00115a50
    Module SizeOfImage   = 0x0010d000
  Module Pointer to PDB = [msdt.pdb]
    Module PDB Guid = {57266F08-0DDD-4409-AFD7-446D81040CD9}
    Module PDB Age = 0x1

Module[160] [C:\WINDOWS\SYSTEM32\MSDTC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Distributed Transaction Coordinator-Dienst
  Product Version:   (6.1:7600.16385)
  File Version:      (2001.12:8530.16385)
  File Size (bytes): 141824
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bca5a - Tue Jul 14 01:59:22 2009
    Module Checksum      = 0x0002ebfb
    Module SizeOfImage   = 0x00028000
  Module Pointer to PDB = [msdtcexe.pdb]
    Module PDB Guid = {F9F76BDC-096D-4AFE-B18A-27FEFDFD6A24}
    Module PDB Age = 0x1

Module[161] [C:\WINDOWS\SYSTEM32\MSFEEDSSYNC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Feeds Synchronization
  Product Version:   (8.0:7600.16800)
  File Version:      (8.0:7600.16800)
  File Size (bytes): 12288
  File Date:         Fr Apr 22 21:09:52 2011
    Module TimeDateStamp = 0x4db1c422 - Fri Apr 22 20:08:34 2011
    Module Checksum      = 0x00005273
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [msfeedssync.pdb]
    Module PDB Guid = {BE10298F-A8AD-4FBA-AB5C-90237D45C2ED}
    Module PDB Age = 0x1

Module[162] [C:\WINDOWS\SYSTEM32\MSG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Nachrichtendienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bce83 - Tue Jul 14 02:17:07 2009
    Module Checksum      = 0x000094c1
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [msg.pdb]
    Module PDB Guid = {D1A5E38C-CAC9-4044-A922-583BC4F2DF43}
    Module PDB Age = 0x1

Module[163] [C:\WINDOWS\SYSTEM32\MSHTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft (R)-HTML-Anwendungshost
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 43520
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bca0e - Tue Jul 14 01:58:06 2009
    Module Checksum      = 0x0001811e
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [mshta.pdb]
    Module PDB Guid = {43D973DA-CA3B-4446-9207-4B6C33429E54}
    Module PDB Age = 0x1

Module[164] [C:\WINDOWS\SYSTEM32\MSIEXEC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows® Installer
  Product Version:   (5.0:7600.16385)
  File Version:      (5.0:7600.16385)
  File Size (bytes): 127488
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bc7bd - Tue Jul 14 01:48:13 2009
    Module Checksum      = 0x0002c75a
    Module SizeOfImage   = 0x00024000
  Module Pointer to PDB = [msiexec.pdb]
    Module PDB Guid = {36A0E50A-DE02-450A-9BEF-28723CC5152A}
    Module PDB Age = 0x1

Module[165] [C:\WINDOWS\SYSTEM32\MSINFO32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systeminformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 378880
  File Date:         Di Jul 14 02:39:21 2009
    Module TimeDateStamp = 0x4a5bc3ea - Tue Jul 14 01:31:54 2009
    Module Checksum      = 0x0005db69
    Module SizeOfImage   = 0x00064000
  Module Pointer to PDB = [msinfo32.pdb]
    Module PDB Guid = {DDA84881-7DF7-4822-A0D8-8FBB38DC3619}
    Module PDB Age = 0x1

Module[166] [C:\WINDOWS\SYSTEM32\MSPAINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Paint
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 6676480
  File Date:         Di Jul 14 02:39:24 2009
    Module TimeDateStamp = 0x4a5bca29 - Tue Jul 14 01:58:33 2009
    Module Checksum      = 0x0066b77b
    Module SizeOfImage   = 0x00661000
  Module Pointer to PDB = [mspaint.pdb]
    Module PDB Guid = {811B1B09-BA42-4783-8A85-9E3C334EA883}
    Module PDB Age = 0x2

Module[167] [C:\WINDOWS\SYSTEM32\MSTSC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Remotedesktopverbindung
  Product Version:   (6.1:7600.16722)
  File Version:      (6.1:7600.16722)
  File Size (bytes): 1097216
  File Date:         Sa Dez 18 07:08:15 2010
    Module TimeDateStamp = 0x4d0c3a18 - Sat Dec 18 05:35:36 2010
    Module Checksum      = 0x0011a190
    Module SizeOfImage   = 0x00110000
  Module Pointer to PDB = [mstsc.pdb]
    Module PDB Guid = {CD11AA7B-6DD4-4630-AC36-C3BB07C094B2}
    Module PDB Age = 0x1

Module[168] [C:\WINDOWS\SYSTEM32\MTSTOCOM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM+
  Product Version:   (6.1:7600.16385)
  File Version:      (2001.12:8530.16385)
  File Size (bytes): 133632
  File Date:         Di Jul 14 02:39:24 2009
    Module TimeDateStamp = 0x4a5bca69 - Tue Jul 14 01:59:37 2009
    Module Checksum      = 0x00020e3e
    Module SizeOfImage   = 0x0002c000
  Module Pointer to PDB = [mtstocom.pdb]
    Module PDB Guid = {FB15358E-5947-403E-826B-0F6B3D951870}
    Module PDB Age = 0x1

Module[169] [C:\WINDOWS\SYSTEM32\MUIUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  MUI unattend action
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 83456
  File Date:         Di Jul 14 02:39:24 2009
    Module TimeDateStamp = 0x4a5bc1c4 - Tue Jul 14 01:22:44 2009
    Module Checksum      = 0x0001e27d
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [MUIUnattend.pdb]
    Module PDB Guid = {04B34ED2-7471-44D8-9AF8-09B7A8C0CF3D}
    Module PDB Age = 0x1

Module[170] [C:\WINDOWS\SYSTEM32\NAPSTAT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Netzwerkzugriffschutz-Client-UI
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 329728
  File Date:         Di Jul 14 02:39:24 2009
    Module TimeDateStamp = 0x4a5bcc53 - Tue Jul 14 02:07:47 2009
    Module Checksum      = 0x000567ab
    Module SizeOfImage   = 0x00055000
  Module Pointer to PDB = [napstat.pdb]
    Module PDB Guid = {FF7ECFAD-FA45-4BD3-8DEA-A27AA67A716A}
    Module PDB Age = 0x2

Module[171] [C:\WINDOWS\SYSTEM32\NARRATOR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Narrator
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1073152
  File Date:         Di Jul 14 02:51:22 2009
    Module TimeDateStamp = 0x4a5ba6bf - Mon Jul 13 23:27:27 2009
    Module Checksum      = 0x0010b20c
    Module SizeOfImage   = 0x00108000
  Module Pointer to PDB = [Narrator.pdb]
    Module PDB Guid = {AF8832AB-E70E-44B1-A4D1-DC23D3647E49}
    Module PDB Age = 0x1

Module[172] [C:\WINDOWS\SYSTEM32\NBTSTAT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-NetBIOS-Informationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17920
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bcca0 - Tue Jul 14 02:09:04 2009
    Module Checksum      = 0x0000c428
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [nbtstat.pdb]
    Module PDB Guid = {7E13644A-E2E4-47CB-ADF5-5C51116F71D7}
    Module PDB Age = 0x1

Module[173] [C:\WINDOWS\SYSTEM32\NDADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gerätetreiberinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 74752
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc2c4 - Tue Jul 14 01:27:00 2009
    Module Checksum      = 0x0002020b
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [NDAdmin.pdb]
    Module PDB Guid = {E37C0046-7E46-4467-BD62-56F2DADDA025}
    Module PDB Age = 0x1

Module[174] [C:\WINDOWS\SYSTEM32\NET.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Net Command
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 55808
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc903 - Tue Jul 14 01:53:39 2009
    Module Checksum      = 0x0001b8f3
    Module SizeOfImage   = 0x0001c000
  Module Pointer to PDB = [net.pdb]
    Module PDB Guid = {9C9BD306-17E5-4ACC-9273-F5CD8106FA91}
    Module PDB Age = 0x1

Module[175] [C:\WINDOWS\SYSTEM32\NET1.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Net Command
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 152064
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc90c - Tue Jul 14 01:53:48 2009
    Module Checksum      = 0x000265f1
    Module SizeOfImage   = 0x00033000
  Module Pointer to PDB = [net1.pdb]
    Module PDB Guid = {9023DE12-1F3B-482B-BF6C-1DA09C14BF42}
    Module PDB Age = 0x1

Module[176] [C:\WINDOWS\SYSTEM32\NETBTUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner NetBT-Befehl für unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25088
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bcca4 - Tue Jul 14 02:09:08 2009
    Module Checksum      = 0x00015cf2
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [netbtugc.pdb]
    Module PDB Guid = {235FCEA0-E0CF-4A98-B00B-44FDF561EECC}
    Module PDB Age = 0x1

Module[177] [C:\WINDOWS\SYSTEM32\NETCFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  WinPE network installer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 32256
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc35e - Tue Jul 14 01:29:34 2009
    Module Checksum      = 0x0000b36a
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [netcfg.pdb]
    Module PDB Guid = {09ED5840-7F87-45CF-9613-BAF4C7C22536}
    Module PDB Age = 0x1

Module[178] [C:\WINDOWS\SYSTEM32\NETDOM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  NETDOM5
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 90624
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bc907 - Tue Jul 14 01:53:43 2009
    Module Checksum      = 0x0001def2
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [netdom.pdb]
    Module PDB Guid = {34E5BBDA-CBC9-4BFB-BE99-A7101957AC10}
    Module PDB Age = 0x1

Module[179] [C:\WINDOWS\SYSTEM32\NETIOUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner Netio-Befehl für unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26624
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bccc2 - Tue Jul 14 02:09:38 2009
    Module Checksum      = 0x0000a5ed
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [netiougc.pdb]
    Module PDB Guid = {E714744B-0656-487F-AA21-90F478AC63FF}
    Module PDB Age = 0x1

Module[180] [C:\WINDOWS\SYSTEM32\NETPLWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerung für erweiterte Benutzerkonten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc970 - Tue Jul 14 01:55:28 2009
    Module Checksum      = 0x0000d80b
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [netplwiz.pdb]
    Module PDB Guid = {8C58255C-9400-426D-9D2D-951A579946E9}
    Module PDB Age = 0x1

Module[181] [C:\WINDOWS\SYSTEM32\NETSH.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Netzwerkbefehlsshell
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 87040
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bcce0 - Tue Jul 14 02:10:08 2009
    Module Checksum      = 0x0001bf8e
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [netsh.pdb]
    Module PDB Guid = {5133F94C-5A7D-4351-ABBD-C7EE08021319}
    Module PDB Age = 0x1

Module[182] [C:\WINDOWS\SYSTEM32\NETSTAT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Netstat-Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31744
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bccff - Tue Jul 14 02:10:39 2009
    Module Checksum      = 0x00008ed6
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [netstat.pdb]
    Module PDB Guid = {90C69D34-6422-4E75-9F82-ECDD8D69666C}
    Module PDB Age = 0x1

Module[183] [C:\WINDOWS\SYSTEM32\NEWDEV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gerätetreiberinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 76288
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc2c4 - Tue Jul 14 01:27:00 2009
    Module Checksum      = 0x0001589d
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [NewDev.pdb]
    Module PDB Guid = {FC665FF2-A29B-40F4-8FE3-701E0A194B94}
    Module PDB Age = 0x1

Module[184] [C:\WINDOWS\SYSTEM32\NFSCONFIGGUIDE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Services for NFS Configuration Guide
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 184320
  File Date:         Di Jul 14 02:47:16 2009
    Module TimeDateStamp = 0x4a5ba1cd - Mon Jul 13 23:06:21 2009
    Module Checksum      = 0x00031afb
    Module SizeOfImage   = 0x00030000
  Module Pointer to PDB = [NfsConfigGuide.pdb]
    Module PDB Guid = {C1DB4E5D-24E9-4DDC-8EFC-0E2DFB18B4F8}
    Module PDB Age = 0x1

Module[185] [C:\WINDOWS\SYSTEM32\NLTEST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Logon Server Test Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 395776
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bc8ff - Tue Jul 14 01:53:35 2009
    Module Checksum      = 0x0006ee62
    Module SizeOfImage   = 0x0006d000
  Module Pointer to PDB = [nltest.pdb]
    Module PDB Guid = {00DB74A6-BF51-4AD6-B3F9-78432E2003CD}
    Module PDB Age = 0x1

Module[186] [C:\WINDOWS\SYSTEM32\NOTEPAD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 193536
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc9b3 - Tue Jul 14 01:56:35 2009
    Module Checksum      = 0x0003e749
    Module SizeOfImage   = 0x00035000
  Module Pointer to PDB = [notepad.pdb]
    Module PDB Guid = {36CFD5F9-888C-4483-B522-B9DB242D8478}
    Module PDB Age = 0x2

Module[187] [C:\WINDOWS\SYSTEM32\NSLOOKUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  nslookup
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 97280
  File Date:         Di Jul 14 02:39:25 2009
    Module TimeDateStamp = 0x4a5bc931 - Tue Jul 14 01:54:25 2009
    Module Checksum      = 0x00025b56
    Module SizeOfImage   = 0x00024000
  Module Pointer to PDB = [nslookup.pdb]
    Module PDB Guid = {B6A8DCF4-B36B-40C1-8A86-1D8DF58D2EA7}
    Module PDB Age = 0x1

Module[188] [C:\WINDOWS\SYSTEM32\NTOSKRNL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  NT Kernel & System
  Product Version:   (6.1:7600.20941)
  File Version:      (6.1:7600.20941)
  File Size (bytes): 5475712
  File Date:         Sa Apr 09 07:54:07 2011
    Module TimeDateStamp = 0x4d9fde78 - Sat Apr 09 06:20:08 2011
    Module Checksum      = 0x0053d996
    Module SizeOfImage   = 0x005d4000
  Module Pointer to PDB = [ntkrnlmp.pdb]
    Module PDB Guid = {4F4982CE-D808-4803-97DB-CCB7815FD28D}
    Module PDB Age = 0x2

Module[189] [C:\WINDOWS\SYSTEM32\NTPRINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Druckertreibersoftware-Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 61952
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bd3cc - Tue Jul 14 02:39:40 2009
    Module Checksum      = 0x00017c2d
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [NtPrint.pdb]
    Module PDB Guid = {E0B688E7-FE8B-4FED-8B1E-5EA566D97E4A}
    Module PDB Age = 0x1

Module[190] [C:\WINDOWS\SYSTEM32\OCSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Setup für optionale Komponenten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 186368
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bc4b8 - Tue Jul 14 01:35:20 2009
    Module Checksum      = 0x00030089
    Module SizeOfImage   = 0x00032000
  Module Pointer to PDB = [ocsetup.pdb]
    Module PDB Guid = {F590A6D9-6F24-4124-95C6-AC327F5CB8EB}
    Module PDB Age = 0x1

Module[191] [C:\WINDOWS\SYSTEM32\ODBCAD32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ODBC-Administrator
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 90112
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bd12d - Tue Jul 14 02:28:29 2009
    Module Checksum      = 0x0001f60d
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [odbcad32.pdb]
    Module PDB Guid = {4633791C-246B-4C5E-B0FF-25DE73B68683}
    Module PDB Age = 0x1

Module[192] [C:\WINDOWS\SYSTEM32\ODBCCONF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ODBC-Treiberkonfigurationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40960
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bd133 - Tue Jul 14 02:28:35 2009
    Module Checksum      = 0x00019e4d
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [odbcconf.pdb]
    Module PDB Guid = {F2281932-ACFE-4F64-975C-30FDDDE70571}
    Module PDB Age = 0x1

Module[193] [C:\WINDOWS\SYSTEM32\OOBE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Server Initial Configuration Tasks
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 106496
  File Date:         Di Jul 14 02:47:17 2009
    Module TimeDateStamp = 0x4a5ba911 - Mon Jul 13 23:37:21 2009
    Module Checksum      = 0x00027686
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [Oobe.pdb]
    Module PDB Guid = {D70D2EC2-BB63-4644-A3D3-82C3AEA19CED}
    Module PDB Age = 0x1

Module[194] [C:\WINDOWS\SYSTEM32\OPENFILES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt die Liste der aktuell geöffnete Dateien an
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 79872
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bc26f - Tue Jul 14 01:25:35 2009
    Module Checksum      = 0x000193e4
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [OpnFiles.pdb]
    Module PDB Guid = {AABECE1E-E747-4118-8468-08F2DD9623FF}
    Module PDB Age = 0x1

Module[195] [C:\WINDOWS\SYSTEM32\OSK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bildschirmtastatur für Barrierefreiheit
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 692736
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bd272 - Tue Jul 14 02:33:54 2009
    Module Checksum      = 0x000b55b0
    Module SizeOfImage   = 0x000ac000
  Module Pointer to PDB = [osk.pdb]
    Module PDB Guid = {2ADC1C42-D2D8-405D-9D68-A783B5B49D9D}
    Module PDB Age = 0x1

Module[196] [C:\WINDOWS\SYSTEM32\PATHPING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP PathPing-Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bcd00 - Tue Jul 14 02:10:40 2009
    Module Checksum      = 0x0000cf28
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [pathping.pdb]
    Module PDB Guid = {D1E4F1B2-72E6-4D57-B420-134AC9823AA2}
    Module PDB Age = 0x1

Module[197] [C:\WINDOWS\SYSTEM32\PCAUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Program Compatibility Assistant User Interface
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18432
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bc402 - Tue Jul 14 01:32:18 2009
    Module Checksum      = 0x0000d318
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [pcaui.pdb]
    Module PDB Guid = {D1651C12-75AE-4575-9F75-3588E364773D}
    Module PDB Age = 0x1

Module[198] [C:\WINDOWS\SYSTEM32\PCWRUN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Program Compatibility Troubleshooter Invoker
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:39:06 2009
    Module TimeDateStamp = 0x4a5bc3db - Tue Jul 14 01:31:39 2009
    Module Checksum      = 0x00013591
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [pcwrun.pdb]
    Module PDB Guid = {067744DE-E1BC-4F61-AC71-4BB354BA002E}
    Module PDB Age = 0x1

Module[199] [C:\WINDOWS\SYSTEM32\PERFMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ressourcen- und Leistungsüberwachung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 172544
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bc3e0 - Tue Jul 14 01:31:44 2009
    Module Checksum      = 0x00034fec
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [perfmon.pdb]
    Module PDB Guid = {7D33ED9D-B099-48DC-8B70-1A04519FAAC5}
    Module PDB Age = 0x1

Module[200] [C:\WINDOWS\SYSTEM32\PING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl Ping
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:26 2009
    Module TimeDateStamp = 0x4a5bcd02 - Tue Jul 14 02:10:42 2009
    Module Checksum      = 0x0000b94a
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [ping.pdb]
    Module PDB Guid = {F311A4B1-743E-4E6F-B858-00A827FEBF5A}
    Module PDB Age = 0x1

Module[201] [C:\WINDOWS\SYSTEM32\PKGMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Package Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 199168
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc4ae - Tue Jul 14 01:35:10 2009
    Module Checksum      = 0x00033ef8
    Module SizeOfImage   = 0x00034000
  Module Pointer to PDB = [pkgmgr.pdb]
    Module PDB Guid = {C32FEF5F-FAA8-487B-94F8-CCAF1294E7EF}
    Module PDB Age = 0x1

Module[202] [C:\WINDOWS\SYSTEM32\PLASRV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Performance Logs and Alerts DCOM Server
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc3cd - Tue Jul 14 01:31:25 2009
    Module Checksum      = 0x0000731f
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [plasrv.pdb]
    Module PDB Guid = {196A4CA7-438C-4B52-B8DD-E54AB3EEF3A6}
    Module PDB Age = 0x1

Module[203] [C:\WINDOWS\SYSTEM32\PNPUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Unbeaufsichtigte PnP-Aktion
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62464
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc2d3 - Tue Jul 14 01:27:15 2009
    Module Checksum      = 0x0001512f
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [PnPUnattend.pdb]
    Module PDB Guid = {01BCD138-9E44-446D-AB5D-AC30B474616A}
    Module PDB Age = 0x1

Module[204] [C:\WINDOWS\SYSTEM32\PNPUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft-PnP-Dienstprogramm - Tool zum Hinzufügen, Löschen und Auflisten von Treiberpaketen.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36352
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc2ee - Tue Jul 14 01:27:42 2009
    Module Checksum      = 0x0000c93b
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [PnPutil.pdb]
    Module PDB Guid = {8F3A4696-FE67-4E50-8A32-B0E8A010F32E}
    Module PDB Age = 0x1

Module[205] [C:\WINDOWS\SYSTEM32\POQEXEC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ausführung der Warteschlange der Primitivvorgänge
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 142336
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc4a0 - Tue Jul 14 01:34:56 2009
    Module Checksum      = 0x000295f5
    Module SizeOfImage   = 0x00027000
  Module Pointer to PDB = [poqexec.pdb]
    Module PDB Guid = {7FF2D94A-54F4-4E1F-8036-13E367A5690A}
    Module PDB Age = 0x1

Module[206] [C:\WINDOWS\SYSTEM32\POWERCFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Energieeinstellungs-Befehlszeilenprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 71168
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc2ed - Tue Jul 14 01:27:41 2009
    Module Checksum      = 0x0001493c
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [powercfg.pdb]
    Module PDB Guid = {0D1DC4DF-7016-40C5-A7C7-513E2388D1E4}
    Module PDB Age = 0x1

Module[207] [C:\WINDOWS\SYSTEM32\PRESENTATIONHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Presentation Foundation Host
  Product Version:   (4.0:31106.0)
  File Version:      (4.0:31106.0)
  File Size (bytes): 320352
  File Date:         Mi Nov 25 11:47:32 2009
    Module TimeDateStamp = 0x4af3afa1 - Fri Nov 06 06:09:53 2009
    Module Checksum      = 0x00057890
    Module SizeOfImage   = 0x00052000
  Module Pointer to PDB = [PresentationHost.pdb]
    Module PDB Guid = {2030890E-EF53-435D-8E56-CC653CC6EB34}
    Module PDB Age = 0x3

Module[208] [C:\WINDOWS\SYSTEM32\PREVHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Preview Handler Surrogate Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc974 - Tue Jul 14 01:55:32 2009
    Module Checksum      = 0x0000eaf1
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [prevhost.pdb]
    Module PDB Guid = {5C0422F6-5EB9-495E-B90F-21F8CD5B99B6}
    Module PDB Age = 0x1

Module[209] [C:\WINDOWS\SYSTEM32\PRINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Druckprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x00006b2a
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [print.pdb]
    Module PDB Guid = {D4F4D24E-8807-48EF-920C-5856EF82A043}
    Module PDB Age = 0x1

Module[210] [C:\WINDOWS\SYSTEM32\PRINTFILTERPIPELINESVC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Print Filter Pipeline Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 748544
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bd419 - Tue Jul 14 02:40:57 2009
    Module Checksum      = 0x000c0c89
    Module SizeOfImage   = 0x000ba000
  Module Pointer to PDB = [PrintFilterPipelineSvc.pdb]
    Module PDB Guid = {41F2F01D-13D4-4F16-99F8-645843627AEB}
    Module PDB Age = 0x1

Module[211] [C:\WINDOWS\SYSTEM32\PRINTISOLATIONHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  PrintIsolationHost
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18944
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bd3b1 - Tue Jul 14 02:39:13 2009
    Module Checksum      = 0x0000792c
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [PrintIsolationHost.pdb]
    Module PDB Guid = {8E5FDB60-98AB-4163-87FB-5F2A5EC1B4D0}
    Module PDB Age = 0x1

Module[212] [C:\WINDOWS\SYSTEM32\PRINTUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ändern der Druckeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 61952
  File Date:         Di Jul 14 02:39:27 2009
    Module TimeDateStamp = 0x4a5bd3f2 - Tue Jul 14 02:40:18 2009
    Module Checksum      = 0x0001cbde
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [PrintUI.pdb]
    Module PDB Guid = {EFDBC881-C879-429E-943F-ACC13121403C}
    Module PDB Age = 0x1

Module[213] [C:\WINDOWS\SYSTEM32\PROQUOTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Prokontingent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bc847 - Tue Jul 14 01:50:31 2009
    Module Checksum      = 0x0000de2b
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [proquota.pdb]
    Module PDB Guid = {9216C3D1-CFE1-4388-A4D9-5519A8BEBCB7}
    Module PDB Age = 0x1

Module[214] [C:\WINDOWS\SYSTEM32\PROVISIONSHARE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Provision Share
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 49152
  File Date:         Di Jul 14 02:49:05 2009
    Module TimeDateStamp = 0x4a5ba1cc - Mon Jul 13 23:06:20 2009
    Module Checksum      = 0x00019648
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [ProvisionShare.pdb]
    Module PDB Guid = {54FCD45C-EE22-4BC8-BCA8-300FD280057E}
    Module PDB Age = 0x1

Module[215] [C:\WINDOWS\SYSTEM32\PROVISIONSTORAGE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Provision Storage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 45056
  File Date:         Di Jul 14 02:47:26 2009
    Module TimeDateStamp = 0x4a5ba1cc - Mon Jul 13 23:06:20 2009
    Module Checksum      = 0x000114e2
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [ProvisionStorage.pdb]
    Module PDB Guid = {140C805E-7209-489D-9B9E-CFC633893D40}
    Module PDB Age = 0x1

Module[216] [C:\WINDOWS\SYSTEM32\PSR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Problemaufzeichnung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 732672
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bc430 - Tue Jul 14 01:33:04 2009
    Module Checksum      = 0x000c2d57
    Module SizeOfImage   = 0x000bc000
  Module Pointer to PDB = [psr.pdb]
    Module PDB Guid = {DD458CDC-0824-4CDF-9A18-7D367D62D8F8}
    Module PDB Age = 0x1

Module[217] [C:\WINDOWS\SYSTEM32\QAPPSRV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Remotedesktop-Hostserver-Abfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23040
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce86 - Tue Jul 14 02:17:10 2009
    Module Checksum      = 0x0000e852
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [qappsrv.pdb]
    Module PDB Guid = {DD4B2A37-F983-44BF-A3ED-51FE6D1B3441}
    Module PDB Age = 0x1

Module[218] [C:\WINDOWS\SYSTEM32\QPROCESS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Prozessabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26624
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce84 - Tue Jul 14 02:17:08 2009
    Module Checksum      = 0x00008b57
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [qprocess.pdb]
    Module PDB Guid = {5F65CBED-6962-4E1C-A2A1-25621816C2AA}
    Module PDB Age = 0x1

Module[219] [C:\WINDOWS\SYSTEM32\QUERY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Mehrbenutzerabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce84 - Tue Jul 14 02:17:08 2009
    Module Checksum      = 0x00007318
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [query.pdb]
    Module PDB Guid = {76EEE66F-B823-49AE-BFDF-213372DE03C2}
    Module PDB Age = 0x1

Module[220] [C:\WINDOWS\SYSTEM32\QUSER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Benutzerabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce84 - Tue Jul 14 02:17:08 2009
    Module Checksum      = 0x0000fc07
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [quser.pdb]
    Module PDB Guid = {36EB94A4-8513-4312-910A-F27E79BAEC8B}
    Module PDB Age = 0x1

Module[221] [C:\WINDOWS\SYSTEM32\QWINSTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Sitzungsabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28672
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce86 - Tue Jul 14 02:17:10 2009
    Module Checksum      = 0x00009d09
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [qwinsta.pdb]
    Module PDB Guid = {4DEF2962-C16D-4291-9B41-DA6ACF74EC1C}
    Module PDB Age = 0x1

Module[222] [C:\WINDOWS\SYSTEM32\RASAUTOU.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Remotezugriffswählhilfe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17920
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bcce1 - Tue Jul 14 02:10:09 2009
    Module Checksum      = 0x00005d93
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [rasautou.pdb]
    Module PDB Guid = {566B7E65-987B-4101-B119-10A278937C0F}
    Module PDB Age = 0x1

Module[223] [C:\WINDOWS\SYSTEM32\RASDIAL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eingabeschnittstelle für RAS
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18944
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bcce8 - Tue Jul 14 02:10:16 2009
    Module Checksum      = 0x0000a88d
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [rasdial.pdb]
    Module PDB Guid = {05941F9D-1F20-4720-A4C4-93C88D068017}
    Module PDB Age = 0x1

Module[224] [C:\WINDOWS\SYSTEM32\RASPHONE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Adressbuch für den Remotezugriff
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 42496
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bccea - Tue Jul 14 02:10:18 2009
    Module Checksum      = 0x0000c9a1
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [rasphone.pdb]
    Module PDB Guid = {381E4062-D84C-4A53-94FB-D5547C26A11F}
    Module PDB Age = 0x1

Module[225] [C:\WINDOWS\SYSTEM32\RDPCLIP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RDP-Zwischenablagenüberwachung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 209408
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bce7b - Tue Jul 14 02:16:59 2009
    Module Checksum      = 0x000364b8
    Module SizeOfImage   = 0x00038000
  Module Pointer to PDB = [rdpclip.pdb]
    Module PDB Guid = {B854256F-1AD7-4AF3-8F48-163087BC9A64}
    Module PDB Age = 0x1

Module[226] [C:\WINDOWS\SYSTEM32\RDPINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RemoteApp-Anmeldeanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 176640
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bcea6 - Tue Jul 14 02:17:42 2009
    Module Checksum      = 0x00033c96
    Module SizeOfImage   = 0x00031000
  Module Pointer to PDB = [rdpinit.pdb]
    Module PDB Guid = {5E03D6AC-A8B9-40E0-A48D-34FBA1FA6801}
    Module PDB Age = 0x1

Module[227] [C:\WINDOWS\SYSTEM32\RDPSHELL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RemoteApp-Shell
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 294912
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bcea6 - Tue Jul 14 02:17:42 2009
    Module Checksum      = 0x00052e54
    Module SizeOfImage   = 0x0004e000
  Module Pointer to PDB = [rdpshell.pdb]
    Module PDB Guid = {650C606E-503D-48D8-B645-927644CFCF2D}
    Module PDB Age = 0x1

Module[228] [C:\WINDOWS\SYSTEM32\RDPSIGN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Remotedesktop-Hostserver-Signierungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 66048
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bcea2 - Tue Jul 14 02:17:38 2009
    Module Checksum      = 0x000158dc
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [rdpsign.pdb]
    Module PDB Guid = {4D0EC34F-2F0B-4ADC-B636-19692251F4EF}
    Module PDB Age = 0x1

Module[229] [C:\WINDOWS\SYSTEM32\REAGENTC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows-Wiederherstellungs-Agent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20480
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc3f6 - Tue Jul 14 01:32:06 2009
    Module Checksum      = 0x00011032
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [ReAgentc.pdb]
    Module PDB Guid = {8B7464D6-191E-498E-ABB2-7AB94306DE20}
    Module PDB Age = 0x1

Module[230] [C:\WINDOWS\SYSTEM32\RECOVER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Wiederherstellung von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12800
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x0000d1e5
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [recover.pdb]
    Module PDB Guid = {945C89D3-3FD5-4EA3-B9C5-EC4193996D74}
    Module PDB Age = 0x1

Module[231] [C:\WINDOWS\SYSTEM32\REG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konsolenregistrierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 74752
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc295 - Tue Jul 14 01:26:13 2009
    Module Checksum      = 0x00018f5c
    Module SizeOfImage   = 0x00056000
  Module Pointer to PDB = [reg.pdb]
    Module PDB Guid = {EEC61152-BA26-4481-9D73-9C6B7C5B3AF8}
    Module PDB Age = 0x1

Module[232] [C:\WINDOWS\SYSTEM32\REGEDT32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registry Editor Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x000090bc
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [regedt32.pdb]
    Module PDB Guid = {522245D8-E46A-4B1F-9A24-DC0BEE3CB7EC}
    Module PDB Age = 0x1

Module[233] [C:\WINDOWS\SYSTEM32\REGINI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registry Initializer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 47104
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bcdcf - Tue Jul 14 02:14:07 2009
    Module Checksum      = 0x00017bd3
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [regini.pdb]
    Module PDB Guid = {01A638DC-B451-438A-BDC5-0CB352247D97}
    Module PDB Age = 0x1

Module[234] [C:\WINDOWS\SYSTEM32\REGISTERIEPKEYS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registers custom PKEYs for IE
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 98816
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bca32 - Tue Jul 14 01:58:42 2009
    Module Checksum      = 0x00022aba
    Module SizeOfImage   = 0x0001c000
  Module Pointer to PDB = [RegisterIEPKEYs.pdb]
    Module PDB Guid = {E1F69640-EE03-4622-9D19-C79F1C9AC980}
    Module PDB Age = 0x1

Module[235] [C:\WINDOWS\SYSTEM32\REGSVR32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft(C) Registerserver
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19456
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bcdd6 - Tue Jul 14 02:14:14 2009
    Module Checksum      = 0x00004e4c
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [regsvr32.pdb]
    Module PDB Guid = {2B555DE5-29AB-46E0-8F18-73AC15FA1D91}
    Module PDB Age = 0x2

Module[236] [C:\WINDOWS\SYSTEM32\REKEYWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  EFS REKEY Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 69120
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc842 - Tue Jul 14 01:50:26 2009
    Module Checksum      = 0x000126dd
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [rekeywiz.pdb]
    Module PDB Guid = {229E763F-7925-41F7-85AC-6941BA4C8190}
    Module PDB Age = 0x1

Module[237] [C:\WINDOWS\SYSTEM32\RELOG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm für die Neuprotokollierung von Leistungsindikatoren
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 42496
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc3de - Tue Jul 14 01:31:42 2009
    Module Checksum      = 0x000125cf
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [relog.pdb]
    Module PDB Guid = {FDEB6C05-D195-4326-8EF4-1AF6790D8048}
    Module PDB Age = 0x1

Module[238] [C:\WINDOWS\SYSTEM32\RELPOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Diagnose und -Wiederherstellung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 173056
  File Date:         Di Jul 14 02:39:29 2009
    Module TimeDateStamp = 0x4a5bc408 - Tue Jul 14 01:32:24 2009
    Module Checksum      = 0x0002c952
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [RelPost.pdb]
    Module PDB Guid = {47ED464B-3641-43F7-8874-BD9813395DD1}
    Module PDB Age = 0x1

Module[239] [C:\WINDOWS\SYSTEM32\REPLACE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Ersetzen von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19968
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bc26b - Tue Jul 14 01:25:31 2009
    Module Checksum      = 0x0000d797
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [replace.pdb]
    Module PDB Guid = {3A10887F-51AE-4B6B-BC5D-9260F53CF2B0}
    Module PDB Age = 0x1

Module[240] [C:\WINDOWS\SYSTEM32\RESET.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Zurücksetzen der Remotedesktopdienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bce85 - Tue Jul 14 02:17:09 2009
    Module Checksum      = 0x00010896
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [reset.pdb]
    Module PDB Guid = {10C56920-6C66-4C12-9620-3925F8E48DD6}
    Module PDB Age = 0x1

Module[241] [C:\WINDOWS\SYSTEM32\RESMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Resource Monitor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 103936
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bc3e1 - Tue Jul 14 01:31:45 2009
    Module Checksum      = 0x0001a4c1
    Module SizeOfImage   = 0x0001d000
  Module Pointer to PDB = [resmon.pdb]
    Module PDB Guid = {BE544E45-2966-4EFA-BB05-3A2BA26555BE}
    Module PDB Age = 0x1

Module[242] [C:\WINDOWS\SYSTEM32\RMACTIVATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Desktop Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 356352
  File Date:         Di Jan 19 10:00:37 2010
    Module TimeDateStamp = 0x4b556e35 - Tue Jan 19 09:32:53 2010
    Module Checksum      = 0x0005fea0
    Module SizeOfImage   = 0x0005a000
  Module Pointer to PDB = [rmactivate.pdb]
    Module PDB Guid = {1A6C9EB2-6FB7-45B5-A796-2665DC994331}
    Module PDB Age = 0x2

Module[243] [C:\WINDOWS\SYSTEM32\RMACTIVATE_ISV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Desktop Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 357888
  File Date:         Di Jan 19 10:00:43 2010
    Module TimeDateStamp = 0x4b556e2e - Tue Jan 19 09:32:46 2010
    Module Checksum      = 0x00066110
    Module SizeOfImage   = 0x0005a000
  Module Pointer to PDB = [rmactivate_isv.pdb]
    Module PDB Guid = {14D12E4D-9BCF-463C-98C6-4BDA2F868C05}
    Module PDB Age = 0x2

Module[244] [C:\WINDOWS\SYSTEM32\RMACTIVATE_SSP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Server Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 306688
  File Date:         Di Jan 19 10:00:37 2010
    Module TimeDateStamp = 0x4b556e2b - Tue Jan 19 09:32:43 2010
    Module Checksum      = 0x00058dfa
    Module SizeOfImage   = 0x0004e000
  Module Pointer to PDB = [rmactivate_ssp.pdb]
    Module PDB Guid = {305EBF27-5142-4A45-A17D-DD6BF520C761}
    Module PDB Age = 0x2

Module[245] [C:\WINDOWS\SYSTEM32\RMACTIVATE_SSP_ISV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Server Security Processor (Pre-production)
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 305152
  File Date:         Di Jan 19 10:00:44 2010
    Module TimeDateStamp = 0x4b556e36 - Tue Jan 19 09:32:54 2010
    Module Checksum      = 0x0004e3e1
    Module SizeOfImage   = 0x0004d000
  Module Pointer to PDB = [rmactivate_ssp_isv.pdb]
    Module PDB Guid = {96CA533F-E186-4796-84E9-D11E98502B8D}
    Module PDB Age = 0x2

Module[246] [C:\WINDOWS\SYSTEM32\RMCLIENT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Neustart-Manager - Client für Benutzerkontensteuerungsneustart
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:30 2009
    Module TimeDateStamp = 0x4a5bc4d3 - Tue Jul 14 01:35:47 2009
    Module Checksum      = 0x00013149
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [RmClient.pdb]
    Module PDB Guid = {63C0B514-3EE0-47E6-ACD6-AAC2C3F4DD1F}
    Module PDB Age = 0x1

Module[247] [C:\WINDOWS\SYSTEM32\ROBOCOPY.EXE] 
  Company Name:      Microsoft
  File Description:  Robocopy
  Product Version:   (5.1:0.0)
  File Version:      (5.1:10.1027)
  File Size (bytes): 125440
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc296 - Tue Jul 14 01:26:14 2009
    Module Checksum      = 0x00023678
    Module SizeOfImage   = 0x00085000
  Module Pointer to PDB = [robocopy.pdb]
    Module PDB Guid = {F323B15F-66EC-4881-A0C0-292CB8988F0F}
    Module PDB Age = 0x1

Module[248] [C:\WINDOWS\SYSTEM32\ROUTE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP Route Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bcd02 - Tue Jul 14 02:10:42 2009
    Module Checksum      = 0x00012cd9
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [route.pdb]
    Module PDB Guid = {4C2B3F0B-7244-4316-A878-0DB96035063B}
    Module PDB Age = 0x1

Module[249] [C:\WINDOWS\SYSTEM32\RPCPING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RPC-Ping-Dienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 30208
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bca4f - Tue Jul 14 01:59:11 2009
    Module Checksum      = 0x0000d00c
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [RPCPing.pdb]
    Module PDB Guid = {1009B92B-D79B-4A76-8A60-F822E35CC5FD}
    Module PDB Age = 0x1

Module[250] [C:\WINDOWS\SYSTEM32\RSOPPROV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Richtlinienergebnissatzanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 91648
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc930 - Tue Jul 14 01:54:24 2009
    Module Checksum      = 0x0001d4ea
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [rsopprov.pdb]
    Module PDB Guid = {D3D9E776-4DDC-4516-8D7B-C01703984EAC}
    Module PDB Age = 0x1

Module[251] [C:\WINDOWS\SYSTEM32\RUNAS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm "Ausführen als"
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20480
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc26c - Tue Jul 14 01:25:32 2009
    Module Checksum      = 0x0000e677
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [runas.pdb]
    Module PDB Guid = {8844194A-C9B3-469A-B7F7-7A290FC8CE93}
    Module PDB Age = 0x1

Module[252] [C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Hostprozess (Rundll32)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 45568
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc9e0 - Tue Jul 14 01:57:20 2009
    Module Checksum      = 0x0000ed17
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [rundll32.pdb]
    Module PDB Guid = {D88A12D5-94CA-4436-BAFE-F2E71AC376A2}
    Module PDB Age = 0x1

Module[253] [C:\WINDOWS\SYSTEM32\RUNLEGACYCPLELEVATED.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Führt ein Legacy-Systemsteuerungsobjekt mit erhöhten Rechten aus
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 58880
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc9df - Tue Jul 14 01:57:19 2009
    Module Checksum      = 0x00017841
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [RunLegacyCPLElevated.pdb]
    Module PDB Guid = {DC800E3C-DC59-42D3-9997-CEEB3423DE05}
    Module PDB Age = 0x1

Module[254] [C:\WINDOWS\SYSTEM32\RUNONCE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wrapper für einmaliges Ausführen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 56832
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc9e9 - Tue Jul 14 01:57:29 2009
    Module Checksum      = 0x0000ff1c
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [runonce.pdb]
    Module PDB Guid = {9377D102-65A7-4B19-B744-DB3BD508A92A}
    Module PDB Age = 0x1

Module[255] [C:\WINDOWS\SYSTEM32\RWINSTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Zurücksetzen von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bce86 - Tue Jul 14 02:17:10 2009
    Module Checksum      = 0x00010e87
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [rwinsta.pdb]
    Module PDB Guid = {9D08FE58-D6CE-4FE9-85D2-3127BA3B31D3}
    Module PDB Age = 0x1

Module[256] [C:\WINDOWS\SYSTEM32\SACSESS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft EMS-SAC-Dienst-Hilfsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36352
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc489 - Tue Jul 14 01:34:33 2009
    Module Checksum      = 0x00012e38
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [sacsess.pdb]
    Module PDB Guid = {7FDCBD91-349E-4615-93D0-C57B99CB856D}
    Module PDB Age = 0x1

Module[257] [C:\WINDOWS\SYSTEM32\SC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ein Programm, das die Entwicklung von Diensten in WindowsNT unterstützt
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 45056
  File Date:         Di Jul 14 02:39:35 2009
    Module TimeDateStamp = 0x4a5bc3c1 - Tue Jul 14 01:31:13 2009
    Module Checksum      = 0x0000b498
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [sc.pdb]
    Module PDB Guid = {091F19DB-FDAA-4AD6-96C9-79DB6E695EB2}
    Module PDB Age = 0x2

Module[258] [C:\WINDOWS\SYSTEM32\SCHTASKS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Verwaltung geplanter Aufgaben
  Product Version:   (6.1:7600.16699)
  File Version:      (6.1:7600.16699)
  File Size (bytes): 285696
  File Date:         Di Nov 02 06:10:32 2010
    Module TimeDateStamp = 0x4ccf7f4d - Tue Nov 02 04:02:37 2010
    Module Checksum      = 0x00046cd8
    Module SizeOfImage   = 0x00048000
  Module Pointer to PDB = [sctasks.pdb]
    Module PDB Guid = {3243B671-116F-4CF0-88EB-B64FD14A4A30}
    Module PDB Age = 0x1

Module[259] [C:\WINDOWS\SYSTEM32\SCSHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SCS-Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:39:35 2009
    Module TimeDateStamp = 0x4a5bc8b8 - Tue Jul 14 01:52:24 2009
    Module Checksum      = 0x00009f8f
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [scshost.pdb]
    Module PDB Guid = {B3612CB1-A5BD-47DA-B4DB-1137F436E583}
    Module PDB Age = 0x1

Module[260] [C:\WINDOWS\SYSTEM32\SCSS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SCS-Server
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 29184
  File Date:         Di Jul 14 02:39:35 2009
    Module TimeDateStamp = 0x4a5bc8b6 - Tue Jul 14 01:52:22 2009
    Module Checksum      = 0x00012167
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [scss.pdb]
    Module PDB Guid = {C48A7F27-7DA0-44ED-8E7F-A037919064E4}
    Module PDB Age = 0x1

Module[261] [C:\WINDOWS\SYSTEM32\SCW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sicherheitskonfigurations-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 2358272
  File Date:         Di Jul 14 02:39:36 2009
    Module TimeDateStamp = 0x4a5bc828 - Tue Jul 14 01:50:00 2009
    Module Checksum      = 0x00248308
    Module SizeOfImage   = 0x00245000
  Module Pointer to PDB = [SCW.pdb]
    Module PDB Guid = {C0A87592-0A9E-411A-8ACE-73D8A91B2DEB}
    Module PDB Age = 0x1

Module[262] [C:\WINDOWS\SYSTEM32\SCWCMD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Sicherheitskonfigurations-Assistent-Befehlszeilentool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 145920
  File Date:         Di Jul 14 02:39:36 2009
    Module TimeDateStamp = 0x4a5bc8be - Tue Jul 14 01:52:30 2009
    Module Checksum      = 0x00031b72
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [scwcmd.pdb]
    Module PDB Guid = {034BE85E-B7F3-46AE-879A-70E8166095BC}
    Module PDB Age = 0x1

Module[263] [C:\WINDOWS\SYSTEM32\SCWVIEWER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Anzeige für den Sicherheitskonfigurations-Assistenten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 131584
  File Date:         Di Jul 14 02:39:36 2009
    Module TimeDateStamp = 0x4a5bc7c7 - Tue Jul 14 01:48:23 2009
    Module Checksum      = 0x0002123a
    Module SizeOfImage   = 0x00024000
  Module Pointer to PDB = [SCWViewer.pdb]
    Module PDB Guid = {47716524-1CF4-4A08-86F7-D07B9EC84FD1}
    Module PDB Age = 0x1

Module[264] [C:\WINDOWS\SYSTEM32\SDBINST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Installationsprogramm für Anwendungskompatibilitätsdatenbank
  Product Version:   (6.0:7600.16385)
  File Version:      (6.0:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:39:36 2009
    Module TimeDateStamp = 0x4a5bc174 - Tue Jul 14 01:21:24 2009
    Module Checksum      = 0x00010c94
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [sdbinst.pdb]
    Module PDB Guid = {CB00B384-2F35-4C2C-A96D-762439DA7D34}
    Module PDB Age = 0x1

Module[265] [C:\WINDOWS\SYSTEM32\SDIAGNHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemeigener Host für Skriptdiagnose
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc3d4 - Tue Jul 14 01:31:32 2009
    Module Checksum      = 0x0000fee5
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [sdiagnhost.pdb]
    Module PDB Guid = {724FCC25-2810-4D66-AF30-6C459A17C42C}
    Module PDB Age = 0x1

Module[266] [C:\WINDOWS\SYSTEM32\SECEDIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Commandtool für den Windows-Sicherheitskonfigurations-Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36864
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc812 - Tue Jul 14 01:49:38 2009
    Module Checksum      = 0x00013edb
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [SecEdit.pdb]
    Module PDB Guid = {7BB05DE8-5743-4ECA-B0C0-D727C1F792C0}
    Module PDB Age = 0x1

Module[267] [C:\WINDOWS\SYSTEM32\SECINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sicherheitsinitialisierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc4bc - Tue Jul 14 01:35:24 2009
    Module Checksum      = 0x0000d9a3
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [secinit.pdb]
    Module PDB Guid = {63F5999C-BF27-414A-823F-E54C9F0D1446}
    Module PDB Age = 0x1

Module[268] [C:\WINDOWS\SYSTEM32\SERVERCEIPOPTIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Verbesserung der Benutzerfreundlichkeit - Anwendungserweiterung für die Anmeldung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc7d6 - Tue Jul 14 01:48:38 2009
    Module Checksum      = 0x000045aa
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [serverCeipOptin.pdb]
    Module PDB Guid = {2723B07C-9D7D-49A2-B40F-19491F79A3F5}
    Module PDB Age = 0x1

Module[269] [C:\WINDOWS\SYSTEM32\SERVERMANAGERCMD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:   
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 94208
  File Date:         Di Jul 14 02:47:50 2009
    Module TimeDateStamp = 0x4a5bc7d5 - Tue Jul 14 01:48:37 2009
    Module Checksum      = 0x00024e77
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [ServerManagerCmd.pdb]
    Module PDB Guid = {941263E9-7FF9-4FDE-B009-48E31450F1E1}
    Module PDB Age = 0x2

Module[270] [C:\WINDOWS\SYSTEM32\SERVERMANAGERLAUNCHER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Server Managemer Launcher
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 152064
  File Date:         Di Jul 14 02:39:31 2009
    Module TimeDateStamp = 0x4a5bc7d6 - Tue Jul 14 01:48:38 2009
    Module Checksum      = 0x00028af7
    Module SizeOfImage   = 0x0002b000
  Module Pointer to PDB = [ServerManagerLauncher.pdb]
    Module PDB Guid = {20D947F1-9F66-48D2-BBDB-AB20085CC09F}
    Module PDB Age = 0x1

Module[271] [C:\WINDOWS\SYSTEM32\SERVERWEROPTIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Fehlerberichterstattung - Befehlszeilentool für die Anmeldung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc7d6 - Tue Jul 14 01:48:38 2009
    Module Checksum      = 0x0000d32f
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [ServerWerOptin.pdb]
    Module PDB Guid = {E79E04B2-1EAD-474A-8AB1-52BCE28E14E2}
    Module PDB Age = 0x1

Module[272] [C:\WINDOWS\SYSTEM32\SERVICES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Anwendung für Dienste und Controller
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 328704
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bc10e - Tue Jul 14 01:19:42 2009
    Module Checksum      = 0x00054321
    Module SizeOfImage   = 0x00053000
  Module Pointer to PDB = [services.pdb]
    Module PDB Guid = {DAF6FE57-EBAA-4453-BCFD-0C849DB3DFF2}
    Module PDB Age = 0x2

Module[273] [C:\WINDOWS\SYSTEM32\SETHC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Tastenkombinationen für Barrierefreiheit
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 279040
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bd26d - Tue Jul 14 02:33:49 2009
    Module Checksum      = 0x0004c529
    Module SizeOfImage   = 0x00048000
  Module Pointer to PDB = [sethc.pdb]
    Module PDB Guid = {D5BB820D-19F8-4A85-AC5D-418B7433F811}
    Module PDB Age = 0x1

Module[274] [C:\WINDOWS\SYSTEM32\SETIEINSTALLEDDATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sets the date that IE was installed
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 93184
  File Date:         Di Jul 14 02:39:37 2009
    Module TimeDateStamp = 0x4a5bca31 - Tue Jul 14 01:58:41 2009
    Module Checksum      = 0x00025bea
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [SetIEInstalledDate.pdb]
    Module PDB Guid = {493AFBFA-DFFD-4C85-B7FB-708DB1882328}
    Module PDB Age = 0x1

Module[275] [C:\WINDOWS\SYSTEM32\SETSPN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SPN-Attribut des Computers abfragen oder zurücksetzen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34816
  File Date:         Di Jul 14 02:39:12 2009
    Module TimeDateStamp = 0x4a5bc861 - Tue Jul 14 01:50:57 2009
    Module Checksum      = 0x0000b4b8
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [setspn.pdb]
    Module PDB Guid = {6E602BB8-8B00-42E7-97B7-F5F139300F6C}
    Module PDB Age = 0x1

Module[276] [C:\WINDOWS\SYSTEM32\SETUPCL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemklontool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 88064
  File Date:         Di Jul 14 02:39:39 2009
    Module TimeDateStamp = 0x4a5bc35f - Tue Jul 14 01:29:35 2009
    Module Checksum      = 0x00021f79
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [setupcl.pdb]
    Module PDB Guid = {FB69858C-5BCB-4045-A6BB-99683BBC478D}
    Module PDB Age = 0x1

Module[277] [C:\WINDOWS\SYSTEM32\SETUPNFSIDMAP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Setup NFS Identity
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:47:59 2009
    Module TimeDateStamp = 0x4a5ba1cc - Mon Jul 13 23:06:20 2009
    Module Checksum      = 0x00022475
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SetupNfsIDMap.pdb]
    Module PDB Guid = {43F8C4E7-7C87-4ED2-A45E-93BFCC5B0996}
    Module PDB Age = 0x1

Module[278] [C:\WINDOWS\SYSTEM32\SETUPUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner Befehlsprozessor für unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 118272
  File Date:         Di Jul 14 02:39:39 2009
    Module TimeDateStamp = 0x4a5bc320 - Tue Jul 14 01:28:32 2009
    Module Checksum      = 0x000276dc
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [setupugc.pdb]
    Module PDB Guid = {1E514F49-3616-4524-B852-A2C2654AE0EA}
    Module PDB Age = 0x1

Module[279] [C:\WINDOWS\SYSTEM32\SETX.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Setx - Setzt Umgebungsvariablen.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 57856
  File Date:         Di Jul 14 02:39:39 2009
    Module TimeDateStamp = 0x4a5bc274 - Tue Jul 14 01:25:40 2009
    Module Checksum      = 0x00010e5f
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [setx.pdb]
    Module PDB Guid = {056366EA-46DA-47BA-8C65-14C7C0E938D4}
    Module PDB Age = 0x1

Module[280] [C:\WINDOWS\SYSTEM32\SFC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemintegritätsüberprüfung und Reparatur
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 39424
  File Date:         Di Jul 14 02:39:39 2009
    Module TimeDateStamp = 0x4a5bc295 - Tue Jul 14 01:26:13 2009
    Module Checksum      = 0x00011b49
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [sfc.pdb]
    Module PDB Guid = {C8EBA0D5-DEC9-47B9-B57A-5138B1532714}
    Module PDB Age = 0x1

Module[281] [C:\WINDOWS\SYSTEM32\SHADOW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm für die Remoteüberwachung von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:39:40 2009
    Module TimeDateStamp = 0x4a5bce86 - Tue Jul 14 02:17:10 2009
    Module Checksum      = 0x0000773d
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [shadow.pdb]
    Module PDB Guid = {D2137710-E07E-499C-A018-769F431FA7A4}
    Module PDB Age = 0x1

Module[282] [C:\WINDOWS\SYSTEM32\SHRPUBW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent für das Erstellen von Freigaben
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 407552
  File Date:         Di Jul 14 02:39:40 2009
    Module TimeDateStamp = 0x4a5bc7c4 - Tue Jul 14 01:48:20 2009
    Module Checksum      = 0x0006d6b4
    Module SizeOfImage   = 0x00067000
  Module Pointer to PDB = [shrpubw.pdb]
    Module PDB Guid = {3393B9BE-4287-4B9B-96C1-50DD0E070B80}
    Module PDB Age = 0x1

Module[283] [C:\WINDOWS\SYSTEM32\SHUTDOWN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Herunterfahrprogramm und Anmerkungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34304
  File Date:         Di Jul 14 02:39:40 2009
    Module TimeDateStamp = 0x4a5bc846 - Tue Jul 14 01:50:30 2009
    Module Checksum      = 0x00009a72
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [shutdown.pdb]
    Module PDB Guid = {C3E347AC-E300-45FB-A07C-652FFDC69572}
    Module PDB Age = 0x1

Module[284] [C:\WINDOWS\SYSTEM32\SIGVERIF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dateisignaturverifizierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 74752
  File Date:         Di Jul 14 02:39:41 2009
    Module TimeDateStamp = 0x4a5bc2c5 - Tue Jul 14 01:27:01 2009
    Module Checksum      = 0x0001cfc8
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [sigverif.pdb]
    Module PDB Guid = {3EFD11B5-DC9F-40EA-BE87-DD5FF0CD992E}
    Module PDB Age = 0x1

Module[285] [C:\WINDOWS\SYSTEM32\SLUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Aktivierungsclient
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 349696
  File Date:         Di Jul 14 02:39:45 2009
    Module TimeDateStamp = 0x4a5bc8a9 - Tue Jul 14 01:52:09 2009
    Module Checksum      = 0x00063b04
    Module SizeOfImage   = 0x00059000
  Module Pointer to PDB = [slui.pdb]
    Module PDB Guid = {2072A205-BB86-4599-9D5D-F1A1581525FB}
    Module PDB Age = 0x1

Module[286] [C:\WINDOWS\SYSTEM32\SMSS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Sitzungs-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 112640
  File Date:         Di Jul 14 02:39:41 2009
    Module TimeDateStamp = 0x4a5bc116 - Tue Jul 14 01:19:50 2009
    Module Checksum      = 0x0001ba30
    Module SizeOfImage   = 0x00020000
  Module Pointer to PDB = [smss.pdb]
    Module PDB Guid = {278C803E-A804-49F5-989A-347FC6E57495}
    Module PDB Age = 0x1

Module[287] [C:\WINDOWS\SYSTEM32\SNDVOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Lautstärkemixer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 273920
  File Date:         Di Jul 14 02:39:41 2009
    Module TimeDateStamp = 0x4a5bcf26 - Tue Jul 14 02:19:50 2009
    Module Checksum      = 0x0004ad3e
    Module SizeOfImage   = 0x00047000
  Module Pointer to PDB = [SndVol.pdb]
    Module PDB Guid = {B6B1A1AB-22F2-420C-A180-7F7A03008ADF}
    Module PDB Age = 0x1

Module[288] [C:\WINDOWS\SYSTEM32\SNMPTRAP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SNMP-Trap
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 02:39:41 2009
    Module TimeDateStamp = 0x4a5bccf9 - Tue Jul 14 02:10:33 2009
    Module Checksum      = 0x0000deff
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [snmptrap.pdb]
    Module PDB Guid = {2A6D89F2-0C21-4BA5-B876-750728ACD136}
    Module PDB Age = 0x1

Module[289] [C:\WINDOWS\SYSTEM32\SORT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sortierungshilfsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:39:42 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x00009acb
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [sort.pdb]
    Module PDB Guid = {18C1F71B-60DC-4F72-8CAD-FDA73102B2D6}
    Module PDB Age = 0x1

Module[290] [C:\WINDOWS\SYSTEM32\SPINSTALL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SP Installer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 580608
  File Date:         Di Jul 14 02:39:44 2009
    Module TimeDateStamp = 0x4a5bc4c5 - Tue Jul 14 01:35:33 2009
    Module Checksum      = 0x00093e8e
    Module SizeOfImage   = 0x00091000
  Module Pointer to PDB = [spinstall.pdb]
    Module PDB Guid = {79EC1482-102A-4A91-8E70-F4805E259CAE}
    Module PDB Age = 0x1

Module[291] [C:\WINDOWS\SYSTEM32\SPOOLSV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Spoolersubsystem-Anwendung
  Product Version:   (6.1:7600.16661)
  File Version:      (6.1:7600.16661)
  File Size (bytes): 558592
  File Date:         Sa Aug 21 07:29:47 2010
    Module TimeDateStamp = 0x4c6f61fe - Sat Aug 21 07:19:58 2010
    Module Checksum      = 0x00097ad7
    Module SizeOfImage   = 0x0008c000
  Module Pointer to PDB = [spoolsv.pdb]
    Module PDB Guid = {BCD4396A-CD0B-474B-8E29-978AE1E21843}
    Module PDB Age = 0x2

Module[292] [C:\WINDOWS\SYSTEM32\SPPSVC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Softwareschutzplattform-Dienst von Microsoft
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 3524608
  File Date:         Di Jul 14 02:39:28 2009
    Module TimeDateStamp = 0x4a5bd93c - Tue Jul 14 03:02:52 2009
    Module Checksum      = 0x003641df
    Module SizeOfImage   = 0x0035f000
  Module Pointer to PDB = [sppsvc.pdb]
    Module PDB Guid = {76011BAC-3C87-4173-BF47-A5D91FC73B42}
    Module PDB Age = 0x2

Module[293] [C:\WINDOWS\SYSTEM32\SPREVIEW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SP Reviewer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 305664
  File Date:         Di Jul 14 02:39:44 2009
    Module TimeDateStamp = 0x4a5bc4c2 - Tue Jul 14 01:35:30 2009
    Module Checksum      = 0x00052342
    Module SizeOfImage   = 0x0004f000
  Module Pointer to PDB = [SPReview.pdb]
    Module PDB Guid = {B35899DD-C000-4C4F-AFD1-7F7D8F85643D}
    Module PDB Age = 0x1

Module[294] [C:\WINDOWS\SYSTEM32\SUBST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Subst-Programm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bc269 - Tue Jul 14 01:25:29 2009
    Module Checksum      = 0x00007e87
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [subst.pdb]
    Module PDB Guid = {14BE1268-2E8D-46F1-BD88-7D1100A11EC4}
    Module PDB Age = 0x1

Module[295] [C:\WINDOWS\SYSTEM32\SVCHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostprozess für Windows-Dienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bc3c1 - Tue Jul 14 01:31:13 2009
    Module Checksum      = 0x00013157
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [svchost.pdb]
    Module PDB Guid = {21920B95-19F5-4ECD-BBFD-F283D7D9BCE0}
    Module PDB Age = 0x2

Module[296] [C:\WINDOWS\SYSTEM32\SXSTRACE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sxs-Nachverfolgungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bc2ad - Tue Jul 14 01:26:37 2009
    Module Checksum      = 0x00015efa
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [sxstrace.pdb]
    Module PDB Guid = {ED0B2E43-151B-4A9B-AD10-C4B0A9C5984E}
    Module PDB Age = 0x1

Module[297] [C:\WINDOWS\SYSTEM32\SYNCHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Host Process for Windows Sync
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43520
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bcfb0 - Tue Jul 14 02:22:08 2009
    Module Checksum      = 0x0000f7cc
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [SyncHost.pdb]
    Module PDB Guid = {B1DB4FB4-9EA8-42C1-9F11-2DE6417E48A8}
    Module PDB Age = 0x1

Module[298] [C:\WINDOWS\SYSTEM32\SYSKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SAM-Sperrungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 33792
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bc85c - Tue Jul 14 01:50:52 2009
    Module Checksum      = 0x00015782
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [syskey.pdb]
    Module PDB Guid = {1C0E6EBD-6674-4BCA-92B5-0BA728FBE3D7}
    Module PDB Age = 0x1

Module[299] [C:\WINDOWS\SYSTEM32\SYSTEMINFO.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt Systeminformationen an
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 110592
  File Date:         Di Jul 14 02:39:46 2009
    Module TimeDateStamp = 0x4a5bcd8d - Tue Jul 14 02:13:01 2009
    Module Checksum      = 0x0002343e
    Module SizeOfImage   = 0x0001f000
  Module Pointer to PDB = [sysinfo.pdb]
    Module PDB Guid = {D3551384-7250-4DF5-A374-D94DA642E1BD}
    Module PDB Age = 0x1

Module[300] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESADVANCED.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Erweiterte Systemeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a0 - Tue Jul 14 01:56:16 2009
    Module Checksum      = 0x00016c6d
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesAdvanced.pdb]
    Module PDB Guid = {2BEA4E65-8A19-401D-A97F-04609BCFE351}
    Module PDB Age = 0x1

Module[301] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESCOMPUTERNAME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computereinstellungen ändern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a2 - Tue Jul 14 01:56:18 2009
    Module Checksum      = 0x0001de01
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesComputerName.pdb]
    Module PDB Guid = {56B5ED39-6B0A-4796-BC0B-A8BC50399792}
    Module PDB Age = 0x1

Module[302] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESDATAEXECUTIONPREVENTION.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Einstellungen für Datenausführungsverhinderung ändern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a3 - Tue Jul 14 01:56:19 2009
    Module Checksum      = 0x0001b487
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesDataExecutionPrevention.pdb]
    Module PDB Guid = {9B1DFFD6-8551-43EB-AC8F-A4226AF40592}
    Module PDB Age = 0x1

Module[303] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESHARDWARE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hardwareeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a4 - Tue Jul 14 01:56:20 2009
    Module Checksum      = 0x00020922
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesHardware.pdb]
    Module PDB Guid = {F04DE1C1-CDE2-4385-BF99-C9C58B40939E}
    Module PDB Age = 0x1

Module[304] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESPERFORMANCE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computerleistungseinstellungen ändern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a4 - Tue Jul 14 01:56:20 2009
    Module Checksum      = 0x00014a04
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesPerformance.pdb]
    Module PDB Guid = {D615DD46-611A-47CB-BCF9-63242AF8921D}
    Module PDB Age = 0x1

Module[305] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESPROTECTION.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computerschutzeinstellungen ändern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a4 - Tue Jul 14 01:56:20 2009
    Module Checksum      = 0x00022ca4
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesProtection.pdb]
    Module PDB Guid = {97856EC3-9209-49B6-ACC3-241A85AEE595}
    Module PDB Age = 0x1

Module[306] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESREMOTE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemremoteeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc9a5 - Tue Jul 14 01:56:21 2009
    Module Checksum      = 0x00022f36
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [SystemPropertiesRemote.pdb]
    Module PDB Guid = {3309D59F-1FF9-4545-8519-F6B3CA01C551}
    Module PDB Age = 0x1

Module[307] [C:\WINDOWS\SYSTEM32\SYSTRAY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systray .exe stub
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc98a - Tue Jul 14 01:55:54 2009
    Module Checksum      = 0x00011da8
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [systray.pdb]
    Module PDB Guid = {EEDE34B0-15C0-462A-8D30-CBCC454ACB29}
    Module PDB Age = 0x1

Module[308] [C:\WINDOWS\SYSTEM32\TAKEOWN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Übernimmt die Besitzrechte an einer Datei.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62976
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc270 - Tue Jul 14 01:25:36 2009
    Module Checksum      = 0x00017ee5
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [takeown.pdb]
    Module PDB Guid = {419ED816-4E80-43A3-86DB-B6467BB1BABB}
    Module PDB Age = 0x1

Module[309] [C:\WINDOWS\SYSTEM32\TAPIUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Windows(TM) Telephony Unattend Action
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13312
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bd421 - Tue Jul 14 02:41:05 2009
    Module Checksum      = 0x0000ba0f
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [TapiUnattend.pdb]
    Module PDB Guid = {4C99B28A-EFE9-4590-9199-AA59B612A06A}
    Module PDB Age = 0x1

Module[310] [C:\WINDOWS\SYSTEM32\TASKENG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Aufgabenplanungsmodul
  Product Version:   (6.1:7600.16699)
  File Version:      (6.1:7600.16699)
  File Size (bytes): 464384
  File Date:         Di Nov 02 06:10:47 2010
    Module TimeDateStamp = 0x4ccf7f10 - Tue Nov 02 04:01:36 2010
    Module Checksum      = 0x0007c9e0
    Module SizeOfImage   = 0x00074000
  Module Pointer to PDB = [TaskEng.pdb]
    Module PDB Guid = {920E6152-BED4-4153-ACCD-6AE8A89161C5}
    Module PDB Age = 0x2

Module[311] [C:\WINDOWS\SYSTEM32\TASKHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostprozess für Windows-Aufgaben
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 69120
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc3c1 - Tue Jul 14 01:31:13 2009
    Module Checksum      = 0x00012630
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [taskhost.pdb]
    Module PDB Guid = {74F19009-107C-47DC-AC38-2C3D34868C0B}
    Module PDB Age = 0x2

Module[312] [C:\WINDOWS\SYSTEM32\TASKKILL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Beendet Prozesse
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 112640
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bcd91 - Tue Jul 14 02:13:05 2009
    Module Checksum      = 0x00028c56
    Module SizeOfImage   = 0x0001f000
  Module Pointer to PDB = [taskkill.pdb]
    Module PDB Guid = {65F749E8-A9AD-475E-8C7D-317A422B9FE5}
    Module PDB Age = 0x2

Module[313] [C:\WINDOWS\SYSTEM32\TASKLIST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Listet die aktuell ausgeführten Aufgaben auf
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 108544
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bcd8e - Tue Jul 14 02:13:02 2009
    Module Checksum      = 0x0001bb0b
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [tasklist.pdb]
    Module PDB Guid = {03A9767D-AA3D-47EC-BF58-DDD297CAA0CD}
    Module PDB Age = 0x1

Module[314] [C:\WINDOWS\SYSTEM32\TASKMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Task-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 257024
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc3ee - Tue Jul 14 01:31:58 2009
    Module Checksum      = 0x00048128
    Module SizeOfImage   = 0x00045000
  Module Pointer to PDB = [taskmgr.pdb]
    Module PDB Guid = {12992B99-DBB3-492F-BF13-64371A3D6E79}
    Module PDB Age = 0x1

Module[315] [C:\WINDOWS\SYSTEM32\TCMSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Windows(R) Telefonieverwaltungssetup
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bd415 - Tue Jul 14 02:40:53 2009
    Module Checksum      = 0x0000b101
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [tcmsetup.pdb]
    Module PDB Guid = {C0C64568-8A3D-42A7-BB5E-2EAF1372ED9F}
    Module PDB Age = 0x1

Module[316] [C:\WINDOWS\SYSTEM32\TCPSVCS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP Services Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bcd01 - Tue Jul 14 02:10:41 2009
    Module Checksum      = 0x00010982
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [tcpsvcs.pdb]
    Module PDB Guid = {D99327BB-53A0-48C7-A5D8-AB4825E98518}
    Module PDB Age = 0x1

Module[317] [C:\WINDOWS\SYSTEM32\TIMEOUT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  timeout - Hält Befehlverarbeitungen an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 33280
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc271 - Tue Jul 14 01:25:37 2009
    Module Checksum      = 0x0000c56b
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [timeout.pdb]
    Module PDB Guid = {9BFA81BD-F67D-473B-A319-AC7F912A83D6}
    Module PDB Age = 0x1

Module[318] [C:\WINDOWS\SYSTEM32\TPMINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TPM-Initialisierungs-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 115200
  File Date:         Di Jul 14 02:39:47 2009
    Module TimeDateStamp = 0x4a5bc18c - Tue Jul 14 01:21:48 2009
    Module Checksum      = 0x0001fb88
    Module SizeOfImage   = 0x0001f000
  Module Pointer to PDB = [TpmInit.pdb]
    Module PDB Guid = {6D454729-28B6-4AFC-9B04-0541356C25CB}
    Module PDB Age = 0x1

Module[319] [C:\WINDOWS\SYSTEM32\TRACERPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Berichterstellung für Ereignisablaufverfolgung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 404992
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc3e9 - Tue Jul 14 01:31:53 2009
    Module Checksum      = 0x0006d3a2
    Module SizeOfImage   = 0x00089000
  Module Pointer to PDB = [tracerpt.pdb]
    Module PDB Guid = {26771BA9-8B73-42E4-891E-FDB1DFA66A01}
    Module PDB Age = 0x1

Module[320] [C:\WINDOWS\SYSTEM32\TRACERT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Traceroutebefehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bcd02 - Tue Jul 14 02:10:42 2009
    Module Checksum      = 0x00005dcc
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [tracert.pdb]
    Module PDB Guid = {2C0C76EE-DCDC-4D8D-BAC4-9F24D33A7D47}
    Module PDB Age = 0x1

Module[321] [C:\WINDOWS\SYSTEM32\TSCON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Verbinden von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22016
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bce80 - Tue Jul 14 02:17:04 2009
    Module Checksum      = 0x0000a643
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [tscon.pdb]
    Module PDB Guid = {1813DCEC-5356-440B-B08D-579890CF51C1}
    Module PDB Age = 0x1

Module[322] [C:\WINDOWS\SYSTEM32\TSDISCON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Trennen von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22016
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bce81 - Tue Jul 14 02:17:05 2009
    Module Checksum      = 0x00006a71
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [tsdiscon.pdb]
    Module PDB Guid = {2B946F6D-B3BE-4651-A32C-8948C19FD904}
    Module PDB Age = 0x1

Module[323] [C:\WINDOWS\SYSTEM32\TSECIMP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows(TM) TAPI-Sicherheitsdateiimportierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bd41a - Tue Jul 14 02:40:58 2009
    Module Checksum      = 0x0000bda7
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [tsecimp.pdb]
    Module PDB Guid = {0CDD81D9-8BCF-4498-AE88-54DE4612D3E8}
    Module PDB Age = 0x1

Module[324] [C:\WINDOWS\SYSTEM32\TSKILL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Abbrechen der Remotedesktopdienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bce88 - Tue Jul 14 02:17:12 2009
    Module Checksum      = 0x0000f4fc
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [tskill.pdb]
    Module PDB Guid = {4A173C66-70DA-4515-9D3A-33FE4EAA82F4}
    Module PDB Age = 0x1

Module[325] [C:\WINDOWS\SYSTEM32\TSTHEME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TSTheme Server Module
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 46592
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bce92 - Tue Jul 14 02:17:22 2009
    Module Checksum      = 0x0000dd87
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [TSTheme.pdb]
    Module PDB Guid = {C25C00C8-FFBF-4D39-83D5-3B177C0380EB}
    Module PDB Age = 0x1

Module[326] [C:\WINDOWS\SYSTEM32\TSWBPRXY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Remote Desktop Services Web Proxy
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 52224
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bce72 - Tue Jul 14 02:16:50 2009
    Module Checksum      = 0x00014120
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [TSWbPrxy.pdb]
    Module PDB Guid = {CEE81877-968A-4262-8955-080549C3FA9E}
    Module PDB Age = 0x1

Module[327] [C:\WINDOWS\SYSTEM32\TYPEPERF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilen-Leistungsüberwachung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 47104
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc3e0 - Tue Jul 14 01:31:44 2009
    Module Checksum      = 0x0001a604
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [typeperf.pdb]
    Module PDB Guid = {B5E608C1-D55A-4E90-A307-E4B69CE815AD}
    Module PDB Age = 0x1

Module[328] [C:\WINDOWS\SYSTEM32\TZUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Zeitzonendienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 57856
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc295 - Tue Jul 14 01:26:13 2009
    Module Checksum      = 0x000111e1
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [tzutil.pdb]
    Module PDB Guid = {50FD5D3D-57DF-4AD0-9A22-79E6AF162889}
    Module PDB Age = 0x1

Module[329] [C:\WINDOWS\SYSTEM32\UCSVC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Boot File Servicing Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 41984
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc1af - Tue Jul 14 01:22:23 2009
    Module Checksum      = 0x00016075
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [ucsvc.pdb]
    Module PDB Guid = {4B80E34D-EA98-4765-B0C8-DE18C2490B87}
    Module PDB Age = 0x1

Module[330] [C:\WINDOWS\SYSTEM32\UI0DETECT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Erkennung interaktiver Dienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40960
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc8c3 - Tue Jul 14 01:52:35 2009
    Module Checksum      = 0x0000cd12
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [UI0Detect.pdb]
    Module PDB Guid = {92CE4860-7EA1-45BA-9CDE-8D7C91051C56}
    Module PDB Age = 0x1

Module[331] [C:\WINDOWS\SYSTEM32\UNLODCTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  PerfMon-Leistungsindikatoren entfernen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40448
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc3ca - Tue Jul 14 01:31:22 2009
    Module Checksum      = 0x0000d3e1
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [unlodctr.pdb]
    Module PDB Guid = {C5717F4C-6380-4DCA-8730-557854E21694}
    Module PDB Age = 0x1

Module[332] [C:\WINDOWS\SYSTEM32\UPNPCONT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  UPnP Device Host Container
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25600
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bcd0b - Tue Jul 14 02:10:51 2009
    Module Checksum      = 0x0000803d
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [upnpcont.pdb]
    Module PDB Guid = {BE18E1FF-C09A-445F-9E73-00BAEDDF18DA}
    Module PDB Age = 0x1

Module[333] [C:\WINDOWS\SYSTEM32\USERACCOUNTCONTROLSETTINGS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  UserAccountControlSettings
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 193536
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc99a - Tue Jul 14 01:56:10 2009
    Module Checksum      = 0x00034338
    Module SizeOfImage   = 0x00033000
  Module Pointer to PDB = [UserAccountControlSettings.pdb]
    Module PDB Guid = {8B2505E7-52A4-4596-86B2-8D3373A399E5}
    Module PDB Age = 0x1

Module[334] [C:\WINDOWS\SYSTEM32\USERINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Userinit-Anmeldeanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 30208
  File Date:         Di Jul 14 02:39:48 2009
    Module TimeDateStamp = 0x4a5bc848 - Tue Jul 14 01:50:32 2009
    Module Checksum      = 0x00009c96
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [userinit.pdb]
    Module PDB Guid = {57D233E5-B5F0-4F55-8FF4-1390F5FC7AF7}
    Module PDB Age = 0x1

Module[335] [C:\WINDOWS\SYSTEM32\UTILMAN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1402880
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bd26d - Tue Jul 14 02:33:49 2009
    Module Checksum      = 0x00162279
    Module SizeOfImage   = 0x0015a000
  Module Pointer to PDB = [Utilman.pdb]
    Module PDB Guid = {FAD01030-CF77-49B1-9F2E-EB10E6606A93}
    Module PDB Age = 0x1

Module[336] [C:\WINDOWS\SYSTEM32\VAULTCMD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Tresor-Befehlszeilenprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc8de - Tue Jul 14 01:53:02 2009
    Module Checksum      = 0x000169f8
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [VaultCmd.pdb]
    Module PDB Guid = {BE91F997-2F4E-4197-B2EE-141FF268580A}
    Module PDB Age = 0x1

Module[337] [C:\WINDOWS\SYSTEM32\VAULTSYSUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Benutzeroberfläche für Schlüsselbund-Anmeldeinformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40448
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc8e5 - Tue Jul 14 01:53:09 2009
    Module Checksum      = 0x0000abe3
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [VaultSysUi.pdb]
    Module PDB Guid = {EDAEAF84-FB0B-4DBC-9A36-FEE2E60782F6}
    Module PDB Age = 0x1

Module[338] [C:\WINDOWS\SYSTEM32\VDS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Virtueller Datenträgerdienst
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 532480
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc520 - Tue Jul 14 01:37:04 2009
    Module Checksum      = 0x0008aba7
    Module SizeOfImage   = 0x00086000
  Module Pointer to PDB = [vds.pdb]
    Module PDB Guid = {BF5C442E-ADB2-457C-9E60-33FC71D19294}
    Module PDB Age = 0x1

Module[339] [C:\WINDOWS\SYSTEM32\VDSLDR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Virtual Disk Service Loader
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc507 - Tue Jul 14 01:36:39 2009
    Module Checksum      = 0x000063d6
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [vdsldr.pdb]
    Module PDB Guid = {8CC19978-6E40-497D-83E1-1EC00C65A7F4}
    Module PDB Age = 0x1

Module[340] [C:\WINDOWS\SYSTEM32\VERCLSID.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extension CLSID Verification Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11776
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc9f3 - Tue Jul 14 01:57:39 2009
    Module Checksum      = 0x0000953b
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [verclsid.pdb]
    Module PDB Guid = {618C67ED-B1A4-4A0D-AB84-032BFB23BE1A}
    Module PDB Age = 0x1

Module[341] [C:\WINDOWS\SYSTEM32\VERIFIER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberüberprüfungs-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 155648
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bce03 - Tue Jul 14 02:14:59 2009
    Module Checksum      = 0x0002f734
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [verifier.pdb]
    Module PDB Guid = {34CED735-9296-439F-AC85-4BBD0EADBBB4}
    Module PDB Age = 0x1

Module[342] [C:\WINDOWS\SYSTEM32\VMICSVC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Virtual Machine Integration Component Service
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 242176
  File Date:         Di Jul 14 00:43:21 2009
    Module TimeDateStamp = 0x4a5bc698 - Tue Jul 14 01:43:20 2009
    Module Checksum      = 0x00043883
    Module SizeOfImage   = 0x0003f000
  Module Pointer to PDB = [vmicsvc.pdb]
    Module PDB Guid = {A0D2B3B9-5E3C-404C-A1D1-AE7CB4B1C181}
    Module PDB Age = 0x1

Module[343] [C:\WINDOWS\SYSTEM32\VSSADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenschnittelle für Microsoft® Volumeschattenkopie-Dienst 
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 167424
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc51e - Tue Jul 14 01:37:02 2009
    Module Checksum      = 0x00031d80
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [vssadmin.pdb]
    Module PDB Guid = {A6D41DA5-B42F-4916-A6D3-B7B8B32FCFAA}
    Module PDB Age = 0x1

Module[344] [C:\WINDOWS\SYSTEM32\VSSUIRUN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Configure Shadow Copies
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 67072
  File Date:         Di Jul 14 02:39:49 2009
    Module TimeDateStamp = 0x4a5bc51a - Tue Jul 14 01:36:58 2009
    Module Checksum      = 0x0001395c
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [vssuirun.pdb]
    Module PDB Guid = {EB3CF7ED-A055-4DA5-950D-D41912378118}
    Module PDB Age = 0x1

Module[345] [C:\WINDOWS\SYSTEM32\VSSVC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft® Volumeschattenkopie-Dienst
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1598976
  File Date:         Di Jul 14 02:39:50 2009
    Module TimeDateStamp = 0x4a5bc59b - Tue Jul 14 01:39:07 2009
    Module Checksum      = 0x00195a7b
    Module SizeOfImage   = 0x0018a000
  Module Pointer to PDB = [vssvc.pdb]
    Module PDB Guid = {3D687BC6-7895-42D7-BB99-822DE9CC8841}
    Module PDB Age = 0x1

Module[346] [C:\WINDOWS\SYSTEM32\W32TM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Zeitdienst-Diagnoseprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81408
  File Date:         Di Jul 14 02:39:50 2009
    Module TimeDateStamp = 0x4a5bc815 - Tue Jul 14 01:49:41 2009
    Module Checksum      = 0x0001d475
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [w32tm.pdb]
    Module PDB Guid = {537AC627-141F-4D7D-9735-728E8E61CBCC}
    Module PDB Age = 0x1

Module[347] [C:\WINDOWS\SYSTEM32\WAITFOR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  waitfor - Wartet auf bzw. sendet ein Signal über das Netzwerk.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 44544
  File Date:         Di Jul 14 02:39:50 2009
    Module TimeDateStamp = 0x4a5bc273 - Tue Jul 14 01:25:39 2009
    Module Checksum      = 0x00011ef8
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [waitfor.pdb]
    Module PDB Guid = {275B8CA2-D5CF-4F2E-8A0C-A725C2515D4A}
    Module PDB Age = 0x1

Module[348] [C:\WINDOWS\SYSTEM32\WECUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm für die Ereignissammlung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 113152
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bc760 - Tue Jul 14 01:46:40 2009
    Module Checksum      = 0x000270e4
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [wecutil.pdb]
    Module PDB Guid = {90C7E59C-393F-40EF-B1AA-524E255D70E7}
    Module PDB Age = 0x1

Module[349] [C:\WINDOWS\SYSTEM32\WERFAULT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Problemberichterstattung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 415232
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bc607 - Tue Jul 14 01:40:55 2009
    Module Checksum      = 0x00074d1c
    Module SizeOfImage   = 0x00069000
  Module Pointer to PDB = [WerFault.pdb]
    Module PDB Guid = {46F7DD5D-4FF9-411A-A647-978BF17BAE77}
    Module PDB Age = 0x1

Module[350] [C:\WINDOWS\SYSTEM32\WERFAULTSECURE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Fehlerberichterstattung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x000123d0
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [WerFaultSecure.pdb]
    Module PDB Guid = {8A384CC4-6760-4870-81E9-E24961737B44}
    Module PDB Age = 0x1

Module[351] [C:\WINDOWS\SYSTEM32\WERMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Problem Reporting
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50688
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bc5f9 - Tue Jul 14 01:40:41 2009
    Module Checksum      = 0x00017252
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [wermgr.pdb]
    Module PDB Guid = {066EDC1C-70EC-4B1F-AC4C-5578F004C53B}
    Module PDB Age = 0x1

Module[352] [C:\WINDOWS\SYSTEM32\WEVTUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm für die Ereignisverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 273920
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bc767 - Tue Jul 14 01:46:47 2009
    Module Checksum      = 0x0004a99d
    Module SizeOfImage   = 0x00046000
  Module Pointer to PDB = [wevtutil.pdb]
    Module PDB Guid = {FDDA49EE-D27F-443F-8799-AD757E04C314}
    Module PDB Age = 0x1

Module[353] [C:\WINDOWS\SYSTEM32\WEXTRACT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Win32 Cabinet Self-Extractor                                           
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 161792
  File Date:         Di Jul 14 02:39:51 2009
    Module TimeDateStamp = 0x4a5bca23 - Tue Jul 14 01:58:27 2009
    Module Checksum      = 0x00035060
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [wextract.pdb]
    Module PDB Guid = {6871BFB0-84E2-497C-88AF-9CD886834EFC}
    Module PDB Age = 0x1

Module[354] [C:\WINDOWS\SYSTEM32\WHERE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Where - Zeigt Dateipfade an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:39:52 2009
    Module TimeDateStamp = 0x4a5bc274 - Tue Jul 14 01:25:40 2009
    Module Checksum      = 0x00019ef9
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [where.pdb]
    Module PDB Guid = {678A1FF6-3D62-4E2D-9063-3B495B9A8664}
    Module PDB Age = 0x1

Module[355] [C:\WINDOWS\SYSTEM32\WHOAMI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  whoami - Zeigt Informationen über angemeldete Benutzer an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 52736
  File Date:         Di Jul 14 02:39:52 2009
    Module TimeDateStamp = 0x4a5bc27a - Tue Jul 14 01:25:46 2009
    Module Checksum      = 0x00017c21
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [whoami.pdb]
    Module PDB Guid = {6E632102-4183-49E8-819F-BA28A785D623}
    Module PDB Age = 0x1

Module[356] [C:\WINDOWS\SYSTEM32\WIMSERV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wimfltr v2 extractor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 403968
  File Date:         Di Jul 14 02:39:52 2009
    Module TimeDateStamp = 0x4a5bc364 - Tue Jul 14 01:29:40 2009
    Module Checksum      = 0x00070721
    Module SizeOfImage   = 0x00067000
  Module Pointer to PDB = [wimserv.pdb]
    Module PDB Guid = {68DC46D9-DF74-4A5F-AB5B-366EC77047E3}
    Module PDB Age = 0x1

Module[357] [C:\WINDOWS\SYSTEM32\WININIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Startanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 129024
  File Date:         Di Jul 14 02:39:52 2009
    Module TimeDateStamp = 0x4a5bc8c4 - Tue Jul 14 01:52:36 2009
    Module Checksum      = 0x00025c2c
    Module SizeOfImage   = 0x00023000
  Module Pointer to PDB = [wininit.pdb]
    Module PDB Guid = {02A5DC1B-23B2-4D06-8CFA-12F45BAF52E2}
    Module PDB Age = 0x2

Module[358] [C:\WINDOWS\SYSTEM32\WINLOAD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  OS Loader
  Product Version:   (6.1:7600.16757)
  File Version:      (6.1:7600.16757)
  File Size (bytes): 603976
  File Date:         Sa Feb 05 13:39:21 2011
    Module TimeDateStamp = 0x4d4d1be7 - Sat Feb 05 10:44:07 2011
    Module Checksum      = 0x0009ed98
    Module SizeOfImage   = 0x000c2000
  Module Pointer to PDB = [winload_prod.pdb]
    Module PDB Guid = {32D9E380-E7E7-4549-94A5-3496FF5F913F}
    Module PDB Age = 0x1

Module[359] [C:\WINDOWS\SYSTEM32\WINLOGON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Anmeldeanwendung
  Product Version:   (6.1:7600.16447)
  File Version:      (6.1:7600.16447)
  File Size (bytes): 389632
  File Date:         Mi Okt 28 07:24:40 2009
    Module TimeDateStamp = 0x4ae7b522 - Wed Oct 28 04:06:10 2009
    Module Checksum      = 0x00066cbf
    Module SizeOfImage   = 0x00062000
  Module Pointer to PDB = [winlogon.pdb]
    Module PDB Guid = {38204824-D94B-4AD8-A513-784956A41594}
    Module PDB Age = 0x2

Module[360] [C:\WINDOWS\SYSTEM32\WINRESUME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Startanwendung zur Wiederaufnahme aus dem Ruhezustand
  Product Version:   (6.1:7600.16757)
  File Version:      (6.1:7600.16757)
  File Size (bytes): 518160
  File Date:         Sa Feb 05 13:39:21 2011
    Module TimeDateStamp = 0x4d4d1bd5 - Sat Feb 05 10:43:49 2011
    Module Checksum      = 0x0008363b
    Module SizeOfImage   = 0x000ab000
  Module Pointer to PDB = [winresume.pdb]
    Module PDB Guid = {432B3516-537D-4275-8A92-735C8A73896D}
    Module PDB Age = 0x1

Module[361] [C:\WINDOWS\SYSTEM32\WINRS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  winrs
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 51200
  File Date:         Di Jul 14 02:39:53 2009
    Module TimeDateStamp = 0x4a5bc7aa - Tue Jul 14 01:47:54 2009
    Module Checksum      = 0x00016c19
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [winrs.pdb]
    Module PDB Guid = {938545A0-F804-4274-9238-ED9AD76BF995}
    Module PDB Age = 0x1

Module[362] [C:\WINDOWS\SYSTEM32\WINRSHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  winrscmde
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:39:53 2009
    Module TimeDateStamp = 0x4a5bc7ab - Tue Jul 14 01:47:55 2009
    Module Checksum      = 0x0000f18d
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [winrshost.pdb]
    Module PDB Guid = {A2E4C2A4-0B5C-422A-B3BC-89E99DAD0B87}
    Module PDB Age = 0x1

Module[363] [C:\WINDOWS\SYSTEM32\WINVER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Versionsmeldungssymbol
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 80384
  File Date:         Di Jul 14 02:39:54 2009
    Module TimeDateStamp = 0x4a5bc9ea - Tue Jul 14 01:57:30 2009
    Module Checksum      = 0x000176b2
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [winver.pdb]
    Module PDB Guid = {09FCF97A-956A-46DD-8082-D39F459475D2}
    Module PDB Age = 0x1

Module[364] [C:\WINDOWS\SYSTEM32\WKSPRT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  WorkspaceRuntime
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 248832
  File Date:         Di Jul 14 01:16:53 2009
    Module TimeDateStamp = 0x4a5bce72 - Tue Jul 14 02:16:50 2009
    Module Checksum      = 0x0004236f
    Module SizeOfImage   = 0x00041000
  Module Pointer to PDB = [wksprt.pdb]
    Module PDB Guid = {EC56C84B-A372-4745-B6C6-03A5B824E3E9}
    Module PDB Age = 0x1

Module[365] [C:\WINDOWS\SYSTEM32\WLRMDR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows logon reminder
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 44544
  File Date:         Di Jul 14 02:39:55 2009
    Module TimeDateStamp = 0x4a5bc8be - Tue Jul 14 01:52:30 2009
    Module Checksum      = 0x0000eb48
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [wlrmdr.pdb]
    Module PDB Guid = {43009E82-4334-4FFC-927D-5A46AFE1E149}
    Module PDB Age = 0x1

Module[366] [C:\WINDOWS\SYSTEM32\WOWREG32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SetupAPI 64-bit Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bc2ad - Tue Jul 14 01:26:37 2009
    Module Checksum      = 0x00008903
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [wowreg32.pdb]
    Module PDB Guid = {8B2CDDB3-2904-4337-96BC-F01815CAD55B}
    Module PDB Age = 0x1

Module[367] [C:\WINDOWS\SYSTEM32\WRITE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Write
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bc9ac - Tue Jul 14 01:56:28 2009
    Module Checksum      = 0x0000883f
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [write.pdb]
    Module PDB Guid = {4FD8CA66-96F4-45A7-B969-AB9BBD76E459}
    Module PDB Age = 0x1

Module[368] [C:\WINDOWS\SYSTEM32\WSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft ® Windows Based Script Host
  Product Version:   (5.8:7600.16385)
  File Version:      (5.8:7600.16385)
  File Size (bytes): 168960
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bca28 - Tue Jul 14 01:58:32 2009
    Module Checksum      = 0x00032f9b
    Module SizeOfImage   = 0x0002c000
  Module Pointer to PDB = [wscript.pdb]
    Module PDB Guid = {F275A90F-ADCA-4538-AB43-E7F656411EA5}
    Module PDB Age = 0x1

Module[369] [C:\WINDOWS\SYSTEM32\WSMANHTTPCONFIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  WSMan HTTP Configuration File
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 265728
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bc7b1 - Tue Jul 14 01:48:01 2009
    Module Checksum      = 0x0004c3b6
    Module SizeOfImage   = 0x00044000
  Module Pointer to PDB = [WSManHTTPConfig.pdb]
    Module PDB Guid = {06F2E31A-AA28-420E-8AB3-269DE4C13DD9}
    Module PDB Age = 0x1

Module[370] [C:\WINDOWS\SYSTEM32\WSMPROVHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  wsmprovhost
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bc7ac - Tue Jul 14 01:47:56 2009
    Module Checksum      = 0x00008df5
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [wsmprovhost.pdb]
    Module PDB Guid = {556DAB4A-3B70-48BF-8A5D-0A4130EDE5C1}
    Module PDB Age = 0x1

Module[371] [C:\WINDOWS\SYSTEM32\WSQMCONS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows SQM-Konsolidator
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 293888
  File Date:         Di Jul 14 02:39:57 2009
    Module TimeDateStamp = 0x4a5bc600 - Tue Jul 14 01:40:48 2009
    Module Checksum      = 0x00050ef1
    Module SizeOfImage   = 0x0004e000
  Module Pointer to PDB = [wsqmcons.pdb]
    Module PDB Guid = {3E2C53F6-7B3C-4415-A115-8E08BC30DF15}
    Module PDB Age = 0x1

Module[372] [C:\WINDOWS\SYSTEM32\WUAPP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Update Application Launcher
  Product Version:   (7.3:7600.16385)
  File Version:      (7.3:7600.16385)
  File Size (bytes): 36864
  File Date:         Di Jul 14 02:39:58 2009
    Module TimeDateStamp = 0x4a5bd2b2 - Tue Jul 14 02:34:58 2009
    Module Checksum      = 0x0000dfca
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [wuapp.pdb]
    Module PDB Guid = {59407B25-B628-42E0-9466-D9765DEFC3EE}
    Module PDB Age = 0x1

Module[373] [C:\WINDOWS\SYSTEM32\WUAUCLT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Update
  Product Version:   (7.3:7600.16385)
  File Version:      (7.3:7600.16385)
  File Size (bytes): 51200
  File Date:         Di Jul 14 02:39:58 2009
    Module TimeDateStamp = 0x4a5bd2a8 - Tue Jul 14 02:34:48 2009
    Module Checksum      = 0x0001a0f8
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [wuauclt.pdb]
    Module PDB Guid = {8F23FA49-3848-4921-9050-7ED98B2F60F3}
    Module PDB Age = 0x1

Module[374] [C:\WINDOWS\SYSTEM32\WUDFHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Driver Foundation - Benutzermodus-Treiberframework-Hostprozess
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 226816
  File Date:         Di Jul 14 02:39:58 2009
    Module TimeDateStamp = 0x4a5bcbd0 - Tue Jul 14 02:05:36 2009
    Module Checksum      = 0x00046654
    Module SizeOfImage   = 0x0003b000
  Module Pointer to PDB = [WUDFHost.pdb]
    Module PDB Guid = {2812E65A-24AB-4358-A3BE-133F6B0CC118}
    Module PDB Age = 0x1

Module[375] [C:\WINDOWS\SYSTEM32\WUSA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eigenständiges Windows Update-Installationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 307200
  File Date:         Di Jul 14 02:39:58 2009
    Module TimeDateStamp = 0x4a5bc4bb - Tue Jul 14 01:35:23 2009
    Module Checksum      = 0x000508ac
    Module SizeOfImage   = 0x0004f000
  Module Pointer to PDB = [wusa.pdb]
    Module PDB Guid = {E0BFC0C4-0BE2-4099-BFC8-C57A288C97FD}
    Module PDB Age = 0x1

Module[376] [C:\WINDOWS\SYSTEM32\XCOPY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extended Copy Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:39:58 2009
    Module TimeDateStamp = 0x4a5bc26c - Tue Jul 14 01:25:32 2009
    Module Checksum      = 0x0001a005
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [xcopy.pdb]
    Module PDB Guid = {537BD0C0-B07D-4BAA-B7FE-00006E1BDCED}
    Module PDB Age = 0x1

Module[377] [C:\WINDOWS\SYSTEM32\XLOG.EXE] 
  Company Name:      Dialogic
  File Description:  Maintenance_Tools
  Product Version:   (4.2:3.639)
  File Version:      (4.2:3.639)
  File Size (bytes): 239104
  File Date:         Fr Jul 02 09:59:42 2010
    Module TimeDateStamp = 0x4baccbce - Fri Mar 26 15:59:26 2010
    Module Checksum      = 0x00000000
    Module SizeOfImage   = 0x00041000
  Module Pointer to PDB = [W:\src\maint\4\nt\bin\50\AMD64\FREE\xlog.pdb]
    Module PDB Guid = {FA3EF6EF-7530-4B59-9DE6-A92B5D260B44}
    Module PDB Age = 0x3

Module[378] [C:\WINDOWS\SYSTEM32\XWIZARD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostprozess für erweiterbare Assistenten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 42496
  File Date:         Di Jul 14 02:39:59 2009
    Module TimeDateStamp = 0x4a5bcc22 - Tue Jul 14 02:06:58 2009
    Module Checksum      = 0x0000f16b
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [xwizard.pdb]
    Module PDB Guid = {DDED1E09-6322-4566-AD92-810AE554076A}
    Module PDB Age = 0x1

