*******************************************************************************
CHECKSYM V2.3 - Symbol Verification Program            - gregwi@microsoft.com
*******************************************************************************

***** COLLECTION OPTIONS *****

Collect Information From File(s) Specified by the User
	-F C:\Windows\System32\*.EXE

***** INFORMATION CHECKING OPTIONS *****

Output Symbol Information From Modules
	-S

Collect Version and File-System Information From Modules
	-R

***** OUTPUT OPTIONS *****

Output Results to STDOUT

Output Collected Module Information To a CSV File
	-O C:\Windows\HPSReports\Enhanced\Report\ALARM1_SysWOW64_EXE.CSV
-------------------------------------------------------------------------------

Collecting Modules Data from file path.... (this may take a few minutes)
Unable to CreateMappedViewOfFile of the input file C:\Windows\HPSReports\Enhanced\Report\ALARM1_SysWOW64_EXE.CSV.
Error = 1006 (0x3ee)
[Der Datentrger einer Datei wurde extern so gendert, dass die geffnete Datei nicht mehr gltig ist.]

*******************************************************************************
[FILESYSTEM MODULES] - Printing Module Information for 293 Modules.
[FILESYSTEM MODULES] - Context: Filesystem Modules
*******************************************************************************

Module[  1] [C:\WINDOWS\SYSTEM32\ACOPY2.EXE] 
  Company Name:      Dialogic
  File Description:  ACOPY2 for Windows NT
  Product Version:   (3.50:1.1)
  File Version:      (3.50:1.1)
  File Size (bytes): 109056
  File Date:         Fr Jul 02 10:00:04 2010
  Module has NO symbols!

Module[  2] [C:\WINDOWS\SYSTEM32\ADAPTERTROUBLESHOOTER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Problembehandlung fr Grafikkarten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 38912
  File Date:         Di Jul 14 02:14:11 2009
    Module TimeDateStamp = 0x4a5bc5f9 - Tue Jul 14 01:40:41 2009
    Module Checksum      = 0x00010cd9
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [AdapterTroubleshooter.pdb]
    Module PDB Guid = {E7B1337A-909A-4E8E-BC20-5DA59C634A79}
    Module PDB Age = 0x1

Module[  3] [C:\WINDOWS\SYSTEM32\ARP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl ARP
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bc95f - Tue Jul 14 01:55:11 2009
    Module Checksum      = 0x000101c8
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [arp.pdb]
    Module PDB Guid = {B45DD0BD-D807-4641-BA10-24A757E6409C}
    Module PDB Age = 0x1

Module[  4] [C:\WINDOWS\SYSTEM32\AT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm fr Zeitplandienst
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bc544 - Tue Jul 14 01:37:40 2009
    Module Checksum      = 0x0000d61c
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [at.pdb]
    Module PDB Guid = {3E06E441-A18E-495B-8116-63BA97DDE280}
    Module PDB Age = 0x1

Module[  5] [C:\WINDOWS\SYSTEM32\ATBROKER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Transitions Accessible technologies between desktops
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 29184
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bcdc4 - Tue Jul 14 02:13:56 2009
    Module Checksum      = 0x00014ac9
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [ATBroker.pdb]
    Module PDB Guid = {376D0A05-15BE-4977-A37D-595D3ECE0586}
    Module PDB Age = 0x1

Module[  6] [C:\WINDOWS\SYSTEM32\ATTRIB.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Attribute-Programm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bbff5 - Tue Jul 14 01:15:01 2009
    Module Checksum      = 0x000120ea
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [attrib.pdb]
    Module PDB Guid = {DC2D084C-A5A0-41A9-8290-2541EA5E295C}
    Module PDB Age = 0x1

Module[  7] [C:\WINDOWS\SYSTEM32\AUDITPOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  berwachungsrichtlinienprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50176
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bc47d - Tue Jul 14 01:34:21 2009
    Module Checksum      = 0x000199c5
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [auditpol.pdb]
    Module PDB Guid = {F7453B21-6FBA-47A8-8302-A095E0A2DDAF}
    Module PDB Age = 0x1

Module[  8] [C:\WINDOWS\SYSTEM32\AUTOCHK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto Check Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 668160
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bbff8 - Tue Jul 14 01:15:04 2009
    Module Checksum      = 0x000a4e43
    Module SizeOfImage   = 0x000a6000
  Module Pointer to PDB = [autochk.pdb]
    Module PDB Guid = {254ECE35-9284-4513-B596-17838D807B45}
    Module PDB Age = 0x1

Module[  9] [C:\WINDOWS\SYSTEM32\AUTOCONV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto File System Conversion Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 679936
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bbff8 - Tue Jul 14 01:15:04 2009
    Module Checksum      = 0x000a8aa0
    Module SizeOfImage   = 0x000a9000
  Module Pointer to PDB = [autoconv.pdb]
    Module PDB Guid = {CE2B4087-13B1-4170-8A60-C993B65747AB}
    Module PDB Age = 0x1

Module[ 10] [C:\WINDOWS\SYSTEM32\AUTOFMT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Auto File System Format Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 659456
  File Date:         Di Jul 14 02:14:12 2009
    Module TimeDateStamp = 0x4a5bbff9 - Tue Jul 14 01:15:05 2009
    Module Checksum      = 0x000ac02d
    Module SizeOfImage   = 0x000a4000
  Module Pointer to PDB = [autofmt.pdb]
    Module PDB Guid = {DAA0C298-235D-4D9A-97A3-8065D4D792F4}
    Module PDB Age = 0x1

Module[ 11] [C:\WINDOWS\SYSTEM32\BITSADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  BITS-Verwaltungsprogramm
  Product Version:   (7.5:7600.16385)
  File Version:      (7.5:7600.16385)
  File Size (bytes): 186368
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc378 - Tue Jul 14 01:30:00 2009
    Module Checksum      = 0x0002e116
    Module SizeOfImage   = 0x00044000
  Module Pointer to PDB = [bitsadmin.pdb]
    Module PDB Guid = {80A6EA08-A9BB-418F-A790-01221F587027}
    Module PDB Age = 0x1

Module[ 12] [C:\WINDOWS\SYSTEM32\BOOTCFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  BootCfg - Zeigt Starteinstellungen an und ndert diese.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81408
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc3e6 - Tue Jul 14 01:31:50 2009
    Module Checksum      = 0x000148e7
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [bootcfg.pdb]
    Module PDB Guid = {A84F1D92-63F8-4760-9E65-CF455FE4A704}
    Module PDB Age = 0x1

Module[ 13] [C:\WINDOWS\SYSTEM32\CACLS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ACL-Steuerungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25600
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc006 - Tue Jul 14 01:15:18 2009
    Module Checksum      = 0x0000b218
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [cacls.pdb]
    Module PDB Guid = {39C02191-42D6-4124-9A84-CA8EBC9109F3}
    Module PDB Age = 0x1

Module[ 14] [C:\WINDOWS\SYSTEM32\CALC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Rechner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 776192
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc622 - Tue Jul 14 01:41:22 2009
    Module Checksum      = 0x000cd612
    Module SizeOfImage   = 0x000c0000
  Module Pointer to PDB = [calc.pdb]
    Module PDB Guid = {A6BBB371-9411-4D6C-B5A9-80C5B0BB4719}
    Module PDB Age = 0x2

Module[ 15] [C:\WINDOWS\SYSTEM32\CERTENROLLCTRL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zertifikatregistrierungs-Steuerelement
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 67072
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc44b - Tue Jul 14 01:33:31 2009
    Module Checksum      = 0x0001e877
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [CertEnrollCtrl.pdb]
    Module PDB Guid = {6C89073A-3FC4-47E5-BDB7-ADB1F71E234B}
    Module PDB Age = 0x1

Module[ 16] [C:\WINDOWS\SYSTEM32\CERTREQ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CertReq.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 263168
  File Date:         Di Jul 14 02:14:13 2009
    Module TimeDateStamp = 0x4a5bc445 - Tue Jul 14 01:33:25 2009
    Module Checksum      = 0x0004a578
    Module SizeOfImage   = 0x00044000
  Module Pointer to PDB = [certreq.pdb]
    Module PDB Guid = {23BF90D1-BA5F-4247-AB7B-91373A3539C8}
    Module PDB Age = 0x1

Module[ 17] [C:\WINDOWS\SYSTEM32\CERTUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CertUtil.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 889856
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bc45f - Tue Jul 14 01:33:51 2009
    Module Checksum      = 0x000e3fc1
    Module SizeOfImage   = 0x000de000
  Module Pointer to PDB = [certutil.pdb]
    Module PDB Guid = {A17CA1AF-0378-4C4E-B96C-698E0CD95DEE}
    Module PDB Age = 0x1

Module[ 18] [C:\WINDOWS\SYSTEM32\CHANGE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum ndern von Remotedesktopdiensten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bcafc - Tue Jul 14 02:02:04 2009
    Module Checksum      = 0x0000aaf2
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [change.pdb]
    Module PDB Guid = {CEE3373A-E19D-4ECE-B457-C329EC165434}
    Module PDB Age = 0x1

Module[ 19] [C:\WINDOWS\SYSTEM32\CHGLOGON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Anmeldungsnderung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bcafd - Tue Jul 14 02:02:05 2009
    Module Checksum      = 0x000067f4
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [chglogon.pdb]
    Module PDB Guid = {56EFB0CD-7C76-445C-B0C8-9C222BB58D76}
    Module PDB Age = 0x1

Module[ 20] [C:\WINDOWS\SYSTEM32\CHGPORT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum ndern von Anschlssen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bcafe - Tue Jul 14 02:02:06 2009
    Module Checksum      = 0x0000e6f8
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [chgport.pdb]
    Module PDB Guid = {F3717587-2148-4580-AD90-7CC8ABC469E3}
    Module PDB Age = 0x1

Module[ 21] [C:\WINDOWS\SYSTEM32\CHGUSR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum ndern der Dateizuordnung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bcb01 - Tue Jul 14 02:02:09 2009
    Module Checksum      = 0x0000d07f
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [chgusr.pdb]
    Module PDB Guid = {BC648D98-3056-4247-9406-DD15B49F29BE}
    Module PDB Age = 0x1

Module[ 22] [C:\WINDOWS\SYSTEM32\CHKDSK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Dateitrgerberprfung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bbffa - Tue Jul 14 01:15:06 2009
    Module Checksum      = 0x0000df87
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [chkdsk.pdb]
    Module PDB Guid = {8C2C9793-B813-45C6-9BF2-7B36FF188634}
    Module PDB Age = 0x1

Module[ 23] [C:\WINDOWS\SYSTEM32\CHKNTFS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur NTFS-Volumewartung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bbff9 - Tue Jul 14 01:15:05 2009
    Module Checksum      = 0x00008443
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [chkntfs.pdb]
    Module PDB Guid = {A212055A-1358-406B-8204-5A2B35650C1E}
    Module PDB Age = 0x1

Module[ 24] [C:\WINDOWS\SYSTEM32\CHOICE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bietet eine Auswahl an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 29696
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x00008540
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [choice.pdb]
    Module PDB Guid = {0A47E28B-38FB-473C-BF60-E1F81B5D4CBC}
    Module PDB Age = 0x1

Module[ 25] [C:\WINDOWS\SYSTEM32\CIPHER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm zur Dateiverschlsselung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 37376
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bc000 - Tue Jul 14 01:15:12 2009
    Module Checksum      = 0x0001197f
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [cipher.pdb]
    Module PDB Guid = {3B6BAC1D-EBD3-4B54-BA52-E9B23E3C5469}
    Module PDB Age = 0x1

Module[ 26] [C:\WINDOWS\SYSTEM32\CLICONFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SQL Client Configuration Utility EXE
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 45056
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bcd57 - Tue Jul 14 02:12:07 2009
    Module Checksum      = 0x0000d034
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [cliconfg.pdb]
    Module PDB Guid = {BCB56105-CC6B-431C-840D-BDA5D3EFAFAF}
    Module PDB Age = 0x1

Module[ 27] [C:\WINDOWS\SYSTEM32\CLIP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Clip - Kopiert Daten in die Zwischenablage.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:14:14 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x0000fbf0
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [clip.pdb]
    Module PDB Guid = {86835A4E-84E8-4E0B-999E-CBD2EDF5980E}
    Module PDB Age = 0x1

Module[ 28] [C:\WINDOWS\SYSTEM32\CMD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Befehlsprozessor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 301568
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc19e - Tue Jul 14 01:22:06 2009
    Module Checksum      = 0x0004b18f
    Module SizeOfImage   = 0x0004c000
  Module Pointer to PDB = [cmd.pdb]
    Module PDB Guid = {74EE8350-4B33-44B4-A97A-C340DC116838}
    Module PDB Age = 0x2

Module[ 29] [C:\WINDOWS\SYSTEM32\CMDKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm fr die Anmeldeinformationsverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc46b - Tue Jul 14 01:34:03 2009
    Module Checksum      = 0x00010339
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [cmdkey.pdb]
    Module PDB Guid = {C2FA8608-FEF7-42F9-A726-4694C23FC53B}
    Module PDB Age = 0x1

Module[ 30] [C:\WINDOWS\SYSTEM32\CMDL32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Autodownload
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 72704
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc938 - Tue Jul 14 01:54:32 2009
    Module Checksum      = 0x0001cebe
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [cmdl32.pdb]
    Module PDB Guid = {9A4B0049-65BD-4C58-8383-77E44A4F9B2F}
    Module PDB Age = 0x1

Module[ 31] [C:\WINDOWS\SYSTEM32\CMMON32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Monitor
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc959 - Tue Jul 14 01:55:05 2009
    Module Checksum      = 0x000123ba
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [cmmon32.pdb]
    Module PDB Guid = {4F9CFA8D-0E97-475B-9EBE-519D928E88AE}
    Module PDB Age = 0x1

Module[ 32] [C:\WINDOWS\SYSTEM32\CMSTP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Verbindungs-Manager-Profilinstallation
  Product Version:   (7.2:7600.16385)
  File Version:      (7.2:7600.16385)
  File Size (bytes): 84992
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc951 - Tue Jul 14 01:54:57 2009
    Module Checksum      = 0x0001f850
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [cmstp.pdb]
    Module PDB Guid = {9CBE3CF0-EF61-41FB-BDC3-559ED157BD66}
    Module PDB Age = 0x1

Module[ 33] [C:\WINDOWS\SYSTEM32\COLORCPL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft-Farbsystemsteuerung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 86016
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc260 - Tue Jul 14 01:25:20 2009
    Module Checksum      = 0x0001f905
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [colorcpl.pdb]
    Module PDB Guid = {4D56643B-4506-446E-BA10-84A5D5B94039}
    Module PDB Age = 0x1

Module[ 34] [C:\WINDOWS\SYSTEM32\COMP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Vergleichen von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20480
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bbffb - Tue Jul 14 01:15:07 2009
    Module Checksum      = 0x0001019f
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [comp.pdb]
    Module PDB Guid = {E91A218F-EF56-452C-8D68-4C86050EED17}
    Module PDB Age = 0x1

Module[ 35] [C:\WINDOWS\SYSTEM32\COMPACT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm fr die Dateikomprimierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18432
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bbffa - Tue Jul 14 01:15:06 2009
    Module Checksum      = 0x00010e92
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [compact.pdb]
    Module PDB Guid = {A9B63DAB-AE49-4620-B31E-4939361149B6}
    Module PDB Age = 0x1

Module[ 36] [C:\WINDOWS\SYSTEM32\COMPUTERDEFAULTS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerung fr Programmzugriff und Computerstandards
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36352
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc5fb - Tue Jul 14 01:40:43 2009
    Module Checksum      = 0x00012831
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [ComputerDefaults.pdb]
    Module PDB Guid = {0B879C98-2E00-488E-AB42-F68245D2E159}
    Module PDB Age = 0x1

Module[ 37] [C:\WINDOWS\SYSTEM32\CONTROL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Control Panel
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 113152
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bc5de - Tue Jul 14 01:40:14 2009
    Module Checksum      = 0x0001ef8f
    Module SizeOfImage   = 0x0001f000
  Module Pointer to PDB = [control.pdb]
    Module PDB Guid = {406F8FF6-D477-47F2-9BE5-4A596EB2F698}
    Module PDB Age = 0x1

Module[ 38] [C:\WINDOWS\SYSTEM32\CONVERT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  File System Conversion Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:14:15 2009
    Module TimeDateStamp = 0x4a5bbff9 - Tue Jul 14 01:15:05 2009
    Module Checksum      = 0x00012883
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [convert.pdb]
    Module PDB Guid = {EEC15969-4DE7-415A-8C13-4F3563B43521}
    Module PDB Age = 0x1

Module[ 39] [C:\WINDOWS\SYSTEM32\CREDWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent zum Sichern und Wiederherstellen von Anmeldeinformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28160
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc46a - Tue Jul 14 01:34:02 2009
    Module Checksum      = 0x00007b08
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [credwiz.pdb]
    Module PDB Guid = {A70E2812-CC0D-438D-9BB7-DDFB80E0E9AE}
    Module PDB Age = 0x1

Module[ 40] [C:\WINDOWS\SYSTEM32\CSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft  Console Based Script Host
  Product Version:   (5.8:7600.16385)
  File Version:      (5.8:7600.16385)
  File Size (bytes): 126976
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc670 - Tue Jul 14 01:42:40 2009
    Module Checksum      = 0x00028539
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [cscript.pdb]
    Module PDB Guid = {BC5F1443-228A-4831-9684-1B3112D61C6E}
    Module PDB Age = 0x2

Module[ 41] [C:\WINDOWS\SYSTEM32\CTFMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  CTF-Ladeprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8704
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc292 - Tue Jul 14 01:26:10 2009
    Module Checksum      = 0x00009d8e
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [ctfmon.pdb]
    Module PDB Guid = {EF8EBB20-2C5E-4C03-A69D-5E65B056EE4D}
    Module PDB Age = 0x1

Module[ 42] [C:\WINDOWS\SYSTEM32\CTTUNE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ClearType-Tuner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 309248
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc60f - Tue Jul 14 01:41:03 2009
    Module Checksum      = 0x00058263
    Module SizeOfImage   = 0x0004e000
  Module Pointer to PDB = [cttune.pdb]
    Module PDB Guid = {C2E54732-47D6-46B5-9875-959AF6A3BE22}
    Module PDB Age = 0x1

Module[ 43] [C:\WINDOWS\SYSTEM32\CTTUNESVR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ClearType-Tuner
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36352
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc60b - Tue Jul 14 01:40:59 2009
    Module Checksum      = 0x00009d97
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [cttunesvr.pdb]
    Module PDB Guid = {0C68C777-0381-4928-B850-EC558E8DA7A9}
    Module PDB Age = 0x1

Module[ 44] [C:\WINDOWS\SYSTEM32\DCOMCNFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM+
  Product Version:   (6.1:7600.16385)
  File Version:      (2001.12:8530.16385)
  File Size (bytes): 8704
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc6d4 - Tue Jul 14 01:44:20 2009
    Module Checksum      = 0x00003fc3
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [DCOMCnfg.pdb]
    Module PDB Guid = {971CDBA1-BEF2-41F8-BE61-8577E3834743}
    Module PDB Age = 0x1

Module[ 45] [C:\WINDOWS\SYSTEM32\DDODIAG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DDODiag is a tool that collects Device Display Object (DDO) information from the system and logs it
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36864
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc215 - Tue Jul 14 01:24:05 2009
    Module Checksum      = 0x00015579
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [DDODiag.pdb]
    Module PDB Guid = {ADA034C8-1DE2-42D4-BA58-B6E7F5D43766}
    Module PDB Age = 0x1

Module[ 46] [C:\WINDOWS\SYSTEM32\DEVICEPAIRINGWIZARD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Device Pairing Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 71168
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc64d - Tue Jul 14 01:42:05 2009
    Module Checksum      = 0x00020b9b
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [DevicePairingWizard.pdb]
    Module PDB Guid = {523078DF-ADE5-40DB-8909-4B6EE753B15E}
    Module PDB Age = 0x1

Module[ 47] [C:\WINDOWS\SYSTEM32\DEVICEPROPERTIES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gerteigenschaften
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 91648
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc5f9 - Tue Jul 14 01:40:41 2009
    Module Checksum      = 0x00021da3
    Module SizeOfImage   = 0x00019000
  Module Pointer to PDB = [DeviceProperties.pdb]
    Module PDB Guid = {67B85F7F-38DF-42FE-B7A6-03212C2B1E3E}
    Module PDB Age = 0x1

Module[ 48] [C:\WINDOWS\SYSTEM32\DFRGUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Defragmentierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 586752
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bc1fb - Tue Jul 14 01:23:39 2009
    Module Checksum      = 0x0009a52e
    Module SizeOfImage   = 0x00092000
  Module Pointer to PDB = [dfrgui.pdb]
    Module PDB Guid = {6746BA0D-038A-4E1E-A8F8-328D81236DA0}
    Module PDB Age = 0x1

Module[ 49] [C:\WINDOWS\SYSTEM32\DFSFRSHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DfsFrs-Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24576
  File Date:         Di Jul 14 02:14:16 2009
    Module TimeDateStamp = 0x4a5bbfc6 - Tue Jul 14 01:14:14 2009
    Module Checksum      = 0x000138c0
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [dfsfrsHost.pdb]
    Module PDB Guid = {B42C099B-BDB5-484B-90DF-29B1D360084D}
    Module PDB Age = 0x1

Module[ 50] [C:\WINDOWS\SYSTEM32\DIALER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows-Whlhilfe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31744
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bcf1d - Tue Jul 14 02:19:41 2009
    Module Checksum      = 0x0000ff82
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [dialer.pdb]
    Module PDB Guid = {DCD13996-741B-41C6-AAFD-BCA949E8B89F}
    Module PDB Age = 0x1

Module[ 51] [C:\WINDOWS\SYSTEM32\DIANTZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Cabinet Maker
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 94720
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bbf6b - Tue Jul 14 01:12:43 2009
    Module Checksum      = 0x0001add2
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [diantz.pdb]
    Module PDB Guid = {1C8268CB-BDD0-46A9-AA65-DFED77F45ED0}
    Module PDB Age = 0x1

Module[ 52] [C:\WINDOWS\SYSTEM32\DISKPART.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskPart
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 133632
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bc225 - Tue Jul 14 01:24:21 2009
    Module Checksum      = 0x00024db1
    Module SizeOfImage   = 0x00023000
  Module Pointer to PDB = [diskpart.pdb]
    Module PDB Guid = {D33341EA-12A8-4FAD-AD2D-1ABDD64EE02D}
    Module PDB Age = 0x1

Module[ 53] [C:\WINDOWS\SYSTEM32\DISKPERF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konfigurationsprogramm fr Datentrgerleistung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bc11b - Tue Jul 14 01:19:55 2009
    Module Checksum      = 0x00007504
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [diskperf.pdb]
    Module PDB Guid = {E1DABEDF-4A24-4511-B3FE-F972D086CB4F}
    Module PDB Age = 0x1

Module[ 54] [C:\WINDOWS\SYSTEM32\DISKRAID.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskRAID
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 276480
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bc22c - Tue Jul 14 01:24:28 2009
    Module Checksum      = 0x0004fdba
    Module SizeOfImage   = 0x00047000
  Module Pointer to PDB = [diskraid.pdb]
    Module PDB Guid = {EDA603EE-381B-4857-8139-C3308DE58A4C}
    Module PDB Age = 0x1

Module[ 55] [C:\WINDOWS\SYSTEM32\DISKSHADOW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DiskShadow
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 363520
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bc228 - Tue Jul 14 01:24:24 2009
    Module Checksum      = 0x0006371d
    Module SizeOfImage   = 0x0005b000
  Module Pointer to PDB = [diskshadow.pdb]
    Module PDB Guid = {15F2DFDF-2A50-486C-9D3F-F054498AA5DA}
    Module PDB Age = 0x1

Module[ 56] [C:\WINDOWS\SYSTEM32\DISM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DISM-Dienstprogramm fr die Abbildwartung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 202752
  File Date:         Di Jul 14 02:14:17 2009
    Module TimeDateStamp = 0x4a5bc0d9 - Tue Jul 14 01:18:49 2009
    Module Checksum      = 0x00040b79
    Module SizeOfImage   = 0x00069000
  Module Pointer to PDB = [Dism.pdb]
    Module PDB Guid = {FC16251B-CD46-4911-ABAC-F246B69F6502}
    Module PDB Age = 0x1

Module[ 57] [C:\WINDOWS\SYSTEM32\DISPLAYSWITCH.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Anzeigewechsel
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 522752
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc5af - Tue Jul 14 01:39:27 2009
    Module Checksum      = 0x00083250
    Module SizeOfImage   = 0x00083000
  Module Pointer to PDB = [DisplaySwitch.pdb]
    Module PDB Guid = {00A93827-2621-4ED4-93ED-BB1D14270103}
    Module PDB Age = 0x1

Module[ 58] [C:\WINDOWS\SYSTEM32\DLLHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 7168
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc6b7 - Tue Jul 14 01:43:51 2009
    Module Checksum      = 0x0000ef87
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [dllhost.pdb]
    Module PDB Guid = {5AF646F9-4681-4B19-9FE7-0E799EF54D21}
    Module PDB Age = 0x1

Module[ 59] [C:\WINDOWS\SYSTEM32\DLLHST3G.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 7168
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc6b8 - Tue Jul 14 01:43:52 2009
    Module Checksum      = 0x0000c16c
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [dllhst3g.pdb]
    Module PDB Guid = {81DDFCB1-41C8-457B-A1CE-C549A82DF487}
    Module PDB Age = 0x1

Module[ 60] [C:\WINDOWS\SYSTEM32\DNSCACHEUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DNSCache Unattend Generic Command
  Product Version:   (6.1:7600.16772)
  File Version:      (6.1:7600.16772)
  File Size (bytes): 28672
  File Date:         Do Mrz 03 06:27:30 2011
    Module TimeDateStamp = 0x4d6f0e28 - Thu Mar 03 04:42:32 2011
    Module Checksum      = 0x000116b4
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [dnscacheugc.pdb]
    Module PDB Guid = {0B451462-37DA-4ABB-9A7C-33FDC315A2FA}
    Module PDB Age = 0x1

Module[ 61] [C:\WINDOWS\SYSTEM32\DOSKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm fr den Tastaturverlauf
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15872
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bbffe - Tue Jul 14 01:15:10 2009
    Module Checksum      = 0x0001285e
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [doskey.pdb]
    Module PDB Guid = {679DE519-1D23-43F7-BC9D-9FE65DC1BB8F}
    Module PDB Age = 0x1

Module[ 62] [C:\WINDOWS\SYSTEM32\DPAPIMIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DPAPI-Schlsselmigrations-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 72192
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc425 - Tue Jul 14 01:32:53 2009
    Module Checksum      = 0x000210d9
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [dpapimig.pdb]
    Module PDB Guid = {0E664E56-EFA2-4389-A4AB-EDFCE32A94F8}
    Module PDB Age = 0x1

Module[ 63] [C:\WINDOWS\SYSTEM32\DPISCALING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerungsoption "Bildschirm"
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 76800
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc5fa - Tue Jul 14 01:40:42 2009
    Module Checksum      = 0x00021a5a
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [DpiScaling.pdb]
    Module PDB Guid = {A72C2981-FBC7-4ACB-AE5B-C41F4F8E8136}
    Module PDB Age = 0x1

Module[ 64] [C:\WINDOWS\SYSTEM32\DPLAYSVR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft DirectPlay-Helfer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 29184
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bcbb4 - Tue Jul 14 02:05:08 2009
    Module Checksum      = 0x00016fd8
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [dplaysvr.pdb]
    Module PDB Guid = {45DEA669-3D49-4249-B35D-5B3A64718237}
    Module PDB Age = 0x1

Module[ 65] [C:\WINDOWS\SYSTEM32\DPNSVR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft DirectPlay8-Server
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 33280
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bcbb9 - Tue Jul 14 02:05:13 2009
    Module Checksum      = 0x0000a97a
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [dpnsvr.pdb]
    Module PDB Guid = {5AFB336E-AB8D-4AB2-B2CC-46DDDFBB03A0}
    Module PDB Age = 0x1

Module[ 66] [C:\WINDOWS\SYSTEM32\DRIVERQUERY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberabfrage eines Systems
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 66048
  File Date:         Di Jul 14 02:14:18 2009
    Module TimeDateStamp = 0x4a5bc005 - Tue Jul 14 01:15:17 2009
    Module Checksum      = 0x00013de4
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [drvqry.pdb]
    Module PDB Guid = {AED4B2B7-CBD7-4D54-AB0E-4A6C7E1394E5}
    Module PDB Age = 0x1

Module[ 67] [C:\WINDOWS\SYSTEM32\DRVINST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberinstallationsmodul
  Product Version:   (6.1:7600.16820)
  File Version:      (6.1:7600.16820)
  File Size (bytes): 252928
  File Date:         Di Mai 24 11:32:46 2011
    Module TimeDateStamp = 0x4ddb6dbb - Tue May 24 10:35:07 2011
    Module Checksum      = 0x00046f2e
    Module SizeOfImage   = 0x00041000
  Module Pointer to PDB = [DrvInst.pdb]
    Module PDB Guid = {D4A686D1-EC72-486E-B770-FAEC466E2E44}
    Module PDB Age = 0x1

Module[ 68] [C:\WINDOWS\SYSTEM32\DVDPLAY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  dvdplay placeholder Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9728
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bcb46 - Tue Jul 14 02:03:18 2009
    Module Checksum      = 0x0000e11a
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [dvdplay.pdb]
    Module PDB Guid = {A531C26B-3B87-449E-A575-F8192A429A73}
    Module PDB Age = 0x1

Module[ 69] [C:\WINDOWS\SYSTEM32\DVDUPGRD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  DVD-Upgrade
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bcb52 - Tue Jul 14 02:03:30 2009
    Module Checksum      = 0x0000acb7
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [dvdupgrd.pdb]
    Module PDB Guid = {C3D6D60C-0A17-4E6D-B410-1124CB63C4F3}
    Module PDB Age = 0x1

Module[ 70] [C:\WINDOWS\SYSTEM32\DWWIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Watson Client
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 130048
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc2d6 - Tue Jul 14 01:27:18 2009
    Module Checksum      = 0x0002b9b8
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [dwwin.pdb]
    Module PDB Guid = {E73B82C6-0456-42EF-BD0B-ABB263AC68CE}
    Module PDB Age = 0x1

Module[ 71] [C:\WINDOWS\SYSTEM32\DXDIAG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft DirectX-Diagnoseprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 264704
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc310 - Tue Jul 14 01:28:16 2009
    Module Checksum      = 0x000485a5
    Module SizeOfImage   = 0x00045000
  Module Pointer to PDB = [dxdiag.pdb]
    Module PDB Guid = {4BD6623E-7FBA-45FC-9264-FCA91569C266}
    Module PDB Age = 0x1

Module[ 72] [C:\WINDOWS\SYSTEM32\EFSUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  EFS UI Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12288
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc467 - Tue Jul 14 01:33:59 2009
    Module Checksum      = 0x00006023
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [efsui.pdb]
    Module PDB Guid = {B6FF75B8-F950-49FA-A58E-16942CE9CBDD}
    Module PDB Age = 0x1

Module[ 73] [C:\WINDOWS\SYSTEM32\EHSTORAUTHN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Kennwortauthentifizierungsprogramm fr erweitertes Speichern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 130560
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc742 - Tue Jul 14 01:46:10 2009
    Module Checksum      = 0x00029d7d
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [EhStorAuthn.pdb]
    Module PDB Guid = {0795DFA2-59B1-4139-9032-7C504D9DC930}
    Module PDB Age = 0x1

Module[ 74] [C:\WINDOWS\SYSTEM32\ESCUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IE ESC 7.0 Unattended Install Utility
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc675 - Tue Jul 14 01:42:45 2009
    Module Checksum      = 0x00010004
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [escUnattend.pdb]
    Module PDB Guid = {8F2141D3-14A7-4A14-9564-72EBB2FDDB8E}
    Module PDB Age = 0x1

Module[ 75] [C:\WINDOWS\SYSTEM32\ESENTUTL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extensible Storage Engine Utilities for Microsoft(R) Windows(R)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 123392
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc417 - Tue Jul 14 01:32:39 2009
    Module Checksum      = 0x00027303
    Module SizeOfImage   = 0x0003b000
  Module Pointer to PDB = [esentutl.pdb]
    Module PDB Guid = {DA30878A-A74A-407C-8932-B252EC573BD7}
    Module PDB Age = 0x1

Module[ 76] [C:\WINDOWS\SYSTEM32\EVENTCREATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Event Create - Erstellt ein benutzerdefiniertes Ereignis fr ein Ereignisprotokoll.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc3dd - Tue Jul 14 01:31:41 2009
    Module Checksum      = 0x0000ef13
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [evcreate.pdb]
    Module PDB Guid = {DF6BE993-D3E8-4556-A3BA-28DDEC689936}
    Module PDB Age = 0x1

Module[ 77] [C:\WINDOWS\SYSTEM32\EVENTVWR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Startprogramm fr Ereignisanzeige-Snap-In
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 79872
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bc35a - Tue Jul 14 01:29:30 2009
    Module Checksum      = 0x00016f67
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [eventvwr.pdb]
    Module PDB Guid = {35E6C5F1-67E1-47B7-B006-E54640180F17}
    Module PDB Age = 0x1

Module[ 78] [C:\WINDOWS\SYSTEM32\EXPAND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  LZ-Expandierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 53248
  File Date:         Di Jul 14 02:14:19 2009
    Module TimeDateStamp = 0x4a5bbf6d - Tue Jul 14 01:12:45 2009
    Module Checksum      = 0x00019978
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [expand.pdb]
    Module PDB Guid = {851609EA-5A7C-41D6-AD87-142677853478}
    Module PDB Age = 0x1

Module[ 79] [C:\WINDOWS\SYSTEM32\EXPLORER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Explorer
  Product Version:   (6.1:7600.16450)
  File Version:      (6.1:7600.16450)
  File Size (bytes): 2614272
  File Date:         Sa Okt 31 06:45:39 2009
    Module TimeDateStamp = 0x4aeba271 - Sat Oct 31 03:35:29 2009
    Module Checksum      = 0x002880d0
    Module SizeOfImage   = 0x00281000
  Module Pointer to PDB = [explorer.pdb]
    Module PDB Guid = {750ED570-2409-4988-94D9-F0E84FF9C272}
    Module PDB Age = 0x2

Module[ 80] [C:\WINDOWS\SYSTEM32\EXTRAC32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft CAB-Dekomprimierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 53248
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bbf65 - Tue Jul 14 01:12:37 2009
    Module Checksum      = 0x00018cf3
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [extrac32.pdb]
    Module PDB Guid = {1776E14B-CADE-4213-9A39-2F9433F72005}
    Module PDB Age = 0x1

Module[ 81] [C:\WINDOWS\SYSTEM32\FC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Vergleichen von DOS 5-Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19968
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bbffe - Tue Jul 14 01:15:10 2009
    Module Checksum      = 0x0000955c
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [fc.pdb]
    Module PDB Guid = {45A3CEE9-34E5-46EB-922B-D6DB5CE84365}
    Module PDB Age = 0x1

Module[ 82] [C:\WINDOWS\SYSTEM32\FIND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Zeichenfolgensuche (grep)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc002 - Tue Jul 14 01:15:14 2009
    Module Checksum      = 0x00010a76
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [find.pdb]
    Module PDB Guid = {CEF762CF-CDE0-450A-A122-E2703FD22E9B}
    Module PDB Age = 0x2

Module[ 83] [C:\WINDOWS\SYSTEM32\FINDSTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm "Find String" (QGREP)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62464
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc035 - Tue Jul 14 01:16:05 2009
    Module Checksum      = 0x0001f072
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [findstr.pdb]
    Module PDB Guid = {CD553039-0288-4C54-818C-E36F94F6FAB4}
    Module PDB Age = 0x2

Module[ 84] [C:\WINDOWS\SYSTEM32\FINGER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl Finger
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10240
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc95e - Tue Jul 14 01:55:10 2009
    Module Checksum      = 0x00011733
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [finger.pdb]
    Module PDB Guid = {12CA668B-ED6F-43E9-8BD8-29BEBB46EA7E}
    Module PDB Age = 0x1

Module[ 85] [C:\WINDOWS\SYSTEM32\FIXMAPI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  FIXMAPI 1.0 MAPI Repair Tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bcd6e - Tue Jul 14 02:12:30 2009
    Module Checksum      = 0x0000604c
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [fixmapi.pdb]
    Module PDB Guid = {A50A3277-9BEA-4F95-AB2D-64DC737FC734}
    Module PDB Age = 0x1

Module[ 86] [C:\WINDOWS\SYSTEM32\FLTMC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Filter-Manager-Steuerungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 18944
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bbfbd - Tue Jul 14 01:14:05 2009
    Module Checksum      = 0x0000b3ff
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [fltMC.pdb]
    Module PDB Guid = {310B715D-35BD-4369-B344-B94A2AA66344}
    Module PDB Age = 0x1

Module[ 87] [C:\WINDOWS\SYSTEM32\FONTVIEW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Schriftartenanzeige
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 104448
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc61e - Tue Jul 14 01:41:18 2009
    Module Checksum      = 0x0001b53d
    Module SizeOfImage   = 0x0001d000
  Module Pointer to PDB = [fontview.pdb]
    Module PDB Guid = {51C6314E-2C11-4D9B-83BB-7C48FACE10B2}
    Module PDB Age = 0x1

Module[ 88] [C:\WINDOWS\SYSTEM32\FORFILES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ForFiles - Fhrt einen Befehl auf ausgewhlten Dateien aus.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc015 - Tue Jul 14 01:15:33 2009
    Module Checksum      = 0x000157da
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [forfiles.pdb]
    Module PDB Guid = {1B1D0C3A-6620-410C-BEAE-F248033BF960}
    Module PDB Age = 0x1

Module[ 89] [C:\WINDOWS\SYSTEM32\FSUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  fsutil.exe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 73728
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc009 - Tue Jul 14 01:15:21 2009
    Module Checksum      = 0x00014fc7
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [fsutil.pdb]
    Module PDB Guid = {8172B515-8B4D-4F15-AA63-00BADE2FCAA5}
    Module PDB Age = 0x1

Module[ 90] [C:\WINDOWS\SYSTEM32\FTP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Dateibertragung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 42496
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc965 - Tue Jul 14 01:55:17 2009
    Module Checksum      = 0x00016c22
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [ftp.pdb]
    Module PDB Guid = {DD8210F6-EA2E-4ABB-BBAE-7B9ADCF7A0DB}
    Module PDB Age = 0x1

Module[ 91] [C:\WINDOWS\SYSTEM32\GETMAC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt NIC-MAC-Informationen an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 65024
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc3e4 - Tue Jul 14 01:31:48 2009
    Module Checksum      = 0x00018481
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [getmac.pdb]
    Module PDB Guid = {BD4AB6CB-C66A-4D88-94F3-5164B4BE61AF}
    Module PDB Age = 0x1

Module[ 92] [C:\WINDOWS\SYSTEM32\GPRESULT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gruppenrichtlinien-RSOP-Datenabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 128000
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc58a - Tue Jul 14 01:38:50 2009
    Module Checksum      = 0x00021bce
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [gprslt.pdb]
    Module PDB Guid = {1D72CF17-50BB-4F1C-B6B4-A25616341C7D}
    Module PDB Age = 0x1

Module[ 93] [C:\WINDOWS\SYSTEM32\GPSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Group Policy Script Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24576
  File Date:         Di Jul 14 02:14:20 2009
    Module TimeDateStamp = 0x4a5bc578 - Tue Jul 14 01:38:32 2009
    Module Checksum      = 0x0000be99
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [gpscript.pdb]
    Module PDB Guid = {5B24A78B-BFAE-4C9E-8C96-B7B1C5D90570}
    Module PDB Age = 0x1

Module[ 94] [C:\WINDOWS\SYSTEM32\GPUPDATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Grupppenrichtlinien-Aktualisierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc593 - Tue Jul 14 01:38:59 2009
    Module Checksum      = 0x0000e3cf
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [gpupdate.pdb]
    Module PDB Guid = {CEBDBDEA-7FE3-4817-80C0-98573E0443D4}
    Module PDB Age = 0x1

Module[ 95] [C:\WINDOWS\SYSTEM32\GRPCONV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konvertierung fr Windows-Programmgruppen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16384
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc5e1 - Tue Jul 14 01:40:17 2009
    Module Checksum      = 0x0000ddc3
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [grpconv.pdb]
    Module PDB Guid = {D9642554-6B3A-465E-91FD-30F62A5E5F27}
    Module PDB Age = 0x1

Module[ 96] [C:\WINDOWS\SYSTEM32\HDWWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hardware-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 64512
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc03f - Tue Jul 14 01:16:15 2009
    Module Checksum      = 0x00010710
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [HdwWiz.pdb]
    Module PDB Guid = {AD81857F-6AF9-49F6-8274-61E6C439B802}
    Module PDB Age = 0x1

Module[ 97] [C:\WINDOWS\SYSTEM32\HELP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfeprogramm zur Befehlseingabe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8704
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc001 - Tue Jul 14 01:15:13 2009
    Module Checksum      = 0x0000cdb8
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [help.pdb]
    Module PDB Guid = {2548D1C3-023C-4788-B1BC-F76F64F4B9C9}
    Module PDB Age = 0x1

Module[ 98] [C:\WINDOWS\SYSTEM32\HH.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ausfhrbare Microsoft-HTML-Hilfsdatei
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bcd66 - Tue Jul 14 02:12:22 2009
    Module Checksum      = 0x0000d5ea
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [hh.pdb]
    Module PDB Guid = {34400774-EA6F-4CAB-BC72-CD12D2A23B99}
    Module PDB Age = 0x1

Module[ 99] [C:\WINDOWS\SYSTEM32\HOSTNAME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostnamen-APP
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8704
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc95f - Tue Jul 14 01:55:11 2009
    Module Checksum      = 0x0000873a
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [hostname.pdb]
    Module PDB Guid = {2B4EF8EA-CC65-4AAE-906A-5F2B3ACF2021}
    Module PDB Age = 0x1

Module[100] [C:\WINDOWS\SYSTEM32\IASHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IAS Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc8f4 - Tue Jul 14 01:53:24 2009
    Module Checksum      = 0x000142ca
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [iashost.pdb]
    Module PDB Guid = {22DDFC88-714F-491C-A03B-69FD79AD8A2D}
    Module PDB Age = 0x1

Module[101] [C:\WINDOWS\SYSTEM32\ICACLS.EXE] 
  Company Name:      Microsoft Corporation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc014 - Tue Jul 14 01:15:32 2009
    Module Checksum      = 0x00009e57
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [icacls.pdb]
    Module PDB Guid = {930A8215-A4D7-4A2C-887B-1DF41453D9B1}
    Module PDB Age = 0x1

Module[102] [C:\WINDOWS\SYSTEM32\ICSUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ICS Unattend Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc8dc - Tue Jul 14 01:53:00 2009
    Module Checksum      = 0x0001289d
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [icsunattend.pdb]
    Module PDB Guid = {9CBE8DA5-D078-48DF-975C-814849862C3C}
    Module PDB Age = 0x1

Module[103] [C:\WINDOWS\SYSTEM32\IE4UINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IE-Hilfsprogramm fr Pro-Benutzerinitalisierung
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 176128
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc685 - Tue Jul 14 01:43:01 2009
    Module Checksum      = 0x0002daed
    Module SizeOfImage   = 0x0002e000
  Module Pointer to PDB = [ie4uinit.pdb]
    Module PDB Guid = {42FB1585-7261-42B6-AB86-198DC235D2B0}
    Module PDB Age = 0x1

Module[104] [C:\WINDOWS\SYSTEM32\IEUNATT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr unbeaufsichtigte Installation von IE 7.0
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 139264
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc687 - Tue Jul 14 01:43:03 2009
    Module Checksum      = 0x0002a4e5
    Module SizeOfImage   = 0x00025000
  Module Pointer to PDB = [ieUnAtt.pdb]
    Module PDB Guid = {780BA6C6-2ADD-4DDA-B3DB-56B19032F47A}
    Module PDB Age = 0x1

Module[105] [C:\WINDOWS\SYSTEM32\IEXPRESS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wizard
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 226816
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc670 - Tue Jul 14 01:42:40 2009
    Module Checksum      = 0x0003c1ee
    Module SizeOfImage   = 0x0003e000
  Module Pointer to PDB = [iexpress.pdb]
    Module PDB Guid = {24B5141E-093D-43FE-A4F0-7CA4835EFA7B}
    Module PDB Age = 0x1

Module[106] [C:\WINDOWS\SYSTEM32\INFDEFAULTINSTALL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  INF-Standardinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc03d - Tue Jul 14 01:16:13 2009
    Module Checksum      = 0x00010bc4
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [InfDefaultInstall.pdb]
    Module PDB Guid = {D44E955B-F1E6-4AB4-ADDC-F7FCCA34E05E}
    Module PDB Age = 0x1

Module[107] [C:\WINDOWS\SYSTEM32\INSTNM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  32-bit NetMeeting Installer for Win64
  Product Version:   (6.1:7600.16491)
  File Version:      (6.1:7600.16491)
  File Size (bytes): 7680
  File Date:         Di Dez 22 05:28:10 2009
    Module TimeDateStamp = 0x4b304ad9 - Tue Dec 22 05:28:09 2009
    Module Checksum      = 0x000080f3
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [instnm.pdb]
    Module PDB Guid = {B5423E64-E4A8-4AF2-8E6B-32C64CC5D725}
    Module PDB Age = 0x1

Module[108] [C:\WINDOWS\SYSTEM32\IPCONFIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  IP-Konfigurationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc96a - Tue Jul 14 01:55:22 2009
    Module Checksum      = 0x00009f5c
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [ipconfig.pdb]
    Module PDB Guid = {F1DED39C-49AC-4EB2-8F0B-C1B99AB182D0}
    Module PDB Age = 0x2

Module[109] [C:\WINDOWS\SYSTEM32\ISCSICLI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  iSCSI-Ermittlungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 144896
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc745 - Tue Jul 14 01:46:13 2009
    Module Checksum      = 0x0002ca8f
    Module SizeOfImage   = 0x0002b000
  Module Pointer to PDB = [iscsicli.pdb]
    Module PDB Guid = {3DF958EB-80D6-4569-8166-130465C9BECA}
    Module PDB Age = 0x1

Module[110] [C:\WINDOWS\SYSTEM32\ISCSICPL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft iSCSI-Initiatorkonfigurationstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 120320
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc744 - Tue Jul 14 01:46:12 2009
    Module Checksum      = 0x0001df09
    Module SizeOfImage   = 0x00021000
  Module Pointer to PDB = [iscsicpl.pdb]
    Module PDB Guid = {EE10FEDC-9106-455D-ACD8-28129C6AF418}
    Module PDB Age = 0x1

Module[111] [C:\WINDOWS\SYSTEM32\KLIST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Tool fr die Verwaltung des Kerberos-Ticket-Cache
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 32768
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc490 - Tue Jul 14 01:34:40 2009
    Module Checksum      = 0x0000c7f7
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [klist.pdb]
    Module PDB Guid = {51BB5BB6-20AB-4A5D-94A3-D31E2E3B744D}
    Module PDB Age = 0x1

Module[112] [C:\WINDOWS\SYSTEM32\KSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Kerberos-Setuptool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 37376
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc49e - Tue Jul 14 01:34:54 2009
    Module Checksum      = 0x00018ca1
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [ksetup.pdb]
    Module PDB Guid = {00332D50-75A5-48F8-B0ED-DDB42ED87AB5}
    Module PDB Age = 0x1

Module[113] [C:\WINDOWS\SYSTEM32\KTMUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zur Kerneltransaktionsverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc014 - Tue Jul 14 01:15:32 2009
    Module Checksum      = 0x0000811f
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [ktmutil.pdb]
    Module PDB Guid = {8D496222-5EAD-4DD5-8AD3-A4861141F294}
    Module PDB Age = 0x1

Module[114] [C:\WINDOWS\SYSTEM32\KTPASS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Kerberos keytab tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 114176
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc48f - Tue Jul 14 01:34:39 2009
    Module Checksum      = 0x00020afe
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [ktpass.pdb]
    Module PDB Guid = {18B4289D-4DAF-4A87-926B-020FB2F69292}
    Module PDB Age = 0x1

Module[115] [C:\WINDOWS\SYSTEM32\LABEL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Datentrgerbeschriftung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc001 - Tue Jul 14 01:15:13 2009
    Module Checksum      = 0x0000bcec
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [label.pdb]
    Module PDB Guid = {AD89D417-AF3D-452A-A23B-508840F34C99}
    Module PDB Age = 0x1

Module[116] [C:\WINDOWS\SYSTEM32\LODCTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  PerfMon-Leistungsindikatoren laden
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 42496
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc107 - Tue Jul 14 01:19:35 2009
    Module Checksum      = 0x0000a8ec
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [lodctr.pdb]
    Module PDB Guid = {0A90805E-7200-4B62-AC3D-D155675ABCBE}
    Module PDB Age = 0x1

Module[117] [C:\WINDOWS\SYSTEM32\LOGMAN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Leistungsprotokollierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 82432
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bc11e - Tue Jul 14 01:19:58 2009
    Module Checksum      = 0x00021c1c
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [logman.pdb]
    Module PDB Guid = {1AF61AC3-4E5C-4942-96A6-FEC64D7556E1}
    Module PDB Age = 0x1

Module[118] [C:\WINDOWS\SYSTEM32\LOGOFF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Abmelden von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:22 2009
    Module TimeDateStamp = 0x4a5bcaff - Tue Jul 14 02:02:07 2009
    Module Checksum      = 0x000127b3
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [logoff.pdb]
    Module PDB Guid = {939B3378-70F4-4C16-8F1C-3B2F1A4D3D79}
    Module PDB Age = 0x1

Module[119] [C:\WINDOWS\SYSTEM32\MAGNIFY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft-Bildschirmlupe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 629760
  File Date:         Di Jul 14 02:14:23 2009
    Module TimeDateStamp = 0x4a5bcdc6 - Tue Jul 14 02:13:58 2009
    Module Checksum      = 0x000a4c24
    Module SizeOfImage   = 0x0009c000
  Module Pointer to PDB = [Magnify.pdb]
    Module PDB Guid = {824FB915-8CCC-40B6-84DC-F0B6E36A00D3}
    Module PDB Age = 0x1

Module[120] [C:\WINDOWS\SYSTEM32\MAKECAB.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Cabinet Maker
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 98816
  File Date:         Di Jul 14 02:14:23 2009
    Module TimeDateStamp = 0x4a5bbf6d - Tue Jul 14 01:12:45 2009
    Module Checksum      = 0x000237e0
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [makecab.pdb]
    Module PDB Guid = {68128D3C-D4BD-4D25-A2F8-8C75C82BB734}
    Module PDB Age = 0x2

Module[121] [C:\WINDOWS\SYSTEM32\MCBUILDER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Resource cache builder tool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 302080
  File Date:         Di Jul 14 02:14:23 2009
    Module TimeDateStamp = 0x4a5bbf9c - Tue Jul 14 01:13:32 2009
    Module Checksum      = 0x00050243
    Module SizeOfImage   = 0x00050000
  Module Pointer to PDB = [mcbuilder.pdb]
    Module PDB Guid = {100B5CBF-5D97-4959-B3D2-47A5261E74F7}
    Module PDB Age = 0x1

Module[122] [C:\WINDOWS\SYSTEM32\MMC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Management Console
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1401344
  File Date:         Di Jul 14 02:14:24 2009
    Module TimeDateStamp = 0x4a5bc3f1 - Tue Jul 14 01:32:01 2009
    Module Checksum      = 0x00162407
    Module SizeOfImage   = 0x00159000
  Module Pointer to PDB = [mmc.pdb]
    Module PDB Guid = {D7D09525-CB0B-4086-A122-CD7047EEA394}
    Module PDB Age = 0x2

Module[123] [C:\WINDOWS\SYSTEM32\MOUNTVOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Volume-Bereitstellungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13312
  File Date:         Di Jul 14 02:14:24 2009
    Module TimeDateStamp = 0x4a5bc003 - Tue Jul 14 01:15:15 2009
    Module Checksum      = 0x0000ca92
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [mountvol.pdb]
    Module PDB Guid = {9FCCF8C1-FD1D-4F25-971F-E3813F5B3535}
    Module PDB Age = 0x1

Module[124] [C:\WINDOWS\SYSTEM32\MRINFO.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Multicastinformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11264
  File Date:         Di Jul 14 02:14:24 2009
    Module TimeDateStamp = 0x4a5bc963 - Tue Jul 14 01:55:15 2009
    Module Checksum      = 0x00009352
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [mrinfo.pdb]
    Module PDB Guid = {C0A9C083-AE05-429E-BAA9-876AE6B20C36}
    Module PDB Age = 0x1

Module[125] [C:\WINDOWS\SYSTEM32\MSDT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent fr Problembehandlung per Diagnose
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 983040
  File Date:         Di Jul 14 02:14:25 2009
    Module TimeDateStamp = 0x4a5bc13a - Tue Jul 14 01:20:26 2009
    Module Checksum      = 0x000fe93a
    Module SizeOfImage   = 0x000f4000
  Module Pointer to PDB = [msdt.pdb]
    Module PDB Guid = {03DA1DC7-AAFB-4C23-A76B-37A931E22999}
    Module PDB Age = 0x1

Module[126] [C:\WINDOWS\SYSTEM32\MSFEEDSSYNC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Feeds Synchronization
  Product Version:   (8.0:7600.16800)
  File Version:      (8.0:7600.16800)
  File Size (bytes): 12800
  File Date:         Fr Apr 22 20:30:19 2011
    Module TimeDateStamp = 0x4db1bf2f - Fri Apr 22 19:47:27 2011
    Module Checksum      = 0x0000ea5b
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [msfeedssync.pdb]
    Module PDB Guid = {84E042E6-C2AD-4850-965B-024A55752603}
    Module PDB Age = 0x1

Module[127] [C:\WINDOWS\SYSTEM32\MSG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Nachrichtendienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:14:25 2009
    Module TimeDateStamp = 0x4a5bcb01 - Tue Jul 14 02:02:09 2009
    Module Checksum      = 0x00011bcf
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [msg.pdb]
    Module PDB Guid = {341FCC20-F62D-4BE2-AC0A-6BCD467EAC9C}
    Module PDB Age = 0x1

Module[128] [C:\WINDOWS\SYSTEM32\MSHTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft (R)-HTML-Anwendungshost
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 47104
  File Date:         Di Jul 14 02:14:25 2009
    Module TimeDateStamp = 0x4a5bc65e - Tue Jul 14 01:42:22 2009
    Module Checksum      = 0x00011004
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [mshta.pdb]
    Module PDB Guid = {5978330B-9F31-4B30-9626-3DF95DD72950}
    Module PDB Age = 0x1

Module[129] [C:\WINDOWS\SYSTEM32\MSIEXEC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Installer
  Product Version:   (5.0:7600.16385)
  File Version:      (5.0:7600.16385)
  File Size (bytes): 73216
  File Date:         Di Jul 14 02:14:25 2009
    Module TimeDateStamp = 0x4a5bc3e6 - Tue Jul 14 01:31:50 2009
    Module Checksum      = 0x00021d6d
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [msiexec.pdb]
    Module PDB Guid = {95D7273B-A95B-4BEF-B482-17A62E1796C4}
    Module PDB Age = 0x2

Module[130] [C:\WINDOWS\SYSTEM32\MSINFO32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systeminformationen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 303104
  File Date:         Di Jul 14 02:14:25 2009
    Module TimeDateStamp = 0x4a5bc11f - Tue Jul 14 01:19:59 2009
    Module Checksum      = 0x0004d54a
    Module SizeOfImage   = 0x00052000
  Module Pointer to PDB = [msinfo32.pdb]
    Module PDB Guid = {843BDD25-6C30-4F81-A56A-D9A45B22E5C8}
    Module PDB Age = 0x1

Module[131] [C:\WINDOWS\SYSTEM32\MSPAINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Paint
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 6376960
  File Date:         Di Jul 14 02:14:26 2009
    Module TimeDateStamp = 0x4a5bc683 - Tue Jul 14 01:42:59 2009
    Module Checksum      = 0x00622b3e
    Module SizeOfImage   = 0x00617000
  Module Pointer to PDB = [mspaint.pdb]
    Module PDB Guid = {D5E03706-7FFE-4986-9649-8638853DDDDF}
    Module PDB Age = 0x2

Module[132] [C:\WINDOWS\SYSTEM32\MSTSC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Remotedesktopverbindung
  Product Version:   (6.1:7600.16722)
  File Version:      (6.1:7600.16722)
  File Size (bytes): 1034240
  File Date:         Sa Dez 18 06:26:55 2010
    Module TimeDateStamp = 0x4d0c33b0 - Sat Dec 18 05:08:16 2010
    Module Checksum      = 0x0010a71b
    Module SizeOfImage   = 0x00100000
  Module Pointer to PDB = [mstsc.pdb]
    Module PDB Guid = {0FAB2754-5CB8-4CDB-96D8-36FB13BBDDA0}
    Module PDB Age = 0x1

Module[133] [C:\WINDOWS\SYSTEM32\MTSTOCOM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  COM+
  Product Version:   (6.1:7600.16385)
  File Version:      (2001.12:8530.16385)
  File Size (bytes): 125440
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc6ce - Tue Jul 14 01:44:14 2009
    Module Checksum      = 0x0002059a
    Module SizeOfImage   = 0x00028000
  Module Pointer to PDB = [mtstocom.pdb]
    Module PDB Guid = {8EAFDC6B-D98F-4BD8-9041-B4B9958E2B20}
    Module PDB Age = 0x1

Module[134] [C:\WINDOWS\SYSTEM32\MUIUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  MUI unattend action
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 70656
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bbf9d - Tue Jul 14 01:13:33 2009
    Module Checksum      = 0x0001f643
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [MUIUnattend.pdb]
    Module PDB Guid = {2FA87559-D68D-4C3F-B685-CE5271257A17}
    Module PDB Age = 0x1

Module[135] [C:\WINDOWS\SYSTEM32\NAPSTAT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Netzwerkzugriffschutz-Client-UI
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 279552
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc8bf - Tue Jul 14 01:52:31 2009
    Module Checksum      = 0x0004b26a
    Module SizeOfImage   = 0x00046000
  Module Pointer to PDB = [napstat.pdb]
    Module PDB Guid = {6F962797-A535-45C3-95B4-6AEA66A4DD85}
    Module PDB Age = 0x2

Module[136] [C:\WINDOWS\SYSTEM32\NDADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gertetreiberinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 75264
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc03e - Tue Jul 14 01:16:14 2009
    Module Checksum      = 0x00016add
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [NDAdmin.pdb]
    Module PDB Guid = {245510F0-E21A-488C-B1CA-1EE4428256F4}
    Module PDB Age = 0x1

Module[137] [C:\WINDOWS\SYSTEM32\NET.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Net Command
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 46080
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc550 - Tue Jul 14 01:37:52 2009
    Module Checksum      = 0x00017f7a
    Module SizeOfImage   = 0x00018000
  Module Pointer to PDB = [net.pdb]
    Module PDB Guid = {C4CC40B2-2FDC-4EF2-A937-A6C2A3128C8D}
    Module PDB Age = 0x1

Module[138] [C:\WINDOWS\SYSTEM32\NET1.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Net Command
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 159232
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc566 - Tue Jul 14 01:38:14 2009
    Module Checksum      = 0x000303a1
    Module SizeOfImage   = 0x0002b000
  Module Pointer to PDB = [net1.pdb]
    Module PDB Guid = {30DDC812-FAC6-42E3-BFAA-894D2A58E396}
    Module PDB Age = 0x2

Module[139] [C:\WINDOWS\SYSTEM32\NETBTUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner NetBT-Befehl fr unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 24064
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc8ff - Tue Jul 14 01:53:35 2009
    Module Checksum      = 0x000060e9
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [netbtugc.pdb]
    Module PDB Guid = {F86C3AA4-1D73-4405-BEE9-CB62E4E04FF7}
    Module PDB Age = 0x1

Module[140] [C:\WINDOWS\SYSTEM32\NETDOM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  NETDOM5
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 70656
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc55a - Tue Jul 14 01:38:02 2009
    Module Checksum      = 0x0001abfe
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [netdom.pdb]
    Module PDB Guid = {E7F96009-F884-4480-A7A8-01AD80EFF71E}
    Module PDB Age = 0x1

Module[141] [C:\WINDOWS\SYSTEM32\NETIOUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner Netio-Befehl fr unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25088
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc91b - Tue Jul 14 01:54:03 2009
    Module Checksum      = 0x0000dee7
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [netiougc.pdb]
    Module PDB Guid = {9D3E4747-7DA0-48C8-AE92-F3D9C2DA9182}
    Module PDB Age = 0x1

Module[142] [C:\WINDOWS\SYSTEM32\NETPLWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemsteuerung fr erweiterte Benutzerkonten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc5bd - Tue Jul 14 01:39:41 2009
    Module Checksum      = 0x00014ffe
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [netplwiz.pdb]
    Module PDB Guid = {0A1F8665-C7AA-46D2-9DFB-534CD4BEAEE2}
    Module PDB Age = 0x1

Module[143] [C:\WINDOWS\SYSTEM32\NETSH.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Netzwerkbefehlsshell
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 96256
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc93d - Tue Jul 14 01:54:37 2009
    Module Checksum      = 0x00018bac
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [netsh.pdb]
    Module PDB Guid = {B48563C4-7FA2-4794-A66A-3F5208D10693}
    Module PDB Age = 0x2

Module[144] [C:\WINDOWS\SYSTEM32\NETSTAT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Netstat-Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc960 - Tue Jul 14 01:55:12 2009
    Module Checksum      = 0x0000a1d7
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [netstat.pdb]
    Module PDB Guid = {B50EBFF0-F623-4B93-BE08-72C8676F4032}
    Module PDB Age = 0x1

Module[145] [C:\WINDOWS\SYSTEM32\NEWDEV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Gertetreiberinstallation
  Product Version:   (5.2:3668.0)
  File Version:      (5.2:3668.0)
  File Size (bytes): 76800
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc040 - Tue Jul 14 01:16:16 2009
    Module Checksum      = 0x00022aa4
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [NewDev.pdb]
    Module PDB Guid = {E023DE24-9CA4-4B66-8E3C-0C6BE72C1754}
    Module PDB Age = 0x1

Module[146] [C:\WINDOWS\SYSTEM32\NLTEST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Logon Server Test Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 327168
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc54f - Tue Jul 14 01:37:51 2009
    Module Checksum      = 0x0005a5a9
    Module SizeOfImage   = 0x0005c000
  Module Pointer to PDB = [nltest.pdb]
    Module PDB Guid = {741C7B9E-2D5E-426A-A45E-F0483AF51757}
    Module PDB Age = 0x1

Module[147] [C:\WINDOWS\SYSTEM32\NOTEPAD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 179712
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc60f - Tue Jul 14 01:41:03 2009
    Module Checksum      = 0x00039741
    Module SizeOfImage   = 0x00030000
  Module Pointer to PDB = [notepad.pdb]
    Module PDB Guid = {E325F519-5AE9-4FAE-B58D-25C9DF8C0CFD}
    Module PDB Age = 0x2

Module[148] [C:\WINDOWS\SYSTEM32\NPSRCSVR.EXE] 
  Company Name:      Moxa Inc.
  File Description:  NPort Secure Service
  Product Version:   (1.12:0.0)
  File Version:      (1.12:0.0)
  File Size (bytes): 912896
  File Date:         Do Feb 11 09:16:48 2010
  Module has NO symbols!

Module[149] [C:\WINDOWS\SYSTEM32\NSLOOKUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  nslookup
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 85504
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bc58d - Tue Jul 14 01:38:53 2009
    Module Checksum      = 0x0001c67e
    Module SizeOfImage   = 0x0001b000
  Module Pointer to PDB = [nslookup.pdb]
    Module PDB Guid = {1CF3CAC6-A1E7-4A91-933E-2F91E58968BB}
    Module PDB Age = 0x1

Module[150] [C:\WINDOWS\SYSTEM32\NTKRNLPA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  NT Kernel & System
  Product Version:   (6.1:7600.20941)
  File Version:      (6.1:7600.20941)
  File Size (bytes): 3967360
  File Date:         Sa Apr 09 07:21:36 2011
    Module TimeDateStamp = 0x4d9fdada - Sat Apr 09 06:04:42 2011
    Module Checksum      = 0x003d7f9b
    Module SizeOfImage   = 0x00412000
  Module Pointer to PDB = [ntkrpamp.pdb]
    Module PDB Guid = {68A89D8F-7D97-492B-B773-B34DFF1B0F4E}
    Module PDB Age = 0x2

Module[151] [C:\WINDOWS\SYSTEM32\NTOSKRNL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  NT Kernel & System
  Product Version:   (6.1:7600.20941)
  File Version:      (6.1:7600.20941)
  File Size (bytes): 3911552
  File Date:         Sa Apr 09 07:21:32 2011
    Module TimeDateStamp = 0x4d9fdabe - Sat Apr 09 06:04:14 2011
    Module Checksum      = 0x003bc8ed
    Module SizeOfImage   = 0x00404000
  Module Pointer to PDB = [ntkrnlmp.pdb]
    Module PDB Guid = {8D6BE247-8024-4296-9E19-FE91C90D7627}
    Module PDB Age = 0x2

Module[152] [C:\WINDOWS\SYSTEM32\NTPRINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Druckertreibersoftware-Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 61952
  File Date:         Di Jul 14 02:14:27 2009
    Module TimeDateStamp = 0x4a5bcecc - Tue Jul 14 02:18:20 2009
    Module Checksum      = 0x000171d4
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [NtPrint.pdb]
    Module PDB Guid = {053A838F-EBED-4462-95CB-8F22BCF9DB7C}
    Module PDB Age = 0x1

Module[153] [C:\WINDOWS\SYSTEM32\OCSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Setup fr optionale Komponenten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 197632
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc1b4 - Tue Jul 14 01:22:28 2009
    Module Checksum      = 0x00040084
    Module SizeOfImage   = 0x00034000
  Module Pointer to PDB = [ocsetup.pdb]
    Module PDB Guid = {BA35E7B0-A53C-46F9-994D-98A941A9B103}
    Module PDB Age = 0x1

Module[154] [C:\WINDOWS\SYSTEM32\ODBCAD32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ODBC-Administrator
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 86016
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bcd4c - Tue Jul 14 02:11:56 2009
    Module Checksum      = 0x0001a51a
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [odbcad32.pdb]
    Module PDB Guid = {8FBBE11A-5BD2-49DA-B039-B389CE1831DC}
    Module PDB Age = 0x1

Module[155] [C:\WINDOWS\SYSTEM32\ODBCCONF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ODBC-Treiberkonfigurationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 32768
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bcd53 - Tue Jul 14 02:12:03 2009
    Module Checksum      = 0x0000a0f0
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [odbcconf.pdb]
    Module PDB Guid = {7F15FD48-90A5-4510-8175-902AE72DF24D}
    Module PDB Age = 0x1

Module[156] [C:\WINDOWS\SYSTEM32\OPENFILES.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt die Liste der aktuell geffnete Dateien an
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62464
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc00b - Tue Jul 14 01:15:23 2009
    Module Checksum      = 0x000153d3
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [OpnFiles.pdb]
    Module PDB Guid = {CA0171AF-F65E-4FA2-BAFA-D337113D2371}
    Module PDB Age = 0x1

Module[157] [C:\WINDOWS\SYSTEM32\OSK.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Bildschirmtastatur fr Barrierefreiheit
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 646144
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bcdc6 - Tue Jul 14 02:13:58 2009
    Module Checksum      = 0x0009f780
    Module SizeOfImage   = 0x000a1000
  Module Pointer to PDB = [osk.pdb]
    Module PDB Guid = {2CC6B167-D627-46C2-BE7C-48EBE6F40007}
    Module PDB Age = 0x1

Module[158] [C:\WINDOWS\SYSTEM32\PATHPING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP PathPing-Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13312
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc962 - Tue Jul 14 01:55:14 2009
    Module Checksum      = 0x00007b2d
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [pathping.pdb]
    Module PDB Guid = {45ABAC12-757A-47AA-8F06-2CC30B11552B}
    Module PDB Age = 0x1

Module[159] [C:\WINDOWS\SYSTEM32\PCAUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Program Compatibility Assistant User Interface
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15872
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc135 - Tue Jul 14 01:20:21 2009
    Module Checksum      = 0x0000caef
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [pcaui.pdb]
    Module PDB Guid = {1C755E0F-5739-4046-9D99-DB614D0F314B}
    Module PDB Age = 0x1

Module[160] [C:\WINDOWS\SYSTEM32\PERFHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  x86-Leistungsindikatorhost
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bbf05 - Tue Jul 14 01:11:01 2009
    Module Checksum      = 0x0000e7e3
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [PerfHost.pdb]
    Module PDB Guid = {B1DA8779-B0E2-4F14-8CFB-F44C716DC175}
    Module PDB Age = 0x1

Module[161] [C:\WINDOWS\SYSTEM32\PERFMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ressourcen- und Leistungsberwachung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 157184
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc120 - Tue Jul 14 01:20:00 2009
    Module Checksum      = 0x000316c3
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [perfmon.pdb]
    Module PDB Guid = {F40F8C6E-AE52-4680-A4FF-26EADC872536}
    Module PDB Age = 0x1

Module[162] [C:\WINDOWS\SYSTEM32\PING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Befehl Ping
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc964 - Tue Jul 14 01:55:16 2009
    Module Checksum      = 0x00007bb9
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [ping.pdb]
    Module PDB Guid = {873FD274-841D-45AD-857F-CD4144F0EDA0}
    Module PDB Age = 0x1

Module[163] [C:\WINDOWS\SYSTEM32\PKGMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Package Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 209920
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc1b2 - Tue Jul 14 01:22:26 2009
    Module Checksum      = 0x000415e3
    Module SizeOfImage   = 0x00036000
  Module Pointer to PDB = [pkgmgr.pdb]
    Module PDB Guid = {63E41917-C043-4BA8-B059-4C503A44F789}
    Module PDB Age = 0x1

Module[164] [C:\WINDOWS\SYSTEM32\POQEXEC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ausfhrung der Warteschlange der Primitivvorgnge
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 123904
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc1a1 - Tue Jul 14 01:22:09 2009
    Module Checksum      = 0x00023625
    Module SizeOfImage   = 0x00022000
  Module Pointer to PDB = [poqexec.pdb]
    Module PDB Guid = {F7CD912E-BE18-4B23-B59D-61BD165FABA7}
    Module PDB Age = 0x1

Module[165] [C:\WINDOWS\SYSTEM32\POWERCFG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Energieeinstellungs-Befehlszeilenprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 59392
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc065 - Tue Jul 14 01:16:53 2009
    Module Checksum      = 0x00018425
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [powercfg.pdb]
    Module PDB Guid = {6B8A972D-4F82-46A6-8A30-81CB1DC2A15A}
    Module PDB Age = 0x1

Module[166] [C:\WINDOWS\SYSTEM32\PRESENTATIONHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Presentation Foundation Host
  Product Version:   (4.0:31106.0)
  File Version:      (4.0:31106.0)
  File Size (bytes): 295264
  File Date:         Mi Nov 25 11:47:34 2009
    Module TimeDateStamp = 0x4af3afc1 - Fri Nov 06 06:10:25 2009
    Module Checksum      = 0x0004ae8a
    Module SizeOfImage   = 0x0004c000
  Module Pointer to PDB = [PresentationHost.pdb]
    Module PDB Guid = {28F9F96E-B4DC-4C40-A632-0C756ACCCDA0}
    Module PDB Age = 0x3

Module[167] [C:\WINDOWS\SYSTEM32\PREVHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Preview Handler Surrogate Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31232
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc5ca - Tue Jul 14 01:39:54 2009
    Module Checksum      = 0x0000f126
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [prevhost.pdb]
    Module PDB Guid = {2C965DDB-FA78-4FCB-ABA3-B31C5CE21814}
    Module PDB Age = 0x1

Module[168] [C:\WINDOWS\SYSTEM32\PRINT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Druckprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:14:28 2009
    Module TimeDateStamp = 0x4a5bc005 - Tue Jul 14 01:15:17 2009
    Module Checksum      = 0x0000d1c1
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [print.pdb]
    Module PDB Guid = {859C9E07-B5DC-4DE1-B231-9DCA5BD3046D}
    Module PDB Age = 0x1

Module[169] [C:\WINDOWS\SYSTEM32\PRINTUI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  ndern der Druckeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 60928
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcef1 - Tue Jul 14 02:18:57 2009
    Module Checksum      = 0x000128ad
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [PrintUI.pdb]
    Module PDB Guid = {5FF2321C-4D35-42CD-80B8-C2B25FD21666}
    Module PDB Age = 0x1

Module[170] [C:\WINDOWS\SYSTEM32\PROQUOTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Prokontingent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28160
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bc476 - Tue Jul 14 01:34:14 2009
    Module Checksum      = 0x000164c1
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [proquota.pdb]
    Module PDB Guid = {4BED938A-6F55-47FA-81D0-67E4E1780B97}
    Module PDB Age = 0x1

Module[171] [C:\WINDOWS\SYSTEM32\PSR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Problemaufzeichnung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 696320
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bc14b - Tue Jul 14 01:20:43 2009
    Module Checksum      = 0x000b05aa
    Module SizeOfImage   = 0x000b3000
  Module Pointer to PDB = [psr.pdb]
    Module PDB Guid = {BB8AF5AF-DC07-44C9-9A58-5D2AA7D61F03}
    Module PDB Age = 0x1

Module[172] [C:\WINDOWS\SYSTEM32\QAPPSRV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Remotedesktop-Hostserver-Abfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcb03 - Tue Jul 14 02:02:11 2009
    Module Checksum      = 0x0000f1ad
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [qappsrv.pdb]
    Module PDB Guid = {135B7970-5443-4563-9D46-FB4E72BE4A13}
    Module PDB Age = 0x1

Module[173] [C:\WINDOWS\SYSTEM32\QPROCESS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Prozessabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 25088
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcb01 - Tue Jul 14 02:02:09 2009
    Module Checksum      = 0x000119d1
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [qprocess.pdb]
    Module PDB Guid = {DE7A78DA-D047-406E-BD49-15580E178E14}
    Module PDB Age = 0x1

Module[174] [C:\WINDOWS\SYSTEM32\QUERY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Mehrbenutzerabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcb01 - Tue Jul 14 02:02:09 2009
    Module Checksum      = 0x0000f660
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [query.pdb]
    Module PDB Guid = {E5EEE9ED-7148-40AB-B6BE-5328376FE4B3}
    Module PDB Age = 0x1

Module[175] [C:\WINDOWS\SYSTEM32\QUSER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Benutzerabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23040
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcb03 - Tue Jul 14 02:02:11 2009
    Module Checksum      = 0x000150fe
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [quser.pdb]
    Module PDB Guid = {60564410-3DAA-45A4-8F7F-FB3EB624E2B3}
    Module PDB Age = 0x1

Module[176] [C:\WINDOWS\SYSTEM32\QWINSTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Sitzungsabfrage
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26624
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bcb05 - Tue Jul 14 02:02:13 2009
    Module Checksum      = 0x00010a0e
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [qwinsta.pdb]
    Module PDB Guid = {DD392CD8-13C8-4FB8-B5EF-9DAB1AAF4719}
    Module PDB Age = 0x1

Module[177] [C:\WINDOWS\SYSTEM32\RASAUTOU.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Remotezugriffswhlhilfe
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bc93e - Tue Jul 14 01:54:38 2009
    Module Checksum      = 0x00006bfc
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [rasautou.pdb]
    Module PDB Guid = {97B26BAC-84C5-4025-B26F-A498DB153793}
    Module PDB Age = 0x1

Module[178] [C:\WINDOWS\SYSTEM32\RASDIAL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eingabeschnittstelle fr RAS
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 73216
  File Date:         Di Jul 14 02:14:29 2009
    Module TimeDateStamp = 0x4a5bc946 - Tue Jul 14 01:54:46 2009
    Module Checksum      = 0x0001c935
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [rasdial.pdb]
    Module PDB Guid = {AD47D7BB-9BBE-4E71-915B-155322DD3C7D}
    Module PDB Age = 0x1

Module[179] [C:\WINDOWS\SYSTEM32\RASPHONE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Adressbuch fr den Remotezugriff
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50176
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc947 - Tue Jul 14 01:54:47 2009
    Module Checksum      = 0x00018e83
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [rasphone.pdb]
    Module PDB Guid = {C744BF9D-0F8E-41D5-838E-7D87F630DFA2}
    Module PDB Age = 0x1

Module[180] [C:\WINDOWS\SYSTEM32\RDPINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RemoteApp-Anmeldeanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 159744
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bcb1d - Tue Jul 14 02:02:37 2009
    Module Checksum      = 0x0002c919
    Module SizeOfImage   = 0x0002c000
  Module Pointer to PDB = [rdpinit.pdb]
    Module PDB Guid = {53D966BB-39E6-483D-AAF0-346F95C358D2}
    Module PDB Age = 0x1

Module[181] [C:\WINDOWS\SYSTEM32\RDPSHELL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RemoteApp-Shell
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 257024
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bcb1c - Tue Jul 14 02:02:36 2009
    Module Checksum      = 0x00040f88
    Module SizeOfImage   = 0x00043000
  Module Pointer to PDB = [rdpshell.pdb]
    Module PDB Guid = {B778261E-693F-4A64-942D-435BF884CE49}
    Module PDB Age = 0x1

Module[182] [C:\WINDOWS\SYSTEM32\REAGENTC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows-Wiederherstellungs-Agent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc12c - Tue Jul 14 01:20:12 2009
    Module Checksum      = 0x00007cc0
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [ReAgentc.pdb]
    Module PDB Guid = {22EBBFD0-5E07-4020-8EC1-2DC7C7482FE1}
    Module PDB Age = 0x1

Module[183] [C:\WINDOWS\SYSTEM32\RECOVER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zur Wiederherstellung von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11776
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc005 - Tue Jul 14 01:15:17 2009
    Module Checksum      = 0x0001266d
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [recover.pdb]
    Module PDB Guid = {4A38249A-C8EA-4099-9652-DF0567DDD5BA}
    Module PDB Age = 0x1

Module[184] [C:\WINDOWS\SYSTEM32\REG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Konsolenregistrierungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 62464
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc02c - Tue Jul 14 01:15:56 2009
    Module Checksum      = 0x0001cd23
    Module SizeOfImage   = 0x00052000
  Module Pointer to PDB = [reg.pdb]
    Module PDB Guid = {A1E583AC-7F74-49CC-8AC0-E1278F891E46}
    Module PDB Age = 0x2

Module[185] [C:\WINDOWS\SYSTEM32\REGEDIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registrierungs-Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 398336
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc072 - Tue Jul 14 01:17:06 2009
    Module Checksum      = 0x00067d78
    Module SizeOfImage   = 0x00065000
  Module Pointer to PDB = [regedit.pdb]
    Module PDB Guid = {F112F584-9B42-4E15-B7E5-277B2649D2C4}
    Module PDB Age = 0x2

Module[186] [C:\WINDOWS\SYSTEM32\REGEDT32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registry Editor Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x00006620
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [regedt32.pdb]
    Module PDB Guid = {1A0644DC-D1B7-40BF-8FF6-53106C038E84}
    Module PDB Age = 0x1

Module[187] [C:\WINDOWS\SYSTEM32\REGINI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registry Initializer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 44032
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bca24 - Tue Jul 14 01:58:28 2009
    Module Checksum      = 0x0000e3ed
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [regini.pdb]
    Module PDB Guid = {7ED0EE4A-58CF-454A-AC77-54C08E872364}
    Module PDB Age = 0x1

Module[188] [C:\WINDOWS\SYSTEM32\REGISTERIEPKEYS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Registers custom PKEYs for IE
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 83968
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc688 - Tue Jul 14 01:43:04 2009
    Module Checksum      = 0x0001b33b
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [RegisterIEPKEYs.pdb]
    Module PDB Guid = {95151B76-5953-4CED-9344-9866115C3266}
    Module PDB Age = 0x1

Module[189] [C:\WINDOWS\SYSTEM32\REGSVR32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft(C) Registerserver
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bca28 - Tue Jul 14 01:58:32 2009
    Module Checksum      = 0x0001123b
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [regsvr32.pdb]
    Module PDB Guid = {4C036D3B-6120-45F7-8138-ED0561E1E5D1}
    Module PDB Age = 0x1

Module[190] [C:\WINDOWS\SYSTEM32\REKEYWIZ.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  EFS REKEY Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 61440
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc46c - Tue Jul 14 01:34:04 2009
    Module Checksum      = 0x00016e28
    Module SizeOfImage   = 0x00012000
  Module Pointer to PDB = [rekeywiz.pdb]
    Module PDB Guid = {D41D49D7-7B69-4534-8F19-A206D8897AA6}
    Module PDB Age = 0x1

Module[191] [C:\WINDOWS\SYSTEM32\RELOG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm fr die Neuprotokollierung von Leistungsindikatoren
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 37376
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc11d - Tue Jul 14 01:19:57 2009
    Module Checksum      = 0x0000c5b7
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [relog.pdb]
    Module PDB Guid = {A843561B-A4A1-4157-8C28-492B0B27C321}
    Module PDB Age = 0x1

Module[192] [C:\WINDOWS\SYSTEM32\REPLACE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Programm zum Ersetzen von Dateien
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 16896
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc011 - Tue Jul 14 01:15:29 2009
    Module Checksum      = 0x0000f0c7
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [replace.pdb]
    Module PDB Guid = {5794295F-4DAC-463A-B87A-3FCE5460BEB4}
    Module PDB Age = 0x1

Module[193] [C:\WINDOWS\SYSTEM32\RESET.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Zurcksetzen der Remotedesktopdienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 15360
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bcb03 - Tue Jul 14 02:02:11 2009
    Module Checksum      = 0x000071ba
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [reset.pdb]
    Module PDB Guid = {3B03A07B-6959-44BB-92A1-04EBEE63EBC3}
    Module PDB Age = 0x1

Module[194] [C:\WINDOWS\SYSTEM32\RESMON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Resource Monitor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 103424
  File Date:         Di Jul 14 02:14:30 2009
    Module TimeDateStamp = 0x4a5bc11e - Tue Jul 14 01:19:58 2009
    Module Checksum      = 0x0001a84e
    Module SizeOfImage   = 0x0001c000
  Module Pointer to PDB = [resmon.pdb]
    Module PDB Guid = {056787FF-47B9-4785-AB46-A2B52E5ADC69}
    Module PDB Age = 0x1

Module[195] [C:\WINDOWS\SYSTEM32\RMACTIVATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Desktop Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 320512
  File Date:         Di Jan 19 00:28:30 2010
    Module TimeDateStamp = 0x4b54e820 - Tue Jan 19 00:00:48 2010
    Module Checksum      = 0x000583dd
    Module SizeOfImage   = 0x00051000
  Module Pointer to PDB = [rmactivate.pdb]
    Module PDB Guid = {F35216BD-0D72-4AEC-8B05-AF9D2F0A76E5}
    Module PDB Age = 0x2

Module[196] [C:\WINDOWS\SYSTEM32\RMACTIVATE_ISV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Desktop Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 324608
  File Date:         Di Jan 19 00:28:33 2010
    Module TimeDateStamp = 0x4b54e824 - Tue Jan 19 00:00:52 2010
    Module Checksum      = 0x0005e6f1
    Module SizeOfImage   = 0x00052000
  Module Pointer to PDB = [rmactivate_isv.pdb]
    Module PDB Guid = {248AB8E3-5BFD-4F49-931C-A6CFD3298910}
    Module PDB Age = 0x2

Module[197] [C:\WINDOWS\SYSTEM32\RMACTIVATE_SSP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Server Security Processor
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 280064
  File Date:         Di Jan 19 00:28:30 2010
    Module TimeDateStamp = 0x4b54e829 - Tue Jan 19 00:00:57 2010
    Module Checksum      = 0x0004fa8f
    Module SizeOfImage   = 0x00047000
  Module Pointer to PDB = [rmactivate_ssp.pdb]
    Module PDB Guid = {D1A69A68-0970-4C8A-A0C1-6174A0AB62CC}
    Module PDB Age = 0x2

Module[198] [C:\WINDOWS\SYSTEM32\RMACTIVATE_SSP_ISV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Rights Management Services Activation for Server Security Processor (Pre-production)
  Product Version:   (6.1:7600.16506)
  File Version:      (6.1:7600.16506)
  File Size (bytes): 277504
  File Date:         Di Jan 19 00:28:33 2010
    Module TimeDateStamp = 0x4b54e81f - Tue Jan 19 00:00:47 2010
    Module Checksum      = 0x0004c9fd
    Module SizeOfImage   = 0x00046000
  Module Pointer to PDB = [rmactivate_ssp_isv.pdb]
    Module PDB Guid = {394218C0-CE7A-4F07-907D-91459BCCC03B}
    Module PDB Age = 0x2

Module[199] [C:\WINDOWS\SYSTEM32\RMCLIENT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Neustart-Manager - Client fr Benutzerkontensteuerungsneustart
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc1cd - Tue Jul 14 01:22:53 2009
    Module Checksum      = 0x00012aa8
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [RmClient.pdb]
    Module PDB Guid = {A84DB3F3-E30A-45B1-8F4F-CC98FEBB24C3}
    Module PDB Age = 0x1

Module[200] [C:\WINDOWS\SYSTEM32\ROBOCOPY.EXE] 
  Company Name:      Microsoft
  File Description:  Robocopy
  Product Version:   (5.1:0.0)
  File Version:      (5.1:10.1027)
  File Size (bytes): 97280
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc030 - Tue Jul 14 01:16:00 2009
    Module Checksum      = 0x0001b75b
    Module SizeOfImage   = 0x0007c000
  Module Pointer to PDB = [robocopy.pdb]
    Module PDB Guid = {A731AA9A-8C66-4A03-97DC-73FFE0951330}
    Module PDB Age = 0x1

Module[201] [C:\WINDOWS\SYSTEM32\ROUTE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP Route Befehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17920
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc964 - Tue Jul 14 01:55:16 2009
    Module Checksum      = 0x000114b1
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [route.pdb]
    Module PDB Guid = {F70E4FA6-3491-4312-BF8A-96E511E05AD8}
    Module PDB Age = 0x1

Module[202] [C:\WINDOWS\SYSTEM32\RPCPING.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  RPC-Ping-Dienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34816
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc6b1 - Tue Jul 14 01:43:45 2009
    Module Checksum      = 0x00015ed0
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [RPCPing.pdb]
    Module PDB Guid = {6DD932EF-1FC4-46F4-AA62-A4EA5B4209C8}
    Module PDB Age = 0x1

Module[203] [C:\WINDOWS\SYSTEM32\RUNAS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm "Ausfhren als"
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 17408
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x00008cfd
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [runas.pdb]
    Module PDB Guid = {9D7BED94-31E8-4110-A78E-0E4AA893C1AA}
    Module PDB Age = 0x1

Module[204] [C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Hostprozess (Rundll32)
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 44544
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc637 - Tue Jul 14 01:41:43 2009
    Module Checksum      = 0x00011cf2
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [rundll32.pdb]
    Module PDB Guid = {EFAE0C87-0C28-46ED-B63B-9A7274CD5042}
    Module PDB Age = 0x2

Module[205] [C:\WINDOWS\SYSTEM32\RUNLEGACYCPLELEVATED.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Fhrt ein Legacy-Systemsteuerungsobjekt mit erhhten Rechten aus
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 57856
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc634 - Tue Jul 14 01:41:40 2009
    Module Checksum      = 0x0001664b
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [RunLegacyCPLElevated.pdb]
    Module PDB Guid = {431954A0-CABC-4B8D-B2D8-D81206AA8716}
    Module PDB Age = 0x1

Module[206] [C:\WINDOWS\SYSTEM32\RUNONCE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wrapper fr einmaliges Ausfhren
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50688
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bc636 - Tue Jul 14 01:41:42 2009
    Module Checksum      = 0x0000e892
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [runonce.pdb]
    Module PDB Guid = {4624B690-44CB-4D0D-90C8-F7174B4CA27D}
    Module PDB Age = 0x1

Module[207] [C:\WINDOWS\SYSTEM32\RWINSTA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Zurcksetzen von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:31 2009
    Module TimeDateStamp = 0x4a5bcb06 - Tue Jul 14 02:02:14 2009
    Module Checksum      = 0x00009b30
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [rwinsta.pdb]
    Module PDB Guid = {ADA97745-EC1F-4A4D-8D44-20250C1B47AB}
    Module PDB Age = 0x1

Module[208] [C:\WINDOWS\SYSTEM32\SC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Ein Programm, das die Entwicklung von Diensten in WindowsNT untersttzt
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 37376
  File Date:         Di Jul 14 02:14:35 2009
    Module TimeDateStamp = 0x4a5bc0fc - Tue Jul 14 01:19:24 2009
    Module Checksum      = 0x00014d8d
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [sc.pdb]
    Module PDB Guid = {7E243925-BC4F-4E6C-B649-EA82DFAB2400}
    Module PDB Age = 0x1

Module[209] [C:\WINDOWS\SYSTEM32\SCHTASKS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Verwaltung geplanter Aufgaben
  Product Version:   (6.1:7600.16699)
  File Version:      (6.1:7600.16699)
  File Size (bytes): 179712
  File Date:         Di Nov 02 05:34:33 2010
    Module TimeDateStamp = 0x4ccf7ad9 - Tue Nov 02 03:43:37 2010
    Module Checksum      = 0x0003694f
    Module SizeOfImage   = 0x0002e000
  Module Pointer to PDB = [sctasks.pdb]
    Module PDB Guid = {E1912736-8CDA-4AC3-911C-CF625B7C8B93}
    Module PDB Age = 0x1

Module[210] [C:\WINDOWS\SYSTEM32\SDBINST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Installationsprogramm fr Anwendungskompatibilittsdatenbank
  Product Version:   (6.0:7600.16385)
  File Version:      (6.0:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:35 2009
    Module TimeDateStamp = 0x4a5bbf56 - Tue Jul 14 01:12:22 2009
    Module Checksum      = 0x000053bb
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [sdbinst.pdb]
    Module PDB Guid = {7ED4717B-2D95-4AF7-BD40-7F76ACA74743}
    Module PDB Age = 0x1

Module[211] [C:\WINDOWS\SYSTEM32\SDIAGNHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemeigener Host fr Skriptdiagnose
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:35 2009
    Module TimeDateStamp = 0x4a5bc113 - Tue Jul 14 01:19:47 2009
    Module Checksum      = 0x0000be0e
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [sdiagnhost.pdb]
    Module PDB Guid = {5021AA57-9568-4376-8A70-FD5310DA5661}
    Module PDB Age = 0x1

Module[212] [C:\WINDOWS\SYSTEM32\SECEDIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Commandtool fr den Windows-Sicherheitskonfigurations-Editor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:14:35 2009
    Module TimeDateStamp = 0x4a5bc440 - Tue Jul 14 01:33:20 2009
    Module Checksum      = 0x0000968b
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [SecEdit.pdb]
    Module PDB Guid = {D9B5B07F-F63D-4BDD-9531-5974E2EFEE72}
    Module PDB Age = 0x1

Module[213] [C:\WINDOWS\SYSTEM32\SECINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sicherheitsinitialisierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14848
  File Date:         Di Jul 14 02:14:35 2009
    Module TimeDateStamp = 0x4a5bc1b6 - Tue Jul 14 01:22:30 2009
    Module Checksum      = 0x0000e43c
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [secinit.pdb]
    Module PDB Guid = {ADFF2D62-B8FA-4B42-A541-B08ABE812D2C}
    Module PDB Age = 0x1

Module[214] [C:\WINDOWS\SYSTEM32\SETHC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Tastenkombinationen fr Barrierefreiheit
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 270336
  File Date:         Di Jul 14 02:14:36 2009
    Module TimeDateStamp = 0x4a5bcdc5 - Tue Jul 14 02:13:57 2009
    Module Checksum      = 0x0004eb1e
    Module SizeOfImage   = 0x00045000
  Module Pointer to PDB = [sethc.pdb]
    Module PDB Guid = {99373452-E06F-4EFA-9734-E9049288DDEA}
    Module PDB Age = 0x1

Module[215] [C:\WINDOWS\SYSTEM32\SETIEINSTALLEDDATE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sets the date that IE was installed
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 77824
  File Date:         Di Jul 14 02:14:36 2009
    Module TimeDateStamp = 0x4a5bc68a - Tue Jul 14 01:43:06 2009
    Module Checksum      = 0x000193fe
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [SetIEInstalledDate.pdb]
    Module PDB Guid = {C248B77D-F8CF-403E-BFED-0781E82E47C0}
    Module PDB Age = 0x1

Module[216] [C:\WINDOWS\SYSTEM32\SETSPN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SPN-Attribut des Computers abfragen oder zurcksetzen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 31744
  File Date:         Di Jul 14 02:14:21 2009
    Module TimeDateStamp = 0x4a5bc495 - Tue Jul 14 01:34:45 2009
    Module Checksum      = 0x000178dc
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [setspn.pdb]
    Module PDB Guid = {E04C73A6-8580-4C2C-BBCC-C83FC2D55AF4}
    Module PDB Age = 0x1

Module[217] [C:\WINDOWS\SYSTEM32\SETUP16.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  MS-Setup Setup Exe
  Product Version:   (6.1:7600.16491)
  File Version:      (3.1:0.1918)
  File Size (bytes): 25600
  File Date:         Di Dez 22 09:23:35 2009
    Module TimeDateStamp = 0x4b304adc - Tue Dec 22 05:28:12 2009
    Module Checksum      = 0x00009bc6
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [setup16.pdb]
    Module PDB Guid = {44D2BDE4-21FD-4803-80D0-1E606E7DDCB6}
    Module PDB Age = 0x1

Module[218] [C:\WINDOWS\SYSTEM32\SETUPUGC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Allgemeiner Befehlsprozessor fr unbeaufsichtigte Installation
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 112640
  File Date:         Di Jul 14 02:14:37 2009
    Module TimeDateStamp = 0x4a5bc07e - Tue Jul 14 01:17:18 2009
    Module Checksum      = 0x00023f5a
    Module SizeOfImage   = 0x0001e000
  Module Pointer to PDB = [setupugc.pdb]
    Module PDB Guid = {7A15F32A-11AF-4576-9E22-FE22E57E1165}
    Module PDB Age = 0x1

Module[219] [C:\WINDOWS\SYSTEM32\SETX.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Setx - Setzt Umgebungsvariablen.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 46080
  File Date:         Di Jul 14 02:14:37 2009
    Module TimeDateStamp = 0x4a5bc013 - Tue Jul 14 01:15:31 2009
    Module Checksum      = 0x00018e77
    Module SizeOfImage   = 0x0000e000
  Module Pointer to PDB = [setx.pdb]
    Module PDB Guid = {FD44A757-45E2-4A02-9108-2A2060AB0114}
    Module PDB Age = 0x1

Module[220] [C:\WINDOWS\SYSTEM32\SFC.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemintegrittsberprfung und Reparatur
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:14:37 2009
    Module TimeDateStamp = 0x4a5bc027 - Tue Jul 14 01:15:51 2009
    Module Checksum      = 0x0000bb09
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [sfc.pdb]
    Module PDB Guid = {B19BA758-0298-4072-9101-0E92E1AEB81A}
    Module PDB Age = 0x1

Module[221] [C:\WINDOWS\SYSTEM32\SHADOW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm fr die Remoteberwachung von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:38 2009
    Module TimeDateStamp = 0x4a5bcb06 - Tue Jul 14 02:02:14 2009
    Module Checksum      = 0x0000bfa5
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [shadow.pdb]
    Module PDB Guid = {D73C24A9-FFF3-4799-9380-B2AE35690735}
    Module PDB Age = 0x1

Module[222] [C:\WINDOWS\SYSTEM32\SHRPUBW.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Assistent fr das Erstellen von Freigaben
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 391680
  File Date:         Di Jul 14 02:14:38 2009
    Module TimeDateStamp = 0x4a5bc3e7 - Tue Jul 14 01:31:51 2009
    Module Checksum      = 0x0006721e
    Module SizeOfImage   = 0x00062000
  Module Pointer to PDB = [shrpubw.pdb]
    Module PDB Guid = {B3FDBC4C-1CF1-4F32-BD52-C6F6EFF538CF}
    Module PDB Age = 0x1

Module[223] [C:\WINDOWS\SYSTEM32\SHUTDOWN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Herunterfahrprogramm und Anmerkungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 30720
  File Date:         Di Jul 14 02:14:38 2009
    Module TimeDateStamp = 0x4a5bc471 - Tue Jul 14 01:34:09 2009
    Module Checksum      = 0x0001779c
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [shutdown.pdb]
    Module PDB Guid = {BCB4A102-2550-4923-B2EF-FAD3B0E81AA4}
    Module PDB Age = 0x1

Module[224] [C:\WINDOWS\SYSTEM32\SNDVOL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Lautstrkemixer
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 314368
  File Date:         Di Jul 14 02:14:39 2009
    Module TimeDateStamp = 0x4a5bcba3 - Tue Jul 14 02:04:51 2009
    Module Checksum      = 0x00059e7c
    Module SizeOfImage   = 0x00051000
  Module Pointer to PDB = [SndVol.pdb]
    Module PDB Guid = {E533746A-CCAF-4D1D-B333-E1155F41A784}
    Module PDB Age = 0x1

Module[225] [C:\WINDOWS\SYSTEM32\SORT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sortierungshilfsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 19968
  File Date:         Di Jul 14 02:14:39 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x0000746f
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [sort.pdb]
    Module PDB Guid = {FF817ABA-13EB-4A9D-A895-7EACC53190AD}
    Module PDB Age = 0x1

Module[226] [C:\WINDOWS\SYSTEM32\SUBST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Subst-Programm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:14:41 2009
    Module TimeDateStamp = 0x4a5bc00d - Tue Jul 14 01:15:25 2009
    Module Checksum      = 0x0000e6ab
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [subst.pdb]
    Module PDB Guid = {BFBD35AA-2E60-4E03-9885-2081FAA23346}
    Module PDB Age = 0x1

Module[227] [C:\WINDOWS\SYSTEM32\SVCHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostprozess fr Windows-Dienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20992
  File Date:         Di Jul 14 02:14:41 2009
    Module TimeDateStamp = 0x4a5bc100 - Tue Jul 14 01:19:28 2009
    Module Checksum      = 0x000087d0
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [svchost.pdb]
    Module PDB Guid = {B8F41E20-8D4E-4F9F-B03E-3ECD4B6AFCA3}
    Module PDB Age = 0x2

Module[228] [C:\WINDOWS\SYSTEM32\SXSTRACE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Sxs-Nachverfolgungstool
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:14:41 2009
    Module TimeDateStamp = 0x4a5bc03b - Tue Jul 14 01:16:11 2009
    Module Checksum      = 0x0000aa26
    Module SizeOfImage   = 0x00014000
  Module Pointer to PDB = [sxstrace.pdb]
    Module PDB Guid = {F0B1062C-5351-4069-BE59-80B4812786C6}
    Module PDB Age = 0x1

Module[229] [C:\WINDOWS\SYSTEM32\SYNCHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Host Process for Windows Sync
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 38912
  File Date:         Di Jul 14 02:14:41 2009
    Module TimeDateStamp = 0x4a5bcc2e - Tue Jul 14 02:07:10 2009
    Module Checksum      = 0x00017b64
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [SyncHost.pdb]
    Module PDB Guid = {8E23B33A-14C9-4073-BA86-62B4A0950CDC}
    Module PDB Age = 0x1

Module[230] [C:\WINDOWS\SYSTEM32\SYSKEY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SAM-Sperrungsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28672
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc490 - Tue Jul 14 01:34:40 2009
    Module Checksum      = 0x0000a15c
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [syskey.pdb]
    Module PDB Guid = {035594C7-6827-43B4-AB07-E4CD04FB48A0}
    Module PDB Age = 0x1

Module[231] [C:\WINDOWS\SYSTEM32\SYSTEMINFO.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Zeigt Systeminformationen an
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 75776
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc9e0 - Tue Jul 14 01:57:20 2009
    Module Checksum      = 0x000160ff
    Module SizeOfImage   = 0x00015000
  Module Pointer to PDB = [sysinfo.pdb]
    Module PDB Guid = {22394D8B-A6CA-4D20-9AE7-0AEBBECFAD01}
    Module PDB Age = 0x1

Module[232] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESADVANCED.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Erweiterte Systemeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5fc - Tue Jul 14 01:40:44 2009
    Module Checksum      = 0x0001475f
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesAdvanced.pdb]
    Module PDB Guid = {F3467E05-F6E7-4D01-B9EA-F12D74250D91}
    Module PDB Age = 0x1

Module[233] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESCOMPUTERNAME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computereinstellungen ndern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5fc - Tue Jul 14 01:40:44 2009
    Module Checksum      = 0x00022115
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesComputerName.pdb]
    Module PDB Guid = {FE86BF23-5B38-4D48-BEF6-BD880D286543}
    Module PDB Age = 0x1

Module[234] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESDATAEXECUTIONPREVENTION.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Einstellungen fr Datenausfhrungsverhinderung ndern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5fe - Tue Jul 14 01:40:46 2009
    Module Checksum      = 0x00020cea
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesDataExecutionPrevention.pdb]
    Module PDB Guid = {B4094800-F32D-4DB2-9A3D-EFD5DD380650}
    Module PDB Age = 0x1

Module[235] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESHARDWARE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hardwareeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x00021f40
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesHardware.pdb]
    Module PDB Guid = {4C19AE4D-0B2E-428C-B4FA-3FFD9B2DB44D}
    Module PDB Age = 0x1

Module[236] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESPERFORMANCE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computerleistungseinstellungen ndern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x00023440
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesPerformance.pdb]
    Module PDB Guid = {BAE9B154-DF24-4B16-AD0F-F9F858FC3860}
    Module PDB Age = 0x1

Module[237] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESPROTECTION.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Computerschutzeinstellungen ndern
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x00023e14
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesProtection.pdb]
    Module PDB Guid = {14AB447E-C2CE-43EC-9CB9-59F96DC3B3A2}
    Module PDB Age = 0x1

Module[238] [C:\WINDOWS\SYSTEM32\SYSTEMPROPERTIESREMOTE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systemremoteeinstellungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 81920
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5ff - Tue Jul 14 01:40:47 2009
    Module Checksum      = 0x000153c6
    Module SizeOfImage   = 0x00017000
  Module Pointer to PDB = [SystemPropertiesRemote.pdb]
    Module PDB Guid = {BBBAC473-AE45-4196-A96D-0511426CCFB7}
    Module PDB Age = 0x1

Module[239] [C:\WINDOWS\SYSTEM32\SYSTRAY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Systray .exe stub
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 8192
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc5e1 - Tue Jul 14 01:40:17 2009
    Module Checksum      = 0x0000e175
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [systray.pdb]
    Module PDB Guid = {A1DEB4DC-F54C-4765-81E2-B76A4EAF9AD8}
    Module PDB Age = 0x1

Module[240] [C:\WINDOWS\SYSTEM32\TAKEOWN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  bernimmt die Besitzrechte an einer Datei.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 50688
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc010 - Tue Jul 14 01:15:28 2009
    Module Checksum      = 0x00010966
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [takeown.pdb]
    Module PDB Guid = {74DEF6B5-90F4-4145-BCEB-5F980640FB64}
    Module PDB Age = 0x1

Module[241] [C:\WINDOWS\SYSTEM32\TAPIUNATTEND.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows(TM) Telephony Unattend Action
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 11264
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcf26 - Tue Jul 14 02:19:50 2009
    Module Checksum      = 0x00011d75
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [TapiUnattend.pdb]
    Module PDB Guid = {245ECA99-831A-47DE-A6F9-00E6A6EDF6B7}
    Module PDB Age = 0x1

Module[242] [C:\WINDOWS\SYSTEM32\TASKENG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Aufgabenplanungsmodul
  Product Version:   (6.1:7600.16699)
  File Version:      (6.1:7600.16699)
  File Size (bytes): 192000
  File Date:         Di Nov 02 05:34:44 2010
    Module TimeDateStamp = 0x4ccf7a97 - Tue Nov 02 03:42:31 2010
    Module Checksum      = 0x0003a679
    Module SizeOfImage   = 0x00030000
  Module Pointer to PDB = [TaskEng.pdb]
    Module PDB Guid = {09003585-2CD8-4747-B35D-8DC2BA8FB83A}
    Module PDB Age = 0x2

Module[243] [C:\WINDOWS\SYSTEM32\TASKKILL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Beendet Prozesse
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 77824
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc9e7 - Tue Jul 14 01:57:27 2009
    Module Checksum      = 0x0001c955
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [taskkill.pdb]
    Module PDB Guid = {7B573AC0-C8F2-4688-ACDF-38AEBF50FE6B}
    Module PDB Age = 0x2

Module[244] [C:\WINDOWS\SYSTEM32\TASKLIST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Listet die aktuell ausgefhrten Aufgaben auf
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 80896
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc9df - Tue Jul 14 01:57:19 2009
    Module Checksum      = 0x00022856
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [tasklist.pdb]
    Module PDB Guid = {7D196178-F3B4-4683-810F-69F794AA33E6}
    Module PDB Age = 0x1

Module[245] [C:\WINDOWS\SYSTEM32\TASKMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Task-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 227328
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc13c - Tue Jul 14 01:20:28 2009
    Module Checksum      = 0x0003aae9
    Module SizeOfImage   = 0x0003a000
  Module Pointer to PDB = [taskmgr.pdb]
    Module PDB Guid = {5921D389-C278-4AAE-8F84-9045DB351364}
    Module PDB Age = 0x2

Module[246] [C:\WINDOWS\SYSTEM32\TCMSETUP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows(R) Telefonieverwaltungssetup
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 13824
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcf1d - Tue Jul 14 02:19:41 2009
    Module Checksum      = 0x0000f119
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [tcmsetup.pdb]
    Module PDB Guid = {8A207574-F489-4D4C-9C0A-4944F835F92C}
    Module PDB Age = 0x1

Module[247] [C:\WINDOWS\SYSTEM32\TCPSVCS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP Services Application
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc962 - Tue Jul 14 01:55:14 2009
    Module Checksum      = 0x0000343f
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [tcpsvcs.pdb]
    Module PDB Guid = {D878B4AE-BDEF-4A1F-AE4D-2A18EB3D655E}
    Module PDB Age = 0x1

Module[248] [C:\WINDOWS\SYSTEM32\TESTFAX.EXE] 
  Company Name:      Dialogic
  File Description:  TESTFAX for Windows
  Product Version:   (3.50:1.1)
  File Version:      (3.50:1.1)
  File Size (bytes): 97280
  File Date:         Fr Jul 02 10:00:04 2010
  Module has NO symbols!

Module[249] [C:\WINDOWS\SYSTEM32\TIMEOUT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  timeout - Hlt Befehlverarbeitungen an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 27136
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc013 - Tue Jul 14 01:15:31 2009
    Module Checksum      = 0x00007939
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [timeout.pdb]
    Module PDB Guid = {B250FA0D-FCAC-4707-8447-8DB36C298C7D}
    Module PDB Age = 0x1

Module[250] [C:\WINDOWS\SYSTEM32\TPMINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TPM-Initialisierungs-Assistent
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 94720
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bbf73 - Tue Jul 14 01:12:51 2009
    Module Checksum      = 0x0001fff4
    Module SizeOfImage   = 0x00019000
  Module Pointer to PDB = [TpmInit.pdb]
    Module PDB Guid = {F0712792-32BA-4185-B9AA-928A586BD1BA}
    Module PDB Age = 0x1

Module[251] [C:\WINDOWS\SYSTEM32\TRACERPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Berichterstellung fr Ereignisablaufverfolgung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 364544
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc11f - Tue Jul 14 01:19:59 2009
    Module Checksum      = 0x00066c6a
    Module SizeOfImage   = 0x0007f000
  Module Pointer to PDB = [tracerpt.pdb]
    Module PDB Guid = {B01744B7-7FCA-40A5-9AC5-8ED25F3C8199}
    Module PDB Age = 0x1

Module[252] [C:\WINDOWS\SYSTEM32\TRACERT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TCP/IP-Traceroutebefehl
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12288
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc964 - Tue Jul 14 01:55:16 2009
    Module Checksum      = 0x0000c758
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [tracert.pdb]
    Module PDB Guid = {68FB0691-A379-444E-B73E-7B3F581CCAE4}
    Module PDB Age = 0x1

Module[253] [C:\WINDOWS\SYSTEM32\TSCON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Verbinden von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 21504
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcaff - Tue Jul 14 02:02:07 2009
    Module Checksum      = 0x0001270f
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [tscon.pdb]
    Module PDB Guid = {C8704615-DF72-41C2-A2C3-A8141461495F}
    Module PDB Age = 0x1

Module[254] [C:\WINDOWS\SYSTEM32\TSDISCON.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Trennen von Sitzungen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22016
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcaff - Tue Jul 14 02:02:07 2009
    Module Checksum      = 0x00005af7
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [tsdiscon.pdb]
    Module PDB Guid = {A4EF3942-93CA-4851-84AD-E66A92D9CE71}
    Module PDB Age = 0x1

Module[255] [C:\WINDOWS\SYSTEM32\TSECIMP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft Windows(TM) TAPI-Sicherheitsdateiimportierung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28160
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcf23 - Tue Jul 14 02:19:47 2009
    Module Checksum      = 0x00010bbf
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [tsecimp.pdb]
    Module PDB Guid = {B8528D20-F8CB-4B93-B20A-453E6A8A09DA}
    Module PDB Age = 0x1

Module[256] [C:\WINDOWS\SYSTEM32\TSKILL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Dienstprogramm zum Abbrechen der Remotedesktopdienste
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 22528
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcb07 - Tue Jul 14 02:02:15 2009
    Module Checksum      = 0x0000a9a0
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [tskill.pdb]
    Module PDB Guid = {EB2BE193-897D-47F6-821A-C0C08E76F638}
    Module PDB Age = 0x1

Module[257] [C:\WINDOWS\SYSTEM32\TSTHEME.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  TSTheme Server Module
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 38912
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bcb11 - Tue Jul 14 02:02:25 2009
    Module Checksum      = 0x0000ced6
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [TSTheme.pdb]
    Module PDB Guid = {E88BDDB7-8AA0-4948-8B94-BF3CF870288D}
    Module PDB Age = 0x1

Module[258] [C:\WINDOWS\SYSTEM32\TYPEPERF.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilen-Leistungsberwachung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 40448
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc11e - Tue Jul 14 01:19:58 2009
    Module Checksum      = 0x00017112
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [typeperf.pdb]
    Module PDB Guid = {C505366E-B860-4F05-8B52-7A453D322152}
    Module PDB Age = 0x1

Module[259] [C:\WINDOWS\SYSTEM32\TZUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Zeitzonendienstprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 47616
  File Date:         Di Jul 14 02:14:42 2009
    Module TimeDateStamp = 0x4a5bc021 - Tue Jul 14 01:15:45 2009
    Module Checksum      = 0x00015d1a
    Module SizeOfImage   = 0x0000f000
  Module Pointer to PDB = [tzutil.pdb]
    Module PDB Guid = {A0FB52A3-2BBE-4AB9-8F80-ABC73CE1245D}
    Module PDB Age = 0x1

Module[260] [C:\WINDOWS\SYSTEM32\UNLODCTR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  PerfMon-Leistungsindikatoren entfernen
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 33792
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc107 - Tue Jul 14 01:19:35 2009
    Module Checksum      = 0x00010aed
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [unlodctr.pdb]
    Module PDB Guid = {278044DF-504A-43D1-8D1B-4BF1CF71A0A3}
    Module PDB Age = 0x1

Module[261] [C:\WINDOWS\SYSTEM32\UPNPCONT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  UPnP Device Host Container
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 23552
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc96f - Tue Jul 14 01:55:27 2009
    Module Checksum      = 0x0000c3bd
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [upnpcont.pdb]
    Module PDB Guid = {94456E15-8BA3-45C4-9C80-0ECF448706EE}
    Module PDB Age = 0x1

Module[262] [C:\WINDOWS\SYSTEM32\USER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  User
  Product Version:   (6.1:7600.16491)
  File Version:      (6.1:7600.16491)
  File Size (bytes): 2048
  File Date:         Di Dez 22 05:28:08 2009
    Module TimeDateStamp = 0x4b304ad8 - Tue Dec 22 05:28:08 2009
    Module Checksum      = 0x00001479
    Module SizeOfImage   = 0x00003000
  Module Pointer to PDB = [user.pdb]
    Module PDB Guid = {DC4E6FC2-302C-490C-8758-288C760051AC}
    Module PDB Age = 0x1

Module[263] [C:\WINDOWS\SYSTEM32\USERACCOUNTCONTROLSETTINGS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  UserAccountControlSettings
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 192512
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc5f1 - Tue Jul 14 01:40:33 2009
    Module Checksum      = 0x00035e84
    Module SizeOfImage   = 0x00032000
  Module Pointer to PDB = [UserAccountControlSettings.pdb]
    Module PDB Guid = {18BDA4F1-49A5-4665-9CED-B92AC7B0D961}
    Module PDB Age = 0x1

Module[264] [C:\WINDOWS\SYSTEM32\USERINIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Userinit-Anmeldeanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 26112
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc47b - Tue Jul 14 01:34:19 2009
    Module Checksum      = 0x00007f3b
    Module SizeOfImage   = 0x00009000
  Module Pointer to PDB = [userinit.pdb]
    Module PDB Guid = {15F7DFB3-4ADD-4B10-AB38-31E55673AF75}
    Module PDB Age = 0x2

Module[265] [C:\WINDOWS\SYSTEM32\UTILMAN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hilfsprogramm-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 1397248
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bcdc5 - Tue Jul 14 02:13:57 2009
    Module Checksum      = 0x0015ace5
    Module SizeOfImage   = 0x00158000
  Module Pointer to PDB = [Utilman.pdb]
    Module PDB Guid = {BE9203D2-B88B-48D2-A37D-F63F5158B073}
    Module PDB Age = 0x1

Module[266] [C:\WINDOWS\SYSTEM32\VERCLSID.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extension CLSID Verification Host
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 10752
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc643 - Tue Jul 14 01:41:55 2009
    Module Checksum      = 0x00008538
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [verclsid.pdb]
    Module PDB Guid = {68161865-E9A8-473C-9C26-94778CE0BF89}
    Module PDB Age = 0x2

Module[267] [C:\WINDOWS\SYSTEM32\VERIFIER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Treiberberprfungs-Manager
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 103424
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bca4e - Tue Jul 14 01:59:10 2009
    Module Checksum      = 0x00023e3e
    Module SizeOfImage   = 0x0001d000
  Module Pointer to PDB = [verifier.pdb]
    Module PDB Guid = {5E7B53E4-BFDA-4E2D-8779-016E76E2E9F4}
    Module PDB Age = 0x1

Module[268] [C:\WINDOWS\SYSTEM32\VSSADMIN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenschnittelle fr Microsoft Volumeschattenkopie-Dienst 
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 115200
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc205 - Tue Jul 14 01:23:49 2009
    Module Checksum      = 0x0002526e
    Module SizeOfImage   = 0x0001f000
  Module Pointer to PDB = [vssadmin.pdb]
    Module PDB Guid = {DC7D9079-4462-4360-88A7-527016B68B04}
    Module PDB Age = 0x1

Module[269] [C:\WINDOWS\SYSTEM32\VSSUIRUN.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Configure Shadow Copies
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 56832
  File Date:         Di Jul 14 02:14:43 2009
    Module TimeDateStamp = 0x4a5bc202 - Tue Jul 14 01:23:46 2009
    Module Checksum      = 0x00011c40
    Module SizeOfImage   = 0x00011000
  Module Pointer to PDB = [vssuirun.pdb]
    Module PDB Guid = {981D47C2-9604-47CB-9F62-CEBA817E9AF1}
    Module PDB Age = 0x1

Module[270] [C:\WINDOWS\SYSTEM32\W32TM.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Zeitdienst-Diagnoseprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 65536
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc444 - Tue Jul 14 01:33:24 2009
    Module Checksum      = 0x0001f7b7
    Module SizeOfImage   = 0x00013000
  Module Pointer to PDB = [w32tm.pdb]
    Module PDB Guid = {F750D5BE-18AB-41CF-8FB4-EB9D3D3850FD}
    Module PDB Age = 0x1

Module[271] [C:\WINDOWS\SYSTEM32\WAITFOR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  waitfor - Wartet auf bzw. sendet ein Signal ber das Netzwerk.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 34304
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc010 - Tue Jul 14 01:15:28 2009
    Module Checksum      = 0x0000fc53
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [waitfor.pdb]
    Module PDB Guid = {B5FA63FF-68F4-4CA2-A827-12B7BE8310E1}
    Module PDB Age = 0x1

Module[272] [C:\WINDOWS\SYSTEM32\WECUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm fr die Ereignissammlung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 80384
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc383 - Tue Jul 14 01:30:11 2009
    Module Checksum      = 0x0001ece5
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [wecutil.pdb]
    Module PDB Guid = {1AEDC388-F782-4474-8AFD-E23E3159E8BD}
    Module PDB Age = 0x1

Module[273] [C:\WINDOWS\SYSTEM32\WERFAULT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Problemberichterstattung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 360448
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc2d9 - Tue Jul 14 01:27:21 2009
    Module Checksum      = 0x00064c7d
    Module SizeOfImage   = 0x0005b000
  Module Pointer to PDB = [WerFault.pdb]
    Module PDB Guid = {2D8FB138-6888-477D-8747-3C711D752D90}
    Module PDB Age = 0x1

Module[274] [C:\WINDOWS\SYSTEM32\WERFAULTSECURE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Fehlerberichterstattung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 28672
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc2db - Tue Jul 14 01:27:23 2009
    Module Checksum      = 0x000130f4
    Module SizeOfImage   = 0x0000a000
  Module Pointer to PDB = [WerFaultSecure.pdb]
    Module PDB Guid = {94DC6D55-FCD3-41AA-A682-A35970F91758}
    Module PDB Age = 0x1

Module[275] [C:\WINDOWS\SYSTEM32\WERMGR.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Problem Reporting
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 53760
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc2d7 - Tue Jul 14 01:27:19 2009
    Module Checksum      = 0x00013612
    Module SizeOfImage   = 0x00010000
  Module Pointer to PDB = [wermgr.pdb]
    Module PDB Guid = {C9438159-ACE7-4F34-A4A3-1A9F840DDAA7}
    Module PDB Age = 0x1

Module[276] [C:\WINDOWS\SYSTEM32\WEVTUTIL.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Befehlszeilenprogramm fr die Ereignisverwaltung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 175616
  File Date:         Di Jul 14 02:14:44 2009
    Module TimeDateStamp = 0x4a5bc38a - Tue Jul 14 01:30:18 2009
    Module Checksum      = 0x0002f2ad
    Module SizeOfImage   = 0x0002d000
  Module Pointer to PDB = [wevtutil.pdb]
    Module PDB Guid = {D066F45D-E7B8-4BEE-A88A-C1506151A28E}
    Module PDB Age = 0x2

Module[277] [C:\WINDOWS\SYSTEM32\WEXTRACT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Win32 Cabinet Self-Extractor                                           
  Product Version:   (8.0:7600.16385)
  File Version:      (8.0:7600.16385)
  File Size (bytes): 151552
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc673 - Tue Jul 14 01:42:43 2009
    Module Checksum      = 0x00025477
    Module SizeOfImage   = 0x00029000
  Module Pointer to PDB = [wextract.pdb]
    Module PDB Guid = {C5FF0851-A7E2-4F67-9B19-50F4A6B3FCB9}
    Module PDB Age = 0x1

Module[278] [C:\WINDOWS\SYSTEM32\WHERE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Where - Zeigt Dateipfade an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 35328
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc014 - Tue Jul 14 01:15:32 2009
    Module Checksum      = 0x00017a5e
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [where.pdb]
    Module PDB Guid = {DFB760A3-38D4-4690-9C02-0D54D4FF330E}
    Module PDB Age = 0x1

Module[279] [C:\WINDOWS\SYSTEM32\WHOAMI.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  whoami - Zeigt Informationen ber angemeldete Benutzer an.
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 43008
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc018 - Tue Jul 14 01:15:36 2009
    Module Checksum      = 0x0001896b
    Module SizeOfImage   = 0x0000d000
  Module Pointer to PDB = [whoami.pdb]
    Module PDB Guid = {C762D3FE-F948-44D9-9B58-456F1281A2DD}
    Module PDB Age = 0x1

Module[280] [C:\WINDOWS\SYSTEM32\WIMSERV.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Wimfltr v2 extractor
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 327680
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc0a8 - Tue Jul 14 01:18:00 2009
    Module Checksum      = 0x000590c4
    Module SizeOfImage   = 0x00053000
  Module Pointer to PDB = [wimserv.pdb]
    Module PDB Guid = {7C44F223-B8CB-4A0D-B27C-2824F1EB8B43}
    Module PDB Age = 0x1

Module[281] [C:\WINDOWS\SYSTEM32\WININIT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows-Startanwendung
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 96256
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc50f - Tue Jul 14 01:36:47 2009
    Module Checksum      = 0x0001e7bf
    Module SizeOfImage   = 0x0001a000
  Module Pointer to PDB = [wininit.pdb]
    Module PDB Guid = {2C0EBA74-70D2-4F9A-B321-36435618885D}
    Module PDB Age = 0x2

Module[282] [C:\WINDOWS\SYSTEM32\WINRS.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  winrs
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 39936
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc3c5 - Tue Jul 14 01:31:17 2009
    Module Checksum      = 0x00015ebd
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [winrs.pdb]
    Module PDB Guid = {3333A8F4-41BB-47F9-85F9-94D0C71504CF}
    Module PDB Age = 0x1

Module[283] [C:\WINDOWS\SYSTEM32\WINRSHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  winrscmde
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 20480
  File Date:         Di Jul 14 02:14:45 2009
    Module TimeDateStamp = 0x4a5bc3c5 - Tue Jul 14 01:31:17 2009
    Module Checksum      = 0x0000bffa
    Module SizeOfImage   = 0x00008000
  Module Pointer to PDB = [winrshost.pdb]
    Module PDB Guid = {094AE58A-A823-4B0A-9CCC-CEC1E9C783F4}
    Module PDB Age = 0x1

Module[284] [C:\WINDOWS\SYSTEM32\WINVER.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Versionsmeldungssymbol
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 79872
  File Date:         Di Jul 14 02:14:46 2009
    Module TimeDateStamp = 0x4a5bc63b - Tue Jul 14 01:41:47 2009
    Module Checksum      = 0x000214ff
    Module SizeOfImage   = 0x00016000
  Module Pointer to PDB = [winver.pdb]
    Module PDB Guid = {8C7F14EF-DA3C-4BB7-B54F-E681FE72C609}
    Module PDB Age = 0x1

Module[285] [C:\WINDOWS\SYSTEM32\WOWREG32.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  SetupAPI 32-bit Surrogate
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 14336
  File Date:         Di Jul 14 00:16:09 2009
    Module TimeDateStamp = 0x4a5bc039 - Tue Jul 14 01:16:09 2009
    Module Checksum      = 0x0000b8d3
    Module SizeOfImage   = 0x00007000
  Module Pointer to PDB = [wowreg32.pdb]
    Module PDB Guid = {87793AEA-D92D-43D4-BC0C-0C2FB7F1909D}
    Module PDB Age = 0x1

Module[286] [C:\WINDOWS\SYSTEM32\WRITE.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Write
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 9216
  File Date:         Di Jul 14 02:14:49 2009
    Module TimeDateStamp = 0x4a5bc60c - Tue Jul 14 01:41:00 2009
    Module Checksum      = 0x00003b31
    Module SizeOfImage   = 0x00005000
  Module Pointer to PDB = [write.pdb]
    Module PDB Guid = {E9E899D6-3845-4576-8985-E9726F9E94DF}
    Module PDB Age = 0x1

Module[287] [C:\WINDOWS\SYSTEM32\WSCRIPT.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Microsoft  Windows Based Script Host
  Product Version:   (5.8:7600.16385)
  File Version:      (5.8:7600.16385)
  File Size (bytes): 141824
  File Date:         Di Jul 14 02:14:49 2009
    Module TimeDateStamp = 0x4a5bc678 - Tue Jul 14 01:42:48 2009
    Module Checksum      = 0x0002b2d4
    Module SizeOfImage   = 0x00026000
  Module Pointer to PDB = [wscript.pdb]
    Module PDB Guid = {0C53DBB0-C1C9-4DF9-9104-A7FC4FE26EB4}
    Module PDB Age = 0x2

Module[288] [C:\WINDOWS\SYSTEM32\WSMANHTTPCONFIG.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  WSMan HTTP Configuration File
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 198144
  File Date:         Di Jul 14 02:14:49 2009
    Module TimeDateStamp = 0x4a5bc3ca - Tue Jul 14 01:31:22 2009
    Module Checksum      = 0x00037c12
    Module SizeOfImage   = 0x00033000
  Module Pointer to PDB = [WSManHTTPConfig.pdb]
    Module PDB Guid = {2970A2F4-0433-4132-89F1-420B345047CA}
    Module PDB Age = 0x1

Module[289] [C:\WINDOWS\SYSTEM32\WSMPROVHOST.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  wsmprovhost
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 12288
  File Date:         Di Jul 14 02:14:49 2009
    Module TimeDateStamp = 0x4a5bc3cf - Tue Jul 14 01:31:27 2009
    Module Checksum      = 0x00008873
    Module SizeOfImage   = 0x00006000
  Module Pointer to PDB = [wsmprovhost.pdb]
    Module PDB Guid = {38D3263D-F606-43C5-B4EC-FB7E53447492}
    Module PDB Age = 0x1

Module[290] [C:\WINDOWS\SYSTEM32\WUAPP.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Windows Update Application Launcher
  Product Version:   (7.3:7600.16385)
  File Version:      (7.3:7600.16385)
  File Size (bytes): 33792
  File Date:         Di Jul 14 02:14:50 2009
    Module TimeDateStamp = 0x4a5bcddc - Tue Jul 14 02:14:20 2009
    Module Checksum      = 0x00012066
    Module SizeOfImage   = 0x0000b000
  Module Pointer to PDB = [wuapp.pdb]
    Module PDB Guid = {B962FBC2-27B4-4858-8AE3-FD1C1E25DF79}
    Module PDB Age = 0x1

Module[291] [C:\WINDOWS\SYSTEM32\WUSA.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Eigenstndiges Windows Update-Installationsprogramm
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 314880
  File Date:         Di Jul 14 02:14:50 2009
    Module TimeDateStamp = 0x4a5bc1b7 - Tue Jul 14 01:22:31 2009
    Module Checksum      = 0x00050c9b
    Module SizeOfImage   = 0x00050000
  Module Pointer to PDB = [wusa.pdb]
    Module PDB Guid = {3C6EE129-B7C6-43EF-9F35-A0AB91E0A4A7}
    Module PDB Age = 0x1

Module[292] [C:\WINDOWS\SYSTEM32\XCOPY.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Extended Copy Utility
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 36864
  File Date:         Di Jul 14 02:14:50 2009
    Module TimeDateStamp = 0x4a5bc015 - Tue Jul 14 01:15:33 2009
    Module Checksum      = 0x0000ad14
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [xcopy.pdb]
    Module PDB Guid = {4D67EF18-42B9-4EBB-9306-A80A444B1B98}
    Module PDB Age = 0x2

Module[293] [C:\WINDOWS\SYSTEM32\XWIZARD.EXE] 
  Company Name:      Microsoft Corporation
  File Description:  Hostprozess fr erweiterbare Assistenten
  Product Version:   (6.1:7600.16385)
  File Version:      (6.1:7600.16385)
  File Size (bytes): 41472
  File Date:         Di Jul 14 02:14:51 2009
    Module TimeDateStamp = 0x4a5bc88d - Tue Jul 14 01:51:41 2009
    Module Checksum      = 0x0000e8af
    Module SizeOfImage   = 0x0000c000
  Module Pointer to PDB = [xwizard.pdb]
    Module PDB Guid = {A65C21E5-09EB-4A18-8AA6-C3A84F9BB854}
    Module PDB Age = 0x1

