[svchost.exe]
PID = 0x364
CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
0x1000000
C:\WINDOWS\system32\svchost.exe
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Generic Host Process for Win32 Services
2004-08-04 08:52:38
ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-04 08:52:02