Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
705112906/�...32.dll
windows7-x64
305112906/�...32.dll
windows10-2004-x64
305112906/�...32.dll
windows7-x64
305112906/�...32.dll
windows10-2004-x64
305112906/�...TL.dll
windows7-x64
305112906/�...TL.dll
windows10-2004-x64
305112906/�...32.dll
windows7-x64
305112906/�...32.dll
windows10-2004-x64
305112906/�...ll.dll
windows7-x64
505112906/�...ll.dll
windows10-2004-x64
505112906/�....0.exe
windows7-x64
305112906/�....0.exe
windows10-2004-x64
305112906/�......url
windows7-x64
105112906/�......url
windows10-2004-x64
105112906/�...��.url
windows7-x64
105112906/�...��.url
windows10-2004-x64
1Analysis
-
max time kernel
94s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30/09/2024, 10:14
Behavioral task
behavioral1
Sample
05112906/泽西家庭音乐视听系统V1.0/MCI32.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05112906/泽西家庭音乐视听系统V1.0/MCI32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
05112906/泽西家庭音乐视听系统V1.0/MCI32.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
05112906/泽西家庭音乐视听系统V1.0/MCI32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
05112906/泽西家庭音乐视听系统V1.0/MSCOMCTL.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
05112906/泽西家庭音乐视听系统V1.0/MSCOMCTL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
05112906/泽西家庭音乐视听系统V1.0/comdlg32.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
05112906/泽西家庭音乐视听系统V1.0/comdlg32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
05112906/泽西家庭音乐视听系统V1.0/dmshell.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
05112906/泽西家庭音乐视听系统V1.0/dmshell.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
05112906/泽西家庭音乐视听系统V1.0/泽西家庭音乐视听系统V1.0.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
05112906/泽西家庭音乐视听系统V1.0/泽西家庭音乐视听系统V1.0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
05112906/飓风软件/大量破解软件下载....url
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
05112906/飓风软件/大量破解软件下载....url
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
05112906/飓风软件/飓风软件站.url
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
05112906/飓风软件/飓风软件站.url
Resource
win10v2004-20240802-en
General
-
Target
05112906/泽西家庭音乐视听系统V1.0/MCI32.dll
-
Size
61KB
-
MD5
2b6d1ef866d9542c5025cb259610ab35
-
SHA1
2d56bb7fc1381ea25917d1fd53c33492cbb3181b
-
SHA256
a22b349e5b39b8897d77dfe7f7b7a14e9ced3e837be2228f9183c2c2693efc03
-
SHA512
8ba985cd8a5870721450b6b4fc2b70d4fde188b87a1a12d37ffaeac4652f6c35464c3ec4e6a4adecf38417f9eede70e3eb888507273b709741d0761ec72e3501
-
SSDEEP
768:7I3NFG3USfd5mxhPTdnhdjQ9dZGPUu734UEduosI1Vf/Kp:kdFG3USfdAhLDdjgRiEt7K
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2568 wrote to memory of 1056 2568 rundll32.exe 82 PID 2568 wrote to memory of 1056 2568 rundll32.exe 82 PID 2568 wrote to memory of 1056 2568 rundll32.exe 82 PID 1056 wrote to memory of 1924 1056 rundll32.exe 83 PID 1056 wrote to memory of 1924 1056 rundll32.exe 83 PID 1056 wrote to memory of 1924 1056 rundll32.exe 83 PID 1924 wrote to memory of 3356 1924 rundll32.exe 84 PID 1924 wrote to memory of 3356 1924 rundll32.exe 84 PID 1924 wrote to memory of 3356 1924 rundll32.exe 84 PID 3356 wrote to memory of 1528 3356 rundll32.exe 85 PID 3356 wrote to memory of 1528 3356 rundll32.exe 85 PID 3356 wrote to memory of 1528 3356 rundll32.exe 85 PID 1528 wrote to memory of 1508 1528 rundll32.exe 86 PID 1528 wrote to memory of 1508 1528 rundll32.exe 86 PID 1528 wrote to memory of 1508 1528 rundll32.exe 86 PID 1508 wrote to memory of 1484 1508 rundll32.exe 87 PID 1508 wrote to memory of 1484 1508 rundll32.exe 87 PID 1508 wrote to memory of 1484 1508 rundll32.exe 87 PID 1484 wrote to memory of 3580 1484 rundll32.exe 88 PID 1484 wrote to memory of 3580 1484 rundll32.exe 88 PID 1484 wrote to memory of 3580 1484 rundll32.exe 88 PID 3580 wrote to memory of 4880 3580 rundll32.exe 89 PID 3580 wrote to memory of 4880 3580 rundll32.exe 89 PID 3580 wrote to memory of 4880 3580 rundll32.exe 89 PID 4880 wrote to memory of 2724 4880 rundll32.exe 90 PID 4880 wrote to memory of 2724 4880 rundll32.exe 90 PID 4880 wrote to memory of 2724 4880 rundll32.exe 90 PID 2724 wrote to memory of 1612 2724 rundll32.exe 91 PID 2724 wrote to memory of 1612 2724 rundll32.exe 91 PID 2724 wrote to memory of 1612 2724 rundll32.exe 91 PID 1612 wrote to memory of 2772 1612 rundll32.exe 92 PID 1612 wrote to memory of 2772 1612 rundll32.exe 92 PID 1612 wrote to memory of 2772 1612 rundll32.exe 92 PID 2772 wrote to memory of 1084 2772 rundll32.exe 93 PID 2772 wrote to memory of 1084 2772 rundll32.exe 93 PID 2772 wrote to memory of 1084 2772 rundll32.exe 93 PID 1084 wrote to memory of 4828 1084 rundll32.exe 94 PID 1084 wrote to memory of 4828 1084 rundll32.exe 94 PID 1084 wrote to memory of 4828 1084 rundll32.exe 94 PID 4828 wrote to memory of 3872 4828 rundll32.exe 95 PID 4828 wrote to memory of 3872 4828 rundll32.exe 95 PID 4828 wrote to memory of 3872 4828 rundll32.exe 95 PID 3872 wrote to memory of 4040 3872 rundll32.exe 96 PID 3872 wrote to memory of 4040 3872 rundll32.exe 96 PID 3872 wrote to memory of 4040 3872 rundll32.exe 96 PID 4040 wrote to memory of 4404 4040 rundll32.exe 97 PID 4040 wrote to memory of 4404 4040 rundll32.exe 97 PID 4040 wrote to memory of 4404 4040 rundll32.exe 97 PID 4404 wrote to memory of 4996 4404 rundll32.exe 98 PID 4404 wrote to memory of 4996 4404 rundll32.exe 98 PID 4404 wrote to memory of 4996 4404 rundll32.exe 98 PID 4996 wrote to memory of 2940 4996 rundll32.exe 99 PID 4996 wrote to memory of 2940 4996 rundll32.exe 99 PID 4996 wrote to memory of 2940 4996 rundll32.exe 99 PID 2940 wrote to memory of 2212 2940 rundll32.exe 100 PID 2940 wrote to memory of 2212 2940 rundll32.exe 100 PID 2940 wrote to memory of 2212 2940 rundll32.exe 100 PID 2212 wrote to memory of 5036 2212 rundll32.exe 101 PID 2212 wrote to memory of 5036 2212 rundll32.exe 101 PID 2212 wrote to memory of 5036 2212 rundll32.exe 101 PID 5036 wrote to memory of 4912 5036 rundll32.exe 102 PID 5036 wrote to memory of 4912 5036 rundll32.exe 102 PID 5036 wrote to memory of 4912 5036 rundll32.exe 102 PID 4912 wrote to memory of 4148 4912 rundll32.exe 103
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2568 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:1056 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#13⤵
- Suspicious use of WriteProcessMemory
PID:1924 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#14⤵
- Suspicious use of WriteProcessMemory
PID:3356 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#15⤵
- Suspicious use of WriteProcessMemory
PID:1528 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#16⤵
- Suspicious use of WriteProcessMemory
PID:1508 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#17⤵
- Suspicious use of WriteProcessMemory
PID:1484 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#18⤵
- Suspicious use of WriteProcessMemory
PID:3580 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#19⤵
- Suspicious use of WriteProcessMemory
PID:4880 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#110⤵
- Suspicious use of WriteProcessMemory
PID:2724 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#111⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1612 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#112⤵
- Suspicious use of WriteProcessMemory
PID:2772 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#113⤵
- Suspicious use of WriteProcessMemory
PID:1084 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#114⤵
- Suspicious use of WriteProcessMemory
PID:4828 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#115⤵
- Suspicious use of WriteProcessMemory
PID:3872 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#116⤵
- Suspicious use of WriteProcessMemory
PID:4040 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#117⤵
- Suspicious use of WriteProcessMemory
PID:4404 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#118⤵
- Suspicious use of WriteProcessMemory
PID:4996 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#119⤵
- Suspicious use of WriteProcessMemory
PID:2940 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#120⤵
- Suspicious use of WriteProcessMemory
PID:2212 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#121⤵
- Suspicious use of WriteProcessMemory
PID:5036 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#122⤵
- Suspicious use of WriteProcessMemory
PID:4912 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#123⤵PID:4148
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#124⤵PID:840
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#125⤵PID:4752
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#126⤵PID:1572
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#127⤵PID:1116
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#128⤵PID:808
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#129⤵PID:1376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#130⤵PID:64
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#131⤵PID:5068
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#132⤵PID:3844
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#133⤵PID:3716
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#134⤵PID:4484
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#135⤵PID:2032
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#136⤵PID:1744
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#137⤵PID:3164
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#138⤵PID:4872
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#139⤵PID:3588
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#140⤵PID:2204
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#141⤵PID:2136
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#142⤵PID:1204
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#143⤵PID:1672
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#144⤵PID:3124
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#145⤵
- System Location Discovery: System Language Discovery
PID:4732 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#146⤵PID:4472
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#147⤵PID:4992
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#148⤵PID:4580
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#149⤵
- System Location Discovery: System Language Discovery
PID:3504 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#150⤵PID:4088
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#151⤵PID:1912
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#152⤵PID:4592
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#153⤵PID:2884
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#154⤵
- System Location Discovery: System Language Discovery
PID:4668 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#155⤵PID:4420
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#156⤵PID:3996
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#157⤵PID:2252
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#158⤵PID:3916
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#159⤵PID:732
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#160⤵PID:4864
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#161⤵PID:2516
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#162⤵PID:1464
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#163⤵PID:4608
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#164⤵PID:4524
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#165⤵PID:3772
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#166⤵
- System Location Discovery: System Language Discovery
PID:3128 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#167⤵PID:2020
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#168⤵PID:1180
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#169⤵PID:2124
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#170⤵PID:3452
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#171⤵PID:4856
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#172⤵PID:3488
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#173⤵PID:2560
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#174⤵PID:3264
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#175⤵PID:2376
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#176⤵PID:2140
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#177⤵PID:552
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#178⤵
- System Location Discovery: System Language Discovery
PID:404 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#179⤵PID:2016
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#180⤵PID:2036
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#181⤵PID:3564
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#182⤵PID:1956
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#183⤵PID:1812
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#184⤵PID:4604
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#185⤵PID:3476
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#186⤵PID:3028
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#187⤵PID:3368
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#188⤵PID:1792
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#189⤵PID:2232
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#190⤵PID:876
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#191⤵PID:4556
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#192⤵PID:4360
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#193⤵
- System Location Discovery: System Language Discovery
PID:2300 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#194⤵PID:1036
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#195⤵PID:4152
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#196⤵PID:3892
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#197⤵PID:872
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#198⤵PID:4792
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#199⤵PID:3924
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1100⤵PID:4300
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1101⤵PID:4304
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1102⤵PID:4292
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1103⤵PID:4796
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1104⤵PID:728
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1105⤵PID:3148
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1106⤵PID:4372
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1107⤵
- System Location Discovery: System Language Discovery
PID:744 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1108⤵PID:1920
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1109⤵PID:4616
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1110⤵PID:3972
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1111⤵PID:1544
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1112⤵PID:5048
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1113⤵
- System Location Discovery: System Language Discovery
PID:3752 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1114⤵PID:1636
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1115⤵PID:4320
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1116⤵PID:1996
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1117⤵PID:1948
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1118⤵PID:3084
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1119⤵PID:1936
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1120⤵PID:2660
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1121⤵PID:5044
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05112906\泽西家庭音乐视听系统V1.0\MCI32.dll,#1122⤵PID:4836
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-