ParentImage:\\svchost.exe (Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE) CommandLine:C\:\\windows\\system32\\davclnt.dll,DavSetCookie*