System Startup details for 556e409fb98b7801f4561c262f8a5f8e

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

3

Filename

cmd.exe

File MD5 Hash

EEB024F2C81F0D55936FB825D21A91D6

Command

C:\WINDOWS\system32\cmd.exe /c erase "C:\DOCUME~1\KIRKKE~1\LOCALS~1\Temp\shfolder.dll"