System Startup details for e99c96972c8f55cf2371594f6d76960f

Location

HK_LM:RunOnce

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

2

Filename

cmd.exe

File MD5 Hash

Command

C:\WINDOWS\system32\cmd.exe /c erase "C:\DOCUME~1\Clancy\LOCALS~1\Temp\insmac2k.dll"