Reg Add Hkcu Software Classes Clsid 86ca1aa034aa4e8ba50950c905bae2a2 Inprocserver32 Ve D F 2021 2021 -
Report: Analysis of reg add Command for CLSID Registration
- Severity: Medium to High (depending on the CLSID’s purpose).
- User Scope: Current user only (HKCU), not system-wide (HKLM).
- Likely Intent:
The command creates a specific "InprocServer32" registry key with a blank default value:
- Command: The command used to add a new value to the registry or to modify an existing one.
- Missing Backslashes: Registry paths require backslashes
\between keys (e.g.,hkcu\software\classes). - Missing Braces: CLSIDs should be wrapped in curly braces
for clarity and proper parsing (e.g.,86ca1aa0-34aa-4e8b...). - Switch Formatting: Switches must start with a forward slash
/.5. Why “2021” Might Be the Data
reg add <KeyName> [/v ValueName] [/t DataType] [/d Data] [/f] Report: Analysis of reg add Command for CLSID Registration
The Target (CLSID):
The long string of numbers is the Class ID for the File Explorer’s "File Explorer Extensions." Severity: Medium to High (depending on the CLSID’s
Possible Implications