Report ID: IR-2026-04-18-001
Date: April 18, 2026
Subject: Analysis of reg add command targeting COM Class ID (CLSID)
No legitimate Microsoft COM object uses a year number as InprocServer32 default value. The proper data would be like:
/d "C:\Program Files\SomeApp\some.dll" Report ID: IR-2026-04-18-001 Date: April 18, 2026 Subject:
HKCU\Software\Classes\CLSID – Modifications here do not require admin rights, making them attractive for: If you did not intentionally write this registry
If you did not intentionally write this registry entry, it is strongly recommended to: it is strongly recommended to: