drop hkcr or classes .reg · clsid hijack flags · hkcu vs hklm · top 30 known targets · csv export · runs locally
registry exports
drop .reg (HKCR, HKLM\\SOFTWARE\\Classes, HKCU\\SOFTWARE\\Classes)
or click
provide both HKCU and HKLM exports to compare COM hijack candidates
drop HKCR / HKLM / HKCU classes .reg exports