Is this normal to see in autoruns?

Have two entries the first one is iexplore.exe under image hijacks with a %1 in the commandline and the second is something that says file not found for Drivers32.

For the first one I'm not sure why this is listed for htmlfile? I use firefox as default so I would assume it wouldn't be here, right? I don't remember seeing this last month but I don't check autoruns that much.



This second one when I inspect the registry just links to a DWORD registry key. I'm not sure why autoruns is showing this?


Anyone else with similar entries.

Thanks -Webweaver

I don't have HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\shell\Open at all. The 32-bit drivers key is shown by Autoruns because drivers are essentially services, so they (can) load automatically.

I'd say the iexplore one is normal. I have the same entry on both Windows 10 and Windows 11.

Well that's weird, now I'm jealous I don't have it.

Hm, that's weird, I wonder why I have it. I scanned the exe with virustotal looked clean, was signed. Then ran a bitdefender full scan and didn't find anything. Also with drivers key I was just curious because that's not a registry key that points towards a dll, it's DWORD so it only stores a 32 bit integer I didn't think autoruns would list them or else it would be filled with alot of useless information. I also did some digging into the name of the registry key and found a bug report in microsoft midi github repo with it so idk. I definitely remember not having either of these a couple months ago on my old install.

I have both of those in the autoruns as well.
The registry also contains that key.
The first one is to allow the opening of legacy web content pages by IExplorer.
The second one is also legacy in the form of a midi codec.

I suspect those do not require a reformat of the drive followed by a fresh, not stale, installation of Windows.

Webweaver said:

Also with drivers key I was just curious because that's not a registry key that points towards a dll, it's DWORD so it only stores a 32 bit integer I didn't think autoruns would list them or else it would be filled with alot of useless information.

Click to expand...

The key contains references to .dll, .drv, probably some .acm files.