COM Hunter Versions Save

COM Hijacking VOODOO

V.1.1.5

1 year ago
  • Finds out entry valid CLSIDs in the victim's machine.
  • Finds out valid CLSIDs via Task Scheduler in the victim's machine.
  • Finds out if someone already used any of those valid CLSIDs in order to do COM persistence (LocalServer32/InprocServer32).
  • Finds out if someone already used any of valid CLSID via Task Scheduler in order to do COM persistence (LocalServer32/InprocServer32).
  • Tries to do automatically COM Hijacking Persistence with general valid CLSIDs (LocalServer32/InprocServer32).
  • Tries to do automatically COM Hijacking Persistence via Task Scheduler.
  • Tries to use "TreatAs" key in order to refere to a different component.