From 1dacf94474749f104339b63a3da2d355e19d4191 Mon Sep 17 00:00:00 2001
From: Astharot15 <145103263+Astharot15@users.noreply.github.com>
Date: Sun, 12 Jul 2026 15:31:44 +0200
Subject: [PATCH] Update README with technical details

Added details about hijack targets, callback, download function, payload synchronization, and COM object reliability.
---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index f1cbbb6..4e13ed5 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,11 @@
 ### Interesting details
 
 The hijack targets chrome and msedge; it also works in explorer, but it is likely to crash.
+
 The callback used is **LdrCallEnclave**.
+
 A Download function is commented out. It worked in the .exe compilation, but when compiled as a dll, it gets caught by AVs; so instead of using wininet, winhttp was used.
+
 The payload uses event objects for process synchronization rather than a traditional mutex.
+
 The COM object is very reliable; it has been working for 6 months without crashes.