admin/Astharot15-COMLoaderAstharot
1
0
Fork 0
mirror of https://github.com/Astharot15/COMLoaderAstharot/ synced 2026-07-13 20:52:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add README content for COM Hijack details

Browse Source 
Added details about COM Hijack targeting Chrome and Edge.
This commit is contained in:
Astharot15
2026-07-12 15:31:01 +02:00
committed by GitHub
parent 9070acd125
commit a58b47cb32
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+9
View File
@@ -0,0 +1,9 @@
# COM Hijack for CLSID {9FC8E510-A27C-4B3B-B9A3-BF65F00256A8}
## Interesting details
The hijack targets chrome and msedge; it also works in explorer, but it is likely to crash.
The callback used is **LdrCallEnclave**.
A Download function is commented out. It worked in the .exe compilation, but when compiled as a dll, it gets caught by AVs; so instead of using wininet, winhttp was used.
The payload uses event objects for process synchronization rather than a traditional mutex.
The COM object is very reliable; it has been working for 6 months without crashes.