Skip to content

Instantly share code, notes, and snippets.

@bohops

bohops/Abandoned_COM_PowerShell.txt

Created November 4, 2018 22:18
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save bohops/9e6b91121e5ff30ece8d7feecb45f81e to your computer and use it in GitHub Desktop.
Save bohops/9e6b91121e5ff30ece8d7feecb45f81e to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Abandoned_COM_PowerShell.txt
- Abandoned COM Discovery Script.
- Makes a few assumptions, needs refinement (e.g. doesn't account for all extensions)
function GetMissing($server){$clsids=@{};cd $env:windir'\system32\';$srv=gwmi Win32_COMSetting | ?{$_.$server -ne $null};$srv | ForEach {$clsids.add($_.ComponentId,$_.$server)};$clsids.Keys | foreach {$p=[Environment]::ExpandEnvironmentVariables($clsids[$_]);$p=$p.Replace('"','');if($p.Contains('.exe ')){$p=$p.Substring(0,$p.IndexOf('.exe'))+'.exe'};if($(test-path $p) -eq $False){$_+' | '+$server+' | '+$p}}};GetMissing('LocalServer');GetMissing('LocalServer32');GetMissing('InprocServer');GetMissing('InprocServer32')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment