COM object hijack residue detector — free browser tool | fatcousin

home

drop registry export · detect user-level com registrations overriding system com objects · identify com hijacking artifacts used for persistence or uac bypass · surface hkcu com entries that shadow hklm entries · runs locally

inputs

drop HKCU/HKLM CLSID .reg exports (multi-file)

or click

Select file

HKCU\\Software\\Classes\\CLSID vs HKLM\\SOFTWARE\\Classes\\CLSID · optional file inventory csv for missing-DLL checks

attack window start (optional) attack window end (optional)

drop HKCU/HKLM Software\Classes\CLSID .reg exports (multi-file)