.NET Loader - Remote COM Script Execution (T1218.010)

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•6

Identifies regsvr32.exe utilizing scrobj.dll to execute a remotely hosted malicious COM script.