Yet another DCOM object for lateral movement

The report introduces a new DCOM abuse technique that leverages the COpenControlPanel/IOpenControlPanel interface to load registered Control Panel DLLs through the COM Surrogate (dllhost.exe) for remote code execution and persistence. It reviews the reliability and detections of existing Impacket dcomexec objects across Windows versions, details practical enumeration methods (PowerShell, C++, OleViewDotNet), and provides detection guidance such as monitoring specific Control Panel registry paths, dllhost.exe hosting unusual COM objects, and Remote Registry usage.