I’d like to keep track of the ActiveX controls created by some process. To simplify the problem, I’d first like to monitor the current process only. I want to do this so that I can check whether any ActiveX control supports IOleWindow and if so, whether a given HWND belongs to that ActiveX control (so that I can map HWNDs to ActiveX controls).
Does anybody have experience with this? My first idea was to use API hooking to monitor CoCreateInstance invocations, but I read that this doesn’t work in all cases. Some Google research revealed http://www.pocketsoap.com/sf/activation.html which talks about installing a custom class factory – how would this work?
I ended up hooking CoCreateInstance and CoGetClassObject to track all COM objects being created.