While I was looking for any tools that I can use them to hijack COM objects I found this tool works by using function that is used to COM techniques, after I found this tool (I understood that It can be used to hijack COM object)
We all know what happens when It's easy to hijack COM object, which It means that we can execute Scriptlet by using COM hijacking techniques.
As we see in the picture below, It shows how Scripting.Dictionary function invokes CLSID to execute load and execute Scriptlet remotely.
To take a look at the command used:
https://gist.github.com/homjxi0e/0baff9e3e34d9403a5e1f4b3379207aa