How to sniff on virtual COM port in windows?

I'm trying to reverse engineer the MediaTek flashing application for its smartphones. It works with a virtual COM port device as follows:

1. Device is attached, preloader exposes the COM port USB device for 1s and waits for some command by host


2. If no command comes in from the host, the USB device is deattached and normal boot resumes


3. If command comes in (the host software detects USB VID/PID and connects using windows comport api), then preloader accepts extended bootloader from PC and communicates over COM port

The problem is that due to the fact that the exposed COM port vanishes after one second I cannot use any conventional serial port monitoring software. Is there any way to sniff on the communication except sniffing and reimplementing the USB COM port protocol?