From f43cafaa4b974df24d9f907c9af461cefd114cee Mon Sep 17 00:00:00 2001 From: giMini Date: Mon, 21 May 2018 10:16:59 -0400 Subject: [PATCH] Create Mshtml.md --- OSLibraries/Mshtml.md | 43 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 OSLibraries/Mshtml.md diff --git a/OSLibraries/Mshtml.md b/OSLibraries/Mshtml.md new file mode 100644 index 0000000..e9d0979 --- /dev/null +++ b/OSLibraries/Mshtml.md @@ -0,0 +1,43 @@ +## Mshtml.dll + +* Functions: Execute + +``` +rundll32.exe Mshtml.dll,PrintHTML "C:\temp\calc.hta" +``` + +Acknowledgements: +* Pierre-Alexandre Braeken - @pabraeken + +Code sample (calc.hta): +``` + + + LOLBin + + + +

LOLBin

+ + +``` + +Resources: +* https://twitter.com/pabraeken/status/998567549670477824 + +Full path: +``` +c:\windows\system32\Mshtml.dll +c:\windows\sysWOW64\Mshtml.dll +``` + +Notes: + + +Detection: