Mshtml.dll

Microsoft HTML Viewer

Paths

  • c:\windows\system32\mshtml.dll
  • c:\windows\syswow64\mshtml.dll

Commands

Execute

Invoke an HTML Application via mshta.exe (note: pops a security warning and a print dialogue box).

Use case: Launch an HTA application.

Privileges: User

rundll32.exe Mshtml.dll,PrintHTML {PATH_ABSOLUTE:.hta}

Detection

Resources