← LibraryTechnique entry
LOL-MSHTAExecution
mshta.exe HTA Runner
Signed MS host that runs JS / VBS inside an HTA page — common LOLBin for cradle stagers.
§ Where this technique fits
LOL-MSHTA is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.