← LibraryTechnique entry
LOL-RUNDLL32Execution
rundll32.exe Proxied Execution
rundll32.exe javascript:"\..\mshtml,RunHTMLApplication "; ... — runs arbitrary JS in a signed-binary context.
§ Where this technique fits
LOL-RUNDLL32 is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.