If you are not sure if the website you would like to visit is secure, you can verify it here. Enter the website address of the page and see parts of its content and the thumbnail images on this site. None (if any) dangerous scripts on the referenced page will be executed. Additionally, if the selected site contains subpages, you can verify it (review) in batches containing 5 pages.
favicon.ico: lolbas-project.github.io/lolbas/Libraries/Mshtml - Mshtml | LOLBAS.

site address: lolbas-project.github.io/lolbas/Libraries/Mshtml/ redirected to: lolbas-project.github.io/lolbas/Libraries/Mshtml

site title: Mshtml LOLBAS

Our opinion (on Sunday 23 August 2026 11:01:35 UTC):

GREEN status (no comments) - no comments

Meta tags:
description=Mshtml.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.;

Headings (most frequently used words):

mshtml, dll, star, execute, paths, resources, acknowledgements, detections,

Text of the page (most frequently used words):
windows (5), mshtml (5), hta (4), dll (4), execute (3), html (3), https (3), application (2), exe (2), sigma (2), com (2), pabraeken (2), tags, t1218, 011, att, technique, operating, systems, user, privileges, required, launch, use, case, rundll32, printhtml, path_absolute, invoke, via, mshta, note, pops, security, warning, and, print, dialogue, box, github, sigmahq, blob, 62d4fd26b05f4d81973e7c8e80d7c1a0c6a29d0e, rules, process_creation, proc_creation_win_rundll32_susp_activity, yml, detections, pierre, alexandre, braeken, acknowledgements, windows10dll, nirsoft, net, mshtml_dll, twitter, status, 998567549670477824, resources, syswow64, system32, paths, microsoft, viewer, star, lolbas,


Text of the page (random words):
mshtml lolbas mshtml dll star execute hta microsoft html viewer paths c windows system32 mshtml dll c windows syswow64 mshtml dll resources https twitter com pabraeken status 998567549670477824 https windows10dll nirsoft net mshtml_dll html acknowledgements pierre alexandre braeken pabraeken detections sigma https github com sigmahq sigma blob 62d4fd26b05f4d81973e7c8e80d7c1a0c6a29d0e rules windows process_creation proc_creation_win_rundll32_susp_activity yml execute invoke an html application via mshta exe note pops a security warning and a print dialogue box rundll32 exe mshtml dll printhtml path_absolute hta use case launch an hta application privileges required user operating systems windows 10 windows 11 att ck technique t1218 011 tags execute hta
Thumbnail images (randomly selected): * Images may be subject to copyright.GREEN status (no comments)

    No Images


    The site also has 3 references to external domain(s).

     github.com  Verify  twitter.com  Verify  windows10dll.nirsoft.net  Verify


    Top 50 hastags from of all verified websites.

    Supplementary Information (add-on for SEO geeks)*- See more on header.verify-www.com

    Header

    HTTP/1.1 301 Moved Permanently
    Connection close
    Content-Length 162
    Server GitHub.com
    Content-Type text/html
    Location htt????/lolbas-project.github.io/lolbas/Libraries/Mshtml/
    X-GitHub-Request-Id 0968:3D5657:79C2F9:7F8794:6A8AD30F
    x-github-edge-region uksouth
    Accept-Ranges bytes
    Age 0
    Date Sun, 23 Aug 2026 11:01:35 GMT
    Via 1.1 varnish
    X-Served-By cache-lcy-egml8630025-LCY
    X-Cache MISS
    X-Cache-Hits 0
    X-Timer S1787482895.400344,VS0,VE81
    Vary Accept-Encoding
    X-Fastly-Request-ID 70ebbbd2d120cfab955ae040fdadfcb662b98869
    HTTP/2 200
    server GitHub.com
    content-type text/html; charset=utf-8
    last-modified Fri, 21 Aug 2026 20:35:53 GMT
    access-control-allow-origin *
    strict-transport-security max-age=31556952
    etag W/ 6a88b6a9-1843
    expires Sun, 23 Aug 2026 11:11:35 GMT
    cache-control max-age=600
    content-encoding gzip
    x-proxy-cache MISS
    x-github-request-id 86D2:13DD89:42516BD:42E0B8B:6A8AD30E
    x-github-edge-region fra
    accept-ranges bytes
    age 0
    date Sun, 23 Aug 2026 11:01:35 GMT
    via 1.1 varnish
    x-served-by cache-rtm-ehrd2290042-RTM
    x-cache MISS
    x-cache-hits 0
    x-timer S1787482896.507539,VS0,VE107
    vary Accept-Encoding
    x-fastly-request-id 80b26746fea1758262de52314ad40beb7efa4bf2
    content-length 2558

    Meta Tags

    title="Mshtml | LOLBAS"
    charset="utf-8"
    name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes"
    name="title" content="Mshtml on LOLBAS"
    name="description" content="Mshtml.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases."
    property="og:title" name="og:title" content="Mshtml on LOLBAS"
    property="og:site_name" name="og:site_name" content="LOLBAS"
    property="og:type" name="og:type" content="object"
    property="og:url" name="og:url" content="htt????/lolbas-project.github.io/lolbas/Libraries/Mshtml/"
    property="og:image" name="og:image" content="htt????/lolbas-project.github.io/assets/logo.png"
    property="og:description" name="og:description" content="Mshtml.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases."

    Load Info

    page size2558
    load time (s)0.266838
    redirect count1
    speed download9616
    server IP 185.199.108.153
    * all occurrences of the string "http://" have been changed to "htt???/"