If you are not sure if the website you would like to visit is secure, you can verify it here. Enter the website address of the page and see parts of its content and the thumbnail images on this site. None (if any) dangerous scripts on the referenced page will be executed. Additionally, if the selected site contains subpages, you can verify it (review) in batches containing 5 pages.
favicon.ico: lolbas-project.github.io/lolbas/Libraries/PhotoViewer - Photoviewer | LOLBAS.

site address: lolbas-project.github.io/lolbas/Libraries/PhotoViewer/ redirected to: lolbas-project.github.io/lolbas/Libraries/PhotoViewer

site title: Photoviewer LOLBAS

Our opinion (on Friday 21 August 2026 11:50:07 UTC):

GREEN status (no comments) - no comments

Meta tags:
description=PhotoViewer.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases.;

Headings (most frequently used words):

photoviewer, dll, star, download, paths, acknowledgements, detections,

Text of the page (most frequently used words):
windows (7), download (5), photo (5), viewer (5), photoviewer (5), dll (5), the (4), inetcache (3), rundll32 (3), exe (3), program (3), files (3), user (2), file (2), remote (2), imageview_fullscreen (2), url (2), tags, t1105, att, technique, operating, systems, privileges, required, from, location, use, case, remoteurl, once, executed, will, specified, folder, using, ioc, execution, with, and, containing, argument, detections, tommy, warren, avihay, eldad, avihayeldad, acknowledgements, x86, paths, star, lolbas,


Text of the page (random words):
photoviewer lolbas photoviewer dll star download inetcache windows photo viewer paths c program files windows photo viewer photoviewer dll c program files x86 windows photo viewer photoviewer dll acknowledgements avihay eldad avihayeldad tommy warren detections ioc execution of rundll32 exe with imageview_fullscreen and a remote url containing as an argument download once executed rundll32 exe will download the file at the specified url to the user s inetcache folder using the windows photo viewer dll rundll32 exe c program files windows photo viewer photoviewer dll imageview_fullscreen remoteurl use case download file from remote location privileges required user operating systems windows 10 windows 11 att ck technique t1105 tags download inetcache
Thumbnail images (randomly selected): * Images may be subject to copyright.GREEN status (no comments)

    No Images


    The site also has 2 references to external domain(s).

     github.com  Verify  twitter.com  Verify


    Top 50 hastags from of all verified websites.

    Supplementary Information (add-on for SEO geeks)*- See more on header.verify-www.com

    Header

    HTTP/1.1 301 Moved Permanently
    Connection close
    Content-Length 162
    Server GitHub.com
    Content-Type text/html
    Location htt????/lolbas-project.github.io/lolbas/Libraries/PhotoViewer/
    X-GitHub-Request-Id 6C20:50226:F0FA2B:F301D0:6A883B6C
    x-github-edge-region fra
    Accept-Ranges bytes
    Age 0
    Date Fri, 21 Aug 2026 11:50:07 GMT
    Via 1.1 varnish
    X-Served-By cache-rtm-ehrd2290047-RTM
    X-Cache MISS
    X-Cache-Hits 0
    X-Timer S1787313007.379884,VS0,VE99
    Vary Accept-Encoding
    X-Fastly-Request-ID e3bc12f7bd5f5ddb4948496ab22d5074fca8e0b4
    HTTP/2 200
    server GitHub.com
    content-type text/html; charset=utf-8
    last-modified Fri, 31 Jul 2026 20:01:07 GMT
    access-control-allow-origin *
    strict-transport-security max-age=31556952
    etag W/ 6a6cff03-182b
    expires Fri, 21 Aug 2026 12:00:07 GMT
    cache-control max-age=600
    content-encoding gzip
    x-proxy-cache MISS
    x-github-request-id 92F2:43FB8:EDD2C0:EFD9B3:6A883B6E
    x-github-edge-region fra
    accept-ranges bytes
    age 0
    date Fri, 21 Aug 2026 11:50:07 GMT
    via 1.1 varnish
    x-served-by cache-rtm-ehrd2290038-RTM
    x-cache MISS
    x-cache-hits 0
    x-timer S1787313008.504687,VS0,VE116
    vary Accept-Encoding
    x-fastly-request-id 0cf179f083222b0d3db2d3bc2846c5ba3a26b91b
    content-length 2615

    Meta Tags

    title="Photoviewer | LOLBAS"
    charset="utf-8"
    name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes"
    name="title" content="Photoviewer on LOLBAS"
    name="description" content="PhotoViewer.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases."
    property="og:title" name="og:title" content="Photoviewer on LOLBAS"
    property="og:site_name" name="og:site_name" content="LOLBAS"
    property="og:type" name="og:type" content="object"
    property="og:url" name="og:url" content="htt????/lolbas-project.github.io/lolbas/Libraries/PhotoViewer/"
    property="og:image" name="og:image" content="htt????/lolbas-project.github.io/assets/logo.png"
    property="og:description" name="og:description" content="PhotoViewer.dll is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases."

    Load Info

    page size2615
    load time (s)0.257762
    redirect count1
    speed download10175
    server IP 185.199.110.153
    * all occurrences of the string "http://" have been changed to "htt???/"