~/Privilege Escalation/Windows/Binaries# cat Mshtml.dll.md

Microsoft HTML Viewer

Paths:

c:\windows\system32\mshtml.dll
c:\windows\syswow64\mshtml.dll

Detection:

Execute

Invoke an HTML Application via mshta.exe (Note - Pops a security warning and a print dialogue box).

rundll32.exe Mshtml.dll,PrintHTML "C:\temp\calc.hta"