Execute the specified (local or remote) .wsh/.sct script with scrobj.dll in the .inf file by calling an information file directive (section name specified).
Usecase: Run local or remote script(let) code through INF file specification.
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218.011
Execute the specified (local or remote) .wsh/.sct script with scrobj.dll in the .inf file by calling an information file directive (DefaultInstall section implied).
Usecase: Run local or remote script(let) code through INF file specification.
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218.011
Execute
Launch a DLL payload by calling the RegisterOCX function.
rundll32.exe ieadvpack.dll,RegisterOCX test.dll
Usecase: Load a DLL payload.
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218.011
Launch an executable by calling the RegisterOCX function.
rundll32.exe ieadvpack.dll,RegisterOCX calc.exe
Usecase: Run an executable payload.
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218.011
Launch command line by calling the RegisterOCX function.