03 : /Privilege-escalation Windows#

~/ cat Ieaframe.dll.md

Internet Browser DLL for translating HTML code.

Paths:

c:\windows\system32\ieframe.dll
c:\windows\syswow64\ieframe.dll

Detection:

Execute

Launch an executable payload via proxy through a(n) URL (information) file by calling OpenURL.

rundll32.exe ieframe.dll,OpenURL "C:\test\calc.url"