Ieframe on LOLBAS
Archived: 2026-04-05 15:26:49 UTC
Launch an executable payload via proxy through a(n) URL (information) file by calling OpenURL.
Use case
Load an executable payload by calling a .url file with or without quotes. The .url file extension can be
renamed.
Privileges required
User
Operating systems
Windows 10, Windows 11
ATT&CK® technique
T1218.011: Rundll32
Tags
Execute: URL
Source: https://lolbas-project.github.io/lolbas/Libraries/Ieframe/
https://lolbas-project.github.io/lolbas/Libraries/Ieframe/
Page 1 of 1