Shdocvw.dll

Shell Doc Object and Control Library.

Execute

Load an executable payload by calling a .url file with or without quotes. The .url file extension can be renamed.

rundll32.exe shdocvw.dll,OpenURL {PATH_ABSOLUTE:.url}

Launch an executable payload via proxy through a URL (information) file by calling OpenURL. — MITRE: T1218.011 — Privileges: User