Shell Doc Object and Control Library.
The LOLBAS can achieve abritrary code execution.
Launch an executable payload via proxy through a(n) URL (information) file by calling OpenURL.Usecase:Load an executable payload by calling a .url file with or without quotes. The .url file extension can be renamed.
rundll32.exe shdocvw.dll,OpenURL "C:\test\calc.url"