Forced authentication via SMB LNK

A Windows Shell Link (.lnk) that references an untrusted remote resource (for example, an icon resource) can cause Windows to attempt SMB authentication when the Shell accesses or renders the link. If outbound authentication is permitted, the remote endpoint may receive NTLM challenge-response material for the signed-in user; this is not the user's plaintext password or the server's stored NT hash.