iediagcmd.exe

Diagnostics Utility for Internet Explorer

Execute

Spawn a pre-planted executable from iediagcmd.exe.

set windir=c:\test& cd "C:\Program Files\Internet Explorer\" & iediagcmd.exe /out:{PATH_ABSOLUTE:.cab}

Executes binary that is pre-planted at C:\test\system32\netsh.exe. — MITRE: T1218 — Privileges: User