On Windows, mshta.exe runs Microsoft HTML Applications (HTAs) and can execute inline VBScript or JScript, including content addressed by URL. HTAs use Internet Explorer's rendering and scripting technologies but run outside the browser's security context. Behavior depends on the supplied content; launching mshta.exe alone does not show that an application-control bypass occurred or that the content completed.
Variant:
Execute Assembly Installer
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER