Cobalt Strike Beacon's built-in execute-assembly command runs a locally available .NET executable as a Beacon post-exploitation job and passes optional arguments to it. The job loads the CLR and assembly in a temporary process and inherits Beacon's current thread token; the command does not itself elevate privileges.
RESTRICTED_ACCESS_BLUR_MARKER