Mshta.exe Executing Script or URL

nomit vyas@xoxo

•updated Apr 30, 2026•4•0•57

Detects the execution of mshta.exe with command-line arguments indicating it is loading a script (VBScript, JavaScript) or a URL. This behavior is commonly abused by adversaries for code execution and bypassing application controls.