Mshta Remote 7z Execution
Detects the execution of mshta.exe with a remote .7z file as an argument. This behavior is often indicative of malicious activity where mshta is abused to execute script content disguised as an archive file from a remote source.
YARA-L
