Runscripthelper.exe

Execute target PowerShell script

Execute

Bypass constrained language mode and execute Powershell script

runscripthelper.exe surfacecheck \\?\{PATH_ABSOLUTE:.txt} {PATH_ABSOLUTE:folder}

Execute the PowerShell script with .txt extension — MITRE: T1218 — Privileges: User