Use Rundll32.exe to execute a JavaScript script that calls a remote JavaScript script. rundll32.exe javascript:-..-mshtml,RunHTMLApplication ;document ...
RunHTMLApplication is an undocumented method used by mshta.exe for opening hta files. The link in the answer does a much better job of explaining this.
Rundll32.exe is a Microsoft-signed binary used to load dynamic link libraries (DLLs) in Windows. It is native to Windows and present in both 32 and 64 bit ...