.. /CustomShellHost.exe
Star

A host process that is used by custom shells when using Windows in Kiosk mode.


Paths:

Resources:
Acknowledgements:

Detection:

Execute

Executes explorer.exe (with command-line argument /NoShellRegistrationCheck) if present in the current working folder.
CustomShellHost.exe
Usecase: Can be used to evade defensive counter-measures
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218