.. /CustomShellHost.exe
A host process that is used by custom shells when using Windows in Kiosk mode.
Paths:
- C:\Windows\System32\CustomShellHost.exe
Resources:
Execute
Executes explorer.exe (with command-line argument /NoShellRegistrationCheck) if present in the current working folder.
CustomShellHost.exe
Usecase: Can be used to evade defensive counter-measures
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1218