.. /CustomShellHost.exe
Star

Execute

A host process that is used by custom shells when using Windows in Kiosk mode.

Paths:

Resources:

Acknowledgements:

Detections:

Execute

  1. Executes explorer.exe (with command-line argument /NoShellRegistrationCheck) if present in the current working folder.

    CustomShellHost.exe
    Use case
    Can be used to evade defensive counter-measures
    Privileges required
    User
    Operating systems
    Windows 10, Windows 11
    ATT&CK® technique
    T1218