~/Privilege Escalation/Windows/Binaries# cat Presentationhost.exe.md

File is used for executing Browser applications

Paths:

C:\Windows\System32\Presentationhost.exe
C:\Windows\SysWOW64\Presentationhost.exe

Detection:

Execute

Executes the target XAML Browser Application (XBAP) file

Presentationhost.exe C:\temp\Evil.xbap