Conhost.exe

Console Window host

Execute

Use conhost.exe as a proxy binary to evade defensive counter-measures

conhost.exe {CMD}

Execute a command line with conhost.exe as parent process — MITRE: T1202 — Privileges: User

Specify --headless parameter to hide child process window (if applicable)

conhost.exe --headless {CMD}

Execute a command line with conhost.exe as parent process — MITRE: T1202 — Privileges: User