Explorer.exe

Binary used for managing files and system components within Windows

Execute

Performs execution of specified file with explorer parent process breaking the process tree, can be used for defense evasion.

explorer.exe /root,"{PATH_ABSOLUTE:.exe}"

Execute specified .exe with the parent process spawning from a new instance of explorer.exe — MITRE: T1202 — Privileges: User

Performs execution of specified file with explorer parent process breaking the process tree, can be used for defense evasion.

explorer.exe {PATH_ABSOLUTE:.exe}

Execute notepad.exe with the parent process spawning from a new instance of explorer.exe — MITRE: T1202 — Privileges: User