The mentioned technique leads to an arbitrary code execution as trusted system user. The Windows Explorer process executes the malicious actions instead of the

The mentioned technique leads to an arbitrary code execution as trusted system user. The Windows Explorer process executes the malicious actions instead of the malware process. By default actions of this trusted system process will NOT be blocked or classified as malware.