AppDomainManager

Adversaries may execute their own malicious payloads by hijacking how the.NET `AppDomainManager` loads assemblies. The.NET framework uses the `AppDomainManager` class to create and manage one or more isolated runtime environments (called application domains) inside a process to host the execution of.NET applications. Assemblies (`.exe` or `.dll` binaries compiled to run as.NET code) may be…