This blog post explains how it is possible to execute arbitrary code and maintain access to a Microsoft Windows system by leveraging the Common Language Runtime application domain manager.
Article Link: https://www.contextis.com/en/blog/common-language-runtime-hook-for-persistence