.. / Pcwrun.exe
Star

Program Compatibility Wizard


Paths:


Resources:
https://twitter.com/pabraeken/status/991335019833708544

Acknowledgement:
Pierre-Alexandre Braeken - @pabraeken


Detection:



Execute

Open the target .EXE file with the Program Compatibility Wizard.
Pcwrun.exe c:\temp\beacon.exe
Usecase:Proxy execution of binary
Privileges required:User
OS:Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10
Mitre:T1218