Pcalua.exe

Program Compatibility Assistant

Paths

  • C:\Windows\System32\pcalua.exe

Commands

Execute

Open the target .EXE using the Program Compatibility Assistant.

Use case: Proxy execution of binary

Privileges: User

pcalua.exe -a {PATH:.exe}

Execute

Open the target .DLL file with the Program Compatibilty Assistant.

Use case: Proxy execution of remote dll file

Privileges: User

pcalua.exe -a {PATH_SMB:.dll}

Execute

Open the target .CPL file with the Program Compatibility Assistant.

Use case: Execution of CPL files

Privileges: User

pcalua.exe -a {PATH_ABSOLUTE:.cpl} -c Java

Detection

Resources