Pcwrun.exe

Program Compatibility Wizard

Execute

Proxy execution of binary

Pcwrun.exe {PATH_ABSOLUTE:.exe}

Open the target .EXE file with the Program Compatibility Wizard. — MITRE: T1218 — Privileges: User

Proxy execution of binary

Pcwrun.exe /../../$(calc).exe

Leverage the MSDT follina vulnerability through Pcwrun to execute arbitrary commands and binaries. Note that this specific technique will not work on a patched system with the June 2022 Windows Security update. — MITRE: T1202 — Privileges: User