Program Compatibility Wizard
Pcwrun.exe c:\temp\beacon.exe
Open the target .EXE file with the Program Compatibility Wizard.
Proxy execution of binary
C:\Windows\System32\pcwrun.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/6199a703221a98ae6ad343c79c558da375203e4e/rules/windows/process_creation/proc_creation_win_lolbin_pcwrun_follina.yml
Pierre-Alexandre Braeken (@pabraeken), Nasreddine Bencherchali (@nas_bench)