Enforce policies that restrict execution to known, digitally signed binaries.
Writing the benign File A to a temporary directory and executing it so the user sees what they expected to see.