Does pcalua.exe handle or store passwords?

... exe,10.0.19041.1023,31-Jul-2021,16:13,"356,864" ClipUp.exe,10.0.19041.789,31 ... pcalua.exe,10.0.19041.906,31-Jul-2021,16:10,"43,520" pcaevts.dll,10.0 ... Attack Commands: Run with command_prompt ! pcalua.exe -a #{process} pcalua.exe -a #{payload_path}. Atomic Test #2 - Indirect Command Execution - forfiles.exe. Sep 20, 2014 ... ... exe start wuauserv \Microsoft\Windows\WindowsUpdate Yes Task ScheduledDefrag Microsoft Corp. ... pcalua.exe -a E:\AR_KeyRun.exe -d E:\ \. mta 20 ... Mar 15, 2018 ... Pcalua.exe. 10.0.10240.17738. 27,648. 01-Jan-2018. 23:20. x64. Pcasvc.dll. 10.0.10240.17770. 488,792. 10-Feb-2018. 07:19. x64. Aitstatic.exe. Various Windows utilities may be used to execute commands, possibly without invoking cmd. For example, Forfiles, the Program Compatibility Assistant ( pcalua. This file is a part of the Microsoft Windows system. EXE is short for executable and these types of files are used on Windows computers to install or run ... Jan 23, 2021 ... Indirect command execution with pcalua.exehttps://t.co/UWVoSOUUxU pic.twitter.com/NNycLbRuPu. — Check Point Research (@_CPResearch_) ... ... pcalua\.exe.*|.*odbcconf\.exe.*|.*msiexec\.exe.*|.*mshta\.exe.*|.*msdt\.exe ... Where Clause: "Process Name" IMATCHES '.*atbroker\.exe.*|.*bash\.exe ... ▫pcalua.exe -a calc.exe. ▫Process monitoring. ▫pcalua.exe. ▫Process command-line parameters. ▫-a. ▫Windows event logs. ▫4688 (Process creation). © 2019 The ... Execute commands and binaries from the context of The program compatibility assistant (Pcalua.exe). This is used as a LOLBIN for example to bypass application ...