Does pcalua.exe write to the Windows event logs?

Jan 23, 2021 ... Indirect command execution with pcalua.exehttps://t.co/UWVoSOUUxU pic.twitter.com/NNycLbRuPu. — Check Point Research (@_CPResearch_) ... Dec 18, 2012 ... Yes Task {7E2EA28F-1A7F-498D-B0A7-D33F02B8C378} Microsoft Corporation C:\\Windows\\system32 pcalua.exe -a C:\\Users\\XP\\Desktop ... Pcalua.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases. Jan 13, 2025 ... Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers used scheduled tasks to execute pcalua.exe to run malicious ... Aug 17, 2022 ... The process “pcalua.exe” is related to Program Compatibility Assistant. According to Microsoft: The Program Compatibility Assistant detects known compatibility ... %SYSTEM32%\pcalua.exe · %SYSTEM32%\relpost.exe · %SYSTEM32%\rstrui.exe. UAC logo ... DLL Hijacking enables the execution of malicious code through a signed and/or ... ... exe,10.0.19041.1023,31-Jul-2021,16:13,"356,864" ClipUp.exe,10.0.19041.789,31 ... pcalua.exe,10.0.19041.906,31-Jul-2021,16:10,"43,520" pcaevts.dll,10.0 ... Nov 18, 2024 ... pcalua command line switches are not officially documented but here they are: -a - path the executable to be started. Or a dll to be loaded. Mar 26, 2025 ... C:\Windows\system32\pcalua.exe: Our first LOTL component is pcalua.exe, the Program Compatibility Assistant (PCA) utility. It's designed to ... Nov 2, 2017 ... `cb` process=pcalua.exe | stats values(command_line) by computer_name. This query shows us all the command line data by computer from pcalua.exe ...