Is pcalua.exe related to remote desktop connection (mstsc.exe)?

It utilizes pcalua.exe (PCA) to execute an executable file, potentially launching the next malware stage called RedCurl.Downloader. RedCurl.Downloader, upon. Apr 18, 2018 ... For example, Forfiles, the Program Compatibility Assistant ( pcalua.exe ), components of the Windows Subsystem for Linux (WSL), Scriptrunner.exe ... Pcalua.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases. This file is a part of the Microsoft Windows system. EXE is short for executable and these types of files are used on Windows computers to install or run ... ... exe,10.0.19041.1023,31-Jul-2021,16:13,"356,864" ClipUp.exe,10.0.19041.789,31 ... pcalua.exe,10.0.19041.906,31-Jul-2021,16:10,"43,520" pcaevts.dll,10.0 ... Various Windows utilities may be used to execute commands, possibly without invoking cmd. For example, Forfiles, the Program Compatibility Assistant (pcalua.exe) ... Sep 18, 2018 ... Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3 ... Connect · age · v1.0.3 · v1.0.2 · v1.0.1 · aggregate · v2.10.0 · v2.9.2 · v2.9.1 · v2.9.0 · v2.8.0 · v2.7.2 · v2.7.1 · v2.7.0 · v2.6.4 · v2. · alter · v3.0.3 ... Attack Commands: Run with command_prompt ! pcalua.exe -a #{process} pcalua.exe -a #{payload_path}. Atomic Test #2 - Indirect Command Execution - forfiles.exe. Mar 16, 2023 ... Description. The scenario executes the following command: powershell.exe forfiles /p c:\windows\system32 /m notepad.exe /c $pwd ...