What are the security implications of allowing non-administrative users to trigger pcalua.exe?

Nov 7, 2024 ... this is interesting, adversaries are currently utilising the Program Compatibility Assistant Service (pcalua.exe) in Windows to enable ... Nov 16, 2024 ... It is not "officially" documented but looks like pcalua.exe is the command line interface for the program compatibility assistant on Windows. Mar 26, 2025 ... C:\Windows\system32\pcalua.exe: Our first LOTL component is pcalua.exe, the Program Compatibility Assistant (PCA) utility. It's designed to ... Nov 14, 2017 ... ... Program Files (x86)\TeamViewer\TeamViewer_Service.exe (ASUSTek Computer Inc.) ... pcalua.exe -a "C:\Users\Ryan Evan Ramos\Downloads\mm2ve2 ... ... exe","IEExec.exe","InstallUtil.exe","javaw.exe",. "Microsoft.Workflow.Compiler.exe","msdt.exe","MSHTA.EXE","msiexec.exe","Msxsl.exe",. "odbcconf.exe","pcalua. Feb 19, 2025 ... This detection leverages data from Endpoint Detection and Response (EDR) agents, focusing on process and parent process information. While ... Dec 18, 2012 ... Yes Task {7E2EA28F-1A7F-498D-B0A7-D33F02B8C378} Microsoft Corporation C:\\Windows\\system32 pcalua.exe -a C:\\Users\\XP\\Desktop ... Aug 8, 2024 ... Description: Analysis of host data on %{Compromised Host} detected the use of pcalua.exe to launch executable code. Pcalua.exe is component of ... Mar 17, 2022 ... Malicious EXE creation · Method 1 – forfiles.exe · Method 2 – pcalua.exe · Method 3 – procdump.exe (DLL method) · Method 4 – ... Jan 13, 2025 ... Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers used scheduled tasks to execute pcalua.exe to run malicious ...