A report from Microsoft in June details an attack from BlackCat ransomware, who also used PsExec to distribute their ransomware payload. Another example is from the recently disclosed Cisco breach ...

ensure that the remote computer has the Remote Registry service enabled and WMI allowed through the Windows firewall. One of the most used utilities within the Sysinternals toolkit, psexec.exe ...

PsExec is a Sysinternals utility designed to allow administrators to perform various activities on remote computers, such as launching executables and displaying the output on the local computer ...