Can антивирус software detect or flag pcalua.exe?

Sep 18, 2018 ... Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3 ... InitiatingProcessFileName contains "Pcalua.exe" or. InitiatingProcessFileName ... | where InitiatingProcessCommandLine != @"rundll32.exe C:\WINDOWS\system32\ ... Mar 14, 2024 ... APT groups abuse PCALUA.exe for stealthy execution of malicious code. They exploit its ability to run executables without triggering security ... Nov 7, 2024 ... this is interesting, adversaries are currently utilising the Program Compatibility Assistant Service (pcalua.exe) in Windows to enable ... Feb 13, 2025 ... Detected suspicious use of Pcalua.exe to launch executable code. Description: Analysis of host data on %{Compromised Host} detected the use of ... Feb 13, 2025 ... ... exe. The "action" for the task is as follows: Action: Start a Program; Details: C:\Windows\system32\pcalua.exe -a rundll32 -c shell32.dll ... Feb 8, 2022 ... shellObj is the Wscript.Shell object that the vbs file uses to execute the beacon command. shellObj.Run "forfiles /p c:\windows /m HelpPane.exe ... ... pcalua.exe","PowerShell.EXE","RegAsm.exe","RegSvcs.exe","REGSVR32.exe ... EXE” Process and Its Command Line Options. Understanding the “svchost.exe ... Various Windows utilities may be used to execute commands, possibly without invoking cmd. For example, Forfiles, the Program Compatibility Assistant ( pcalua. Jan 23, 2021 ... Indirect command execution with pcalua.exehttps://t.co/UWVoSOUUxU pic.twitter.com/NNycLbRuPu. — Check Point Research (@_CPResearch_) ...