Does pcalua.exe consume memory?

May 4, 2020 ... Implementations. LolBAS Rare Commands (Pseudocode, CAR native). Pseudocode version of the below Splunk query. processes = search Process: ... Nov 2, 2017 ... `cb` process=pcalua.exe | stats values(command_line) by computer_name. This query shows us all the command line data by computer from pcalua.exe ... Various Windows utilities may be used to execute commands, possibly without invoking cmd. For example, Forfiles, the Program Compatibility Assistant (pcalua.exe) ... Mar 3, 2025 ... Scheduled Tasks. Scheduled Task 1. Task Name: SystemSoundsService 0342315bc04edd2. Executable: C:\Windows\system32\pcalua.exe. Arguments ... Mar 15, 2018 ... Pcalua.exe. 10.0.10240.17738. 27,648. 01-Jan-2018. 23:20. x64. Pcasvc.dll. 10.0.10240.17770. 488,792. 10-Feb-2018. 07:19. x64. Aitstatic.exe. Feb 13, 2025 ... Detected suspicious use of Pcalua.exe to launch executable code. Description: Analysis of host data on %{Compromised Host} detected the use of ... Jan 23, 2021 ... Indirect command execution with pcalua.exehttps://t.co/UWVoSOUUxU pic.twitter.com/NNycLbRuPu. — Check Point Research (@_CPResearch_) ... Feb 10, 2012 ... The file C:\Windows\System32\pcalua.exe is the Program Compatibility Assistant, a legit Windows executable. I believe it only needed to run once during the ... ▫pcalua.exe -a calc.exe. ▫Process monitoring. ▫pcalua.exe. ▫Process command-line parameters. ▫-a. ▫Windows event logs. ▫4688 (Process creation). © 2019 The ... InitiatingProcessFileName contains "Pcalua.exe" or. InitiatingProcessFileName ... | where InitiatingProcessCommandLine != @"rundll32.exe C:\WINDOWS\system32\ ...