Does pcalua.exe interact with OneDrive?

May 20, 2022 ... Hence, the query is built to hunt for renamed process execution eg; cmd.exe renamed to xyz.exe and then executed. ... Pcalua.exe","Pcwrun.exe"," ... Aug 12, 2024 ... Use of Pcalua For Execution ... Share on: Detects execition of commands and binaries from the context of The program compatibility assistant ( ... Pcalua.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases. Mar 3, 2025 ... Scheduled Tasks. Scheduled Task 1. Task Name: SystemSoundsService 0342315bc04edd2. Executable: C:\Windows\system32\pcalua.exe. Arguments ... Apr 18, 2018 ... For example, Forfiles, the Program Compatibility Assistant ( pcalua.exe ), components of the Windows Subsystem for Linux (WSL), Scriptrunner.exe ... ... pcalua\.exe.*|.*odbcconf\.exe.*|.*msiexec\.exe.*|.*mshta\.exe.*|.*msdt\.exe ... Where Clause: "Process Name" IMATCHES '.*atbroker\.exe.*|.*bash\.exe ... Mar 15, 2024 ... «Помощник по совместимости программ (pcalua.exe) является легитимной службой Windows, предназначенной для выявления и решения проблем в работе ... The group employs unique tactics, including the use of pcalua.exe for indirect command execution, scheduled tasks mimicking legitimate Windows processes, and ... Jul 6, 2020 ... The purpose of the article is to gather various binaries that could indirectly execute a command as these has been discovered by various researchers over ... Attack Commands: Run with command_prompt ! pcalua.exe -a #{process} pcalua.exe -a #{payload_path}. Atomic Test #2 - Indirect Command Execution - forfiles.exe.