Is pcalua.exe related to облачное хранилище OneDrive?

Execute commands and binaries from the context of The program compatibility assistant (Pcalua.exe). This is used as a LOLBIN for example to bypass application ... Jan 13, 2025 ... Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers used scheduled tasks to execute pcalua.exe to run malicious ... Mar 16, 2023 ... Description. The scenario executes the following command: powershell.exe forfiles /p c:\windows\system32 /m notepad.exe /c $pwd ... Pcalua.exe is a living-of-the-land file containing unexpected functionality that can be abused by attackers; this page lists all its use cases. ... pcalua.exe, which can bypass application whitelisting to call another process. ... exe using the command “pcalua.exe -a wsreset.exe”. The Lolbin wsreset.exe ... Mar 15, 2018 ... Pcalua.exe. 10.0.10240.17738. 27,648. 01-Jan-2018. 23:20. x64. Pcasvc.dll. 10.0.10240.17770. 488,792. 10-Feb-2018. 07:19. x64. Aitstatic.exe. Aug 12, 2024 ... Use of Pcalua For Execution ... Share on: Detects execition of commands and binaries from the context of The program compatibility assistant ( ... The group employs unique tactics, including the use of pcalua.exe for indirect command execution, scheduled tasks mimicking legitimate Windows processes, and ... Mar 14, 2024 ... RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage ... The Russian-speaking cybercrime group called RedCurl is leveraging a ... Aug 8, 2024 ... Description: Analysis of host data on %{Compromised Host} detected the use of pcalua.exe to launch executable code. Pcalua.exe is component of ...