~/Privilege Escalation/Windows/Binaries# cat Pcwutl.dll.md

Microsoft HTML Viewer

Paths:

c:\windows\system32\pcwutl.dll
c:\windows\syswow64\pcwutl.dll

Detection:

Execute

Launch executable by calling the LaunchApplication function.

rundll32.exe pcwutl.dll,LaunchApplication calc.exe