~/Privilege Escalation/Windows/Binaries# cat Pcwutl.dll.md █
Microsoft HTML Viewer
Paths:
c:\windows\system32\pcwutl.dll
c:\windows\syswow64\pcwutl.dll
Detection:
Execute
Launch executable by calling the LaunchApplication function.
rundll32.exe pcwutl.dll,LaunchApplication calc.exe