---
Name: Pcwutl.dll
Description: Execute
Author: ''
Created: '2018-05-25'
Categories: []
Commands:
  - Command: rundll32.exe pcwutl.dll,LaunchApplication calc.exe
    Description: Launch executable by calling the LaunchApplication function.
Full Path:
  - c:\windows\system32\Pcwutl.dll
  - c:\windows\sysWOW64\Pcwutl.dll
Code Sample: []
Detection: []
Resources:
  - https://twitter.com/harr0ey/status/989617817849876488
Notes: Thanks to Matt harr0ey - @harr0ey