All Detections

Code Execution via Pcwutl.dll

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Detects launch of executable by calling the LaunchApplication function from pcwutl.dll library.

Sigma