UAC Bypass via Auto-Elevating Windows Binaries

A Windows UAC bypass family in which an auto-elevating binary consults a per-user class registration and may launch a high-integrity process without the expected consent prompt. The specific behavior depends on the selected binary, registry handler, Windows build, and UAC policy. The documented registry-hijack pattern applies to an existing local-administrator account running with a split/medium-integrity token; it does not grant administrator membership to a standard user. A remote WinRM command executed with administrator credentials is a separate remote-execution path and does not by itself demonstrate local UAC bypass. Validate the target build, account context, and resulting token before treating a variant as applicable.