bypassuac

This entry documents UACME's FodHelper User Account Control bypass, method 33: it writes a per-user ms-settings command handler and launches the auto-elevating fodhelper.exe to run a supplied executable at high integrity without a consent prompt under the documented default UAC settings. UACME lists the method from Windows 10 TH1 (build 10240); the original researcher tested the procedure on Windows 10 build 15063. It requires a local Administrators-group account using a split token and is not a privilege-escalation path for a standard user.