UAC Bypass: 3 Methods Used Malware In Windows 11 in 2024

This report describes three common UAC bypass methods used by malware — abusing elevated COM objects (e.g., cmstplua.dll), modifying ms-settings registry keys to hijack elevated launchers (fodhelper technique), and using infinite UAC prompt loops — and illustrates each with ANY.RUN sandbox analyses of real samples (Formbook, BlankGrabber, Dcrat).