UAC bypass 1 Reversing ICMLuaUtil: ShellExec and the Lesser-known CallCustomActionDll for Elevated Execution Mar 26, 2026