EIP-2026-117538

This Metasploit module exploits a UAC bypass vulnerability in Windows 8-10 by hijacking the registry key for .exe file handling, allowing arbitrary command execution with elevated privileges via slui.exe. It modifies the registry to execute a PowerShell payload when slui.exe is launched, then reverts changes post-exploitation.