[Computerjul]

Hey,

i have to use IM5 to maintain one machine because i need the function "elevate client permission" for this computer.. btw missing this function in #.. and i tried to elevate client permissions on the client but he reconnects as user. Not as admin. Thats weird. Is this function broken ? Even UAC is disabled so i dont have to accept UAC prompt. Thanks in advance

Update:

I tried it on my own machine. It works with and without uac enabled. But on clients machine it doesnt work. He is also admin so it should work. Weird.....
i also had to create a new user account yesterday on clients machine because taskbar and settings were corrupted on old user account. I guess there is something wrong with Win 10 Pro. My own machine has Win10 Home which is much better.

Best regards
---

[inyourmemory]

Uac bypasses are not foolproof, probably the reason it works for you but not on some of your clients.

[Armada]

Hey,

i have to use IM5 to maintain one machine because i need the function "elevate client permission" for this computer.. btw missing this function in #.. and i tried to elevate client permissions on the client but he reconnects as user. Not as admin. Thats weird. Is this function broken ? Even UAC is disabled so i dont have to accept UAC prompt. Thanks in advance

Update:

I tried it on my own machine. It works with and without uac enabled. But on clients machine it doesnt work. He is also admin so it should work. Weird.....
i also had to create a new user account yesterday on clients machine because taskbar and settings were corrupted on old user account. I guess there is something wrong with Win 10 Pro. My own machine has Win10 Home which is much better.

Best regards
---

Client has to approve the escalation, which is likely messing you up.

[QU⚡CKSILVER]

I don't know how an elevated IM client looks like in IM's client pane since I do not own the software, but one thing to note is that, when you task something to run as ''admin'', it will not impersonate the system's Administrator account and tell you it's running as ''Administrator'' because the process will not be owned by ''Administrator'', the process will still on the client's account context, but with the privileges of the actual Administrator account.
To verify if your process is elevated, try tasking the computer with stuff that would require elevation to be done.

[05317832892]

Not familiar with IM5. Just gonna preface this by saying check if the RAT is running under the context of a user with local administrative privileges, no exploit or feature will work if the user is not admin.

If it’s a bypass then it’s unstable and incompatible with that target version of windows.

If it’s a request then it is being denied by the user at the machine.

[Purple Kief]

My guess would be wrong use of a crypter. Giving that my 90%.

[Computerjul]

Thanks for the answers guys. I dont use any crypter software. Is isnt really a bypass .. i can use the function "elevate admin permission" in IM5 and the client need to accept the popup UAC prompt. And if UAC is disabled it should work without an uac prompt but it doesnt work at all on HIS machine. And this new user account is Administrator. But i think something messed up the previledges or sth

I guess it is a local problem with clients machine and a problem with the previledges and group policy in Win 10 Pro because we had a problem with his default user account and "settings" didnt work and the taskbar were corrupted so we created a new user but there a few more bugs. Maybe i will reinstall the machine with Win 10 Home. Thats weird because we reinstalled Windows for him few days ago.

Best regards
---