UAC Bypass via DLL hijacking of Microsoft Support Diagnostic Tool (MSDT). The UAC bypass method described here is based on DLL hijacking which happens when loading the Bluetooth diagnostic package.
Article Link: https://blog.sevagas.com:80/?MSDT-DLL-Hijack-UAC-bypass