Bypasses UAC by abusing the App Path key for control.exe (only tested on Windows 10)
Link
https://github.com/enigma0x3/Misc-PowerShell-Stuff/blob/master/Invoke-AppPathBypass.ps1