Skip to content

Instantly share code, notes, and snippets.

@Elm0D
Created October 19, 2017 12:47
Show Gist options
  • Save Elm0D/de94d428ef8c45b7cd24409b5c343a33 to your computer and use it in GitHub Desktop.
Save Elm0D/de94d428ef8c45b7cd24409b5c343a33 to your computer and use it in GitHub Desktop.
List of COM object with enabled elevation. This does not mean they all useful for bypassing UAC or anything like this. Most of them are not. Some of them like Copy/Move/Rename/Delete/Link Object and Shell Security Editor already used by malware. All others need to be investigated, use OleView from Windows SDK for more info. Snapshots taken from …
List of COM object with enabled elevation. This does not mean they all useful for bypassing UAC or anything like this. Most of them are not. Some of them like Copy/Move/Rename/Delete/Link Object and Shell Security Editor already used by malware. All others need to be investigated, use OleView from Windows SDK for more info.
Snapshots taken from clean installs.
Windows 7 SP1 x64, 7601
WPD Association LUA Virtual Factory
{00393519-3A67-4507-A2B8-85146167ACA7}
Virtual Factory for Biometrics
{0142e4d1-fb7a-11dc-ba4a-000ffe7ab428}
CEIPLuaElevationHelper
{01D0A625-782D-4777-8D4E-547E6457FAD5}
{08d450b7-f7e5-4424-8229-11888adb7c14}
RasDlg LUA
{0C3B05FB-3498-40C3-9C03-4B22D735550C}
Wireless Setup Class
{0c98b8bc-273c-464d-938a-b9709607e137}
HNetCfg.FwOpenPort
{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}
ARP CBS Uninstaller Proxy
{0da7bfdf-c0a0-44eb-be82-b7a82c4721de}
WUAppElevator class
{1138506a-b949-46a7-b6c0-ee26499fdeaf}
VistaWUWebControl Class
{12a66224-5e8a-4679-8941-0b9b960bf5ea}
Virtual Factory for DiagCpl
{12C21EA7-2EB8-4B55-9249-AC243DA8C666}
SPPLUAObject Class
{179CC917-3A82-40E7-9F8C-2FC8A3D2212B}
Share Media Settings Writer
{19BA17F2-2602-4E77-9027-103894607626}
Create New Link
{1BA783C1-2A30-4ad3-B928-A9A46C604C28}
Lpksetup LUA Elevation
{1C749B87-568C-4865-8E73-6413F8372CE6}
Shell Indexer Admin Object
{1E1714A3-50B9-480b-A94A-636D9A9B56D1}
Parental Controls Override
{1E5300BE-0762-4527-8140-C0FF22DDFC56}
Security Shell Extension
{1f2e5c40-9550-11ce-99d2-00aa006e086c}
Microsoft Disk Quota UI Elevation Helper
{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}
Detection And Sharing
{1fda955b-61ff-11da-978c-0008744faab7}
Sensors Sensor Configuration Helper
{2331D136-E39D-4019-92D6-7CE5579962FB}
WUPublishedAppInstallorElevator Class
{26D32566-760A-40A2-AA82-A40366528916}
FaultrepElevatedDataCollection
{2C256447-3F0D-4CBB-9D12-575BB20CDA0A}
HNetCfg.FwRule
{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}
Advanced Indexing Options Dialog Object
{2F2165FF-2C2D-4612-87B2-CC8E5002EF4C}
HNetCfg.FwMgr
{304CE942-6E39-40D8-943A-B913C40C9CD4}
CtTuner Class
{32BA16FD-77D9-4AFB-9C9F-703E92AD4BFF}
Mcx2Install Class
{3630AB4B-C0D2-4C1B-B7E7-73A2CF9A4521}
Device Pairing Handler Class
{383b69fa-5486-49da-91f5-d63c24c8e9d0}
Copy/Move/Rename/Delete/Link Object
{3ad05575-8857-4850-9277-11b85bdb8e09}
CMLUAUTIL
{3E000D72-A845-4CD9-BD83-80C07C3B881F}
CMSTPLUA
{3E5FC7F9-9A51-4367-9063-A120244FBEC7}
AccesibilityCplAdmin Class
{434A6274-C539-4E99-88FC-44206D942775}
Manage Network Names
{44C39C96-0167-478F-B68D-783294A2545D}
Home Networking Configuration Manager
{46C166AA-3108-11D4-9348-00C04F8EEB71}
CIEContentAdvisorBroker
{46CB32FA-B5CA-8A3A-62CA-A7023C0496C5}
RasGcw LUA
{4A6B8BAD-9872-4525-A812-71A52367DC17}
ERCLuaElevationHelper
{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}
Shell Security Editor
{4D111E08-CBF7-4f12-A926-2C7920AF52FC}
AddMdmObj Class
{4DF929E7-4C5E-4587-A598-7ED7B3D6E462}
LayerUIPropPage
{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
Region and Language UAC Elevation
{514B5E31-5596-422F-BE58-D804464683B5}
FaxCommon Class
{59347292-B72D-41F2-98C5-E9ACA1B247A2}
Virtual Factory for Display
{5D05A4EB-54EA-4B7F-A28D-CE51F6BCBAF2}
Mount Point Rename
{60173D16-A550-47f0-A14B-C6F9E4DA0831}
NAP Elevated class
{677126ed-2a91-40ff-8c52-06181c064573}
Sensors CPL Change Device Permission LUA Helper
{6CE51F75-0448-438e-B9CA-69C352A248A7}
Advanced Indexing Options Dialog Object
{6D3951EB-0B07-4fb8-B703-7C5CEE0DB578}
LAN Connection UI Class
{7007ACC5-3202-11D1-AAD2-00805FC1270E}
Network Common Connections Ui
{7007ACD1-3202-11D1-AAD2-00805FC1270E}
Windows SideShow AutoWake Configuration Helper
{71B804C5-5577-471D-8FE5-C4A45B654EB8}
Sharing Elevated Virtual Factory
{72A7994A-3092-4054-B6BE-08FF81AEEFFC}
FwCpl LUA
{752438CB-E941-433F-BCB4-8B7D2329F0C8}
Connect to a Network Projector
{76052C5C-2EB4-4C40-B1F1-2A5C8554590A}
Sensors CPL Change Description LUA Helper
{76AE5F57-B7C9-421f-B55E-FB25144317B6}
XWizard Task Stub
{777BA815-2498-4875-933A-3067DE883070}
XWizard Page Stub
{777BA816-2498-4875-933A-3067DE883070}
XWizard Virtual Factory
{777BA81A-2498-4875-933A-3067DE883070}
Private XWizard Registration Manager Class
{777BA8F5-2498-4875-933A-3067DE883070}
Private XWizard Factory Registration Manager Class
{777BA8F9-2498-4875-933A-3067DE883070}
Private XWizard Type Registration Manager Class
{777BA8FB-2498-4875-933A-3067DE883070}
Network and Sharing Center Cpl Elevated Virtual Factory
{7A076CE1-4B31-452a-A4F1-0304C8738100}
Shell FMIFS Wrapper
{7aa7790d-75d7-484b-98a1-3913d022091d}
HomeGroup Password
{7be73787-ce71-4b33-b4c8-00d32b54bea8}
HomeGroup Printing Device Class
{7DF8EF76-D449-485f-B4EB-58DC96B31EDB}
WlanConn LUA
{868A2E25-D6C1-450b-8510-734A4AFEE8BC}
Virtual Factory for Usercpl
{86d5eb8a-859f-4c7b-a76b-2bd819b7a850}
CElevateWlanUi
{86F80216-5DD6-4F43-953B-35EF40A35AEE}
Virtual Factory for Action Center CPL
{8D26D9AA-5DA8-4b95-949A-B74954A229A6}
Virtual Factory for Recovery
{9200689A-F979-4eea-8830-0E1D6B74821F}
Default Location CPL Data Handler LUA Helper
{9A630456-078D-43d3-9F1D-DF7A5BC0FA44}
Date and Time Properties
{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8}
{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}
WlanPref LUA
{A25821B5-F310-41BD-806F-5864CC441B78}
Microsoft Windows Defender
{A2D75874-6750-4931-94C1-C99D3BC9D0C7}
Windows Parental Controls
{A2D8CFE7-7BA4-4bad-B86B-851376B59134}
Virtual Factory for Windows Firewall Cpl
{A4B07E49-6567-4FB8-8D39-01920E3B2357}
Shell ChkdskEx Dialog
{a4c31131-ff70-4984-afd6-0609ced53ad6}
Mcx2Uninstall Class
{A4E118DF-B9E5-4B42-888C-065CEAF8DDC3}
Secure Startup
{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}
RemMdmObj Class
{A9710FB5-1840-4224-BD42-86831E28E43A}
MBN Pin Unblock page
{b70cc729-28ae-11dd-9676-000000000000}
Connection Manager LUA Host Object
{BA126F01-2166-11D1-B1D0-00805FC1270E}
WlanAdhoc LUA
{BB2D41DF-7E34-4F06-8F51-007C9CAD36BE}
Virtual Factory for Power Options Control Panel
{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B}
CLSID_PrivJITDebuggingHost
{BBE60DE4-551F-444A-81AB-70ADAF417C5D}
DfsShellAdmin Class
{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B}
Network Center LUA
{C0DCC3A6-BE26-4bad-9833-61DFACE1A8DB}
WCN Elevation Helper
{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}
Network Diagnostics Framework
{C529C7EF-A3AF-45F2-8A47-767B33AA5CC0}
PNPX Association Class
{cee8ccc9-4f6b-4469-a235-5a22869eef03}
Windows SideShow Device Configuration Helper
{D3667F1E-CCB8-4A69-99DF-59A2B2A6753F}
CIEInetcplRasBroker
{d63c23c5-53e6-48d5-adda-a385b6bb9c7b}
Bluewire Elevated Unpairing Handler
{D88EC52B-8D57-49e1-9EB3-4D267D68A2AE}
Advanced Configuration Dialog
{DCED8DB0-11A5-4b16-AB9D-4E28CA38C99F}
Microsoft.VisualStudio.ProductKeyDialog.ElevatedLicensingState
{DED3CB50-510E-469B-A362-AB3581D83A2F}
SDChangeObj Class
{E1BA41AD-4A1D-418F-AABA-3D1196B423D3}
HNetCfg.FwPolicy2
{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
Security Center
{E9495B87-D950-4ab5-87A5-FF6D70BF3E90}
User Account Control Settings
{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8}
HNetCfg.FwAuthorizedApplication
{EC9846B3-2762-4A6B-A214-6ACB603462D2}
PerfCenter Enabler
{f4be747e-45c4-4701-90f1-d49d9ac30248}
Internet Shortcut
{FBF23B40-E3F0-101B-8488-00AA003E56F8}
ARP UninstallString Launcher
{FCC74B77-EC3E-4dd8-A80B-008A702075A9}
Elevatable Shortcut
{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}
HomeGroup CPL Advanced Settings Writer
{ffe1df5f-9f06-46d3-af27-f1fc10d63892}
Windows 8.1 x64 9600
CEIPLuaElevationHelper
{01D0A625-782D-4777-8D4E-547E6457FAD5}
{08d450b7-f7e5-4424-8229-11888adb7c14}
RasDlg LUA
{0C3B05FB-3498-40C3-9C03-4B22D735550C}
HNetCfg.FwOpenPort
{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}
ARP CBS Uninstaller Proxy
{0da7bfdf-c0a0-44eb-be82-b7a82c4721de}
WUAppElevator class
{1138506a-b949-46a7-b6c0-ee26499fdeaf}
VistaWUWebControl Class
{12a66224-5e8a-4679-8941-0b9b960bf5ea}
Virtual Factory for DiagCpl
{12C21EA7-2EB8-4B55-9249-AC243DA8C666}
TPM Virtual Smart Card Manager
{16A18E86-7F6E-4C20-AD89-4FFC0DB7A96A}
SPPLUAObject Class
{179CC917-3A82-40E7-9F8C-2FC8A3D2212B}
Share Media Settings Writer
{19BA17F2-2602-4E77-9027-103894607626}
Create New Link
{1BA783C1-2A30-4ad3-B928-A9A46C604C28}
Lpksetup LUA Elevation
{1C749B87-568C-4865-8E73-6413F8372CE6}
Shell Indexer Admin Object
{1E1714A3-50B9-480b-A94A-636D9A9B56D1}
Security Shell Extension
{1f2e5c40-9550-11ce-99d2-00aa006e086c}
Microsoft Disk Quota UI Elevation Helper
{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}
Detection And Sharing
{1fda955b-61ff-11da-978c-0008744faab7}
WUPublishedAppInstallorElevator Class
{26D32566-760A-40A2-AA82-A40366528916}
FaultrepElevatedDataCollection
{2C256447-3F0D-4CBB-9D12-575BB20CDA0A}
HNetCfg.FwRule
{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}
Advanced Indexing Options Dialog Object
{2F2165FF-2C2D-4612-87B2-CC8E5002EF4C}
HNetCfg.FwMgr
{304CE942-6E39-40D8-943A-B913C40C9CD4}
CtTuner Class
{32BA16FD-77D9-4AFB-9C9F-703E92AD4BFF}
Copy/Move/Rename/Delete/Link Object
{3ad05575-8857-4850-9277-11b85bdb8e09}
CMLUAUTIL
{3E000D72-A845-4CD9-BD83-80C07C3B881F}
CMSTPLUA
{3E5FC7F9-9A51-4367-9063-A120244FBEC7}
AccesibilityCplAdmin Class
{434A6274-C539-4E99-88FC-44206D942775}
Home Networking Configuration Manager
{46C166AA-3108-11D4-9348-00C04F8EEB71}
CIEContentAdvisorBroker
{46CB32FA-B5CA-8A3A-62CA-A7023C0496C5}
Virtual Factory for Languages Configuration
{4A3F2F56-454A-4CC5-9734-BB7D8141AC0A}
RasGcw LUA
{4A6B8BAD-9872-4525-A812-71A52367DC17}
CIERegistryHKLMBroker
{4b360c3c-d284-4384-abcc-ef133e1445da}
ERCLuaElevationHelper
{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}
Shell Security Editor
{4D111E08-CBF7-4f12-A926-2C7920AF52FC}
AddMdmObj Class
{4DF929E7-4C5E-4587-A598-7ED7B3D6E462}
LayerUIPropPage
{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
Region and Language UAC Elevation
{514B5E31-5596-422F-BE58-D804464683B5}
Shell Disc Image Mount
{51a1467f-96a2-4b1c-9632-4b4d950fe216}
FaxCommon Class
{59347292-B72D-41F2-98C5-E9ACA1B247A2}
IE Spelling Dictionary Installer Broker
{5bbd58bb-993e-4c17-8af6-3af8e908fca8}
Developer License Launcher
{5C917E9C-0B2F-40D6-928B-5C43FDB16DF4}
Mount Point Rename
{60173D16-A550-47f0-A14B-C6F9E4DA0831}
NAP Elevated class
{677126ed-2a91-40ff-8c52-06181c064573}
PortableWorkspaceLauncher Class
{698F7D05-37F0-4902-8A63-AEF7D44DC7FC}
Sensors CPL Change Device Permission LUA Helper
{6CE51F75-0448-438e-B9CA-69C352A248A7}
Advanced Indexing Options Dialog Object
{6D3951EB-0B07-4fb8-B703-7C5CEE0DB578}
LAN Connection UI Class
{7007ACC5-3202-11D1-AAD2-00805FC1270E}
Network Common Connections Ui
{7007ACD1-3202-11D1-AAD2-00805FC1270E}
Sharing Elevated Virtual Factory
{72A7994A-3092-4054-B6BE-08FF81AEEFFC}
FwCpl LUA
{752438CB-E941-433F-BCB4-8B7D2329F0C8}
XWizard Task Stub
{777BA815-2498-4875-933A-3067DE883070}
XWizard Page Stub
{777BA816-2498-4875-933A-3067DE883070}
XWizard Virtual Factory
{777BA81A-2498-4875-933A-3067DE883070}
Private XWizard Registration Manager Class
{777BA8F5-2498-4875-933A-3067DE883070}
Private XWizard Factory Registration Manager Class
{777BA8F9-2498-4875-933A-3067DE883070}
Private XWizard Type Registration Manager Class
{777BA8FB-2498-4875-933A-3067DE883070}
Network and Sharing Center Cpl Elevated Virtual Factory
{7A076CE1-4B31-452a-A4F1-0304C8738100}
Shell FMIFS Wrapper
{7aa7790d-75d7-484b-98a1-3913d022091d}
HomeGroup Password
{7be73787-ce71-4b33-b4c8-00d32b54bea8}
HomeGroup Printing Device Class
{7DF8EF76-D449-485f-B4EB-58DC96B31EDB}
Virtual Factory for Usercpl
{86d5eb8a-859f-4c7b-a76b-2bd819b7a850}
CElevateWlanUi
{86F80216-5DD6-4F43-953B-35EF40A35AEE}
Virtual Factory for Recovery
{9200689A-F979-4eea-8830-0E1D6B74821F}
Date and Time Properties
{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8}
{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}
WlanPref LUA
{A25821B5-F310-41BD-806F-5864CC441B78}
Microsoft Windows Defender
{A2D75874-6750-4931-94C1-C99D3BC9D0C7}
Windows Parental Controls
{A2D8CFE7-7BA4-4bad-B86B-851376B59134}
Virtual Factory for Windows Firewall Cpl
{A4B07E49-6567-4FB8-8D39-01920E3B2357}
Shell ChkdskEx Dialog
{a4c31131-ff70-4984-afd6-0609ced53ad6}
CLSID_ResetEASPolicies
{A5EAE54D-9886-4B8D-AA78-EAFF38D011CA}
Virtual Factory for MaintenanceUI
{A6BFEA43-501F-456F-A845-983D3AD7B8F0}
Secure Startup
{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}
RemMdmObj Class
{A9710FB5-1840-4224-BD42-86831E28E43A}
Connection Manager LUA Host Object
{BA126F01-2166-11D1-B1D0-00805FC1270E}
WlanAdhoc LUA
{BB2D41DF-7E34-4F06-8F51-007C9CAD36BE}
Virtual Factory for Power Options Control Panel
{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B}
DfsShellAdmin Class
{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B}
Network Center LUA
{C0DCC3A6-BE26-4bad-9833-61DFACE1A8DB}
WCN Elevation Helper
{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}
Network Diagnostics Framework
{C529C7EF-A3AF-45F2-8A47-767B33AA5CC0}
FsrmPropertiesPropSheet Class
{C88A4279-5ADC-4465-927F-6B19777AA5F9}
PNPX Association Class
{cee8ccc9-4f6b-4469-a235-5a22869eef03}
CIEInetcplRasBroker
{d63c23c5-53e6-48d5-adda-a385b6bb9c7b}
Advanced Configuration Dialog
{DCED8DB0-11A5-4b16-AB9D-4E28CA38C99F}
SDChangeObj Class
{E1BA41AD-4A1D-418F-AABA-3D1196B423D3}
HNetCfg.FwPolicy2
{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
Set Network Location Class Factory
{E5A040E9-1097-4D24-B89E-3C730036D615}
Security Center
{E9495B87-D950-4ab5-87A5-FF6D70BF3E90}
Remove Device Elevated Handler
{E95186C7-7D80-4311-843D-0702CBC8B1E4}
User Account Control Settings
{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8}
HNetCfg.FwAuthorizedApplication
{EC9846B3-2762-4A6B-A214-6ACB603462D2}
PerfCenter Enabler
{f4be747e-45c4-4701-90f1-d49d9ac30248}
Internet Shortcut
{FBF23B40-E3F0-101B-8488-00AA003E56F8}
ARP UninstallString Launcher
{FCC74B77-EC3E-4dd8-A80B-008A702075A9}
Elevatable Shortcut
{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}
HomeGroup CPL Advanced Settings Writer
{ffe1df5f-9f06-46d3-af27-f1fc10d63892}
Windows 10 TP x64 9901
CEIPLuaElevationHelper
{01D0A625-782D-4777-8D4E-547E6457FAD5}
{08d450b7-f7e5-4424-8229-11888adb7c14}
RasDlg LUA
{0C3B05FB-3498-40C3-9C03-4B22D735550C}
HNetCfg.FwOpenPort
{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}
ARP CBS Uninstaller Proxy
{0da7bfdf-c0a0-44eb-be82-b7a82c4721de}
WUAppElevator class
{1138506a-b949-46a7-b6c0-ee26499fdeaf}
VistaWUWebControl Class
{12a66224-5e8a-4679-8941-0b9b960bf5ea}
Virtual Factory for DiagCpl
{12C21EA7-2EB8-4B55-9249-AC243DA8C666}
TPM Virtual Smart Card Manager
{16A18E86-7F6E-4C20-AD89-4FFC0DB7A96A}
SPPLUAObject Class
{179CC917-3A82-40E7-9F8C-2FC8A3D2212B}
Share Media Settings Writer
{19BA17F2-2602-4E77-9027-103894607626}
Create New Link
{1BA783C1-2A30-4ad3-B928-A9A46C604C28}
Lpksetup LUA Elevation
{1C749B87-568C-4865-8E73-6413F8372CE6}
Shell Indexer Admin Object
{1E1714A3-50B9-480b-A94A-636D9A9B56D1}
Security Shell Extension
{1f2e5c40-9550-11ce-99d2-00aa006e086c}
Microsoft Disk Quota UI Elevation Helper
{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}
Detection And Sharing
{1FDA955B-61FF-11DA-978C-0008744FAAB7}
WUPublishedAppInstallorElevator Class
{26D32566-760A-40A2-AA82-A40366528916}
FaultrepElevatedDataCollection
{2C256447-3F0D-4CBB-9D12-575BB20CDA0A}
HNetCfg.FwRule
{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}
Advanced Indexing Options Dialog Object
{2F2165FF-2C2D-4612-87B2-CC8E5002EF4C}
HNetCfg.FwMgr
{304CE942-6E39-40D8-943A-B913C40C9CD4}
CtTuner Class
{32BA16FD-77D9-4AFB-9C9F-703E92AD4BFF}
Copy/Move/Rename/Delete/Link Object
{3ad05575-8857-4850-9277-11b85bdb8e09}
CMLUAUTIL
{3E000D72-A845-4CD9-BD83-80C07C3B881F}
CMSTPLUA
{3E5FC7F9-9A51-4367-9063-A120244FBEC7}
AccesibilityCplAdmin Class
{434A6274-C539-4E99-88FC-44206D942775}
Home Networking Configuration Manager
{46C166AA-3108-11D4-9348-00C04F8EEB71}
CIEContentAdvisorBroker
{46CB32FA-B5CA-8A3A-62CA-A7023C0496C5}
Virtual Factory for Languages Configuration
{4A3F2F56-454A-4CC5-9734-BB7D8141AC0A}
RasGcw LUA
{4A6B8BAD-9872-4525-A812-71A52367DC17}
CIERegistryHKLMBroker
{4b360c3c-d284-4384-abcc-ef133e1445da}
ERCLuaElevationHelper
{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}
Shell Security Editor
{4D111E08-CBF7-4f12-A926-2C7920AF52FC}
AddMdmObj Class
{4DF929E7-4C5E-4587-A598-7ED7B3D6E462}
LayerUIPropPage
{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
Region and Language UAC Elevation
{514B5E31-5596-422F-BE58-D804464683B5}
Shell Disc Image Mount
{51a1467f-96a2-4b1c-9632-4b4d950fe216}
FaxCommon Class
{59347292-B72D-41F2-98C5-E9ACA1B247A2}
IE Spelling Dictionary Installer Broker
{5bbd58bb-993e-4c17-8af6-3af8e908fca8}
Developer License Launcher
{5C917E9C-0B2F-40D6-928B-5C43FDB16DF4}
Mount Point Rename
{60173D16-A550-47f0-A14B-C6F9E4DA0831}
PortableWorkspaceLauncher Class
{698F7D05-37F0-4902-8A63-AEF7D44DC7FC}
Advanced Indexing Options Dialog Object
{6D3951EB-0B07-4fb8-B703-7C5CEE0DB578}
LAN Connection UI Class
{7007ACC5-3202-11D1-AAD2-00805FC1270E}
Network Common Connections Ui
{7007ACD1-3202-11D1-AAD2-00805FC1270E}
Sharing Elevated Virtual Factory
{72A7994A-3092-4054-B6BE-08FF81AEEFFC}
FwCpl LUA
{752438CB-E941-433F-BCB4-8B7D2329F0C8}
XWizard Task Stub
{777BA815-2498-4875-933A-3067DE883070}
XWizard Page Stub
{777BA816-2498-4875-933A-3067DE883070}
XWizard Virtual Factory
{777BA81A-2498-4875-933A-3067DE883070}
Private XWizard Registration Manager Class
{777BA8F5-2498-4875-933A-3067DE883070}
Private XWizard Factory Registration Manager Class
{777BA8F9-2498-4875-933A-3067DE883070}
Private XWizard Type Registration Manager Class
{777BA8FB-2498-4875-933A-3067DE883070}
Network and Sharing Center Cpl Elevated Virtual Factory
{7A076CE1-4B31-452a-A4F1-0304C8738100}
Shell FMIFS Wrapper
{7aa7790d-75d7-484b-98a1-3913d022091d}
HomeGroup Password
{7be73787-ce71-4b33-b4c8-00d32b54bea8}
HomeGroup Printing Device Class
{7DF8EF76-D449-485f-B4EB-58DC96B31EDB}
Virtual Factory for Usercpl
{86d5eb8a-859f-4c7b-a76b-2bd819b7a850}
CElevateWlanUi
{86F80216-5DD6-4F43-953B-35EF40A35AEE}
Virtual Factory for Recovery
{9200689A-F979-4eea-8830-0E1D6B74821F}
Date and Time Properties
{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8}
{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}
WlanPref LUA
{A25821B5-F310-41BD-806F-5864CC441B78}
Microsoft Windows Defender
{A2D75874-6750-4931-94C1-C99D3BC9D0C7}
Windows Parental Controls
{A2D8CFE7-7BA4-4bad-B86B-851376B59134}
Virtual Factory for Windows Firewall Cpl
{A4B07E49-6567-4FB8-8D39-01920E3B2357}
Shell ChkdskEx Dialog
{a4c31131-ff70-4984-afd6-0609ced53ad6}
CLSID_ResetEASPolicies
{A5EAE54D-9886-4B8D-AA78-EAFF38D011CA}
Virtual Factory for MaintenanceUI
{A6BFEA43-501F-456F-A845-983D3AD7B8F0}
Secure Startup
{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}
RemMdmObj Class
{A9710FB5-1840-4224-BD42-86831E28E43A}
Connection Manager LUA Host Object
{BA126F01-2166-11D1-B1D0-00805FC1270E}
WlanAdhoc LUA
{BB2D41DF-7E34-4F06-8F51-007C9CAD36BE}
Virtual Factory for Power Options Control Panel
{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B}
DfsShellAdmin Class
{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B}
Network Center LUA
{C0DCC3A6-BE26-4bad-9833-61DFACE1A8DB}
WCN Elevation Helper
{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}
Network Diagnostics Framework
{C529C7EF-A3AF-45F2-8A47-767B33AA5CC0}
FodHelperComObject Class
{C6B167EA-DB3E-4659-BADC-D1CCC00EFE9C}
FsrmPropertiesPropSheet Class
{C88A4279-5ADC-4465-927F-6B19777AA5F9}
PNPX Association Class
{cee8ccc9-4f6b-4469-a235-5a22869eef03}
CIEInetcplRasBroker
{d63c23c5-53e6-48d5-adda-a385b6bb9c7b}
Advanced Configuration Dialog
{DCED8DB0-11A5-4b16-AB9D-4E28CA38C99F}
SDChangeObj Class
{E1BA41AD-4A1D-418F-AABA-3D1196B423D3}
HNetCfg.FwPolicy2
{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
Set Network Location Class Factory
{E5A040E9-1097-4D24-B89E-3C730036D615}
Security Center
{E9495B87-D950-4ab5-87A5-FF6D70BF3E90}
Remove Device Elevated Handler
{E95186C7-7D80-4311-843D-0702CBC8B1E4}
User Account Control Settings
{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8}
HNetCfg.FwAuthorizedApplication
{EC9846B3-2762-4A6B-A214-6ACB603462D2}
PerfCenter Enabler
{f4be747e-45c4-4701-90f1-d49d9ac30248}
Internet Shortcut
{FBF23B40-E3F0-101B-8488-00AA003E56F8}
ARP UninstallString Launcher
{FCC74B77-EC3E-4dd8-A80B-008A702075A9}
Elevatable Shortcut
{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}
HomeGroup CPL Advanced Settings Writer
{ffe1df5f-9f06-46d3-af27-f1fc10d63892}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment