CLSID

http://msdn2.microsoft.com/en-us/library/ms691424.aspx

CLSID Key

A CLSID is a globally unique identifier that identifies a COM class object. If your server or container allows linking to its embedded objects, you need to register a CLSID for each supported class of objects.

Registry Entry

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\     {CLSID}\<Subkey> = <value>

<Subkey>	Description
AppID	The AppID associated with this CLSID. It is a named value, not a subkey.
AutoConvertTo	Automatic object class conversion.
AutoTreatAs	Assigns the TreatAs value.
AuxUserType	Identifies object as a control.
Control	Displayable application name.
Conversion	Conversion used by the Convert dialog.
DataFormats	Formats supported by applications.
DefaultIcon	Provides default icon information.
InprocHandler	Registers a 16-bit handler DLL.
InprocHandler32	Registers a 32-bit handler DLL.
InprocServer	Registers a 16-bit in-process server DLL.
InprocServer32	Registers a 32-bit in-process server DLL.
Insertable	Indicates object is insertable in COM applications.
Interface	Associates interface name with IID.
LocalServer	Full path to a 16-bit or 32-bit application.
LocalServer32	Full path to a 32-bit application.
MiscStatus	Default status used for all aspects.
ProgID	Programmatic identifier for a class.
ToolBoxBitmap32	Module name and ResourceID for a 16 x 16 bitmap.
TreatAs	Specifies the CLSID of a class that can emulate the current class.
Verb	Verbs associated with an application.
Version	Version number of the control.

Remarks

The HKEY_LOCAL_MACHINE\SOFTWARE\Classes key corresponds to the HKEY_CLASSES_ROOT key, which was retained for compatibility with earlier versions of COM.

The CLSID key contains information used by the default COM handler to return information about a class when it is in the running state.

To obtain a CLSID for your application, you can use the UUIDGEN.EXE found in the \TOOLs directory of the COM Toolkit, or use CoCreateGuid.

The CLSID is a 128-bit number, spelled in hex, within a pair of braces.

-----
CLSID 는 유일값으로 CLSID를 이용해 레지스트리에 등록되는 악성 코드 PE 파일의 경우, 내부 문자열에 CLSID가 있을 경우에 해당 클래스 아이디를 구글에서 검색해보면 관련된 정보가 얻을 수 있다.