Sockets, Shellcode, Porting, and Coding: Reverse Engineering Exploits and Tool Coding for Security Professionals

COM-related information is stored in the HKEY_CLASSES_ROOT hive in the

Registry.The structure of this hive, in terms of relevance to registration, is explained in

the following sections.

HKEY_CLASSES_ROOT\CLSID

The HKEY_CLASSES_ROOT\CLSID key in the Registry is the container of all regis-

tered components in the system, indexed by their CLSID value. A fundamental part of

component registration is that a component must register its CLSID information in

this key.

HKEY_CLASSES_ROOT\

CLSID\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

The presence of a CLSID key inside HKEY_CLASSES_ROOT\CLSID indicates the

registration of a COM object. The default value of the key is the friendly name of the

component—for instance, Msxml.The key must also have a child key repr ...