I have several questions about the structure of the COMPONENTS Hive. In case you don't know what I'm talking about: Code: HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components Can someone explain me what some prefixes and Values are within some Windows-Component? Prefix: !i%componentid% !p%componentid% !s%componentid% !f means file I guess !c means something like the included/containing component(s). Values: CF ?? - most of the time it's 12 / 0xC Difference between appid and identity (one of them is present) S256 I guess is a hash. I appreciate any help.