AmCache is a Windows artifact that stores information related to executed applications.
It is mainly used by Windows to improve application compatibility.
Typical location: C:\Windows\AppCompat\Programs\Amcache.hve
AmCache may contain:
- Application paths
- File metadata
- File hashes
- First execution information
- Program details
AmCache can provide information about:
- Software present on a system
- Application history
- File metadata
Exploring how AmCache stores application-related information.