.amcache

Windows registry hive storing application execution history, binary format

Not yet supported

Format facts

MIME type: application/x-hive
Apple UTI: custom
Stock Quick Look: no stock preview
Planned approach (census): metadata-only
Icon hint: generic-icon
Prevalence: common

Renderer note (from the census)

parse regf header

Gotchas: Windows execution forensics