search

EricZimmerman / AppCompatCacheParser

AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
MIT License
110 stars 21 forks source link

Noob question #1

Closed MacgyverJohnson closed 5 years ago

MacgyverJohnson commented 7 years ago

Hello there @EricZimmerman Is it possible to delete specific apps from AppCompatCache?data is in binary format... My intention being removing trace that a particular application was ever run in a PC? Thanks

EricZimmerman commented 7 years ago

why remove it (rhetorical question...)? it may be possible, but ive never tried

MacgyverJohnson commented 7 years ago

The command: rundll32.exe kernel32.dll,BaseFlushAppcompatCache flushes AppCompatCache completely.... I wanted to know if it was possible to selectively delete entries? (purely Academic purpose ) Thanks