home

Windows AppCompatCache · execution traces · deleted binary detection · heuristic

Drop Windows SYSTEM hive
located at C:\Windows\System32\config\SYSTEM
drop Windows SYSTEM hive — shimcache is in AppCompatCache
ready