**Shimcache (AppCompatCache):** Records executables that Windows evaluated for compatibility. Located in SYSTEM registry hive. - **Amcache (Amcache.hve):** Records information about executed programs, including SHA-1 hashes and file paths.