PkgFoundry
Catalog crates.io
Back to packageRELEASE DETAILS

0.1.0

crates.io

amcache-core

Pure-Rust read-only Windows Amcache.hve reader — decodes the modern (Windows 10/11) InventoryApplicationFile execution-evidence entries (path, SHA-1, publisher, size, link date) and InventoryDevicePnp device entries from an Amcache hive.

amcachedfirexecutionforensicsparser-implementationswindows
Published16 Jul 2026
Direct dependencies1
Transitive dependenciesNot calculated

Downloads & popularity

103downloads
Cumulative counter · observed snapshots21 Oct 2026
103100.998.9
2026-10-21: 103 · observed 2026-10-21T11:33:20.1929413Z
21 Oct21 Oct

crates · 1 observations shown. Missing days are unknown. Counter changes are not daily download totals.

View observed values
Date / source periodValueObserved at
2026-10-211032026-10-21T11:33:20.1929413Z

Declared dependencies 1

Native requirements
1 direct targetsNot calculated transitive count
Package / targetRequirementRelationship
winreg-core
Environment
{
  "kind": "normal",
  "optional": false,
  "target": null,
  "features": [],
  "default_features": true,
  "explicit_name": null
}
^0.2runtime

Distribution files

0 collected

No distribution files are present in the collected metadata.

Checksums from source
{
  "sha256": "4ac231521331dd80bab6faf7720794c1494c463742b8c1da5b02b5978771f09c"
}

Repository

PENDING
securityronin/amcache-forensic

Shared repository data · GitHub

License detected in repository
Not collected

Metadata history

Meaningful changes
Current collected state Current

Observed since 21 Oct, 11:33 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package_version:b9e469b05c7ff86636c29c4b6b028fcce1826ca3baf6574ba2cde63e2e810aa5

Other collected versions

View all collected versions →