Where Is the MuiCache Registry Key Located?
MuiCache registry key mapping executables to display names, and why forensics tools read it.
Last updated
MuiCache is a registry key where Explorer remembers friendly display names for executables it has seen. Each value names an exe path and stores the name shown in dialogs, firewall prompts and compatibility listings. It exists purely as a cache, so nothing breaks when entries go stale.
Forensics and privacy guides care about it because the key lists programs that ran on the machine, including ones since uninstalled. The values persist after the exe is gone, which makes MuiCache a popular timeline artifact and a cleanup target before handing hardware to someone else.
Where Windows stores this, by platform
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
Values pair exe paths with cached display names. The XP era twin lived at HKCU\Software\Microsoft\Windows\ShellNoRoam\MuiCache and is long obsolete. Export the key before wiping it, and edit with regedit closed on the key.
Frequently asked questions
why does an old program name still show in windows dialogs
Because Explorer caches the name on first sight and only refreshes it under specific conditions. Rename an exe or update an app and the stale cached name can linger in dialogs until the entry gets overwritten or deleted.
is it safe to clear the muicache key
Yes, with regedit closed from the key first. Windows rebuilds entries as programs run, so deletion only clears history, never functionality. Back up the key with reg export beforehand if you want a restore point.
Notice an outdated path? Let us know.