Notifications
Clear all
Topic starter
12/04/2013 6:42 pm
Hi,
Im doing a registry analysis of an E01 file taken from a Windows 8 system. I need to analyse some data found in a specific area -
HKEY_CURRENT_USER\Software\Microsoft\CurrentVersion\UFH\SHC
Does anyone have any idea as to the purpose of this specific entry? Ive noticed that the data inside it are all .exe files
12/04/2013 9:54 pm
I've done some Google searches, but it might help if there were a bit of context. For example, which EXEs are listed in the key? Did you happen to create a timeline of activity, in order to perhaps get some context with respect to the data you're seeing?