Review Note
Last Update: 02/04/2024 09:40 AM
Current Deck: Digitale Forensik
Published
Fields:
Vorderseite
Amcache
Rückseite
The Amcache records a SHA-1 hash for executables, but for larger files only for the first 31.457.280 bytes.
Entries in the AMCache are typically generated when an application is executed for the first time or when certain changes occur on the system.
Entries in the AMCache are typically generated when an application is executed for the first time or when certain changes occur on the system.
Tags:
Suggested Changes:
Deck Changes (Suggestion to move the Note to the following Deck):
Field Changes:
Tag Changes: