Olivia, a forensic investigator, is analyzing the behavior of malware that was executed on a...

Vendor: ECCouncil
Product: 312-49v11
Update on: May 14, 2026
Questions: 443

ECCouncil 312-49v11 Question Answer

Olivia, a forensic investigator, is analyzing the behavior of malware that was executed on a compromised Windows system. During her investigation, she discovers that the malware made several changes to the system registry to ensure its persistence. Olivia wants to focus on the areas of the registry most likely to have been targeted by the malware to automatically execute upon system startup. Which registry keys should Olivia focus on to track malware persistence through auto-start functionality? analyzing the behavior of malware that was executed on a compromised Windows system. During her investigation, she discovers that the malware made several changes to the system registry to ensure its persistence. Olivia wants to focus on the areas of the registry most likely to have been targeted by the malware to automatically execute upon system startup. Which registry keys should Olivia focus on to track malware persistence through auto start functionality?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ShellNoRoam

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run