Thanks to Yogesh Khatri at http://swiftforensics.com and his post on the amcache.hve artifacts here: http://www.swiftforensics.com/2013/12/amcachehve-in-windows-8-goldmine-for.html