Which registry key stores the values typed into the Run dialog box in the Start menu?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

Which registry key stores the values typed into the Run dialog box in the Start menu?

Explanation:
The Run dialog box history is kept in the RunMRU registry key. This branch records every command a user types into Start > Run, along with an MRUList that defines the order of most-recently-used entries. The actual commands are stored in values named a, b, c, and so on, with the MRUList guiding the sequence. This makes RunMRU the go-to place for seeing what someone attempted to run from the Run dialog. Other options don’t fit this purpose. UserAssist tracks programs that were launched, not the exact strings typed into Run. MountedDevices stores drive-mapping and device information, not Run entries. TypedURLs is about web addresses typed into Internet Explorer, not the Run dialog.

The Run dialog box history is kept in the RunMRU registry key. This branch records every command a user types into Start > Run, along with an MRUList that defines the order of most-recently-used entries. The actual commands are stored in values named a, b, c, and so on, with the MRUList guiding the sequence. This makes RunMRU the go-to place for seeing what someone attempted to run from the Run dialog.

Other options don’t fit this purpose. UserAssist tracks programs that were launched, not the exact strings typed into Run. MountedDevices stores drive-mapping and device information, not Run entries. TypedURLs is about web addresses typed into Internet Explorer, not the Run dialog.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy