Which registry key stores the history of items entered in the Run dialog box?

Enhance your knowledge as a Computer Hacking Forensic Investigator with the CHFI v11 Test. Use flashcards and multiple-choice questions, complete with hints and detailed explanations, to prepare effectively and ace your exam!

Multiple Choice

Which registry key stores the history of items entered in the Run dialog box?

Explanation:
The Run dialog history is stored in a registry key that specifically records items entered into the Run box. This key is HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU. It contains values named a, b, c, and so on, each holding a Run command that was typed or selected. The MRUList value determines the order of these entries, showing which commands were used most recently. This makes RunMRU the best answer because it directly represents the Run dialog’s history, unlike other keys that track different activities (for example, UserAssist tracks general program usage, TypedURLs stores web addresses, and MountedDevices relates to mounted storage).

The Run dialog history is stored in a registry key that specifically records items entered into the Run box. This key is HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU. It contains values named a, b, c, and so on, each holding a Run command that was typed or selected. The MRUList value determines the order of these entries, showing which commands were used most recently. This makes RunMRU the best answer because it directly represents the Run dialog’s history, unlike other keys that track different activities (for example, UserAssist tracks general program usage, TypedURLs stores web addresses, and MountedDevices relates to mounted storage).

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy