Last visited MRU

Hot
939

Artifacts

Path/s
XP NTUSER.DAT\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Win7/8/10 NTUSER.DAT\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU
Operating System
Windows
Artifact Category
MRU
Tracks the executable and directory location that an application uses to open files that are documented in the OpenSaveMRU key.

 "The MRU in MRU lists stands for "Most Recently Used." The MRU list is a Windows-based application that includes registry of recently opened webpages, documents, files, images and other applications. For example, when a computer user opens Microsoft Word, she may see a list of previously opened Word documents within the application. That would be an MRU List. The lists serve no other purpose than to track application use and do not perform any basic function on their own." - https://itstillworks.com/mru-list-12213731.html  

User comments

There are no user comments for this listing.
Already have an account? or Create an account