runmru and typed paths clearing detector — free browser tool | fatcousin

home

drop ntuser.dat reg export · detect cleared run dialog history · identify missing typed path entries · surface evidence of user activity history destruction · runs locally

ntuser .reg export

drop ntuser.dat .reg export

or click

Select file

4688 evtx csv (optional)

drop 4688 evtx csv

or click

Select file

RunMRU · TypedPaths · TypedURLs · WordWheelQuery · cross-ref 4688 when run dialog commands missing from MRU

investigation window start (optional)

drop ntuser.dat .reg export · optional 4688 evtx csv for cross-reference