DFIRHub

OneCommander

One Commander

  • Apps
  • 2 paths
  • Per-user data
  • Version 1
  • Andrew Rathbun

Paths on disk

2 paths

Paths use Windows environment variable syntax

Notes

One Commander is a freeware file manager similar to Total Commander.

\%user%\OneCommander\Logs\OCLog20210404.txt will have a play by play of user activity, however, it doesn't appear to be as verbose as one would expect. I've yet to see exact folder paths specified within this file in my limited testing.

.\%user\OneCommander\Settings\OneCommanderV3.json will have the name of the user's PC.

References

1 link