DFIRHub

Windows registry artifactTotal Commander

Total Commander Registry artifacts

  • Third Party Applications
  • 2 keys
  • SOFTWARE

Registry keys

2 keys that RECmd reads for this artifact

  • SOFTWARE
    Ghisler\Total Commander

    Total Commander Registry artifacts

  • SOFTWARE
    WOW6432Node\Ghisler\Total Commander

    Total Commander Registry artifacts

References

1 link

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)