Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
88bb004909da0a997c85fb2c8b651786 d6ed744b7c764e438441fd0b41cd45eb31cc9594 [NTFS]\[root]\$I30
544fdb041b63658416d9e58e59d38945 3c869f136af2848e7fff47e2c12c88b540a83bc1 [NTFS]\[root]\$TXF_DATA
1f5039e50bd66b290c56684d8550c6c2 7b91dbdc56c5781edf6c8847b4aa6965566c5c75 [NTFS]\[root]\swapfile.sys
0829f71740aab1ab98b33eae21dee122 0631457264ff7f8d5fb1edc2c0211992a67c73e6 [NTFS]\[root]\DumpStack.log.tmp
59af5b285ccc2a8db5f76f0df618b4e3 1f14b46b9b1374bbf94daee7d39ea2ff4b2cdb17 [NTFS]\[root]\pagefile.sys
84eaffc822dcc3b3c04c9b81e8cce3f2 fd96b88d97cf1d8a3ec44b5f6bd30736cd246f92 [NTFS]\[root]\System Volume Information\$I30
b86666fa2a2e2d142b8f8a5246c90070 a8dfac8015cbabc45e4a7b3005d1fef092b944c4 [NTFS]\[root]\System Volume Information\IndexerVolumeGuid
26032eab81e43877041c4fcffcd51b03 ba2a1a8ee0aa3cc4f8821d351ff6be9c57df1895 [NTFS]\[root]\System Volume Information\tracking.log
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\System Volume Information\MountPointManagerRemoteDatabase
dac54b625f83d99577f411fd1bd28654 b1cf6264c12a879fbc3e2f56fed6bae69050d61f [NTFS]\[root]\System Volume Information\WPSettings.dat
9a9544dcab18dc086b25cb7a412d15e7 ee2d461033a68c2a01a0f8366018416fdbc9eb25 [NTFS]\[root]\Windows\$I30
9ce5690e45ae373d08339fedae1c3458 df1a60895cfca34e20d34718e76a5679c66c0175 [NTFS]\[root]\Windows\$TXF_DATA
2cc83d93dd1dde691158cf5e9882420b 49bfdc6e1e73e09a0dec345ca15b72d167add3b6 [NTFS]\[root]\Windows\WindowsUpdate.log
f8b95e4d65d3e01e82ffcd3e2b5ce775 4c22aeb51979b2055995346e561cae4f8785a1c2 [NTFS]\[root]\Windows\SoftwareDistribution\$I30
f3b25701fe362ec84616a93a45ce9998 d62636d8caec13f04e28442a0a6fa1afeb024bbb [NTFS]\[root]\Windows\SoftwareDistribution\ReportingEvents.log
1668878235999465b10f26201cea617b c2e809c124ee83a90b62d3eb7bb73ee6924c0267 [NTFS]\[root]\Windows\SoftwareDistribution\DataStore\DataStore.edb
43f02bd6821554b753160c26cf8f345c 96b18b82f1c5223cd944c8974c16bc751fb51bda [NTFS]\[root]\Windows\SoftwareDistribution\DataStore\DataStore.jfm
baec79e85fe1c1076a027c452627b76a dd0a9c77000087cfb35241bb118942489fe6c961 [NTFS]\[root]\Windows\SoftwareDistribution\DataStore\Logs\$I30
226a0b2da02e5bd2077d9f26b2a90d81 4019a8e2f31454dc2dec8cbd728c7ccb5da01e71 [NTFS]\[root]\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb
0da061769af92a5739f875cd5b9b7361 6e0bd39dedcc3e574eaf2d35f2787a3dd87b1b99 [NTFS]\[root]\Windows\SoftwareDistribution\DataStore\Logs\edb.chk