Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Packages\microsoft.windows.fontdrvhost\AC\INetCache\$DSC
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Packages\microsoft.windows.fontdrvhost\AC\Temp\$DSC
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\$DSC
fb7a64cf6c2b3ede2a814f348b67ea0a 7827cbe5ff9000bb7b1fbd65107cc6c2aaad241e [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\$TXF_DATA
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\$DSC
faa22e9bb39e566c89bc300940ee41bf 68da3122f528576775766d38c11e3b9d37f70a84 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\$TXF_DATA
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\UserProfileRoaming\$DSC
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\UserProfileRoaming\Latest.dat
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\UserProfileRoaming\Latest.dat\$DSC
620f0b67a91f7f74151bc5be745b7110 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\$I30
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\$DSC
6c5eb2031194a0cc83a6660b8793748a de47a6d0488cfe66976fe3bea6613e579843cc83 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\$TXF_DATA
b8e370af011e57db970e7b77d22e74be d4c194b6f2520c7acc59e17c794dd7ac3f5d4a78 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\1D4350A3-330D-4AF9-B3FF-A927A45998AC.vsch
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\1D4350A3-330D-4AF9-B3FF-A927A45998AC.vsch\$DSC
58ba1dd70cea1aeeb7a693db9fbedbad c752c19cab621b23f5b60d1894eea82236afb11c [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol\$DSC
ed2f7fa4f19bd44d30920ce0abb079eb 191e12ae6703bd93edadd99e64e73d22a9deb010 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol\$TXF_DATA
620f0b67a91f7f74151bc5be745b7110 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\$I30
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\$DSC
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\$DSC