Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
a74ef57effbbb754de5532fa4600da99 0a13685627994b6b634600deca9d68ca2bd3f117 [NTFS]\[root]\Windows\System32\catroot2\edb00008.log
17c710ecf319df0c6c3c94a826d4ac8c c6f06f69c5e2f6640cbbfe2523b4a81d80c1bab1 [NTFS]\[root]\Windows\System32\catroot2\edb00007.log
12ddbae5bf6fbe160ba843add9ada641 ce5ddb00c49f883e747fb10b07d82278d9a3edaf [NTFS]\[root]\Windows\System32\catroot2\edb00006.log
89f08a95d08d118214b7dbda44446ef8 8f4b14f191b1fc88aeef3b50fd4b9f36feae4b57 [NTFS]\[root]\Windows\System32\catroot2\edb00005.log
5ca0964f2aab973b14561eb93f3d0017 021f87a769590dcbf7019ac95ccee8aba22782d3 [NTFS]\[root]\Windows\System32\catroot2\edb00004.log
f774e45e432d43153873b4484a46ac85 caa3b2026480eb7ec2a575e2618d5e0f6a5e75b7 [NTFS]\[root]\Windows\System32\catroot2\edb00003.log
c8cb3ed6959da2ff99ee547c53c64cc9 9aa53943106b9af7e44c8136efe2c62fca03dd4f [NTFS]\[root]\Windows\System32\catroot2\edb.chk
405797bfb7be9c79f22d358fdddc2a76 f5672813b254a58f408d472be4a16680b1315c24 [NTFS]\[root]\Windows\System32\catroot2\dberr.txt
b2d1236c286a3c0704224fe4105eca49 7d76d48d64d7ac5411d714a4bb83f37e3e5b8df6 [NTFS]\[root]\Windows\System32\catroot2\edbres00002.jrs
b2d1236c286a3c0704224fe4105eca49 7d76d48d64d7ac5411d714a4bb83f37e3e5b8df6 [NTFS]\[root]\Windows\System32\catroot2\edbres00001.jrs
4fa62891f1352d4073d645c9246131df f5ca2862606d7270ff94734716b71906fc16c15f [NTFS]\[root]\Windows\System32\catroot2\edb00002.log
cbbfa902d9e2c87acf0b54c1b5ac94c0 5df72fca64f163e215cbf7ce9521e0b562bae7a7 [NTFS]\[root]\Windows\System32\catroot2\edb00001.log
fce82fc96e518b00e8196a65bff44001 7632cf8a2f0d9083ae3ca97c32b6ec9ca3b0cf77 [NTFS]\[root]\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
2092eaed0a44c011a53977325cf9df59 5c370c04587d96d7a1609c0c864bc26c53cfa57b [NTFS]\[root]\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb.jfm
72d5278a188002bdd97addc6daff44c4 0c5bde3557b2257d2947ae5b7111197a5db39f93 [NTFS]\[root]\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
9edfac7af930d84c1933168d563fd1c8 8205bc8657383f4b7ef9e8922f24abda10af5468 [NTFS]\[root]\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb.jfm
0fc3cbbc39fd16be9964b28db8bf0f89 a5cd53462719ed076ae4b41fcb3188e6eee33290 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$I30
00e410548a0fd0b687fb9a82bd37d2e2 6a45532499458f43054158489fb0cde831bcf727 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem1.cat
1c1b98291ecc5ae22c587e07de5251e8 eb23992a309590ee3a9d21d3aa6a817af57a76c1 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.cat
d883d57e7df38e17cd556f023a1b3eea 33f7798be5f285fe3c6d23de3e7998172a77b0dd [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\microsoft-windows-printing-pmcppc-fod-package-Wrapper~31bf3856ad364e35~amd64~~10.0.19041.3636.cat