Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.19041.3758.cat\$DSC
6608ed272cbad0bcb6d26614f83e6cb3 450001efbc571f7798e06bd741947fcbfc715c52 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.19041.3636.cat
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.19041.3636.cat\$DSC
e3749e87b7a4e95fb7ed61bfe60e31ba 4025be1b75e41bd26c5c6c2e4a6b083d3f910c00 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.19041.3803.cat
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.19041.3803.cat\$DSC
1c95b6326cd26d2f663b6782ed55b755 11d0faf4033b7fc5ac8afc0a792127c874c76004 [NTFS]\[root]\Windows\System32\Bthprops\@BthpropsNotificationLogo.png
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Bthprops\@BthpropsNotificationLogo.png\$DSC
8d512b70c63aa23f364684b968a3549a f5c21d6bcf9cc8e80fa3053bf4bcaff87b54b9b9 [NTFS]\[root]\Windows\System32\Boot\winresume.exe
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\winresume.exe\$DSC
6ecfe7648b222ca793fcde344e727fc7 2431ab84a01066932e08a18bd15b350bc096f4c2 [NTFS]\[root]\Windows\System32\Boot\winload.exe
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\winload.exe\$DSC
1841f98523ec0485a7ec1c22df1625c4 8e0ad95222ea1aa901b1d91af790fd62c574bfdb [NTFS]\[root]\Windows\System32\Boot\winresume.efi
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\winresume.efi\$DSC
e1bf696d903920a64931ced28a374277 465c723969fd541f043d725e4b8c6ceb648a722c [NTFS]\[root]\Windows\System32\Boot\winload.efi
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\winload.efi\$DSC
0b2e3a448a5fe17e5a49aef2fc37d964 447206245db518e5399b1806df1ef3216cc185b1 [NTFS]\[root]\Windows\System32\Boot\ko-KR\winresume.exe.mui
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\ko-KR\winresume.exe.mui\$DSC
0754b3f558a8ea6521bf19ca2fe6bf9b 11d1133846746ac3ecd7d93f9466b8866a10ad48 [NTFS]\[root]\Windows\System32\Boot\ko-KR\winresume.efi.mui
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Windows\System32\Boot\ko-KR\winresume.efi.mui\$DSC
2ac2f416b81c4c70716508aae3742e19 85996e7b8cf9eec10cf378120275283c85b359cf [NTFS]\[root]\Windows\System32\Boot\ko-KR\winload.exe.mui