Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
8150fe74795408611dd9736639e00b62 0ca754602a46cf94abd58ef6e682544ef579d320 [NTFS]\[root]\Windows\Panther\MainQueueOnline1.que
a46e29c86cd0bd22f51c8fac6bcaf5dc 0380ebba2a4f97c5027cb343e0c255eacf6b46eb [NTFS]\[root]\Users\$I30
f7136696d38c9f17fccebd0b32be92a6 ce3f9f6c59de8a4231e501cdd76e28ce95421bb3 [NTFS]\[root]\Users\$TXF_DATA
b6ed2da110abb911d1812098d6bfd7e7 2b2ec8d7fdb6fecb83c2c4e095696e0b9234185d [NTFS]\[root]\Users\master\$I30
8cf0f958de8ce85e5a1391902f495c09 1b5e14551aeb6d35ad3d3a102e9c533b60b5418c [NTFS]\[root]\Users\master\$TXF_DATA
620f0b67a91f7f74151bc5be745b7110 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d [NTFS]\[root]\Users\master\Searches\$I30
e7cb8a71790c612d02926c2472c98bcf 7ab04b0271a1f3ca1356f1d90f6fa0ef8efa3507 [NTFS]\[root]\Users\master\Searches\winrt--{S-1-5-21-3200443915-452840459-1364588682-1001}-.searchconnector-ms
0fa26b6c98419b5e7c00efffb5835612 d904d6683a548b03950d94da33cdfccbb55a9bc7 [NTFS]\[root]\Users\master\Searches\Everywhere.search-ms
b6acbeb59959aa5412a7565423ea7bab 4905f02dbef69c830b807a32e9a4b6206bd01dc6 [NTFS]\[root]\Users\master\Searches\Indexed Locations.search-ms
089d48a11bff0df720f1079f5dc58a83 88f1c647378b5b22ebadb465dc80fcfd9e7b97c9 [NTFS]\[root]\Users\master\Searches\desktop.ini
449f2e76e519890a212814d96ce67d64 a316a38e1a8325bef6f68f18bc967b9aaa8b6ebd [NTFS]\[root]\Users\master\Contacts\desktop.ini
42dd3b4cd1411dacae138def128485d4 3dc9575a72ea896a3a910af8f4e43c92939a4421 [NTFS]\[root]\Users\master\3D Objects\desktop.ini
6fc234ad3752e1267b34fb12bcd6718b 7894ec01651ff3fcdf9d117f416875bbaef03b6d [NTFS]\[root]\Users\master\ntuser.ini
59071590099d21dd439896592338bf95 6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c [NTFS]\[root]\Users\master\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-ms
91f440a710f051c4dcd56df3e3eefc40 65d6b0f8946134d4294aec3bda1a64457ec47e5c [NTFS]\[root]\Users\master\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000001.regtrans-ms
1c1e0bfd8891fe80becd6bb2628abd3e 8ca46ceb63712e28ea46b5ecac26df859a54ffe3 [NTFS]\[root]\Users\master\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TM.blf
3b5a64d7d31a2b54dd0b73870ffad6a3 5d657814d35a09c14dad014fd63d322d7c599a73 [NTFS]\[root]\Users\master\ntuser.dat.LOG2
fb213b45e5a06e1ef1245b3dc4f6106d 89d15fdfc186534d16b7559ff8bb8eb50545b06e [NTFS]\[root]\Users\master\ntuser.dat.LOG1
cb5944514fba3adb3e518921d8625a66 6e37b4a20fc5bd80e6696c4b8de86f767c517831 [NTFS]\[root]\Users\master\AppData\$TXF_DATA
d5b895dad18c49a507e71a6a40261552 15c123ba5fdf1b906b9d32f027e56c1d950e505e [NTFS]\[root]\Users\master\AppData\Local\$I30