Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
620f0b67a91f7f74151bc5be745b7110 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Notifications\$I30
bb7df04e1b0a2570657527a7e108ae23 5188431849b4613152fd7bdba6a3ff0a4fd6424b [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm
3edf10b1bb217489b4034bd55dc7a675 00b91a996f83d8f36d63607f98bc051bcacacda5 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal
11b50af13db90c6d9d318889a595568e e83a2afcf106ef8d8d64b06cea89d7a47c1e0153 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp
59071590099d21dd439896592338bf95 6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat{db44b05c-10fc-11f0-b90b-08002786d04f}.TMContainer00000000000000000002.regtrans-ms
41aa55ac1241f50dfbfe8c360ebb4a08 b5237a4027c681909293b39b38c725cc4a90d2f5 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat{db44b05c-10fc-11f0-b90b-08002786d04f}.TMContainer00000000000000000001.regtrans-ms
2365aa5b7561e56d1d2aae9eb1be15b6 ab28bd2461ff002b4d3f77714fdf134e9c3f5840 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat{db44b05c-10fc-11f0-b90b-08002786d04f}.TM.blf
e5dda7cffe8f31979681fd261088152d aec4c0c9dd3a071e9c832aa6cc6d9d9f066f5a01 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2
aecd248ee9ce14aeaf5c3b20e7e428e2 b19051dac1596e549bcdf064f6eced42bca534be [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1
25b27dcf1a9b61dcbcce91799c16b995 54c2fc6ec03a0b568d16c4a25ab2ed65e97047f6 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\UsrClass.dat
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\INetCookies\ESE\container.dat
d34c26423009e5802e4eb9bdb8a0c4ec 7150e7c73999d46e9e75580f677b57da78df6cba [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml
fb99c516cba2f334dd31dbfae0a1b9a7 8063d824fa4163200fac5258e9ba79d18849e4f1 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
22f192fb4c42df0a72a2fa00f41ce01a 812043cf5560b200a6460a8d961eb1f0aba4595f [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
5d0c11f757575db1617708447a3d73d2 e7d3516a0b72e4c2f6d01a9685467753a2bd3805 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\WinX\Group2\$I30
b563f4d5e49d52ec85c83c2dd1d52a44 2e1f159f61c0caeb393bfe454b5638f19151e0e4 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk
c5366879141b580c4d525e5641ac19c3 510d0e63acaed1977cf778ca89d0d68e0ff987f6 [NTFS]\[root]\Users\master\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk