Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
40e497bc196188b523e706b4ca0d1d00 0d64b1f40fb1412108cc2040dd423bfcd482e51d [NTFS]\[root]\Users\master\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\AC\$I30
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\roaming.lock
a8308d2f3dde0745e8b678bf69a2ecd0 c0ee6155b9b6913c69678f323e2eabfd377c479a [NTFS]\[root]\Users\master\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\settings.dat
620f0b67a91f7f74151bc5be745b7110 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\$I30
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\SystemCertificates\My\AppContainerUserCertRead
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk\rasphone.pbk
5d8c41f18d9bfa156bc98135d17a2357 09779ffbe290fc37f0c3c16df2456fa3ee0154ce [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_c0849ae1-3e4e-4e45-b764-eea6b231d369
051ca68b90f77d7e7eef3201d2a78a3b 4f75b12723cc1ce11c60426a4703d6824ad385a4 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Protect\CREDHIST
a3b83541d4e781ea148ed5168cb829d3 712aecb7d87b5cc97f239ac4589be91d8475cb37 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Protect\S-1-5-21-3200443915-452840459-1364588682-1001\Preferred
c5595046a98d6576c09c312c66525386 5b7e8006fb71deba92a21bd52972eb70696e4eb3 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Protect\S-1-5-21-3200443915-452840459-1364588682-1001\3ef54612-dfe2-49b5-bf86-68c03917a660
b76acf41edd2bd1b486c51aff0868a04 a31ac53552332ec9453a6623c301a4617dae31d3 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\$I30
e144e326878c3f74cd1e1921f7cc6cd0 a7326344994fbb8edce4d52d4a95a90dbe9a577c [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk
5739ddee167d55bbc4e313d778724a2b c0bff8120f033ed78dcbb8729fc7a42f015e878e [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini
f727cbb9351106b2dd46f3ef649f3176 5732055ec636a4706c6da6857ce1c1ebc1bc86e5 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk
1e0fb6a1272cc24fd3637dea5718c107 222757bd060c53e4ccac20d68e12a618bad01acf [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk
623a388da0f5a5c9892d3eabf1bbd52a 1e2f6397843c518728affeb462127d70eab34e91 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
325b790bc93ad8d27655c44365b485c0 50b633a4ca28210ca882467cbc0d717d3283ac75 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
dd26c664f5264c672b6c4c260ed79c73 b118670620d7214224c7ed2dc14ee67d7a49c044 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
4c8560ee2e9042a6a4cfbbed3ba5bf76 b449d2147c424406153e87adce41750a1ff291ff [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Windows\$I30
9e5b04766a4fcdff205bef06feefd574 9cac0bc98a4608524f7d8a328009594f03ec1a56 [NTFS]\[root]\Users\master\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper