Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
ba6c56e0cae17f559a9ac906210c7a70 d05a3041155346b199fc2d9d5fb7244fa913c447 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
ccd67d604c43b92ff965288cca8bf233 f5fe794cec0802209008ce83dcca8b4c7efb7d59 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl
cf32680fbc7e0f89960ac9d8a57744e3 8e6595b6026198074882c6eed4c8ca45f2ce55dc [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Notifications\$I30
9922a9b86167a37ad93eb11cf2be8088 b162574d805b5c0b6c165bc1d97b9685395379b1 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal
f23fc04bdbd6fb46a2191b064561d3d1 b3e1a8352bae0ec37a4e4146847e4e5e0d57c4a1 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp
59071590099d21dd439896592338bf95 6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat{db44afac-10fc-11f0-b90b-08002786d04f}.TMContainer00000000000000000002.regtrans-ms
4673b54e6bfb8e3b476687bf3832dfaf 6b6f2b0bac3765f502b1fdf51d1a925dbe639ca0 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat{db44afac-10fc-11f0-b90b-08002786d04f}.TMContainer00000000000000000001.regtrans-ms
ad3f3c339ba68674e699d60967ec3be6 56c0abe7c4542519228b02cea610193353b0525e [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat{db44afac-10fc-11f0-b90b-08002786d04f}.TM.blf
d3b0c5f08eea3b495d297119263aa956 a86aabdbf162f5457b6211aa81b03489f55a9cf3 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1
70a657e8ebafc8479c8d3dec85104dc8 48e4bc2357595b7a8596b67b78a62c8ada454878 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat
d34c26423009e5802e4eb9bdb8a0c4ec 7150e7c73999d46e9e75580f677b57da78df6cba [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml
fb99c516cba2f334dd31dbfae0a1b9a7 8063d824fa4163200fac5258e9ba79d18849e4f1 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
22f192fb4c42df0a72a2fa00f41ce01a 812043cf5560b200a6460a8d961eb1f0aba4595f [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
c59f7fc39ab6e3766bd1cb1018fb16c1 1ea42d67ce1f0b7358f872396e16f1956559bd34 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\$I30
b563f4d5e49d52ec85c83c2dd1d52a44 2e1f159f61c0caeb393bfe454b5638f19151e0e4 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk
c5366879141b580c4d525e5641ac19c3 510d0e63acaed1977cf778ca89d0d68e0ff987f6 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk
5aeef797f4ce51683f3321c337ae9d85 9255e9042d130c504645a64beed00d4a4c233fd8 [NTFS]\[root]\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk