Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
22f192fb4c42df0a72a2fa00f41ce01a 812043cf5560b200a6460a8d961eb1f0aba4595f [NTFS]\[root]\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
d34c26423009e5802e4eb9bdb8a0c4ec 7150e7c73999d46e9e75580f677b57da78df6cba [NTFS]\[root]\Users\Default\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml
69c1753bd5f81501d95132d08af04464 b0aa4b549f325cca9c9dfa6ce1bd6072aeaeac71 [NTFS]\[root]\Users\Default\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml\$DSC
1729135adbb9c58c353edb8219028af4 551197226b9443f46a74f909608efdae91209ef6 [NTFS]\[root]\ProgramData\$I30
66ba4d42436beaea68ad55823d42b9e8 341946ac9e98f3ce02ffa069a7c59aea2afc3c7a [NTFS]\[root]\ProgramData\$TXF_DATA
d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 [NTFS]\[root]\ProgramData\Microsoft OneDrive\setup\refcount.ini
974df3e5bbdc2572471e3dc4e60dddf0 70563d986512283842193baeea5d8ff66ddf5b01 [NTFS]\[root]\ProgramData\USOShared\Logs\System\$I30
f6e80dcdfa49f5661ed5f5566fb3b314 cbfbcdeb27d61fb830eb6817745125dc2617f075 [NTFS]\[root]\ProgramData\USOShared\Logs\System\WuProvider.a7868878-7b7d-4715-8278-e664007a1640.1.etl
325d511ac4a67c647397bb25bf549294 824dd2ade4476d7f09e7e3cdf9babcb429edae1d [NTFS]\[root]\ProgramData\USOShared\Logs\System\MoUsoCoreWorker.93931bf6-52e5-4c47-8c89-b195e8effe41.1.etl
27d6cf45454f31afb3f0980e0fd06e80 1b9f6c52d89a1fbdac99b83114d8600bc5234c44 [NTFS]\[root]\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.2b1e90d3-30e3-43cf-9753-3c641f16b44c.1.etl
1f19b959ac41c496d0be64cfd5c0e3b4 c1625af1e4237288a7d6f5819d27a8ad580f1b64 [NTFS]\[root]\ProgramData\USOPrivate\UpdateStore\store.db
cab432c4918e1cff493c9668b2338104 5af4f50a5602b03eaba1c986b7bc7a69d3ca0544 [NTFS]\[root]\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag
7d378e69198516f230bd0df8a557e9cd c3a57c43d4cc1e2eeb07caafe4384368470035a0 [NTFS]\[root]\ProgramData\Microsoft\$I30
f5e4c132fdcb44678be7b09244bf137f aa18e5d1f159f78c0abfc59d7ec57ef49c1bb503 [NTFS]\[root]\ProgramData\Microsoft\$TXF_DATA
4f06081684ea1d34e34885a8525bb63d 9bb4cca38aef4a46bff4868cd28dce0498495b34 [NTFS]\[root]\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\$I30
ab986867453ba545065d309fdb814746 c72a4994fba9f999e93629a14e9ca56da05cad60 [NTFS]\[root]\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_Autopilot_2025_4_4_11_32_0.etl
212d13aef3f2deb3a461accbf8761b5f a00df5a33156954162d97104e133ab4cf12f755f [NTFS]\[root]\ProgramData\Microsoft\DiagnosticLogCSP\Collectors\DiagnosticLogCSP_Collector_DeviceProvisioning_2025_4_4_11_30_35.etl
52a1eee7f156112763300ae4258e1b25 5079fcf69d990a4a6df4df306afe8fb008260f60 [NTFS]\[root]\ProgramData\Microsoft\Search\Data\Applications\Windows\$I30
b6d81b360a5672d80c27430f39153e2c 3b71f43ff30f4b15b5cd85dd9e95ebc7e84eb5a3 [NTFS]\[root]\ProgramData\Microsoft\Search\Data\Applications\Windows\edbtmp.jtx
7fa1ed2e53f3d973ac586c289ec7c54d a45b2e757c1e89af6ed964af5d861672b63a9645 [NTFS]\[root]\ProgramData\Microsoft\Search\Data\Applications\Windows\edb.jtx