Windows 디렉토리/파일 검색

Windows 아티팩트 검색

MD5SHA1경로(파일명)
4dfbb099eafd3c82e033bf92946d3ce6 92379cbb8ecf696194b47b619a87e9e4f9a75db2 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail
1c9863430ed4cfe5592196d31328c1e4 7b07c729d2e7c932f8b364c9581b8641d41adc4b [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk
4af9e982fc27ce9d7eaa756e71e73042 56fd2cfe1b5a5379701abc1bb80d06c3bf4aeec3 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini
b2c79ad7dcf03ba266dc0885e1266675 3b5a9f7948a58d58bd432360863a719c95485504 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink
963ab0bbea32f1f9d19afb00d08be14d aec742c8cd57ac5fee0ad76b17e91c6d76608cb3 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget
c5249ed6a7a7bd60b91929083f4c4d6b 2e146eabc637a396f233d8858e708cb1d1be2e0d [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\$I30
dd26c664f5264c672b6c4c260ed79c73 b118670620d7214224c7ed2dc14ee67d7a49c044 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
325b790bc93ad8d27655c44365b485c0 50b633a4ca28210ca882467cbc0d717d3283ac75 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
623a388da0f5a5c9892d3eabf1bbd52a 1e2f6397843c518728affeb462127d70eab34e91 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
b5079796292c46ed62d9994ba0f6953b 62a98f53de981c42047a417432b0692c2c5b4e35 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\$I30
0e976c2c48d6ebc625dc81e96c3d10a0 b04380f36c59fee58db6191bf91ce0a0e38c3132 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\$I30
a8cfb1631bdcccfa8c10cbf5c246e01e fcb14b34ab4295f2e982c43b7e780167d2d98cab [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\L.master.cdp
5c1965808db61ec5ff66e28bab97061b 3965300d6982103b5e16797e17646114eca10ac0 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\L.defaultuser0.cdp
375e6720995ce3ff3fb4a8300a321aac b4eff11ec5b140a3e0faee0bd9eabd3be10c0bb5 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst
19963e2e42637f518efab6db92be062a cc9ba401d0238c22e199a34e274d267ffe762f2e [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp
2356d34bc6faf23f1b5dbd5d84bc79b8 e485e3034470553bc6cd65b6fa003587158fcb08 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\$I30
5d52c133dbb0c7dda6de26ed1ca2c54d d61596a342190277c0440fb1eaa096e22ec92a23 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-FontSet-S-1-5-21-3200443915-452840459-1364588682-1001.dat
96995b58d4cbf6aaa9041b4f00c7f6ae 5fde1cce603e6566d20da811c9c8bcccb044d4ae [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-21-3200443915-452840459-1364588682-1001.dat
e4c9d94be74e9d4521b39bacdd274204 b088819bcddfd9a0103d8e0c7e0dc759c3877495 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-S-1-5-21-3200443915-452840459-1364588682-1000.dat
f9802641034b7fb8c6a8ff2cbdecc96d ca08a30e471d2a18ad5dc492df4c124be4d13d93 [NTFS]\[root]\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-21-3200443915-452840459-1364588682-1000.dat