; Directories
Sources\
Windows\Boot\Fonts\
Windows\Boot\Resources\
Windows\Fonts\
Windows\inf\
Windows\servicing\
Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
Windows\system32\Dism\
Windows\system32\downlevel\
Windows\system32\driverstore\
Windows\system32\drivers\
Windows\system32\en-US\
Windows\system32\migration\
Windows\system32\SMI\
Windows\WinSxS\*_microsoft-windows-riched32*\
Windows\WinSxS\*_microsoft-windows-servicingstack*\
Windows\WinSxS\*_microsoft.windows.common-controls*\
Windows\WinSxS\*_microsoft.windows.gdiplus*\
Windows\WinSxS\*_microsoft.windows.isolationautomation*\


; Files
Windows\Globalization\Sorting\SortDefault.nls
Users\Default\NTUSER.DAT
Windows\*.ini
Windows\bfsvc.exe
Windows\regedit.exe

Windows\System32\config\BBI
Windows\System32\config\BCD-Template
Windows\System32\config\COMPONENTS
Windows\System32\config\DEFAULT
Windows\System32\config\DRIVERS
Windows\System32\config\ELAM
Windows\System32\config\FP
Windows\System32\config\SAM
Windows\System32\config\SECURITY
Windows\System32\config\SYSTEM
Windows\System32\config\SOFTWARE

Windows\Boot\EFI\*.efi
Windows\Boot\EFI\*.stl

Windows\system32\*.cmd
Windows\system32\*.com
Windows\system32\*.nls

Windows\system32\aclui.dll
Windows\system32\activeds.dll
Windows\System32\activeds.tlb
Windows\system32\adsldpc.dll
Windows\system32\advapi32.dll
Windows\system32\advapi32res.dll
Windows\system32\advpack.dll
Windows\system32\api-ms-*.dll
Windows\system32\apisetschema.dll
Windows\system32\atl.dll
Windows\system32\atmlib.dll
Windows\system32\attrib.exe
Windows\system32\authui.dll
Windows\system32\authz.dll
Windows\system32\autochk.exe
; Win8
Windows\system32\autoconv.exe
Windows\system32\auxiliarydisplayclassinstaller.dll

Windows\System32\asycfilt.dll
Windows\system32\basesrv.dll
Windows\system32\bcd.dll
Windows\system32\bcdboot.exe
Windows\system32\bcdedit.exe
Windows\system32\bcdprov.dll
Windows\system32\bcdsrv.dll
Windows\System32\bcp47langs.dll
Windows\system32\bcrypt.dll
Windows\system32\bcryptprimitives.dll
Windows\System32\bfe.dll
Windows\system32\blbres.dll
Windows\system32\blb_ps.dll
Windows\system32\bmrui.exe
Windows\system32\bootcfg.exe
Windows\system32\bootmenuux.dll
Windows\system32\bootrec.exe
Windows\system32\bootsect.exe
Windows\system32\bootstr.dll
Windows\system32\bootux.dll
Windows\system32\bootvid.dll
Windows\System32\Boot\??-??\winload.efi.mui
Windows\System32\Boot\??-??\winload.exe.mui
Windows\System32\Boot\winload.efi
Windows\System32\Boot\winload.exe
Windows\system32\browcli.dll
Windows\system32\browseui.dll
Windows\system32\cabinet.dll
Windows\system32\cdd.dll
Windows\system32\certca.dll
Windows\system32\certcli.dll
Windows\system32\cfgmgr32.dll
Windows\system32\chkdsk.exe
Windows\system32\chkntfs.exe
Windows\system32\chkwudrv.dll
Windows\system32\ci.dll
Windows\system32\clb.dll
Windows\system32\clusapi.dll
Windows\system32\cmd.exe
Windows\system32\cmdext.dll
Windows\System32\cmifw.dll
Windows\system32\cmipnpinstall.dll
Windows\system32\cnvfat.dll
Windows\system32\CodeIntegrity\driver.stl
Windows\system32\combase.dll
Windows\system32\comcat.dll
Windows\system32\comdlg32.dll
Windows\system32\comres.dll

Windows\system32\conhost.exe
Windows\system32\console.dll
Windows\system32\convert.exe
Windows\system32\credui.dll
Windows\system32\crypt32.dll
Windows\system32\cryptbase.dll
Windows\system32\cryptdlg.dll
Windows\system32\cryptdll.dll
Windows\system32\cryptext.dll
Windows\System32\cryptnet.dll
Windows\system32\cryptsp.dll
Windows\system32\cryptsvc.dll
Windows\system32\cryptui.dll
Windows\system32\cryptxml.dll
Windows\system32\cscript.exe
Windows\system32\csrsrv.dll
Windows\system32\csrss.exe
Windows\system32\csystemeventsbrokerclient.dll
Windows\system32\d2d1.dll
Windows\system32\dab.dll
Windows\system32\dabapi.dll
Windows\system32\dbgeng.dll
Windows\system32\dbghelp.dll
Windows\system32\defragproxy.dll
Windows\system32\defragsvc.dll
Windows\system32\devobj.dll
Windows\system32\devrtl.dll
Windows\system32\dfscli.dll
Windows\System32\dhcpcmonitor.dll
Windows\System32\dhcpcore.dll
Windows\System32\dhcpcore6.dll
Windows\System32\dhcpqec.dll

Windows\system32\dhcpcsvc.dll
Windows\system32\dhcpcsvc6.dll
Windows\system32\diskpart.exe
Windows\system32\diskraid.exe
Windows\system32\dism.exe
Windows\system32\dismapi.dll
Windows\system32\dispci.dll
Windows\system32\dispex.dll
Windows\system32\dllhost.exe
Windows\system32\dllhst3g.exe
Windows\system32\dnsapi.dll
Windows\System32\dnsrslvr.dll
Windows\System32\doskey.exe
Windows\system32\dpapi.dll
Windows\system32\dpapisrv.dll
Windows\system32\drvcfg.exe
Windows\system32\drvinst.exe
Windows\system32\drvload.exe
Windows\system32\drvstore.dll
Windows\system32\dskquota.dll
Windows\system32\dsparse.dll
Windows\system32\dsrole.dll
Windows\system32\dssenh.dll
Windows\system32\dui70.dll
Windows\system32\duser.dll
Windows\system32\dwmapi.dll
Windows\System32\dwrite.dll
Windows\system32\dxgwdi.dll

Windows\System32\eap3host.exe
Windows\System32\eapp3hst.dll
Windows\System32\eappcfg.dll
Windows\System32\eappgnui.dll
Windows\System32\eapphost.dll
Windows\System32\eappprxy.dll
Windows\System32\eapprovp.dll
Windows\System32\eapqec.dll


Windows\System32\eapsvc.dll
Windows\system32\esent.dll
Windows\system32\esentutl.exe
Windows\system32\EventAggregation.dll
Windows\system32\eventcls.dll
Windows\system32\expand.exe
Windows\system32\ext-ms-*.dll
Windows\system32\fbwflib.dll
Windows\system32\feclient.dll
Windows\system32\find.exe
Windows\system32\firewallapi.dll
Windows\system32\fltlib.dll
Windows\system32\fltmc.exe
Windows\system32\fmifs.dll
Windows\system32\fms.dll
Windows\system32\fontsub.dll
Windows\System32\framedynos.dll
; Win 8
Windows\system32\framedyn.dll

Windows\system32\fsutilext.dll
Windows\system32\ftp.exe
Windows\system32\fveapi.dll
Windows\System32\fveui.dll
Windows\system32\fvecerts.dll
Windows\system32\fwpuclnt.dll
Windows\System32\fwremotesvr.dll
Windows\system32\gdi32.dll
Windows\system32\gdiplus.dll
Windows\system32\gpapi.dll
Windows\system32\gpsvc.dll
Windows\system32\hal.dll
Windows\system32\halextintclpiodma.dll
Windows\system32\halextintcuartdma.dll
Windows\system32\halmacpi.dll
Windows\system32\hhctrl.ocx
Windows\System32\hhsetup.dll
Windows\System32\httpapi.dll
Windows\system32\hid.dll
Windows\system32\hidserv.dll
Windows\system32\hostname.exe
Windows\system32\icacls.exe
Windows\System32\icfupgd.dll
Windows\System32\icmp.dll
Windows\system32\iertutil.dll
Windows\system32\ifmon.dll
Windows\system32\ifsutil.dll
Windows\system32\ifsutilx.dll
Windows\System32\ikeext.dll
Windows\system32\imagehlp.dll
Windows\system32\imageres.dll
Windows\system32\imagesp1.dll
Windows\system32\imapi.dll
Windows\system32\imapi2.dll
Windows\system32\imapi2fs.dll
Windows\system32\imm32.dll
Windows\System32\inetmib1.dll
Windows\system32\input.dll
Windows\System32\ipconfig.exe
Windows\system32\iphlpapi.dll
Windows\System32\ipsecsvc.dll
Windows\System32\iscsilog.dll
Windows\system32\jscript.dll
Windows\system32\jscript9.dll
Windows\System32\jscript9diag.dll
Windows\system32\jsproxy.dll
Windows\system32\kbd*.dll
Windows\system32\kd.dll
Windows\system32\kdcom.dll
Windows\system32\kdscli.dll
Windows\system32\kdusb.dll
Windows\System32\keyiso.dll
Windows\system32\kerberos.dll
Windows\System32\kernel.appcore.dll
Windows\system32\kernel32.dll
Windows\system32\kernelbase.dll
Windows\system32\kmddsp.tsp
Windows\system32\ktmw32.dll
Windows\system32\linkinfo.dll
Windows\System32\lmhsvc.dll
Windows\system32\loadperf.dll
Windows\system32\logoncli.dll
Windows\system32\lpk.dll
Windows\system32\lsasrv.dll
Windows\system32\lsass.exe
Windows\system32\lsm.dll
Windows\system32\luainstall.dll
Windows\system32\lz32.dll
Windows\System32\migration\netiomig.dll
Windows\system32\mcbuilder.exe
Windows\system32\mdsched.exe
Windows\system32\mfc42.dll
Windows\system32\mfc42u.dll
Windows\system32\montr_ci.dll
Windows\system32\mountvol.exe
Windows\system32\mpr.dll
Windows\system32\mprapi.dll
Windows\System32\mprext.dll
Windows\System32\mprmsg.dll
Windows\System32\mpssvc.dll
Windows\System32\msafd.dll
Windows\System32\msaudite.dll
Windows\system32\msasn1.dll

Windows\system32\msctf.dll
Windows\system32\msftedit.dll
Windows\system32\msiltcfg.dll
Windows\system32\msimg32.dll
Windows\system32\msls31.dll
Windows\system32\msports.dll
Windows\system32\msprivs.dll
Windows\System32\msscript.ocx
Windows\system32\mssign32.dll
Windows\system32\msv1_0.dll
Windows\system32\msvcirt.dll
Windows\system32\msvcp60.dll
Windows\system32\msvcrt.dll
Windows\system32\msvcrt40.dll
Windows\system32\mswsock.dll
Windows\system32\msxml3.dll
Windows\system32\msxml3r.dll
Windows\system32\msxml6.dll
Windows\system32\msxml6r.dll
Windows\system32\mtxdm.dll
Windows\system32\muiunattend.exe
Windows\System32\nbtstat.exe

Windows\system32\nci.dll
Windows\System32\ncsi.dll
Windows\System32\ncryptprov.dll
Windows\System32\ncryptsslp.dll
Windows\system32\ncobjapi.dll
Windows\System32\ncpa.cpl
Windows\system32\ncrypt.dll
Windows\system32\ndadmin.exe
Windows\system32\net.exe
Windows\system32\net1.exe
Windows\system32\netapi32.dll
Windows\System32\netbios.dll
Windows\System32\netcfg.exe
Windows\System32\netcfgx.dll
Windows\System32\netbtugc.exe
Windows\System32\neth.dll
Windows\System32\netiougc.exe
Windows\System32\netiohlp.dll
Windows\system32\netjoin.dll
Windows\System32\netlogon.dll
Windows\System32\netman.dll
Windows\system32\netmsg.dll
Windows\system32\netprovisionsp.dll
Windows\system32\NetSetupApi.dll
Windows\System32\netsh.exe
Windows\System32\netshell.dll
Windows\system32\netstat.exe
Windows\system32\netutils.dll
Windows\system32\newdev.dll
Windows\system32\newdev.exe
Windows\system32\ninput.dll
Windows\system32\nlaapi.dll
Windows\system32\nlasvc.dll
Windows\system32\normaliz.dll
Windows\system32\notepad.exe
Windows\system32\nrpsrv.dll
Windows\System32\nshwfp.dll
Windows\system32\nsi.dll
Windows\system32\nsisvc.dll
Windows\system32\ntasn1.dll
Windows\system32\ntdll.dll
Windows\system32\ntdsapi.dll
Windows\system32\ntlanman.dll
Windows\system32\ntmarta.dll
Windows\system32\ntoskrnl.exe
Windows\system32\ntshrui.dll
Windows\system32\odbc32.dll
Windows\system32\odbcint.dll
Windows\system32\ole32.dll
Windows\system32\oleacc.dll
Windows\System32\oleacchooks.dll
Windows\system32\oleaccrc.dll
Windows\system32\oleaut32.dll
Windows\system32\olepro32.dll
Windows\system32\openwith.exe
Windows\system32\osuninst.dll
Windows\system32\pcwum.dll
Windows\system32\ping.exe
Windows\system32\pkgmgr.exe
Windows\system32\pnpui.dll
Windows\System32\polstore.dll
Windows\system32\poqexec.exe
Windows\system32\powrprof.dll
Windows\System32\print.exe
Windows\system32\procinst.dll
Windows\system32\profapi.dll
Windows\system32\profext.dll
Windows\System32\profsvc.dll
Windows\system32\propsys.dll
Windows\system32\provthrd.dll
Windows\system32\prvdmofcomp.dll
Windows\system32\psapi.dll
Windows\system32\pshed.dll
Windows\system32\psmodulediscoveryprovider.dll
Windows\system32\psmodulediscoveryprovider.mof
Windows\system32\qutil.dll
Windows\system32\rasadhlp.dll
Windows\system32\rasapi32.dll
Windows\System32\rascfg.dll
Windows\system32\rasman.dll
Windows\system32\reagent.dll
Windows\system32\recover.exe
Windows\system32\reg.exe
Windows\system32\regapi.dll
Windows\system32\regedt32.exe
Windows\system32\register-cimprovider.exe
Windows\system32\regsvr32.exe
Windows\system32\ReInfo.dll
Windows\system32\replace.exe
Windows\system32\resutils.dll
Windows\System32\ResetEng.dll
Windows\system32\riched20.dll
Windows\system32\riched32.dll
Windows\system32\rnr20.dll
Windows\system32\robocopy.exe
Windows\system32\route.exe
Windows\system32\rpcepmap.dll
Windows\system32\rpcrt4.dll
Windows\system32\rpcrtremote.dll
Windows\system32\rpcss.dll
Windows\system32\rsaenh.dll
Windows\system32\rstrui.exe
Windows\system32\rtutils.dll
Windows\system32\rundll32.exe
Windows\system32\sacsess.exe
Windows\system32\sacsvr.dll
Windows\system32\samcli.dll
Windows\system32\samlib.dll
Windows\system32\samsrv.dll
Windows\system32\scecli.dll
Windows\system32\scesrv.dll
Windows\system32\scext.dll
Windows\system32\schannel.dll
Windows\system32\schedcli.dll
Windows\system32\schema.dat
Windows\system32\scrobj.dll
Windows\system32\scrrun.dll
Windows\system32\sdhcinst.dll
Windows\system32\sechost.dll
Windows\system32\secur32.dll
Windows\system32\security.dll
Windows\system32\sensapi.dll
Windows\system32\services.exe
Windows\system32\setbcdlocale.dll
Windows\System32\Setup.bmp
Windows\system32\setupapi.dll
Windows\system32\sfc.dll
Windows\system32\sfc.exe
Windows\system32\sfc_os.dll
Windows\system32\shcore.dll
Windows\system32\shell32.dll
Windows\system32\shlwapi.dll
Windows\system32\slc.dll
Windows\System32\smbwmiv2.dll
Windows\system32\smiengine.dll
Windows\system32\smphost.dll
Windows\system32\smss.exe
Windows\system32\snmpapi.dll
Windows\system32\spfileq.dll
Windows\system32\spinf.dll
Windows\system32\spp.dll
Windows\system32\sppc.dll
Windows\system32\sqmapi.dll
Windows\system32\srclient.dll
Windows\system32\srcore.dll
Windows\system32\srhelper.dll
Windows\system32\srms.dat
Windows\system32\srvcli.dll
Windows\System32\srvsvc.dll
Windows\System32\sscore.dll
Windows\system32\sspicli.dll
Windows\system32\sspisrv.dll
Windows\system32\ssshim.dll
Windows\System32\sstpsvc.dll
Windows\system32\stdole2.tlb
Windows\system32\stdole32.tlb
Windows\system32\storprop.dll
Windows\system32\streamci.dll
Windows\system32\subst.exe
Windows\system32\svchost.exe
Windows\System32\swprv.dll
Windows\system32\sxproxy.dll
Windows\system32\sxs.dll
Windows\system32\sxshared.dll
Windows\system32\sxssrv.dll
Windows\system32\sxstrace.exe
Windows\system32\sysclass.dll
Windows\system32\sysntfy.dll
Windows\system32\sysreset.exe
Windows\system32\syssetup.dll
Windows\system32\systemeventsbrokerserver.dll
Windows\system32\takeown.exe
Windows\system32\tapi32.dll
Windows\System32\taskmgr.exe
Windows\System32\tcpipcfg.dll
Windows\System32\tcpipsetup.dll
Windows\System32\tcpmib.dll

Windows\System32\tcpsvcs.exe
Windows\system32\tdh.dll
Windows\system32\tracert.exe
Windows\system32\tsddd.dll
Windows\System32\ttlsauth.dll
Windows\System32\ttlscfg.dll

Windows\system32\tzres.dll

Windows\system32\ucsvc.exe
Windows\system32\uexfat.dll
Windows\system32\ufat.dll
Windows\System32\UIAutomationCore.dll
Windows\system32\ulib.dll
Windows\system32\umpnpmgr.dll
Windows\system32\umpo.dll
Windows\system32\unattend.dll
Windows\system32\untfs.dll
Windows\system32\urefs.dll
Windows\system32\ureg.dll
Windows\system32\urlmon.dll
Windows\system32\user32.dll
Windows\system32\userenv.dll
Windows\system32\userinit.exe
Windows\system32\userinitext.dll
Windows\system32\usp10.dll
Windows\system32\utildll.dll
Windows\system32\uudf.dll
Windows\system32\uxinit.dll
Windows\system32\uxtheme.dll
Windows\system32\vbscript.dll
Windows\system32\vdmdbg.dll
Windows\system32\vds.exe
Windows\system32\vdsbas.dll
Windows\system32\vdsdyn.dll
Windows\system32\vdsldr.exe
Windows\system32\vdsutil.dll
Windows\system32\vdsvd.dll
Windows\system32\vds_ps.dll
Windows\System32\vss_ps.dll
Windows\system32\verifier.dll
Windows\system32\verifier.exe
Windows\system32\version.dll
Windows\system32\virtdisk.dll
Windows\system32\vpnikeapi.dll
Windows\system32\vssapi.dll
Windows\system32\vsstrace.dll
Windows\System32\vssvc.exe
Windows\system32\w32time.dll
Windows\system32\w32topl.dll
Windows\system32\wbadmin.exe
Windows\system32\wbemcomn.dll
Windows\system32\wbem\*.*
Windows\system32\wbem\xml\*.*
Windows\system32\wbengine.exe
Windows\system32\wdigest.dll
Windows\system32\wdscapture.exe
Windows\system32\wdsclient.exe
Windows\system32\wdscore.dll
Windows\system32\wdsmcast.exe
Windows\system32\webio.dll
Windows\system32\webservices.dll
Windows\System32\websocket.dll
Windows\system32\wer.dll
Windows\system32\wermgr.exe
Windows\system32\werui.dll
Windows\system32\wevtapi.dll
Windows\system32\wevtsvc.dll
Windows\system32\wevtutil.exe
Windows\System32\wfapigp.dll
Windows\system32\wimgapi.dll
Windows\system32\wimserv.exe
Windows\system32\win32k.sys
Windows\system32\winbio.dll
Windows\system32\winbrand.dll
Windows\system32\wincorlib.dll
Windows\system32\windows.devices.humaninterfacedevice.dll
Windows\system32\windowscodecs.dll
Windows\system32\winhttp.dll
Windows\system32\wininet.dll
Windows\system32\wininit.exe
Windows\system32\wininitext.dll
Windows\System32\winipsec.dll
Windows\System32\winsockhc.dll

Windows\system32\winload.exe
Windows\system32\winlogon.exe
Windows\system32\winlogonext.dll
Windows\system32\winmm.dll
Windows\system32\winmmbase.dll
Windows\system32\winnsi.dll
Windows\system32\winpeshl.exe
Windows\system32\WinSCard.dll
Windows\system32\winspool.drv
Windows\system32\winsrv.dll
Windows\system32\winsta.dll
Windows\system32\wintrust.dll
Windows\system32\wkscli.dll
Windows\system32\wkssvc.dll
Windows\System32\wlanutil.dll
Windows\system32\wldap32.dll
Windows\system32\wldp.dll
Windows\system32\wmi.dll
Windows\system32\wmiclnt.dll
Windows\system32\wmicmiplugin.dll
Windows\system32\wmidcom.dll
Windows\system32\wmimgmt.msc
Windows\system32\wmiprop.dll
Windows\system32\wmitomi.dll
Windows\system32\wmsgapi.dll
Windows\System32\workerdd.dll
Windows\system32\wpeinit.exe
Windows\system32\wpeutil.dll
Windows\system32\wpeutil.exe
Windows\system32\ws2help.dll
Windows\System32\wshelper.dll
Windows\System32\wshnetbs.dll


Windows\system32\ws2_32.dll
Windows\system32\wscript.exe
Windows\system32\wshcon.dll
Windows\system32\wship6.dll
Windows\system32\wshom.ocx
Windows\system32\wshtcpip.dll
Windows\system32\wsock32.dll
Windows\system32\wtsapi32.dll
Windows\system32\xcopy.exe
Windows\system32\xmllite.dll
Windows\WindowsShell.Manifest



Windows\WinSxS\manifests\*_microsoft-windows-a..core-base.resources*
Windows\WinSxS\manifests\*_microsoft-windows-blb-engine*
Windows\WinSxS\manifests\*_microsoft-windows-blb-winpe*
Windows\WinSxS\manifests\*_microsoft-windows-comdlg32_31bf3856ad364e35_6.3.9600.16384*
Windows\WinSxS\manifests\*_microsoft-windows-comdlg32_31bf3856ad364e35_6.2.9200.16384_none_*
Windows\WinSxS\manifests\*_microsoft-windows-p..al-securitytemplate*
Windows\WinSxS\manifests\*_microsoft-windows-riched32*
Windows\WinSxS\manifests\*_microsoft-windows-servicingstack*
Windows\WinSxS\manifests\*_microsoft-windows-servicingstack-admin*
Windows\WinSxS\manifests\*_microsoft-windows-servicingstack-ds*
Windows\WinSxS\manifests\*_microsoft-windows-servicingstack-msg*
Windows\WinSxS\manifests\*_microsoft-windows-servicingstack-net*
Windows\WinSxS\manifests\*_microsoft.windows.common-controls*
Windows\WinSxS\manifests\*_microsoft.windows.fusion_components_all*
Windows\WinSxS\manifests\*_microsoft.windows.gdiplus*
Windows\WinSxS\manifests\*_microsoft.windows.i..utomation.proxystub*
Windows\WinSxS\manifests\*_microsoft.windows.isolationautomation*
Windows\WinSxS\manifests\*_microsoft.windows.m..gual_components_all*
Windows\WinSxS\manifests\*_microsoft.windows.s...smart_card_library*
Windows\WinSxS\manifests\*_microsoft.windows.s..ation.badcomponents*
Windows\WinSxS\manifests\*_microsoft.windows.s..rt_driver.resources*
Windows\WinSxS\manifests\*_microsoft.windows.s..se.scsi_port_driver*
Windows\WinSxS\manifests\*_microsoft.windows.systemcompatible*
