﻿; Directories
//Program Files\Internet Explorer\
//Program Files\Microsoft.NET\RedistList\
Program Files\Windows Photo Viewer\
Program Files\Windows NT\Accessories\
//ProgramData\Microsoft\Windows\DeviceMetadataStore\

Windows\Assembly\
Windows\inf\TAPISRV\
Windows\L2Schemas\
Windows\Media\
Windows\Microsoft.NET\
Windows\Resources\Ease of Access Themes\
Windows\Resources\Themes\
Windows\schemas\
Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\
Windows\System32\DriverStore\FileRepository\atiilhag.inf_*\
Windows\System32\DriverStore\FileRepository\audioendpoint.inf_*\
Windows\System32\DriverStore\FileRepository\basicdisplay.inf_*\
Windows\System32\DriverStore\FileRepository\basicrender.inf_*\
Windows\System32\DriverStore\FileRepository\bda.inf_*\
Windows\System32\DriverStore\FileRepository\c_display.inf_*\
Windows\System32\DriverStore\FileRepository\c_media.inf_*\
Windows\System32\DriverStore\FileRepository\c_mediumchanger.inf_*\
Windows\System32\DriverStore\FileRepository\c_memory.inf_*\
Windows\System32\DriverStore\FileRepository\c_monitor.inf_*\
Windows\System32\DriverStore\FileRepository\c_multifunction.inf_*\
Windows\System32\DriverStore\FileRepository\c_smartcard.inf_*\
Windows\System32\DriverStore\FileRepository\c_smartcardfilter.inf_*\
Windows\System32\DriverStore\FileRepository\c_smartcardreader.inf_*\
Windows\System32\DriverStore\FileRepository\c_volume.inf_*\
Windows\System32\DriverStore\FileRepository\display.inf_*\
Windows\System32\DriverStore\FileRepository\displayoverride.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudbus.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudio.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudss.inf_*\
Windows\System32\DriverStore\FileRepository\igdlh10.inf_*\
Windows\System32\DriverStore\FileRepository\igdlh11.inf_*\
Windows\System32\DriverStore\FileRepository\igdlh12.inf_*\
Windows\System32\DriverStore\FileRepository\ks.inf_*\
Windows\System32\DriverStore\FileRepository\kscaptur.inf_*\
Windows\System32\DriverStore\FileRepository\ksfilter.inf_*\
Windows\System32\DriverStore\FileRepository\memory.inf_*\
Windows\System32\DriverStore\FileRepository\mf.inf_*\
Windows\System32\DriverStore\FileRepository\monitor.inf_*\
Windows\System32\DriverStore\FileRepository\msclmd.inf_*\
Windows\System32\DriverStore\FileRepository\msports.inf_*\
Windows\System32\DriverStore\FileRepository\netnwifi.inf_*\
Windows\System32\DriverStore\FileRepository\netvwifibus.inf_*\
Windows\System32\DriverStore\FileRepository\netvwififlt.inf_*\
Windows\System32\DriverStore\FileRepository\netvwifimp.inf_*\
Windows\System32\DriverStore\FileRepository\nv_lh.inf_*\
Windows\System32\DriverStore\FileRepository\ramdisk.inf_*\
Windows\System32\DriverStore\FileRepository\scrawpdo.inf_*\
Windows\System32\DriverStore\FileRepository\scunknown.inf_*\
Windows\System32\DriverStore\FileRepository\tpmvsc.inf_*\
Windows\System32\DriverStore\FileRepository\umpass.inf_*\
Windows\System32\DriverStore\FileRepository\usbvideo.inf_*\
Windows\System32\DriverStore\FileRepository\volmgr.inf_*\
Windows\System32\DriverStore\FileRepository\volume.inf_*\
Windows\System32\DriverStore\FileRepository\wave.inf_*\
Windows\System32\DriverStore\FileRepository\wdmaudio.inf_*\
Windows\System32\DriverStore\FileRepository\wdma_bt.inf_*\
Windows\System32\DriverStore\FileRepository\wdma_usb.inf_*\
Windows\System32\DriverStore\FileRepository\wudfusbcciddriver.inf_*\


Windows\System32\icsxml\
Windows\System32\Macromed\Flash\

Windows\System32\MUI\
Windows\System32\NetworkList\
Windows\System32\ras\
Windows\TAPI\
Windows\Vss\

Windows\WinSxS\*_microsoft.vc80.crt*\
Windows\WinSxS\*_microsoft.vc90.crt*\
Windows\WinSxS\*_microsoft.windows.i..utomation.proxystub_*\
;;Windows\WinSxS\*_microsoft-windows-riched32_*

Windows\SystemResources\
Windows\IME\
Windows\InputMethod\
Windows\System32\IME\
Windows\System32\InputMethod\Shared\
; Speccy
Windows\UUS\
; -------- Files ---------------

Program Files\Common Files\microsoft shared\ink\tiptsf.dll
ProgramData\Microsoft\Windows\Caches\cversions.2.db

Windows\apppatch\acGenral.dll
Windows\apppatch\acLayers.dll
Windows\apppatch\acRes.dll
Windows\apppatch\acSpecfc.dll
Windows\apppatch\acxtrnal.dll
Windows\apppatch\drvmain.sdb
//Windows\apppatch\msimain.sdb
//Windows\apppatch\pcamain.sdb
//Windows\AppPatch\sysmain.sdb
Windows\AppPatch\drvmain.sdb

Windows\Branding\Basebrd\basebrd.dll
Windows\Branding\ShellBrd\shellbrd.dll
Windows\diagnostics\system\AERO\DesktopWindowsMgmt.dll

Windows\explorer.exe
Windows\Fonts\arial.ttf
Windows\Fonts\arialbd.ttf
Windows\Fonts\arialbi.ttf
Windows\Fonts\ariali.ttf
Windows\Fonts\comic.ttf
Windows\Fonts\comicbd.ttf
Windows\Fonts\cour.ttf
Windows\Fonts\courbd.ttf
Windows\Fonts\courbi.ttf
Windows\Fonts\coure.fon
Windows\Fonts\georgia.ttf
Windows\Fonts\georgiab.ttf
Windows\Fonts\georgiai.ttf
Windows\Fonts\georgiaz.ttf
Windows\Fonts\impact.ttf
Windows\Fonts\l_10646.ttf
Windows\Fonts\modern.fon
Windows\Fonts\roman.fon
Windows\Fonts\script.fon
Windows\Fonts\serife.fon
Windows\Fonts\smalle.fon
Windows\Fonts\sserife.fon
Windows\Fonts\times.ttf
Windows\Fonts\timesbd.ttf
Windows\Fonts\timesbi.ttf
Windows\Fonts\timesi.ttf
Windows\Fonts\trebuc.ttf
Windows\Fonts\trebucbd.ttf
Windows\Fonts\trebucbi.ttf
Windows\Fonts\trebucit.ttf
Windows\Fonts\verdana.ttf
Windows\Fonts\verdanab.ttf
Windows\Fonts\verdanai.ttf
Windows\Fonts\verdanaz.ttf
Windows\Fonts\webdings.ttf
Windows\Fonts\wingding.ttf
; Asia
Windows\Fonts\mingliub.ttc
Windows\Fonts\simsun.ttc
Windows\Fonts\mingliu.ttc
Windows\Fonts\malgun.ttf
Windows\Fonts\gulim.ttc
Windows\Fonts\meiryo.ttc
Windows\Fonts\msgothic.ttc
Windows\Fonts\msyh.ttc
Windows\Fonts\msyhl.ttc
Windows\Fonts\msjh.ttf

//Windows\Globalization\ELS\HyphenationDictionaries\mshy7*.lex
//Windows\Globalization\ELS\SpellDictionaries\mssp7*.acl
//Windows\Globalization\ELS\SpellDictionaries\mssp7*.dub
//Windows\Globalization\ELS\SpellDictionaries\mssp7*.lex

Windows\inf\bda.inf
Windows\inf\CompositeBus.inf
Windows\Inf\display.inf
Windows\inf\gameport.inf
Windows\inf\ks.inf
Windows\inf\kscaptur.inf
Windows\inf\ksfilter.inf
Windows\inf\modemcsa.inf
Windows\inf\monitor.inf
Windows\inf\msdv.inf
Windows\inf\msports.inf
Windows\inf\ndiscap.inf
Windows\inf\netnwifi.inf
Windows\inf\netvwifibus.inf
Windows\inf\netvwififlt.inf
Windows\inf\netvwifimp.inf
Windows\inf\rdpbus.inf
Windows\inf\sti.inf

Windows\System32\*.acm
Windows\System32\*.nls

Windows\System32\config\SOFTWARE
Windows\System32\config\SYSTEM
Windows\System32\config\DEFAULT
Windows\System32\config\DRIVERS

Windows\System32\wbem\wlan.mof

Windows\System32\actxprxy.dll
;;;Windows\System32\advapi32res.dll
Windows\System32\apphelp.dll
Windows\System32\appinfo.dll
Windows\System32\appwiz.cpl
Windows\System32\atlthunk.dll
Windows\System32\avicap32.dll
Windows\System32\avifil32.dll
Windows\System32\avifile.dll
Windows\System32\avrt.dll
Windows\System32\batmeter.dll
Windows\System32\bi.dll
Windows\System32\bisrv.dll
Windows\System32\biwinrt.dll
Windows\System32\browseui.dll
Windows\System32\bthprops.cpl
Windows\System32\cabview.dll
Windows\System32\cfgbkend.dll
Windows\System32\chartv.dll
Windows\System32\clbcatq.dll
Windows\System32\cleanmgr.exe

Windows\System32\colbact.dll
Windows\System32\colorcnv.dll
Windows\System32\colorcpl.exe
Windows\System32\colorui.dll
Windows\System32\CoreMessaging.dll
Windows\System32\comctl32.dll
Windows\System32\comsvcs.dll
Windows\System32\ConhostV1.dll
Windows\System32\ConhostV2.dll
Windows\System32\control.exe
Windows\System32\crtdll.dll
Windows\System32\cryptcatsvc.dll
Windows\System32\cscapi.dll
Windows\System32\CSystemEventsBrokerClient.dll
Windows\System32\d3d10.dll
Windows\System32\d3d10core.dll
Windows\System32\d3d10level9.dll
Windows\System32\d3d10warp.dll
Windows\System32\d3d10_1.dll
Windows\System32\d3d10_1core.dll
Windows\System32\d3d11.dll
Windows\System32\d3d12.dll
Windows\System32\dataexchange.dll
Windows\System32\dcomp.dll
Windows\System32\ddraw.dll
Windows\System32\Defrag.exe
Windows\System32\desk.cpl
Windows\System32\deskadp.dll
Windows\System32\deskmon.dll
Windows\System32\devenum.dll
Windows\System32\deviceassociation.dll
Windows\System32\devicesetupmanager.dll
	Windows\System32\mprddm.dll

Windows\system32\RstrtMgr.dll
	Windows\system32\vssadmin.exe
	Windows\system32\InputSwitch.dll
	Windows\System32\DeviceSetupManagerAPI.dll
	Windows\System32\cscobj.dll
	Windows\System32\cscui.dll
	Windows\System32\EhStorShell.dll
	Windows\System32\EhStorAPI.dll
	Windows\System32\SharedStartModel.dll
	Windows\system32\mscms.dll
	Windows\system32\setx.exe

Windows\System32\DeviceCenter.dll
Windows\System32\DeviceProperties.exe
Windows\System32\devmgr.dll
Windows\System32\dfrgui.exe
Windows\System32\difxapi.dll
Windows\System32\Display.dll
Windows\System32\dmintf.dll
Windows\System32\dmocx.dll
Windows\System32\dmutil.dll
Windows\System32\dmvdsitf.dll
Windows\System32\dmview.ocx
Windows\System32\dskquoui.dll
Windows\System32\dwm.exe
Windows\System32\dwmcore.dll
Windows\System32\dwmghost.dll
Windows\System32\dwminit.dll
Windows\System32\Dwmredir.dll

Windows\System32\dxgi.dll
Windows\System32\encapi.dll
Windows\System32\edputil.dll
Windows\System32\edpauditapi.dll

Windows\System32\explorerFrame.dll
Windows\System32\FlashPlayerCPLApp.cpl
Windows\System32\GlobCollationHost.dll
Windows\System32\globinputhost.dll

Windows\System32\hdwwiz.cpl
Windows\System32\hdwwiz.exe
Windows\System32\hidphone.tsp
Windows\System32\hotplug.dll
Windows\System32\icmp.dll
Windows\System32\IconCodecService.dll
Windows\System32\idstore.dll
Windows\System32\ieframe.dll
Windows\System32\ieproxy.dll
Windows\System32\iernonce.dll
Windows\System32\InfDefaultInstall.exe
Windows\System32\intl.cpl
Windows\System32\iologmsg.dll
Windows\System32\irprops.cpl
Windows\System32\joy.cpl
Windows\System32\kernel.appcore.dll
Windows\System32\main.cpl
Windows\System32\mlang.dll
Windows\System32\MMDevAPI.dll
Windows\System32\mmsys.cpl
Windows\System32\MrmCoreR.dll
Windows\System32\msacm32.dll
Windows\System32\msacm32.drv
Windows\System32\mscories.dll
Windows\System32\mshtml.dll
Windows\System32\msvbvm60.dll
Windows\System32\msvfw32.dll
Windows\System32\mycomput.dll
Windows\System32\networkexplorer.dll
Windows\System32\ntvdm.exe
Windows\System32\objsel.dll
Windows\System32\olecli32.dll
Windows\System32\oledlg.dll
Windows\System32\osbaseln.dll
	; neu
	Windows\System32\pcacli.dll
	Windows\System32\WorkFoldersShell.dll
	Windows\System32\wshext.dll
	Windows\System32\twinui.pcshell.dll
Windows\System32\PhotoMetadataHandler.dll
Windows\System32\policymanager.dll
Windows\System32\powercfg.cpl
Windows\System32\powercfg.exe
Windows\System32\powercpl.dll
Windows\System32\profsvcext.dll
Windows\System32\provsvc.dll
Windows\System32\provtool.exe
Windows\System32\psmsrv.dll
Windows\System32\quartz.dll
Windows\System32\query.dll
Windows\System32\rshx32.dll
Windows\System32\sc.exe
Windows\System32\sendmail.dll
Windows\System32\SettingSyncCore.dll
Windows\System32\SettingSyncPolicy.dll
Windows\System32\shacct.dll
Windows\System32\shdocvw.dll
Windows\System32\shellstyle.dll
Windows\System32\shfolder.dll
Windows\System32\shgina.dll
Windows\System32\shsvcs.dll
Windows\System32\shutdown.exe
Windows\System32\shutdownux.dll
Windows\System32\SlideToShutDown.exe
Windows\System32\signdrv.dll
Windows\System32\stobject.dll
Windows\System32\storagecontexthandler.dll
Windows\System32\storagewmi_passthru.dll
Windows\System32\StructuredQuery.dll
Windows\System32\sud.dll
Windows\System32\sysdm.cpl
Windows\System32\sysmon.ocx
Windows\System32\systemcpl.dll
Windows\System32\systempropertiesadvanced.exe
Windows\System32\systempropertiescomputername.exe
Windows\System32\systempropertieshardware.exe
Windows\System32\systempropertiesperformance.exe
Windows\System32\systempropertiesremote.exe

Windows\System32\systray.exe
Windows\System32\TabletPC.cpl
Windows\System32\TabSvc.dll
Windows\System32\taskbarcpl.dll
Windows\System32\taskkill.exe
Windows\System32\themecpl.dll
Windows\System32\themeservice.dll
Windows\System32\themeui.dll

Windows\System32\thumbcache.dll
Windows\System32\timedate.cpl
Windows\System32\twext.dll
Windows\System32\twinapi.appcore.dll
Windows\System32\twinapi.dll
Windows\System32\twinui.appcore.dll
Windows\System32\twinui.dll
Windows\System32\udwm.dll
Windows\System32\ubpm.dll
Windows\System32\UIAnimation.dll
Windows\System32\UIRibbon.dll
Windows\System32\UIRibbonRes.dll
Windows\System32\umpoext.dll
Windows\System32\umpowmi.dll
Windows\System32\ustprov.dll
Windows\System32\VEEventDispatcher.dll
Windows\System32\wdi.dll
Windows\System32\wevtfwd.dll

Windows\System32\Windows.Globalization.dll
Windows\System32\Windows.Globalization.Fontgroups.dll
Windows\System32\Windows.Graphics.dll
Windows\System32\Windows.Networking.dll
Windows\System32\Windows.Networking.Connectivity.dll
Windows\System32\Windows.Networking.HostName.dll
Windows\System32\windows.storage.dll
Windows\System32\Windows.UI.dll
Windows\System32\windows.ui.immersive.dll
Windows\System32\WindowsCodecsExt.dll
Windows\System32\Winlangdb.dll
Windows\System32\WinTypes.dll
Windows\System32\winusb.dll
Windows\System32\wlidprov.dll
Windows\System32\WofTasks.dll
Windows\System32\workerdd.dll
Windows\System32\wow32.dll
Windows\System32\wpd_ci.dll
Windows\System32\wpnapps.dll
Windows\System32\wpncore.dll
Windows\System32\wpninprc.dll
Windows\System32\wpnprv.dll

Windows\System32\wscui.cpl
Windows\System32\zipfldr.dll

Windows\System32\efscore.dll
Windows\System32\dlnashext.dll
Windows\System32\wpdshext.dll


Windows\System32\drivers\rdpbus.sys
Windows\Web\Wallpaper\Windows\img0.jpg

Windows\WinSxS\manifests\*_microsoft.vc80.crt*
Windows\WinSxS\manifests\*_microsoft.vc90.crt*
Windows\WinSxS\manifests\*_policy.8.0.microsoft.vc80.crt*
Windows\WinSxS\manifests\*_policy.9.0.microsoft.vc90.crt*
;;;Windows\WinSxS\manifests\*_microsoft-windows-riched32_*

; Bitlocker
Windows\System32\bderepair.dll
Windows\System32\bdesvc.dll
Windows\System32\bdeui.dll
Windows\System32\bdeunlock.exe
Windows\System32\fvenotify.exe
Windows\System32\fveui.dll
Windows\System32\manage-bde.exe
Windows\System32\repair-bde.exe
Windows\System32\TpmInit.exe
Windows\System32\tpm.msc
Windows\System32\tpmcompc.dll
Windows\System32\TpmTasks.dll
Windows\System32\tpmvsc.dll
Windows\System32\tpmvscmgr.exe
Windows\System32\tpmvscmgrsvr.exe
Windows\System32\profext.dll
Windows\System32\profprov.dll

;Build 15063
Windows\System32\TextInputFramework.dll
Windows\System32\CoreUIComponents.dll
Windows\System32\usermgrcli.dll
Windows\System32\msIso.dll
Windows\System32\Clipc.dll
Windows\System32\D3DCompiler_47.dll
Windows\System32\ISM.dll
Windows\System32\OneCoreUAPCommonProxyStub.dll
Windows\System32\Windows.Gaming.Input.dll
Windows\System32\StateRepository.Core.dll
Windows\System32\Windows.StateRepository.dll
Windows\System32\Windows.StateRepositoryBroker.dll
Windows\System32\Windows.StateRepositoryClient.dll
Windows\System32\Windows.StateRepositoryUpgrade.dll
Windows\System32\AppResolver.dll
Windows\System32\ELSCore.dll
Windows\System32\appinfoext.dll
Windows\System32\StartTileData.dll
Windows\System32\wuceffects.dll
;Build 16299
Windows\System32\RMClient.dll
Windows\System32\Windows.StateRepositoryPS.dll
Windows\System32\InputHost.dll
;Build 17134
Windows\System32\cdp.dll
;Build 17763
Windows\System32\dsreg.dll
Windows\System32\dxva2.dll
: Build 18362
Windows\System32\DXCore.dll
Windows\System32\BCP47mrm.dll
Windows\System32\GameInput.dll
; Build 19041
Windows\System32\WindowManagement.dll
Windows\System32\WindowManagementAPI.dll
Windows\System32\Windows.UI.dll
Windows\System32\Windows.FileExplorer.Common.dll
Windows\System32\coreglobconfig.dll
; Build 19043
Windows\System32\lsaadt.dll
Windows\System32\ServicingCommon.dll
Windows\System32\utcapi.dll
Windows\System32\dmenrollengine.dll
Windows\System32\ServicingCommon.dll
Windows\System32\utcapi.dll
Windows\System32\wow64base.dll
Windows\System32\wow64con.dll
; Build 22000
Windows\system32\CorePrivacySettingsStore.dll
Windows\System32\DiagnosticDataSettings.dll
Windows\System32\windowsudk.shellcommon.dll
Windows\System32\windowsudkservices.shellcommon.dll
Windows\System32\Windows.StateRepositoryCore.dll
; Build 22621
Windows\system32\windows.ui.fileExplorer.dll
Windows\system32\windows.System.Launcher.dll
Windows\system32\windows.ui.xaml.dll
Windows\system32\Vault.dll
Windows\System32\wuauserv.dll
Windows\system32\ngcrecovery.dll
; Build 26100
Windows\system32\WUDFPlatform.dll
Windows\system32\DispBroker.dll
Windows\system32\DispBroker.Desktop.dll
Windows\system32\Microsoft.Internal.WarpPal.dll
Windows\system32\msclmd.dll
; Build 26100.4349
Windows\system32\mdmregistration.dll
Windows\system32\SystemSettings.DataModel.dll

; --- net
Windows\System32\IEAdvpack.dll
Windows\System32\ipconfig.exe
Windows\System32\nbtstat.exe
Windows\System32\netcfg.exe
Windows\System32\netsh.exe
Windows\System32\wshqos.dll
Windows\System32\netcfgx.dll
Windows\System32\sstpsvc.dll
Windows\System32\msvcrt20.dll
Windows\System32\olethk32.dll
Windows\System32\cngcredui.dll
Windows\System32\cngprovider.dll
Windows\System32\KerbClientShared.dll
Windows\System32\keyiso.dll
Windows\System32\msi.dll
Windows\System32\oleacchooks.dll
Windows\System32\inetcomm.dll
Windows\System32\lmhsvc.dll
Windows\System32\mprmsg.dll
Windows\System32\msutb.dll
Windows\System32\NcaApi.dll
Windows\System32\neth.dll
Windows\System32\netiohlp.dll
Windows\System32\networkitemfactory.dll
Windows\System32\puiapi.dll
Windows\System32\SetNetworkLocation.dll
Windows\System32\winrnr.dll
Windows\System32\lanman.drv
Windows\System32\ndfapi.dll
Windows\System32\ndfetw.dll
Windows\System32\NdfEventView.xml
Windows\System32\ndfhcdiscovery.dll
Windows\System32\nshwfp.dll
Windows\System32\netevent.dll
Windows\System32\netid.dll
Windows\System32\inetcpl.cpl
Windows\System32\telephon.cpl
Windows\System32\ipsecsnp.dll
Windows\System32\winipsec.dll
Windows\System32\netbios.dll
Windows\System32\wshnetbs.dll
Windows\System32\httpapi.dll
Windows\System32\msafd.dll
Windows\System32\tcpipcfg.dll
Windows\System32\tcpmib.dll
Windows\System32\TCPSVCS.EXE
Windows\System32\winnlsres.dll
Windows\System32\winsockhc.dll
Windows\System32\wshelper.dll
Windows\System32\dhcpcmonitor.dll
Windows\System32\dhcpsapi.dll
Windows\System32\dnsrslvr.dll
Windows\System32\nlahc.dll
Windows\System32\wcmcsp.dll
Windows\System32\wcmapi.dll
Windows\System32\wcmsvc.dll
Windows\System32\dot3api.dll
Windows\System32\dot3cfg.dll
Windows\System32\dot3dlg.dll
Windows\System32\dot3gpclnt.dll
Windows\System32\dot3gpui.dll
Windows\System32\dot3hc.dll
Windows\System32\dot3mm.dll
Windows\System32\dot3msm.dll
Windows\System32\dot3svc.dll
Windows\System32\dot3ui.dll
Windows\System32\l2gpstore.dll
Windows\System32\l2nacp.dll
Windows\System32\onex.dll
Windows\System32\onexui.dll
Windows\System32\Dot3Conn.dll
Windows\System32\Eap3Host.exe
Windows\System32\eapp3hst.dll
Windows\System32\eappcfg.dll
Windows\System32\eappgnui.dll
Windows\System32\eapphost.dll
Windows\System32\eappprxy.dll
Windows\System32\eapsvc.dll
Windows\System32\ttlsauth.dll
Windows\System32\ttlscfg.dll
Windows\System32\simauth.dll
Windows\System32\simcfg.dll
Windows\System32\WcnEapAuthProxy.dll
Windows\System32\WcnEapPeerProxy.dll
Windows\System32\eapprovp.dll
Windows\System32\msvcp110_win.dll
Windows\System32\wcncsvc.dll
Windows\System32\WcnApi.dll
Windows\System32\WcnNetsh.dll
Windows\System32\wcnwiz.dll
Windows\System32\fdWCN.dll
Windows\System32\ndiscapCfg.dll
Windows\System32\ndishc.dll
Windows\System32\NdisImPlatformNetCfg.dll
Windows\System32\rascfg.dll
Windows\System32\srvsvc.dll
Windows\System32\sscore.dll
Windows\System32\sscoreext.dll
Windows\System32\browser.dll
Windows\System32\netman.dll
Windows\System32\netplwiz.dll
Windows\System32\wkspbrokerax.dll
Windows\System32\wksprtps.dll
Windows\System32\BFE.DLL
Windows\System32\IKEEXT.DLL
Windows\System32\mi.dll
Windows\System32\fwbase.dll
Windows\System32\fwpolicyiomgr.dll
Windows\System32\WwanRadioManager.dll
Windows\System32\RMapi.dll
Windows\System32\DAMM.dll
Windows\System32\RASMM.dll
Windows\System32\wwanmm.dll
Windows\System32\Drivers\http.sys
Windows\System32\Drivers\tunnel.sys
Windows\System32\Drivers\ndiscap.sys
Windows\System32\Drivers\ndisimplatform.sys
Windows\System32\Drivers\nwifi.sys
Windows\System32\Drivers\tcpipreg.sys
Windows\System32\Drivers\vwifibus.sys
Windows\System32\Drivers\vwifimp.sys
Windows\System32\Drivers\WdiWiFi.sys
Windows\System32\Drivers\wfplwfs.sys
Windows\System32\icfupgd.dll
Windows\System32\Firewall.cpl
Windows\System32\firewallcontrolpanel.dll
Windows\System32\fontext.dll
Windows\System32\fwcfg.dll
Windows\System32\fwremotesvr.dll
Windows\System32\cmifw.dll
Windows\System32\authfwcfg.dll
Windows\System32\authfwgp.dll
Windows\System32\authfwwizfwk.dll
Windows\System32\wfhc.dll
Windows\System32\wfapigp.dll
Windows\System32\Drivers\vwififlt.sys
Windows\System32\MPSSVC.dll
Windows\System32\Drivers\ipnat.sys
Windows\System32\ipnathlp.dll
Windows\System32\icsigd.dll
Windows\System32\icsunattend.exe
Windows\System32\connect.dll
Windows\System32\hgcpl.dll
Windows\System32\hnetcfg.dll
Windows\System32\hnetmon.dll
Windows\System32\netcenter.dll
Windows\System32\VAN.dll
Windows\System32\dtsh.dll
Windows\System32\pnidui.dll
Windows\System32\provcore.dll
Windows\System32\wlanapi.dll
Windows\System32\wlancfg.dll
Windows\System32\WLanConn.dll
Windows\System32\wlandlg.dll
Windows\System32\wlanext.exe
Windows\System32\wlangpui.dll
Windows\System32\WLanHC.dll
Windows\System32\wlanhlp.dll
Windows\System32\WlanMM.dll
Windows\System32\wlanmsm.dll
Windows\System32\wlanpref.dll
Windows\System32\WlanRadioManager.dll
Windows\System32\wlansec.dll
Windows\System32\wlansvc.dll
Windows\System32\wlanui.dll
Windows\System32\wlanutil.dll
Windows\System32\wlansvcpal.dll
Windows\System32\WlanMediaManager.dll
Windows\System32\fdProxy.dll
Windows\System32\fundisc.dll
Windows\System32\webcheck.dll
Windows\System32\iprtprio.dll
Windows\System32\iprtrmgr.dll
Windows\System32\mprddm.dll
Windows\System32\mprdim.dll
Windows\System32\rtm.dll
Windows\System32\NetworkStatus.dll
Windows\System32\shpafact.dll
Windows\System32\shrpubw.exe
Windows\System32\SMBHelperClass.dll
Windows\System32\smbwmiv2.dll
Windows\System32\wmiclnt.dll
Windows\System32\gptext.dll
Windows\System32\keymgr.dll
Windows\System32\msaudite.dll
Windows\System32\credprovhost.dll
Windows\System32\credprovs.dll
Windows\System32\credssp.dll
Windows\System32\mprext.dll
Windows\System32\shwebsvc.dll
Windows\System32\joinutil.dll
Windows\System32\netprovfw.dll
Windows\System32\netbtugc.exe
Windows\System32\netiougc.exe
Windows\System32\netlogon.dll
Windows\System32\Netplwiz.exe
Windows\System32\netshell.dll
Windows\System32\seclogon.dll
; neu 
	Windows\System32\credprovslegacy.dll
	Windows\System32\eappcfgui.dll
	Windows\System32\iologmsg.dll
	Windows\System32\werui.dll
	Windows\System32\NetworkUXBroker.dll
	Windows\System32\wbem\nlasvc.mof
Windows\System32\kerb3961.dll
Windows\System32\CapabilityAccessManager.dll
Windows\System32\CapabilityAccessManagerClient.dll
Windows\System32\CapabilityAccessHandlers.dll
Windows\System32\winsqlite3.dll

; Recovery
Windows\System32\Recovery\winre.wim
Windows\System32\bootsvc.dll
Windows\System32\tbs.dll
Windows\System32\DbgModel.dll
Windows\System32\taskschd.dll
Windows\System32\SettingsHandlers_StorageSense.dll
Windows\System32\prnfldr.dll
Windows\System32\wuapi.dll
Windows\System32\hbaapi.dll
Windows\System32\iscsidsc.dll
Windows\System32\ResetEngine.dll
Windows\System32\webauthn.dll
Windows\System32\wuaueng.dll
Windows\System32\iscsium.dll
Windows\System32\crypttpmeksvc.dll
;1803
Windows\System32\mobilenetworking.dll
;24H2
Windows\System32\muifontsetup.dll


;themes th2
Windows\System32\Drivers\WindowsTrustedRT.sys
	; neu
	Windows\System32\adsldp.dll
	Windows\System32\en-us\adsldp.dll.mui
	Windows\System32\mblctr.exe

; === MMC
Windows\System32\activeds.tlb
Windows\System32\compmgmt.msc
Windows\System32\CompMgmtLauncher.exe
Windows\System32\comres.dll
Windows\System32\devmgmt.msc
Windows\System32\diskmgmt.msc
Windows\System32\dmdlgs.dll
Windows\System32\dmdskmgr.dll
Windows\System32\dmdskres.dll
Windows\System32\dmdskres2.dll
Windows\System32\filemgmt.dll
Windows\System32\fsmgmt.msc
Windows\System32\hhsetup.dll
Windows\System32\ipsecsvc.dll
Windows\System32\mlang.dat
Windows\System32\mmc.exe
Windows\System32\mmcbase.dll
Windows\System32\mmcndmgr.dll
Windows\System32\mmcshext.dll
Windows\System32\odbcint.dll
Windows\System32\services.msc
Windows\System32\pnpts.dll
Windows\System32\PNPXAssoc.dll
Windows\System32\PNPXAssocPrx.dll
Windows\System32\PnPUnattend.exe
Windows\System32\PnPutil.exe
Windows\System32\polstore.dll
Windows\System32\grpconv.exe
Windows\System32\msinfo32.exe
Windows\System32\systempropertiesdataexecutionprevention.exe
Windows\System32\systempropertiesprotection.exe
Windows\System32\sxshared.dll
Windows\System32\Windows.Internal.Shell.Broker.dll

Windows\System32\Wbem\wbemcntl.dll

; Zubehör
Windows\System32\mspaint.exe
Windows\System32\MFC42u.dll
Windows\System32\wiaservc.dll

Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
Windows\System32\icm32.dll
Windows\System32\sti.dll
Windows\System32\d3d8thk.dll
Windows\System32\d3d9.dll
Windows\System32\mscms.dll
Windows\System32\shimgvw.dll

Windows\System32\efswrt.dll
Windows\System32\OpcServices.dll

; Audio
Windows\System32\DriverStore\FileRepository\gameport.inf_*
Windows\System32\DriverStore\FileRepository\modemcsa.inf_*
Windows\System32\DriverStore\??-??\modemcsa.inf_loc
Windows\System32\DriverStore\??F-??\modemcsa.inf_loc

Windows\System32\audiodev.dll
Windows\System32\audiodg.exe
Windows\System32\audioendpointbuilder.dll
Windows\System32\audioeng.dll
Windows\System32\audiokse.dll
Windows\System32\audioses.dll
Windows\System32\audiosrv.dll
Windows\System32\avrt.dll
Windows\System32\dciman32.dll
Windows\System32\ddrawex.dll
Windows\System32\deviceaccess.dll
Windows\System32\dsound.dll
Windows\System32\dxtrans.dll
Windows\System32\imaadp32.acm
Windows\System32\iyuv_32.dll
Windows\System32\ksuser.dll
Windows\System32\l3codeca.acm
Windows\System32\l3codecp.acm
Windows\System32\mfc40u.dll
Windows\System32\mfplat.dll
Windows\System32\midimap.dll
Windows\System32\mmci.dll
Windows\System32\mmcico.dll
Windows\System32\mmres.dll
Windows\System32\mmsystem.dll
Windows\System32\mmtask.tsk
Windows\System32\msacm.dll
Windows\System32\msadp32.acm
Windows\System32\msg711.acm
Windows\System32\msgsm32.acm
Windows\System32\msrle32.dll
Windows\System32\msvidc32.dll
Windows\System32\msyuv.dll
Windows\System32\query.exe
Windows\System32\sndvol.exe
Windows\System32\sndvolsso.dll
Windows\System32\sound.drv
Windows\System32\timer.drv
Windows\System32\tsbyuv.dll
Windows\System32\wavemsp.dll
Windows\System32\wdmaud.drv
Windows\System32\xinput9_1_0.dll
Windows\System32\wavemsp.dll
Windows\System32\WMADMOD.DLL
Windows\System32\WMADMOE.DLL
Windows\System32\WMASF.DLL
Windows\System32\MSDvbNP.ax
Windows\System32\psisrndr.ax
Windows\System32\psisdecd.dll
Windows\System32\bdaplgin.ax
Windows\System32\kstvtune.ax
Windows\System32\ksxbar.ax
Windows\System32\drivers\mspclock.sys
Windows\System32\drivers\mspqm.sys
Windows\System32\drivers\mskssrv.sys
Windows\System32\drivers\mstee.sys
Windows\System32\drivers\gm.dls
Windows\System32\drivers\beep.sys
Windows\System32\drivers\ks.sys
;11082
Windows\System32\AudioSrvPolicyManager.dll
Windows\System32\coreaudiopolicymanagerext.dll
Windows\System32\Windows.Media.Devices.dll
;19041
Windows\System32\PlayToDevice.dll
Windows\System32\CompPkgSup.dll

; Monitor
Windows\System32\drivers\monitor.sys

; Flash
Windows\System32\dinput8.dll

; MSI
Windows\System32\msiexec.exe
Windows\System32\msihnd.dll
Windows\System32\msiltcfg.dll
Windows\System32\msisip.dll
Windows\System32\msimsg.dll
Windows\System32\wbem\msi.mof
Windows\System32\wbem\msiprov.dll
Windows\System32\wbem\??-??\msi.mfl

; xChm
Windows\System32\ieui.dll
Windows\System32\imgutil.dll
Windows\System32\INETRES.dll
Windows\System32\mshta.exe
Windows\System32\mshtml.tlb
Windows\System32\mshtmled.dll
Windows\System32\msimtf.dll
Windows\System32\msrating.dll
Windows\System32\pngfilt.dll

;Windows\System32\ticrf.rat

; == BGInfo
Windows\System32\INETMIB1.dll

;== FF ==
Windows\System32\msdmo.dll
Windows\System32\pdh.dll

; == Adv IP Scanner ==
Windows\System32\mgmtapi.dll
Windows\System32\wsnmp32.dll

; == Recuva VSS
Windows\System32\es.dll
Windows\System32\xolehlp.dll

; == Rdc
Windows\System32\mstsc.exe
Windows\System32\mstscax.dll
Windows\System32\CredentialUIBroker.exe
Windows\System32\Windows.UI.Cred.dll
Windows\System32\Windows.UI.CredDialogController.dll
Windows\System32\Windows.Internal.UI.Logon.ProxyStub.dll
Windows\SystemResources\Windows.UI.Cred\
Windows\Fonts\segoeui.ttf
Windows\System32\TSpkg.dll

;== MPC
Windows\System32\ResourcePolicyClient.dll
Windows\System32\RTWorkQ.dll
Windows\System32\evr.dll
Windows\System32\MP3DMOD.DLL
Windows\System32\MP4SDECD.DLL
Windows\System32\MP43DECD.DLL
Windows\System32\Mpeg2Data.ax
Windows\System32\mpg2splt.ax
Windows\System32\MPG4DECD.DLL
Windows\System32\msmpeg2adec.dll
Windows\System32\msmpeg2vdec.dll
Windows\System32\msvidc32.dll
Windows\System32\qasf.dll
Windows\System32\unregmp2.exe
Windows\System32\wmploc.DLL
Windows\System32\wmdrmsdk.dll
Windows\System32\WMSPDMOD.DLL
Windows\System32\WMSPDMOE.DLL
Windows\System32\WMVCORE.DLL
Windows\System32\WMVDECOD.DLL
Windows\System32\wmvdspa.dll
Windows\System32\WMVENCOD.DLL
Windows\System32\WMVSDECD.DLL
Windows\System32\WMVSENCD.DLL
Windows\System32\WMVXENCD.DLL

; == Minitool PartWiz
windows\system32\CLDAPI.dll
windows\system32\OnDemandConnRouteHelper.dll

;Softmaker
Windows\System32\mf.dll
Windows\System32\mfreadwrite.dll
Windows\System32\opengl32.dll
Windows\System32\glu32.dll
Windows\System32\mfcore.dll
Windows\System32\mfperfhelper.dll

; Windows Search
Windows\inf\wsearchidxpi\
Windows\System32\SearchFilterHost.exe
Windows\System32\SearchFolder.dll
Windows\System32\SearchIndexer.exe
Windows\System32\SearchProtocolHost.exe
Windows\System32\srchadmin.dll
Windows\System32\tquery.dll
Windows\System32\NaturalLanguage6.dll
Windows\System32\msshooks.dll
Windows\System32\mssph.dll
Windows\System32\mssprxy.dll
Windows\System32\mssrch.dll
Windows\System32\mssvp.dll
Windows\System32\mssitlb.dll
Windows\System32\wsepno.dll
Windows\System32\Windows.Shell.Search.UriHandler.dll
Windows\System32\Windows.Storage.Search.dll
Windows\System32\NOISE.DAT
Windows\System32\MSWB7.dll
Windows\System32\prm*.dll
Windows\System32\MLS*.dll
Windows\System32\icu.dll

Windows\System32\NOISE.THA
Windows\System32\MSWB7001E.dll
Windows\System32\NL7Data001E.dll
Windows\System32\noise.jpn
Windows\System32\MSWB70011.dll
Windows\System32\NL7Data0011.dll
Windows\System32\NOISE.CHS
Windows\System32\MSWB70804.dll
Windows\System32\NL7Data0804.dll
Windows\System32\NOISE.CHT
Windows\System32\MSWB70404.dll
Windows\System32\NL7Data0404.dll
Windows\System32\NOISE.CHT
Windows\System32\MSWB70404.dll
Windows\System32\NL7Data0404.dll
Windows\System32\korwbrkr.lex
Windows\System32\korwbrkr.dll

; Keyboard Indicator
Windows\System32\ctfmon.exe
Windows\System32\InputService.dll
Windows\System32\MSCtfMonitor.dll
Windows\System32\msutb.dll
Windows\System32\TextInputFramework.dll
Windows\System32\InputHost.dll
Windows\System32\InputLocaleManager.dll
Windows\System32\mtf.dll
Windows\System32\MTFServer.dll
Windows\System32\TextInputMethodFormatter.dll

; IME
Windows\system32\msctfime.ime
Windows\system32\Msctfp.dll
Windows\system32\MsctfuiManager.dll
; >18300
Windows\system32\dusmapi.dll
Windows\System32\Language*.dll
Windows\system32\netprofm.dll
Windows\system32\npmproxy.dll
Windows\system32\WordBreakers.dll
Windows\system32\Windows.UI.Core.TextInput.dll
Windows\System32\Windows.Web.dll
; ch-TW
Windows\System32\NL7Lexicons0404.dll
Windows\system32\NL7Models0404.dll
Windows\system32\ChtBopomofoDS.dll
Windows\system32\ChtCangjieDS.dll
Windows\system32\ChtQuickDS.dll
; ch-CN
Windows\system32\NL7Lexicons0804.dll
Windows\System32\NL7Models0804.dll
Windows\System32\chs_singlechar_pinyin.dat
Windows\System32\ChsStrokeDS.dll

; Acrobat Reader XI
Windows\System32\coloradapterclient.dll

; Admin Account
Windows\System32\AuthExt.dll
Windows\System32\FontGlyphAnimator.dll
Windows\System32\LogonUI.exe
Windows\System32\secedit.exe
Windows\System32\shacct.dll
Windows\System32\threadpoolwinrt.dll
Windows\System32\whoami.exe
Windows\System32\Windows.Globalization.Fontgroups.dll
Windows\System32\Windows.UI.Logon.dll
Windows\System32\Windows.UI.Xaml.dll
Windows\System32\Windows.UI.XamlHost.dll
Windows\System32\AccessibilityCPL.dll
Windows\System32\resourcepolicyclient.dll
Windows\System32\Windows.System.Launcher.dll
Windows\System32\certca.dll
Windows\System32\CredProv2faHelper.dll
Windows\System32\CredProvDataModel.dll
Windows\System32\imageres.dll
Windows\System32\LogonController.dll
Windows\System32\Windows.UI.Xaml.Controls.dll
Windows\System32\Windows.ApplicationModel.dll
Windows\system32\Windows.UI.Xaml.Resources.*
Windows\System32\usermgr.dll
Windows\System32\UserMgrProxy.dll
Windows\system32\CredProvCommonCore.dll

; Teamviewer
Windows\System32\Magnification.dll

; Startisback
Windows\Fonts\SegoeIcons.ttf

; HopToDesk
Windows\System32\sas.dll
; MPC
Windows\System32\Resampledmo.dll
; Rustdesk
Windows\System32\amsi.dll
;SRecorder
Windows\System32\VoiceClarityApo.dll
;OSK
Windows\System32\osk.exe
Windows\System32\OskSupport.dll