├── README.md
└── malware_hash
    ├── README.md
    ├── malware_hash.py
    └── hash_sources.json


/README.md:
--------------------------------------------------------------------------------
1 | # sinkhole


--------------------------------------------------------------------------------
/malware_hash/README.md:
--------------------------------------------------------------------------------
 1 | # Malware Hash
 2 | 
 3 | Malware sometimes use hashes functions, applied on input strings such as running process names, loaded DLLs or usernames, in order to detect whether they are running under a debugged, virtualized or sandboxed environement. They may also use the same method in order to identify legitimate windows executable or web-browsers to perform process hollowing or code injection.
 4 | 
 5 | The goal of this repository is to provide a small python script used to request JSON files containing strings likely to be used by malware.
 6 | 
 7 | A first JSON file (hash_sources.json) provides strings such as:
 8 | 
 9 |  * VMs related image name such as 'vmware.exe'
10 |  * Malware analysis tools such as debuggers, static analysis tools, ...
11 |  * Common tools running in sandboxes such as 'python.exe'
12 |  * HIPS / Anti-viruses injected DLLs image name
13 |  * Well known sandbox usernames
14 |  * SysInternals tools image name
15 |  * Win32 PE image name (DLLs and executables)
16 | 
17 | A second JSON file (files_net.json) provides a dump of all filenames referenced on https://www.file.net/ (~ 19k entries).
18 | 
19 | ## API Usage
20 | 
21 | The API is really simple to use. The constructor of the class *MalwareHash* takes as a first argument the user-defined hash function, used to build a dictionary with:
22 |  * keys beeing the computed hashes values of each input string contained within JSON source files
23 |  * values beeing the list of strings matching a computed hash value
24 | 
25 | An instance of the class *MalwareHash* can be used to get the list of strings matching a pre-computed hash value, by calling the *get_strings_by_hash()* method.
26 | 
27 | ## Example
28 | 
29 | ```python
30 | from malware_hash import MalwareHash
31 | import binascii
32 | 
33 | mh = MalwareHash(binascii.crc32)
34 | string_list = mh.get_strings_by_hash(0x77ae10f7)
35 | print(string_list) # ['u'wireshark.exe]
36 | ```
37 | 


--------------------------------------------------------------------------------
/malware_hash/malware_hash.py:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env python
 2 | 
 3 | import json
 4 | import os
 5 | 
 6 | 
 7 | class MalwareHash(object):
 8 |     def __init__(self, hash_func, json_files=None):
 9 |         self.hash_func = hash_func
10 |         self.computed_hashes = {}
11 | 
12 |         if json_files is None:
13 |             dir_name = os.path.dirname(os.path.abspath(__file__))
14 |             json_files = [os.path.join(dir_name, file) for file in os.listdir(dir_name) if file.endswith('.json')]
15 | 
16 |         for json_file in json_files:
17 |             self.load_hash_sources(json_file)
18 | 
19 |     def load_hash_sources(self, filename):
20 |         with open(filename, 'r') as f:
21 |             hash_sources = json.load(f)
22 |             for category in hash_sources:
23 |                 for input_string in hash_sources[category]:
24 |                     input_strings_mutated = list()
25 |                     input_strings_mutated.append(input_string)
26 |                     if 'folder' in category:
27 |                         if not input_string.startswith('\\'):
28 |                             input_strings_mutated.append('\\' + input_string)
29 |                         if not input_string.endswith('\\'):
30 |                             input_strings_mutated.append(input_string + '\\')
31 |                         if not input_string.startswith('\\') and not input_string.endswith('\\'):
32 |                             input_strings_mutated.append('\\' + input_string + '\\')
33 |                     for string_to_hash in input_strings_mutated:
34 |                         computed_hash = self.hash_func(string_to_hash)
35 |                         hash_set = self.computed_hashes.get(computed_hash)
36 |                         if not hash_set:
37 |                             hash_set = set()
38 |                             self.computed_hashes[computed_hash] = hash_set
39 |                         hash_set.add(string_to_hash)
40 | 
41 |     def get_strings_by_hash(self, computed_hash):
42 |         return list(self.computed_hashes.get(computed_hash, set()))
43 | 


--------------------------------------------------------------------------------
/malware_hash/hash_sources.json:
--------------------------------------------------------------------------------
   1 | {
   2 |   "formbook":[
   3 |     "This program cannot",
   4 |     "wow64"
   5 |   ],
   6 |   "darkhotel_check_modules":[
   7 |     "SbieDll_RunSandboxed",
   8 |     "SbieDll_Hook@12",
   9 |     "InjectDllMain",
  10 |     "hook_disable_retaddr_check",
  11 |     "New2_CreateProcessInternalW@48",
  12 |     "CharmVersionC",
  13 |     "PinWinMain",
  14 |     "dr_app_running_under_dynamorio",
  15 |     "dr_inject_wait_for_child"
  16 |   ],
  17 |   "darkhotel_check_namedpipes":[
  18 |     "\\\\.\\pipe\\cuckoo"
  19 |   ],
  20 |   "darkhotel_check_filesystem":[
  21 |     "c:\\agent\\MemoryDump.dll",
  22 |     "c:\\agent\\ProcessMemDump.exe",
  23 |     "c:\\bin\\AHookMonitor.dll",
  24 |     "c:\\bin\\hookanaapp.exe",
  25 |     "c:\\cwsandbox\\cwsandbox.ini",
  26 |     "c:\\cwsandbox\\cwsandboxstarter.exe",
  27 |     "c:\\gfisandbox\\starter.exe",
  28 |     "c:\\manual\\grabme.exe",
  29 |     "C:\\manual\\SilipTCPIP.exe",
  30 |     "c:\\MWS\\bin\\agent\\hips32.exe",
  31 |     "c:\\MWS\\bin\\agent\\hipsengine32.dll",
  32 |     "c:\\MWS\\bin\\agent\\hipspcap32.dll",
  33 |     "c:\\original\\AutoRepGui\\autorep.dll",
  34 |     "c:\\original\\AutoRepGui\\AutoRepGui.exe",
  35 |     "C:\\sandbox\\w64h\\wow64hlp.exe",
  36 |     "C:\\SandCastle\\tools\\BehaviorDumper.exe",
  37 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\_hashlib.pyd",
  38 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\_socket.pyd",
  39 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\_ssl.pyd",
  40 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\FakeHTTPServer.exe",
  41 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\python27.dll",
  42 |     "C:\\SandCastle\\tools\\FakeHTTPServer\\select.pyd",
  43 |     "C:\\SandCastle\\tools\\FakeServer.exe",
  44 |     "C:\\SandCastle\\tools\\LiteClient.exe",
  45 |     "C:\\SandCastle\\tools\\syelog.dll",
  46 |     "C:\\SandCastle\\tools\\syelog.dll",
  47 |     "C:\\SandCastle\\tools\\TmSigChk.dll",
  48 |     "C:\\SandCastle\\tools\\tracer.dll",
  49 |     "c:\\tools\\aswsnx\\snxcmd.exe",
  50 |     "c:\\tools\\aswsnx\\snxhk.dll",
  51 |     "c:\\Tools\\findt2005.exe",
  52 |     "c:\\totalcmd\\gfiles\\360tray.exe",
  53 |     "c:\\totalcmd\\gfiles\\avcenter.exe",
  54 |     "c:\\totalcmd\\gfiles\\avgnt.exe",
  55 |     "c:\\totalcmd\\gfiles\\avguard.exe",
  56 |     "c:\\totalcmd\\gfiles\\avp.exe",
  57 |     "c:\\totalcmd\\gfiles\\Avp32.exe",
  58 |     "c:\\totalcmd\\gfiles\\Avpcc.exe",
  59 |     "c:\\totalcmd\\gfiles\\Avpm.exe",
  60 |     "c:\\totalcmd\\gfiles\\Avpupd.exe",
  61 |     "c:\\totalcmd\\gfiles\\CCenter.exe",
  62 |     "c:\\totalcmd\\gfiles\\cpd.exe",
  63 |     "c:\\totalcmd\\gfiles\\filemon.exe",
  64 |     "c:\\totalcmd\\gfiles\\fsav32.exe",
  65 |     "c:\\totalcmd\\gfiles\\fsbwsys.exe",
  66 |     "c:\\totalcmd\\gfiles\\fsdfwd.exe",
  67 |     "c:\\totalcmd\\gfiles\\Fsgk32.exe",
  68 |     "c:\\totalcmd\\gfiles\\kavmm.exe",
  69 |     "c:\\totalcmd\\gfiles\\KavPFW.exe",
  70 |     "c:\\totalcmd\\gfiles\\kavsvc.exe",
  71 |     "c:\\totalcmd\\gfiles\\navapsvc.exe",
  72 |     "c:\\totalcmd\\gfiles\\Navrunr.exe",
  73 |     "c:\\totalcmd\\gfiles\\Navw32.exe",
  74 |     "c:\\totalcmd\\gfiles\\Navwnt.exe",
  75 |     "c:\\totalcmd\\gfiles\\NISSERV.EXE",
  76 |     "c:\\totalcmd\\gfiles\\nod32cc.exe",
  77 |     "c:\\totalcmd\\gfiles\\nod32krn.exe",
  78 |     "c:\\totalcmd\\gfiles\\nod32kui.exe",
  79 |     "c:\\totalcmd\\gfiles\\nod32m2.exe",
  80 |     "c:\\totalcmd\\gfiles\\outpost.exe",
  81 |     "c:\\totalcmd\\gfiles\\procexp.exe",
  82 |     "c:\\totalcmd\\gfiles\\procmon.exe",
  83 |     "c:\\totalcmd\\gfiles\\regmon.exe",
  84 |     "c:\\totalcmd\\gfiles\\SAVScan.exe",
  85 |     "c:\\totalcmd\\gfiles\\symlcsvc.exe",
  86 |     "c:\\totalcmd\\gfiles\\tcpview.exe",
  87 |     "c:\\totalcmd\\gfiles\\zonealarm.exe",
  88 |     "c:\\tracer\\FortiTracer.exe",
  89 |     "\\Documents and Settings\\Administrator\\Desktop\\AVCTestSuite\\AVCTestSuite.exe",
  90 |     "d:\\sandbox_svc.exe",
  91 |     "D:\\plugins\\import\\import_pe.dll",
  92 |     "D:\\plugins\\import\\sb_import.dll",
  93 |     "D:\\plugins\\import\\import_launcher.dll",
  94 |     "D:\\plugins\\process\\filesystem.dll",
  95 |     "D:\\plugins\\process\\sniffer.dll",
  96 |     "D:\\plugins\\process\\wincheck.dll",
  97 |     "D:\\plugins\\process\\procmon.dll",
  98 |     "D:\\plugins\\process\\screenshot.dll",
  99 |     "D:\\plugins\\process\\dumper.dll",
 100 |     "D:\\plugins\\process\\hosts.dll",
 101 |     "D:\\plugins\\process\\mutexenum.dll",
 102 |     "D:\\plugins\\process\\sb_status.dll"
 103 |   ],
 104 |   "vm_artfacts":[
 105 |     "vmware.exe",
 106 |     "vmount2.exe",
 107 |     "vmusrvc.exe",
 108 |     "xenservice.exe",
 109 |     "VBoxMouse.sys",
 110 |     "VBoxGuest.sys",
 111 |     "VBoxSF.sys",
 112 |     "VBoxVideo.sys",
 113 |     "vboxdisp.dll",
 114 |     "vboxhook.dll",
 115 |     "vboxmrxnp.dll",
 116 |     "vboxogl.dll",
 117 |     "vboxoglarrayspu.dll",
 118 |     "vboxoglcrutil.dll",
 119 |     "vboxoglerrorspu.dll",
 120 |     "vboxoglfeedbackspu.dll",
 121 |     "vboxoglpackspu.dll",
 122 |     "vboxoglpassthroughspu.dll",
 123 |     "VBoxservice.exe",
 124 |     "vboxtray.exe",
 125 |     "VBoxControl.exe",
 126 |     "prl_cc.exe",
 127 |     "prl_tools.exe",
 128 |     "prl_tools_service.exe",
 129 |     "SharedIntApp.exe"
 130 |   ],
 131 |   "sandbox_tools":[
 132 |     "python.exe",
 133 |     "py.exe",
 134 |     "perl.exe",
 135 |     "ruby.exe",
 136 |     "joeboxserver.exe",
 137 |     "joeboxcontrol.exe"
 138 |   ],
 139 |   "analysis_tools":[
 140 |     "ollydbg.exe",
 141 |     "idag.exe",
 142 |     "idag64.exe",
 143 |     "idaw.exe",
 144 |     "idaw64.exe",
 145 |     "win32_remote.exe",
 146 |     "win64_remote64.exe",
 147 |     "scylla.exe",
 148 |     "scylla_x64.exe",
 149 |     "scylla_x86.exe",
 150 |     "protection_id.exe",
 151 |     "x32dbg.exe",
 152 |     "x64dbg.exe",
 153 |     "windbg.exe",
 154 |     "CFF Explorer.exe",
 155 |     "reshacker.exe",
 156 |     "ImportREC.exe",
 157 |     "IMMUNITYDEBUGGER.EXE",
 158 |     "sniff_hit.exe",
 159 |     "wireshark.exe",
 160 |     "sysAnalyzer.exe",
 161 |     "filemon.exe",
 162 |     "regmon.exe",
 163 |     "apimonitor-x64.exe",
 164 |     "apimonitor-x86.exe"
 165 |   ],
 166 |   "analysis_dlls":[
 167 |     "guard32.dll",
 168 |     "snxhk.dll",
 169 |     "snxhk64.dll",
 170 |     "cmdvrt32.dll",
 171 |     "Sf2.dll",
 172 |     "SxIn.dll",
 173 |     "SbieDll.dll",
 174 |     "wpespy.dll",
 175 |     "vmcheck.dll",
 176 |     "pstorec.dll",
 177 |     "dir_watch.dll",
 178 |     "api_log.dll",
 179 |     "dbghelp.dll"
 180 |   ],
 181 |   "sandbox_malware_name":[
 182 |     "sample.exe",
 183 |     "sub.exe",
 184 |     "malware.exe",
 185 |     "virus.exe",
 186 |     "infected.exe"
 187 |   ],
 188 |   "sandbox_folder_name":[
 189 |     "sample",
 190 |     "samples",
 191 |     "exe",
 192 |     "smpdir",
 193 |     "samroot",
 194 |     "avctestsuite",
 195 |     "cuckoo",
 196 |     "sandcastle",
 197 |     "aswsnx",
 198 |     "bsa",
 199 |     "sandbox",
 200 |     "mws",
 201 |     "malware",
 202 |     "virus",
 203 |     "infected",
 204 |     "hash",
 205 |     "analysis"
 206 |   ],
 207 |   "sandbox_usernames":[
 208 |     "john",
 209 |     "currentuser",
 210 |     "sandbox",
 211 |     "honey",
 212 |     "vmware",
 213 |     "nepenthes",
 214 |     "snort",
 215 |     "cuckoo",
 216 |     "andy",
 217 |     "roo",
 218 |     "maltest",
 219 |     "TEQUILABOOMBOOM",
 220 |     "VIRUS",
 221 |     "MALWARE",
 222 |     "sandbox-",
 223 |     "nmsdbox-",
 224 |     "xxxx-ox-",
 225 |     "cuckoo",
 226 |     "cwsx-",
 227 |     "xpamast-sc",
 228 |     "wilbert-sc"
 229 |   ],
 230 |   "sandbox_product_id":[
 231 |     "76487-640-1457236-23837",
 232 |     "76487-337-8429955-22614",
 233 |     "76487-644-3177037-23510",
 234 |     "76497-640-6308873-23835",
 235 |     "55274-640-2673064-23950",
 236 |     "76487-640-8834005-23195",
 237 |     "76487-640-0716662-23535",
 238 |     "76487-644-8648466-23106",
 239 |     "00426-293-8170032-85146",
 240 |     "76487-341-5883812-22420",
 241 |     "76487-OEM-0027453-63796"
 242 |   ],
 243 |   "targeted_executables":[
 244 |     "iexplore.exe",
 245 |     "firefox.exe",
 246 |     "chrome.exe",
 247 |     "microsoftedgecp.exe",
 248 |     "explorer.exe",
 249 |     "opera.exe",
 250 |     "safari.exe",
 251 |     "360se.exe",
 252 |     "avastszb.exe",
 253 |     "360browser.exe",
 254 |     "luna.exe",
 255 |     "torch.exe",
 256 |     "maxthon.exe",
 257 |     "seamonkey.exe",
 258 |     "avant.exe",
 259 |     "deepnet.exe",
 260 |     "dragon.exe",
 261 |     "notepad.exe",
 262 |     "icedragon.exe",
 263 |     "spark.exe",
 264 |     "browser.exe",
 265 |     "k-meleon.exe",
 266 |     "citrio.exe",
 267 |     "coolnovo.exe",
 268 |     "coowon.exe",
 269 |     "cyberfox.exe",
 270 |     "dooble.exe",
 271 |     "vivaldi.exe",
 272 |     "iridium.exe",
 273 |     "epic.exe",
 274 |     "midori.exe",
 275 |     "mustang.exe",
 276 |     "orbitum.exe",
 277 |     "palemoon.exe",
 278 |     "qtweb.exe",
 279 |     "qupzilla.exe",
 280 |     "sleipnir.exe",
 281 |     "superbird.exe",
 282 |     "ucbrowser.exe",
 283 |     "waterfox.exe",
 284 |     "ybrowser.exe",
 285 |     "outlook.exe",
 286 |     "foxmail.exe",
 287 |     "incmail.exe",
 288 |     "thunderbird.exe",
 289 |     "gmailnotifierpro.exe",
 290 |     "yahoomessenger.exe",
 291 |     "icq.exe",
 292 |     "pidgin.exe",
 293 |     "trillian.exe",
 294 |     "whatsapp.exe",
 295 |     "far.exe",
 296 |     "filezilla.exe",
 297 |     "fling.exe",
 298 |     "totalcmd.exe",
 299 |     "webdrive.exe",
 300 |     "skype.exe",
 301 |     "blackhawk.exe",
 302 |     "operamail.exe",
 303 |     "barca.exe",
 304 |     "3dftp.exe",
 305 |     "absolutetelnet.exe",
 306 |     "alftp.exe",
 307 |     "bitkinex.exe",
 308 |     "coreftp.exe",
 309 |     "flashfxp.exe",
 310 |     "leechftp.exe",
 311 |     "ncftp.exe",
 312 |     "scriptftp.exe",
 313 |     "smartftp.exe",
 314 |     "winscp.exe"
 315 |   ],
 316 |   "sys_internals":[
 317 |     "accesschk.exe",
 318 |     "accesschk64.exe",
 319 |     "AccessEnum.exe",
 320 |     "ADExplorer.exe",
 321 |     "ADInsight.exe",
 322 |     "adrestore.exe",
 323 |     "Autologon.exe",
 324 |     "Autoruns.exe",
 325 |     "Autoruns64.exe",
 326 |     "autorunsc.exe",
 327 |     "autorunsc64.exe",
 328 |     "Bginfo.exe",
 329 |     "Bginfo64.exe",
 330 |     "Cacheset.exe",
 331 |     "Clockres.exe",
 332 |     "Clockres64.exe",
 333 |     "Contig.exe",
 334 |     "Contig64.exe",
 335 |     "Coreinfo.exe",
 336 |     "ctrl2cap.amd.sys",
 337 |     "ctrl2cap.exe",
 338 |     "ctrl2cap.nt4.sys",
 339 |     "ctrl2cap.nt5.sys",
 340 |     "Dbgview.exe",
 341 |     "Desktops.exe",
 342 |     "disk2vhd.exe",
 343 |     "diskext.exe",
 344 |     "diskext64.exe",
 345 |     "Diskmon.exe",
 346 |     "DiskView.exe",
 347 |     "DMON.SYS",
 348 |     "du.exe",
 349 |     "du64.exe",
 350 |     "efsdump.exe",
 351 |     "FindLinks.exe",
 352 |     "FindLinks64.exe",
 353 |     "handle.exe",
 354 |     "handle64.exe",
 355 |     "hex2dec.exe",
 356 |     "hex2dec64.exe",
 357 |     "junction.exe",
 358 |     "junction64.exe",
 359 |     "ldmdump.exe",
 360 |     "Listdlls.exe",
 361 |     "Listdlls64.exe",
 362 |     "livekd.exe",
 363 |     "livekd64.exe",
 364 |     "LoadOrd.exe",
 365 |     "LoadOrd64.exe",
 366 |     "LoadOrdC.exe",
 367 |     "LoadOrdC64.exe",
 368 |     "logonsessions.exe",
 369 |     "logonsessions64.exe",
 370 |     "movefile.exe",
 371 |     "movefile64.exe",
 372 |     "notmyfault.exe",
 373 |     "notmyfault64.exe",
 374 |     "notmyfaultc.exe",
 375 |     "notmyfaultc64.exe",
 376 |     "ntfsinfo.exe",
 377 |     "ntfsinfo64.exe",
 378 |     "pagedfrg.exe",
 379 |     "pendmoves.exe",
 380 |     "pendmoves64.exe",
 381 |     "pipelist.exe",
 382 |     "pipelist64.exe",
 383 |     "PORTMON.CNT",
 384 |     "portmon.exe",
 385 |     "procdump.exe",
 386 |     "procdump64.exe",
 387 |     "procexp.exe",
 388 |     "procexp64.exe",
 389 |     "Procmon.exe",
 390 |     "PsExec.exe",
 391 |     "PsExec64.exe",
 392 |     "psfile.exe",
 393 |     "psfile64.exe",
 394 |     "PsGetsid.exe",
 395 |     "PsGetsid64.exe",
 396 |     "PsInfo.exe",
 397 |     "PsInfo64.exe",
 398 |     "pskill.exe",
 399 |     "pskill64.exe",
 400 |     "pslist.exe",
 401 |     "pslist64.exe",
 402 |     "PsLoggedon.exe",
 403 |     "PsLoggedon64.exe",
 404 |     "psloglist.exe",
 405 |     "pspasswd.exe",
 406 |     "pspasswd64.exe",
 407 |     "psping.exe",
 408 |     "psping64.exe",
 409 |     "PsService.exe",
 410 |     "PsService64.exe",
 411 |     "psshutdown.exe",
 412 |     "pssuspend.exe",
 413 |     "pssuspend64.exe",
 414 |     "RAMMap.exe",
 415 |     "RegDelNull.exe",
 416 |     "RegDelNull64.exe",
 417 |     "regjump.exe",
 418 |     "RootkitRevealer.exe",
 419 |     "ru.exe",
 420 |     "ru64.exe",
 421 |     "sdelete.exe",
 422 |     "sdelete64.exe",
 423 |     "ShareEnum.exe",
 424 |     "ShellRunas.exe",
 425 |     "sigcheck.exe",
 426 |     "sigcheck64.exe",
 427 |     "streams.exe",
 428 |     "streams64.exe",
 429 |     "strings.exe",
 430 |     "strings64.exe",
 431 |     "sync.exe",
 432 |     "sync64.exe",
 433 |     "Sysmon.exe",
 434 |     "Sysmon64.exe",
 435 |     "Tcpvcon.exe",
 436 |     "Tcpview.exe",
 437 |     "Testlimit.exe",
 438 |     "Testlimit64.exe",
 439 |     "vmmap.exe",
 440 |     "Volumeid.exe",
 441 |     "Volumeid64.exe",
 442 |     "whois.exe",
 443 |     "whois64.exe",
 444 |     "Winobj.exe",
 445 |     "ZoomIt.exe"
 446 |   ],
 447 |   "sys32_dll":[
 448 |     "ACCTRES.dll",
 449 |     "AUDIOKSE.dll",
 450 |     "ActionCenter.dll",
 451 |     "ActionCenterCPL.dll",
 452 |     "ActionQueue.dll",
 453 |     "AdmTmpl.dll",
 454 |     "AltTab.dll",
 455 |     "Api-ms-win-downlevel-advapi32-l1-1-1.dll",
 456 |     "Api-ms-win-downlevel-advapi32-l4-1-0.dll",
 457 |     "Api-ms-win-downlevel-kernel32-l1-1-0.dll",
 458 |     "Api-ms-win-downlevel-kernel32-l2-1-0.dll",
 459 |     "Api-ms-win-downlevel-ole32-l1-1-1.dll",
 460 |     "Api-ms-win-downlevel-user32-l1-1-1.dll",
 461 |     "Api-ms-win-downlevel-version-l1-1-0.dll",
 462 |     "AppIdPolicyEngineApi.dll",
 463 |     "Apphlpdm.dll",
 464 |     "AudioEng.dll",
 465 |     "AudioSes.dll",
 466 |     "AuditNativeSnapIn.dll",
 467 |     "AuditPolicyGPInterop.dll",
 468 |     "AuthFWGP.dll",
 469 |     "AuthFWSnapIn.Resources.dll",
 470 |     "AuthFWSnapIn.Resources.dll",
 471 |     "AuthFWSnapIn.Resources.dll",
 472 |     "AuthFWSnapIn.Resources.dll",
 473 |     "AuthFWSnapIn.Resources.dll",
 474 |     "AuthFWSnapIn.Resources.dll",
 475 |     "AuthFWSnapIn.Resources.dll",
 476 |     "AuthFWSnapin.dll",
 477 |     "AuthFWWizFwk.Resources.dll",
 478 |     "AuthFWWizFwk.Resources.dll",
 479 |     "AuthFWWizFwk.Resources.dll",
 480 |     "AuthFWWizFwk.Resources.dll",
 481 |     "AuthFWWizFwk.Resources.dll",
 482 |     "AuthFWWizFwk.Resources.dll",
 483 |     "AuthFWWizFwk.Resources.dll",
 484 |     "AuthFWWizFwk.dll",
 485 |     "AuxiliaryDisplayApi.dll",
 486 |     "AuxiliaryDisplayClassInstaller.dll",
 487 |     "AuxiliaryDisplayCpl.dll",
 488 |     "AuxiliaryDisplayDriverLib.dll",
 489 |     "AuxiliaryDisplayEnhancedDriver.dll",
 490 |     "AuxiliaryDisplayServices.dll",
 491 |     "AxInstSv.dll",
 492 |     "AzSqlExt.dll",
 493 |     "BWContextHandler.dll",
 494 |     "BWUnpairElevated.dll",
 495 |     "BdeHdCfgLib.dll",
 496 |     "BioCredProv.dll",
 497 |     "BlbEvents.dll",
 498 |     "BrBidiIf.dll",
 499 |     "BrBidiIf.dll",
 500 |     "BrEvIF.dll",
 501 |     "BrEvIF.dll",
 502 |     "BrScnRsm.dll",
 503 |     "BrScnRsm.dll",
 504 |     "BrSerIf.dll",
 505 |     "BrSerIf.dll",
 506 |     "BrUs2Sti.dll",
 507 |     "BrUs2Sti.dll",
 508 |     "BrUs2Sti.dll",
 509 |     "BrUs2Sti.dll",
 510 |     "BrUs2Sti.dll",
 511 |     "BrUs2Sti.dll",
 512 |     "BrUs2Sti.dll",
 513 |     "BrUs2Sti.dll",
 514 |     "BrUsbSti.dll",
 515 |     "Brmf2wia.dll",
 516 |     "Brmf3wia.dll",
 517 |     "Brmf3wia.dll",
 518 |     "Brmf3wia.dll",
 519 |     "Brmf3wia.dll",
 520 |     "Brmf3wia.dll",
 521 |     "Brmf3wia.dll",
 522 |     "Brmf3wia.dll",
 523 |     "Brmf3wia.dll",
 524 |     "BrmfBidi.dll",
 525 |     "BrmfBidi.dll",
 526 |     "BrmfLpt.dll",
 527 |     "BrmfLpt.dll",
 528 |     "BrmfUSB.dll",
 529 |     "BrmfUSB.dll",
 530 |     "BrmfcWia.dll",
 531 |     "BthMigPlugin.dll",
 532 |     "BthMtpContextHandler.dll",
 533 |     "BthpanContextHandler.dll",
 534 |     "CHxReadingStringIME.dll",
 535 |     "CIRCoInst.dll",
 536 |     "CIRCoInst.dll",
 537 |     "CIRCoInst.dll",
 538 |     "CNHMWL.dll",
 539 |     "CNHMWL6.dll",
 540 |     "CPFilters.dll",
 541 |     "CRPPresentation.dll",
 542 |     "CbsProvider.dll",
 543 |     "CertEnroll.dll",
 544 |     "CertEnrollUI.dll",
 545 |     "CertPolEng.dll",
 546 |     "CntrtextMig.dll",
 547 |     "CntrtextMig.dll",
 548 |     "CompatProvider.dll",
 549 |     "CompiledComposition.Microsoft.PowerShell.GPowerShell.dll",
 550 |     "CscMig.dll",
 551 |     "CscMig.dll",
 552 |     "CscMigDl.dll",
 553 |     "D3DCompiler_47.dll",
 554 |     "DDACLSys.dll",
 555 |     "DDOIProxy.dll",
 556 |     "DDORes.dll",
 557 |     "DShowRdpFilter.dll",
 558 |     "DU.dll",
 559 |     "DWrite.dll",
 560 |     "DXP.dll",
 561 |     "DXPTaskRingtone.dll",
 562 |     "DeviceCenter.dll",
 563 |     "DeviceDisplayStatusManager.dll",
 564 |     "DeviceMetadataParsers.dll",
 565 |     "DevicePairing.dll",
 566 |     "DevicePairingFolder.dll",
 567 |     "DevicePairingHandler.dll",
 568 |     "DevicePairingProxy.dll",
 569 |     "DeviceUxRes.dll",
 570 |     "DfsShlEx.dll",
 571 |     "DhcpSrvMigPlugin.dll",
 572 |     "DiagCpl.dll",
 573 |     "DismCore.dll",
 574 |     "DismCorePS.dll",
 575 |     "DismProv.dll",
 576 |     "Display.dll",
 577 |     "DmiProvider.dll",
 578 |     "DocumentPerformanceEvents.dll",
 579 |     "DxpTaskSync.dll",
 580 |     "ELSCore.dll",
 581 |     "EhStorAPI.dll",
 582 |     "EhStorCertDrv.dll",
 583 |     "EhStorPwdDrv.dll",
 584 |     "EhStorPwdMgr.dll",
 585 |     "EhStorShell.dll",
 586 |     "EncDec.dll",
 587 |     "EncDump.dll",
 588 |     "ExplorerFrame.dll",
 589 |     "FDResPub.dll",
 590 |     "FXSAPI.dll",
 591 |     "FXSCOM.dll",
 592 |     "FXSCOMEX.dll",
 593 |     "FXSCOMPOSE.dll",
 594 |     "FXSCOMPOSERES.dll",
 595 |     "FXSEVENT.dll",
 596 |     "FXSMON.dll",
 597 |     "FXSOCM.dll",
 598 |     "FXSRESM.dll",
 599 |     "FXSROUTE.dll",
 600 |     "FXSST.dll",
 601 |     "FXST30.dll",
 602 |     "FXSTIFF.dll",
 603 |     "FXSUTILITY.dll",
 604 |     "Faultrep.dll",
 605 |     "FirewallAPI.dll",
 606 |     "FirewallControlPanel.dll",
 607 |     "FntCache.dll",
 608 |     "FolderProvider.dll",
 609 |     "FwRemoteSvr.dll",
 610 |     "GameUXLegacyGDFs.dll",
 611 |     "Groupinghc.dll",
 612 |     "HPCDMC71.dll",
 613 |     "HelpPaneProxy.dll",
 614 |     "HotStartUserAgent.dll",
 615 |     "IDStore.dll",
 616 |     "IEAdvpack.dll",
 617 |     "IMSCTIP.dll",
 618 |     "IMTCCAC.dll",
 619 |     "IMTCDIC.dll",
 620 |     "IMTCSKF.dll",
 621 |     "IMTCTIP.dll",
 622 |     "INETRES.dll",
 623 |     "IPBusEnum.dll",
 624 |     "IPBusEnumProxy.dll",
 625 |     "IasMigPlugin.dll",
 626 |     "IasMigPlugin.dll",
 627 |     "IcCoinstall.dll",
 628 |     "IcCoinstall.dll",
 629 |     "IconCodecService.dll",
 630 |     "IdListen.dll",
 631 |     "ImSCCore.dll",
 632 |     "InkEd.dll",
 633 |     "IntlProvider.dll",
 634 |     "IphlpsvcMigPlugin.dll",
 635 |     "JavaScriptCollectionAgent.dll",
 636 |     "KernelBase.dll",
 637 |     "KrnlProv.dll",
 638 |     "L2SecHC.dll",
 639 |     "LSCSHostPolicy.dll",
 640 |     "LangCleanupSysprepAction.dll",
 641 |     "ListSvc.dll",
 642 |     "LocationApi.dll",
 643 |     "LogProvider.dll",
 644 |     "MCEWMDRMNDBootstrap.dll",
 645 |     "MFPlay.dll",
 646 |     "MMDevAPI.dll",
 647 |     "MMFUtil.dll",
 648 |     "MPSSVC.dll",
 649 |     "MSHWCHTRIME.dll",
 650 |     "MSVidCtl.dll",
 651 |     "MUILanguageCleanup.dll",
 652 |     "MXEAgent.dll",
 653 |     "Magnification.dll",
 654 |     "Mcx2Svc.dll",
 655 |     "McxDriv.dll",
 656 |     "MediaMetadataHandler.dll",
 657 |     "Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll",
 658 |     "MigSys.dll",
 659 |     "ModemMigPlugin.dll",
 660 |     "MsCtfMonitor.dll",
 661 |     "MsPbdaCoInst.dll",
 662 |     "MsRdpWebAccess.dll",
 663 |     "MshtmlDac.dll",
 664 |     "MsiCofire.dll",
 665 |     "MsiProvider.dll",
 666 |     "NCProv.dll",
 667 |     "NapiNSP.dll",
 668 |     "Narrator.resources.dll",
 669 |     "Narrator.resources.dll",
 670 |     "Narrator.resources.dll",
 671 |     "Narrator.resources.dll",
 672 |     "Narrator.resources.dll",
 673 |     "Narrator.resources.dll",
 674 |     "Narrator.resources.dll",
 675 |     "NativeHooks.dll",
 676 |     "NaturalLanguage6.dll",
 677 |     "NcdProp.dll",
 678 |     "NetProjW.dll",
 679 |     "NlbMigPlugin.dll",
 680 |     "NlsData0000.dll",
 681 |     "NlsData0001.dll",
 682 |     "NlsData0002.dll",
 683 |     "NlsData0003.dll",
 684 |     "NlsData0007.dll",
 685 |     "NlsData0009.dll",
 686 |     "NlsData000a.dll",
 687 |     "NlsData000c.dll",
 688 |     "NlsData000d.dll",
 689 |     "NlsData000f.dll",
 690 |     "NlsData0010.dll",
 691 |     "NlsData0011.dll",
 692 |     "NlsData0013.dll",
 693 |     "NlsData0018.dll",
 694 |     "NlsData0019.dll",
 695 |     "NlsData001a.dll",
 696 |     "NlsData001b.dll",
 697 |     "NlsData001d.dll",
 698 |     "NlsData0020.dll",
 699 |     "NlsData0021.dll",
 700 |     "NlsData0022.dll",
 701 |     "NlsData0024.dll",
 702 |     "NlsData0026.dll",
 703 |     "NlsData0027.dll",
 704 |     "NlsData002a.dll",
 705 |     "NlsData0039.dll",
 706 |     "NlsData003e.dll",
 707 |     "NlsData0045.dll",
 708 |     "NlsData0046.dll",
 709 |     "NlsData0047.dll",
 710 |     "NlsData0049.dll",
 711 |     "NlsData004a.dll",
 712 |     "NlsData004b.dll",
 713 |     "NlsData004c.dll",
 714 |     "NlsData004e.dll",
 715 |     "NlsData0414.dll",
 716 |     "NlsData0416.dll",
 717 |     "NlsData0816.dll",
 718 |     "NlsData081a.dll",
 719 |     "NlsData0c1a.dll",
 720 |     "NlsLexicons0001.dll",
 721 |     "NlsLexicons0002.dll",
 722 |     "NlsLexicons0003.dll",
 723 |     "NlsLexicons0007.dll",
 724 |     "NlsLexicons0009.dll",
 725 |     "NlsLexicons000a.dll",
 726 |     "NlsLexicons000c.dll",
 727 |     "NlsLexicons000d.dll",
 728 |     "NlsLexicons000f.dll",
 729 |     "NlsLexicons0010.dll",
 730 |     "NlsLexicons0011.dll",
 731 |     "NlsLexicons0013.dll",
 732 |     "NlsLexicons0018.dll",
 733 |     "NlsLexicons0019.dll",
 734 |     "NlsLexicons001a.dll",
 735 |     "NlsLexicons001b.dll",
 736 |     "NlsLexicons001d.dll",
 737 |     "NlsLexicons0020.dll",
 738 |     "NlsLexicons0021.dll",
 739 |     "NlsLexicons0022.dll",
 740 |     "NlsLexicons0024.dll",
 741 |     "NlsLexicons0026.dll",
 742 |     "NlsLexicons0027.dll",
 743 |     "NlsLexicons002a.dll",
 744 |     "NlsLexicons0039.dll",
 745 |     "NlsLexicons003e.dll",
 746 |     "NlsLexicons0045.dll",
 747 |     "NlsLexicons0046.dll",
 748 |     "NlsLexicons0047.dll",
 749 |     "NlsLexicons0049.dll",
 750 |     "NlsLexicons004a.dll",
 751 |     "NlsLexicons004b.dll",
 752 |     "NlsLexicons004c.dll",
 753 |     "NlsLexicons004e.dll",
 754 |     "NlsLexicons0414.dll",
 755 |     "NlsLexicons0416.dll",
 756 |     "NlsLexicons0816.dll",
 757 |     "NlsLexicons081a.dll",
 758 |     "NlsLexicons0c1a.dll",
 759 |     "NlsModels0011.dll",
 760 |     "Nlsdl.dll",
 761 |     "OEMHelpIns.dll",
 762 |     "OSProvider.dll",
 763 |     "OnLineIDCpl.dll",
 764 |     "OobeFldr.dll",
 765 |     "OpcServices.dll",
 766 |     "P2P.dll",
 767 |     "P2PGraph.dll",
 768 |     "PINTLCSA.dll",
 769 |     "PMIGRATE.dll",
 770 |     "PNPXAssoc.dll",
 771 |     "PNPXAssocPrx.dll",
 772 |     "PSEvents.dll",
 773 |     "Packet.dll",
 774 |     "PeerDist.dll",
 775 |     "PeerDistHttpTrans.dll",
 776 |     "PeerDistSh.dll",
 777 |     "PeerDistSvc.dll",
 778 |     "PeerDistWSDDiscoProv.dll",
 779 |     "PerfCenterCPL.dll",
 780 |     "Ph3xIB64MV.dll",
 781 |     "Ph3xIB64MV.dll",
 782 |     "Ph3xIB64MV.dll",
 783 |     "Ph3xIB64MV.dll",
 784 |     "Ph3xIB64MV.dll",
 785 |     "Ph3xIB64MV.dll",
 786 |     "Ph3xIB64MV.dll",
 787 |     "Ph3xIB64MV.dll",
 788 |     "Ph3xIB64MV.dll",
 789 |     "Ph3xIB64MV.dll",
 790 |     "Ph3xIB64MV.dll",
 791 |     "Ph3xIB64MV.dll",
 792 |     "Ph3xIB64MV.dll",
 793 |     "Ph6xIB64MV.dll",
 794 |     "Ph6xIB64MV.dll",
 795 |     "PhotoMetadataHandler.dll",
 796 |     "PlaMig.dll",
 797 |     "PlaySndSrv.dll",
 798 |     "Pnrphc.dll",
 799 |     "PolicMan.dll",
 800 |     "PortableDeviceApi.dll",
 801 |     "PortableDeviceClassExtension.dll",
 802 |     "PortableDeviceConnectApi.dll",
 803 |     "PortableDeviceStatus.dll",
 804 |     "PortableDeviceSyncProvider.dll",
 805 |     "PortableDeviceTypes.dll",
 806 |     "PortableDeviceWMDRM.dll",
 807 |     "PortableDeviceWiaCompat.dll",
 808 |     "PowerMigPlugin.dll",
 809 |     "PresentationCFFRasterizerNative_v0300.dll",
 810 |     "PresentationHostProxy.dll",
 811 |     "PresentationNative_v0300.dll",
 812 |     "PrintBrmPs.dll",
 813 |     "PrintIsolationProxy.dll",
 814 |     "Query.dll",
 815 |     "RASMM.dll",
 816 |     "RDPENCDD.dll",
 817 |     "RDPREFDD.dll",
 818 |     "RPCNDFP.dll",
 819 |     "RSMGRSTR.dll",
 820 |     "RSMGRSTR.dll",
 821 |     "RW001Ext.dll",
 822 |     "RW330Ext.dll",
 823 |     "RW430Ext.dll",
 824 |     "RW450Ext.dll",
 825 |     "RWia001.dll",
 826 |     "RWia330.dll",
 827 |     "RWia430.dll",
 828 |     "RWia450.dll",
 829 |     "RacEngn.dll",
 830 |     "RacWmiProv.dll",
 831 |     "RasMigPlugin-DL-Mig.dll",
 832 |     "RasMigPlugin-Mig.dll",
 833 |     "RasMigPlugin.dll",
 834 |     "RasMigPlugin.dll",
 835 |     "RdpGroupPolicyExtension.dll",
 836 |     "ReAgent.dll",
 837 |     "RegCtrl.dll",
 838 |     "RpcDiag.dll",
 839 |     "RpcEpMap.dll",
 840 |     "RpcNs4.dll",
 841 |     "RpcRtRemote.dll",
 842 |     "RstrtMgr.dll",
 843 |     "SCGMigPlugin.dll",
 844 |     "SCardDlg.dll",
 845 |     "SCardSvr.dll",
 846 |     "SMBHelperClass.dll",
 847 |     "SMTPCons.dll",
 848 |     "SNTSearch.dll",
 849 |     "SPInf.dll",
 850 |     "SSShim.dll",
 851 |     "SaErHdlr.dll",
 852 |     "SaImgFlt.dll",
 853 |     "SaMinDrv.dll",
 854 |     "SaSegFlt.dll",
 855 |     "SampleRes.dll",
 856 |     "SearchFolder.dll",
 857 |     "SendToOneNoteFilter.dll",
 858 |     "SendToOneNoteFilter.dll",
 859 |     "Sens.dll",
 860 |     "SensApi.dll",
 861 |     "SensorsAlsDriver.dll",
 862 |     "SensorsApi.dll",
 863 |     "SensorsClassExtension.dll",
 864 |     "SensorsCpl.dll",
 865 |     "ServDeps.dll",
 866 |     "SessEnv.dll",
 867 |     "SmartcardCredentialProvider.dll",
 868 |     "SmiEngine.dll",
 869 |     "SmiProvider.dll",
 870 |     "SndVolSSO.dll",
 871 |     "SortServer2003Compat.dll",
 872 |     "SortWindows6Compat.dll",
 873 |     "SpeechUX.dll",
 874 |     "SpeechUXRes.dll",
 875 |     "SpeechUXRes.dll",
 876 |     "SpeechUXRes.dll",
 877 |     "SpeechUXRes.dll",
 878 |     "SqlServerSpatial130.dll",
 879 |     "SqlServerSpatial140.dll",
 880 |     "SrpUxNativeSnapIn.dll",
 881 |     "StorMigPlugin.dll",
 882 |     "StorMigPlugin.dll",
 883 |     "StorSvc.dll",
 884 |     "StorageContextHandler.dll",
 885 |     "Storprop.dll",
 886 |     "StructuredQuery.dll",
 887 |     "SxsMigPlugin.dll",
 888 |     "SxsMigPlugin.dll",
 889 |     "SyncCenter.dll",
 890 |     "SyncHostps.dll",
 891 |     "SyncInfrastructure.dll",
 892 |     "SyncInfrastructureps.dll",
 893 |     "Syncreg.dll",
 894 |     "SysFxUI.dll",
 895 |     "SysFxUI.dll",
 896 |     "SysFxUI.dll",
 897 |     "TRAPI.dll",
 898 |     "TSChannel.dll",
 899 |     "TSErrRedir.dll",
 900 |     "TSWorkspace.dll",
 901 |     "TSpkg.dll",
 902 |     "TabSvc.dll",
 903 |     "Tabbtn.dll",
 904 |     "TabbtnEx.dll",
 905 |     "TableTextServiceMig.dll",
 906 |     "TableTextServiceMig.dll",
 907 |     "TapiMigPlugin.dll",
 908 |     "TapiMigPlugin.dll",
 909 |     "TapiSysprep.dll",
 910 |     "TaskSchdPS.dll",
 911 |     "TimeDateMUICallback.dll",
 912 |     "TlsRepPlugin.dll",
 913 |     "TransmogProvider.dll",
 914 |     "TsPnPRdrCoInstaller.dll",
 915 |     "TsUsbGDCoInstaller.dll",
 916 |     "TsUsbGDCoInstaller.dll",
 917 |     "TsUsbRedirectionGroupPolicyExtension.dll",
 918 |     "UIAnimation.dll",
 919 |     "UIAutomationCore.dll",
 920 |     "UIHub.dll",
 921 |     "UIRibbon.dll",
 922 |     "UIRibbonRes.dll",
 923 |     "UXInit.dll",
 924 |     "UnattendProvider.dll",
 925 |     "UniDrvUI.dll",
 926 |     "UserAccountControlSettings.dll",
 927 |     "UtcResources.dll",
 928 |     "VAN.dll",
 929 |     "VMBusVideoD.dll",
 930 |     "VSD3DRefDebug.dll",
 931 |     "VSPerf150.dll",
 932 |     "Vault.dll",
 933 |     "VaultCredProvider.dll",
 934 |     "VmbusCoinstaller.dll",
 935 |     "VmbusCoinstaller.dll",
 936 |     "VmdCoinstall.dll",
 937 |     "VmdCoinstall.dll",
 938 |     "VsGraphicsHelper.dll",
 939 |     "VsGraphicsResources.dll",
 940 |     "VsGraphicsResources.dll",
 941 |     "VsGraphicsResources.dll",
 942 |     "VsGraphicsResources.dll",
 943 |     "VsGraphicsResources.dll",
 944 |     "VsGraphicsResources.dll",
 945 |     "VsGraphicsResources.dll",
 946 |     "VsGraphicsResources.dll",
 947 |     "VsGraphicsResources.dll",
 948 |     "VsGraphicsResources.dll",
 949 |     "VsGraphicsResources.dll",
 950 |     "VsGraphicsResources.dll",
 951 |     "VsGraphicsResources.dll",
 952 |     "VsGraphicsResources.dll",
 953 |     "W32UIImg.dll",
 954 |     "W32UIRes.dll",
 955 |     "WABSyncProvider.dll",
 956 |     "WFSR.dll",
 957 |     "WLanConn.dll",
 958 |     "WLanHC.dll",
 959 |     "WMALFXGFXDSP.dll",
 960 |     "WMALFXGFXDSP.dll",
 961 |     "WMALFXGFXDSP.dll",
 962 |     "WMICOOKR.dll",
 963 |     "WMIMigrationPlugin.dll",
 964 |     "WMIMigrationPlugin.dll",
 965 |     "WMIPICMP.dll",
 966 |     "WMIPIPRT.dll",
 967 |     "WMIPJOBJ.dll",
 968 |     "WMIPSESS.dll",
 969 |     "WMIsvc.dll",
 970 |     "WMNetMgr.dll",
 971 |     "WMPEncEn.dll",
 972 |     "WMPhoto.dll",
 973 |     "WPDShServiceObj.dll",
 974 |     "WPDSp.dll",
 975 |     "WSDApi.dll",
 976 |     "WSDMon.dll",
 977 |     "WSDScDrv.dll",
 978 |     "WSDScanProxy.dll",
 979 |     "WSManMigrationPlugin.dll",
 980 |     "WSearchMigPlugin.dll",
 981 |     "WSearchMigPlugin.dll",
 982 |     "WUDFCoinstaller.dll",
 983 |     "WUDFPlatform.dll",
 984 |     "WUDFSvc.dll",
 985 |     "WUDFUsbccidDriver.dll",
 986 |     "WUDFUsbccidDriver.dll",
 987 |     "WUDFx.dll",
 988 |     "WWanAPI.dll",
 989 |     "WWanHC.dll",
 990 |     "WatWeb.dll",
 991 |     "WavDest.dll",
 992 |     "WcnApi.dll",
 993 |     "WcnEapAuthProxy.dll",
 994 |     "WcnEapPeerProxy.dll",
 995 |     "WcnNetsh.dll",
 996 |     "WcsPlugInService.dll",
 997 |     "WdfCoInstaller01009.dll",
 998 |     "WdfCoInstaller01009.dll",
 999 |     "WdfCoInstaller01009.dll",
1000 |     "WdfCoInstaller01009.dll",
1001 |     "Wdfres.dll",
1002 |     "WebClnt.dll",
1003 |     "WfHC.dll",
1004 |     "WiaExtensionHost64.dll",
1005 |     "WimProvider.dll",
1006 |     "Win32_EncryptableVolume.dll",
1007 |     "Win32_Tpm.dll",
1008 |     "WinFax.dll",
1009 |     "WinLGDep.dll",
1010 |     "WinMgmtR.dll",
1011 |     "WinSATAPI.dll",
1012 |     "WinSCard.dll",
1013 |     "WinSetupUI.dll",
1014 |     "WinSync.dll",
1015 |     "WinSyncMetastore.dll",
1016 |     "WinSyncProviders.dll",
1017 |     "WindowsAccessBridge-64.dll",
1018 |     "WindowsCodecs.dll",
1019 |     "WindowsCodecsExt.dll",
1020 |     "WininetPlugin.dll",
1021 |     "WlS0WndH.dll",
1022 |     "WlanMM.dll",
1023 |     "Wldap32.dll",
1024 |     "WmiApRes.dll",
1025 |     "WmiApRpl.dll",
1026 |     "WmiDcPrv.dll",
1027 |     "WmiPerfClass.dll",
1028 |     "WmiPerfInst.dll",
1029 |     "WmiPrvSD.dll",
1030 |     "WmpDui.dll",
1031 |     "Wpc.dll",
1032 |     "WpdFs.dll",
1033 |     "WpdMtp.dll",
1034 |     "WpdMtp.dll",
1035 |     "WpdMtpDr.dll",
1036 |     "WpdMtpDr.dll",
1037 |     "WpdMtpIP.dll",
1038 |     "WpdMtpIP.dll",
1039 |     "WpdMtpUS.dll",
1040 |     "WpdMtpUS.dll",
1041 |     "WpdMtpbt.dll",
1042 |     "WpdMtpbt.dll",
1043 |     "Wpdcomp.dll",
1044 |     "WsUpgrade.dll",
1045 |     "WsmAuto.dll",
1046 |     "WsmRes.dll",
1047 |     "WsmSvc.dll",
1048 |     "WsmWmiPl.dll",
1049 |     "Wwanadvui.dll",
1050 |     "Wwanpref.dll",
1051 |     "XInput9_1_0.dll",
1052 |     "XPSSHHDR.dll",
1053 |     "XpsFilt.dll",
1054 |     "XpsGdiConverter.dll",
1055 |     "XpsPrint.dll",
1056 |     "XpsRasterService.dll",
1057 |     "accessibilitycpl.dll",
1058 |     "acledit.dll",
1059 |     "aclui.dll",
1060 |     "acmigration.dll",
1061 |     "acppage.dll",
1062 |     "acproxy.dll",
1063 |     "activeds.dll",
1064 |     "actxprxy.dll",
1065 |     "adalsql.dll",
1066 |     "adammigrate.dll",
1067 |     "adfsmig.dll",
1068 |     "adprovider.dll",
1069 |     "adsldp.dll",
1070 |     "adsldpc.dll",
1071 |     "adsmsext.dll",
1072 |     "adsnt.dll",
1073 |     "adtschema.dll",
1074 |     "advapi32.dll",
1075 |     "advpack.dll",
1076 |     "adwsmigrate.dll",
1077 |     "adwsmigrate.dll",
1078 |     "aecache.dll",
1079 |     "aeevts.dll",
1080 |     "aeinv.dll",
1081 |     "aelupsvc.dll",
1082 |     "aepic.dll",
1083 |     "amdpcom32.dll",
1084 |     "amdpcom64.dll",
1085 |     "amstream.dll",
1086 |     "amxread.dll",
1087 |     "apds.dll",
1088 |     "api-ms-win-core-console-l1-1-0.dll",
1089 |     "api-ms-win-core-datetime-l1-1-0.dll",
1090 |     "api-ms-win-core-debug-l1-1-0.dll",
1091 |     "api-ms-win-core-delayload-l1-1-0.dll",
1092 |     "api-ms-win-core-errorhandling-l1-1-0.dll",
1093 |     "api-ms-win-core-fibers-l1-1-0.dll",
1094 |     "api-ms-win-core-file-l1-1-0.dll",
1095 |     "api-ms-win-core-file-l1-2-0.dll",
1096 |     "api-ms-win-core-file-l2-1-0.dll",
1097 |     "api-ms-win-core-handle-l1-1-0.dll",
1098 |     "api-ms-win-core-heap-l1-1-0.dll",
1099 |     "api-ms-win-core-interlocked-l1-1-0.dll",
1100 |     "api-ms-win-core-io-l1-1-0.dll",
1101 |     "api-ms-win-core-libraryloader-l1-1-0.dll",
1102 |     "api-ms-win-core-localization-l1-1-0.dll",
1103 |     "api-ms-win-core-localization-l1-2-0.dll",
1104 |     "api-ms-win-core-localregistry-l1-1-0.dll",
1105 |     "api-ms-win-core-memory-l1-1-0.dll",
1106 |     "api-ms-win-core-misc-l1-1-0.dll",
1107 |     "api-ms-win-core-namedpipe-l1-1-0.dll",
1108 |     "api-ms-win-core-processenvironment-l1-1-0.dll",
1109 |     "api-ms-win-core-processthreads-l1-1-0.dll",
1110 |     "api-ms-win-core-processthreads-l1-1-1.dll",
1111 |     "api-ms-win-core-profile-l1-1-0.dll",
1112 |     "api-ms-win-core-rtlsupport-l1-1-0.dll",
1113 |     "api-ms-win-core-string-l1-1-0.dll",
1114 |     "api-ms-win-core-synch-l1-1-0.dll",
1115 |     "api-ms-win-core-synch-l1-2-0.dll",
1116 |     "api-ms-win-core-sysinfo-l1-1-0.dll",
1117 |     "api-ms-win-core-threadpool-l1-1-0.dll",
1118 |     "api-ms-win-core-timezone-l1-1-0.dll",
1119 |     "api-ms-win-core-ums-l1-1-0.dll",
1120 |     "api-ms-win-core-util-l1-1-0.dll",
1121 |     "api-ms-win-core-xstate-l1-1-0.dll",
1122 |     "api-ms-win-core-xstate-l2-1-0.dll",
1123 |     "api-ms-win-crt-conio-l1-1-0.dll",
1124 |     "api-ms-win-crt-convert-l1-1-0.dll",
1125 |     "api-ms-win-crt-environment-l1-1-0.dll",
1126 |     "api-ms-win-crt-filesystem-l1-1-0.dll",
1127 |     "api-ms-win-crt-heap-l1-1-0.dll",
1128 |     "api-ms-win-crt-locale-l1-1-0.dll",
1129 |     "api-ms-win-crt-math-l1-1-0.dll",
1130 |     "api-ms-win-crt-multibyte-l1-1-0.dll",
1131 |     "api-ms-win-crt-private-l1-1-0.dll",
1132 |     "api-ms-win-crt-process-l1-1-0.dll",
1133 |     "api-ms-win-crt-runtime-l1-1-0.dll",
1134 |     "api-ms-win-crt-stdio-l1-1-0.dll",
1135 |     "api-ms-win-crt-string-l1-1-0.dll",
1136 |     "api-ms-win-crt-time-l1-1-0.dll",
1137 |     "api-ms-win-crt-utility-l1-1-0.dll",
1138 |     "api-ms-win-downlevel-advapi32-l1-1-0.dll",
1139 |     "api-ms-win-downlevel-advapi32-l2-1-0.dll",
1140 |     "api-ms-win-downlevel-normaliz-l1-1-0.dll",
1141 |     "api-ms-win-downlevel-ole32-l1-1-0.dll",
1142 |     "api-ms-win-downlevel-shell32-l1-1-0.dll",
1143 |     "api-ms-win-downlevel-shlwapi-l1-1-0.dll",
1144 |     "api-ms-win-downlevel-shlwapi-l2-1-0.dll",
1145 |     "api-ms-win-downlevel-user32-l1-1-0.dll",
1146 |     "api-ms-win-downlevel-version-l1-1-0.dll",
1147 |     "api-ms-win-security-base-l1-1-0.dll",
1148 |     "api-ms-win-security-lsalookup-l1-1-0.dll",
1149 |     "api-ms-win-security-sddl-l1-1-0.dll",
1150 |     "api-ms-win-service-core-l1-1-0.dll",
1151 |     "api-ms-win-service-management-l1-1-0.dll",
1152 |     "api-ms-win-service-management-l2-1-0.dll",
1153 |     "api-ms-win-service-winsvc-l1-1-0.dll",
1154 |     "apilogen.dll",
1155 |     "apircl.dll",
1156 |     "apisetschema.dll",
1157 |     "apphelp.dll",
1158 |     "appidapi.dll",
1159 |     "appidsvc.dll",
1160 |     "appinfo.dll",
1161 |     "appmgmts.dll",
1162 |     "appmgr.dll",
1163 |     "appraiser.dll",
1164 |     "appverifUI.dll",
1165 |     "apss.dll",
1166 |     "asferror.dll",
1167 |     "aspnet_counters.dll",
1168 |     "asycfilt.dll",
1169 |     "atidxx32.dll",
1170 |     "atidxx64.dll",
1171 |     "atiumd64.dll",
1172 |     "atiumd6a.dll",
1173 |     "atiumdag.dll",
1174 |     "atiumdva.dll",
1175 |     "atl.dll",
1176 |     "atl100.dll",
1177 |     "atl110.dll",
1178 |     "atmfd.dll",
1179 |     "atmlib.dll",
1180 |     "audiosrv.dll",
1181 |     "auditcse.dll",
1182 |     "auditpolmsg.dll",
1183 |     "audmigplugin.dll",
1184 |     "audmigplugin.dll",
1185 |     "authfwcfg.dll",
1186 |     "authui.dll",
1187 |     "authz.dll",
1188 |     "autoplay.dll",
1189 |     "avicap32.dll",
1190 |     "avifil32.dll",
1191 |     "avmc2032.dll",
1192 |     "avmc2064.dll",
1193 |     "avmcoxp.dll",
1194 |     "avmenum.dll",
1195 |     "avrt.dll",
1196 |     "azroles.dll",
1197 |     "azroleui.dll",
1198 |     "basecsp.dll",
1199 |     "basesrv.dll",
1200 |     "batmeter.dll",
1201 |     "batt.dll",
1202 |     "bcdprov.dll",
1203 |     "bcdsrv.dll",
1204 |     "bcrypt.dll",
1205 |     "bcryptprimitives.dll",
1206 |     "bderepair.dll",
1207 |     "bdesvc.dll",
1208 |     "bdeui.dll",
1209 |     "bepo.dll",
1210 |     "bidispl.dll",
1211 |     "biocpl.dll",
1212 |     "bitsigd.dll",
1213 |     "bitsmig.dll",
1214 |     "bitsperf.dll",
1215 |     "bitsprx2.dll",
1216 |     "bitsprx3.dll",
1217 |     "bitsprx4.dll",
1218 |     "bitsprx5.dll",
1219 |     "bitsprx6.dll",
1220 |     "blackbox.dll",
1221 |     "blb_ps.dll",
1222 |     "blbres.dll",
1223 |     "bootres.dll",
1224 |     "bootstr.dll",
1225 |     "brci08a.dll",
1226 |     "brci08b.dll",
1227 |     "brci08ui.dll",
1228 |     "brci08ui.dll",
1229 |     "brci14a.dll",
1230 |     "brci14ui.dll",
1231 |     "brcoinst.dll",
1232 |     "brcoinst.dll",
1233 |     "brcoinst.dll",
1234 |     "brcoinst.dll",
1235 |     "brcoinst.dll",
1236 |     "brdgcfg.dll",
1237 |     "bridgemigplugin.dll",
1238 |     "bridgemigplugin.dll",
1239 |     "bridgeres.dll",
1240 |     "browcli.dll",
1241 |     "browser.dll",
1242 |     "browseui.dll",
1243 |     "bthci.dll",
1244 |     "bthmigplugin.dll",
1245 |     "bthpanapi.dll",
1246 |     "bthserv.dll",
1247 |     "btpanui.dll",
1248 |     "cabinet.dll",
1249 |     "cabview.dll",
1250 |     "capiprovider.dll",
1251 |     "capisp.dll",
1252 |     "catsrv.dll",
1253 |     "catsrvps.dll",
1254 |     "catsrvut.dll",
1255 |     "cca.dll",
1256 |     "cdd.dll",
1257 |     "cdosys.dll",
1258 |     "centel.dll",
1259 |     "certCredProvider.dll",
1260 |     "certcli.dll",
1261 |     "certenc.dll",
1262 |     "certmgr.dll",
1263 |     "certprop.dll",
1264 |     "cewmdm.dll",
1265 |     "cfgbkend.dll",
1266 |     "cfgmgr32.dll",
1267 |     "chkwudrv.dll",
1268 |     "chsbrkr.dll",
1269 |     "chtbrkr.dll",
1270 |     "ci.dll",
1271 |     "cic.dll",
1272 |     "cimwin32.dll",
1273 |     "clb.dll",
1274 |     "clbcatq.dll",
1275 |     "clfsw32.dll",
1276 |     "cliconfg.dll",
1277 |     "clusapi.dll",
1278 |     "cmcfg32.dll",
1279 |     "cmdial32.dll",
1280 |     "cmi2migxml.dll",
1281 |     "cmiadapter.dll",
1282 |     "cmicryptinstall.dll",
1283 |     "cmifw.dll",
1284 |     "cmipnpinstall.dll",
1285 |     "cmisetup.dll",
1286 |     "cmitrust.dll",
1287 |     "cmiv2.dll",
1288 |     "cmlua.dll",
1289 |     "cmmigr.dll",
1290 |     "cmmigr.dll",
1291 |     "cmpbk32.dll",
1292 |     "cmstplua.dll",
1293 |     "cmutil.dll",
1294 |     "cngaudit.dll",
1295 |     "cngprovider.dll",
1296 |     "cnvfat.dll",
1297 |     "cofiredm.dll",
1298 |     "colbact.dll",
1299 |     "colorui.dll",
1300 |     "comadmin.dll",
1301 |     "comcat.dll",
1302 |     "comctl32.dll",
1303 |     "comdlg32.dll",
1304 |     "commig.dll",
1305 |     "commig.dll",
1306 |     "compatprovider.dll",
1307 |     "compstui.dll",
1308 |     "comrepl.dll",
1309 |     "comres.dll",
1310 |     "comsetup.dll",
1311 |     "comsnap.dll",
1312 |     "comsvcs.dll",
1313 |     "comuid.dll",
1314 |     "concrt140.dll",
1315 |     "concrt140d.dll",
1316 |     "connect.dll",
1317 |     "console.dll",
1318 |     "correngine.dll",
1319 |     "credssp.dll",
1320 |     "credui.dll",
1321 |     "crypt32.dll",
1322 |     "cryptbase.dll",
1323 |     "cryptdlg.dll",
1324 |     "cryptdll.dll",
1325 |     "cryptext.dll",
1326 |     "cryptnet.dll",
1327 |     "cryptsp.dll",
1328 |     "cryptsvc.dll",
1329 |     "cryptui.dll",
1330 |     "cryptxml.dll",
1331 |     "csamsp.dll",
1332 |     "cscapi.dll",
1333 |     "cscdll.dll",
1334 |     "cscobj.dll",
1335 |     "cscsvc.dll",
1336 |     "cscui.dll",
1337 |     "csiagent.dll",
1338 |     "csrsrv.dll",
1339 |     "cuzzapi.dll",
1340 |     "d2d1.dll",
1341 |     "d2d1debug2.dll",
1342 |     "d3d10.dll",
1343 |     "d3d10_1.dll",
1344 |     "d3d10_1core.dll",
1345 |     "d3d10core.dll",
1346 |     "d3d10level9.dll",
1347 |     "d3d10ref.dll",
1348 |     "d3d10sdklayers.dll",
1349 |     "d3d10warp.dll",
1350 |     "d3d11.dll",
1351 |     "d3d11_1sdklayers.dll",
1352 |     "d3d11_2sdklayers.dll",
1353 |     "d3d11ref.dll",
1354 |     "d3d11sdklayers.dll",
1355 |     "d3d8thk.dll",
1356 |     "d3d9.dll",
1357 |     "d3dref9.dll",
1358 |     "dataclen.dll",
1359 |     "davclnt.dll",
1360 |     "davhlpr.dll",
1361 |     "dbgeng.dll",
1362 |     "dbghelp.dll",
1363 |     "dbnetlib.dll",
1364 |     "dbnmpntw.dll",
1365 |     "dciman32.dll",
1366 |     "ddraw.dll",
1367 |     "ddrawex.dll",
1368 |     "defaultlocationcpl.dll",
1369 |     "defragproxy.dll",
1370 |     "defragsvc.dll",
1371 |     "deskadp.dll",
1372 |     "deskmon.dll",
1373 |     "deskperf.dll",
1374 |     "devenum.dll",
1375 |     "devinv.dll",
1376 |     "devmgr.dll",
1377 |     "devobj.dll",
1378 |     "devrtl.dll",
1379 |     "dfdts.dll",
1380 |     "dfscli.dll",
1381 |     "dfshim.dll",
1382 |     "dhcpcmonitor.dll",
1383 |     "dhcpcore.dll",
1384 |     "dhcpcore6.dll",
1385 |     "dhcpcsvc.dll",
1386 |     "dhcpcsvc6.dll",
1387 |     "dhcpsapi.dll",
1388 |     "diagER.dll",
1389 |     "diagnostic.dll",
1390 |     "diagperf.dll",
1391 |     "diagtrack.dll",
1392 |     "diagtrack.dll",
1393 |     "diapi232.dll",
1394 |     "diapi264.dll",
1395 |     "difxapi.dll",
1396 |     "dimsjob.dll",
1397 |     "dimsroam.dll",
1398 |     "dinput.dll",
1399 |     "dinput8.dll",
1400 |     "diskcopy.dll",
1401 |     "dismapi.dll",
1402 |     "dismcore.dll",
1403 |     "dismcoreps.dll",
1404 |     "dismprov.dll",
1405 |     "dispci.dll",
1406 |     "dispex.dll",
1407 |     "disrvci.dll",
1408 |     "disrvpp.dll",
1409 |     "disrvsu.dll",
1410 |     "dmdlgs.dll",
1411 |     "dmdskmgr.dll",
1412 |     "dmdskres.dll",
1413 |     "dmdskres2.dll",
1414 |     "dmintf.dll",
1415 |     "dmloader.dll",
1416 |     "dmocx.dll",
1417 |     "dmrc.dll",
1418 |     "dmsynth.dll",
1419 |     "dmusic.dll",
1420 |     "dmutil.dll",
1421 |     "dmvdsitf.dll",
1422 |     "dmvscres.dll",
1423 |     "dnsapi.dll",
1424 |     "dnscmmc.dll",
1425 |     "dnsext.dll",
1426 |     "dnshc.dll",
1427 |     "dnsrslvr.dll",
1428 |     "docprop.dll",
1429 |     "dot3api.dll",
1430 |     "dot3cfg.dll",
1431 |     "dot3dlg.dll",
1432 |     "dot3gpclnt.dll",
1433 |     "dot3gpui.dll",
1434 |     "dot3hc.dll",
1435 |     "dot3msm.dll",
1436 |     "dot3svc.dll",
1437 |     "dot3ui.dll",
1438 |     "dpapiprovider.dll",
1439 |     "dpnaddr.dll",
1440 |     "dpnathlp.dll",
1441 |     "dpnet.dll",
1442 |     "dpnhpast.dll",
1443 |     "dpnhupnp.dll",
1444 |     "dpnlobby.dll",
1445 |     "dps.dll",
1446 |     "dpx.dll",
1447 |     "drmmgrtn.dll",
1448 |     "drmmgrtn.dll",
1449 |     "drmv2clt.dll",
1450 |     "drprov.dll",
1451 |     "drt.dll",
1452 |     "drtprov.dll",
1453 |     "drttransport.dll",
1454 |     "drvstore.dll",
1455 |     "ds32gt.dll",
1456 |     "dsauth.dll",
1457 |     "dsdmo.dll",
1458 |     "dskquota.dll",
1459 |     "dskquoui.dll",
1460 |     "dsound.dll",
1461 |     "dsprop.dll",
1462 |     "dsprov.dll",
1463 |     "dsquery.dll",
1464 |     "dsrole.dll",
1465 |     "dssec.dll",
1466 |     "dssenh.dll",
1467 |     "dsuiext.dll",
1468 |     "dswave.dll",
1469 |     "dtsh.dll",
1470 |     "dui70.dll",
1471 |     "duser.dll",
1472 |     "dwmapi.dll",
1473 |     "dwmcore.dll",
1474 |     "dwmredir.dll",
1475 |     "dxcapturereplay.dll",
1476 |     "dxdiagn.dll",
1477 |     "dxgi.dll",
1478 |     "dxgidebug.dll",
1479 |     "dxmasf.dll",
1480 |     "dxpps.dll",
1481 |     "dxtmsft.dll",
1482 |     "dxtoolsmonitor.dll",
1483 |     "dxtoolsofflineanalysis.dll",
1484 |     "dxtoolsreportgenerator.dll",
1485 |     "dxtoolsreporting.dll",
1486 |     "dxtrans.dll",
1487 |     "dxva2.dll",
1488 |     "eapp3hst.dll",
1489 |     "eappcfg.dll",
1490 |     "eappgnui.dll",
1491 |     "eapphost.dll",
1492 |     "eappprxy.dll",
1493 |     "eapsvc.dll",
1494 |     "efsadu.dll",
1495 |     "efscore.dll",
1496 |     "efslsaext.dll",
1497 |     "efssvc.dll",
1498 |     "efsutil.dll",
1499 |     "els.dll",
1500 |     "elsTrans.dll",
1501 |     "elshyph.dll",
1502 |     "elslad.dll",
1503 |     "encapi.dll",
1504 |     "energy.dll",
1505 |     "ep0icb1.dll",
1506 |     "ep0icd0.dll",
1507 |     "ep0icd1.dll",
1508 |     "ep0icn1.dll",
1509 |     "ep0icn2.dll",
1510 |     "ep0icn3.dll",
1511 |     "eqossnap.dll",
1512 |     "es.dll",
1513 |     "esent.dll",
1514 |     "esentprf.dll",
1515 |     "esscli.dll",
1516 |     "eventcls.dll",
1517 |     "evr.dll",
1518 |     "f3ahvoas.dll",
1519 |     "fastprox.dll",
1520 |     "fdBth.dll",
1521 |     "fdBthProxy.dll",
1522 |     "fdPHost.dll",
1523 |     "fdPnp.dll",
1524 |     "fdProxy.dll",
1525 |     "fdSSDP.dll",
1526 |     "fdWCN.dll",
1527 |     "fdWNet.dll",
1528 |     "fdWSD.dll",
1529 |     "fde.dll",
1530 |     "fdeploy.dll",
1531 |     "fdprint.dll",
1532 |     "feclient.dll",
1533 |     "ffuprovider.dll",
1534 |     "filemgmt.dll",
1535 |     "findnetprinters.dll",
1536 |     "fltLib.dll",
1537 |     "fmifs.dll",
1538 |     "fms.dll",
1539 |     "folderprovider.dll",
1540 |     "fontext.dll",
1541 |     "fontsub.dll",
1542 |     "fphc.dll",
1543 |     "framebuf.dll",
1544 |     "framedyn.dll",
1545 |     "framedynos.dll",
1546 |     "fthsvc.dll",
1547 |     "fundisc.dll",
1548 |     "fveRecover.dll",
1549 |     "fveapi.dll",
1550 |     "fveapibase.dll",
1551 |     "fvecerts.dll",
1552 |     "fvecpl.dll",
1553 |     "fveui.dll",
1554 |     "fvewiz.dll",
1555 |     "fwcfg.dll",
1556 |     "gacinstall.dll",
1557 |     "gameux.dll",
1558 |     "gameuxmig.dll",
1559 |     "gameuxmig.dll",
1560 |     "gcdef.dll",
1561 |     "gdi32.dll",
1562 |     "generaltel.dll",
1563 |     "getuname.dll",
1564 |     "glmf32.dll",
1565 |     "glu32.dll",
1566 |     "gpapi.dll",
1567 |     "gpedit.dll",
1568 |     "gpprefcl.dll",
1569 |     "gpprnext.dll",
1570 |     "gpscript.dll",
1571 |     "gpsvc.dll",
1572 |     "gptext.dll",
1573 |     "hal.dll",
1574 |     "hbaapi.dll",
1575 |     "hcproviders.dll",
1576 |     "hcw72Co.dll",
1577 |     "hgcpl.dll",
1578 |     "hgprint.dll",
1579 |     "hhsetup.dll",
1580 |     "hid.dll",
1581 |     "hidserv.dll",
1582 |     "hlink.dll",
1583 |     "hnetcfg.dll",
1584 |     "hnetmon.dll",
1585 |     "hotplug.dll",
1586 |     "hp6000at.dll",
1587 |     "hp6000nt.dll",
1588 |     "hp6500at.dll",
1589 |     "hp6500nt.dll",
1590 |     "hp8000at.dll",
1591 |     "hp8500at.dll",
1592 |     "hp8500gt.dll",
1593 |     "hp8500nt.dll",
1594 |     "hpD5400t.dll",
1595 |     "hpb8500t.dll",
1596 |     "hpc309at.dll",
1597 |     "hpc4500t.dll",
1598 |     "hpc4600t.dll",
1599 |     "hpc5300t.dll",
1600 |     "hpc5500t.dll",
1601 |     "hpc6300t.dll",
1602 |     "hpcdmc71.dll",
1603 |     "hpd2600t.dll",
1604 |     "hpd7500t.dll",
1605 |     "hpf3lw73.dll",
1606 |     "hpf3rw73.dll",
1607 |     "hpf4400t.dll",
1608 |     "hpfevw73.dll",
1609 |     "hpfiew71.dll",
1610 |     "hpfiew71.dll",
1611 |     "hpfiew73.dll",
1612 |     "hpfigw71.dll",
1613 |     "hpfigw71.dll",
1614 |     "hpfigw73.dll",
1615 |     "hpfllw73.dll",
1616 |     "hpfpaw73.dll",
1617 |     "hpfppw73.dll",
1618 |     "hpfprw73.dll",
1619 |     "hpfrsw71.dll",
1620 |     "hpfrsw71.dll",
1621 |     "hpfrsw73.dll",
1622 |     "hpfstw73.dll",
1623 |     "hpfuiw73.dll",
1624 |     "hpfvew73.dll",
1625 |     "hpfvuw73.dll",
1626 |     "hpljbfig.dll",
1627 |     "hpotiop1.dll",
1628 |     "hpotscl1.dll",
1629 |     "hpotscld.dll",
1630 |     "hpowiad1.dll",
1631 |     "hpowiav1.dll",
1632 |     "hpowiav1.dll",
1633 |     "hpz3cw71.dll",
1634 |     "hpz3lw71.dll",
1635 |     "hpz3lw72.dll",
1636 |     "hpz3rw71.dll",
1637 |     "hpz3rw72.dll",
1638 |     "hpzc3w71.dll",
1639 |     "hpzevw72.dll",
1640 |     "hpzlaw71.dll",
1641 |     "hpzlew71.dll",
1642 |     "hpzllw71.dll",
1643 |     "hpzpaw72.dll",
1644 |     "hpzppw71.dll",
1645 |     "hpzppw72.dll",
1646 |     "hpzprw71.dll",
1647 |     "hpzprw72.dll",
1648 |     "hpzsew71.dll",
1649 |     "hpzssw71.dll",
1650 |     "hpzstw72.dll",
1651 |     "hpzuiw72.dll",
1652 |     "hpzurw71.dll",
1653 |     "hpzurw72.dll",
1654 |     "hpzvuw72.dll",
1655 |     "httpapi.dll",
1656 |     "htui.dll",
1657 |     "iTVData.dll",
1658 |     "ias.dll",
1659 |     "iasacct.dll",
1660 |     "iasads.dll",
1661 |     "iasdatastore.dll",
1662 |     "iashlpr.dll",
1663 |     "iasnap.dll",
1664 |     "iaspolcy.dll",
1665 |     "iasrad.dll",
1666 |     "iasrecst.dll",
1667 |     "iassam.dll",
1668 |     "iassdo.dll",
1669 |     "iassvcs.dll",
1670 |     "icaapi.dll",
1671 |     "icardie.dll",
1672 |     "icardres.dll",
1673 |     "icfupgd.dll",
1674 |     "icfupgd.dll",
1675 |     "icm32.dll",
1676 |     "icmp.dll",
1677 |     "icmui.dll",
1678 |     "icsigd.dll",
1679 |     "idndl.dll",
1680 |     "ieapfltr.dll",
1681 |     "iedkcs32.dll",
1682 |     "ieetwcollectorres.dll",
1683 |     "ieetwproxystub.dll",
1684 |     "ieframe.dll",
1685 |     "iepeers.dll",
1686 |     "iernonce.dll",
1687 |     "iertutil.dll",
1688 |     "iesetup.dll",
1689 |     "iesysprep.dll",
1690 |     "ieui.dll",
1691 |     "ifmon.dll",
1692 |     "ifsutil.dll",
1693 |     "ifsutilx.dll",
1694 |     "igd10umd32.dll",
1695 |     "igd10umd64.dll",
1696 |     "igdDiag.dll",
1697 |     "igdumd32.dll",
1698 |     "igdumd64.dll",
1699 |     "iismig.dll",
1700 |     "iismig.dll",
1701 |     "imagehlp.dll",
1702 |     "imageres.dll",
1703 |     "imagesp1.dll",
1704 |     "imagingprovider.dll",
1705 |     "imapi.dll",
1706 |     "imapi2.dll",
1707 |     "imapi2fs.dll",
1708 |     "imecfm.dll",
1709 |     "imever.dll",
1710 |     "imgutil.dll",
1711 |     "imjpcus.dll",
1712 |     "imjpmig.dll",
1713 |     "imjpmig.dll",
1714 |     "imjputyc.dll",
1715 |     "imkrapi.dll",
1716 |     "imkrcac.dll",
1717 |     "imkrhjd.dll",
1718 |     "imkrmig.dll",
1719 |     "imkrmig.dll",
1720 |     "imkrskf.dll",
1721 |     "imkrtip.dll",
1722 |     "imkrudt.dll",
1723 |     "imm32.dll",
1724 |     "imscmig.dll",
1725 |     "imscmig.dll",
1726 |     "imtcmig.dll",
1727 |     "imtcmig.dll",
1728 |     "inetcomm.dll",
1729 |     "inetmib1.dll",
1730 |     "inetpp.dll",
1731 |     "inetppui.dll",
1732 |     "infocardapi.dll",
1733 |     "input.dll",
1734 |     "inseng.dll",
1735 |     "invagent.dll",
1736 |     "iologmsg.dll",
1737 |     "iphlpsvc.dll",
1738 |     "ipnathlp.dll",
1739 |     "iprtprio.dll",
1740 |     "iprtrmgr.dll",
1741 |     "ipsecsnp.dll",
1742 |     "ipsmsnap.dll",
1743 |     "irclass.dll",
1744 |     "irmon.dll",
1745 |     "iscsicpl.dll",
1746 |     "iscsidsc.dll",
1747 |     "iscsied.dll",
1748 |     "iscsiexe.dll",
1749 |     "iscsilog.dll",
1750 |     "iscsilog.dll",
1751 |     "iscsilog.dll",
1752 |     "iscsium.dll",
1753 |     "iscsiwmi.dll",
1754 |     "itircl.dll",
1755 |     "itss.dll",
1756 |     "iyuv_32.dll",
1757 |     "jsIntl.dll",
1758 |     "jscript.dll",
1759 |     "jscript9.dll",
1760 |     "jscript9diag.dll",
1761 |     "jsproxy.dll",
1762 |     "kbd101.dll",
1763 |     "kbd101a.dll",
1764 |     "kbd101b.dll",
1765 |     "kbd101c.dll",
1766 |     "kbd103.dll",
1767 |     "kbd106.dll",
1768 |     "kbd106n.dll",
1769 |     "kbdax2.dll",
1770 |     "kbdgeoer.dll",
1771 |     "kbdgeoqw.dll",
1772 |     "kbdibm02.dll",
1773 |     "kbdlk41a.dll",
1774 |     "kbdnec.dll",
1775 |     "kbdnec95.dll",
1776 |     "kbdnecat.dll",
1777 |     "kbdnecnt.dll",
1778 |     "kd1394.dll",
1779 |     "kdcom.dll",
1780 |     "kdusb.dll",
1781 |     "kerberos.dll",
1782 |     "kernel32.dll",
1783 |     "kernelceip.dll",
1784 |     "keyiso.dll",
1785 |     "keymgr.dll",
1786 |     "korwbrkr.dll",
1787 |     "ksuser.dll",
1788 |     "ktmw32.dll",
1789 |     "kyw7fr03.dll",
1790 |     "kyw7fr04.dll",
1791 |     "kyw7sr02.dll",
1792 |     "kyw7sr03.dll",
1793 |     "kywdds10.dll",
1794 |     "kyweds10.dll",
1795 |     "kywuds10.dll",
1796 |     "l2gpstore.dll",
1797 |     "l2nacp.dll",
1798 |     "licmgr10.dll",
1799 |     "linkinfo.dll",
1800 |     "lltdapi.dll",
1801 |     "lltdres.dll",
1802 |     "lltdsvc.dll",
1803 |     "lmhsvc.dll",
1804 |     "loadperf.dll",
1805 |     "localsec.dll",
1806 |     "localspl.dll",
1807 |     "localui.dll",
1808 |     "locdrv.dll",
1809 |     "loghours.dll",
1810 |     "logoncli.dll",
1811 |     "logprovider.dll",
1812 |     "lpk.dll",
1813 |     "lpksetupproxyserv.dll",
1814 |     "lsasrv.dll",
1815 |     "lsmproxy.dll",
1816 |     "luainstall.dll",
1817 |     "lxkpclrd.dll",
1818 |     "lxkpclrs.dll",
1819 |     "lxkpclui.dll",
1820 |     "lxkpsrd.dll",
1821 |     "lxkpsui.dll",
1822 |     "lz32.dll",
1823 |     "mapi32.dll",
1824 |     "mapistub.dll",
1825 |     "mciavi32.dll",
1826 |     "mcicda.dll",
1827 |     "mciqtz32.dll",
1828 |     "mciseq.dll",
1829 |     "mciwave.dll",
1830 |     "mcmde.dll",
1831 |     "mcsrchPH.dll",
1832 |     "mctres.dll",
1833 |     "mcupdate_AuthenticAMD.dll",
1834 |     "mcupdate_GenuineIntel.dll",
1835 |     "mdminst.dll",
1836 |     "memdiag.dll",
1837 |     "mf.dll",
1838 |     "mf3216.dll",
1839 |     "mfAACEnc.dll",
1840 |     "mfc100.dll",
1841 |     "mfc100chs.dll",
1842 |     "mfc100cht.dll",
1843 |     "mfc100deu.dll",
1844 |     "mfc100enu.dll",
1845 |     "mfc100esn.dll",
1846 |     "mfc100fra.dll",
1847 |     "mfc100ita.dll",
1848 |     "mfc100jpn.dll",
1849 |     "mfc100kor.dll",
1850 |     "mfc100rus.dll",
1851 |     "mfc100u.dll",
1852 |     "mfc120.dll",
1853 |     "mfc120chs.dll",
1854 |     "mfc120cht.dll",
1855 |     "mfc120deu.dll",
1856 |     "mfc120enu.dll",
1857 |     "mfc120esn.dll",
1858 |     "mfc120fra.dll",
1859 |     "mfc120ita.dll",
1860 |     "mfc120jpn.dll",
1861 |     "mfc120kor.dll",
1862 |     "mfc120rus.dll",
1863 |     "mfc120u.dll",
1864 |     "mfc140.dll",
1865 |     "mfc140chs.dll",
1866 |     "mfc140cht.dll",
1867 |     "mfc140d.dll",
1868 |     "mfc140deu.dll",
1869 |     "mfc140enu.dll",
1870 |     "mfc140esn.dll",
1871 |     "mfc140fra.dll",
1872 |     "mfc140ita.dll",
1873 |     "mfc140jpn.dll",
1874 |     "mfc140kor.dll",
1875 |     "mfc140rus.dll",
1876 |     "mfc140u.dll",
1877 |     "mfc140ud.dll",
1878 |     "mfc42.dll",
1879 |     "mfc42u.dll",
1880 |     "mfcm100.dll",
1881 |     "mfcm100u.dll",
1882 |     "mfcm120.dll",
1883 |     "mfcm120u.dll",
1884 |     "mfcm140.dll",
1885 |     "mfcm140d.dll",
1886 |     "mfcm140u.dll",
1887 |     "mfcm140ud.dll",
1888 |     "mfcsubs.dll",
1889 |     "mfds.dll",
1890 |     "mfdvdec.dll",
1891 |     "mferror.dll",
1892 |     "mfh264enc.dll",
1893 |     "mfmjpegdec.dll",
1894 |     "mfplat.dll",
1895 |     "mfps.dll",
1896 |     "mfreadwrite.dll",
1897 |     "mfvdsp.dll",
1898 |     "mgmtapi.dll",
1899 |     "microsoft-windows-hal-events.dll",
1900 |     "microsoft-windows-kernel-power-events.dll",
1901 |     "microsoft-windows-kernel-processor-power-events.dll",
1902 |     "midimap.dll",
1903 |     "migcore.dll",
1904 |     "migisol.dll",
1905 |     "migres.dll",
1906 |     "migstore.dll",
1907 |     "miguiresource.dll",
1908 |     "mimefilt.dll",
1909 |     "mlang.dll",
1910 |     "mmcbase.dll",
1911 |     "mmci.dll",
1912 |     "mmcico.dll",
1913 |     "mmcndmgr.dll",
1914 |     "mmcshext.dll",
1915 |     "mmcss.dll",
1916 |     "mmres.dll",
1917 |     "modemmigplugin.dll",
1918 |     "modemui.dll",
1919 |     "mofd.dll",
1920 |     "mofinstall.dll",
1921 |     "montr_ci.dll",
1922 |     "moricons.dll",
1923 |     "mpr.dll",
1924 |     "mprapi.dll",
1925 |     "mprddm.dll",
1926 |     "mprdim.dll",
1927 |     "mprmsg.dll",
1928 |     "mqmigplugin.dll",
1929 |     "msaatext.dll",
1930 |     "msacm32.dll",
1931 |     "msafd.dll",
1932 |     "msasn1.dll",
1933 |     "msaudite.dll",
1934 |     "mscandui.dll",
1935 |     "mscat32.dll",
1936 |     "msclmd.dll",
1937 |     "mscms.dll",
1938 |     "mscoree.dll",
1939 |     "mscorees.dll",
1940 |     "mscorees.dll",
1941 |     "mscorees.dll",
1942 |     "mscorees.dll",
1943 |     "mscorees.dll",
1944 |     "mscorees.dll",
1945 |     "mscorees.dll",
1946 |     "mscorier.dll",
1947 |     "mscories.dll",
1948 |     "msctf.dll",
1949 |     "msctfmig.dll",
1950 |     "msctfmig.dll",
1951 |     "msctfp.dll",
1952 |     "msctfui.dll",
1953 |     "msdadiag.dll",
1954 |     "msdart.dll",
1955 |     "msdelta.dll",
1956 |     "msdmo.dll",
1957 |     "msdri.dll",
1958 |     "msdrm.dll",
1959 |     "msdtcVSp1res.dll",
1960 |     "msdtckrm.dll",
1961 |     "msdtclog.dll",
1962 |     "msdtcprx.dll",
1963 |     "msdtcstp.dll",
1964 |     "msdtcstp.dll",
1965 |     "msdtctm.dll",
1966 |     "msdtcuiu.dll",
1967 |     "msfeeds.dll",
1968 |     "msfeedsbs.dll",
1969 |     "msftedit.dll",
1970 |     "mshtml.dll",
1971 |     "mshtmled.dll",
1972 |     "mshtmler.dll",
1973 |     "mshtmlmedia.dll",
1974 |     "mshwjpnrIME.dll",
1975 |     "mshwkorrIME.dll",
1976 |     "msi.dll",
1977 |     "msidcrl30.dll",
1978 |     "msident.dll",
1979 |     "msidle.dll",
1980 |     "msidntld.dll",
1981 |     "msieftp.dll",
1982 |     "msihnd.dll",
1983 |     "msiltcfg.dll",
1984 |     "msimg32.dll",
1985 |     "msimsg.dll",
1986 |     "msimtf.dll",
1987 |     "msiprov.dll",
1988 |     "msisip.dll",
1989 |     "msls31.dll",
1990 |     "msmmsp.dll",
1991 |     "msmpeg2adec.dll",
1992 |     "msmpeg2vdec.dll",
1993 |     "msnetobj.dll",
1994 |     "msobjs.dll",
1995 |     "msoeacct.dll",
1996 |     "msoert2.dll",
1997 |     "msoobeui.dll",
1998 |     "mspatcha.dll",
1999 |     "mspbda.dll",
2000 |     "msports.dll",
2001 |     "msprivs.dll",
2002 |     "msrahc.dll",
2003 |     "msrating.dll",
2004 |     "msrdc.dll",
2005 |     "msrle32.dll",
2006 |     "msscntrs.dll",
2007 |     "msscp.dll",
2008 |     "mssha.dll",
2009 |     "msshavmsg.dll",
2010 |     "msshooks.dll",
2011 |     "mssign32.dll",
2012 |     "mssip32.dll",
2013 |     "mssitlb.dll",
2014 |     "mssph.dll",
2015 |     "mssphtb.dll",
2016 |     "mssprxy.dll",
2017 |     "mssrch.dll",
2018 |     "mssvp.dll",
2019 |     "msswch.dll",
2020 |     "mstask.dll",
2021 |     "mstscax.dll",
2022 |     "msutb.dll",
2023 |     "msv1_0.dll",
2024 |     "msvcirt.dll",
2025 |     "msvcp100.dll",
2026 |     "msvcp110.dll",
2027 |     "msvcp110_clr0400.dll",
2028 |     "msvcp120.dll",
2029 |     "msvcp120_clr0400.dll",
2030 |     "msvcp140.dll",
2031 |     "msvcp140d.dll",
2032 |     "msvcp60.dll",
2033 |     "msvcr100.dll",
2034 |     "msvcr100_clr0400.dll",
2035 |     "msvcr110.dll",
2036 |     "msvcr110_clr0400.dll",
2037 |     "msvcr120.dll",
2038 |     "msvcr120_clr0400.dll",
2039 |     "msvcrt.dll",
2040 |     "msvfw32.dll",
2041 |     "msvidc32.dll",
2042 |     "mswmdm.dll",
2043 |     "mswsock.dll",
2044 |     "msxml3.dll",
2045 |     "msxml3r.dll",
2046 |     "msxml6.dll",
2047 |     "msxml6r.dll",
2048 |     "msyuv.dll",
2049 |     "mtxclu.dll",
2050 |     "mtxdm.dll",
2051 |     "mtxex.dll",
2052 |     "mtxoci.dll",
2053 |     "muifontsetup.dll",
2054 |     "mxdwdrv.dll",
2055 |     "mxdwdui.dll",
2056 |     "mxdwdui.dll",
2057 |     "mxdwdui.dll",
2058 |     "mxdwdui.dll",
2059 |     "mycomput.dll",
2060 |     "mydocs.dll",
2061 |     "napdsnap.dll",
2062 |     "napipsec.dll",
2063 |     "nci.dll",
2064 |     "ncobjapi.dll",
2065 |     "ncrypt.dll",
2066 |     "ncryptui.dll",
2067 |     "ncsi.dll",
2068 |     "nddeapi.dll",
2069 |     "ndfapi.dll",
2070 |     "ndfetw.dll",
2071 |     "ndfhcdiscovery.dll",
2072 |     "ndiscapCfg.dll",
2073 |     "ndishc.dll",
2074 |     "ndismigplugin.dll",
2075 |     "ndismigplugin.dll",
2076 |     "ndismigplugin.dll",
2077 |     "ndproxystub.dll",
2078 |     "negoexts.dll",
2079 |     "netapi32.dll",
2080 |     "netbios.dll",
2081 |     "netcenter.dll",
2082 |     "netcfgx.dll",
2083 |     "netcorehc.dll",
2084 |     "netdiagfx.dll",
2085 |     "netevent.dll",
2086 |     "netfxperf.dll",
2087 |     "neth.dll",
2088 |     "netid.dll",
2089 |     "netiohlp.dll",
2090 |     "netiomig.dll",
2091 |     "netjoin.dll",
2092 |     "netlogon.dll",
2093 |     "netman.dll",
2094 |     "netmsg.dll",
2095 |     "netplwiz.dll",
2096 |     "netprof.dll",
2097 |     "netprofm.dll",
2098 |     "netshell.dll",
2099 |     "nettrace.dll",
2100 |     "netutils.dll",
2101 |     "netvscres.dll",
2102 |     "networkexplorer.dll",
2103 |     "networkitemfactory.dll",
2104 |     "networkmap.dll",
2105 |     "newdev.dll",
2106 |     "nlaapi.dll",
2107 |     "nlahc.dll",
2108 |     "nlasvc.dll",
2109 |     "nlhtml.dll",
2110 |     "nlmgp.dll",
2111 |     "nlmsprep.dll",
2112 |     "nlsbres.dll",
2113 |     "nlscoremig.dll",
2114 |     "nlscoremig.dll",
2115 |     "nlscoremig.dll",
2116 |     "normaliz.dll",
2117 |     "npWatWeb.dll",
2118 |     "npmproxy.dll",
2119 |     "nrpsrv.dll",
2120 |     "nshhttp.dll",
2121 |     "nshipsec.dll",
2122 |     "nshwfp.dll",
2123 |     "nsi.dll",
2124 |     "nsisvc.dll",
2125 |     "ntdll.dll",
2126 |     "ntdsapi.dll",
2127 |     "ntevt.dll",
2128 |     "ntlanman.dll",
2129 |     "ntlanui2.dll",
2130 |     "ntmarta.dll",
2131 |     "ntprint.dll",
2132 |     "ntshrui.dll",
2133 |     "ntvdm64.dll",
2134 |     "nvd3dum.dll",
2135 |     "nvd3dumx.dll",
2136 |     "nvwgf2um.dll",
2137 |     "nvwgf2umx.dll",
2138 |     "objsel.dll",
2139 |     "occache.dll",
2140 |     "ocsetapi.dll",
2141 |     "odbc32.dll",
2142 |     "odbc32gt.dll",
2143 |     "odbcbcp.dll",
2144 |     "odbcconf.dll",
2145 |     "odbccp32.dll",
2146 |     "odbccr32.dll",
2147 |     "odbccu32.dll",
2148 |     "odbcint.dll",
2149 |     "odbctrac.dll",
2150 |     "offfilt.dll",
2151 |     "ogldrv.dll",
2152 |     "ole32.dll",
2153 |     "oleacc.dll",
2154 |     "oleacchooks.dll",
2155 |     "oleaccrc.dll",
2156 |     "oleaut32.dll",
2157 |     "oledlg.dll",
2158 |     "oleprn.dll",
2159 |     "oleres.dll",
2160 |     "onex.dll",
2161 |     "onexui.dll",
2162 |     "opengl32.dll",
2163 |     "osbaseln.dll",
2164 |     "osuninst.dll",
2165 |     "p2pcollab.dll",
2166 |     "p2pnetsh.dll",
2167 |     "p2psvc.dll",
2168 |     "packager.dll",
2169 |     "padrs404.dll",
2170 |     "padrs411.dll",
2171 |     "padrs412.dll",
2172 |     "padrs804.dll",
2173 |     "panmap.dll",
2174 |     "pautoenr.dll",
2175 |     "pbkmigr-Mig.dll",
2176 |     "pbkmigr.dll",
2177 |     "pcadm.dll",
2178 |     "pcaevts.dll",
2179 |     "pcasvc.dll",
2180 |     "pcaui.dll",
2181 |     "pcwum.dll",
2182 |     "pcwutl.dll",
2183 |     "pdh.dll",
2184 |     "pdhui.dll",
2185 |     "perf_gputiming.dll",
2186 |     "perfctrs.dll",
2187 |     "perfdisk.dll",
2188 |     "perfnet.dll",
2189 |     "perfos.dll",
2190 |     "perfproc.dll",
2191 |     "perftrack.dll",
2192 |     "perfts.dll",
2193 |     "photowiz.dll",
2194 |     "pid.dll",
2195 |     "pidgenx.dll",
2196 |     "pifmgr.dll",
2197 |     "pku2u.dll",
2198 |     "pla.dll",
2199 |     "pmcsnap.dll",
2200 |     "pngfilt.dll",
2201 |     "pnidui.dll",
2202 |     "pnpibs.dll",
2203 |     "pnpsetup.dll",
2204 |     "pnpts.dll",
2205 |     "pnpui.dll",
2206 |     "pnrpauto.dll",
2207 |     "pnrpnsp.dll",
2208 |     "pnrpsvc.dll",
2209 |     "polstore.dll",
2210 |     "pots.dll",
2211 |     "powercpl.dll",
2212 |     "powershell_ise.resources.dll",
2213 |     "powershell_ise.resources.dll",
2214 |     "powershell_ise.resources.dll",
2215 |     "powershell_ise.resources.dll",
2216 |     "powershell_ise.resources.dll",
2217 |     "powertracker.dll",
2218 |     "powrprof.dll",
2219 |     "ppcsnap.dll",
2220 |     "prflbmsg.dll",
2221 |     "printfilterpipelineprxy.dll",
2222 |     "printui.dll",
2223 |     "prncache.dll",
2224 |     "prnfldr.dll",
2225 |     "prnntfy.dll",
2226 |     "prntvpt.dll",
2227 |     "procinst.dll",
2228 |     "profapi.dll",
2229 |     "profprov.dll",
2230 |     "profsvc.dll",
2231 |     "propsys.dll",
2232 |     "provsvc.dll",
2233 |     "provthrd.dll",
2234 |     "psapi.dll",
2235 |     "psbase.dll",
2236 |     "psisdecd.dll",
2237 |     "pspluginwkr.dll",
2238 |     "pstorec.dll",
2239 |     "pstorsvc.dll",
2240 |     "puiapi.dll",
2241 |     "puiobj.dll",
2242 |     "pwrshmsg.dll",
2243 |     "pwrshplugin.dll",
2244 |     "pwrshsip.dll",
2245 |     "python27.dll",
2246 |     "qasf.dll",
2247 |     "qcap.dll",
2248 |     "qdv.dll",
2249 |     "qdvd.dll",
2250 |     "qedit.dll",
2251 |     "qedwipes.dll",
2252 |     "qmgr.dll",
2253 |     "qmgrprxy.dll",
2254 |     "quartz.dll",
2255 |     "qwave.dll",
2256 |     "qxldd.dll",
2257 |     "qxldd.dll",
2258 |     "racpldlg.dll",
2259 |     "radardt.dll",
2260 |     "radarrs.dll",
2261 |     "rasadhlp.dll",
2262 |     "rasapi32.dll",
2263 |     "rasauto.dll",
2264 |     "rascfg.dll",
2265 |     "raschap.dll",
2266 |     "rasctrs.dll",
2267 |     "rasdiag.dll",
2268 |     "rasdlg.dll",
2269 |     "rasgcw.dll",
2270 |     "rasman.dll",
2271 |     "rasmans.dll",
2272 |     "rasmbmgr.dll",
2273 |     "rasmontr.dll",
2274 |     "rasmxs.dll",
2275 |     "rasplap.dll",
2276 |     "rasppp.dll",
2277 |     "rasser.dll",
2278 |     "rastapi.dll",
2279 |     "rastls.dll",
2280 |     "rdpcfgex.dll",
2281 |     "rdpcore.dll",
2282 |     "rdpcorekmts.dll",
2283 |     "rdpcorets.dll",
2284 |     "rdpd3d.dll",
2285 |     "rdpdd.dll",
2286 |     "rdpencom.dll",
2287 |     "rdpendp.dll",
2288 |     "rdpendp_winip.dll",
2289 |     "rdprefdrvapi.dll",
2290 |     "rdpudd.dll",
2291 |     "rdpwsx.dll",
2292 |     "rdvgumd64.dll",
2293 |     "rdvidcrl.dll",
2294 |     "recovery.dll",
2295 |     "regapi.dll",
2296 |     "regidle.dll",
2297 |     "regsvc.dll",
2298 |     "remotepg.dll",
2299 |     "repdrvfs.dll",
2300 |     "resutils.dll",
2301 |     "rgb9rast.dll",
2302 |     "riched20.dll",
2303 |     "riched32.dll",
2304 |     "rnr20.dll",
2305 |     "rpchttp.dll",
2306 |     "rpcnsh.dll",
2307 |     "rpcrt4.dll",
2308 |     "rpcss.dll",
2309 |     "rsaenh.dll",
2310 |     "rshx32.dll",
2311 |     "rtffilt.dll",
2312 |     "rtm.dll",
2313 |     "rtutils.dll",
2314 |     "samcli.dll",
2315 |     "samlib.dll",
2316 |     "samsrv.dll",
2317 |     "sapi.dll",
2318 |     "sas.dll",
2319 |     "sbe.dll",
2320 |     "sbeio.dll",
2321 |     "sberes.dll",
2322 |     "scansetting.dll",
2323 |     "scavengeui.dll",
2324 |     "sccls.dll",
2325 |     "scecli.dll",
2326 |     "scesrv.dll",
2327 |     "scext.dll",
2328 |     "schannel.dll",
2329 |     "schedcli.dll",
2330 |     "schedsvc.dll",
2331 |     "scksp.dll",
2332 |     "scripto.dll",
2333 |     "scrobj.dll",
2334 |     "scrptadm.dll",
2335 |     "scrrun.dll",
2336 |     "sdautoplay.dll",
2337 |     "sdcpl.dll",
2338 |     "sdengin2.dll",
2339 |     "sdhcinst.dll",
2340 |     "sdiageng.dll",
2341 |     "sdiagprv.dll",
2342 |     "sdiagschd.dll",
2343 |     "sdohlp.dll",
2344 |     "sdrsvc.dll",
2345 |     "sdshext.dll",
2346 |     "sechost.dll",
2347 |     "seclogon.dll",
2348 |     "secproc.dll",
2349 |     "secproc_isv.dll",
2350 |     "secproc_ssp.dll",
2351 |     "secproc_ssp_isv.dll",
2352 |     "secur32.dll",
2353 |     "security.dll",
2354 |     "sendmail.dll",
2355 |     "sensrsvc.dll",
2356 |     "serialui.dll",
2357 |     "serwvdrv.dll",
2358 |     "setbcdlocale.dll",
2359 |     "setupapi.dll",
2360 |     "setupcln.dll",
2361 |     "setupetw.dll",
2362 |     "sfc.dll",
2363 |     "sfc_os.dll",
2364 |     "shacct.dll",
2365 |     "sharemediacpl.dll",
2366 |     "shdocvw.dll",
2367 |     "shell32.dll",
2368 |     "shellstyle.dll",
2369 |     "shfolder.dll",
2370 |     "shgina.dll",
2371 |     "shimeng.dll",
2372 |     "shimgvw.dll",
2373 |     "shlwapi.dll",
2374 |     "shmig.dll",
2375 |     "shmig.dll",
2376 |     "shmig.dll",
2377 |     "shpafact.dll",
2378 |     "shsetup.dll",
2379 |     "shsvcs.dll",
2380 |     "shunimpl.dll",
2381 |     "shwebsvc.dll",
2382 |     "signdrv.dll",
2383 |     "sisbkup.dll",
2384 |     "slc.dll",
2385 |     "slcext.dll",
2386 |     "slwga.dll",
2387 |     "smcomu1.dll",
2388 |     "smpclrc1.dll",
2389 |     "smpclrd1.dll",
2390 |     "smpsrd1.dll",
2391 |     "snmpapi.dll",
2392 |     "softkbd.dll",
2393 |     "softpub.dll",
2394 |     "spbcd.dll",
2395 |     "spcmsg.dll",
2396 |     "spcmsg.dll",
2397 |     "speechuxcpl.dll",
2398 |     "sperror.dll",
2399 |     "sperror.dll",
2400 |     "spfileq.dll",
2401 |     "spnet.dll",
2402 |     "spoolss.dll",
2403 |     "spopk.dll",
2404 |     "spp.dll",
2405 |     "sppc.dll",
2406 |     "sppcc.dll",
2407 |     "sppcext.dll",
2408 |     "sppcomapi.dll",
2409 |     "sppcommdlg.dll",
2410 |     "sppinst.dll",
2411 |     "sppnp.dll",
2412 |     "sppobjs.dll",
2413 |     "spprgrss.dll",
2414 |     "sppuinotify.dll",
2415 |     "sppwinob.dll",
2416 |     "sppwmi.dll",
2417 |     "spsreng.dll",
2418 |     "spsrx.dll",
2419 |     "spwinsat.dll",
2420 |     "spwizeng.dll",
2421 |     "spwizimg.dll",
2422 |     "spwizres.dll",
2423 |     "spwizui.dll",
2424 |     "spwizui.dll",
2425 |     "spwmp.dll",
2426 |     "sqlceoledb30.dll",
2427 |     "sqlceqp30.dll",
2428 |     "sqlcese30.dll",
2429 |     "sqlncli11.dll",
2430 |     "sqlsrv32.dll",
2431 |     "sqmapi.dll",
2432 |     "srchadmin.dll",
2433 |     "srclient.dll",
2434 |     "srcore.dll",
2435 |     "srhelper.dll",
2436 |     "srloc.dll",
2437 |     "srrstr.dll",
2438 |     "srvcli.dll",
2439 |     "srvsvc.dll",
2440 |     "srwmi.dll",
2441 |     "sscore.dll",
2442 |     "ssdpapi.dll",
2443 |     "ssdpsrv.dll",
2444 |     "sspicli.dll",
2445 |     "sspisrv.dll",
2446 |     "sstpsvc.dll",
2447 |     "stclient.dll",
2448 |     "stdprov.dll",
2449 |     "sti.dll",
2450 |     "sti_ci.dll",
2451 |     "stobject.dll",
2452 |     "streamci.dll",
2453 |     "streamci.dll",
2454 |     "sud.dll",
2455 |     "swprv.dll",
2456 |     "sxproxy.dll",
2457 |     "sxs.dll",
2458 |     "sxshared.dll",
2459 |     "sxssrv.dll",
2460 |     "sxsstore.dll",
2461 |     "synceng.dll",
2462 |     "syncui.dll",
2463 |     "sysclass.dll",
2464 |     "sysmain.dll",
2465 |     "sysntfy.dll",
2466 |     "sysprepMCE.dll",
2467 |     "syssetup.dll",
2468 |     "systemcpl.dll",
2469 |     "t2embed.dll",
2470 |     "tapi3.dll",
2471 |     "tapi32.dll",
2472 |     "tapilua.dll",
2473 |     "tapiperf.dll",
2474 |     "tapisrv.dll",
2475 |     "tapiui.dll",
2476 |     "taskbarcpl.dll",
2477 |     "taskcomp.dll",
2478 |     "taskschd.dll",
2479 |     "tbs.dll",
2480 |     "tcpipcfg.dll",
2481 |     "tcpmib.dll",
2482 |     "tcpmon.dll",
2483 |     "tcpmonui.dll",
2484 |     "tdh.dll",
2485 |     "termmgr.dll",
2486 |     "termsrv.dll",
2487 |     "thawbrkr.dll",
2488 |     "themecpl.dll",
2489 |     "themeservice.dll",
2490 |     "themeui.dll",
2491 |     "thumbcache.dll",
2492 |     "tlscsp.dll",
2493 |     "tpmcompc.dll",
2494 |     "tquery.dll",
2495 |     "traffic.dll",
2496 |     "trkwks.dll",
2497 |     "tsbyuv.dll",
2498 |     "tscfgwmi.dll",
2499 |     "tsddd.dll",
2500 |     "tsgqec.dll",
2501 |     "tsmf.dll",
2502 |     "tsmigplugin.dll",
2503 |     "tsmxuui3.dll",
2504 |     "tsprint.dll",
2505 |     "tspubwmi.dll",
2506 |     "tssrvlic.dll",
2507 |     "tssysprep.dll",
2508 |     "tvratings.dll",
2509 |     "twext.dll",
2510 |     "txflog.dll",
2511 |     "txfw32.dll",
2512 |     "tzres.dll",
2513 |     "uDWM.dll",
2514 |     "ubpm.dll",
2515 |     "ucmhc.dll",
2516 |     "ucrtbase.dll",
2517 |     "ucrtbased.dll",
2518 |     "udhisapi.dll",
2519 |     "uexfat.dll",
2520 |     "ufat.dll",
2521 |     "uicom.dll",
2522 |     "ulib.dll",
2523 |     "umb.dll",
2524 |     "umdmxfrm.dll",
2525 |     "umpnpmgr.dll",
2526 |     "umpo.dll",
2527 |     "umrdp.dll",
2528 |     "unattend.dll",
2529 |     "unbcl.dll",
2530 |     "unbcl.dll",
2531 |     "unimdmat.dll",
2532 |     "uniplat.dll",
2533 |     "untfs.dll",
2534 |     "upnp.dll",
2535 |     "upnphost.dll",
2536 |     "ureg.dll",
2537 |     "url.dll",
2538 |     "urlmon.dll",
2539 |     "usbceip.dll",
2540 |     "usbdr.dll",
2541 |     "usbmigplugin.dll",
2542 |     "usbmigplugin.dll",
2543 |     "usbmon.dll",
2544 |     "usbperf.dll",
2545 |     "usbui.dll",
2546 |     "user32.dll",
2547 |     "usercpl.dll",
2548 |     "userenv.dll",
2549 |     "usp10.dll",
2550 |     "utildll.dll",
2551 |     "uudf.dll",
2552 |     "uxlib.dll",
2553 |     "uxlibres.dll",
2554 |     "uxsms.dll",
2555 |     "uxtheme.dll",
2556 |     "vaultcli.dll",
2557 |     "vaultsvc.dll",
2558 |     "vbscript.dll",
2559 |     "vcamp120.dll",
2560 |     "vcamp140.dll",
2561 |     "vcamp140d.dll",
2562 |     "vccorlib110.dll",
2563 |     "vccorlib120.dll",
2564 |     "vccorlib140.dll",
2565 |     "vccorlib140d.dll",
2566 |     "vcomp120.dll",
2567 |     "vcomp140.dll",
2568 |     "vcomp140d.dll",
2569 |     "vcruntime140.dll",
2570 |     "vcruntime140d.dll",
2571 |     "vds_ps.dll",
2572 |     "vdsbas.dll",
2573 |     "vdsdyn.dll",
2574 |     "vdsutil.dll",
2575 |     "vdsvd.dll",
2576 |     "vdswmi.dll",
2577 |     "verifier.dll",
2578 |     "version.dll",
2579 |     "vfbasics.dll",
2580 |     "vfcompat.dll",
2581 |     "vfcuzz.dll",
2582 |     "vfluapriv.dll",
2583 |     "vfnet.dll",
2584 |     "vfntlmless.dll",
2585 |     "vfnws.dll",
2586 |     "vfprint.dll",
2587 |     "vfprintpthelper.dll",
2588 |     "vfrdvcompat.dll",
2589 |     "vfwwdm32.dll",
2590 |     "vga.dll",
2591 |     "vhdprovider.dll",
2592 |     "viewprov.dll",
2593 |     "viorngci.dll",
2594 |     "viorngum.dll",
2595 |     "virtdisk.dll",
2596 |     "vmbuspipe.dll",
2597 |     "vmbuspipe.dll",
2598 |     "vmbusres.dll",
2599 |     "vmbusres.dll",
2600 |     "vmicres.dll",
2601 |     "vmicres.dll",
2602 |     "vmictimeprovider.dll",
2603 |     "vmictimeprovider.dll",
2604 |     "vmstorfltres.dll",
2605 |     "vmstorfltres.dll",
2606 |     "vpnike.dll",
2607 |     "vpnikeapi.dll",
2608 |     "vrfcore.dll",
2609 |     "vscover150.dll",
2610 |     "vsd3dwarpdebug.dll",
2611 |     "vsgraphicscapture.dll",
2612 |     "vsgraphicsexperiment.dll",
2613 |     "vsgraphicsproxystub.dll",
2614 |     "vsjitdebuggerui.dll",
2615 |     "vsjitdebuggerui.dll",
2616 |     "vsjitdebuggerui.dll",
2617 |     "vsjitdebuggerui.dll",
2618 |     "vsjitdebuggerui.dll",
2619 |     "vsjitdebuggerui.dll",
2620 |     "vsjitdebuggerui.dll",
2621 |     "vsjitdebuggerui.dll",
2622 |     "vsjitdebuggerui.dll",
2623 |     "vsjitdebuggerui.dll",
2624 |     "vsjitdebuggerui.dll",
2625 |     "vsjitdebuggerui.dll",
2626 |     "vsjitdebuggerui.dll",
2627 |     "vsjitdebuggerui.dll",
2628 |     "vss_ps.dll",
2629 |     "vssapi.dll",
2630 |     "vsstrace.dll",
2631 |     "vsswmi.dll",
2632 |     "w32time.dll",
2633 |     "w32topl.dll",
2634 |     "wavemsp.dll",
2635 |     "wbemcntl.dll",
2636 |     "wbemcomn.dll",
2637 |     "wbemcons.dll",
2638 |     "wbemcore.dll",
2639 |     "wbemdisp.dll",
2640 |     "wbemess.dll",
2641 |     "wbemprox.dll",
2642 |     "wbemsvc.dll",
2643 |     "wbiosrvc.dll",
2644 |     "wcncsvc.dll",
2645 |     "wcnwiz.dll",
2646 |     "wdc.dll",
2647 |     "wdi.dll",
2648 |     "wdiasqmmodule.dll",
2649 |     "wdigest.dll",
2650 |     "wdscore.dll",
2651 |     "wdsutil.dll",
2652 |     "webcheck.dll",
2653 |     "webio.dll",
2654 |     "webservices.dll",
2655 |     "wecapi.dll",
2656 |     "wecsvc.dll",
2657 |     "wer.dll",
2658 |     "werconcpl.dll",
2659 |     "wercplsupport.dll",
2660 |     "werdiagcontroller.dll",
2661 |     "wersvc.dll",
2662 |     "werui.dll",
2663 |     "wet.dll",
2664 |     "wevtapi.dll",
2665 |     "wevtfwd.dll",
2666 |     "wevtsvc.dll",
2667 |     "wfapigp.dll",
2668 |     "whealogr.dll",
2669 |     "whhelper.dll",
2670 |     "wiaaut.dll",
2671 |     "wiadefui.dll",
2672 |     "wiadss.dll",
2673 |     "wiafbdrv.dll",
2674 |     "wiafbdrv.dll",
2675 |     "wiarpc.dll",
2676 |     "wiascanprofiles.dll",
2677 |     "wiaservc.dll",
2678 |     "wiashext.dll",
2679 |     "wiatrace.dll",
2680 |     "wiavideo.dll",
2681 |     "wimgapi.dll",
2682 |     "wimprovider.dll",
2683 |     "win32spl.dll",
2684 |     "win32ui.dll",
2685 |     "winbio.dll",
2686 |     "winbiosensoradapter.dll",
2687 |     "winbiostorageadapter.dll",
2688 |     "winbrand.dll",
2689 |     "wincredprovider.dll",
2690 |     "winethc.dll",
2691 |     "winhttp.dll",
2692 |     "wininet.dll",
2693 |     "winipsec.dll",
2694 |     "winmm.dll",
2695 |     "winnsi.dll",
2696 |     "winprint.dll",
2697 |     "winrnr.dll",
2698 |     "winrscmd.dll",
2699 |     "winrsmgr.dll",
2700 |     "winrssrv.dll",
2701 |     "winsetup.dll",
2702 |     "winshfhc.dll",
2703 |     "winsockhc.dll",
2704 |     "winsrv.dll",
2705 |     "winsta.dll",
2706 |     "wintrust.dll",
2707 |     "winusb.dll",
2708 |     "wkscli.dll",
2709 |     "wksprtPS.dll",
2710 |     "wkssvc.dll",
2711 |     "wlanapi.dll",
2712 |     "wlancfg.dll",
2713 |     "wlandlg.dll",
2714 |     "wlangpui.dll",
2715 |     "wlanhlp.dll",
2716 |     "wlaninst.dll",
2717 |     "wlanmsm.dll",
2718 |     "wlanpref.dll",
2719 |     "wlansec.dll",
2720 |     "wlansvc.dll",
2721 |     "wlanui.dll",
2722 |     "wlanutil.dll",
2723 |     "wlgpclnt.dll",
2724 |     "wmcodecdspps.dll",
2725 |     "wmdmlog.dll",
2726 |     "wmdmps.dll",
2727 |     "wmdrmdev.dll",
2728 |     "wmdrmnet.dll",
2729 |     "wmdrmsdk.dll",
2730 |     "wmerror.dll",
2731 |     "wmi.dll",
2732 |     "wmi2xml.dll",
2733 |     "wmicmiplugin.dll",
2734 |     "wmidx.dll",
2735 |     "wmipcima.dll",
2736 |     "wmipdfs.dll",
2737 |     "wmipdskq.dll",
2738 |     "wmiprop.dll",
2739 |     "wmiprov.dll",
2740 |     "wmitimep.dll",
2741 |     "wmiutils.dll",
2742 |     "wmp.dll",
2743 |     "wmpcm.dll",
2744 |     "wmpdxm.dll",
2745 |     "wmpeffects.dll",
2746 |     "wmpmde.dll",
2747 |     "wmpps.dll",
2748 |     "wmpshell.dll",
2749 |     "wmpsrcwp.dll",
2750 |     "wmsgapi.dll",
2751 |     "wmvdspa.dll",
2752 |     "wow64.dll",
2753 |     "wow64cpu.dll",
2754 |     "wow64win.dll",
2755 |     "wpcao.dll",
2756 |     "wpcap.dll",
2757 |     "wpccpl.dll",
2758 |     "wpcmig.dll",
2759 |     "wpcsvc.dll",
2760 |     "wpcumi.dll",
2761 |     "wpd_ci.dll",
2762 |     "wpdbusenum.dll",
2763 |     "wpdshext.dll",
2764 |     "wpdwcn.dll",
2765 |     "ws2_32.dll",
2766 |     "ws2help.dll",
2767 |     "wscapi.dll",
2768 |     "wscinterop.dll",
2769 |     "wscisvif.dll",
2770 |     "wscmisetup.dll",
2771 |     "wscproxystub.dll",
2772 |     "wscsvc.dll",
2773 |     "wsdchngr.dll",
2774 |     "wsecedit.dll",
2775 |     "wsepno.dll",
2776 |     "wshbth.dll",
2777 |     "wshcon.dll",
2778 |     "wshelper.dll",
2779 |     "wshext.dll",
2780 |     "wship6.dll",
2781 |     "wshirda.dll",
2782 |     "wshnetbs.dll",
2783 |     "wshqos.dll",
2784 |     "wshrm.dll",
2785 |     "wsmplpxy.dll",
2786 |     "wsnmp32.dll",
2787 |     "wsock32.dll",
2788 |     "wtsapi32.dll",
2789 |     "wu.upgrade.ps.dll",
2790 |     "wuapi.dll",
2791 |     "wuaueng.dll",
2792 |     "wucltux.dll",
2793 |     "wudriver.dll",
2794 |     "wups.dll",
2795 |     "wups2.dll",
2796 |     "wuwebv.dll",
2797 |     "wvc.dll",
2798 |     "wwancfg.dll",
2799 |     "wwanconn.dll",
2800 |     "wwaninst.dll",
2801 |     "wwanmm.dll",
2802 |     "wwanprotdim.dll",
2803 |     "wwansvc.dll",
2804 |     "wwapi.dll",
2805 |     "wzcdlg.dll",
2806 |     "xmlfilter.dll",
2807 |     "xmllite.dll",
2808 |     "xmlprovi.dll",
2809 |     "xolehlp.dll",
2810 |     "xpsservices.dll",
2811 |     "xpssvcs.dll",
2812 |     "xrWCbgnd.dll",
2813 |     "xrWCdev.dll",
2814 |     "xrWCtmg2.dll",
2815 |     "xrWPcoin.dll",
2816 |     "xrWPcpl.dll",
2817 |     "xrWPcpst.dll",
2818 |     "xrWPpb3.dll",
2819 |     "xrWPpb4.dll",
2820 |     "xrWPusd.dll",
2821 |     "xwizards.dll",
2822 |     "xwreg.dll",
2823 |     "xwtpdui.dll",
2824 |     "xwtpw32.dll",
2825 |     "zipfldr.dll"
2826 |   ],
2827 |   "sys32_exe":[
2828 |     "AdapterTroubleshooter.exe",
2829 |     "aitagent.exe",
2830 |     "aitstatic.exe",
2831 |     "alg.exe",
2832 |     "appidcertstorecheck.exe",
2833 |     "appidpolicyconverter.exe",
2834 |     "appverif.exe",
2835 |     "at.exe",
2836 |     "AtBroker.exe",
2837 |     "attrib.exe",
2838 |     "audiodg.exe",
2839 |     "auditpol.exe",
2840 |     "autochk.exe",
2841 |     "autoconv.exe",
2842 |     "autofmt.exe",
2843 |     "AxInstUI.exe",
2844 |     "baaupdate.exe",
2845 |     "bcdboot.exe",
2846 |     "bcdedit.exe",
2847 |     "BdeHdCfg.exe",
2848 |     "BdeUISrv.exe",
2849 |     "BdeUnlockWizard.exe",
2850 |     "BitLockerWizard.exe",
2851 |     "BitLockerWizardElev.exe",
2852 |     "bitsadmin.exe",
2853 |     "winload.exe",
2854 |     "winresume.exe",
2855 |     "bootcfg.exe",
2856 |     "bridgeunattend.exe",
2857 |     "bthudtask.exe",
2858 |     "cacls.exe",
2859 |     "calc.exe",
2860 |     "CertEnrollCtrl.exe",
2861 |     "certreq.exe",
2862 |     "certutil.exe",
2863 |     "change.exe",
2864 |     "charmap.exe",
2865 |     "chglogon.exe",
2866 |     "chgport.exe",
2867 |     "chgusr.exe",
2868 |     "chkdsk.exe",
2869 |     "chkntfs.exe",
2870 |     "choice.exe",
2871 |     "cipher.exe",
2872 |     "cleanmgr.exe",
2873 |     "cliconfg.exe",
2874 |     "clip.exe",
2875 |     "cmd.exe",
2876 |     "cmdkey.exe",
2877 |     "cmdl32.exe",
2878 |     "cmmon32.exe",
2879 |     "cmstp.exe",
2880 |     "cofire.exe",
2881 |     "colorcpl.exe",
2882 |     "comrepl.exe",
2883 |     "MigRegDB.exe",
2884 |     "comp.exe",
2885 |     "compact.exe",
2886 |     "diagtrackrunner.exe",
2887 |     "CompatTelRunner.exe",
2888 |     "CompMgmtLauncher.exe",
2889 |     "ComputerDefaults.exe",
2890 |     "conhost.exe",
2891 |     "consent.exe",
2892 |     "control.exe",
2893 |     "convert.exe",
2894 |     "credwiz.exe",
2895 |     "cscript.exe",
2896 |     "csrss.exe",
2897 |     "ctfmon.exe",
2898 |     "cttune.exe",
2899 |     "cttunesvr.exe",
2900 |     "dccw.exe",
2901 |     "dcomcnfg.exe",
2902 |     "ddodiag.exe",
2903 |     "Defrag.exe",
2904 |     "DeviceDisplayObjectProvider.exe",
2905 |     "DeviceEject.exe",
2906 |     "DevicePairingWizard.exe",
2907 |     "DeviceProperties.exe",
2908 |     "DFDWiz.exe",
2909 |     "dfrgui.exe",
2910 |     "dialer.exe",
2911 |     "diantz.exe",
2912 |     "dinotify.exe",
2913 |     "diskpart.exe",
2914 |     "diskperf.exe",
2915 |     "diskraid.exe",
2916 |     "DismHost.exe",
2917 |     "Dism.exe",
2918 |     "dispdiag.exe",
2919 |     "DisplaySwitch.exe",
2920 |     "djoin.exe",
2921 |     "dllhost.exe",
2922 |     "dllhst3g.exe",
2923 |     "dnscacheugc.exe",
2924 |     "doskey.exe",
2925 |     "dpapimig.exe",
2926 |     "DpiScaling.exe",
2927 |     "dpnsvr.exe",
2928 |     "driverquery.exe",
2929 |     "BrmfRsmg.exe",
2930 |     "BrmfRsmg.exe",
2931 |     "fsquirt.exe",
2932 |     "fsquirt.exe",
2933 |     "fsquirt.exe",
2934 |     "ditrace.exe",
2935 |     "xlog.exe",
2936 |     "vmicsvc.exe",
2937 |     "drvinst.exe",
2938 |     "dvdplay.exe",
2939 |     "dvdupgrd.exe",
2940 |     "dwm.exe",
2941 |     "dxcap.exe",
2942 |     "dxcpl.exe",
2943 |     "dxdiag.exe",
2944 |     "Dxpserver.exe",
2945 |     "Eap3Host.exe",
2946 |     "efsui.exe",
2947 |     "EhStorAuthn.exe",
2948 |     "esentutl.exe",
2949 |     "eudcedit.exe",
2950 |     "eventcreate.exe",
2951 |     "eventvwr.exe",
2952 |     "expand.exe",
2953 |     "extrac32.exe",
2954 |     "fc.exe",
2955 |     "find.exe",
2956 |     "findstr.exe",
2957 |     "finger.exe",
2958 |     "fixmapi.exe",
2959 |     "fltMC.exe",
2960 |     "fontview.exe",
2961 |     "forfiles.exe",
2962 |     "fsutil.exe",
2963 |     "ftp.exe",
2964 |     "fvenotify.exe",
2965 |     "fveprompt.exe",
2966 |     "FXSCOVER.exe",
2967 |     "FXSSVC.exe",
2968 |     "FXSUNATD.exe",
2969 |     "getmac.exe",
2970 |     "GettingStarted.exe",
2971 |     "gpresult.exe",
2972 |     "gpscript.exe",
2973 |     "gpupdate.exe",
2974 |     "grpconv.exe",
2975 |     "hdwwiz.exe",
2976 |     "help.exe",
2977 |     "hwrcomp.exe",
2978 |     "hwrreg.exe",
2979 |     "icacls.exe",
2980 |     "icardagt.exe",
2981 |     "icsunattend.exe",
2982 |     "ie4uinit.exe",
2983 |     "ieetwcollector.exe",
2984 |     "ieUnatt.exe",
2985 |     "iexpress.exe",
2986 |     "imjppdmg.exe",
2987 |     "imjpuexc.exe",
2988 |     "IMSCPROP.exe",
2989 |     "IMTCPROP.exe",
2990 |     "IMCCPHR.exe",
2991 |     "InfDefaultInstall.exe",
2992 |     "ipconfig.exe",
2993 |     "irftp.exe",
2994 |     "iscsicli.exe",
2995 |     "iscsicpl.exe",
2996 |     "isoburn.exe",
2997 |     "klist.exe",
2998 |     "ksetup.exe",
2999 |     "ktmutil.exe",
3000 |     "label.exe",
3001 |     "LocationNotifications.exe",
3002 |     "Locator.exe",
3003 |     "lodctr.exe",
3004 |     "logagent.exe",
3005 |     "logman.exe",
3006 |     "logoff.exe",
3007 |     "LogonUI.exe",
3008 |     "lpksetup.exe",
3009 |     "lpremove.exe",
3010 |     "lsass.exe",
3011 |     "lsm.exe",
3012 |     "Magnify.exe",
3013 |     "makecab.exe",
3014 |     "manage-bde.exe",
3015 |     "mblctr.exe",
3016 |     "mcbuilder.exe",
3017 |     "mctadmin.exe",
3018 |     "MdRes.exe",
3019 |     "MdSched.exe",
3020 |     "mfpmp.exe",
3021 |     "microsoft.windows.softwarelogo.showdesktop.exe",
3022 |     "MigAutoPlay.exe",
3023 |     "mighost.exe",
3024 |     "MigSetup.exe",
3025 |     "migwiz.exe",
3026 |     "PostMig.exe",
3027 |     "mmc.exe",
3028 |     "mobsync.exe",
3029 |     "mountvol.exe",
3030 |     "mpnotify.exe",
3031 |     "MRT-KB890830.exe",
3032 |     "MRT.exe",
3033 |     "msconfig.exe",
3034 |     "msdt.exe",
3035 |     "msdtc.exe",
3036 |     "msfeedssync.exe",
3037 |     "msg.exe",
3038 |     "mshta.exe",
3039 |     "msiexec.exe",
3040 |     "msinfo32.exe",
3041 |     "mspaint.exe",
3042 |     "msra.exe",
3043 |     "MsSpellCheckingFacility.exe",
3044 |     "mstsc.exe",
3045 |     "mtstocom.exe",
3046 |     "MuiUnattend.exe",
3047 |     "MultiDigiMon.exe",
3048 |     "Narrator.exe",
3049 |     "nbtstat.exe",
3050 |     "ndadmin.exe",
3051 |     "net.exe",
3052 |     "net1.exe",
3053 |     "netbtugc.exe",
3054 |     "netcfg.exe",
3055 |     "netiougc.exe",
3056 |     "Netplwiz.exe",
3057 |     "NetProj.exe",
3058 |     "netsh.exe",
3059 |     "newdev.exe",
3060 |     "nltest.exe",
3061 |     "notepad.exe",
3062 |     "nslookup.exe",
3063 |     "ntoskrnl.exe",
3064 |     "ntprint.exe",
3065 |     "ocsetup.exe",
3066 |     "odbcad32.exe",
3067 |     "odbcconf.exe",
3068 |     "audit.exe",
3069 |     "msoobe.exe",
3070 |     "oobeldr.exe",
3071 |     "Setup.exe",
3072 |     "setupsqm.exe",
3073 |     "windeploy.exe",
3074 |     "openfiles.exe",
3075 |     "OptionalFeatures.exe",
3076 |     "osk.exe",
3077 |     "OxpsConverter.exe",
3078 |     "p2phost.exe",
3079 |     "pcalua.exe",
3080 |     "pcaui.exe",
3081 |     "pcawrk.exe",
3082 |     "pcwrun.exe",
3083 |     "perfmon.exe",
3084 |     "PkgMgr.exe",
3085 |     "plasrv.exe",
3086 |     "PnPUnattend.exe",
3087 |     "PnPutil.exe",
3088 |     "poqexec.exe",
3089 |     "powercfg.exe",
3090 |     "PresentationHost.exe",
3091 |     "PresentationSettings.exe",
3092 |     "prevhost.exe",
3093 |     "print.exe",
3094 |     "PrintBrmUi.exe",
3095 |     "printfilterpipelinesvc.exe",
3096 |     "PrintIsolationHost.exe",
3097 |     "printui.exe",
3098 |     "proquota.exe",
3099 |     "psr.exe",
3100 |     "PushPrinterConnections.exe",
3101 |     "qappsrv.exe",
3102 |     "qprocess.exe",
3103 |     "query.exe",
3104 |     "quser.exe",
3105 |     "qwinsta.exe",
3106 |     "rasautou.exe",
3107 |     "rasdial.exe",
3108 |     "raserver.exe",
3109 |     "rasphone.exe",
3110 |     "rdpclip.exe",
3111 |     "rdpinit.exe",
3112 |     "rdpshell.exe",
3113 |     "rdpsign.exe",
3114 |     "rdrleakdiag.exe",
3115 |     "rdrmemptylst.exe",
3116 |     "RDVGHelper.exe",
3117 |     "ReAgentc.exe",
3118 |     "recdisc.exe",
3119 |     "recover.exe",
3120 |     "reg.exe",
3121 |     "regedt32.exe",
3122 |     "regini.exe",
3123 |     "RegisterIEPKEYs.exe",
3124 |     "regsvr32.exe",
3125 |     "rekeywiz.exe",
3126 |     "relog.exe",
3127 |     "RelPost.exe",
3128 |     "repair-bde.exe",
3129 |     "replace.exe",
3130 |     "reset.exe",
3131 |     "resmon.exe",
3132 |     "RMActivate.exe",
3133 |     "RMActivate_isv.exe",
3134 |     "RMActivate_ssp.exe",
3135 |     "RMActivate_ssp_isv.exe",
3136 |     "RmClient.exe",
3137 |     "Robocopy.exe",
3138 |     "RpcPing.exe",
3139 |     "rrinstaller.exe",
3140 |     "rstrui.exe",
3141 |     "runas.exe",
3142 |     "rundll32.exe",
3143 |     "RunLegacyCPLElevated.exe",
3144 |     "runonce.exe",
3145 |     "rwinsta.exe",
3146 |     "sbunattend.exe",
3147 |     "sc.exe",
3148 |     "schtasks.exe",
3149 |     "sdbinst.exe",
3150 |     "sdchange.exe",
3151 |     "sdclt.exe",
3152 |     "sdiagnhost.exe",
3153 |     "SearchFilterHost.exe",
3154 |     "SearchIndexer.exe",
3155 |     "SearchProtocolHost.exe",
3156 |     "SecEdit.exe",
3157 |     "secinit.exe",
3158 |     "services.exe",
3159 |     "sethc.exe",
3160 |     "SetIEInstalledDate.exe",
3161 |     "setspn.exe",
3162 |     "setupcl.exe",
3163 |     "setupugc.exe",
3164 |     "setx.exe",
3165 |     "sfc.exe",
3166 |     "shadow.exe",
3167 |     "shrpubw.exe",
3168 |     "shutdown.exe",
3169 |     "sigverif.exe",
3170 |     "slui.exe",
3171 |     "smss.exe",
3172 |     "SndVol.exe",
3173 |     "SnippingTool.exe",
3174 |     "snmptrap.exe",
3175 |     "sort.exe",
3176 |     "SoundRecorder.exe",
3177 |     "SpeechUXTutorial.exe",
3178 |     "SpeechUXWiz.exe",
3179 |     "spinstall.exe",
3180 |     "PrintBrm.exe",
3181 |     "PrintBrmEngine.exe",
3182 |     "spoolsv.exe",
3183 |     "sppsvc.exe",
3184 |     "spreview.exe",
3185 |     "spreview.exe",
3186 |     "srdelayed.exe",
3187 |     "StikyNot.exe",
3188 |     "subst.exe",
3189 |     "svchost.exe",
3190 |     "sxstrace.exe",
3191 |     "SyncHost.exe",
3192 |     "syskey.exe",
3193 |     "sysprep.exe",
3194 |     "systeminfo.exe",
3195 |     "SystemPropertiesAdvanced.exe",
3196 |     "SystemPropertiesComputerName.exe",
3197 |     "SystemPropertiesDataExecutionPrevention.exe",
3198 |     "SystemPropertiesHardware.exe",
3199 |     "SystemPropertiesPerformance.exe",
3200 |     "SystemPropertiesProtection.exe",
3201 |     "SystemPropertiesRemote.exe",
3202 |     "systray.exe",
3203 |     "tabcal.exe",
3204 |     "takeown.exe",
3205 |     "TapiUnattend.exe",
3206 |     "taskeng.exe",
3207 |     "taskhost.exe",
3208 |     "taskkill.exe",
3209 |     "tasklist.exe",
3210 |     "taskmgr.exe",
3211 |     "tcmsetup.exe",
3212 |     "timeout.exe",
3213 |     "TpmInit.exe",
3214 |     "tracerpt.exe",
3215 |     "tscon.exe",
3216 |     "tsdiscon.exe",
3217 |     "tskill.exe",
3218 |     "TSTheme.exe",
3219 |     "TsUsbRedirectionGroupPolicyControl.exe",
3220 |     "TSWbPrxy.exe",
3221 |     "TsWpfWrp.exe",
3222 |     "typeperf.exe",
3223 |     "tzutil.exe",
3224 |     "ucsvc.exe",
3225 |     "UI0Detect.exe",
3226 |     "unlodctr.exe",
3227 |     "unregmp2.exe",
3228 |     "upnpcont.exe",
3229 |     "UserAccountControlSettings.exe",
3230 |     "userinit.exe",
3231 |     "Utilman.exe",
3232 |     "VaultCmd.exe",
3233 |     "VaultSysUi.exe",
3234 |     "vds.exe",
3235 |     "vdsldr.exe",
3236 |     "verclsid.exe",
3237 |     "verifier.exe",
3238 |     "vmicsvc.exe",
3239 |     "vsgraphicsremoteengine.exe",
3240 |     "vsjitdebugger.exe",
3241 |     "vssadmin.exe",
3242 |     "VSSVC.exe",
3243 |     "w32tm.exe",
3244 |     "waitfor.exe",
3245 |     "WatAdminSvc.exe",
3246 |     "WatUX.exe",
3247 |     "wbadmin.exe",
3248 |     "mofcomp.exe",
3249 |     "scrcons.exe",
3250 |     "unsecapp.exe",
3251 |     "wbemtest.exe",
3252 |     "WinMgmt.exe",
3253 |     "WMIADAP.exe",
3254 |     "WmiApSrv.exe",
3255 |     "WMIC.exe",
3256 |     "WmiPrvSE.exe",
3257 |     "wbengine.exe",
3258 |     "wecutil.exe",
3259 |     "WerFault.exe",
3260 |     "WerFaultSecure.exe",
3261 |     "wermgr.exe",
3262 |     "wevtutil.exe",
3263 |     "wextract.exe",
3264 |     "WFS.exe",
3265 |     "where.exe",
3266 |     "whoami.exe",
3267 |     "wiaacmgr.exe",
3268 |     "wiawow64.exe",
3269 |     "wimserv.exe",
3270 |     "powershell.exe",
3271 |     "powershell_ise.exe",
3272 |     "wininit.exe",
3273 |     "winload.exe",
3274 |     "winlogon.exe",
3275 |     "winresume.exe",
3276 |     "winrs.exe",
3277 |     "winrshost.exe",
3278 |     "WinSAT.exe",
3279 |     "winver.exe",
3280 |     "wisptis.exe",
3281 |     "wksprt.exe",
3282 |     "wlanext.exe",
3283 |     "wlrmdr.exe",
3284 |     "wowreg32.exe",
3285 |     "WPDShextAutoplay.exe",
3286 |     "wpnpinst.exe",
3287 |     "write.exe",
3288 |     "wscript.exe",
3289 |     "WSManHTTPConfig.exe",
3290 |     "wsmprovhost.exe",
3291 |     "wsqmcons.exe",
3292 |     "wuapp.exe",
3293 |     "wuauclt.exe",
3294 |     "WUDFHost.exe",
3295 |     "wusa.exe",
3296 |     "xcopy.exe",
3297 |     "xpsrchvw.exe",
3298 |     "xwizard.exe"
3299 |   ]
3300 | }
3301 | 


--------------------------------------------------------------------------------