Boot\memtest.exe Windows\bfsvc.exe Windows\Boot\PCAT\memtest.exe Windows\Boot\PXE\bootmgr.exe Windows\panther\setup.exe Windows\regedit.exe Windows\servicing\TrustedInstaller.exe Windows\System32\ARP.EXE Windows\System32\attrib.exe Windows\System32\autochk.exe Windows\System32\autoconv.exe Windows\System32\bcdboot.exe Windows\System32\bcdedit.exe Windows\System32\Boot\winload.exe Windows\System32\Boot\winresume.exe Windows\System32\bootcfg.exe Windows\System32\bootsect.exe Windows\System32\chkdsk.exe Windows\System32\chkntfs.exe Windows\System32\cmd.exe Windows\System32\conhost.exe Windows\System32\convert.exe Windows\System32\csrss.exe Windows\System32\diskpart.exe Windows\System32\diskraid.exe Windows\System32\Dism.exe Windows\System32\Dism\DismHost.exe Windows\System32\dllhost.exe Windows\System32\dllhst3g.exe Windows\System32\dnscacheugc.exe Windows\System32\doskey.exe Windows\System32\dpapimig.exe Windows\System32\drvcfg.exe Windows\System32\drvinst.exe Windows\System32\drvload.exe Windows\System32\Eap3Host.exe Windows\System32\esentutl.exe Windows\System32\expand.exe Windows\System32\find.exe Windows\System32\finger.exe Windows\System32\fixmapi.exe Windows\System32\fltMC.exe Windows\System32\ftp.exe Windows\System32\HOSTNAME.EXE Windows\System32\icacls.exe Windows\System32\ipconfig.exe Windows\System32\lodctr.exe Windows\System32\lsass.exe Windows\System32\mcbuilder.exe Windows\System32\mountvol.exe Windows\System32\MRINFO.EXE Windows\System32\MuiUnattend.exe Windows\System32\nbtstat.exe Windows\System32\ndadmin.exe Windows\System32\net.exe Windows\System32\net1.exe Windows\System32\netbtugc.exe Windows\System32\netcfg.exe Windows\System32\netiougc.exe Windows\System32\netsh.exe Windows\System32\NETSTAT.EXE Windows\System32\newdev.exe Windows\System32\notepad.exe Windows\System32\ntoskrnl.exe Windows\System32\ntprint.exe Windows\System32\OpenWith.exe Windows\System32\PATHPING.EXE Windows\System32\PING.EXE Windows\System32\PkgMgr.exe Windows\System32\poqexec.exe Windows\System32\print.exe Windows\System32\rasautou.exe Windows\System32\recover.exe Windows\System32\reg.exe Windows\System32\regedt32.exe Windows\System32\regsvr32.exe Windows\System32\replace.exe Windows\System32\Robocopy.exe Windows\System32\ROUTE.EXE Windows\System32\rundll32.exe Windows\System32\sacsess.exe Windows\System32\services.exe Windows\System32\sfc.exe Windows\System32\smss.exe Windows\System32\subst.exe Windows\System32\svchost.exe Windows\System32\sxstrace.exe Windows\System32\takeown.exe Windows\System32\taskmgr.exe Windows\System32\TCPSVCS.EXE Windows\System32\TRACERT.EXE Windows\System32\ucsvc.exe Windows\System32\unlodctr.exe Windows\System32\userinit.exe Windows\System32\vds.exe Windows\System32\vdsldr.exe Windows\System32\verifier.exe Windows\System32\WallpaperHost.exe Windows\System32\wevtutil.exe Windows\System32\wimserv.exe Windows\System32\wininit.exe Windows\System32\winload.exe Windows\System32\winlogon.exe Windows\System32\winpeshl.exe Windows\System32\winresume.exe Windows\System32\wowreg32.exe Windows\System32\wpeinit.exe Windows\System32\wpeutil.exe Windows\System32\xcopy.exe Windows\SysWOW64\Dism\DismHost.exe Windows\SysWOW64\PkgMgr.exe Windows\SysWOW64\poqexec.exe Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.3.9600.16384_none_d2b24d5495b82963\autochk.exe Windows\WinSxS\amd64_microsoft-windows-autochkconfigurator_31bf3856ad364e35_6.3.9600.16384_none_0980dba35bbb7c3c\chkntfs.exe Windows\WinSxS\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.3.9600.16384_none_59f6f73560c1a48d\winresume.exe Windows\WinSxS\amd64_microsoft-windows-b..iondata-cmdlinetool_31bf3856ad364e35_6.3.9600.16384_none_78e95cd07922a6bf\bcdedit.exe Windows\WinSxS\amd64_microsoft-windows-b..ment-bootsectortool_31bf3856ad364e35_6.3.9600.16384_none_fd4cc49f698193ee\bootsect.exe Windows\WinSxS\amd64_microsoft-windows-b..ment-windows-minwin_31bf3856ad364e35_6.3.9600.16384_none_40aa0665cff59504\winload.exe Windows\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.16384_none_4be51a3d409de6bc\winload.exe Windows\WinSxS\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.3.9600.16384_none_4be51a3d409de6bc\winresume.exe Windows\WinSxS\amd64_microsoft-windows-b..vironment-servicing_31bf3856ad364e35_6.3.9600.16384_none_16d2e13d798b7904\bfsvc.exe Windows\WinSxS\amd64_microsoft-windows-bcdboot-cmdlinetool_31bf3856ad364e35_6.3.9600.16384_none_521444a0121b6d02\bcdboot.exe Windows\WinSxS\amd64_microsoft-windows-bootconfig_31bf3856ad364e35_6.3.9600.16384_none_fcd4dd14ee3f1ae8\bootcfg.exe Windows\WinSxS\amd64_microsoft-windows-chkdsk_31bf3856ad364e35_6.3.9600.16384_none_b2a4b9eb60a78404\chkdsk.exe Windows\WinSxS\amd64_microsoft-windows-commandprompt_31bf3856ad364e35_6.3.9600.16384_none_7bcb26c7ee538fe3\cmd.exe Windows\WinSxS\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.3.9600.16384_none_34e24ec0c77907ea\dllhst3g.exe Windows\WinSxS\amd64_microsoft-windows-com-surrogate-core_31bf3856ad364e35_6.3.9600.16384_none_25a8f00faa8f185c\dllhost.exe Windows\WinSxS\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.3.9600.16384_none_651a275bd610cc27\conhost.exe Windows\WinSxS\amd64_microsoft-windows-convert_31bf3856ad364e35_6.3.9600.16384_none_8d93aac67c493a73\autoconv.exe Windows\WinSxS\amd64_microsoft-windows-convert_31bf3856ad364e35_6.3.9600.16384_none_8d93aac67c493a73\convert.exe Windows\WinSxS\amd64_microsoft-windows-coresystemminpnp_31bf3856ad364e35_6.3.9600.16384_none_fb1b7144c04761aa\drvcfg.exe Windows\WinSxS\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.3.9600.16384_none_67c00b4100e2ff79\drvinst.exe Windows\WinSxS\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.3.9600.16384_none_49a243e2b80cb4c0\csrss.exe Windows\WinSxS\amd64_microsoft-windows-d..ervicing-management_31bf3856ad364e35_6.3.9600.16384_none_4f680322e1a371ba\Dism.exe Windows\WinSxS\amd64_microsoft-windows-d..ing-management-core_31bf3856ad364e35_6.3.9600.16384_none_1bf2860ffeb621a8\DismHost.exe Windows\WinSxS\amd64_microsoft-windows-diskpart_31bf3856ad364e35_6.3.9600.16384_none_5996c56569e3ed38\diskpart.exe Windows\WinSxS\amd64_microsoft-windows-diskraid_31bf3856ad364e35_6.3.9600.16384_none_5648041b6bf13817\diskraid.exe Windows\WinSxS\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.3.9600.16384_none_d2a0dce8565069df\dnscacheugc.exe Windows\WinSxS\amd64_microsoft-windows-dpapi-keys_31bf3856ad364e35_6.3.9600.16384_none_6e913306a167da4b\dpapimig.exe Windows\WinSxS\amd64_microsoft-windows-driververifier_31bf3856ad364e35_6.3.9600.16384_none_ab2a3b2270b26cbe\verifier.exe Windows\WinSxS\amd64_microsoft-windows-e..ageengine-utilities_31bf3856ad364e35_6.3.9600.16384_none_ca4a4d08993827a1\esentutl.exe Windows\WinSxS\amd64_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.3.9600.16384_none_7b0847ebd215167e\Eap3Host.exe Windows\WinSxS\amd64_microsoft-windows-e..ymanagementservices_31bf3856ad364e35_6.3.9600.16384_none_e43325cdcb0bf1ec\sacsess.exe Windows\WinSxS\amd64_microsoft-windows-eventlog-commandline_31bf3856ad364e35_6.3.9600.16384_none_b19295aa50c70dfc\wevtutil.exe Windows\WinSxS\amd64_microsoft-windows-expand_31bf3856ad364e35_6.3.9600.16384_none_4930dc872bd7777c\expand.exe Windows\WinSxS\amd64_microsoft-windows-filtermanager-utils_31bf3856ad364e35_6.3.9600.16384_none_0a4c130cf94eb455\fltMC.exe Windows\WinSxS\amd64_microsoft-windows-ftp_31bf3856ad364e35_6.3.9600.16384_none_9da9bdfb2c81042a\ftp.exe Windows\WinSxS\amd64_microsoft-windows-icacls_31bf3856ad364e35_6.3.9600.16384_none_2372ff1b79f137cf\icacls.exe Windows\WinSxS\amd64_microsoft-windows-international-core_31bf3856ad364e35_6.3.9600.16384_none_da68c493adb806aa\MuiUnattend.exe Windows\WinSxS\amd64_microsoft-windows-ipconfig_31bf3856ad364e35_6.3.9600.16384_none_3cf8510aebe5a8c5\ipconfig.exe Windows\WinSxS\amd64_microsoft-windows-legacytaskmanager_31bf3856ad364e35_6.3.9600.16384_none_f471ccc537358ac1\taskmgr.exe Windows\WinSxS\amd64_microsoft-windows-lsa-minwin_31bf3856ad364e35_6.3.9600.16384_none_2e2a01a866456d93\lsass.exe Windows\WinSxS\amd64_microsoft-windows-m..odeupdate-servicing_31bf3856ad364e35_6.3.9600.16384_none_944664fa79fb45ed\ucsvc.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\attrib.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\doskey.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\find.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\print.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\replace.exe Windows\WinSxS\amd64_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.3.9600.16384_none_6ddb4db23b4b9aef\subst.exe Windows\WinSxS\amd64_microsoft-windows-mapi_31bf3856ad364e35_6.3.9600.16384_none_9c0ba159edb6b599\fixmapi.exe Windows\WinSxS\amd64_microsoft-windows-mountvol_31bf3856ad364e35_6.3.9600.16384_none_a317d978256a5276\mountvol.exe Windows\WinSxS\amd64_microsoft-windows-muicachebuilder_31bf3856ad364e35_6.3.9600.16384_none_0acafc4688cf5b5c\mcbuilder.exe Windows\WinSxS\amd64_microsoft-windows-nbtstat_31bf3856ad364e35_6.3.9600.16384_none_8ecee47cf255f8ce\nbtstat.exe Windows\WinSxS\amd64_microsoft-windows-net1-command-line-tool_31bf3856ad364e35_6.3.9600.16384_none_779a537c288a30c2\net1.exe Windows\WinSxS\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.3.9600.16384_none_5123286ccb3b2dd9\netbtugc.exe Windows\WinSxS\amd64_microsoft-windows-netcfg_31bf3856ad364e35_6.3.9600.16384_none_00ed3bc325708d89\netcfg.exe Windows\WinSxS\amd64_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.3.9600.16384_none_42f0b18b466e164f\net.exe Windows\WinSxS\amd64_microsoft-windows-netsh_31bf3856ad364e35_6.3.9600.16384_none_505f5648cbcfd8c6\netsh.exe Windows\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_6.3.9600.16384_none_0234ab5f24a01e27\ndadmin.exe Windows\WinSxS\amd64_microsoft-windows-newdev_31bf3856ad364e35_6.3.9600.16384_none_0234ab5f24a01e27\newdev.exe Windows\WinSxS\amd64_microsoft-windows-notepad_31bf3856ad364e35_6.3.9600.16384_none_5fd8ed8643f6c1e7\notepad.exe Windows\WinSxS\amd64_microsoft-windows-openwith_31bf3856ad364e35_6.3.9600.16384_none_5ddf2eb746aaec0e\OpenWith.exe Windows\WinSxS\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.3.9600.16384_none_5ceec1ab881a18dc\ntoskrnl.exe Windows\WinSxS\amd64_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.3.9600.16384_none_e0c1da4751633d18\ntprint.exe Windows\WinSxS\amd64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.3.9600.16384_none_62445d62d2ddcfe5\lodctr.exe Windows\WinSxS\amd64_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.3.9600.16384_none_62445d62d2ddcfe5\unlodctr.exe Windows\WinSxS\amd64_microsoft-windows-packagemanager_31bf3856ad364e35_6.3.9600.16384_none_dd962426c73b4c1b\PkgMgr.exe Windows\WinSxS\amd64_microsoft-windows-ping-utilities_31bf3856ad364e35_6.3.9600.16384_none_99f0051263d1cec9\PATHPING.EXE Windows\WinSxS\amd64_microsoft-windows-ping-utilities_31bf3856ad364e35_6.3.9600.16384_none_99f0051263d1cec9\PING.EXE Windows\WinSxS\amd64_microsoft-windows-ping-utilities_31bf3856ad364e35_6.3.9600.16384_none_99f0051263d1cec9\TRACERT.EXE Windows\WinSxS\amd64_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.3.9600.16384_none_22529407fea67f59\reg.exe Windows\WinSxS\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_6.3.9600.16384_none_00985ec1394a25d7\rasautou.exe Windows\WinSxS\amd64_microsoft-windows-recover_31bf3856ad364e35_6.3.9600.16384_none_76d1add9889205e6\recover.exe Windows\WinSxS\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.3.9600.16384_none_e4ed156fafcfad0b\regedit.exe Windows\WinSxS\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.3.9600.16384_none_e4ed156fafcfad0b\regedt32.exe Windows\WinSxS\amd64_microsoft-windows-regsvr32_31bf3856ad364e35_6.3.9600.16384_none_69157d5c037a9ea6\regsvr32.exe Windows\WinSxS\amd64_microsoft-windows-robocopy_31bf3856ad364e35_6.3.9600.16384_none_b7c58f8bc05b432d\Robocopy.exe Windows\WinSxS\amd64_microsoft-windows-rundll32_31bf3856ad364e35_6.3.9600.16384_none_c8c3b19a7ee19958\rundll32.exe Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.16384_none_2fd72579d09a45e9\services.exe Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.3.9600.16384_none_a679b9abd944c459\svchost.exe Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\poqexec.exe Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\TiFileFetcher.exe Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\TiWorker.exe Windows\WinSxS\amd64_microsoft-windows-setupapi_31bf3856ad364e35_6.3.9600.16384_none_25b3b9bb9a34e0c9\wowreg32.exe Windows\WinSxS\amd64_microsoft-windows-smss-minwin_31bf3856ad364e35_6.3.9600.16384_none_6f1f364dbcc273d3\smss.exe Windows\WinSxS\amd64_microsoft-windows-sxs_31bf3856ad364e35_6.3.9600.16384_none_9f0afc272b9ac1ae\sxstrace.exe Windows\WinSxS\amd64_microsoft-windows-takeown_31bf3856ad364e35_6.3.9600.16384_none_eaa9c5d4e995206f\takeown.exe Windows\WinSxS\amd64_microsoft-windows-tcpip_31bf3856ad364e35_6.3.9600.16384_none_5243f5e76350b12c\netiougc.exe Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\ARP.EXE Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\finger.exe Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\HOSTNAME.EXE Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\MRINFO.EXE Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\NETSTAT.EXE Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\ROUTE.EXE Windows\WinSxS\amd64_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.3.9600.16384_none_238553b522d52927\TCPSVCS.EXE Windows\WinSxS\amd64_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.3.9600.16384_none_81cb938f211dbc6f\TrustedInstaller.exe Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_cce71a20a5a6fe7f\userinit.exe Windows\WinSxS\amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.16384_none_5ba932aacea5a2ad\vds.exe Windows\WinSxS\amd64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.3.9600.16384_none_5ba932aacea5a2ad\vdsldr.exe Windows\WinSxS\amd64_microsoft-windows-wallpaperhost_31bf3856ad364e35_6.3.9600.16384_none_4ec257a979539018\WallpaperHost.exe Windows\WinSxS\amd64_microsoft-windows-wimgapi_31bf3856ad364e35_6.3.9600.16384_none_79ba0274e8d5902a\wimserv.exe Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.3.9600.16384_none_21b118d9d847ad16\wininit.exe Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.16384_none_60816121a8e88269\winlogon.exe Windows\WinSxS\amd64_microsoft-windows-winpe_tools_31bf3856ad364e35_6.3.9600.16384_none_ebbe02ec0ad6d113\winpeshl.exe Windows\WinSxS\amd64_microsoft-windows-winpe_tools_31bf3856ad364e35_6.3.9600.16384_none_ebbe02ec0ad6d113\wpeinit.exe Windows\WinSxS\amd64_microsoft-windows-winpe_tools_31bf3856ad364e35_6.3.9600.16384_none_ebbe02ec0ad6d113\wpeutil.exe Windows\WinSxS\amd64_microsoft-windows-winpe-drvload_31bf3856ad364e35_6.3.9600.16384_none_7cd72a47c3e7d986\drvload.exe Windows\WinSxS\amd64_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.3.9600.16384_none_1bfd2d47bf3d3839\sfc.exe Windows\WinSxS\amd64_microsoft-windows-xcopy_31bf3856ad364e35_6.3.9600.16384_none_53b40ab3c84345ef\xcopy.exe Windows\WinSxS\wow64_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.3.9600.16384_none_d34858c70cf5232d\memtest.exe Windows\WinSxS\x86_microsoft-windows-bootenvironment-pxe_31bf3856ad364e35_6.3.9600.16384_none_81f29894ad63fa03\bootmgr.exe Windows\WinSxS\x86_microsoft-windows-d..ing-management-core_31bf3856ad364e35_6.3.9600.16384_none_bfd3ea8c4658b072\DismHost.exe Windows\WinSxS\x86_microsoft-windows-packagemanager_31bf3856ad364e35_6.3.9600.16384_none_817788a30edddae5\PkgMgr.exe Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_9dff25cfe2e40fa2\poqexec.exe Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_9dff25cfe2e40fa2\TiFileFetcher.exe Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_9dff25cfe2e40fa2\TiWorker.exe