#readwise # Windows Fundamentals - Operating System Structure ![rw-book-cover](https://readwise-assets.s3.amazonaws.com/static/images/article2.74d541386bbf.png) ## Metadata - Author: [[Hack The Box]] - Full Title: Windows Fundamentals - Operating System Structure - URL: https://academy.hackthebox.com/module/49/section/455 ## Summary The root directory of Windows is usually the C drive, where the operating system is installed. It has several important folders, such as Program Files for installed applications and Users for user profiles. There are also hidden folders like ProgramData that store essential data for programs. Commands like "dir" and "tree" can be used to explore the file system and view its structure. ## Highlights In Windows operating systems, the root directory is `<drive_letter>:\` (commonly C drive). The root directory (also known as the boot partition) is where the operating system is installed. Other physical and virtual drives are assigned other letters, for example, Data (E:). The directory structure of the boot partition is as follows: |Directory|Function| |-|-| |Perflogs|Can hold Windows performance logs but is empty by default.| |Program Files|On 32-bit systems, all 16-bit and 32-bit programs are installed here. On 64-bit systems, only 64-bit programs are installed here.| |Program Files (x86)|32-bit and 16-bit programs are installed here on 64-bit editions of Windows.| |ProgramData|This is a hidden folder that contains data that is essential for certain installed programs to run. This data is accessible by the program no matter what user is running it.| |Users|This folder contains user profiles for each user that logs onto the system and contains the two folders Public and Default.| |Default|This is the default user profile template for all created users. Whenever a new user is added to the system, their profile is based on the Default profile.| |Public|This folder is intended for computer users to share files and is accessible to all users by default. This folder is shared over the network by default but requires a valid network account to access.| |AppData|Per user application data and settings are stored in a hidden user subfolder (i.e., cliff.moore\AppData). Each of these folders contains three subfolders. The Roaming folder contains machine-independent data that should follow the user's profile, such as custom dictionaries. The Local folder is specific to the computer itself and is never synchronized across the network. LocalLow is similar to the Local folder, but it has a lower data integrity level. Therefore it can be used, for example, by a web browser set to protected or safe mode.| |Windows|The majority of the files required for the Windows operating system are contained here.| |System, System32, SysWOW64|Contains all DLLs required for the core features of Windows and the Windows API. The operating system searches these folders any time a program asks to load a DLL without specifying an absolute path.| |WinSxS|The Windows Component Store contains a copy of all Windows components, updates, and service packs.| ([View Highlight](https://read.readwise.io/read/01jtqcpj2jtjeed8hcwt5g594f)) --- The [tree](https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/tree) utility is useful for graphically displaying the directory structure of a path or disk. ([View Highlight](https://read.readwise.io/read/01jtqcq4p8ywtx59b5b51gef4w)) --- The `tree` command can provide us with a large amount of information. The following command can be used to walk through all the files in the C drive, one screen at a time. This command can be modified to be run against any directory. ([View Highlight](https://read.readwise.io/read/01jtqcqfha966b2cmpyaa8c49q)) ---