There is a notion of special directories under Windows, so you can request the Program Files directory without knowing even what drive it would be on. I do real

There is a notion of special directories under Windows, so you can request the Program Files directory without knowing even what drive it would be on. I do realize that a path-based whitelisting approach would introduce unwanted limitations, but considering the cost of false positives, it may be warranted to accept such limitations.