inspect: Look for %systemroot%/system32 for Windows heuristic.