Technical Information
- <Drive name for removable media>:\offwhite-manual.txt
- <Drive name for removable media>:\correct.avi
- <Drive name for removable media>:\split.avi
- <Drive name for removable media>:\archer.avi
- <Drive name for removable media>:\dialmap.bmp
- <Drive name for removable media>:\default.bmp
- <Drive name for removable media>:\coffee.bmp
- <Drive name for removable media>:\tileimage.bmp
- <Drive name for removable media>:\dashborder_96.bmp
- <Drive name for removable media>:\contoso_1.cer
- <Drive name for removable media>:\contosoroot_1.cer
- <Drive name for removable media>:\pmd.cer
- <Drive name for removable media>:\hanni_umami_chapter.doc
- <Drive name for removable media>:\february_catalogue__2015.doc
- <Drive name for removable media>:\applicantform_en.doc
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\8de6a3e28b34ce2307b3688fc9d4e39d_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
- C:\offwhite-manual.txt
- D:\offwhite-manual.txt
- '%WINDIR%\syswow64\cmd.exe' /c WmIc ShaDowcoPY delEte' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c WmIc ShaDowcoPY delEte