Forensic Riddle #1 – Answer

The answer to Forensic Riddle #1 is pasted below. It’s BASE64 encoded, just in case you still didn’t have a chance to look at the riddle itself and maybe plan to give it a go w/o spoilers.

The OS is 64-bit. One window is created by a native 64-bit version of cmd.exe and another one by its 32-bit version – the directory listing shown on a screenshot is different in both windows due to Wow64 redirection mechanism redirecting 32
-bit application to ‘see’ %systemroot%\SysWOW64\drivers as %systemroot%\System32\drivers.

Thanks for trying & next riddle on Friday!