_FCGI_X_PIPE_
\\.\pipe\IISFCGI-4ad87902-7e6f-45c8-a517-8be24e64b917
ALLUSERSPROFILE
C:\ProgramData
APPDATA
C:\Windows\system32\config\systemprofile\AppData\Roaming
APP_POOL_CONFIG
C:\inetpub\temp\apppools\wnydzcom\wnydzcom.config
CommonProgramFiles
C:\Program Files (x86)\Common Files
CommonProgramFiles(x86)
C:\Program Files (x86)\Common Files
CommonProgramW6432
C:\Program Files\Common Files
COMPUTERNAME
WIN-R9RCAV72FAI
ComSpec
C:\Windows\system32\cmd.exe
LOCALAPPDATA
C:\Windows\system32\config\systemprofile\AppData\Local
Path
C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;D:\php\php5.2;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps
PATHEXT
.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE
x86
PROCESSOR_ARCHITEW6432
AMD64
PROCESSOR_IDENTIFIER
Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
ProgramData
C:\ProgramData
ProgramFiles
C:\Program Files (x86)
ProgramFiles(x86)
C:\Program Files (x86)
ProgramW6432
C:\Program Files
PSModulePath
C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules
USERNAME
WIN-R9RCAV72FAI$
USERPROFILE
C:\Windows\system32\config\systemprofile
ORIG_PATH_INFO
/index.php
SERVER_SOFTWARE
Microsoft-IIS/10.0
SCRIPT_FILENAME
F:\websites\wnydzcom-128417\www\index.php
REQUEST_URI
/download/NyVolcano.rar
QUERY_STRING
s=/download/NyVolcano.rar
PATH_TRANSLATED
F:\websites\wnydzcom-128417\www\index.php
LOCAL_ADDR
202.91.248.229
INSTANCE_META_PATH
/LM/W3SVC/901
GATEWAY_INTERFACE
CGI/1.1
DOCUMENT_ROOT
F:\websites\wnydzcom-128417\www
APPL_PHYSICAL_PATH
F:\websites\wnydzcom-128417\www\
APPL_MD_PATH
/LM/W3SVC/901/ROOT
HTTP_X_REWRITE_URL
/download/NyVolcano.rar
HTTP_USER_AGENT
claudebot
REQUEST_TIME_FLOAT
1711710058.9406
PATH_INFO
/download/NyVolcano.rar