What does %windir% stands for?

I am receiving a malware analysis report with things like windir%\system32\catroot, %windir%\folder1\folder2 and I want to know what does it mean?


Solution 1:

The Windows directory or SYSROOT. This corresponds to the %WINDIR% or %SYSTEMROOT% environment variables. A typical path is C:\Windows.

This variable points to the Windows directory (on Windows NT-based operating systems it is identical to the %SystemRoot% variable. If the system is on drive C:, then the default values are "C:\WINDOWS" on Windows 95, Windows 98, Windows Me, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 and Windows 7.

For more info see Wikipedia's Environment Variables entry.

Solution 2:

Open a command prompt by clicking Start, typing cmd, then Enter. Type echo %windir%, then Enter, and the path should print to the screen. Usually C:\WINDOWS