Server info

← Reports for WIN-958F6E6HE8C

WIN-958F6E6HE8C

SMBIOS UUID
b954b497-4436-41a5-b630-6ec582c26c47
Report ID
263fcbc6-2a81-412e-9b79-37d5551d421d
Collected (UTC)
2026-11-01 09:14:35
Received (UTC)
2026-11-01 09:14:44

Delete report

Revision log

Processed (UTC): 2026-11-01 09:14:45

Compared with previous report.

Field / sectionBeforeAfter
WindowsDefender.FullScanAge42949672950
WindowsDefender.FullScanEndTime—2026-11-01T09:05:45.714
WindowsDefender.FullScanStartTime—2026-11-01T08:55:04.764
WindowsDefender.LastFullScanSource01
DiskSpace[C:].FreeSpaceBytes9682403328096818745344
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1001].PasswordAgeSeconds791803793050
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1001].PasswordLastChanged2026-10-23T04:57:07.926414+00:002026-10-23T04:57:07.566536+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1003].PasswordAgeSeconds9287794124
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1003].PasswordLastChanged2026-10-31T07:05:53.924103+00:002026-10-31T07:05:53.564922+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1004].PasswordAgeSeconds9287794124
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-1004].PasswordLastChanged2026-10-31T07:05:53.924623+00:002026-10-31T07:05:53.565321+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-504].PasswordAgeSeconds792150793397
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-504].PasswordLastChanged2026-10-23T04:51:20.927091+00:002026-10-23T04:51:20.566945+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-503].PasswordLastChanged2026-11-01T08:53:50.925159+00:002026-11-01T09:14:37.56573+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-500].PasswordLastChanged2026-11-01T08:53:50.922933+00:002026-11-01T09:14:37.564025+00:00
LocalAccounts[S-1-5-21-1309118703-1157507780-2007460555-501].PasswordLastChanged2026-11-01T08:53:50.925714+00:002026-11-01T09:14:37.566107+00:00
Server information

Identity

Computer name
WIN-958F6E6HE8C
Domain
WORKGROUP

Hardware

Manufacturer
QEMU
Model
QEMU Virtual Machine

Operating system

Operating system
Microsoft Windows 11 Pro
OS version
10.0.26300
Build number
26300
Architecture
ARM 64-bit Processor
Last boot time
2026-11-01 07:23:21

Machine identifiers

Machine SID
S-1-5-21-1309118703-1157507780-2007460555
Machine GUID
1261627b-f012-4548-8e40-df0d5dc56b45
SMBIOS UUID
b954b497-4436-41a5-b630-6ec582c26c47
Network adapters
Id Name Description Type Status MacAddress SpeedBitsPerSecond DnsSuffix DhcpEnabled IpAddresses Gateways DnsServers
{9BB43DF3-ECD2-4828-BAD2-E1CC534BF69A} Ethernet Red Hat VirtIO Ethernet Adapter Ethernet Up BE:55:1A:F6:58:2A 10000000000 lan Yes [ "fd88:943b:6857:5897:ba4a:48d6:5bfd:790e/64", "fd88:943b:6857:5897:5d96:6b4c:9dd4:a92c/128", "fe80::ede9:5038:20f5:2fe1%9/64", "192.168.64.3/24" ] [ "192.168.64.1" ] [ "fe80::5ce9:1eff:fe28:5264%9", "192.168.64.1", "fe80::5ce9:1eff:fe28:5264%9" ]
Windows Defender threats

Collection completed; no items found.

Windows Defender threat detections

Collection completed; no items found.

Disk space
DeviceId VolumeName FileSystem SizeBytes FreeSpaceBytes
C: NTFS 136311730176 96818745344
Installed software
Name Version Publisher InstallDate InstallLocation RegistryPath RegistryView
Microsoft.NET.Sdk.tvOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0CABDB7-BA0D-4E61-9443-FF70EE50B2DA} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D70E2512-02A9-4E91-89CC-820444DB8D68} Registry64
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{693D46F1-BFB4-478F-BBEF-9DA045E30C29} Registry64
Microsoft.NET.Sdk.macOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1DE25BED-B249-420F-B87D-5ABD5D0DB711} Registry64
QEMU guest agent 109.1.0 RedHat 20261022 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A86CF81E-C180-4F13-A14F-63743F285999} Registry64
Microsoft.NET.Sdk.MacCatalyst.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A400E0F1-AD52-45EB-AB1C-5F8E588F5811} Registry64
Microsoft .NET Toolset 10.0.402 (arm64) 40.11.62483 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01922CD4-78AE-4D18-B6FA-56706818872F} Registry64
Microsoft.NET.Sdk.Android.Manifest-10.0.100 (arm64) 36.1.2 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0F6CCE2B-97E7-4025-B058-092F8904E003} Registry64
UTM Guest Tools 0.1.274 0.1.274 Turing Software, LLC — — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpiceGuestTools Registry32
Microsoft.NET.Sdk.iOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F2687C28-332A-404C-8B5F-8E8BEA3B6E00} Registry64
Microsoft Visual Studio Code 1.143.0 Microsoft Corporation 20261022 C:\Program Files\Microsoft VS Code\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A5270FC5-65AD-483E-AC30-2C276B63D0AC}_is1 Registry64
Microsoft Windows Desktop Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FDF66DC8-BF33-4BEF-8AEA-400E5A1E8925} Registry64
Microsoft Edge WebView2 Runtime 156.0.4314.50 Microsoft Corporation 20261028 C:\Program Files (x86)\Microsoft\EdgeWebView\Application HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView Registry32
Microsoft.NET.Workload.Emscripten.net9.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B4517F9F-840F-4DF9-B6DC-355FD1892033} Registry64
Microsoft Edge 156.0.4314.50 Microsoft Corporation 20261028 C:\Program Files (x86)\Microsoft\Edge\Application HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Registry32
Microsoft ASP.NET Core Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E76A0FB8-320E-4783-8FF4-8C75F537AE0F} Registry64
Microsoft ASP.NET Core Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BBE20045-2CFF-4039-9310-82A2DB419E52} Registry64
Git 2.56.0 The Git Development Community 20261024 C:\Program Files\Git\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Git_is1 Registry64
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E0B6349D-F474-4840-9332-8CF24A5D3228} Registry64
Microsoft .NET SDK 10.0.402 (arm64) 10.4.226.50611 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9F22C0ED-EBD0-4056-B5CD-728304A18629} Registry32
Microsoft OneDrive 26.198.1011.0006 Microsoft Corporation — — HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe Registry64
Microsoft .NET Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A5F15E9D-2921-4EF9-AFAD-A4E39CAA9FCC} Registry64
Microsoft .NET Host - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F6CAA93-A7DD-46DD-B5BF-90A1D85FD2C4} Registry64
Microsoft.NET.Sdk.Maui.Manifest-10.0.100 (arm64) 10.0.0 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{68FD44B8-C425-4143-A0E8-9694F0A98BC0} Registry64
Microsoft Windows Desktop Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{248F06A2-20BA-495F-A399-A79348D2BD8D} Registry64
Microsoft Visual C++ 2022 Arm64 Runtime - 14.42.34438 14.42.34438 Microsoft Corporation 20261023 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1E7D98FD-97A9-4EE3-B08E-F53E96DF3491} Registry64
Microsoft .NET AppHost Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97443E52-5091-4C21-8720-10CE3A9FB28C} Registry64
Spice webdavd 2.5 (ARM64) 2.5.0 The Spice Project 20261023 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83DC0084-A872-4762-8878-57FBD3174A36} Registry64
Microsoft Teams Meeting Add-in for Microsoft Office 1.26.25904 Microsoft 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91} Registry64
Microsoft.NET.Workload.Emscripten.net6.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{19BFB627-B81C-469D-B32B-2CC9C9E70880} Registry64
Microsoft Visual C++ 2022 Redistributable (Arm64) - 14.42.34438 14.42.34438.0 Microsoft Corporation — — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f4fca927-ceb7-4549-8782-5835bd91078c} Registry32
GitHub Desktop 3.6.10 GitHub, Inc. 20261027 C:\Users\stian\AppData\Local\GitHubDesktop HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GitHubDesktop Registry64
Microsoft.NET.Workload.Emscripten.net8.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D991F2A6-A6D6-4A0D-A267-CF51BB9F6E44} Registry64
Microsoft.NET.Workload.Emscripten.Current.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A519D1D-1589-4C59-B451-6806F273644C} Registry64
Microsoft .NET 10.0 Templates 10.0.402 arm64 40.11.62483 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{743C6261-E23A-484F-A868-6D1CF3B59850} Registry64
Microsoft .NET Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1A2A898B-D167-440A-BDE6-F949A4475A33} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net9.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{774CADDA-200D-4AC1-8549-22E35B451752} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7836F92F-2B36-4636-81F3-7D20A0D6027B} Registry64
Microsoft .NET Host FX Resolver - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{686355AD-62FE-477B-BF4A-B90F36CED9F5} Registry64
Microsoft.NET.Workload.Emscripten.net7.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78E6B61B-BB5A-4E70-B793-51A3F9E1F9C4} Registry64
Firewall profiles
Name IsActive Enabled DefaultInboundAction DefaultOutboundAction BlockAllInboundTraffic NotificationsEnabled
Public Yes Yes Block Allow No Yes
Domain No Yes Block Allow No Yes
Private No Yes Block Allow No Yes
Firewall rules
Name Profiles Direction Action Protocol LocalAddresses RemoteAddresses LocalPorts RemotePorts IcmpTypesAndCodes Application Service
Cloud Identity (TCP-Out) All Outbound Allow TCP * * * 443 — C:\WINDOWS\system32\svchost.exe cloudidsvc
Core Networking - Dynamic Host Configuration Protocol (DHCP-Out) All Outbound Allow UDP * * 68 67 — C:\WINDOWS\system32\svchost.exe dhcp
Proximity sharing over TCP (TCP sharing-Out) All Outbound Allow TCP * * * * — C:\WINDOWS\system32\proximityuxhost.exe —
Wi-Fi Direct Scan Service Use (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\svchost.exe stisvc
Microsoft Media Foundation Network Source IN [TCP 554] All Inbound Allow TCP * LocalSubnet 554,8554-8558 * — C:\WINDOWS\system32\svchost.exe FrameServer
Core Networking - Parameter Problem (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 4:* System —
@{MicrosoftWindows.Client.CBS_1000.26100.372.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Neighbor Discovery Advertisement (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 136:* System —
Game Bar Domain, Private, Public Outbound Allow Any * * — — — — —
WFD Driver-only (TCP-In) All Inbound Allow TCP * * * * — System —
@{MicrosoftWindows.Client.CoreAI_1000.26100.9711.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Report v2 (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 143:* System —
@{Microsoft.WindowsCamera_2026.2608.1.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsCamera/LensSDK/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.WindowsCalculator_11.2607.0.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsCalculator/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
codex_sandbox_offline_block_inbound All Inbound Block Any * 0.0.0.0-126.255.255.255,128.0.0.0-255.255.255.255,::-::,::2-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff — — — — —
@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Connected User Experiences and Telemetry All Outbound Allow TCP * * * 443 — C:\WINDOWS\system32\svchost.exe DiagTrack
Wi-Fi Direct Network Discovery (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\dashost.exe —
OpenSSH All Inbound Allow TCP * * 22 * — — —
Microsoft Teams All Inbound Allow UDP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
Core Networking - DNS (UDP-Out) All Outbound Allow UDP * * * 53 — C:\WINDOWS\system32\svchost.exe dnscache
@{Microsoft.LockApp_10.0.26100.9711_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Edge WebView2 mDNS [UDP] All Inbound Allow UDP * LocalSubnet 5353 * — C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe —
WFD Driver-only (UDP-Out) All Outbound Allow UDP * * * * — System —
Microsoft Teams Domain, Private, Public Inbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Inbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.StartExperiencesApp_1.398.2.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Wi-Fi Direct Network Discovery (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\dashost.exe —
Core Networking - IPHTTPS (TCP-In) All Inbound Allow TCP * * IPHTTPS, * — System —
Core Networking - Teredo (UDP-Out) All Outbound Allow UDP * * * * — C:\WINDOWS\system32\svchost.exe iphlpsvc
Windows Device Management Device Enroller (TCP out) All Outbound Allow TCP * * 49152-65535 80,443 — C:\WINDOWS\system32\deviceenroller.exe —
@{Microsoft.SecHealthUI_1000.29680.1000.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.StorePurchaseApp_22609.1401.1.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Packet Too Big (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 2:* System —
@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
Core Networking - Multicast Listener Query (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 130:* System —
@{MicrosoftWindows.Client.Core_1000.26100.134.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Core/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Network Discovery for Teredo (UPnP-In) Public Inbound Allow TCP * * * * — System —
Cast to Device UPnP Events (TCP-In) Public Inbound Allow TCP * * 2869 * — System —
@{Microsoft.Todos_0.178.8571.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.Todos/Resources/app_name_ms_todo} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.WindowsFeedbackHub_2.2609.102.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsFeedbackHub/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.Client.OOBE_1000.26100.60.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
Core Networking - Router Solicitation (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet,fe80::/64,ff02::2-ff02::2 — — 133:* System —
@{Microsoft.Edge.GameAssist_1.0.4019.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.Edge.GameAssist/Resources/EdgeGameBarPackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Neighbor Discovery Solicitation (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 135:* System —
Core Networking - Multicast Listener Report v2 (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 143:* System —
Core Networking - Router Advertisement (ICMPv6-In) All Inbound Allow ICMPv6 * fe80::/64 — — 134:* System —
Microsoft Teams All Inbound Allow TCP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
codex_sandbox_offline_block_outbound All Outbound Block Any * 0.0.0.0-126.255.255.255,128.0.0.0-255.255.255.255,::-::,::2-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff — — — — —
Windows Web Experience Pack Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.42\msedgewebview2.exe —
Core Networking - Multicast Listener Query (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 130:* System —
Core Networking - Router Solicitation (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 133:* System —
@{MicrosoftWindows.61869722.Speion_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869722.Speion/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device functionality (qWave-TCP-In) Private, Public Inbound Allow TCP * * 2177 * — C:\WINDOWS\system32\svchost.exe Qwave
Microsoft Media Foundation Network Source IN [UDP 5004-5009] All Inbound Allow UDP * LocalSubnet 5000-5020 * — C:\WINDOWS\system32\svchost.exe FrameServer
Core Networking - Parameter Problem (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 4:* System —
Core Networking - Multicast Listener Done (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 132:* System —
Recommended Troubleshooting Client (HTTP/HTTPS Out) All Outbound Allow TCP * * * 80,443 — C:\WINDOWS\system32\svchost.exe TroubleshootingSvc
windows_ie_ac_001 Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.DesktopAppInstaller_1.29.379.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
mDNS (UDP-Out) Public Outbound Allow UDP * LocalSubnet * 5353 — C:\WINDOWS\system32\svchost.exe dnscache
Core Networking - Dynamic Host Configuration Protocol for IPv6(DHCPV6-Out) All Outbound Allow UDP * * 546 547 — C:\WINDOWS\system32\svchost.exe dhcp
@{Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.60909653.Filons_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.60909653.Filons/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Inbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Microsoft Teams All Outbound Allow UDP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
@{Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.XboxGameCallableUI/resources/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Outbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
@{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Store Domain, Private, Public Inbound Allow Any * * — — — — —
Cast to Device functionality (qWave-TCP-Out) Private, Public Outbound Allow TCP * * * 2177 — C:\WINDOWS\system32\svchost.exe Qwave
codex_sandbox_offline_block_loopback_tcp All Outbound Block TCP * 127.0.0.0/255.0.0.0,::/127 * 1-65535 — — —
Core Networking - Destination Unreachable (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 1:* System —
Cast to Device SSDP Discovery (UDP-In) Public Inbound Allow UDP * * Ply2Disc, * — C:\WINDOWS\system32\svchost.exe ssdpsrv
Core Networking - IPHTTPS (TCP-Out) All Outbound Allow TCP * * * IPHTTPS, — C:\WINDOWS\system32\svchost.exe iphlpsvc
Core Networking - Packet Too Big (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 2:* System —
WFD Driver-only (TCP-Out) All Outbound Allow TCP * * * * — System —
@{Microsoft.WindowsTerminal_1.24.12741.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PeopleExperienceHost/resources/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
mDNS (UDP-In) Public Inbound Allow UDP * LocalSubnet 5353 * — C:\WINDOWS\system32\svchost.exe dnscache
@{Microsoft.GetHelp_10.2409.42652.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.GetHelp/Resources/appDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - IPv6 (IPv6-Out) All Outbound Allow 41 * * — — — System —
Wireless Display (UDP-Out) All Outbound Allow UDP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
@{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Media Foundation Network Source OUT [TCP ALL] All Outbound Allow TCP * LocalSubnet * 554,8554-8558 — C:\WINDOWS\system32\svchost.exe FrameServer
Core Networking - Time Exceeded (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 3:* System —
Cast to Device streaming server (RTP-Streaming-Out) Public Outbound Allow UDP * * * * — C:\WINDOWS\system32\mdeserver.exe —
@{Microsoft.BingWeather_4.54.63045.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/Resources/ApplicationTitleWithBranding} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device streaming server (HTTP-Streaming-In) Public Inbound Allow TCP * * 10246 * — System —
Cast to Device streaming server (RTSP-Streaming-In) Public Inbound Allow TCP * * 23554,23555,23556 * — C:\WINDOWS\system32\mdeserver.exe —
Core Networking - Multicast Listener Done (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 132:* System —
@{MicrosoftWindows.61869836.InpApp_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869836.InpApp/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Teredo (UDP-In) All Inbound Allow UDP * * Teredo, * — C:\WINDOWS\system32\svchost.exe iphlpsvc
Core Networking - Destination Unreachable Fragmentation Needed (ICMPv4-In) All Inbound Allow ICMPv4 * * — — 3:4 System —
Connected Devices Platform - Wi-Fi Direct Transport (TCP-In) Public Inbound Allow TCP * * * * — C:\WINDOWS\system32\svchost.exe CDPSvc
Wi-Fi Direct Spooler Use (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\spoolsv.exe Spooler
Connected Devices Platform - Wi-Fi Direct Transport (TCP-Out) Public Outbound Allow TCP * * * * — C:\WINDOWS\system32\svchost.exe CDPSvc
ms-resource:ProductPkgDisplayName Public Outbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
ms-resource:ProductPkgDisplayName Public Outbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Cast to Device functionality (qWave-UDP-Out) Private, Public Outbound Allow UDP * * * 2177 — C:\WINDOWS\system32\svchost.exe Qwave
Xbox TCUI Domain, Private, Public Outbound Allow Any * * — — — — —
Wi-Fi Direct Scan Service Use (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\svchost.exe stisvc
ms-resource:ProductPkgDisplayName Public Outbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
Game Bar Domain, Private, Public Inbound Allow Any * * — — — — —
Core Networking - Internet Group Management Protocol (IGMP-Out) All Outbound Allow 2 * * — — — System —
ms-resource:ProductPkgDisplayName Public Inbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26569.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Time Exceeded (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 3:* System —
@{MicrosoftWindows.Client.CBS_1000.26100.372.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
Windows Device Management Certificate Installer (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\dmcertinst.exe —
@{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Report (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 131:* System —
WFD ASP Coordination Protocol (UDP-Out) All Outbound Allow UDP * LocalSubnet 7235 7235 — C:\WINDOWS\system32\svchost.exe WlanSvc
Wireless Display (TCP-Out) All Outbound Allow TCP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
@{Microsoft.XboxIdentityProvider_12.130.16001.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxIdentityProvider/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe —
@{Clipchamp.Clipchamp_4.7.10220.0_arm64__yxz26nhyzhsrt?ms-resource://Clipchamp.Clipchamp/Resources/Clipchamp/AppName} Domain, Private, Public Outbound Allow Any * * — — — — —
Wireless Display Infrastructure Back Channel (TCP-In) All Inbound Allow TCP * * 7250 * — C:\WINDOWS\system32\CastSrv.exe —
Delivery Optimization (UDP-In) All Inbound Allow UDP * * 7680 * — C:\WINDOWS\system32\svchost.exe dosvc
WFD ASP Coordination Protocol (UDP-In) All Inbound Allow UDP * LocalSubnet 7235 7235 — C:\WINDOWS\system32\svchost.exe WlanSvc
codex_sandbox_offline_block_loopback_udp All Outbound Block UDP * 127.0.0.0/255.0.0.0,::/127 * * — — —
Core Networking - Dynamic Host Configuration Protocol (DHCP-In) All Inbound Allow UDP * * 68 67 — C:\WINDOWS\system32\svchost.exe dhcp
@{MicrosoftWindows.Client.Photon_1000.26100.10.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Wireless Display (TCP-In) All Inbound Allow TCP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
Windows Device Management Enrollment Service (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\svchost.exe DmEnrollmentSvc
Cast to Device streaming server (RTCP-Streaming-In) Public Inbound Allow UDP * * * * — C:\WINDOWS\system32\mdeserver.exe —
Core Networking - Router Advertisement (ICMPv6-Out) All Outbound Allow ICMPv6 fe80::/64 LocalSubnet,fe80::/64,ff02::1-ff02::1 — — 134:* System —
Solitaire & Casual Games Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.Client.FileExp_1000.26100.10.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.FileExp/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Report (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 131:* System —
Core Networking - Neighbor Discovery Solicitation (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 135:* System —
Core Networking - Internet Group Management Protocol (IGMP-In) All Inbound Allow 2 * * — — — System —
@{MicrosoftWindows.61869720.Voiess_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869720.Voiess/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.61869721.Livtop_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869721.Livtop/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Inbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
@{Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PrintQueueActionCenter/Resources/AppxManifest_DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
WFD Driver-only (UDP-In) All Inbound Allow UDP * * * * — System —
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - IPv6 (IPv6-In) All Inbound Allow 41 * * — — — System —
@{MicrosoftWindows.Client.OOBE_1000.26100.60.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device functionality (qWave-UDP-In) Private, Public Inbound Allow UDP * * 2177 * — C:\WINDOWS\system32\svchost.exe Qwave
Core Networking - Neighbor Discovery Advertisement (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 136:* System —
Wi-Fi Direct Spooler Use (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\spoolsv.exe Spooler
Network Discovery for Teredo (SSDP-In) Public Inbound Allow UDP * * * * — C:\WINDOWS\system32\svchost.exe Ssdpsrv
Proximity sharing over TCP (TCP sharing-In) All Inbound Allow TCP * * * * — C:\WINDOWS\system32\proximityuxhost.exe —
Microsoft Store Domain, Private, Public Outbound Allow Any * * — — — — —
Delivery Optimization (TCP-In) All Inbound Allow TCP * * 7680 * — C:\WINDOWS\system32\svchost.exe dosvc
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe —
Microsoft Teams All Outbound Allow TCP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
Microsoft Teams Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.ZuneMusic_11.2609.11.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.SecureAssessmentBrowser/Resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Dynamic Host Configuration Protocol for IPv6(DHCPV6-In) All Inbound Allow UDP * * 546 547 — C:\WINDOWS\system32\svchost.exe dhcp
Windows Device Management Sync Client (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\omadmclient.exe —
Windows Defender

Protection status

Antimalware service
Enabled
Antivirus
Enabled
Antispyware
Enabled
Real-time protection
Enabled
On-access protection
Enabled
Downloaded file protection (IOAV)
Enabled
Behavior monitoring
Enabled
Network inspection
Enabled

Product and engine

Computer ID
7284C4D9-B2FE-445C-BED8-32F0C29030AD
Computer state
0
Product version
4.18.26100.4
Service version
4.18.26100.4
Antimalware engine version
1.1.26100.4
Network inspection engine version
1.1.26100.4

Antivirus signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Antispyware signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Network inspection signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Full scan

Started
2026-11-01 08:55:04
Completed
2026-11-01 09:05:45
Age (days)
0
Last scan source code
1

Quick scan

Started
2026-11-01 07:44:02
Completed
2026-11-01 07:44:26
Age (days)
0
Last scan source code
2
Real-time scan direction code
0
Installed updates
HotFixId Description InstalledBy InstalledOn
KB5127648 Security Update NT AUTHORITY\SYSTEM 10/23/2026
KB5128942 Update NT AUTHORITY\SYSTEM 10/23/2026
KB5127694 Update NT AUTHORITY\SYSTEM 10/25/2026
KB5121794 Update NT AUTHORITY\SYSTEM 10/23/2026
KB5127647 Security Update NT AUTHORITY\SYSTEM 10/23/2026
Available updates

Collection completed; no items found.

Group policies
Name Guid Status
Local Group Policy Local Group Policy Enabled
Local accounts
Name FullName Description Sid Disabled LockedOut PasswordAgeSeconds PasswordLastChanged PasswordRequired UserMayChangePassword PasswordNeverExpires PasswordExpired LastLogon AccountNeverExpires AccountExpires BadPasswordCount LogonCount Groups GroupsError DetailsError
WDAGUtilityAccount A user account managed and used by the system for Windows Defender Application Guard scenarios. S-1-5-21-1309118703-1157507780-2007460555-504 Yes No 793397 2026-10-23T04:51:20.566945+00:00 Yes Yes No No — Yes — 0 0 [] — —
CodexSandboxOffline CodexSandboxOffline S-1-5-21-1309118703-1157507780-2007460555-1003 No No 94124 2026-10-31T07:05:53.564922+00:00 Yes Yes Yes No — Yes — 0 0 [ "CodexSandboxUsers", "Users" ] — —
stian S-1-5-21-1309118703-1157507780-2007460555-1001 No No 793050 2026-10-23T04:57:07.566536+00:00 No Yes Yes No 2026-11-01T07:57:09+00:00 Yes — 0 20 [ "Administrators" ] — —
Administrator Built-in account for administering the computer/domain S-1-5-21-1309118703-1157507780-2007460555-500 Yes No 0 2026-11-01T09:14:37.564025+00:00 Yes Yes Yes No — Yes — 0 0 [ "Administrators" ] — —
Guest Built-in account for guest access to the computer/domain S-1-5-21-1309118703-1157507780-2007460555-501 Yes No 0 2026-11-01T09:14:37.566107+00:00 No No Yes No — Yes — 0 0 [ "Guests" ] — —
CodexSandboxOnline CodexSandboxOnline S-1-5-21-1309118703-1157507780-2007460555-1004 No No 94124 2026-10-31T07:05:53.565321+00:00 Yes Yes Yes No — Yes — 0 0 [ "CodexSandboxUsers", "Users" ] — —
DefaultAccount A user account managed by the system. S-1-5-21-1309118703-1157507780-2007460555-503 Yes No 0 2026-11-01T09:14:37.56573+00:00 No Yes Yes No — Yes — 0 0 [ "System Managed Accounts Group" ] — —
Local groups
Name Description Sid MembersError Members
User Mode Hardware Operators Members of this group may operate hardware from user mode. S-1-5-32-584 — []
Remote Desktop Users Members in this group are granted the right to logon remotely S-1-5-32-555 — []
Replicator Supports file replication in a domain S-1-5-32-552 — []
System Managed Accounts Group Members of this group are managed by the system. S-1-5-32-581 — [ "WIN-958F6E6HE8C\\DefaultAccount" ]
CodexSandboxUsers Codex sandbox internal group (managed) S-1-5-21-1309118703-1157507780-2007460555-1002 — [ "WIN-958F6E6HE8C\\CodexSandboxOffline", "WIN-958F6E6HE8C\\CodexSandboxOnline" ]
Device Owners Members of this group can change system-wide settings. S-1-5-32-583 — []
Hyper-V Administrators Members of this group have complete and unrestricted access to all features of Hyper-V. S-1-5-32-578 — []
Administrators Administrators have complete and unrestricted access to the computer/domain S-1-5-32-544 — [ "WIN-958F6E6HE8C\\Administrator", "WIN-958F6E6HE8C\\stian" ]
Remote Management Users Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user. S-1-5-32-580 — []
Power Users Power Users are included for backwards compatibility and possess limited administrative powers S-1-5-32-547 — []
Performance Log Users Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer S-1-5-32-559 — []
Users Users are prevented from making accidental or intentional system-wide changes and can run most applications S-1-5-32-545 — [ "NT AUTHORITY\\Authenticated Users", "NT AUTHORITY\\INTERACTIVE", "WIN-958F6E6HE8C\\CodexSandboxOffline", "WIN-958F6E6HE8C\\CodexSandboxOnline" ]
Performance Monitor Users Members of this group can access performance counter data locally and remotely S-1-5-32-558 — []
IIS_IUSRS Built-in group used by Internet Information Services. S-1-5-32-568 — [ "NT AUTHORITY\\IUSR" ]
Cryptographic Operators Members are authorized to perform cryptographic operations. S-1-5-32-569 — []
Distributed COM Users Members are allowed to launch, activate and use Distributed COM objects on this machine. S-1-5-32-562 — []
Event Log Readers Members of this group can read event logs from local machine S-1-5-32-573 — []
Backup Operators Backup Operators can override security restrictions for the sole purpose of backing up or restoring files S-1-5-32-551 — []
Access Control Assistance Operators Members of this group can remotely query authorization attributes and permissions for resources on this computer. S-1-5-32-579 — []
Guests Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted S-1-5-32-546 — [ "WIN-958F6E6HE8C\\Guest" ]
Network Configuration Operators Members in this group can have some administrative privileges to manage configuration of networking features S-1-5-32-556 — []
OpenSSH Users Members of this group may connect to this computer using SSH. S-1-5-32-585 — []
Collection errors

No data reported.