Server info

← Reports for WIN-958F6E6HE8C

WIN-958F6E6HE8C

SMBIOS UUID
b954b497-4436-41a5-b630-6ec582c26c47
Report ID
b9d623b8-4bac-4c13-8be0-2ec0fc8587e5
Collected (UTC)
2026-11-01 08:53:48
Received (UTC)
2026-11-01 08:53:57

Delete report

Revision log

Processed (UTC): 2026-11-01 08:54:00

Initial baseline: no previous report exists for this computer.

Server information

Identity

Computer name
WIN-958F6E6HE8C
Domain
WORKGROUP

Hardware

Manufacturer
QEMU
Model
QEMU Virtual Machine

Operating system

Operating system
Microsoft Windows 11 Pro
OS version
10.0.26300
Build number
26300
Architecture
ARM 64-bit Processor
Last boot time
2026-11-01 07:23:21

Machine identifiers

Machine SID
S-1-5-21-1309118703-1157507780-2007460555
Machine GUID
1261627b-f012-4548-8e40-df0d5dc56b45
SMBIOS UUID
b954b497-4436-41a5-b630-6ec582c26c47
Network adapters
Id Name Description Type Status MacAddress SpeedBitsPerSecond DnsSuffix DhcpEnabled IpAddresses Gateways DnsServers
{9BB43DF3-ECD2-4828-BAD2-E1CC534BF69A} Ethernet Red Hat VirtIO Ethernet Adapter Ethernet Up BE:55:1A:F6:58:2A 10000000000 lan Yes [ "fd88:943b:6857:5897:ba4a:48d6:5bfd:790e/64", "fd88:943b:6857:5897:5d96:6b4c:9dd4:a92c/128", "fe80::ede9:5038:20f5:2fe1%9/64", "192.168.64.3/24" ] [ "192.168.64.1" ] [ "fe80::5ce9:1eff:fe28:5264%9", "192.168.64.1", "fe80::5ce9:1eff:fe28:5264%9" ]
Windows Defender threats

Collection completed; no items found.

Windows Defender threat detections

Collection completed; no items found.

Disk space
DeviceId VolumeName FileSystem SizeBytes FreeSpaceBytes
C: NTFS 136311730176 96824033280
Installed software
Name Version Publisher InstallDate InstallLocation RegistryPath RegistryView
Microsoft Edge WebView2 Runtime 156.0.4314.50 Microsoft Corporation 20261028 C:\Program Files (x86)\Microsoft\EdgeWebView\Application HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView Registry32
Microsoft .NET 10.0 Templates 10.0.402 arm64 40.11.62483 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{743C6261-E23A-484F-A868-6D1CF3B59850} Registry64
Microsoft .NET Host - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F6CAA93-A7DD-46DD-B5BF-90A1D85FD2C4} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net9.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{774CADDA-200D-4AC1-8549-22E35B451752} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7836F92F-2B36-4636-81F3-7D20A0D6027B} Registry64
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{693D46F1-BFB4-478F-BBEF-9DA045E30C29} Registry64
Microsoft Windows Desktop Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FDF66DC8-BF33-4BEF-8AEA-400E5A1E8925} Registry64
Microsoft.NET.Workload.Emscripten.net7.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78E6B61B-BB5A-4E70-B793-51A3F9E1F9C4} Registry64
Microsoft .NET SDK 10.0.402 (arm64) 10.4.226.50611 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9F22C0ED-EBD0-4056-B5CD-728304A18629} Registry32
Microsoft .NET AppHost Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97443E52-5091-4C21-8720-10CE3A9FB28C} Registry64
UTM Guest Tools 0.1.274 0.1.274 Turing Software, LLC — — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpiceGuestTools Registry32
Microsoft.NET.Sdk.MacCatalyst.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A400E0F1-AD52-45EB-AB1C-5F8E588F5811} Registry64
Microsoft.NET.Sdk.tvOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0CABDB7-BA0D-4E61-9443-FF70EE50B2DA} Registry64
Microsoft .NET Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1A2A898B-D167-440A-BDE6-F949A4475A33} Registry64
GitHub Desktop 3.6.10 GitHub, Inc. 20261027 C:\Users\stian\AppData\Local\GitHubDesktop HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GitHubDesktop Registry64
Microsoft Visual C++ 2022 Redistributable (Arm64) - 14.42.34438 14.42.34438.0 Microsoft Corporation — — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f4fca927-ceb7-4549-8782-5835bd91078c} Registry32
Microsoft.NET.Workload.Emscripten.net8.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D991F2A6-A6D6-4A0D-A267-CF51BB9F6E44} Registry64
Microsoft OneDrive 26.198.1011.0006 Microsoft Corporation — — HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe Registry64
Microsoft.NET.Sdk.Maui.Manifest-10.0.100 (arm64) 10.0.0 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{68FD44B8-C425-4143-A0E8-9694F0A98BC0} Registry64
Microsoft .NET Toolset 10.0.402 (arm64) 40.11.62483 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01922CD4-78AE-4D18-B6FA-56706818872F} Registry64
Microsoft Visual C++ 2022 Arm64 Runtime - 14.42.34438 14.42.34438 Microsoft Corporation 20261023 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1E7D98FD-97A9-4EE3-B08E-F53E96DF3491} Registry64
Microsoft.NET.Workload.Emscripten.Current.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A519D1D-1589-4C59-B451-6806F273644C} Registry64
Microsoft.NET.Workload.Emscripten.net6.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{19BFB627-B81C-469D-B32B-2CC9C9E70880} Registry64
Microsoft Teams Meeting Add-in for Microsoft Office 1.26.25904 Microsoft 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91} Registry64
Microsoft Windows Desktop Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{248F06A2-20BA-495F-A399-A79348D2BD8D} Registry64
Git 2.56.0 The Git Development Community 20261024 C:\Program Files\Git\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Git_is1 Registry64
Microsoft Visual Studio Code 1.143.0 Microsoft Corporation 20261022 C:\Program Files\Microsoft VS Code\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A5270FC5-65AD-483E-AC30-2C276B63D0AC}_is1 Registry64
Microsoft.NET.Sdk.iOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F2687C28-332A-404C-8B5F-8E8BEA3B6E00} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E0B6349D-F474-4840-9332-8CF24A5D3228} Registry64
Spice webdavd 2.5 (ARM64) 2.5.0 The Spice Project 20261023 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83DC0084-A872-4762-8878-57FBD3174A36} Registry64
Microsoft .NET Host FX Resolver - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{686355AD-62FE-477B-BF4A-B90F36CED9F5} Registry64
QEMU guest agent 109.1.0 RedHat 20261022 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A86CF81E-C180-4F13-A14F-63743F285999} Registry64
Microsoft.NET.Sdk.Android.Manifest-10.0.100 (arm64) 36.1.2 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0F6CCE2B-97E7-4025-B058-092F8904E003} Registry64
Microsoft ASP.NET Core Runtime - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BBE20045-2CFF-4039-9310-82A2DB419E52} Registry64
Microsoft.NET.Workload.Emscripten.net9.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B4517F9F-840F-4DF9-B6DC-355FD1892033} Registry64
Microsoft .NET Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A5F15E9D-2921-4EF9-AFAD-A4E39CAA9FCC} Registry64
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest-10.0.100 (arm64) 81.196.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D70E2512-02A9-4E91-89CC-820444DB8D68} Registry64
Microsoft.NET.Sdk.macOS.Manifest-10.0.100 (arm64) 26.0.11017 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1DE25BED-B249-420F-B87D-5ABD5D0DB711} Registry64
Microsoft ASP.NET Core Targeting Pack - 10.0.13 (arm64) 80.52.61384 Microsoft Corporation 20261024 — HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E76A0FB8-320E-4783-8FF4-8C75F537AE0F} Registry64
Microsoft Edge 156.0.4314.50 Microsoft Corporation 20261028 C:\Program Files (x86)\Microsoft\Edge\Application HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Registry32
Firewall profiles
Name IsActive Enabled DefaultInboundAction DefaultOutboundAction BlockAllInboundTraffic NotificationsEnabled
Domain No Yes Block Allow No Yes
Private No Yes Block Allow No Yes
Public Yes Yes Block Allow No Yes
Firewall rules
Name Profiles Direction Action Protocol LocalAddresses RemoteAddresses LocalPorts RemotePorts IcmpTypesAndCodes Application Service
@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cloud Identity (TCP-Out) All Outbound Allow TCP * * * 443 — C:\WINDOWS\system32\svchost.exe cloudidsvc
@{Microsoft.WindowsCamera_2026.2608.1.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsCamera/LensSDK/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PrintQueueActionCenter/Resources/AppxManifest_DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device streaming server (RTCP-Streaming-In) Public Inbound Allow UDP * * * * — C:\WINDOWS\system32\mdeserver.exe —
Core Networking - Router Advertisement (ICMPv6-Out) All Outbound Allow ICMPv6 fe80::/64 LocalSubnet,fe80::/64,ff02::1-ff02::1 — — 134:* System —
Core Networking - Time Exceeded (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 3:* System —
@{Microsoft.LockApp_10.0.26100.9711_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - IPHTTPS (TCP-Out) All Outbound Allow TCP * * * IPHTTPS, — C:\WINDOWS\system32\svchost.exe iphlpsvc
@{Microsoft.GetHelp_10.2409.42652.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.GetHelp/Resources/appDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Inbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
@{MicrosoftWindows.60909653.Filons_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.60909653.Filons/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Teredo (UDP-Out) All Outbound Allow UDP * * * * — C:\WINDOWS\system32\svchost.exe iphlpsvc
Delivery Optimization (TCP-In) All Inbound Allow TCP * * 7680 * — C:\WINDOWS\system32\svchost.exe dosvc
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe —
Game Bar Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.61869721.Livtop_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869721.Livtop/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Packet Too Big (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 2:* System —
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.42\msedgewebview2.exe —
Windows Device Management Certificate Installer (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\dmcertinst.exe —
Microsoft Media Foundation Network Source IN [UDP 5004-5009] All Inbound Allow UDP * LocalSubnet 5000-5020 * — C:\WINDOWS\system32\svchost.exe FrameServer
@{MicrosoftWindows.Client.CoreAI_1000.26100.9711.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.XboxIdentityProvider_12.130.16001.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxIdentityProvider/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Destination Unreachable (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 1:* System —
Microsoft Teams All Inbound Allow TCP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
WFD ASP Coordination Protocol (UDP-Out) All Outbound Allow UDP * LocalSubnet 7235 7235 — C:\WINDOWS\system32\svchost.exe WlanSvc
Wi-Fi Direct Spooler Use (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\spoolsv.exe Spooler
@{MicrosoftWindows.Client.OOBE_1000.26100.60.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Wireless Display (UDP-Out) All Outbound Allow UDP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
ms-resource:ProductPkgDisplayName Public Inbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Wi-Fi Direct Scan Service Use (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\svchost.exe stisvc
@{Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Destination Unreachable Fragmentation Needed (ICMPv4-In) All Inbound Allow ICMPv4 * * — — 3:4 System —
@{Microsoft.DesktopAppInstaller_1.29.379.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - IPv6 (IPv6-In) All Inbound Allow 41 * * — — — System —
Network Discovery for Teredo (SSDP-In) Public Inbound Allow UDP * * * * — C:\WINDOWS\system32\svchost.exe Ssdpsrv
Windows Device Management Device Enroller (TCP out) All Outbound Allow TCP * * 49152-65535 80,443 — C:\WINDOWS\system32\deviceenroller.exe —
codex_sandbox_offline_block_loopback_udp All Outbound Block UDP * 127.0.0.0/255.0.0.0,::/127 * * — — —
Microsoft Edge WebView2 mDNS [UDP] All Inbound Allow UDP * LocalSubnet 5353 * — C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe —
Core Networking - Dynamic Host Configuration Protocol for IPv6(DHCPV6-In) All Inbound Allow UDP * * 546 547 — C:\WINDOWS\system32\svchost.exe dhcp
@{Microsoft.StorePurchaseApp_22609.1401.1.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Edge.GameAssist_1.0.4019.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.Edge.GameAssist/Resources/EdgeGameBarPackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Connected User Experiences and Telemetry All Outbound Allow TCP * * * 443 — C:\WINDOWS\system32\svchost.exe DiagTrack
mDNS (UDP-In) Public Inbound Allow UDP * LocalSubnet 5353 * — C:\WINDOWS\system32\svchost.exe dnscache
@{MicrosoftWindows.Client.CBS_1000.26100.372.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
WFD Driver-only (UDP-Out) All Outbound Allow UDP * * * * — System —
@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
Core Networking - Router Advertisement (ICMPv6-In) All Inbound Allow ICMPv6 * fe80::/64 — — 134:* System —
Microsoft Media Foundation Network Source OUT [TCP ALL] All Outbound Allow TCP * LocalSubnet * 554,8554-8558 — C:\WINDOWS\system32\svchost.exe FrameServer
@{Microsoft.Todos_0.178.8571.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.Todos/Resources/app_name_ms_todo} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Internet Group Management Protocol (IGMP-Out) All Outbound Allow 2 * * — — — System —
WFD Driver-only (UDP-In) All Inbound Allow UDP * * * * — System —
Game Bar Domain, Private, Public Inbound Allow Any * * — — — — —
Core Networking - Dynamic Host Configuration Protocol (DHCP-Out) All Outbound Allow UDP * * 68 67 — C:\WINDOWS\system32\svchost.exe dhcp
ms-resource:ProductPkgDisplayName Public Outbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
Microsoft Edge (mDNS-In) All Inbound Allow UDP * * 5353 * — C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe —
codex_sandbox_offline_block_loopback_tcp All Outbound Block TCP * 127.0.0.0/255.0.0.0,::/127 * 1-65535 — — —
@{Microsoft.ZuneMusic_11.2609.11.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Teams Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - IPHTTPS (TCP-In) All Inbound Allow TCP * * IPHTTPS, * — System —
Xbox TCUI Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Inbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
OpenSSH All Inbound Allow TCP * * 22 * — — —
Connected Devices Platform - Wi-Fi Direct Transport (TCP-In) Public Inbound Allow TCP * * * * — C:\WINDOWS\system32\svchost.exe CDPSvc
@{Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.SecureAssessmentBrowser/Resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Media Foundation Network Source IN [TCP 554] All Inbound Allow TCP * LocalSubnet 554,8554-8558 * — C:\WINDOWS\system32\svchost.exe FrameServer
@{Microsoft.WindowsTerminal_1.24.12741.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
Proximity sharing over TCP (TCP sharing-In) All Inbound Allow TCP * * * * — C:\WINDOWS\system32\proximityuxhost.exe —
@{Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.XboxGameCallableUI/resources/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.61869836.InpApp_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869836.InpApp/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Report v2 (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 143:* System —
@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Wi-Fi Direct Scan Service Use (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\svchost.exe stisvc
@{Clipchamp.Clipchamp_4.7.10220.0_arm64__yxz26nhyzhsrt?ms-resource://Clipchamp.Clipchamp/Resources/Clipchamp/AppName} Domain, Private, Public Outbound Allow Any * * — — — — —
Delivery Optimization (UDP-In) All Inbound Allow UDP * * 7680 * — C:\WINDOWS\system32\svchost.exe dosvc
ms-resource:ProductPkgDisplayName Public Outbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Microsoft Teams All Outbound Allow TCP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
Core Networking - Parameter Problem (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 4:* System —
Cast to Device streaming server (HTTP-Streaming-In) Public Inbound Allow TCP * * 10246 * — System —
Wi-Fi Direct Spooler Use (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\spoolsv.exe Spooler
@{Microsoft.BingWeather_4.54.63045.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.BingWeather/Resources/ApplicationTitleWithBranding} Domain, Private, Public Outbound Allow Any * * — — — — —
WFD Driver-only (TCP-In) All Inbound Allow TCP * * * * — System —
Wireless Display (TCP-Out) All Outbound Allow TCP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
Cast to Device functionality (qWave-TCP-In) Private, Public Inbound Allow TCP * * 2177 * — C:\WINDOWS\system32\svchost.exe Qwave
@{MicrosoftWindows.Client.OOBE_1000.26100.60.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName} Domain, Private, Public Inbound Allow Any * * — — — — —
@{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
codex_sandbox_offline_block_outbound All Outbound Block Any * 0.0.0.0-126.255.255.255,128.0.0.0-255.255.255.255,::-::,::2-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff — — — — —
Connected Devices Platform - Wi-Fi Direct Transport (TCP-Out) Public Outbound Allow TCP * * * * — C:\WINDOWS\system32\svchost.exe CDPSvc
Core Networking - Router Solicitation (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet,fe80::/64,ff02::2-ff02::2 — — 133:* System —
Wi-Fi Direct Network Discovery (Out) Public Outbound Allow Any * * — — — C:\WINDOWS\system32\dashost.exe —
ms-resource:ProductPkgDisplayName Public Inbound Allow UDP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Wireless Display Infrastructure Back Channel (TCP-In) All Inbound Allow TCP * * 7250 * — C:\WINDOWS\system32\CastSrv.exe —
@{MicrosoftWindows.Client.CBS_1000.26100.372.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Dynamic Host Configuration Protocol (DHCP-In) All Inbound Allow UDP * * 68 67 — C:\WINDOWS\system32\svchost.exe dhcp
@{MicrosoftWindows.61869722.Speion_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869722.Speion/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Proximity sharing over TCP (TCP sharing-Out) All Outbound Allow TCP * * * * — C:\WINDOWS\system32\proximityuxhost.exe —
Microsoft Store Domain, Private, Public Outbound Allow Any * * — — — — —
ms-resource:ProductPkgDisplayName Public Outbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe —
Core Networking - IPv6 (IPv6-Out) All Outbound Allow 41 * * — — — System —
Core Networking - Neighbor Discovery Advertisement (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 136:* System —
Core Networking - DNS (UDP-Out) All Outbound Allow UDP * * * 53 — C:\WINDOWS\system32\svchost.exe dnscache
Core Networking - Multicast Listener Done (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 132:* System —
Cast to Device streaming server (RTP-Streaming-Out) Public Outbound Allow UDP * * * * — C:\WINDOWS\system32\mdeserver.exe —
Recommended Troubleshooting Client (HTTP/HTTPS Out) All Outbound Allow TCP * * * 80,443 — C:\WINDOWS\system32\svchost.exe TroubleshootingSvc
@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26569.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.StartExperiencesApp_1.398.2.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
mDNS (UDP-Out) Public Outbound Allow UDP * LocalSubnet * 5353 — C:\WINDOWS\system32\svchost.exe dnscache
Cast to Device functionality (qWave-TCP-Out) Private, Public Outbound Allow TCP * * * 2177 — C:\WINDOWS\system32\svchost.exe Qwave
Cast to Device functionality (qWave-UDP-In) Private, Public Inbound Allow UDP * * 2177 * — C:\WINDOWS\system32\svchost.exe Qwave
@{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Report v2 (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 143:* System —
codex_sandbox_offline_block_inbound All Inbound Block Any * 0.0.0.0-126.255.255.255,128.0.0.0-255.255.255.255,::-::,::2-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff — — — — —
Core Networking - Packet Too Big (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 2:* System —
Core Networking - Internet Group Management Protocol (IGMP-In) All Inbound Allow 2 * * — — — System —
@{MicrosoftWindows.Client.FileExp_1000.26100.10.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.FileExp/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.SecHealthUI_1000.29680.1000.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device streaming server (RTSP-Streaming-In) Public Inbound Allow TCP * * 23554,23555,23556 * — C:\WINDOWS\system32\mdeserver.exe —
Solitaire & Casual Games Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device UPnP Events (TCP-In) Public Inbound Allow TCP * * 2869 * — System —
WFD Driver-only (TCP-Out) All Outbound Allow TCP * * * * — System —
WFD ASP Coordination Protocol (UDP-In) All Inbound Allow UDP * LocalSubnet 7235 7235 — C:\WINDOWS\system32\svchost.exe WlanSvc
@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} Domain, Private, Public Outbound Allow Any * * — — — — —
Microsoft Teams All Inbound Allow UDP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
Core Networking - Parameter Problem (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 4:* System —
@{Microsoft.WindowsCalculator_11.2607.0.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsCalculator/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device SSDP Discovery (UDP-In) Public Inbound Allow UDP * * Ply2Disc, * — C:\WINDOWS\system32\svchost.exe ssdpsrv
@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Windows Device Management Sync Client (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\omadmclient.exe —
Core Networking - Multicast Listener Report (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 131:* System —
@{Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PeopleExperienceHost/resources/PkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{MicrosoftWindows.Client.Core_1000.26100.134.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Core/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Cast to Device functionality (qWave-UDP-Out) Private, Public Outbound Allow UDP * * * 2177 — C:\WINDOWS\system32\svchost.exe Qwave
Windows Web Experience Pack Domain, Private, Public Outbound Allow Any * * — — — — —
windows_ie_ac_001 Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Teredo (UDP-In) All Inbound Allow UDP * * Teredo, * — C:\WINDOWS\system32\svchost.exe iphlpsvc
@{MicrosoftWindows.61869720.Voiess_1000.26100.9549.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.61869720.Voiess/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Multicast Listener Query (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 130:* System —
Wi-Fi Direct Network Discovery (In) Public Inbound Allow Any * * — — — C:\WINDOWS\system32\dashost.exe —
Core Networking - Dynamic Host Configuration Protocol for IPv6(DHCPV6-Out) All Outbound Allow UDP * * 546 547 — C:\WINDOWS\system32\svchost.exe dhcp
ms-resource:ProductPkgDisplayName Public Outbound Allow TCP * * 7000 * — C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe —
Windows Device Management Enrollment Service (TCP out) All Outbound Allow TCP * * 49152-65535 * — C:\WINDOWS\system32\svchost.exe DmEnrollmentSvc
Core Networking - Multicast Listener Query (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 130:* System —
Core Networking - Multicast Listener Done (ICMPv6-Out) All Outbound Allow ICMPv6 * LocalSubnet — — 132:* System —
Core Networking - Multicast Listener Report (ICMPv6-In) All Inbound Allow ICMPv6 * LocalSubnet — — 131:* System —
Network Discovery for Teredo (UPnP-In) Public Inbound Allow TCP * * * * — System —
Microsoft Teams Domain, Private, Public Inbound Allow Any * * — — — — —
Microsoft Store Domain, Private, Public Inbound Allow Any * * — — — — —
Microsoft Teams All Outbound Allow UDP * * * * — C:\Program Files\WindowsApps\MSTeams_26260.1717.5229.7049_arm64__8wekyb3d8bbwe\ms-teams.exe —
Core Networking - Time Exceeded (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 3:* System —
Core Networking - Router Solicitation (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 133:* System —
Wireless Display (TCP-In) All Inbound Allow TCP * * * * — C:\WINDOWS\system32\WUDFHost.exe —
Core Networking - Neighbor Discovery Advertisement (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 136:* System —
Core Networking - Neighbor Discovery Solicitation (ICMPv6-In) All Inbound Allow ICMPv6 * * — — 135:* System —
@{MicrosoftWindows.Client.Photon_1000.26100.10.0_arm64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName} Domain, Private, Public Outbound Allow Any * * — — — — —
@{Microsoft.WindowsFeedbackHub_2.2609.102.0_arm64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsFeedbackHub/Resources/AppStoreName} Domain, Private, Public Outbound Allow Any * * — — — — —
Core Networking - Neighbor Discovery Solicitation (ICMPv6-Out) All Outbound Allow ICMPv6 * * — — 135:* System —
Windows Defender

Protection status

Antimalware service
Enabled
Antivirus
Enabled
Antispyware
Enabled
Real-time protection
Enabled
On-access protection
Enabled
Downloaded file protection (IOAV)
Enabled
Behavior monitoring
Enabled
Network inspection
Enabled

Product and engine

Computer ID
7284C4D9-B2FE-445C-BED8-32F0C29030AD
Computer state
0
Product version
4.18.26100.4
Service version
4.18.26100.4
Antimalware engine version
1.1.26100.4
Network inspection engine version
1.1.26100.4

Antivirus signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Antispyware signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Network inspection signatures

Version
1.463.70.0
Age (days)
0
Last updated
2026-11-01 00:20:40

Full scan

Started
—
Completed
—
Age (days)
4294967295
Last scan source code
0

Quick scan

Started
2026-11-01 07:44:02
Completed
2026-11-01 07:44:26
Age (days)
0
Last scan source code
2
Real-time scan direction code
0
Installed updates
HotFixId Description InstalledBy InstalledOn
KB5127694 Update NT AUTHORITY\SYSTEM 10/25/2026
KB5121794 Update NT AUTHORITY\SYSTEM 10/23/2026
KB5128942 Update NT AUTHORITY\SYSTEM 10/23/2026
KB5127647 Security Update NT AUTHORITY\SYSTEM 10/23/2026
KB5127648 Security Update NT AUTHORITY\SYSTEM 10/23/2026
Available updates

Collection completed; no items found.

Group policies
Name Guid Status
Local Group Policy Local Group Policy Enabled
Local accounts
Name FullName Description Sid Disabled LockedOut PasswordAgeSeconds PasswordLastChanged PasswordRequired UserMayChangePassword PasswordNeverExpires PasswordExpired LastLogon AccountNeverExpires AccountExpires BadPasswordCount LogonCount Groups GroupsError DetailsError
stian S-1-5-21-1309118703-1157507780-2007460555-1001 No No 791803 2026-10-23T04:57:07.926414+00:00 No Yes Yes No 2026-11-01T07:57:09+00:00 Yes — 0 20 [ "Administrators" ] — —
DefaultAccount A user account managed by the system. S-1-5-21-1309118703-1157507780-2007460555-503 Yes No 0 2026-11-01T08:53:50.925159+00:00 No Yes Yes No — Yes — 0 0 [ "System Managed Accounts Group" ] — —
Guest Built-in account for guest access to the computer/domain S-1-5-21-1309118703-1157507780-2007460555-501 Yes No 0 2026-11-01T08:53:50.925714+00:00 No No Yes No — Yes — 0 0 [ "Guests" ] — —
WDAGUtilityAccount A user account managed and used by the system for Windows Defender Application Guard scenarios. S-1-5-21-1309118703-1157507780-2007460555-504 Yes No 792150 2026-10-23T04:51:20.927091+00:00 Yes Yes No No — Yes — 0 0 [] — —
CodexSandboxOffline CodexSandboxOffline S-1-5-21-1309118703-1157507780-2007460555-1003 No No 92877 2026-10-31T07:05:53.924103+00:00 Yes Yes Yes No — Yes — 0 0 [ "CodexSandboxUsers", "Users" ] — —
CodexSandboxOnline CodexSandboxOnline S-1-5-21-1309118703-1157507780-2007460555-1004 No No 92877 2026-10-31T07:05:53.924623+00:00 Yes Yes Yes No — Yes — 0 0 [ "CodexSandboxUsers", "Users" ] — —
Administrator Built-in account for administering the computer/domain S-1-5-21-1309118703-1157507780-2007460555-500 Yes No 0 2026-11-01T08:53:50.922933+00:00 Yes Yes Yes No — Yes — 0 0 [ "Administrators" ] — —
Local groups
Name Description Sid MembersError Members
Device Owners Members of this group can change system-wide settings. S-1-5-32-583 — []
Performance Log Users Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer S-1-5-32-559 — []
System Managed Accounts Group Members of this group are managed by the system. S-1-5-32-581 — [ "WIN-958F6E6HE8C\\DefaultAccount" ]
Event Log Readers Members of this group can read event logs from local machine S-1-5-32-573 — []
Hyper-V Administrators Members of this group have complete and unrestricted access to all features of Hyper-V. S-1-5-32-578 — []
Replicator Supports file replication in a domain S-1-5-32-552 — []
Guests Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted S-1-5-32-546 — [ "WIN-958F6E6HE8C\\Guest" ]
Administrators Administrators have complete and unrestricted access to the computer/domain S-1-5-32-544 — [ "WIN-958F6E6HE8C\\Administrator", "WIN-958F6E6HE8C\\stian" ]
Network Configuration Operators Members in this group can have some administrative privileges to manage configuration of networking features S-1-5-32-556 — []
Users Users are prevented from making accidental or intentional system-wide changes and can run most applications S-1-5-32-545 — [ "NT AUTHORITY\\Authenticated Users", "NT AUTHORITY\\INTERACTIVE", "WIN-958F6E6HE8C\\CodexSandboxOffline", "WIN-958F6E6HE8C\\CodexSandboxOnline" ]
IIS_IUSRS Built-in group used by Internet Information Services. S-1-5-32-568 — [ "NT AUTHORITY\\IUSR" ]
Backup Operators Backup Operators can override security restrictions for the sole purpose of backing up or restoring files S-1-5-32-551 — []
CodexSandboxUsers Codex sandbox internal group (managed) S-1-5-21-1309118703-1157507780-2007460555-1002 — [ "WIN-958F6E6HE8C\\CodexSandboxOffline", "WIN-958F6E6HE8C\\CodexSandboxOnline" ]
Access Control Assistance Operators Members of this group can remotely query authorization attributes and permissions for resources on this computer. S-1-5-32-579 — []
User Mode Hardware Operators Members of this group may operate hardware from user mode. S-1-5-32-584 — []
Remote Desktop Users Members in this group are granted the right to logon remotely S-1-5-32-555 — []
Distributed COM Users Members are allowed to launch, activate and use Distributed COM objects on this machine. S-1-5-32-562 — []
Performance Monitor Users Members of this group can access performance counter data locally and remotely S-1-5-32-558 — []
Power Users Power Users are included for backwards compatibility and possess limited administrative powers S-1-5-32-547 — []
Remote Management Users Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user. S-1-5-32-580 — []
OpenSSH Users Members of this group may connect to this computer using SSH. S-1-5-32-585 — []
Cryptographic Operators Members are authorized to perform cryptographic operations. S-1-5-32-569 — []
Collection errors

No data reported.