System/Kernel


PS C:\Web\University> cmd /c ver
cmd /c ver
 
Microsoft Windows [Version 10.0.17763.6414]
 
PS C:\Web\University> systeminfo ; Get-ComputerInfo
systeminfo ; Get-ComputerInfo
 
Host Name:                 DC
OS Name:                   Microsoft Windows Server 2019 Datacenter
OS Version:                10.0.17763 N/A Build 17763
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Primary Domain Controller
OS Build Type:             Multiprocessor Free
Registered Owner:          Windows User
Registered Organization:   
Product ID:                00430-00000-00000-AA551
Original Install Date:     2/12/2024, 2:27:39 PM
System Boot Time:          10/26/2024, 10:10:02 PM
System Manufacturer:       VMware, Inc.
System Model:              VMware7,1
System Type:               x64-based PC
Processor(s):              2 Processor(s) Installed.
                           [01]: AMD64 Family 25 Model 1 Stepping 1 AuthenticAMD ~2595 Mhz
                           [02]: AMD64 Family 25 Model 1 Stepping 1 AuthenticAMD ~2595 Mhz
BIOS Version:              VMware, Inc. VMW71.00V.24224532.B64.2408191458, 8/19/2024
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume2
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory:     6,143 MB
Available Physical Memory: 2,786 MB
Virtual Memory: Max Size:  7,167 MB
Virtual Memory: Available: 3,708 MB
Virtual Memory: In Use:    3,459 MB
Page File Location(s):     C:\pagefile.sys
Domain:                    university.htb
Logon Server:              N/A
Hotfix(s):                 N/A
Network Card(s):           2 NIC(s) Installed.
                           [01]: Hyper-V Virtual Ethernet Adapter
                                 Connection Name: vEthernet (Internal-VSwitch1)
                                 DHCP Enabled:    No
                                 IP address(es)
                                 [01]: 192.168.99.1
                                 [02]: fe80::47c0:fbc9:2d7b:e4bb
                           [02]: vmxnet3 Ethernet Adapter
                                 Connection Name: Ethernet0 2
                                 DHCP Enabled:    Yes
                                 DHCP Server:     10.129.0.1
                                 IP address(es)
                                 [01]: 10.129.252.94
                                 [02]: fe80::381c:7ab:c80:ef91
                                 [03]: dead:beef::5c4a:da33:e1f2:e210
Hyper-V Requirements:      A hypervisor has been detected. Features required for Hyper-V will not be displayed.
 
 
WindowsBuildLabEx                                       : 17763.1.amd64fre.rs5_release.180914-1434
WindowsCurrentVersion                                   : 6.3
WindowsEditionId                                        : ServerDatacenter
WindowsInstallationType                                 : Server Core
WindowsInstallDateFromRegistry                          : 2/12/2024 10:27:39 PM
WindowsProductId                                        : 00430-00000-00000-AA551
WindowsProductName                                      : Windows Server 2019 Datacenter
WindowsRegisteredOrganization                           : 
WindowsRegisteredOwner                                  : Windows User
WindowsSystemRoot                                       : C:\Windows
WindowsVersion                                          : 1809
BiosCharacteristics                                     : {4, 7, 9, 11...}
BiosBIOSVersion                                         : {INTEL  - 6040000, VMW71.00V.24224532.B64.2408191458, 
                                                          VMware, Inc. - 10000}
BiosBuildNumber                                         : 
BiosCaption                                             : VMW71.00V.24224532.B64.2408191458
BiosCodeSet                                             : 
BiosCurrentLanguage                                     : 
BiosDescription                                         : VMW71.00V.24224532.B64.2408191458
BiosEmbeddedControllerMajorVersion                      : 255
BiosEmbeddedControllerMinorVersion                      : 255
BiosFirmwareType                                        : Uefi
BiosIdentificationCode                                  : 
BiosInstallableLanguages                                : 
BiosInstallDate                                         : 
BiosLanguageEdition                                     : 
BiosListOfLanguages                                     : 
BiosManufacturer                                        : VMware, Inc.
BiosName                                                : VMW71.00V.24224532.B64.2408191458
BiosOtherTargetOS                                       : 
BiosPrimaryBIOS                                         : True
BiosReleaseDate                                         : 8/18/2024 5:00:00 PM
BiosSeralNumber                                         : VMware-42 14 9c 77 c7 28 fe 14-ca b7 59 5e 3d 7c 2c 08
BiosSMBIOSBIOSVersion                                   : VMW71.00V.24224532.B64.2408191458
BiosSMBIOSMajorVersion                                  : 2
BiosSMBIOSMinorVersion                                  : 7
BiosSMBIOSPresent                                       : True
BiosSoftwareElementState                                : Running
BiosStatus                                              : OK
BiosSystemBiosMajorVersion                              : 255
BiosSystemBiosMinorVersion                              : 255
BiosTargetOperatingSystem                               : 0
BiosVersion                                             : INTEL  - 6040000
CsAdminPasswordStatus                                   : Enabled
CsAutomaticManagedPagefile                              : True
CsAutomaticResetBootOption                              : True
CsAutomaticResetCapability                              : True
CsBootOptionOnLimit                                     : DoNotReboot
CsBootOptionOnWatchDog                                  : DoNotReboot
CsBootROMSupported                                      : True
CsBootStatus                                            : {0, 0, 0, 33...}
CsBootupState                                           : Normal boot
CsCaption                                               : DC
CsChassisBootupState                                    : Safe
CsChassisSKUNumber                                      : 
CsCurrentTimeZone                                       : -420
CsDaylightInEffect                                      : True
CsDescription                                           : AT/AT COMPATIBLE
CsDNSHostName                                           : DC
CsDomain                                                : university.htb
CsDomainRole                                            : PrimaryDomainController
CsEnableDaylightSavingsTime                             : True
CsFrontPanelResetStatus                                 : Unknown
CsHypervisorPresent                                     : True
CsInfraredSupported                                     : False
CsInitialLoadInfo                                       : 
CsInstallDate                                           : 
CsKeyboardPasswordStatus                                : Unknown
CsLastLoadInfo                                          : 
CsManufacturer                                          : VMware, Inc.
CsModel                                                 : VMware7,1
CsName                                                  : DC
CsNetworkAdapters                                       : {vEthernet (Internal-VSwitch1), Ethernet0 2}
CsNetworkServerModeEnabled                              : True
CsNumberOfLogicalProcessors                             : 4
CsNumberOfProcessors                                    : 2
CsProcessors                                            : {AMD EPYC 7513 32-Core Processor                , AMD EPYC 
                                                          7513 32-Core Processor                }
CsOEMStringArray                                        : {[MS_VM_CERT/SHA1/27d66596a61c48dd3dc7216fd715126e33f59ae7], 
                                                          Welcome to the Virtual Machine}
CsPartOfDomain                                          : True
CsPauseAfterReset                                       : 3932100000
CsPCSystemType                                          : Desktop
CsPCSystemTypeEx                                        : Desktop
CsPowerManagementCapabilities                           : 
CsPowerManagementSupported                              : 
CsPowerOnPasswordStatus                                 : Disabled
CsPowerState                                            : Unknown
CsPowerSupplyState                                      : Safe
CsPrimaryOwnerContact                                   : 
CsPrimaryOwnerName                                      : Windows User
CsResetCapability                                       : Other
CsResetCount                                            : -1
CsResetLimit                                            : -1
CsRoles                                                 : {LM_Workstation, LM_Server, Primary_Domain_Controller, 
                                                          Timesource...}
CsStatus                                                : OK
CsSupportContactDescription                             : 
CsSystemFamily                                          : 
CsSystemSKUNumber                                       : 
CsSystemType                                            : x64-based PC
CsThermalState                                          : Safe
CsTotalPhysicalMemory                                   : 6441402368
CsPhyicallyInstalledMemory                              : 6291456
CsUserName                                              : 
CsWakeUpType                                            : PowerSwitch
CsWorkgroup                                             : 
OsName                                                  : Microsoft Windows Server 2019 Datacenter
OsType                                                  : WINNT
OsOperatingSystemSKU                                    : DatacenterServerEdition
OsVersion                                               : 10.0.17763
OsCSDVersion                                            : 
OsBuildNumber                                           : 17763
OsHotFixes                                              : {}
OsBootDevice                                            : \Device\HarddiskVolume2
OsSystemDevice                                          : \Device\HarddiskVolume3
OsSystemDirectory                                       : C:\Windows\system32
OsSystemDrive                                           : C:
OsWindowsDirectory                                      : C:\Windows
OsCountryCode                                           : 1
OsCurrentTimeZone                                       : -420
OsLocaleID                                              : 0409
OsLocale                                                : en-US
OsLocalDateTime                                         : 10/27/2024 1:43:39 AM
OsLastBootUpTime                                        : 10/26/2024 10:10:02 PM
OsUptime                                                : 03:33:36.7118010
OsBuildType                                             : Multiprocessor Free
OsCodeSet                                               : 1252
OsDataExecutionPreventionAvailable                      : True
OsDataExecutionPrevention32BitApplications              : True
OsDataExecutionPreventionDrivers                        : True
OsDataExecutionPreventionSupportPolicy                  : OptOut
OsDebug                                                 : False
OsDistributed                                           : False
OsEncryptionLevel                                       : 256
OsForegroundApplicationBoost                            : Maximum
OsTotalVisibleMemorySize                                : 6290432
OsFreePhysicalMemory                                    : 2842356
OsTotalVirtualMemorySize                                : 7339008
OsFreeVirtualMemory                                     : 3789520
OsInUseVirtualMemory                                    : 3549488
OsTotalSwapSpaceSize                                    : 
OsSizeStoredInPagingFiles                               : 1048576
OsFreeSpaceInPagingFiles                                : 964196
OsPagingFiles                                           : {C:\pagefile.sys}
OsHardwareAbstractionLayer                              : 10.0.17763.4644
OsInstallDate                                           : 2/12/2024 2:27:39 PM
OsManufacturer                                          : Microsoft Corporation
OsMaxNumberOfProcesses                                  : 4294967295
OsMaxProcessMemorySize                                  : 137438953344
OsMuiLanguages                                          : {en-US}
OsNumberOfLicensedUsers                                 : 
OsNumberOfProcesses                                     : 85
OsNumberOfUsers                                         : 5
OsOrganization                                          : 
OsArchitecture                                          : 64-bit
OsLanguage                                              : en-US
OsProductSuites                                         : {TerminalServices, DatacenterEdition, 
                                                          TerminalServicesSingleSession}
OsOtherTypeDescription                                  : 
OsPAEEnabled                                            : 
OsPortableOperatingSystem                               : False
OsPrimary                                               : True
OsProductType                                           : DomainController
OsRegisteredUser                                        : Windows User
OsSerialNumber                                          : 00430-00000-00000-AA551
OsServicePackMajorVersion                               : 0
OsServicePackMinorVersion                               : 0
OsStatus                                                : OK
OsSuites                                                : {TerminalServices, DatacenterEdition, 
                                                          TerminalServicesSingleSession}
OsServerLevel                                           : ServerCore
KeyboardLayout                                          : en-US
TimeZone                                                : (UTC-08:00) Pacific Time (US & Canada)
LogonServer                                             : 
PowerPlatformRole                                       : Desktop
HyperVisorPresent                                       : True
HyperVRequirementDataExecutionPreventionAvailable       : 
HyperVRequirementSecondLevelAddressTranslation          : 
HyperVRequirementVirtualizationFirmwareEnabled          : 
HyperVRequirementVMMonitorModeExtensions                : 
DeviceGuardSmartStatus                                  : Off
DeviceGuardRequiredSecurityProperties                   : {0}
DeviceGuardAvailableSecurityProperties                  : {BaseVirtualizationSupport, 5, 6}
DeviceGuardSecurityServicesConfigured                   : {0}
DeviceGuardSecurityServicesRunning                      : {0}
DeviceGuardCodeIntegrityPolicyEnforcementStatus         : 
DeviceGuardUserModeCodeIntegrityPolicyEnforcementStatus : 
  • Version 10.0.17763.6414
  • Windows Server 2019 Datacenter
  • x64-based
  • 2 Processor(s)

Networks


PS C:\Web\University> ipconfig /all ; arp -a ; print route
ipconfig /all ; arp -a ; print route
 
Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : DC
   Primary Dns Suffix  . . . . . . . : university.htb
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : university.htb
                                       .htb
 
Ethernet adapter vEthernet (Internal-VSwitch1):
 
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter
   Physical Address. . . . . . . . . : 00-15-5D-05-80-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::47c0:fbc9:2d7b:e4bb%6(Preferred) 
   IPv4 Address. . . . . . . . . . . : 192.168.99.1(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 
   DHCPv6 IAID . . . . . . . . . . . : 234886493
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2D-5C-60-6E-08-00-27-66-73-4A
   DNS Servers . . . . . . . . . . . : 127.0.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Ethernet adapter Ethernet0 2:
 
   Connection-specific DNS Suffix  . : .htb
   Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
   Physical Address. . . . . . . . . : 00-50-56-94-B5-45
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : dead:beef::5c4a:da33:e1f2:e210(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::381c:7ab:c80:ef91%4(Preferred) 
   IPv4 Address. . . . . . . . . . . : 10.129.252.94(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Lease Obtained. . . . . . . . . . : Saturday, October 26, 2024 10:10:30 PM
   Lease Expires . . . . . . . . . . : Sunday, October 27, 2024 2:40:25 AM
   Default Gateway . . . . . . . . . : fe80::250:56ff:fe94:3911%4
                                       10.129.0.1
   DHCP Server . . . . . . . . . . . : 10.129.0.1
   DHCPv6 IAID . . . . . . . . . . . : 251678806
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2D-5C-60-6E-08-00-27-66-73-4A
   DNS Servers . . . . . . . . . . . : 127.0.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Interface: 10.129.252.94 --- 0x4
  Internet Address      Physical Address      Type
  10.129.0.1            00-50-56-94-39-11     dynamic   
  10.129.1.206          00-50-56-94-5d-e5     dynamic   
  10.129.2.74           00-50-56-94-fc-78     dynamic   
  10.129.4.244          00-50-56-94-1f-95     dynamic   
  10.129.5.47           00-50-56-94-1c-0f     dynamic   
  10.129.6.200          00-50-56-94-57-68     dynamic   
  10.129.8.121          00-50-56-94-8f-ab     dynamic   
  10.129.8.150          00-50-56-94-18-b5     dynamic   
  10.129.11.12          00-50-56-94-09-e3     dynamic   
  10.129.14.15          00-50-56-94-34-0d     dynamic   
  10.129.14.255         00-50-56-94-b8-ed     dynamic   
  10.129.17.94          00-50-56-94-d4-fa     dynamic   
  10.129.19.196         00-50-56-94-b0-3a     dynamic   
  10.129.21.10          00-50-56-94-80-33     dynamic   
  10.129.21.138         00-50-56-94-66-a8     dynamic   
  10.129.21.151         00-50-56-94-ea-6e     dynamic   
  10.129.22.87          00-50-56-94-3f-ce     dynamic   
  10.129.23.58          00-50-56-94-b9-a9     dynamic   
  10.129.24.14          00-50-56-94-a6-d5     dynamic   
  10.129.26.67          00-50-56-94-14-a3     dynamic   
  10.129.29.17          00-50-56-94-85-fd     dynamic   
  10.129.29.153         00-50-56-94-d7-8d     dynamic   
  10.129.31.44          00-50-56-94-af-87     dynamic   
  10.129.31.200         00-50-56-94-9b-0c     dynamic   
  10.129.32.61          00-50-56-94-55-63     dynamic   
  10.129.33.46          00-50-56-94-b9-9a     dynamic   
  10.129.34.94          00-50-56-94-fd-70     dynamic   
  10.129.35.136         00-50-56-94-f8-52     dynamic   
  10.129.36.68          00-50-56-94-84-02     dynamic   
  10.129.37.94          00-50-56-94-1c-09     dynamic   
  10.129.37.136         00-50-56-94-85-ed     dynamic   
  10.129.37.207         00-50-56-94-45-1e     dynamic   
  10.129.39.141         00-50-56-94-09-5d     dynamic   
  10.129.40.43          00-50-56-94-73-36     dynamic   
  10.129.42.221         00-50-56-94-81-c5     dynamic   
  10.129.44.109         00-50-56-94-72-19     dynamic   
  10.129.44.183         00-50-56-94-37-ce     dynamic   
  10.129.45.141         00-50-56-94-5b-73     dynamic   
  10.129.46.132         00-50-56-94-fe-f1     dynamic   
  10.129.47.179         00-50-56-94-bd-25     dynamic   
  10.129.47.193         00-50-56-94-dc-fe     dynamic   
  10.129.47.238         00-50-56-94-14-87     dynamic   
  10.129.48.252         00-50-56-94-4c-19     dynamic   
  10.129.49.23          00-50-56-94-f6-7a     dynamic   
  10.129.49.145         00-50-56-94-8f-2a     dynamic   
  10.129.51.194         00-50-56-94-98-07     dynamic   
  10.129.52.34          00-50-56-94-bb-e4     dynamic   
  10.129.52.171         00-50-56-94-6e-68     dynamic   
  10.129.52.217         00-50-56-94-2d-bd     dynamic   
  10.129.53.55          00-50-56-94-f0-45     dynamic   
  10.129.56.177         00-50-56-94-51-c1     dynamic   
  10.129.58.239         00-50-56-94-0d-37     dynamic   
  10.129.59.28          00-50-56-94-01-80     dynamic   
  10.129.60.165         00-50-56-94-cd-b3     dynamic   
  10.129.63.132         00-50-56-94-1a-56     dynamic   
  10.129.64.17          00-50-56-94-cf-c8     dynamic   
  10.129.64.212         00-50-56-94-41-f7     dynamic   
  10.129.66.206         00-50-56-94-29-cf     dynamic   
  10.129.68.143         00-50-56-94-17-e6     dynamic   
  10.129.68.216         00-50-56-94-6d-20     dynamic   
  10.129.70.1           00-50-56-94-06-c4     dynamic   
  10.129.70.230         00-50-56-94-0b-2c     dynamic   
  10.129.71.253         00-50-56-94-68-13     dynamic   
  10.129.73.197         00-50-56-94-06-44     dynamic   
  10.129.74.135         00-50-56-94-03-35     dynamic   
  10.129.77.132         00-50-56-94-bf-f5     dynamic   
  10.129.79.64          00-50-56-94-b5-dc     dynamic   
  10.129.80.218         00-50-56-94-c7-d4     dynamic   
  10.129.82.19          00-50-56-94-76-39     dynamic   
  10.129.88.45          00-50-56-94-84-e4     dynamic   
  10.129.89.7           00-50-56-94-22-c5     dynamic   
  10.129.89.108         00-50-56-94-ca-62     dynamic   
  10.129.92.255         00-50-56-94-09-33     dynamic   
  10.129.95.7           00-50-56-94-4e-3c     dynamic   
  10.129.95.251         00-50-56-94-0e-46     dynamic   
  10.129.96.171         00-50-56-94-c6-b1     dynamic   
  10.129.100.218        00-50-56-94-82-54     dynamic   
  10.129.101.87         00-50-56-94-6f-7f     dynamic   
  10.129.101.152        00-50-56-94-5a-09     dynamic   
  10.129.103.107        00-50-56-94-c4-57     dynamic   
  10.129.104.202        00-50-56-94-cc-e8     dynamic   
  10.129.106.109        00-50-56-94-a9-14     dynamic   
  10.129.108.81         00-50-56-94-a1-27     dynamic   
  10.129.109.24         00-50-56-94-c2-fb     dynamic   
  10.129.109.202        00-50-56-94-cf-9f     dynamic   
  10.129.110.137        00-50-56-94-91-73     dynamic   
  10.129.111.230        00-50-56-94-54-c9     dynamic   
  10.129.114.26         00-50-56-94-b5-c2     dynamic   
  10.129.115.128        00-50-56-94-c8-42     dynamic   
  10.129.116.47         00-50-56-94-95-99     dynamic   
  10.129.116.56         00-50-56-94-89-46     dynamic   
  10.129.116.79         00-50-56-94-ec-a7     dynamic   
  10.129.116.98         00-50-56-94-a9-6d     dynamic   
  10.129.118.105        00-50-56-94-9a-c0     dynamic   
  10.129.118.169        00-50-56-94-cd-94     dynamic   
  10.129.120.22         00-50-56-94-fb-79     dynamic   
  10.129.126.29         00-50-56-94-75-44     dynamic   
  10.129.127.49         00-50-56-94-42-5d     dynamic   
  10.129.129.0          00-50-56-94-25-bb     dynamic   
  10.129.129.86         00-50-56-94-a8-03     dynamic   
  10.129.131.61         00-50-56-94-c2-ca     dynamic   
  10.129.132.116        00-50-56-94-fc-52     dynamic   
  10.129.132.225        00-50-56-94-8b-e0     dynamic   
  10.129.134.140        00-50-56-94-6b-18     dynamic   
  10.129.134.234        00-50-56-94-00-69     dynamic   
  10.129.137.79         00-50-56-94-e4-91     dynamic   
  10.129.138.172        00-50-56-94-e0-2a     dynamic   
  10.129.140.8          00-50-56-94-48-5a     dynamic   
  10.129.140.162        00-50-56-94-5f-b8     dynamic   
  10.129.141.17         00-50-56-94-af-ce     dynamic   
  10.129.142.91         00-50-56-94-d4-34     dynamic   
  10.129.143.71         00-50-56-94-c7-da     dynamic   
  10.129.144.77         00-50-56-94-a4-5e     dynamic   
  10.129.146.222        00-50-56-94-37-37     dynamic   
  10.129.147.157        00-50-56-94-bb-32     dynamic   
  10.129.147.245        00-50-56-94-0e-6f     dynamic   
  10.129.150.244        00-50-56-94-c8-0b     dynamic   
  10.129.152.232        00-50-56-94-24-22     dynamic   
  10.129.154.231        00-50-56-94-e3-d5     dynamic   
  10.129.155.12         00-50-56-94-22-41     dynamic   
  10.129.157.227        00-50-56-94-47-3f     dynamic   
  10.129.158.156        00-50-56-94-d3-1d     dynamic   
  10.129.159.10         00-50-56-94-b7-24     dynamic   
  10.129.159.110        00-50-56-94-35-2b     dynamic   
  10.129.159.236        00-50-56-94-c8-25     dynamic   
  10.129.160.142        00-50-56-94-a8-d4     dynamic   
  10.129.162.3          00-50-56-94-04-8c     dynamic   
  10.129.164.54         00-50-56-94-02-f3     dynamic   
  10.129.164.125        00-50-56-94-58-74     dynamic   
  10.129.164.242        00-50-56-94-97-fb     dynamic   
  10.129.165.198        00-50-56-94-8b-dc     dynamic   
  10.129.165.251        00-50-56-94-b3-cd     dynamic   
  10.129.167.11         00-50-56-94-06-aa     dynamic   
  10.129.170.41         00-50-56-94-df-f2     dynamic   
  10.129.175.60         00-50-56-94-38-d2     dynamic   
  10.129.177.204        00-50-56-94-7b-78     dynamic   
  10.129.178.134        00-50-56-94-81-f7     dynamic   
  10.129.180.115        00-50-56-94-44-ce     dynamic   
  10.129.184.20         00-50-56-94-b5-7c     dynamic   
  10.129.185.102        00-50-56-94-cb-e4     dynamic   
  10.129.185.205        00-50-56-94-28-d2     dynamic   
  10.129.187.119        00-50-56-94-fa-0c     dynamic   
  10.129.188.233        00-50-56-94-26-05     dynamic   
  10.129.189.63         00-50-56-94-0e-4f     dynamic   
  10.129.190.157        00-50-56-94-eb-06     dynamic   
  10.129.192.72         00-50-56-94-68-66     dynamic   
  10.129.192.136        00-50-56-94-64-f8     dynamic   
  10.129.193.76         00-50-56-94-34-f9     dynamic   
  10.129.196.190        00-50-56-94-32-bc     dynamic   
  10.129.197.17         00-50-56-94-de-c3     dynamic   
  10.129.197.157        00-50-56-94-f8-d4     dynamic   
  10.129.198.108        00-50-56-94-54-d0     dynamic   
  10.129.198.244        00-50-56-94-4f-18     dynamic   
  10.129.199.127        00-50-56-94-1c-2b     dynamic   
  10.129.199.150        00-50-56-94-5e-71     dynamic   
  10.129.199.183        00-50-56-94-d6-c7     dynamic   
  10.129.200.145        00-50-56-94-a2-e5     dynamic   
  10.129.200.179        00-50-56-94-cd-e4     dynamic   
  10.129.200.183        00-50-56-94-0d-6e     dynamic   
  10.129.202.18         00-50-56-94-6b-7e     dynamic   
  10.129.204.163        00-50-56-94-6d-c5     dynamic   
  10.129.205.8          00-50-56-94-f2-82     dynamic   
  10.129.209.168        00-50-56-94-5f-50     dynamic   
  10.129.211.72         00-50-56-94-1e-a3     dynamic   
  10.129.211.81         00-50-56-94-6e-db     dynamic   
  10.129.212.123        00-50-56-94-47-d1     dynamic   
  10.129.213.27         00-50-56-94-10-cf     dynamic   
  10.129.214.100        00-50-56-94-d5-05     dynamic   
  10.129.217.201        00-50-56-94-70-07     dynamic   
  10.129.217.238        00-50-56-94-fe-98     dynamic   
  10.129.218.89         00-50-56-94-f5-fd     dynamic   
  10.129.220.246        00-50-56-94-e3-45     dynamic   
  10.129.224.14         00-50-56-94-32-29     dynamic   
  10.129.226.52         00-50-56-94-ee-43     dynamic   
  10.129.226.156        00-50-56-94-82-78     dynamic   
  10.129.228.154        00-50-56-94-bc-b2     dynamic   
  10.129.229.225        00-50-56-94-11-0b     dynamic   
  10.129.230.161        00-50-56-94-8e-20     dynamic   
  10.129.231.26         00-50-56-94-8e-34     dynamic   
  10.129.231.182        00-50-56-94-79-bc     dynamic   
  10.129.232.109        00-50-56-94-7a-07     dynamic   
  10.129.232.142        00-50-56-94-05-05     dynamic   
  10.129.234.240        00-50-56-94-ca-18     dynamic   
  10.129.235.240        00-50-56-94-3b-68     dynamic   
  10.129.237.45         00-50-56-94-f0-38     dynamic   
  10.129.242.2          00-50-56-94-07-fa     dynamic   
  10.129.242.162        00-50-56-94-fb-70     dynamic   
  10.129.243.82         00-50-56-94-99-7e     dynamic   
  10.129.243.190        00-50-56-94-70-28     dynamic   
  10.129.244.4          00-50-56-94-3c-36     dynamic   
  10.129.244.144        00-50-56-94-71-1f     dynamic   
  10.129.244.153        00-50-56-94-e1-aa     dynamic   
  10.129.248.125        00-50-56-94-8b-df     dynamic   
  10.129.251.20         00-50-56-94-85-12     dynamic   
  10.129.252.211        00-50-56-94-fd-c4     dynamic   
  10.129.253.174        00-50-56-94-6f-cd     dynamic   
  10.129.255.255        ff-ff-ff-ff-ff-ff     static    
  224.0.0.22            01-00-5e-00-00-16     static    
  224.0.0.251           01-00-5e-00-00-fb     static    
  224.0.0.252           01-00-5e-00-00-fc     static    
  255.255.255.255       ff-ff-ff-ff-ff-ff     static    
 
Interface: 192.168.99.1 --- 0x6
  Internet Address      Physical Address      Type
  192.168.99.2          00-15-5d-05-80-00     dynamic   
  192.168.99.12         00-15-5d-05-80-07     dynamic   
  192.168.99.255        ff-ff-ff-ff-ff-ff     static    
  224.0.0.22            01-00-5e-00-00-16     static    
  224.0.0.251           01-00-5e-00-00-fb     static    
  224.0.0.252           01-00-5e-00-00-fc     static    
Unable to initialize device PRN
  • 192.168.99.1
  • 192.168.99.2
  • 192.168.99.12
PS C:\Web\University> netstat -ano | Select-String LIST
netstat -ano | Select-String LIST
 
  TCP    0.0.0.0:80             0.0.0.0:0              LISTENING       2240
  TCP    0.0.0.0:88             0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING       408
  TCP    0.0.0.0:389            0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:464            0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:593            0.0.0.0:0              LISTENING       408
  TCP    0.0.0.0:636            0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:2179           0.0.0.0:0              LISTENING       2668
  TCP    0.0.0.0:3268           0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:3269           0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:5985           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:9389           0.0.0.0:0              LISTENING       2908
  TCP    0.0.0.0:47001          0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:49664          0.0.0.0:0              LISTENING       608
  TCP    0.0.0.0:49665          0.0.0.0:0              LISTENING       1196
  TCP    0.0.0.0:49666          0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:49668          0.0.0.0:0              LISTENING       1600
  TCP    0.0.0.0:49669          0.0.0.0:0              LISTENING       1764
  TCP    0.0.0.0:49670          0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:49671          0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:49673          0.0.0.0:0              LISTENING       780
  TCP    0.0.0.0:49677          0.0.0.0:0              LISTENING       752
  TCP    0.0.0.0:49697          0.0.0.0:0              LISTENING       2796
  TCP    0.0.0.0:53815          0.0.0.0:0              LISTENING       2664
  TCP    10.129.252.94:53       0.0.0.0:0              LISTENING       2796
  TCP    10.129.252.94:139      0.0.0.0:0              LISTENING       4
  TCP    127.0.0.1:53           0.0.0.0:0              LISTENING       2796
  TCP    127.0.0.1:8000         0.0.0.0:0              LISTENING       964
  TCP    192.168.99.1:53        0.0.0.0:0              LISTENING       2796
  TCP    192.168.99.1:139       0.0.0.0:0              LISTENING       4
  TCP    [::]:88                [::]:0                 LISTENING       780
  TCP    [::]:135               [::]:0                 LISTENING       408
  TCP    [::]:389               [::]:0                 LISTENING       780
  TCP    [::]:445               [::]:0                 LISTENING       4
  TCP    [::]:464               [::]:0                 LISTENING       780
  TCP    [::]:593               [::]:0                 LISTENING       408
  TCP    [::]:636               [::]:0                 LISTENING       780
  TCP    [::]:2179              [::]:0                 LISTENING       2668
  TCP    [::]:3268              [::]:0                 LISTENING       780
  TCP    [::]:3269              [::]:0                 LISTENING       780
  TCP    [::]:5985              [::]:0                 LISTENING       4
  TCP    [::]:9389              [::]:0                 LISTENING       2908
  TCP    [::]:47001             [::]:0                 LISTENING       4
  TCP    [::]:49664             [::]:0                 LISTENING       608
  TCP    [::]:49665             [::]:0                 LISTENING       1196
  TCP    [::]:49666             [::]:0                 LISTENING       780
  TCP    [::]:49668             [::]:0                 LISTENING       1600
  TCP    [::]:49669             [::]:0                 LISTENING       1764
  TCP    [::]:49670             [::]:0                 LISTENING       780
  TCP    [::]:49671             [::]:0                 LISTENING       780
  TCP    [::]:49673             [::]:0                 LISTENING       780
  TCP    [::]:49677             [::]:0                 LISTENING       752
  TCP    [::]:49697             [::]:0                 LISTENING       2796
  TCP    [::]:53815             [::]:0                 LISTENING       2664
  TCP    [::1]:53               [::]:0                 LISTENING       2796
  TCP    [dead:beef::5c4a:da33:e1f2:e210]:53  [::]:0                 LISTENING       2796
  TCP    [fe80::381c:7ab:c80:ef91%4]:53  [::]:0                 LISTENING       2796
  TCP    [fe80::47c0:fbc9:2d7b:e4bb%6]:53  [::]:0                 LISTENING       2796

127.0.0.1:8000

Users & Groups


PS C:\Web\University> net users ; ls C:\Users
net users ; ls C:\Users
 
User accounts for \\
 
-------------------------------------------------------------------------------
A.Crouz                  Administrator            Alice.Z                  
Arnold.G                 Brose.W                  C.Freez                  
Choco.L                  Emma.H                   George.A                 
Guest                    hana                     Jakken.C                 
John.D                   Kai.K                    Kareem.A                 
karma.watterson          Karol.J                  krbtgt                   
Leon.K                   Lisa.K                   Martin.T                 
Nya.R                    Rose.L                   Steven.P                 
WAO                      William.B                
The command completed with one or more errors.
 
 
 
    Directory: C:\Users
 
 
Mode                LastWriteTime         Length Name                                                                  
----                -------------         ------ ----                                                                  
d-----       10/18/2024  11:20 AM                Administrator                                                         
d-----         3/2/2024   2:39 PM                Choco.L                                                               
d-----        2/12/2024   6:19 PM                John.D                                                                
d-----        2/28/2024   1:17 PM                Nya.R                                                                 
d-r---       10/27/2024  12:27 AM                Public                                                                
d-----        9/13/2024   2:31 AM                Rose.L                                                                
d-----        9/14/2024   9:36 AM                WAO    
  • Choco.L
  • John.D
  • Nya.R
  • Rose.L
PS C:\Web\University> net localgroup ; net group /DOMAIN
net localgroup ; net group /DOMAIN
 
Aliases for \\DC
 
-------------------------------------------------------------------------------
*Access Control Assistance Operators
*Account Operators
*Administrators
*Allowed RODC Password Replication Group
*Backup Operators
*Cert Publishers
*Certificate Service DCOM Access
*Cryptographic Operators
*Denied RODC Password Replication Group
*Distributed COM Users
*DnsAdmins
*Event Log Readers
*Guests
*Hyper-V Administrators
*IIS_IUSRS
*Incoming Forest Trust Builders
*Network Configuration Operators
*Performance Log Users
*Performance Monitor Users
*Pre-Windows 2000 Compatible Access
*Print Operators
*RAS and IAS Servers
*RDS Endpoint Servers
*RDS Management Servers
*RDS Remote Access Servers
*Remote Desktop Users
*Remote Management Users
*Replicator
*Server Operators
*Storage Replica Administrators
*Terminal Server License Servers
*Users
*Windows Authorization Access Group
The command completed successfully.
 
 
Group Accounts for \\
 
-------------------------------------------------------------------------------
*Cloneable Domain Controllers
*Content Evaluators
*Customer Support
*DnsUpdateProxy
*Domain Admins
*Domain Computers
*Domain Controllers
*Domain Guests
*Domain Users
*Enterprise Admins
*Enterprise Key Admins
*Enterprise Read-only Domain Controllers
*Group Policy Creator Owners
*Help Desk
*Key Admins
*Protected Users
*Read-only Domain Controllers
*Research & Development
*Schema Admins
*SecurityOps
*Web Developers
The command completed with one or more errors.
  • Content Evaluator
  • Customer Support
  • Help Desk
  • Research & Development
  • SecurityOps
  • Web Developers

Processes


PS C:\Web\University> cmd /c tasklist /svc ; ps
cmd /c tasklist /svc ; ps
 
Image Name                     PID Services                                    
========================= ======== ============================================
System Idle Process              0 N/A                                         
System                           4 N/A                                         
Secure System                   56 N/A                                         
Registry                       112 N/A                                         
smss.exe                       420 N/A                                         
csrss.exe                      504 N/A                                         
wininit.exe                    608 N/A                                         
csrss.exe                      616 N/A                                         
winlogon.exe                   680 N/A                                         
services.exe                   752 N/A                                         
LsaIso.exe                     772 N/A                                         
lsass.exe                      780 N/A                                         
svchost.exe                    996 N/A                                         
svchost.exe                   1016 N/A                                         
fontdrvhost.exe                 76 N/A                                         
fontdrvhost.exe                440 N/A                                         
svchost.exe                    408 N/A                                         
svchost.exe                    808 N/A                                         
svchost.exe                   1120 N/A                                         
svchost.exe                   1128 N/A                                         
svchost.exe                   1136 N/A                                         
svchost.exe                   1188 N/A                                         
svchost.exe                   1196 N/A                                         
svchost.exe                   1260 N/A                                         
svchost.exe                   1268 N/A                                         
svchost.exe                   1280 N/A                                         
svchost.exe                   1288 N/A                                         
svchost.exe                   1356 N/A                                         
svchost.exe                   1508 N/A                                         
svchost.exe                   1536 N/A                                         
svchost.exe                   1600 N/A                                         
svchost.exe                   1652 N/A                                         
svchost.exe                   1732 N/A                                         
svchost.exe                   1756 N/A                                         
svchost.exe                   1764 N/A                                         
svchost.exe                   1796 N/A                                         
svchost.exe                   1892 N/A                                         
svchost.exe                   1968 N/A                                         
svchost.exe                   1836 N/A                                         
svchost.exe                   2112 N/A                                         
svchost.exe                   2204 N/A                                         
svchost.exe                   2776 N/A                                         
svchost.exe                   3008 N/A                                         
svchost.exe                   2704 N/A                                         
svchost.exe                   2676 N/A                                         
svchost.exe                   2688 N/A                                         
ismserv.exe                   2696 N/A                                         
vm3dservice.exe               2948 N/A                                         
dfsrs.exe                     2664 N/A                                         
dns.exe                       2796 N/A                                         
vmms.exe                      2668 N/A                                         
VGAuthService.exe             2500 N/A                                         
Microsoft.ActiveDirectory     2908 N/A                                         
vmtoolsd.exe                  3076 N/A                                         
svchost.exe                   3240 N/A                                         
vm3dservice.exe               3320 N/A                                         
dfssvc.exe                    3364 N/A                                         
vds.exe                       3640 N/A                                         
LogonUI.exe                   3740 N/A                                         
conhost.exe                   3816 N/A                                         
dllhost.exe                   4008 N/A                                         
WmiPrvSE.exe                  2708 N/A                                         
msdtc.exe                     3864 N/A                                         
vmcompute.exe                 4148 N/A                                         
vmwp.exe                      4604 N/A                                         
vmwp.exe                      4684 N/A                                         
cmd.exe                       4156 N/A                                         
cmd.exe                       4484 N/A                                         
conhost.exe                   4492 N/A                                         
conhost.exe                   2124 N/A                                         
nginx.exe                      644 N/A                                         
python.exe                     964 N/A                                         
nginx.exe                     2240 N/A                                         
conhost.exe                   5056 N/A                                         
svchost.exe                   3620 N/A                                         
svchost.exe                   3612 N/A                                         
svchost.exe                   3140 N/A                                         
powershell.exe                2452 N/A                                         
xhtml2pdf.exe                 2316 N/A                                         
python.exe                    1300 N/A                                         
cmd.exe                        736 N/A                                         
nc64.exe                      3560 N/A                                         
cmd.exe                       2856 N/A                                         
powershell.exe                2348 N/A                                         
cmd.exe                        692 N/A                                         
tasklist.exe                  3088 N/A                                         
 
Handles  NPM(K)    PM(K)      WS(K)     CPU(s)     Id  SI ProcessName                                                  
-------  ------    -----      -----     ------     --  -- -----------                                                  
     85       5     2308       4052       0.02    736   0 cmd                                                          
     90       5     2324       4244       0.03   2856   0 cmd                                                          
     84       5     2616        416       0.05   4156   0 cmd                                                          
     84       5     2616        412       0.00   4484   0 cmd                                                          
    166      10     6836       6076       1.13   2124   0 conhost                                                      
    175      11     6964      16408              3816   1 conhost                                                      
    158      10     6660        664       0.03   4492   0 conhost                                                      
    133       8     6452        388       0.03   5056   0 conhost                                                      
    485      18     2412       4740               504   0 csrss                                                        
    184      13     1828       4460               616   1 csrss                                                        
    400      33    16288      23520              2664   0 dfsrs                                                        
    158       8     1932       6148              3364   0 dfssvc                                                       
    268      14     3912      13868              4008   0 dllhost                                                      
  10420   12420   250232     241728              2796   0 dns                                                          
     53       6     1508       4344                76   1 fontdrvhost                                                  
     53       6     1388       3968               440   0 fontdrvhost                                                  
      0       0       56          8                 0   0 Idle                                                         
    143      12     1964       5724              2696   0 ismserv                                                      
    325      16     3016      14068              3740   1 LogonUI                                                      
     46       6     1196       3312               772   0 LsaIso                                                       
   1859     309    60608      73904               780   0 lsass                                                        
    595      36    37936      48108              2908   0 Microsoft.ActiveDirectory.WebServices                        
    238      13     2896      10668              3864   0 msdtc                                                        
    108       6      872       3864       0.03   3560   0 nc64                                                         
    142       9     1496        420       0.05    644   0 nginx                                                        
    146      11     2120       1856       0.31   2240   0 nginx                                                        
    950      31    92372      46120       1.11   2348   0 powershell                                                   
    608      26    68788       4360       0.53   2452   0 powershell                                                   
    283      23    43076      14752       3.16    964   0 python                                                       
    163      20    48620       5748       1.23   1300   0 python                                                       
      0       4      196      36952               112   0 Registry                                                     
      0       0      168      17412                56   0 Secure System                                                
    482      12     4656      11356               752   0 services                                                     
     53       3      524       1244               420   0 smss                                                         
    504      20     3528      10148               408   0 svchost                                                      
    253      11     1796       7204               808   0 svchost                                                      
     96       5      960       4244               996   0 svchost                                                      
    315      12     3080      10012              1016   0 svchost                                                      
    132      15     3524       7640              1120   0 svchost                                                      
    150       9     1620       6604              1128   0 svchost                                                      
    236      12     1816       7844              1136   0 svchost                                                      
    114       8     1136       5440              1188   0 svchost                                                      
    311      13     9540      14272              1196   0 svchost                                                      
    258      16     3280      12848              1260   0 svchost                                                      
    233      11     2568      10536              1268   0 svchost                                                      
    235      10     2408       8020              1280   0 svchost                                                      
    432       9     2860       9220              1288   0 svchost                                                      
    265      15     3640       9708              1356   0 svchost                                                      
    131       9     1280       5704              1508   0 svchost                                                      
    390      32     5488      13492              1536   0 svchost                                                      
    337      17     4192      13380              1600   0 svchost                                                      
    212      12     2076       8812              1652   0 svchost                                                      
    448      16    10924      20768              1732   0 svchost                                                      
    272      13     2488       8024              1756   0 svchost                                                      
    172      12     1700       7332              1764   0 svchost                                                      
    166       9     2288       7584              1796   0 svchost                                                      
    181       9     1748       8388              1836   0 svchost                                                      
    147       7     1248       6016              1892   0 svchost                                                      
    458      16     3180      11108              1968   0 svchost                                                      
    366      18     5664      13588              2112   0 svchost                                                      
    288      10     2584       8780              2204   0 svchost                                                      
    149       8     1560       6644              2676   0 svchost                                                      
    129       7     1208       5904              2688   0 svchost                                                      
    398      20    15404      28184              2704   0 svchost                                                      
    183      22     2556      10344              2776   0 svchost                                                      
    213      11     2268       8780              3008   0 svchost                                                      
    308      17     4608      17012              3140   0 svchost                                                      
    289      16     5112      15776              3240   0 svchost                                                      
    282      20     8184      13884              3612   0 svchost                                                      
    254      14    11272      12308              3620   0 svchost                                                      
   1381       0      192        152                 4   0 System                                                       
    213      16     2412      10864              3640   0 vds                                                          
    176      11     2864      11540              2500   0 VGAuthService                                                
    156       9     1812       7340              2948   0 vm3dservice                                                  
    159      10     2508       8496              3320   1 vm3dservice                                                  
    189      10     2872      10396              4148   0 vmcompute                                                    
    642      25    44176      31352              2668   0 vmms                                                         
    388      23    10532      23376              3076   0 vmtoolsd                                                     
    391      18     7260      22012              4604   0 vmwp                                                         
    413      19     9488      21016              4684   0 vmwp                                                         
    178      11     1448       6508               608   0 wininit                                                      
    246      13     2672      11052               680   1 winlogon                                                     
    408      19    14576      25532              2708   0 WmiPrvSE                                                     
     53       4      512       2304       0.02   2316   0 xhtml2pdf                                                    
  • vds.exe
  • vmcompute.exe
  • vmwp.exe
  • nginx.exe
  • python.exe

Tasks


PS C:\Web\University> Get-ScheduledTask | where {$_.TaskPath -notlike "\Microsoft*" } | ft TaskName,TaskPath,State
Get-ScheduledTask | where {$_.TaskPath -notlike "\Microsoft*" } | ft TaskName,TaskPath,State
 
TaskName  TaskPath State
--------  -------- -----
DB Backup \        Ready

\DB Backup

Firewall & AV


PS C:\Web\University> netsh firewall show config
netsh firewall show config
 
Domain profile configuration (current):
-------------------------------------------------------------------
Operational mode                  = Disable
Exception mode                    = Enable
Multicast/broadcast response mode = Enable
Notification mode                 = Disable
 
Service configuration for Domain profile:
Mode     Customized  Name
-------------------------------------------------------------------
Enable   No          File and Printer Sharing
Enable   No          Remote Desktop
 
Allowed programs configuration for Domain profile:
Mode     Traffic direction    Name / Program
-------------------------------------------------------------------
 
Port configuration for Domain profile:
Port   Protocol  Mode    Traffic direction     Name
-------------------------------------------------------------------
80     TCP       Enable  Inbound               nginx
 
Standard profile configuration:
-------------------------------------------------------------------
Operational mode                  = Disable
Exception mode                    = Enable
Multicast/broadcast response mode = Enable
Notification mode                 = Disable
 
Service configuration for Standard profile:
Mode     Customized  Name
-------------------------------------------------------------------
Enable   No          File and Printer Sharing
Enable   No          Remote Desktop
 
Allowed programs configuration for Standard profile:
Mode     Traffic direction    Name / Program
-------------------------------------------------------------------
 
Port configuration for Standard profile:
Port   Protocol  Mode    Traffic direction     Name
-------------------------------------------------------------------
80     TCP       Enable  Inbound               nginx
 
Log configuration:
-------------------------------------------------------------------
File location   = C:\Windows\system32\LogFiles\Firewall\pfirewall.log
Max file size   = 4096 KB
Dropped packets = Disable
Connections     = Disable
 
IMPORTANT: Command executed successfully.
However, "netsh firewall" is deprecated;
use "netsh advfirewall firewall" instead.
For more information on using "netsh advfirewall firewall" commands
instead of "netsh firewall", see KB article 947709
at https://go.microsoft.com/fwlink/?linkid=121488 .
PS C:\Web\University> Get-MpComputerStatus ; Get-MpPreference | Select-Object -Property ExclusionPath
Get-MpComputerStatus ; Get-MpPreference | Select-Object -Property ExclusionPath
 
 
AMEngineVersion                  : 0.0.0.0
AMProductVersion                 : 4.18.24080.9
AMRunningMode                    : Not running
AMServiceEnabled                 : False
AMServiceVersion                 : 0.0.0.0
AntispywareEnabled               : False
AntispywareSignatureAge          : 0
AntispywareSignatureLastUpdated  : 
AntispywareSignatureVersion      : 
AntivirusEnabled                 : False
AntivirusSignatureAge            : 65535
AntivirusSignatureLastUpdated    : 
AntivirusSignatureVersion        : 
BehaviorMonitorEnabled           : False
ComputerID                       : 436AD699-511C-4404-883B-1E75A32E4D02
ComputerState                    : 0
DefenderSignaturesOutOfDate      : False
DeviceControlDefaultEnforcement  : Unknown
DeviceControlPoliciesLastUpdated : 12/31/1600 4:00:00 PM
DeviceControlState               : Unknown
FullScanAge                      : 4294967295
FullScanEndTime                  : 
FullScanOverdue                  : False
FullScanRequired                 : False
FullScanSignatureVersion         : 
FullScanStartTime                : 
InitializationProgress           : ServiceStartedSuccessfully
IoavProtectionEnabled            : False
IsTamperProtected                : False
IsVirtualMachine                 : False
LastFullScanSource               : 0
LastQuickScanSource              : 0
NISEnabled                       : False
NISEngineVersion                 : 0.0.0.0
NISSignatureAge                  : 65535
NISSignatureLastUpdated          : 
NISSignatureVersion              : 
OnAccessProtectionEnabled        : False
ProductStatus                    : 1
QuickScanAge                     : 4294967295
QuickScanEndTime                 : 
QuickScanOverdue                 : False
QuickScanSignatureVersion        : 
QuickScanStartTime               : 
RealTimeProtectionEnabled        : False
RealTimeScanDirection            : 0
RebootRequired                   : False
SmartAppControlExpiration        : 
SmartAppControlState             : 
TamperProtectionSource           : N/A
TDTCapable                       : N/A
TDTMode                          : N/A
TDTSiloType                      : N/A
TDTStatus                        : N/A
TDTTelemetry                     : N/A
TroubleShootingDailyMaxQuota     : 
TroubleShootingDailyQuotaLeft    : 
TroubleShootingEndTime           : 
TroubleShootingExpirationLeft    : 
TroubleShootingMode              : 
TroubleShootingModeSource        : 
TroubleShootingQuotaResetTime    : 
TroubleShootingStartTime         : 
PSComputerName                   : 
 
Get-MpPreference : Operation failed with the following error: 0x%1!x!
At line:1 char:24
+ Get-MpComputerStatus ; Get-MpPreference | Select-Object -Property Exc ...
+                        ~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Get-MpPreference],  
   CimException
    + FullyQualifiedErrorId : HRESULT 0x800106ba,Get-MpPreference

No AV

Session Architecture


PS C:\Web\University> [Environment]::Is64BitProcess
[Environment]::Is64BitProcess
True

Installed .NET Frameworks


S C:\Web\University> cmd /c dir /A:D C:\Windows\Microsoft.NET\Framework ; cmd /c reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP" ; cmd /c reg query "HKLM\SOFTWARE\Microsoft\Net Framework Setup\NDP" /s
cmd /c dir /A:D C:\Windows\Microsoft.NET\Framework ; cmd /c reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP" ; cmd /c reg query "HKLM\SOFTWARE\Microsoft\Net Framework Setup\NDP" /s
 Volume in drive C has no label.
 Volume Serial Number is 8E7E-469B
 
 Directory of C:\Windows\Microsoft.NET\Framework
 
09/15/2018  12:12 AM    <DIR>          .
09/15/2018  12:12 AM    <DIR>          ..
09/15/2018  12:12 AM    <DIR>          v1.0.3705
09/15/2018  12:12 AM    <DIR>          v1.1.4322
09/15/2018  12:12 AM    <DIR>          v2.0.50727
10/26/2024  10:20 PM    <DIR>          v4.0.30319
               0 File(s)              0 bytes
               6 Dir(s)   9,707,233,280 bytes free
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\CDF
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4.0
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\CDF
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\CDF\v4.0
    HttpNamespaceReservationInstalled    REG_DWORD    0x1
    NetTcpPortSharingInstalled    REG_DWORD    0x1
    NonHttpActivationInstalled    REG_DWORD    0x1
    SMSvcHostPath    REG_SZ    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\
    WMIInstalled    REG_DWORD    0x1
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4\Client
    CBS    REG_DWORD    0x1
    Install    REG_DWORD    0x1
    InstallPath    REG_SZ    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\
    Release    REG_DWORD    0x70bf6
    Servicing    REG_DWORD    0x0
    TargetVersion    REG_SZ    4.0.0
    Version    REG_SZ    4.7.03190
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4\Client\1033
    CBS    REG_DWORD    0x1
    Install    REG_DWORD    0x1
    Release    REG_DWORD    0x70bf6
    Servicing    REG_DWORD    0x0
    TargetVersion    REG_SZ    4.0.0
    Version    REG_SZ    4.7.03190
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4\Full
    CBS    REG_DWORD    0x1
    Install    REG_DWORD    0x1
    InstallPath    REG_SZ    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\
    Release    REG_DWORD    0x70bf6
    Servicing    REG_DWORD    0x0
    TargetVersion    REG_SZ    4.0.0
    Version    REG_SZ    4.7.03190
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4\Full\1033
    CBS    REG_DWORD    0x1
    Install    REG_DWORD    0x1
    Release    REG_DWORD    0x70bf6
    Servicing    REG_DWORD    0x0
    TargetVersion    REG_SZ    4.0.0
    Version    REG_SZ    4.7.03190
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4.0
    (Default)    REG_SZ    deprecated
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Net Framework Setup\NDP\v4.0\Client
    Install    REG_DWORD    0x1
    Version    REG_SZ    4.0.0.0

.NET 4.7.03190