Why do multiple unknown users appear in file permissions

Question

I was looking for files that were taking up space and came across the unknown "screenonpowerstudy" trace session folders. I am unable to access the files and the permissions list usernames I do not recognize.

Answer 1

Hi @beginnerunknown

The user's list looks normal except for the Account unknown.

Anonymous User is any user who accesses network resources without providing a username or password. Some Microsoft Windows Server applications like Microsoft Internet Information Services (IIS) can be configured to allow anonymous users to access their resources.

The Everyone SID is added to the token that is created for anonymous connections, and anonymous users can access any resource for which the Everyone group has been assigned permissions.

If you suspect it to be malware try running a malware scan and use Process monitor to explore more about this user.

Hope this resolves your Query!!

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

None of these accounts are my account that I use as computer administrator. I understand that the "system" profile is one that I might see, but what are these?

Answer 3

Might be a deleted user account, or a service virtual or managed account and the service is no longer exist.

Answer 4

There have been no other accounts created on the computer, so they can't be deleted user accounts. The computer is not on a network, or connected to a server, and I have never approved remote access.

Answer 5

Refer to the following -

https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/modern-standby-sleepstudy

https://answers.microsoft.com/en-us/windows/forum/all/disable-remove-windows-10-sleep-study/06b1b126-afe6-4b05-bd6e-b5536c2ae8be