How-to · 14 min · updated

Inspect a suspicious file with built-in Windows tools

An attachment or download you do not trust? Find out what it really is without opening it: the real name and type, its SHA-256, its Authenticode signature and its Mark-of-the-Web, using only PowerShell and File Explorer, and learn what each result does not prove.

How-to · 7 min · updated

Find what is using port 8080 on Windows

Your dev server says port 8080 is already in use. Find the process behind it with netstat, tasklist and PowerShell, learn what the listening addresses mean, and free the port without breaking something else.

How-to · 8 min · updated

Organise Downloads safely without a cleanup utility

Sort a cluttered Downloads folder into category folders with PowerShell, without losing or overwriting anything: inventory the files, build and review a move plan, catch name collisions, confirm each move, keep a record and undo it if needed.

Troubleshooting · 8 min · updated

Websites do not load but Windows says you are connected

Find out which layer is failing when pages will not load: the adapter and address, the router, the internet itself, DNS, a proxy or a captive portal. Built-in PowerShell checks, read from the bottom up, with what each result means and the fixes that match it.

Troubleshooting · 8 min · updated

Port in use but no process is listed on Windows

netstat shows nothing on the port, yet your program still cannot bind to it. Work through the causes one check at a time: reserved port ranges, TIME_WAIT, PID 4, IPv6, Docker and WSL forwarding, permissions and the firewall.

Explainer · 7 min · updated

What is svchost.exe and why does it use so many ports?

svchost.exe is the host process for Windows services, which is why it owns ports such as 135, 1900 and 5353. Learn how service groups work, how to see which service lives in which copy, and how to tell a genuine svchost from an impostor.