Yes, that’s the point. It runs from an unprivileged user context to find ways to become admin. However, some checks (like security event logs) require higher privileges if available.
peas-tool download winpeas --output ./bin/winPEAS.exe --verify download winpeasexe verified
If your terminal supports ANSI colors, pay close attention to the output color schemes. WinPEAS uses red text on a yellow background to highlight highly exploitable vulnerabilities or cleartext credentials that almost guarantee a path to administrative privileges. Yes, that’s the point