Default SMB shares (which you generally can’t connect to):

  • IPC$
  • ADMIN$
  • C$

The ADMIN$ share is only accessibly by administrators; by default this maps to %WINDIR% (and is a great place to stash malicious executables for access via sc.exe or schtasks.exe, if you have the right permissions).