DistinguishedName: CN=Administrator,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-500 Guid: 6be85a23-3fb7-4360-b802-b0447ab67a80 SamAccountName: Administrator SamAccountType: User UserPrincipalName: PrimaryGroupId: 513 SidHistory: Enabled: True UserAccountControl: NormalAccount, PasswordNeverExpires SupportedEncryptionTypes: AdminCount: True Deleted: False LastLogonDate: 11/5/2021 2:53:11 PM DisplayName: GivenName: Surname: Description: Built-in account for administering the computer/domain ServicePrincipalName: SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, DiscretionaryAclProtected, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 8bb1f8635e5708eb95aedf142054fc95 LMHash: NTHashHistory: LMHashHistory: SupplementalCredentials: ClearText: NTLMStrongHash: 44437771bd72729d864260f82964f368 Kerberos: Credentials: DES_CBC_MD5 Key: e302c7793b58ae97 OldCredentials: Salt: WIN-E0UFANOGSHBAdministrator Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: 6e5d1ccb7642b4bf855975702699f733034916dbd04bf4acddc36ac273b3f578 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 8d5709c4a7cab2e0f5fbb4a069b283fb Iterations: 4096 DES_CBC_MD5 Key: e302c7793b58ae97 Iterations: 4096 OldCredentials: OlderCredentials: ServiceCredentials: Salt: WIN-E0UFANOGSHBAdministrator DefaultIterationCount: 4096 Flags: 0 WDigest: Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=Guest,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-501 Guid: f36b7e05-81f4-40bc-9e76-ca3fba3acbb7 SamAccountName: Guest SamAccountType: User UserPrincipalName: PrimaryGroupId: 514 SidHistory: Enabled: False UserAccountControl: Disabled, PasswordNotRequired, NormalAccount, PasswordNeverExpires SupportedEncryptionTypes: AdminCount: False Deleted: False LastLogonDate: DisplayName: GivenName: Surname: Description: Built-in account for guest access to the computer/domain ServicePrincipalName: SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-32-544 Secrets NTHash: LMHash: NTHashHistory: LMHashHistory: SupplementalCredentials: Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=krbtgt,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-502 Guid: 26280ecc-4b00-474f-a23a-0c24c85e886b SamAccountName: krbtgt SamAccountType: User UserPrincipalName: PrimaryGroupId: 513 SidHistory: Enabled: False UserAccountControl: Disabled, NormalAccount SupportedEncryptionTypes: Default AdminCount: True Deleted: False LastLogonDate: DisplayName: GivenName: Surname: Description: Key Distribution Center Service Account ServicePrincipalName: {kadmin/changepw} SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, DiscretionaryAclProtected, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 9555398600e2b2edf220d06a7c564e6f LMHash: NTHashHistory: Hash 01: 9555398600e2b2edf220d06a7c564e6f LMHashHistory: Hash 01: c09fdb3db202f71ad2d66500af1477f5 SupplementalCredentials: ClearText: NTLMStrongHash: e6f00d8ec76c1cf4f27e3eafe9947944 Kerberos: Credentials: DES_CBC_MD5 Key: a2074373b920515d OldCredentials: Salt: CORP.LOCALkrbtgt Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: 85c670ece27dad635c28630454154bb325b644b8f61d44f802b80c39277f529e Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 15bfbb6b827c1904e49d77bf7624c2f4 Iterations: 4096 DES_CBC_MD5 Key: a2074373b920515d Iterations: 4096 OldCredentials: OlderCredentials: ServiceCredentials: Salt: CORP.LOCALkrbtgt DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 4349fab791e1f262c302f0673bcf1a31 Hash 02: a1c773e990a8a4c10a046474c7883745 Hash 03: bc2cf6733c00b619107d56980539ff8a Hash 04: 4349fab791e1f262c302f0673bcf1a31 Hash 05: a1c773e990a8a4c10a046474c7883745 Hash 06: a082f134a8eeebf2f5503b60503066eb Hash 07: 4349fab791e1f262c302f0673bcf1a31 Hash 08: c9b9ea26ba658496d636c277dd34d2b4 Hash 09: 21717966ece47925fd353e93b12e4990 Hash 10: 8c63f72aba8f40668e145fdf323be626 Hash 11: a1d969b908325c20f955015d6bc57d2b Hash 12: 21717966ece47925fd353e93b12e4990 Hash 13: 637583d982e274c7744b2a07085a06ea Hash 14: a1d969b908325c20f955015d6bc57d2b Hash 15: ab04f8e0b5dcf4b9bb8644dac4f5b7bb Hash 16: 300c2898cd10ad768154579135ba1aff Hash 17: 2230c1b0840a6c9682f03b38bc084a43 Hash 18: c7c27725f91e3f1c3cfb1e8a35a16c5a Hash 19: 7b4d7895c09b6e8999a8d07f2ca04813 Hash 20: bd494bd3504f390d74978f0cacfafffe Hash 21: 3c5e489e771d340db368be1ddc31384b Hash 22: 3c5e489e771d340db368be1ddc31384b Hash 23: ac8d0d39ec320052e323dc8d8f427f4f Hash 24: f22635ba8ab44ef2bff7bcd179b1308b Hash 25: f522c8d0167180547e178e0b5cc76585 Hash 26: 9f4a0df26c3ba2050d1d3e4681e7ee3a Hash 27: c5192942fce6fa76d21845adef18c900 Hash 28: 5864a6028253a53951ad191d7f4c5dd0 Hash 29: aa44df3c76449ad8583dc4071ca08675 Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=Frank Castle,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1103 Guid: 4486aca6-70a6-4fc2-b2ae-8667138a4d0c SamAccountName: fcastle SamAccountType: User UserPrincipalName: fcastle@CORP.local PrimaryGroupId: 513 SidHistory: Enabled: True UserAccountControl: NormalAccount, PasswordNeverExpires SupportedEncryptionTypes: AdminCount: False Deleted: False LastLogonDate: 11/3/2021 10:13:12 PM DisplayName: Frank Castle GivenName: Frank Surname: Castle Description: ServicePrincipalName: SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 37fbc1731f66ad4e524160a732410f9d LMHash: NTHashHistory: Hash 01: 37fbc1731f66ad4e524160a732410f9d LMHashHistory: Hash 01: 39b3d8d1724b2ea9987fcb037dbf856a SupplementalCredentials: ClearText: NTLMStrongHash: 68d8109f820c6d20f9d72d9decc9cc1f Kerberos: Credentials: DES_CBC_MD5 Key: 6b0b2f01a731a78f OldCredentials: Salt: CORP.LOCALfcastle Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: c6319d38d781e145161c4b1a4ef11d08ad9be36c43b173b355f78c2cf2edf15a Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 144565c25d70678535b2908983d74f6e Iterations: 4096 DES_CBC_MD5 Key: 6b0b2f01a731a78f Iterations: 4096 OldCredentials: OlderCredentials: ServiceCredentials: Salt: CORP.LOCALfcastle DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 08848b373b020e1950f5584b7144c384 Hash 02: 175dacaf1eafed4027ccf0d94783540c Hash 03: 82b860c3f3f477c7bfce22ac24a55861 Hash 04: 08848b373b020e1950f5584b7144c384 Hash 05: 175dacaf1eafed4027ccf0d94783540c Hash 06: 404b643e854853f1be93f40a7f66ab1d Hash 07: 08848b373b020e1950f5584b7144c384 Hash 08: b3f000b944181a44e9e63065b497f5d0 Hash 09: 0e1fad32423b4f3027b738eb9b219e17 Hash 10: bf18a44b99ae59c9d32c46e2eaf5c21a Hash 11: 92959dde569b0a902e7b2f6c31cd0742 Hash 12: 0e1fad32423b4f3027b738eb9b219e17 Hash 13: a1a49db34013ee0d16f04110c20db905 Hash 14: 92959dde569b0a902e7b2f6c31cd0742 Hash 15: 21c1fdd14de5b01fd669000ea7a89d90 Hash 16: fc820fd9ee045b63e83576860a5369f9 Hash 17: 6b38f9c18363cf30a2cb18506af974b4 Hash 18: a05e57ccf3f6b3f40be2ff2c19ad489f Hash 19: eb63a1d9a01a7d4db13577b59b6a6fa2 Hash 20: 7c3fc27938308da78e08706bde8fe18d Hash 21: 3f234a77b95e91c7c76a81189894d280 Hash 22: 3f234a77b95e91c7c76a81189894d280 Hash 23: 3e619a075fff06c56655a81ca6cdf884 Hash 24: 0b12f88d761dc0b3aa4b8f96897bb6ba Hash 25: f7c371fd62eeaa864bd55d7dd1ea56e8 Hash 26: 9d7763a93f1b499fc27a92f7ec4aca11 Hash 27: d5bc2f9af3f674d170fc31431557b836 Hash 28: 494251d5595dd6e37284febc45760c6f Hash 29: 86d2932bac7418c3c6c4c3073d806070 Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=John Doe,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1104 Guid: c4640eeb-477b-4c3b-a748-035197827e54 SamAccountName: jdoe SamAccountType: User UserPrincipalName: jdoe@CORP.local PrimaryGroupId: 513 SidHistory: Enabled: True UserAccountControl: NormalAccount, PasswordNeverExpires SupportedEncryptionTypes: AdminCount: False Deleted: False LastLogonDate: 11/5/2021 1:34:15 PM DisplayName: John Doe GivenName: John Surname: Doe Description: ServicePrincipalName: SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 37fbc1731f66ad4e524160a732410f9d LMHash: NTHashHistory: Hash 01: 37fbc1731f66ad4e524160a732410f9d LMHashHistory: Hash 01: 04febbe6b3f09ec7c4d60da1c784f769 SupplementalCredentials: ClearText: NTLMStrongHash: 6528dcbb933c78ec864b67905c91c765 Kerberos: Credentials: DES_CBC_MD5 Key: 610e67019e9b68ab OldCredentials: Salt: CORP.LOCALjdoe Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: 9d74074381d0000525c1cfbb24c2943e28bf415b89c8cf958eae5add39614ac8 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 7e0fb5fa7dcfa50ea0a8a55e08b63f74 Iterations: 4096 DES_CBC_MD5 Key: 610e67019e9b68ab Iterations: 4096 OldCredentials: OlderCredentials: ServiceCredentials: Salt: CORP.LOCALjdoe DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: a74bd6d71d9def85d6f80d2b8febf9a6 Hash 02: 4f630d51194e6693e5cab2ebe8f0dab4 Hash 03: 8a70343bd170f33bfcf9de063d649eee Hash 04: a74bd6d71d9def85d6f80d2b8febf9a6 Hash 05: 4f630d51194e6693e5cab2ebe8f0dab4 Hash 06: 9c28a9d3dea7fb54774cf8ae25dd2895 Hash 07: a74bd6d71d9def85d6f80d2b8febf9a6 Hash 08: e2355fb2cebbeb083693232de5dba426 Hash 09: 21fe7366b030a7f8265d8bc94fc83939 Hash 10: c74330c0207c2cc6dc54c7cd697ac22f Hash 11: d84a0481826259ecd1700f42ce9e5743 Hash 12: 21fe7366b030a7f8265d8bc94fc83939 Hash 13: 7330bf60ba0cf2174274475185b4b8de Hash 14: d84a0481826259ecd1700f42ce9e5743 Hash 15: 9545bf2cf901df46d9fc0541598d7854 Hash 16: 29a70c194e68a4398e9a7ccb965d89c5 Hash 17: 8ea9588812c4e1b2f7ce2c3412d6e7e9 Hash 18: 9c4d4f6020213a4457f209c0a080d285 Hash 19: 6ae2ba52a4951da1f60ba209b456b29c Hash 20: 5bc3479340634dfb8732b625392764b7 Hash 21: 3a39377b01f968a10b7ccbad65a062c5 Hash 22: 3a39377b01f968a10b7ccbad65a062c5 Hash 23: de9479c56eb0ee1eebd3d64c9af03f90 Hash 24: 4493e0e3fe5779df1b085cbf04924358 Hash 25: 288928e60b474de731df3061ff273a7c Hash 26: 79e0e9d38a40bff72a7331f514272ca5 Hash 27: d3fe0d007057b50af2ee2dda6e77319f Hash 28: b1b498fb781a31b5aed4d4ce52f963da Hash 29: 434aee88eb8fa7b6795f877dabb1303f Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=Anthony Smith,CN=Users,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1109 Guid: be15d7d1-0f01-42ea-a566-db3cd7cdaf67 SamAccountName: asmith SamAccountType: User UserPrincipalName: asmith@CORP.local PrimaryGroupId: 513 SidHistory: Enabled: True UserAccountControl: NormalAccount, PasswordNeverExpires SupportedEncryptionTypes: AdminCount: True Deleted: False LastLogonDate: 11/5/2021 3:00:02 PM DisplayName: Anthony Smith GivenName: Anthony Surname: Smith Description: ServicePrincipalName: SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, DiscretionaryAclProtected, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: acbfc03df96e93cf7294a01a6abbda33 LMHash: NTHashHistory: Hash 01: acbfc03df96e93cf7294a01a6abbda33 Hash 02: b963c57010f218edc2cc3c229b5e4d0f Hash 03: ebe7973885cb068eb2e74321ea913e14 LMHashHistory: Hash 01: cf281440362d2fe76bf06474d04535ef Hash 02: b9ac6c2479f1e1dd224ca0dd233463a9 Hash 03: 854e9869aed2780bbd9f04c305ea756a SupplementalCredentials: ClearText: NTLMStrongHash: 1f8b452b3cded7dc7829ebabc531f1be Kerberos: Credentials: DES_CBC_MD5 Key: 839bd6e9380e40f7 OldCredentials: DES_CBC_MD5 Key: 3b5d8c7c51c1b5ec Salt: CORP.LOCALasmith Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: 57e22c0b740ed35935f82a6e34ab84a683437105a4ab2f1f3ba70962d5c53112 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 392a638579d925cca9e4ef7965b9dcdd Iterations: 4096 DES_CBC_MD5 Key: 839bd6e9380e40f7 Iterations: 4096 OldCredentials: AES256_CTS_HMAC_SHA1_96 Key: 3a3f49b3eb8efaa1ece141839a2238363c4ee33ee42711752a3cc6cd3208cf05 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 3bae43eccc9f807ad47d65532982a56c Iterations: 4096 DES_CBC_MD5 Key: 3b5d8c7c51c1b5ec Iterations: 4096 OlderCredentials: AES256_CTS_HMAC_SHA1_96 Key: 9eb83f097333b8c442bc4e36ade186786829801c788706c31f5392d1427b3fb0 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 0ab74a34aa1fe594ada4081690e201c5 Iterations: 4096 DES_CBC_MD5 Key: ad4c7a8fcdad67fe Iterations: 4096 ServiceCredentials: Salt: CORP.LOCALasmith DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 7f9a8e36f0ff801adfc9d9b33684e160 Hash 02: 39eb31d1504a1623fab60622b9a59922 Hash 03: 7cb43668d2572001d297438ab916f75a Hash 04: 7f9a8e36f0ff801adfc9d9b33684e160 Hash 05: 39eb31d1504a1623fab60622b9a59922 Hash 06: 15eb0517b373d4247b574f8764601a7b Hash 07: 7f9a8e36f0ff801adfc9d9b33684e160 Hash 08: 030c6e9776b444e0a824e1407317ddaa Hash 09: 5d20f2557358f7a0366314eccdd329b5 Hash 10: 7e52ad9db3a5ae2ab621103a765b3993 Hash 11: 6b4d546d184d4154926490adcc2e9d84 Hash 12: 5d20f2557358f7a0366314eccdd329b5 Hash 13: 82127ecd7a907d397d69bc6f71da6f5c Hash 14: 6b4d546d184d4154926490adcc2e9d84 Hash 15: 3a07acbb246e02d90a5653b13e5a439c Hash 16: ca5f88f770b8af06e4f7b665aee7b3ab Hash 17: f7951405826c19fe66598cb0f0f12663 Hash 18: 20ab3b333d26011516c373096811bb8a Hash 19: ccfcf5ca0c832befa3a02d05d0da5606 Hash 20: 1ac0a247b5d28bffee1b8ace5206c258 Hash 21: 008cc4d42440a596fa4ab2d4bc110841 Hash 22: 008cc4d42440a596fa4ab2d4bc110841 Hash 23: 3053a8969067ac53cf34a1fbf7ffa203 Hash 24: 0060ecab4f4625e7b34d9e5990ac8ec5 Hash 25: 878dd1cdbb6dbbacdbe9a266f744d724 Hash 26: c8e954a0bc94ee20482ee9a840207789 Hash 27: 9073369fcdc5eed0c18051d55b3064b6 Hash 28: 24f6cad54062d455f1d7b9490807468b Hash 29: 73d35917c5981d33d4fbe1b1eb4e0022 Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=CORP-DC,OU=Domain Controllers,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1000 Guid: 66d054a0-e07c-4f50-8358-cd85e44ae97a SamAccountName: CORP-DC$ SamAccountType: Computer UserPrincipalName: PrimaryGroupId: 516 SidHistory: Enabled: True UserAccountControl: ServerAccount, TrustedForDelegation SupportedEncryptionTypes: RC4_HMAC, AES128_CTS_HMAC_SHA1_96, AES256_CTS_HMAC_SHA1_96 AdminCount: False Deleted: False LastLogonDate: 11/5/2021 2:53:02 PM DisplayName: GivenName: Surname: Description: ServicePrincipalName: {ldap/corp-dc.CORP.local/CORP.local, ldap/corp-dc.CORP.local, ldap/CORP-DC, ldap/corp-dc.CORP.local/CORP...} SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 94d5e7460c75a0b30d85744f633a0e66 LMHash: NTHashHistory: Hash 01: 94d5e7460c75a0b30d85744f633a0e66 Hash 02: 555ab33b0d463c2728474ac8a4040b41 LMHashHistory: Hash 01: 669ab0364f87c5b538b73c09f051a6d8 SupplementalCredentials: ClearText: NTLMStrongHash: Kerberos: Credentials: DES_CBC_MD5 Key: 57497ce6972613da OldCredentials: DES_CBC_MD5 Key: 0d46e6e091e5977a Salt: CORP.LOCALhostcorp-dc.corp.local Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: 9c888129432a87257f81f6bb6affd91bc3b0ba9cf20e94ef9216364d79aab5bd Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 0ac3c714050469724e5c41d21f7f86d3 Iterations: 4096 DES_CBC_MD5 Key: 57497ce6972613da Iterations: 4096 OldCredentials: AES256_CTS_HMAC_SHA1_96 Key: 1d24917a4fd862e17fcd2f065c840a2778401f54be0b2008e9d3ecbb2a02d6d1 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 76bc0335c7ce8d7108f12292f968997a Iterations: 4096 DES_CBC_MD5 Key: 0d46e6e091e5977a Iterations: 4096 OlderCredentials: AES256_CTS_HMAC_SHA1_96 Key: e912fcdffbb65b63260c66021dce84516dadde20bd72f0a319074e01292dccb7 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 50617198c4796f56c3f709bc463cf47b Iterations: 4096 DES_CBC_MD5 Key: d94a97083b672cea Iterations: 4096 ServiceCredentials: Salt: CORP.LOCALhostcorp-dc.corp.local DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 9d534a91fb557233e7c960189cbf9e99 Hash 02: e648a00df8e3f21d8b1660b662d7cbd9 Hash 03: 9d534a91fb557233e7c960189cbf9e99 Hash 04: 9d534a91fb557233e7c960189cbf9e99 Hash 05: 8776d62dd220f33ef65227eef49b821f Hash 06: 8776d62dd220f33ef65227eef49b821f Hash 07: dabea68c83b4390ada3d6f311a15d9f0 Hash 08: 923ac74028b98ae4a43a648a64ff8df0 Hash 09: 56501bba31d9840489244ca430ccdf00 Hash 10: 97ff3efa3bdfaa04c43d756893601767 Hash 11: 97ff3efa3bdfaa04c43d756893601767 Hash 12: 80a668ac8ec868082c16c97c2a912a7d Hash 13: 80a668ac8ec868082c16c97c2a912a7d Hash 14: 5443b1631540da63e521d64f147a4d20 Hash 15: e6c74225a99e2236aad87893a4c80b0f Hash 16: 710200b454d9dcc7c9ba600dc038fcec Hash 17: ae80418e98e19af8a3877b177c9833cb Hash 18: d17b546825b0fa86baa89fd03a7036b1 Hash 19: a5e413a78d14d11199379e9334cec223 Hash 20: d17b546825b0fa86baa89fd03a7036b1 Hash 21: e6d969dec49d3f9bbd7a16e613976ba6 Hash 22: 8bdce74520309fd1ad29abf301cd05b0 Hash 23: e6d969dec49d3f9bbd7a16e613976ba6 Hash 24: a9cc19f23657738d954ee651f4b49e6c Hash 25: a67d33b3a27961c8c5fac6b1fd295320 Hash 26: fcf55370715013643b69d6f57ba3b3b7 Hash 27: f3237f3740daffd6d01dbc7a8ed165e3 Hash 28: e1e862eff15a32944c188e12b045b601 Hash 29: f3237f3740daffd6d01dbc7a8ed165e3 Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=WS01,CN=Computers,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1105 Guid: 7a8d5a4d-292d-4e06-81d0-c41aa8a8ef2e SamAccountName: WS01$ SamAccountType: Computer UserPrincipalName: PrimaryGroupId: 515 SidHistory: Enabled: True UserAccountControl: WorkstationAccount SupportedEncryptionTypes: RC4_HMAC, AES128_CTS_HMAC_SHA1_96, AES256_CTS_HMAC_SHA1_96 AdminCount: False Deleted: False LastLogonDate: 11/5/2021 2:59:11 PM DisplayName: GivenName: Surname: Description: ServicePrincipalName: {HOST/ws01.CORP.local, RestrictedKrbHost/ws01.CORP.local, HOST/WS01, RestrictedKrbHost/WS01} SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: cd9c49cc4a1a535d27b64ab23d58f3e6 LMHash: NTHashHistory: Hash 01: cd9c49cc4a1a535d27b64ab23d58f3e6 Hash 02: 17b86083766b05c118e49a2ebb96b719 LMHashHistory: Hash 01: d149bdeccd8816a217048a8398566dd9 Hash 02: 930dc75ee562f8b5632dcfec4c178618 SupplementalCredentials: ClearText: NTLMStrongHash: Kerberos: Credentials: DES_CBC_MD5 Key: 9885ea642f268ab3 OldCredentials: DES_CBC_MD5 Key: c1fe23d0ceab9b8f Salt: CORP.LOCALhostws01.corp.local Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: ccc215ff3ac06dc3e206f6e55cd1512f3bb00311d02c77591f3cb08e01d5a40f Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 5e94401d7da953a13d42809340ff6ec3 Iterations: 4096 DES_CBC_MD5 Key: 9885ea642f268ab3 Iterations: 4096 OldCredentials: AES256_CTS_HMAC_SHA1_96 Key: 458ad494cadeb5b8e907410b7a9c02fd3de30f169c85e16ca3913e7ab4bdc29d Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: b0b52595e9341c39199c48705b630d84 Iterations: 4096 DES_CBC_MD5 Key: c1fe23d0ceab9b8f Iterations: 4096 OlderCredentials: ServiceCredentials: Salt: CORP.LOCALhostws01.corp.local DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 4357501e19e815e118d1d242b1909a33 Hash 02: 5fe4b47ec7bc668bb58929d9bfcf1c86 Hash 03: 4357501e19e815e118d1d242b1909a33 Hash 04: 4357501e19e815e118d1d242b1909a33 Hash 05: e9d18f3b10e567ea6aa6b0884fdd7382 Hash 06: e9d18f3b10e567ea6aa6b0884fdd7382 Hash 07: 5d82931416c7ffa39e5fb21e003a6389 Hash 08: 2bb4bbe3e3b6fbc783c822a10c2d21ec Hash 09: 5036c943fbebbe1f6cdf4a2ab142e99d Hash 10: 76bbc22b840b5cfecbe292fccf9f6058 Hash 11: 76bbc22b840b5cfecbe292fccf9f6058 Hash 12: 0977e93669602121c25d88e46773722a Hash 13: 0977e93669602121c25d88e46773722a Hash 14: ae32ad5a3169979d36aa7483443cf994 Hash 15: 75b07d97157267301ce86132a27d9252 Hash 16: 4cd650f75efae7c46358c75a4f39982a Hash 17: 9965e33ab5430cdc8f6902178b81ca94 Hash 18: 494278ef6219cee91d0ef2e5721f6bf9 Hash 19: 1de247c1ff6e0602db32ccdb238420f7 Hash 20: 494278ef6219cee91d0ef2e5721f6bf9 Hash 21: 7f9258c9435d8186f26fab52f378f608 Hash 22: 080a0a78754c3b496f63bad736909286 Hash 23: 7f9258c9435d8186f26fab52f378f608 Hash 24: 8d496fbec41623256db1056df0a90891 Hash 25: c934b43fae21ff43d64c3e9c183cd382 Hash 26: bc2a347f1e2212bcdaffeddfaad34512 Hash 27: 3c03542c38bfeb6139ce1168b9bfe4a8 Hash 28: b76d387d081cc8443593aebba217e379 Hash 29: 3c03542c38bfeb6139ce1168b9bfe4a8 Key Credentials: Credential Roaming Created: Modified: Credentials: DistinguishedName: CN=WS02,CN=Computers,DC=CORP,DC=local Sid: S-1-5-21-288640240-4143160774-4193478011-1106 Guid: 5946baae-71c6-4b54-a62c-f4bf8421885b SamAccountName: WS02$ SamAccountType: Computer UserPrincipalName: PrimaryGroupId: 515 SidHistory: Enabled: True UserAccountControl: WorkstationAccount SupportedEncryptionTypes: RC4_HMAC, AES128_CTS_HMAC_SHA1_96, AES256_CTS_HMAC_SHA1_96 AdminCount: False Deleted: False LastLogonDate: 11/5/2021 2:59:35 PM DisplayName: GivenName: Surname: Description: ServicePrincipalName: {HOST/ws02.CORP.local, RestrictedKrbHost/ws02.CORP.local, HOST/WS02, RestrictedKrbHost/WS02} SecurityDescriptor: DiscretionaryAclPresent, SystemAclPresent, DiscretionaryAclAutoInherited, SystemAclAutoInherited, SelfRelative Owner: S-1-5-21-288640240-4143160774-4193478011-512 Secrets NTHash: 98c3974cacc09721a351361504de4de5 LMHash: NTHashHistory: Hash 01: 98c3974cacc09721a351361504de4de5 Hash 02: 160f51cf0692e1709b7f96a8c003fbde LMHashHistory: Hash 01: 3c52d41ec4f30016ff56753029409e5c Hash 02: abf9d98fd41e65a378ae3fb20ed341b1 SupplementalCredentials: ClearText: NTLMStrongHash: Kerberos: Credentials: DES_CBC_MD5 Key: b58a08dc9eabbc0d OldCredentials: DES_CBC_MD5 Key: 79d3fd1ad32991f2 Salt: CORP.LOCALhostws02.corp.local Flags: 0 KerberosNew: Credentials: AES256_CTS_HMAC_SHA1_96 Key: dc3f081be6c29532904a073124a0998d857667cc5c531fcbe0f6d3e46d40eac2 Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: 7e494ea36b4fb80670f807a8c72e7b3d Iterations: 4096 DES_CBC_MD5 Key: b58a08dc9eabbc0d Iterations: 4096 OldCredentials: AES256_CTS_HMAC_SHA1_96 Key: a1604102464d119d7cdfda45d9cf8e1222226b725bdcc57c63221f423c5faaec Iterations: 4096 AES128_CTS_HMAC_SHA1_96 Key: bec2df413581b4fa928abf427f6f9e74 Iterations: 4096 DES_CBC_MD5 Key: 79d3fd1ad32991f2 Iterations: 4096 OlderCredentials: ServiceCredentials: Salt: CORP.LOCALhostws02.corp.local DefaultIterationCount: 4096 Flags: 0 WDigest: Hash 01: 5546e4771334bd755498b601b7559053 Hash 02: e3ed777b90952a5f0f570c227583b89a Hash 03: 5546e4771334bd755498b601b7559053 Hash 04: 5546e4771334bd755498b601b7559053 Hash 05: 842e992738f5e6dc68f5aa1e9011e69f Hash 06: 842e992738f5e6dc68f5aa1e9011e69f Hash 07: 624024b3d45965b2682da02c2424f51e Hash 08: 26ecd95ca049e1416167b68342659307 Hash 09: 33d762892c3aa2338a4dd9596e2b6f22 Hash 10: 3fa94e2a94bd049241ae19970876087b Hash 11: 3fa94e2a94bd049241ae19970876087b Hash 12: e379dd7e1201b13d5272bae1511094f0 Hash 13: e379dd7e1201b13d5272bae1511094f0 Hash 14: 1a04854832f010893e23b183fad0b3d0 Hash 15: 4cd0aa1bc2c101f2bc0d40610dc1076f Hash 16: f93fa77991dc1b24d67adf9de37d650b Hash 17: e7fafab55a1beab0f0c51827874bc7ca Hash 18: 90f3bcad2bc9b54f6416c39d28d4099d Hash 19: d2e6442206f0ab08e09f73ba501e7c3a Hash 20: 90f3bcad2bc9b54f6416c39d28d4099d Hash 21: ea5e31e812d47eb0880907111d9a3ed8 Hash 22: c85e47e88028b0883118a8a84b4c8755 Hash 23: ea5e31e812d47eb0880907111d9a3ed8 Hash 24: 118cad3080cac9262855cf4ce1df2018 Hash 25: 8af860e4ddb1709cd319504fef4cb8b8 Hash 26: 93c16de69e1a66bac340b1963e48b72e Hash 27: d00ecaa37aa3de642cc29a45795870e1 Hash 28: 725bba16b5ee60801f5e81c40e049d10 Hash 29: d00ecaa37aa3de642cc29a45795870e1 Key Credentials: Credential Roaming Created: Modified: Credentials: