administrator@S92P.VMNET1.VM.BASE test 3
s92p-105@S92P.VMNET1.VM.BASE wOSdrlNH 4
krbtgt@S92P.VMNET1.VM.BASE gYqidnlw 4
administrator@DEFAULT.TEST test 3
compilix4@DEFAULT.TEST o%xRhjZc 3
krbtgt@DEFAULT.TEST ovcT~vfM 3
Administrator@ADDPASS.TEST adminpass 1
krbtgt@ADDPASS.TEST krbtgtpass 1
machine@ADDPASS.TEST machinepass 1

W2K3\W2K3-101$ 1D128DC12D67F855B3201969FCF14E08 10
W2K3\krbtgt F13BB9164723663383F2AFF331C8123F 10

SUB1\W2K3-104$ 983E7ECD1EBE93A123259503D6C6F2CB 10
SUB1\krbtgt F6EE81E0BFFDDD277B9D8BCA60F518C8 10

user: W2K3\Administrator, lm_hash
[000] 01 FC 5A 6B E7 BC 69 29  AA D3 B4 35 B5 14 04 EE  ..Zk..i) ...5....
user: W2K3\Administrator, nt_hash
[000] 0C B6 94 88 05 F7 97 BF  2A 82 80 79 73 B8 95 37  ........ *..ys..7
user: W2K3\krbtgt, nt_hash
[000] F1 3B B9 16 47 23 66 33  83 F2 AF F3 31 C8 12 3F  .;..G#f3 ....1..?
user: W2K3\SUPPORT_388945a0, nt_hash
[000] C3 E4 3A EA 87 51 83 2B  2B 3F 7C B3 C4 BE 45 50  ..:..Q.+ +?|...EP
user: W2K3\W2K3-101$, nt_hash
[000] 1D 12 8D C1 2D 67 F8 55  B3 20 19 69 FC F1 4E 08  ....-g.U . .i..N.
user: W2K3\compilix$, lm_hash
[000] A2 C3 DB 83 0D 1F 75 6B  9D 1E E2 FA 1F 6A F9 54  ......uk .....j.T
user: W2K3\compilix$, nt_hash
[000] 91 AF 9A C3 D6 B5 AC 8C  F2 BB CB 56 26 5D 65 18  ........ ...V&]e.
user: W2K3\SUB1$, nt_hash
[000] 16 34 5F 2C 20 58 04 31  07 5B CA C5 D8 55 63 8C  .4_, X.1 .[...Uc.
user: W2K3\NT4$, nt_hash
[000] 75 10 30 BC 9F 14 D9 1A  BE 1D E6 F7 8C A2 AE 37  u.0..... .......7
user: W2K3\user2, nt_hash
[000] F5 1E E7 02 F4 F8 42 6A  03 75 80 FC 8D 50 17 15  ......Bj .u...P..

user: SUB1\Administrator, lm_hash
[000] 01 FC 5A 6B E7 BC 69 29  AA D3 B4 35 B5 14 04 EE  ..Zk..i) ...5....
user: SUB1\Administrator, nt_hash
[000] 0C B6 94 88 05 F7 97 BF  2A 82 80 79 73 B8 95 37  ........ *..ys..7
user: SUB1\krbtgt, nt_hash
[000] F6 EE 81 E0 BF FD DD 27  7B 9D 8B CA 60 F5 18 C8  .......' {...`...
user: SUB1\W2K3-104$, nt_hash
[000] 98 3E 7E CD 1E BE 93 A1  23 25 95 03 D6 C6 F2 CB  .>~..... #%......
user: SUB1\W2K3$, nt_hash
[000] F5 4F CE E9 BA 70 92 25  C9 B0 25 C2 C6 B6 51 3E  .O...p.% ..%...Q>

W2K-MIXED.VMNET9.VM.BASE
ACCOUNT [W2K-MIXED\Administrator            ] NTHASH 0CB6948805F797BF2A82807973B89537
ACCOUNT [W2K-MIXED\Administrator            ] LMHASH 01FC5A6BE7BC6929AAD3B435B51404EE
ACCOUNT [W2K-MIXED\krbtgt                   ] NTHASH 347723B479DA0F032C1EF5BD8CB4EC64
ACCOUNT [W2K-MIXED\TsInternetUser           ] NTHASH 3989CD167E4D41F1DBA32A5AA503510D
ACCOUNT [W2K-MIXED\TsInternetUser           ] LMHASH E5549854FFDA0AA2E862C13B5916D7C6
ACCOUNT [W2K-MIXED\IUSR_W2K-TEMPLATE        ] NTHASH E29B483F4E43F5AF3A7E52A6ACDC62C1
ACCOUNT [W2K-MIXED\IUSR_W2K-TEMPLATE        ] LMHASH 1E31730BCB0DF63CBA0A8353D027FFB6
ACCOUNT [W2K-MIXED\IWAM_W2K-TEMPLATE        ] NTHASH 422587FDCA66A484988BDB03A349F371
ACCOUNT [W2K-MIXED\IWAM_W2K-TEMPLATE        ] LMHASH 11115FE96E6756E62F5800B506A75879
ACCOUNT [W2K-MIXED\W2K-201$                 ] NTHASH 0652ADF99BA95BB03EA17065DDCA846D
ACCOUNT [W2K-MIXED\W2K-202$                 ] NTHASH 1191B5C7FE973B7D3AA2398F1D04846B
ACCOUNT [W2K-MIXED\testuser1                ] NTHASH 0CB6948805F797BF2A82807973B89537
ACCOUNT [W2K-MIXED\testuser1                ] LMHASH 01FC5A6BE7BC6929AAD3B435B51404EE

W2K3-107-20050712-1325@SERNOXDOM4.MX.BASE -V 1 -w 15bfa395da6d1b386f30f4fb4b061424 -H -e arcfour-hmac-md5

2005-07-13 15:00:
ACCOUNT [W2K3\W2K3-101$                ] NTHASH BC32798F14CEF8827F10C79ECFB2EE51
ACCOUNT [W2K3\SUB1$                    ] NTHASH A64266B53063BEF66F44E88150C83D01
ACCOUNT [W2K3\NT4$                     ] NTHASH 6BF367BDC0CD4553F64D38402898D2AE
ACCOUNT [W2K3\W2K3-107$                ] NTHASH 4548D3CC3A0C752363922A82790EC5D3