Type Password Dump
Jump to navigation
Jump to search
| Defined Constant | Type_Password_Dump
|
| File Type Value | 714 |
| Parent Type | ASCII Text |
| Carve | Yes |
| Format Details | No |
| MIME Type | text/plain
|
| Filename Extension | pwdump
|
Password Dump
Description
A dump of password hashes.
Details
When this file is generated by Truxton, it will have the following format:
Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:S-1-5-21-1220945662-884357618-682003330-500:1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc40000048a
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc40000048a
HelpAssistant:1000:9b7062e6af8a93b90ab8d717cd9a3283:e711f50ca2355d5b8542fac99a523f27:S-1-5-21-1220945662-884357618-682003330-1000:1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc40000048a
SUPPORT_388945a0:1002:aad3b435b51404eeaad3b435b51404ee:dc223b056c2db7e6410d439a29fff1dc:S-1-5-21-1220945662-884357618-682003330-1002:1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc40000048a
Owner:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:S-1-5-21-1220945662-884357618-682003330-1003:1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc400001db3
Caster Troy:1004:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:S-1-5-21-1220945662-884357618-682003330-1004:1719dda9-ac1b-96e3-db89-08a4a479d567:5fb4f68b-d162-94ce-993a-3bc40000048aThis differs from the pwdump (aka passwd) file you normally see in that Truxton fills in the last three fields. Most other tools leave them blank.
