Team 2 Wiki Page

Signup Login

Number: Team 2
Name: The Phishermen
IP Range: 33.96.5.0/24
Domain: team2.isucdc.com
Current Place: 6th
Red Teamer(s): None

Blue Flags
LTV /etc/ AD C:\Windows\System32\ JD C:\Windows\System32\ NEWS /etc/ WSTN /etc/ WWW /etc/ x-api-key-flag TX Arduino LoRa

Red Flags
WSTN /root/ WWW /root/ AD C:\Users\Administrator\ JD C:\Users\Administrator\ LTV /root/ NEWS /root/

AD LDAP

AD RDP

JD RDP

LTV SSH

NEWS SSH

NEWS HTTP

WSTN SSH

WSTN MQTT

WWW SSH

WWW HTTP

# Nmap 7.93 scan initiated Sat Dec 6 08:23:26 2025

Nmap scan report for ad.team2.isucdc.com (33.96.5.10)

Host is up (0.012s latency).

Not shown: 65533 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: team2.isucdc.com0., Site: Default-First-Site-Name)

3389/tcp open ms-wbt-server Microsoft Terminal Services

| rdp-ntlm-info:

| Target_Name: TEAM2

| NetBIOS_Domain_Name: TEAM2

| NetBIOS_Computer_Name: AD

| DNS_Domain_Name: team2.isucdc.com

| DNS_Computer_Name: ad.team2.isucdc.com

| DNS_Tree_Name: team2.isucdc.com

| Product_Version: 10.0.17763

|_ System_Time: 2025-12-06T14:29:44+00:00

| ssl-cert: Subject: commonName=ad.team2.isucdc.com

| Not valid before: 2025-11-04T04:53:45

|_Not valid after: 2026-05-06T04:53:45

|_ssl-date: 2025-12-06T14:29:49+00:00; -58s from scanner time.

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: Host: AD; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:

|_clock-skew: mean: -58s, deviation: 0s, median: -58s

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 9.00 ms 33.96.5.10

Nmap scan report for jd.team2.isucdc.com (33.96.5.20)

Host is up (0.016s latency).

Not shown: 65534 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

3389/tcp open ms-wbt-server Microsoft Terminal Services

| rdp-ntlm-info:

| Target_Name: TEAM2

| NetBIOS_Domain_Name: TEAM2

| NetBIOS_Computer_Name: DESKTOP-4K2JCUD

| DNS_Domain_Name: team2.isucdc.com

| DNS_Computer_Name: DESKTOP-4K2JCUD.team2.isucdc.com

| DNS_Tree_Name: team2.isucdc.com

| Product_Version: 10.0.22621

|_ System_Time: 2025-12-06T14:29:36+00:00

|_ssl-date: TLS randomness does not represent time

| ssl-cert: Subject: commonName=DESKTOP-4K2JCUD.team2.isucdc.com

| Not valid before: 2025-11-27T20:27:52

|_Not valid after: 2026-05-29T20:27:52

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:

|_clock-skew: -1m06s

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 8.00 ms 33.96.5.20

Nmap scan report for ltv.team2.isucdc.com (33.96.5.30)

Host is up (0.020s latency).

Not shown: 65534 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

22/tcp open ssh OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.13 (Ubuntu Linux; protocol 2.0)

| ssh-hostkey:

| 1024 0c7c02eb5a9fe29566c11e06cf84cf47 (DSA)

| 2048 453739b58fc6b978ab1e41dd81596ecf (RSA)

| 256 89e9f14ac8d9391f078dd4603c19c4dd (ECDSA)

|_ 256 58de7185954051643b9ee99cebfdf838 (ED25519)

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 10.00 ms 33.96.5.30

Nmap scan report for news.team2.isucdc.com (33.96.5.40)

Host is up (0.018s latency).

Not shown: 65533 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.7 (Ubuntu Linux; protocol 2.0)

| ssh-hostkey:

| 2048 357994a98dd506f35bb6c7317962de08 (RSA)

| 256 95a6a90f800410e48ba00b686b3907e8 (ECDSA)

|_ 256 9578e1eedc0ef62ba30dddaae08fa7cd (ED25519)

8080/tcp open http-proxy

| http-title: Site doesn't have a title (video/mp4).

|_Requested resource was http://news.team2.isucdc.com:8080/broadcast/news/live

| fingerprint-strings:

| FourOhFourRequest, GetRequest:

| HTTP/1.1 302

| Vary: Origin

| Vary: Access-Control-Request-Method

| Vary: Access-Control-Request-Headers

| Location: http://localhost:8080/broadcast/news/live

| Content-Language: en-US

| Content-Length: 0

| Date: Sat, 06 Dec 2025 14:29:08 GMT

| Connection: close

| HTTPOptions:

| HTTP/1.1 404

| Vary: Origin

| Vary: Access-Control-Request-Method

| Vary: Access-Control-Request-Headers

| Allow: GET,HEAD,OPTIONS

| Accept-Patch:

| Content-Length: 0

| Date: Sat, 06 Dec 2025 14:29:08 GMT

| Connection: close

| RTSPRequest, Socks5:

| HTTP/1.1 400

| Content-Type: text/html;charset=utf-8

| Content-Language: en

| Content-Length: 435

| Date: Sat, 06 Dec 2025 14:29:08 GMT

| Connection: close

| HTTP Status 400 </div><div>| Requestbody {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}

HTTP Status 400

|_ Request

|_http-trane-info: Problem with XML parsing of /evox/about

|_http-open-proxy: Proxy might be redirecting requests

1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :

SF-Port8080-TCP:V=7.93%I=7%D=12/6%Time=69343E06%P=i686-pc-windows-windows%

SF:r(GetRequest,103,"HTTP/1\.1\x20302\x20\r\nVary:\x20Origin\r\nVary:\x20A

SF:ccess-Control-Request-Method\r\nVary:\x20Access-Control-Request-Headers

SF:\r\nLocation:\x20http://localhost:8080/broadcast/news/live\r\nContent-L

SF:anguage:\x20en-US\r\nContent-Length:\x200\r\nDate:\x20Sat,\x2006\x20Dec

SF:\x202025\x2014:29:08\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(HTTPOpt

SF:ions,DE,"HTTP/1\.1\x20404\x20\r\nVary:\x20Origin\r\nVary:\x20Access-Con

SF:trol-Request-Method\r\nVary:\x20Access-Control-Request-Headers\r\nAllow

SF::\x20GET,HEAD,OPTIONS\r\nAccept-Patch:\x20\r\nContent-Length:\x200\r\nD

SF:ate:\x20Sat,\x2006\x20Dec\x202025\x2014:29:08\x20GMT\r\nConnection:\x20

SF:close\r\n\r\n")%r(RTSPRequest,24E,"HTTP/1\.1\x20400\x20\r\nContent-Type

SF::\x20text/html;charset=utf-8\r\nContent-Language:\x20en\r\nContent-Leng

SF:th:\x20435\r\nDate:\x20Sat,\x2006\x20Dec\x202025\x2014:29:08\x20GMT\r\n

SF:Connection:\x20close\r\n\r\n

SF:d>HTTP\x20Status\x20400\x20\xe2\x80\x93\x20Bad\x20Request</title</div><div>SF:><style\x20type=\"text/css\">body\x20{font-family:Tahoma,Arial,sans-ser</div><div>SF:if;}\x20h1,\x20h2,\x20h3,\x20b\x20{color:white;background-color:#525D76</div><div>SF:;}\x20h1\x20{font-size:22px;}\x20h2\x20{font-size:16px;}\x20h3\x20{font</div><div>SF:-size:14px;}\x20p\x20{font-size:12px;}\x20a\x20{color:black;}\x20\.line</div><div>SF:\x20{height:1px;background-color:#525D76;border:none;}</style></head><b</div><div>SF:ody><h1>HTTP\x20Status\x20400\x20\xe2\x80\x93\x20Bad\x20Request</h1></b</div><div>SF:ody></html>")%r(FourOhFourRequest,103,"HTTP/1\.1\x20302\x20\r\nVary:\x2</div><div>SF:0Origin\r\nVary:\x20Access-Control-Request-Method\r\nVary:\x20Access-Co</div><div>SF:ntrol-Request-Headers\r\nLocation:\x20<a target="_blank" rel="nofollow" href="http://localhost:8080/broadcast/n">http://localhost:8080/broadcast/n</a></div><div>SF:ews/live\r\nContent-Language:\x20en-US\r\nContent-Length:\x200\r\nDate:</div><div>SF:\x20Sat,\x2006\x20Dec\x202025\x2014:29:08\x20GMT\r\nConnection:\x20clos</div><div>SF:e\r\n\r\n")%r(Socks5,24E,"HTTP/1\.1\x20400\x20\r\nContent-Type:\x20text</div><div>SF:/html;charset=utf-8\r\nContent-Language:\x20en\r\nContent-Length:\x2043</div><div>SF:5\r\nDate:\x20Sat,\x2006\x20Dec\x202025\x2014:29:08\x20GMT\r\nConnectio</div><div>SF:n:\x20close\r\n\r\n<!doctype\x20html><html\x20lang=\"en\"><head><title></div><div>SF:HTTP\x20Status\x20400\x20\xe2\x80\x93\x20Bad\x20Request

SF:20type=\"text/css\">body\x20{font-family:Tahoma,Arial,sans-serif;}\x20h

SF:1,\x20h2,\x20h3,\x20b\x20{color:white;background-color:#525D76;}\x20h1\

SF:x20{font-size:22px;}\x20h2\x20{font-size:16px;}\x20h3\x20{font-size:14p

SF:x;}\x20p\x20{font-size:12px;}\x20a\x20{color:black;}\x20\.line\x20{heig

SF:ht:1px;background-color:#525D76;border:none;}

H

SF:TTP\x20Status\x20400\x20\xe2\x80\x93\x20Bad\x20Request

SF:l>");

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 9.00 ms 33.96.5.40

Nmap scan report for wstn.team2.isucdc.com (33.96.5.50)

Host is up (0.010s latency).

Not shown: 65533 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

22/tcp open ssh OpenSSH 8.4p1 Debian 5+deb11u3 (protocol 2.0)

| ssh-hostkey:

| 3072 5a185df5ed7864cc5387404bb610863a (RSA)

| 256 e474126041a3534067eeeadac542e3fd (ECDSA)

|_ 256 0799db383afe5abafc5c27c9ea83c3c5 (ED25519)

1883/tcp open mosquitto version 2.0.11

| mqtt-subscribe:

| Topics and their most recent payloads:

| $SYS/broker/bytes/sent: 73879

| $SYS/broker/load/bytes/sent/15min: 2.37

| $SYS/broker/version: mosquitto version 2.0.11

| $SYS/broker/load/connections/5min: 0.20

| $SYS/broker/load/sockets/1min: 1.68

| $SYS/broker/bytes/received: 70097

| $SYS/broker/load/bytes/received/1min: 18.49

| $SYS/broker/load/messages/sent/1min: 1.94

| $SYS/broker/load/bytes/sent/1min: 5.70

| $SYS/broker/load/messages/received/15min: 1.07

| $SYS/broker/messages/received: 25952

| $SYS/broker/messages/sent: 26017

| $SYS/broker/store/messages/bytes: 213

| $SYS/broker/uptime: 1621322 seconds

| $SYS/broker/load/sockets/5min: 0.50

| $SYS/broker/load/sockets/15min: 0.30

| $SYS/broker/load/messages/sent/5min: 1.21

| $SYS/broker/load/messages/sent/15min: 1.07

| $SYS/broker/load/connections/15min: 0.07

| $SYS/broker/load/connections/1min: 0.91

| $SYS/broker/load/messages/received/5min: 1.21

| $SYS/broker/load/bytes/received/15min: 3.28

| $SYS/broker/load/messages/received/1min: 1.94

| $SYS/broker/load/bytes/sent/5min: 2.80

|_ $SYS/broker/load/bytes/received/5min: 5.55

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 13.00 ms 33.96.5.50

Nmap scan report for www.team2.isucdc.com (33.96.5.60)

Host is up (0.013s latency).

Not shown: 65533 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

22/tcp open ssh OpenSSH 9.2p1 Debian 2+deb12u7 (protocol 2.0)

| ssh-hostkey:

| 256 a06a89c7a4b137232d3aa124c3761006 (ECDSA)

|_ 256 a87c353ddf2b92072b1ec85a8dd37e0f (ED25519)

80/tcp open http Apache httpd 2.4.65 ((Debian))

|_http-server-header: Apache/2.4.65 (Debian)

|_http-title: Arrow pointing to the left

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

OS fingerprint not ideal because: Missing a closed TCP port so results incomplete

No OS matches for host

Network Distance: 1 hop

Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 13.00 ms 33.96.5.60

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

# Nmap done at Sat Dec 6 08:35:28 2025 -- 6 IP addresses (6 hosts up) scanned in 723.08 seconds

Cracked from Mimikatz:

1b2f2633de842ebce2fd05f51c33ba0b->tacocat

76933c7d5bff9b6edcefa1c740262859

b685f6c6ecbe3255b60ea986e3eba61e

2b1ded98fe38c83668cea8d56776f139->low388fah

5c0e9f8a618c546ffedbd4255a437cf2

ddfc1a018a44006571b017685e633434

5af032c759c470f5d5ecb7d85fa92687

34215de7c14374175e5522f63d1a35b4

28d65901447ac72207392f35d1129946

02826ddbce69a2b9292365f61659af07

da40a2e742a4710b91425a25f24cce48

david.ward -> 41a9aa14016374c8d746700135c89c78->fac623civ

5fb62982121a812f36f7171c86457599

Mimikatz

Authentication Id : 0 ; 738591492 (00000000:2c060304) Session : RemoteInteractive from 8 User Name : taco Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 12:15:38 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1144 msv : [00000003] Primary * Username : taco * Domain : TEAM2 * NTLM : 1b2f2633de842ebce2fd05f51c33ba0b * SHA1 : d7679cbc19ac7810d041328adff3f38bfd8bc115 * DPAPI : 76933c7d5bff9b6edcefa1c740262859 tspkg : wdigest : * Username : taco * Domain : TEAM2 * Password : (null) kerberos : * Username : taco * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 737236579 (00000000:2bf15663) Session : Interactive from 7 User Name : DWM-7 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 12:10:41 PM SID : S-1-5-90-0-7 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 737235818 (00000000:2bf1536a) Session : Interactive from 7 User Name : UMFD-7 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 12:10:41 PM SID : S-1-5-96-0-7 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 734045366 (00000000:2bc0a4b6) Session : RemoteInteractive from 4 User Name : jeffrey.harper Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 11:13:10 AM SID : S-1-5-21-2671730196-4217070691-3270443230-1132 msv : [00000003] Primary * Username : jeffrey.harper * Domain : TEAM2 * NTLM : 2b1ded98fe38c83668cea8d56776f139 * SHA1 : d99c56bd0fcdd915ab23397668c4134b8c641d61 * DPAPI : 5c0e9f8a618c546ffedbd4255a437cf2 tspkg : wdigest : * Username : jeffrey.harper * Domain : TEAM2 * Password : (null) kerberos : * Username : jeffrey.harper * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 734034731 (00000000:2bc07b2b) Session : Interactive from 4 User Name : UMFD-4 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 11:13:09 AM SID : S-1-5-96-0-4 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 733757933 (00000000:2bbc41ed) Session : Interactive from 6 User Name : UMFD-6 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 11:07:34 AM SID : S-1-5-96-0-6 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 733757861 (00000000:2bbc41a5) Session : Interactive from 6 User Name : UMFD-6 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 11:07:34 AM SID : S-1-5-96-0-6 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 561729334 (00000000:217b4f36) Session : Interactive from 5 User Name : DWM-5 Domain : Window Manager Logon Server : (null) Logon Time : 11/28/2025 2:34:09 PM SID : S-1-5-90-0-5 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 561726824 (00000000:217b4568) Session : Interactive from 5 User Name : UMFD-5 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/28/2025 2:34:09 PM SID : S-1-5-96-0-5 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 127783336 (00000000:079dd1a8) Session : RemoteInteractive from 2 User Name : cdc Domain : TEAM2 Logon Server : AD Logon Time : 11/14/2025 9:11:17 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1000 msv : [00000003] Primary * Username : cdc * Domain : TEAM2 * NTLM : 5af032c759c470f5d5ecb7d85fa92687 * SHA1 : 5ca61991ec93efb0ef880e9cb993f45be11c0685 * DPAPI : 34215de7c14374175e5522f63d1a35b4 tspkg : wdigest : * Username : cdc * Domain : TEAM2 * Password : (null) kerberos : * Username : cdc * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 127757090 (00000000:079d6b22) Session : Interactive from 2 User Name : DWM-2 Domain : Window Manager Logon Server : (null) Logon Time : 11/14/2025 9:11:16 PM SID : S-1-5-90-0-2 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 127757062 (00000000:079d6b06) Session : Interactive from 2 User Name : DWM-2 Domain : Window Manager Logon Server : (null) Logon Time : 11/14/2025 9:11:16 PM SID : S-1-5-90-0-2 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 127756393 (00000000:079d6869) Session : Interactive from 2 User Name : UMFD-2 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/14/2025 9:11:16 PM SID : S-1-5-96-0-2 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 26355 (00000000:000066f3) Session : Interactive from 1 User Name : UMFD-1 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/6/2025 11:47:59 PM SID : S-1-5-96-0-1 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 26315 (00000000:000066cb) Session : Interactive from 0 User Name : UMFD-0 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/6/2025 11:47:59 PM SID : S-1-5-96-0-0 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman : Authentication Id : 0 ; 26271 (00000000:0000669f) Session : Interactive from 0 User Name : UMFD-0 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/6/2025 11:47:59 PM SID : S-1-5-96-0-0 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 738591589 (00000000:2c060365) Session : RemoteInteractive from 8 User Name : taco Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 12:15:38 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1144 msv : [00000003] Primary * Username : taco * Domain : TEAM2 * NTLM : 1b2f2633de842ebce2fd05f51c33ba0b * SHA1 : d7679cbc19ac7810d041328adff3f38bfd8bc115 * DPAPI : 76933c7d5bff9b6edcefa1c740262859 tspkg : wdigest : * Username : taco * Domain : TEAM2 * Password : (null) kerberos : * Username : taco * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 738574381 (00000000:2c05c02d) Session : Interactive from 8 User Name : DWM-8 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 12:15:37 PM SID : S-1-5-90-0-8 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 738574330 (00000000:2c05bffa) Session : Interactive from 8 User Name : DWM-8 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 12:15:37 PM SID : S-1-5-90-0-8 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 737250737 (00000000:2bf18db1) Session : RemoteInteractive from 7 User Name : brad.chapman Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 12:10:42 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1136 msv : [00000003] Primary * Username : brad.chapman * Domain : TEAM2 * NTLM : 2a9e645994252b382941d93d30bd1df3 * SHA1 : 4ca9a5e4ebec83c7f91f78753edfc7619a14c625 * DPAPI : 28d65901447ac72207392f35d1129946 tspkg : wdigest : * Username : brad.chapman * Domain : TEAM2 * Password : (null) kerberos : * Username : brad.chapman * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 737236624 (00000000:2bf15690) Session : Interactive from 7 User Name : DWM-7 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 12:10:41 PM SID : S-1-5-90-0-7 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 733760743 (00000000:2bbc4ce7) Session : Interactive from 6 User Name : DWM-6 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 11:07:34 AM SID : S-1-5-90-0-6 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 561726634 (00000000:217b44aa) Session : Interactive from 5 User Name : UMFD-5 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/28/2025 2:34:09 PM SID : S-1-5-96-0-5 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 127780982 (00000000:079dc876) Session : RemoteInteractive from 2 User Name : cdc Domain : TEAM2 Logon Server : AD Logon Time : 11/14/2025 9:11:17 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1000 msv : [00000003] Primary * Username : cdc * Domain : TEAM2 * NTLM : 5af032c759c470f5d5ecb7d85fa92687 * SHA1 : 5ca61991ec93efb0ef880e9cb993f45be11c0685 * DPAPI : 34215de7c14374175e5522f63d1a35b4 tspkg : wdigest : * Username : cdc * Domain : TEAM2 * Password : (null) kerberos : * Username : cdc * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 127756354 (00000000:079d6842) Session : Interactive from 2 User Name : UMFD-2 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/14/2025 9:11:16 PM SID : S-1-5-96-0-2 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 126662261 (00000000:078cb675) Session : Interactive from 1 User Name : Administrator Domain : TEAM2 Logon Server : AD Logon Time : 11/14/2025 8:55:33 PM SID : S-1-5-21-2671730196-4217070691-3270443230-500 msv : [00000003] Primary * Username : Administrator * Domain : TEAM2 * NTLM : 02826ddbce69a2b9292365f61659af07 * SHA1 : d61fd85a6152d40ee8a7671baed8e2af52214e54 * DPAPI : da40a2e742a4710b91425a25f24cce48 tspkg : wdigest : * Username : Administrator * Domain : TEAM2 * Password : (null) kerberos : * Username : Administrator * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 999 (00000000:000003e7) Session : UndefinedLogonType from 0 User Name : AD$ Domain : TEAM2 Logon Server : (null) Logon Time : 11/6/2025 11:47:55 PM SID : S-1-5-18 msv : tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : ad$ * Domain : TEAM2.ISUCDC.COM * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 738573581 (00000000:2c05bd0d) Session : Interactive from 8 User Name : UMFD-8 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 12:15:37 PM SID : S-1-5-96-0-8 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 738573554 (00000000:2c05bcf2) Session : Interactive from 8 User Name : UMFD-8 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 12:15:37 PM SID : S-1-5-96-0-8 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 737248789 (00000000:2bf18615) Session : RemoteInteractive from 7 User Name : brad.chapman Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 12:10:42 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1136 msv : [00000003] Primary * Username : brad.chapman * Domain : TEAM2 * NTLM : 2a9e645994252b382941d93d30bd1df3 * SHA1 : 4ca9a5e4ebec83c7f91f78753edfc7619a14c625 * DPAPI : 28d65901447ac72207392f35d1129946 tspkg : wdigest : * Username : brad.chapman * Domain : TEAM2 * Password : (null) kerberos : * Username : brad.chapman * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 737235856 (00000000:2bf15390) Session : Interactive from 7 User Name : UMFD-7 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 12:10:41 PM SID : S-1-5-96-0-7 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 734045264 (00000000:2bc0a450) Session : RemoteInteractive from 4 User Name : jeffrey.harper Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 11:13:10 AM SID : S-1-5-21-2671730196-4217070691-3270443230-1132 msv : [00000003] Primary * Username : jeffrey.harper * Domain : TEAM2 * NTLM : 2b1ded98fe38c83668cea8d56776f139 * SHA1 : d99c56bd0fcdd915ab23397668c4134b8c641d61 * DPAPI : 5c0e9f8a618c546ffedbd4255a437cf2 tspkg : wdigest : * Username : jeffrey.harper * Domain : TEAM2 * Password : (null) kerberos : * Username : jeffrey.harper * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 734035610 (00000000:2bc07e9a) Session : Interactive from 4 User Name : DWM-4 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 11:13:09 AM SID : S-1-5-90-0-4 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 559010347 (00000000:2151d22b) Session : RemoteInteractive from 3 User Name : david.ward Domain : TEAM2 Logon Server : AD Logon Time : 11/28/2025 12:59:55 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1134 msv : tspkg : wdigest : kerberos : ssp : credman : Authentication Id : 0 ; 559010172 (00000000:2151d17c) Session : RemoteInteractive from 3 User Name : david.ward Domain : TEAM2 Logon Server : AD Logon Time : 11/28/2025 12:59:55 PM SID : S-1-5-21-2671730196-4217070691-3270443230-1134 msv : tspkg : wdigest : kerberos : ssp : credman : Authentication Id : 0 ; 43753 (00000000:0000aae9) Session : Interactive from 1 User Name : DWM-1 Domain : Window Manager Logon Server : (null) Logon Time : 11/6/2025 11:48:00 PM SID : S-1-5-90-0-1 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 996 (00000000:000003e4) Session : Service from 0 User Name : AD$ Domain : TEAM2 Logon Server : (null) Logon Time : 11/6/2025 11:47:59 PM SID : S-1-5-20 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : ad$ * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 26309 (00000000:000066c5) Session : Interactive from 1 User Name : UMFD-1 Domain : Font Driver Host Logon Server : (null) Logon Time : 11/6/2025 11:47:59 PM SID : S-1-5-96-0-1 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 23990 (00000000:00005db6) Session : UndefinedLogonType from 0 User Name : (null) Domain : (null) Logon Server : (null) Logon Time : 11/6/2025 11:47:55 PM SID : msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : kerberos : ssp : credman : Authentication Id : 0 ; 734035583 (00000000:2bc07e7f) Session : Interactive from 4 User Name : DWM-4 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 11:13:09 AM SID : S-1-5-90-0-4 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 734034774 (00000000:2bc07b56) Session : Interactive from 4 User Name : UMFD-4 Domain : Font Driver Host Logon Server : (null) Logon Time : 12/6/2025 11:13:09 AM SID : S-1-5-96-0-4 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 733776276 (00000000:2bbc8994) Session : RemoteInteractive from 6 User Name : david.ward Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 11:07:35 AM SID : S-1-5-21-2671730196-4217070691-3270443230-1134 msv : [00000003] Primary * Username : david.ward * Domain : TEAM2 * NTLM : 41a9aa14016374c8d746700135c89c78 * SHA1 : ace2069fe8a570d083bbc0a0bce5592ac5f76385 * DPAPI : 5fb62982121a812f36f7171c86457599 tspkg : wdigest : * Username : david.ward * Domain : TEAM2 * Password : (null) kerberos : * Username : david.ward * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 733776037 (00000000:2bbc88a5) Session : RemoteInteractive from 6 User Name : david.ward Domain : TEAM2 Logon Server : AD Logon Time : 12/6/2025 11:07:35 AM SID : S-1-5-21-2671730196-4217070691-3270443230-1134 msv : [00000003] Primary * Username : david.ward * Domain : TEAM2 * NTLM : 41a9aa14016374c8d746700135c89c78 * SHA1 : ace2069fe8a570d083bbc0a0bce5592ac5f76385 * DPAPI : 5fb62982121a812f36f7171c86457599 tspkg : wdigest : * Username : david.ward * Domain : TEAM2 * Password : (null) kerberos : * Username : david.ward * Domain : TEAM2.ISUCDC.COM * Password : (null) ssp : credman : Authentication Id : 0 ; 733760665 (00000000:2bbc4c99) Session : Interactive from 6 User Name : DWM-6 Domain : Window Manager Logon Server : (null) Logon Time : 12/6/2025 11:07:34 AM SID : S-1-5-90-0-6 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 561729058 (00000000:217b4e22) Session : Interactive from 5 User Name : DWM-5 Domain : Window Manager Logon Server : (null) Logon Time : 11/28/2025 2:34:09 PM SID : S-1-5-90-0-5 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : b685f6c6ecbe3255b60ea986e3eba61e * SHA1 : b416e146c6dc557b72e696da60337dc017d245c6 tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 35 16 8b 92 2f 65 8c b6 da 92 91 85 35 35 d0 84 18 5c b4 be 5c 86 2f 2a 7a cf c3 45 1f 7d 78 69 e4 04 ba 81 23 c7 2d 2e 56 fd d9 f5 46 db cf ae 46 96 73 c8 e5 67 6a 4b ed 85 e5 60 62 27 e8 39 64 0f 4d 1f 8f 35 0f 35 40 0c 3c b5 f7 59 64 b8 1c 92 64 64 ce a6 ad 96 98 65 3e 2a 78 af 32 56 8c 83 99 e3 91 9e 50 1b 9d 26 69 88 9a fb 3d 01 a1 b2 97 87 da ac cc 53 a1 ad cb 7a b0 5e 75 42 1e 40 82 df ec ac a4 46 2b f3 e2 4d c5 1f 07 75 2c 87 77 8b 8f b7 6d 2b aa 37 a9 fa b8 04 ba fd a9 03 fe 77 49 ac 53 c5 d2 66 67 30 a0 0d 71 db ba 42 82 60 5a 89 9e d7 40 e7 52 60 22 37 98 6e 16 58 a3 6f dd 94 6f 6b 0c ab 1e e4 80 b0 e1 8d 85 48 4a 00 4d 4b 78 04 35 05 14 5e 1c 65 81 5e 59 25 46 0e 3b 60 f4 1a ea de cb 2e d6 84 40 24 ssp : credman : Authentication Id : 0 ; 997 (00000000:000003e5) Session : Service from 0 User Name : LOCAL SERVICE Domain : NT AUTHORITY Logon Server : (null) Logon Time : 11/6/2025 11:48:00 PM SID : S-1-5-19 msv : tspkg : wdigest : * Username : (null) * Domain : (null) * Password : (null) kerberos : * Username : (null) * Domain : (null) * Password : (null) ssp : credman : Authentication Id : 0 ; 43781 (00000000:0000ab05) Session : Interactive from 1 User Name : DWM-1 Domain : Window Manager Logon Server : (null) Logon Time : 11/6/2025 11:48:00 PM SID : S-1-5-90-0-1 msv : [00000003] Primary * Username : AD$ * Domain : TEAM2 * NTLM : ddfc1a018a44006571b017685e633434 * SHA1 : a6104e650d77e795c7778472a30460afa0644e2c tspkg : wdigest : * Username : AD$ * Domain : TEAM2 * Password : (null) kerberos : * Username : AD$ * Domain : team2.isucdc.com * Password : 4d 91 e7 2d 53 4e 1c fd d3 88 9a 3b e6 66 20 74 bb 38 6d f2 df 04 56 14 a6 38 b1 3c c5 8a 09 32 e4 e2 29 54 2d ad 2d 96 e2 66 46 e2 ba 49 b6 92 54 9b 06 ff 2b ff 0b 42 9e 1b cf f1 8a 45 5b 46 a6 59 53 12 26 c0 11 65 6a e1 b3 a1 d1 39 4b 20 55 ff f9 84 3e 49 fa 83 d3 a3 b4 b7 f4 24 50 05 98 f6 55 2a e0 62 bb b3 47 1d ab 78 25 94 e7 49 57 d5 ea f4 3c e2 d5 1b 1a 3b d9 c4 f0 6f 77 12 85 30 7c 7b d7 59 5c 44 e4 22 0d 26 94 12 be e9 5c cf f8 3a 31 1e 4b b1 a4 dc bf f4 aa 43 43 d2 47 1c dd f3 71 e3 6c f8 56 9d b0 a7 d7 df 82 32 ce 2e e1 67 21 a4 85 d9 6e 96 5e 40 38 71 7c b4 5a bc b6 c5 0b 5b 01 5e bc 5d 17 a4 1a 43 45 fd 09 df 88 e1 a8 c7 ee f7 f8 d5 85 01 7f 2d ea 6a 8b 2e 67 e9 fa d4 6f 03 bc fa 6a d0 07 6f 2a ed ssp : credman :

Team 2 Wiki Page

Team Information

Flag Status

Service Status

Nmap

HTTP Status 400

H

Notable Vulnerabilities

Notable Defenses

Team Spirit Issues