Credentials

Credentials (usernames & passwords) are stored in the SAM file.

SAM file location: C:\Windows\System32\config Mostly stores the users' passwords in the NTLM hash.