Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result:
::LM hash : NTLM hash
But these hashes are encrypted with AES 128. I wonder where I can found AES keys for encrypting these hashes and how I can retrieve them?