ntdsutil.exe

Ntdsutil.exe is a command line utility for accessing Windows Active Directory. It is sometimes used maliciously to dump domain passwords. It is the 10,841st most commonly executed Windows program. It typically runs from the path C:\Windows\System32, and is most often launched by cmd.exe.

ntdsutil.exe is the 9809th most commonly executed Windows program in EchoTrail's dataset, observed 2 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by cmd.exe.