Mac 10.13, 10.14 where are the hash passwords located?
10.14 protects these files with SIP, so even root cannot access the files without using the directory services command.  If you need to get this information deactivate SIP.  Remember to reactivate SIP after you are finished.  If you attempt to access using the directory services call shown above then you do not need to deactivate SIP.