03-31-2017, 11:55 AM
A captured handshake can be "validated" (it includes all 4 states, showing the password was correct) or not (meaning you just may have captured someone using the wrong password). Not sure whether hashcat shows it to you.
Also, there's obviously a chance the password was changed between the capture and your login attempt.
Also, there's obviously a chance the password was changed between the capture and your login attempt.