09-11-2023, 01:25 PM
first of all, windows pass is NTLM which is mode 1000 not 0
second, assuming your hashtarget is masked properly, your hash is also wrong
abc123. or abc123 doesnt end up in a NTLM hash starting with 7
the only hash starting with 7 would be abc123 and the old windows network LM style (which is disabled, i think for some years now) but again, if masked properly rest of the hash aslo didnt match
so something went wrong when extractiong the hash
second, assuming your hashtarget is masked properly, your hash is also wrong
abc123. or abc123 doesnt end up in a NTLM hash starting with 7
the only hash starting with 7 would be abc123 and the old windows network LM style (which is disabled, i think for some years now) but again, if masked properly rest of the hash aslo didnt match
so something went wrong when extractiong the hash