GIAC Certified Incident Handler (GCIH) — Question 37

What hash type is being cracked in the command below?
hashcat -m 1000 -a 0 customer.ntds wordlist.txt --potfile-path ./hashcat.potfile

Answer options

• A. SHA-1
• B. LANMAN
• C. Kerberos 5
• D. NT hashes

Correct answer: A

Explanation

The command specifies the hash type with the parameter '-m 1000', which corresponds to NT hashes. Thus, the correct answer is D. The other options, such as SHA-1, LANMAN, and Kerberos 5, do not match the specified hash type in the command.