Last updated 4 years ago
Was this helpful?
volatility image, use hashdump
volatility -f data --profile=Win7SP1x64 hashdump
Use crackstation to crack them, then cyberchef to hash them