Hashcat MSCacheV2 (DCC2) Cracking

Crack MSCacheV2 (Domain Cached Credentials v2 / DCC2) hashes extracted from registry

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: hashcat
Category: Credential Attacks / Hash Cracking
Platform: linux

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

hashcat -m 2100 '<hash_file>' /usr/share/wordlists/rockyou.txt

Credential variants

The same attack using a different authentication material.

With Rules

hashcat -m 2100 '<hash_file>' /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule

Examples

hashcat -m 2100 mscache.hashes /usr/share/wordlists/rockyou.txt

Tags

hashcat mscache dcc2 cached-credentials hash-cracking offline

NetExec SMB Auth Test Test SMB authentication with various credential types
Hashcat AS-REP Roasting Cracking Crack AS-REP roasting hashes obtained from accounts without Kerberos pre-auth
Hashcat Kerberoast Crack Crack Kerberoasting hashes
Hashcat NTLM Crack Crack NTLM hashes using wordlist attack
Hashcat NTLMv2 Cracking Crack NTLMv2 (NetNTLMv2) challenge-response hashes captured from Responder or relay…