NTLM hash cracked but still not working

I have an interesting problem with an updated/current windows 10 machine. From the disc image I obtained the SYSTEM and SAM hives. I first used used samdump2 and secretsdump.py but the hashes matched those of an "empty password". I learned that after the Win10 Anniversary update the hashing changed. I used Mimikatz on the same hives and got a hash that was easily cracked. The password was short and looks like other passwords or a variation used on this system, …

anniversary computerforensics cracked current disc hash hashes hashing hives image machine mimikatz ntlm password problem sam system update win10 windows windows 10 working