I wanted to play with Responder. So I installed Kali onto a virtual mashine and made a bridged connection, so that Kali and the host (Win7) share the same network interface.
I changed the Win7 password to "password1" and tried to access a non-existing resource like "\\fielshare". The Responder seems to capture the credentials properly, but I don't understand, what hashes it is capturing.
Per try it captures five different hashes. When I try several times, the hashes never repeat. None of them equals to the Win7-hash corresponding to "password1". So what are they?
I'm using the command
responder -I eth0 -v