Glossary
DCC1 (MS-Cache v1)
The original cached domain-logon verifier (mscash), used before Windows Vista. Weaker than DCC2 but, like it, crack-only and not usable for pass-the-hash.
DCC1, also called MS-Cache v1 or mscash, is the original cached
domain-logon verifier Windows used before Vista. Like
DCC2, it lets a domain account log on when no domain
controller is reachable, by checking the password against a value cached in the
SECURITY hive.
DCC1 is computed as MD4(NT hash + lowercase username) — a single unsalted-key
MD4 with no iteration, which makes it far cheaper to crack than DCC2's 10240-round
PBKDF2. Both, however, are one-way verifiers: you can crack a DCC1 offline but
cannot pass-the-hash with it. hashcat cracks it as
mode 1100. Vista and later switched to DCC2 by default.