Domain Cached Credentials (DCC)

lsadump::cache

These can be cracked with the following format:

$DCC2$<iterations>#<username>#<hash>

hashcat -m2100 '$DCC2$10240#spot#3407de6ff2f044ab21711a394d85f3b8' /usr/share/wordlists/rockyou.txt --force --potfile-disable