Quit stalling and pass the hash – exploiting password equivalents in Windows