Since the latest Windows Anniversary Update, Windows 10 seems to be using AES encryption on the SAM file, as well as storing information differently.

See this tweet.

Currently, pwdump doesn't appear to support extracting hashes offline in this new update, there's an issue posted on the GitHub page here.

You may have to sit tight and wait for an update, or look for an alternative tool.

Answer from Sam Comer on Stack Exchange
🌐
Kali Linux
kali.org › tools › creddump7
creddump7 | Kali Linux Tools
December 9, 2025 - root@kali:~# creddump7 -h creddump7 - Python tool to extract credentials and secrets from Windows registry hives /usr/share/creddump7 |-- __pycache__ |-- cachedump.py |-- framework |-- lsadump.py `-- pwdump.py
🌐
O'Reilly
oreilly.com › library › view › kali-linux-intrusion › 9781783982165 › ch08s02.html
Using local password-attack tools - Kali Linux Intrusion and Exploitation Cookbook [Book]
But first let us understand these tools: Sucrack is a password cracker. Fgdump and pwdump are tools that dump the SAM hashes from LSASS memory. JTR (John the Ripper) is a cracker for SAM hashes.
🌐
GitHub
github.com › interference-security › kali-windows-binaries › tree › master › fgdump
kali-windows-binaries/fgdump at master · interference-security/kali-windows-binaries
In quick summary, the main code execution path of fgdump is as follows: 1) Bind to a remote machine using IPC$ (or a list of machines) 2) Stop AV, if it is installed 3) Locate file shares exposed on that machine 4) Find a writable share from the above list, bind it to a local drive 5) Upload fgexec (used for remote command execution) for cachedump 6) Run pwdump 7) Run cachedump 8) Run pstgdump 8) Delete uploaded files from the file share 9) Unbind the remote file share 10) Restart AV if it was running 11) Unbind from IPC$ Many of the parameters associated with these operations are tweakable via the command line.
Author   interference-security
🌐
Systranbox
systranbox.com › how-to-use-pwdump-on-kali-linux
How To Use Pwdump On Kali Linux?
March 6, 2022 - We cannot provide a description for this page right now
🌐
Command Not Found
command-not-found.com › pwdump
command-not-found.com – pwdump
curl cmd.cat/pwdump.sh · Kali Linux · apt-get install creddump · Dockerfile · dockerfile.run/pwdump · creddump is a python tool to extract various credentials and secrets from Windows registry hives.
Find elsewhere
🌐
Gosecure
gosecure.it › blog › art › 425 › sec › the-password-attacks-on-kali-linux-part-2
The Password Attacks on Kali Linux. [Part 2] | Security | MyDear(root)Shell
November 6, 2013 - The union of these two files leads ... like PWdump or FGdump. The other choice is to dump the system backup of these; in fact, up to Windows Vista, you can find them in c:\windows\repair\ folder. To merge the SAM and the SYSTEM file you can use bkhive and samdump2; after getting the hash, John the Ripper is used to extract the password. root@kali:~# bkhive ...
🌐
YouTube
youtube.com › paul tedesco
How to use pwdump - YouTube
Disclaimer: I am not responsible with what you do with this knowledge Please don't break the LawStay Ethical
Published   November 15, 2016
Views   1K
🌐
GitLab
gitlab.com › kali linux › packages › creddump7 › repository
pwdump.py · kali/master · Kali Linux / Packages / creddump7 · GitLab
October 3, 2019 - pwdump.py · Find file Blame History Permalink · New upstream version 0.1+git20190429 · f5208310 · Sophie Brun authored Oct 03, 2019 ·
🌐
Packtpub
subscription.packtpub.com › book › security › 9781783982165 › 8 › ch09lvl1sec78 › using-local-password-attack-tools
Using local password-attack tools
Access over 7,500 Programming & Development eBooks and videos to advance your IT skills. Enjoy unlimited access to over 100 new titles every month on the latest technologies and trends
🌐
Paolo Fabio Zaino
paolozaino.wordpress.com › 2023 › 11 › 03 › ethical-hacking-recovering-lost-passwords-with-john-the-ripper
Ethical Hacking: Recovering lost passwords with John the Ripper | Paolo Fabio Zaino's Blog
May 7, 2025 - https://download.openwall.net/pub/projects/john/contrib/pwdump/pwdump8-8.2.zip · Download it and install it on the Windows system from where you want to extract the passwords to be decrypted. If you can’t access your Windows, then you’ll need to either boot something like Kali via USB (or similar) or extract your Windows system disk and plug it onto a separate computer (as explained before) which should be running Kali.
🌐
Openwall
openwall.com › passwords › windows-pwdump
Windows PWDUMP tools
This is an application which dumps the password hashes from NT's SAM database, whether or not SYSKEY is enabled on the system. NT Administrators can now enjoy the additional protection of SYSKEY, while still being able to check for weak users' passwords. The output follows the same format as ...
🌐
Myticas
myticas.com › toy-freddy › pwdump-kali.html
Pwdump kali
Kali viene de lo que antes era BackTrack Linux basada en Debian de la cu l posee m s de 400 herramientas de testeo y an lisis para llevar a cabo ataques hacia redes y aplicaciones como ser base de datos servidores web etc. recon ng. 128 u Max p 12345 In above command 192. The module collects the hashes in the database and passes them to the john binaries that are now included in Framework via a generated PWDUMP format file.
🌐
Kali Linux
kali.org › tools › redsnarf
redsnarf | Kali Linux Tools
December 9, 2025 - root@kali:~# redsnarf -h ______ ... default /usr/share/creddump7/ -cM, --mergepf MERGEPF <Optional> Enter output path and filename to merge multiple pwdump files default /tmp/merged.txt -cO, --outputpath OUTPUTPATH <Optional> Enter output path default /tmp/ -cQ, --quick_validate ...