How does a pass$-$the$-$hash attack work?

How does a pass$-$the$-$hash attack work?

what is the answer?

$1.$By using stolen hashes of user passwords to authenticate to a system or service.

$2.$By tricking a user into entering their password into a malicious website or application.

$3.$By using a dedicated tool to extract the password hash from the system's memory.

$4.$By exploiting a software vulnerability that allows the attacker to obtain user passwords.