In a pass$-$the$-$hash attack...

$$ a$.$ The attacker access hashes in memory

B$.$ The attacker access hashes in databases

C$.$ The attacker access passwords in databases

$$ d$.$ The attacker access passwords in memory