There's a decent chance the passwords you found aren't the actual passwords either, considering how easy it is to generate collisions for the hash function.