hashcat Forum

What is the default file for the tc-boot mode?
Harddiskimage?Format?
Hash?Tool for generation?

Thanks!

You'll need to image the boot disk first I think.
Byte-to-byte format would be the best one I suppose.
Probably several MBs of the beginning of the disk will do.

As for the images, you just need the first 512 byte from block device (or harddisk image). See https://hashcat.net/wiki/doku.php?id=example_hashes
You need -m 6241.