BF old office password

[kiara]

Hello,

I extract hash from oldoffice ppt with office2john.
The hash is like this : $oldoffice$3*xxxxxx*xxxxx*xxxx

Ok, I used this commandline for bruteforce this hash :
hashcat64.exe -a 3 -m 9800 hashppt.txt --increment --increment-min=6 --status -1 ?l?d?s?u ?1?1?1?1?1?1?1?1?1?1?1?1?1
After ~1h, in pot file I have this :

$oldoffice$3*xxxxxx*xxxxx*xxxx:yyyyy

I try to open my ppt with the pass ("yyyyyy"), but it doesn't work.
Any idea?

try "yyyyy"?

I didn't understand your question..
The password is represent by "yyyyyy", I try to open my file with this

You show the password as cracked with y 5 times.


But you are saying you're typing the password into the powerpoint with y 6 times.



My question is why you are typing the extra y into the powerpoint?

OK its juste an example, I enter exactly the same password to open the file

try this https://www.onlinehashcrack.com/
perhaps what u got is wrong, try with another version of hashcat, instead of masking like u did last time just put ur password that u got from the first time and see if u get the same result