09-29-2017, 04:24 AM
There are no easy solution for this. One approach is to count the number of colon per line and exclude the lines with more than the expected number of colons. Depending on your level of competency, you can save the excluded lines and process them manually. A better approach in your stated case is to correctly identify where the hash part is. Once you know where the hash start and end in the line and after excluding the colon used as a delimiter, everything before would be part of the username and everything after is part of the salt (which can contain colons as well). I will stop there because nothing that I describe is relevant to Hashcat and this is an Hashcat support forum.