well, that was more like a rhetorical question ! 
we know that it has to do with hexadecimal fields and this recent commit (which in fact isn't wrong, but only brought the problem to light because it finally makes a correct test of TOKEN_ATTR_VERIFY_DIGIT) https://github.com/hashcat/hashcat/commi...1095-R1098
the 13600 = winzip format uses hexadecimals at some places in the format and we would need to fix the module (src/modules/module_13600.c) with TOKEN_ATTR_VERIFY_HEX instead of the digit test
we know that it has to do with hexadecimal fields and this recent commit (which in fact isn't wrong, but only brought the problem to light because it finally makes a correct test of TOKEN_ATTR_VERIFY_DIGIT) https://github.com/hashcat/hashcat/commi...1095-R1098
the 13600 = winzip format uses hexadecimals at some places in the format and we would need to fix the module (src/modules/module_13600.c) with TOKEN_ATTR_VERIFY_HEX instead of the digit test