Problem with rar2john hash
#4
It should be very easy to see that hashcat does not expect any filename within the "hash". So remove all this substring containing the filename, like "*C:\file.rar*94" in your example (without quotes).

if the output starts with "$RAR3$*0*" (without quotes) it will be supported by mode -m 12500, otherwise it is not currently supported by hashcat.


Messages In This Thread
Problem with rar2john hash - by Said The Liar - 07-07-2016, 02:48 AM
RE: Problem with rar2john hash - by poly2k - 07-07-2016, 06:33 AM
RE: Problem with rar2john hash - by Said The Liar - 07-07-2016, 05:19 PM
RE: Problem with rar2john hash - by philsmd - 07-07-2016, 05:28 PM