your examples above have 2 different masks:
you used ?l?l?l?l?l?l?l?l for the keyspace calculation and ?l?l?l?l?l?l?l? for the actual run.
You should always use the same mask!
Furthermore, you should have also used this command instead:
The hash type is sometimes important when using --keyspace, so you better always specify it.
BTW: for office documents (of the same type as 9700) there are the collider modes (-m 9710 and -m 9720) which depending on the mask (or password policy etc) should make it even more easier for you to quickly access the data
you used ?l?l?l?l?l?l?l?l for the keyspace calculation and ?l?l?l?l?l?l?l? for the actual run.
You should always use the same mask!
Furthermore, you should have also used this command instead:
Code:
hashcat64.exe -a 3 -m 9700 --keyspace ?l?l?l?l?l?l?l?lThe hash type is sometimes important when using --keyspace, so you better always specify it.
BTW: for office documents (of the same type as 9700) there are the collider modes (-m 9710 and -m 9720) which depending on the mask (or password policy etc) should make it even more easier for you to quickly access the data