$RAR3$*1*

[HashGov]

Hi,

I have a RAR file. When I extract the hash with rar2john, I get the following hash (I inserted the XXX).
Is that correct that the file name appears in the hash? The format does not match Mode 23700 and 23800. Does somebody has any idea? Thanks

$RAR3$*1*59fc32xxxxxe8975*dc022ff5*6432*9373*0*C:\xxx.rar*19560*35:1::Hello.txt

[marc1n]

Use john the ripper https://www.openwall.com/john/

[Snoopy]

simply delete the extra data, im not quite sure right now first try deleting ::Hello.txt, if hashcat still says token lenght exception delete also the :1

i think :1 just tells, that there is :1 = one file in your rar, named Hello.txt

there are some scripts from JtR which outputs more data than hashcat needs

[HashGov]

Worked. Delete everything after the ":".
Thank you.