Wrong password from 7-zip hash

[snoob]

Hello everyone,

I am trying to recover the password of my 7-Zip archive. The archive is encrypted with AES-265 and the file names are masked. I extracted the hash with 7z2hashcat and also with 7zip2john. Hashcat with option 11600 finds the same password for both hashes. Unfortunately it is the wrong one.

Anyone have an idea what is going wrong here?


Thanks in advance

[slyexe]

It could be finding multiple collisions with your hash. Try enabling --keep-guessing by adding it to your command to see if it finds more possible candidates.