Hashes extrahieren

  • After you have selected the algorithm of the encrypted file, you can select the appropriate file using the "Select file" button.
  • You can then press the "Start" button to start the extraction. With some algorithms, the extractions are carried out very quickly. For other extractions, the extraction may take some time. Bitlocker can take up to 24 hours to extract a 500 GB encrypted hard drive.
  • With VeraCrypt it is possible to additionally secure the encryption with a so-called PIM. Following the extraction, you can enter suspected PIMs in the corresponding query window.

The extracted hashes are saved in the "#_Hashout" folder.