Microsoft Office Hash Extractor - instantly

This page will extract the information needed from your Office file to convert it to hashes, also known as office2hashcat or office2john.

Select and Upload your MS Office file:

Output:

Notes

Uploaded files will be deleted immediately. We do NOT store your files.
This site is using office2hashcat / office2john from Hashcat / JohnTheRipper tools to extract the hash
The goal of this page is to make it very easy to convert Microsoft Office files like doc(x), xls(x) and ppt(x) to "hashes" which hashcat/john can crack
We can also recover password of MS Office protected file.

How to use?

More than easy, just select and upload your Office file. The hash will be computed in the "Output" part.

Explanation of the hash format

If the Office file version is 2007, then the hash will look like:

$office$*2007*20*128*16*411a51284e0d0200b131a8949aaaa5cc*117d532441c63968bee7647d9b7df7d6*df1d601ccf905b375575108f42ef838fb88e1cde

If the Office file version is 2010, then the hash will look like:

$office$*2010*100000*128*16*77233201017277788267221014757262*b2d0ca4854ba19cf95a2647d5eee906c*e30cbbb189575cafb6f142a90c2622fa9e78d293c5b0c001517b3f5b82993557

If the Office file version is 2013 and upper, then the hash will look like:

$office$*2013*100000*256*16*7dd611d7eb4c899f74816d1dec817b3b*948dc0b2c2c6c32f14b5995a543ad037*0b7ee0e48e935f937192a59de48a7d561ef2691d5c8a3ba87ec2d04402a94895

If the Office file version is 97 -> 2003, then the hash will look like:

$oldoffice$1*04477077758555626246182730342136*b1b72ff351e41a7c68f6b45c4e938bd6*0d95331895e99f73ef8b6fbc4a78ac1a (MD5 + RC4)
or
$oldoffice$3*83328705222323020515404251156288*2855956a165ff6511bc7f4cd77b9e101*941861655e73a09c40f7b1e9dfd0c256ed285acd (SHA1 + RC4)

Credits

Credits go to Hashcat and JohnTheRipper projects