The scenario: coworker's Skype somehow lost his auto-fill password. He doesn't remember it anymore, and the account is hooked up to an email address that no longer exists. He's never purchased any credits so he can't use a CC to verify his account to customer service.
I know that Skype should have a saved AES-256 and SHA1 encrypted version of the MD5 hash of his password, and he thinks that it should not be a complex password (i.e. rockyou with some rules applied should be able to beat it).
He is on a Windows machine and sent me the config.xml file, which I read online contains the encrypted hash. How do I extract the MD5 from the config.xml file? I've tried some simple "john config.xml" kind of efforts, but I assume that because it's AES-256/SHA1 over an MD5 it can't be that simple. How do I go about getting to the MD5?