m 14800 (itunes Ver >10), hashcat has a strange behaviour
#1
Hi,
im using hascat for several Years now, but i cant get why hashcat (4.0.1, win 10) behaves strange on this one:

I have extracted a hash from a manifest.plist. I start hashcat (for demo here) with


"hashcat64.exe -w 4 -m 14800 hash.txt -a 3 ?l?l?l"

After that, hashcat starts and shows its status 1 time

Quote:Session..........: hashcat
Status...........: Running
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXX...XXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (1 sec)
Time.Estimated...: Fri Nov 10 10:45:07 2017 (0 secs)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        0 H/s (5.05ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0/17576 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: sar -> sqx
HWMon.Dev.#1.....: Temp: 55c Fan: 33% Util: 45% Core:1000MHz Mem:1425MHz Bus:8

[s]tatus [p]ause [r]esume [b]ypass [c]heckpoint [q]uit =>

so far so good, but when i press "s" for an updated status nothing (except the time and H/s) has changed:

Quote:Session..........: hashcat
Status...........: Running
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXXXXXXXX...XXXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (2 mins, 31 secs)
Time.Estimated...: Fri Nov 10 12:43:15 2017 (1 hour, 55 mins)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        3 H/s (5.08ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 0/17576 (0.00%)
Rejected.........: 0/0 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: sar -> sqx
HWMon.Dev.#1.....: Temp: 59c Fan: 33% Util: 94% Core:1000MHz Mem:1425MHz Bus:8


3 H/s is pretty low ^^ when i press quit after some time it displays the folowing:

Quote:Session..........: hashcat
Status...........: Quit
Hash.Type........: iTunes backup >= 10.0
Hash.Target......: $itunes_backup$*10*XXXXXXXXXXXXXXXXXX...XXXXXX
Time.Started.....: Fri Nov 10 10:45:06 2017 (9 mins, 27 secs)
Time.Estimated...: Fri Nov 10 12:09:20 2017 (1 hour, 14 mins)
Guess.Mask.......: ?l?l?l [3]
Guess.Queue......: 1/1 (100.00%)
Speed.Dev.#1.....:        3 H/s (5.04ms)
Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts
Progress.........: 2028/17576 (11.54%)
Rejected.........: 0/2028 (0.00%)
Restore.Point....: 0/676 (0.00%)
Candidates.#1....: car -> cqx
HWMon.Dev.#1.....: Temp: 62c Fan: 33% Util: 93% Core:1000MHz Mem:1425MHz Bus:8

Started: Fri Nov 10 10:45:02 2017
Stopped: Fri Nov 10 10:54:34 2017


I tried it with different PCs (at work) and at home - all windows 8.1/10 AMD and NVIDIA. The result is always the same.
Does anyone have an idea what the reason of this could be?


Messages In This Thread
m 14800 (itunes Ver >10), hashcat has a strange behaviour - by Alpensepp - 11-10-2017, 11:58 AM