New hccapx format explained

[philsmd]

@abdou99 If you are talking about this screenshot https://hashcat.net/wiki/hccapx#screenshot (you didn't say that explicitly), than you should read the section below the image:

authenticated | 0x08 | set to 1 if the handshake message 3 was part of the cap file, 0 instead means unauthenticated

that means, both values are possible and of course it depends if the authentication was successfull or not (that's why it is called "authenticated")