Hashcat office collision attack (9810 and 9820) doesn't work

[Fabius71]

I created a PowerPoint file protected by password and executed the following command

Code:

hashcat64.exe -D 1,2,3 -w 4 -m 9810 -o hash.rc4 $oldoffice$3*XXXX..XXXX -a 3 ?b?b?b?b?b

it gave me the bytes that i then used in this command

Code:

hashcat64.exe -m 9820 -w 4 -o p.txt hash.rc4 -a 3 ?l?l?l?l?l?l?l?l?l --keep-guessing --increment

and it exausted. The last command gave me 6 password, they all resulted wrong and the original password wasn't there (lowercase 9 characters).

Why the collision algorithm of sha1 isn't working?

[philsmd]

sounds similar to this problem https://github.com/hashcat/hashcat/issues/2067

[Fabius71]

sounds similar to this problem https://github.com/hashcat/hashcat/issues/2067

I tried with the demo file provideded in this thread and it indeed work and hashcat found collided passwords.
But when i try with $3 files it gives me wrongly collided passwords.

I followed this tutorial but nothing changed.