-
Notifications
You must be signed in to change notification settings - Fork 203
Description
Hello Experts,
I have tried get the Hash from Encrypted image. but everytime when i execute the bitcracker , endup with "Error while parsing input device image"
Device encrypted : win 10 pro
this image created by the FTK Manager.
My Cuda and Nvidia setup
`Sun Feb 7 05:06:29 2021
+-----------------------------------------------------------------------------+
| NVIDIA-SMI 460.39 Driver Version: 460.39 CUDA Version: 11.2 |
|-------------------------------+----------------------+----------------------+
| GPU Name Persistence-M| Bus-Id Disp.A | Volatile Uncorr. ECC |
| Fan Temp Perf Pwr:Usage/Cap| Memory-Usage | GPU-Util Compute M. |
| | | MIG M. |
|===============================+======================+======================|
| 0 Quadro M2200 Off | 00000000:01:00.0 Off | N/A |
| N/A 31C P8 N/A / N/A | 5MiB / 4043MiB | 0% Default |
| | | N/A |
+-------------------------------+----------------------+----------------------+
+-----------------------------------------------------------------------------+
| Processes: |
| GPU GI CI PID Type Process name GPU Memory |
| ID ID Usage |
|=============================================================================|
| 0 N/A N/A 1265 G /usr/lib/xorg/Xorg 2MiB |
`
`---------> BitCracker Hash Extractor <---------
Encrypted device /media/test/FullImage/backup.dd opened, size 488386.00 MB
************ Signature #1 found at 0x1ef2ecc ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #2 found at 0x1f598e6 ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #3 found at 0x1ff13d8 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #4 found at 0x1ff1528 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #5 found at 0x20315f8 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #6 found at 0x2031750 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #7 found at 0x205aef8 ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #8 found at 0x20d7e3e ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #9 found at 0x21a65f8 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #10 found at 0x21a6750 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #11 found at 0x21cfef8 ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #12 found at 0x224ce3e ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #13 found at 0x2375ec4 ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #14 found at 0x23dc886 ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #15 found at 0x24743e0 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #16 found at 0x2474518 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #17 found at 0x2687968 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #18 found at 0x2687aa0 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #19 found at 0x26afd30 ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #20 found at 0x272a8be ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #21 found at 0x28028ae ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #22 found at 0x28dd958 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #23 found at 0x28ddab0 ************
Version: 0
Invalid version, looking for a signature with valid version...
************ Signature #24 found at 0x2905d10 ************
Version: 12
Invalid version, looking for a signature with valid version...
************ Signature #25 found at 0x298079e ************
Version: 79
Invalid version, looking for a signature with valid version...
************ Signature #26 found at 0x27400003 ************
Version: 8
Invalid version, looking for a signature with valid version...
************ Signature #27 found at 0x7df70000 ************
Version: 2 (Windows 7 or later)
=====> VMK entry found at 0x7df70445
Encrypted with Recovery Password (0x7df70466)
Searching for AES-CCM (0x7df70482)...
Offset 0x7df70515.... not found :( (0x79,0x4c)
Searching for AES-CCM (0x7df70496)...
Offset 0x7df70529.... not found :( (0x54,0x50)
************ Signature #28 found at 0x7df80000 ************
Version: 2 (Windows 7 or later)
=====> VMK entry found at 0x7df80445
Encrypted with Recovery Password (0x7df80466)
Searching for AES-CCM (0x7df80482)...
Offset 0x7df80515.... not found :( (0x79,0x4c)
Searching for AES-CCM (0x7df80496)...
Offset 0x7df80529.... not found :( (0x54,0x50)
************ Signature #29 found at 0x11036e000 ************
Version: 2 (Windows 7 or later)
=====> VMK entry found at 0x11036e445
Encrypted with Recovery Password (0x11036e466)
Searching for AES-CCM (0x11036e482)...
Offset 0x11036e515.... not found :( (0x79,0x4c)
Searching for AES-CCM (0x11036e496)...
Offset 0x11036e529.... not found :( (0x54,0x50)
Error while extracting data: No signature found!
Error while parsing input device image
`
Am i missing anything ? any help would be appreciated.