[?]: File password

Прочие SCADA: iFix, InTouch, Citect, ...
Post Reply
peterfrick
Posts: 40
Joined: Sat Feb 10, 2007 8:57 am

[?]: File password

Post by peterfrick » Mon Feb 10, 2014 6:56 pm

Can Anybody please check this file with Winhex and can help me where is this password written in hex values.
Passwords are 668866 and 6888.
http://www.uploadmb.com/dw.php?id=1392058410

Please help me in reading as it is in Chinese.Thanks

Linkinx64
Posts: 894
Joined: Sun Apr 11, 2010 3:00 am
Location: Russia

Re: [?]: File password

Post by Linkinx64 » Wed Feb 12, 2014 6:24 pm

This file is compressed and (probably) split.
You'd better explain to experts where you got it and why do you think the passwords are stored in there.

peterfrick
Posts: 40
Joined: Sat Feb 10, 2007 8:57 am

Re: [?]: File password

Post by peterfrick » Wed Feb 12, 2014 6:48 pm

Thanks for the reply. This file is backup of HMI M C G S T P C. We can run it with run time. I want to know exact password location and want to change its password by editing with WinHex. As I do not have the real project.

Linkinx64
Posts: 894
Joined: Sun Apr 11, 2010 3:00 am
Location: Russia

Re: [?]: File password

Post by Linkinx64 » Fri Feb 14, 2014 7:47 pm

1. Open file in WinHex - you'll see a ZIP-similar header OR try to compress this file with WinRAR/7Zip and see the compression rate (about 99%)
Conclusion: file is compressed.
2. Check the file size: exactly 1 048 576 bytes (1.0 Mb)
(Probable) conclusion: file was split.

Thus, if the password was stored in file somewhere, it is compressed and can't be seen in the Hex-editor.

If you don't have an original project try to pick password up using debugger (connect to the application when it requests for a password). However, there are still no warranties that you can get it - HMI can do a password comparison inside and send to the PC only comparison result.

Post Reply