All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: eMMC Recovery Bitlocker encrypted
PostPosted: June 12th, 2019, 16:17 
Offline

Joined: May 29th, 2017, 10:38
Posts: 13
Location: Germany
Hi Gurus,

i've got following case:

damaged Medion-Laptop with 64GB eMMC-Flash. I can't repair the machine, so i desoldered the Flash and read the eMMC. After mounting the Image, there are 3 partitions.

- 100MB EFI/BOOT (not encrypted)
- 58GB System/User Data (encrypted)
- 500MB Recovery (not encrypted)

System-Partition is encrypted, we tried alle passphrases, that the owner ever used. Owner didn't activate any password for his user-account in the past. There is no Recovery-Key in Microsoft-Account stored.

So my question is - how does this self-decryption while booting work? Is the recovery-key stored in BIOS or EFI-partition?

On the EFI-partition i found two files with certificates - boot.stl and winsipolicy.p7b
If ther's any chance to find this key in BIOS i'll try to find it with grep. But what should i look for? 32 character alphanumerical string?

Thanks a lot.
Boerge


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 12th, 2019, 21:34 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11457
Location: Australia
It may turn out to be easier to repair the laptop. What is the model number? I may be able to locate a service manual for you.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 13th, 2019, 3:28 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2460
Location: Kuwait
I may have a better Idea here (but should be done in our Lab)

eMMC FULL dump i mean...

let me know if you are interested...

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 13th, 2019, 7:51 
Offline

Joined: May 29th, 2017, 10:38
Posts: 13
Location: Germany
fzabkar wrote:
It may turn out to be easier to repair the laptop. What is the model number? I may be able to locate a service manual for you.


Model number is MD60250 / E2228T / MSN 30022190

Logic board numbers are EM_NT16H-MED_V1.0A / 14D13276 / 10770WCF / FHD Z8300 4+64

but i don't think, that there's any schematic available


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 13th, 2019, 7:56 
Offline

Joined: May 29th, 2017, 10:38
Posts: 13
Location: Germany
einstein9 wrote:
I may have a better Idea here (but should be done in our Lab)

eMMC FULL dump i mean...

let me know if you are interested...


What du you mean with "FULL dump" ? I have a full dump (imaged whole eMMC with PC3K).


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 13th, 2019, 19:45 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 11457
Location: Australia
boerge wrote:
fzabkar wrote:
It may turn out to be easier to repair the laptop. What is the model number? I may be able to locate a service manual for you.


Model number is MD60250 / E2228T / MSN 30022190

I checked elektrotanya.com, but your model isn't listed. :-(

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 15th, 2019, 4:29 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2460
Location: Kuwait
boerge wrote:
einstein9 wrote:
I may have a better Idea here (but should be done in our Lab)

eMMC FULL dump i mean...

let me know if you are interested...


What du you mean with "FULL dump" ? I have a full dump (imaged whole eMMC with PC3K).


I mean, if you have the full dump maybe we can do it here (in our lab) means again upload your full eMMC dump to us if your agree and will try it..
not remotely..

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: eMMC Recovery Bitlocker encrypted
PostPosted: June 15th, 2019, 5:56 
Offline

Joined: December 10th, 2018, 11:56
Posts: 36
Location: Ukraine
Hi, Please connect/open drive/image and try TRIAL version of UFS Explorer Professional Recovery
Does it detect metadata of bitlocker? If so you may see like this : https://youtu.be/m0nEz9-oBPA?t=197
If not, need to look another solutions...


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group