SD Part 1-1Flash Extractor-芯片级数据恢复取证方案025-83608636

SD Part 1-1

M SD_1 45 de 94 82 1x1

Layout
  20-82-00192-3 14_2048_98 Xor C634 32
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  0x400000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000    
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 4990
  Cant recover because of many bit erros
  I think controller write some sectors with wrong xor pattern

Monolith SD_1 45 3c 86 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000000
    Page   0x4000
  Block Pair
    Block  0x400000000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x20000
    Bank Space   0x40000
    Banks        00 / 0x000 / 0x40000
  Actions
    Scan
Comments
  Serg for forum 9917

Monolith SD_1 45 3c 95 93 1x1

Layout
  20-82-00515-5 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
Assembler
  Sector Number Slow
    Sector Size  0x1000

Monolith SD_1 45 3c 96 82 1x1

Layout
  20-82-00192-3 14_2048_98 Xor C634 32
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  0x400000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0x400000    
    Banks        00 / 0x000 / 0x1fff
  Actions
    Scan
Comments
  Serg for forum 6934
  50% of file tree was OK

Monolith SD_1 45 3c 96 83 1x1

Layout
  20-82-00192-3 14_2048_80 Xor C634 16_2 Cut I
Mix
  Input
    Order  0
  Block Cut
    Block  0x8000/0x4000/(0x4000/0x4000)*61/0x4000/0x8000
  Block Pair
    Block  0x100000
    Page   0x4000
  Block Pair
    Block  0x100000000
    Page   0x8000
  Divide
    Field  Block Rotate
    Value  0x80
  Block Rotate
    Block  0x400000
    Page   0x10000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 8003

Monolith SD_1 45 3c 96 83 1x1 v2

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
  Divide
    Field  Block Number
    Value  0x80
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  by Arvika
  Save image, run RAW recovery
  较高 recovered ok.

Monolith SD_1 45 3c 96 83 1x1 v3

Layout
  20-82-00192-3 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x800000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 10154

Monolith SD_1 45 3c 98 b3 1x1

Layout
  20-82-00515-5 14_2048_230 Xor C634 16_2
Mix
  Input
    Order  0
Assembler
  Sector Number Slow
    Sector Size  0x1000
Comments
  Serg for forum 9939

Monolith SD_1 45 3c a5 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
Assembler
  Block Number
    Block Size   0x40000
    Bank Space   0x40000
    Banks        00 / 0x000 / 0x20000
  Actions
    Scan
Comments
  Serg for forum 8113
  I do not found MBR in dump
  With Raw Recovery found many good jpgs

Monolith SD_1 45 3c a9 a2 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I
Mix
  Input
    Order  0
  Block Pair
    Block  0x300000
    Page   0x2000
  Block Pair
    Block  0x600000
    Page   0x4000
  Block Pair
    Block  0x43c800000
    Page   0x8000
  Divide
    Field  Block Rotate
    Value  0x80
  Block Rotate
    Block  0x800000
    Page   0x10000
Assembler
  Block Number
    Block Size   0x800000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x10f1
  Actions
    Scan
Comments
  Serg for forum 9831

Monolith SD_1 45 3e 9b 92 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x3
  Block Cut
    Block  0x400000/0x8000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  (0x158000)*2/0x150000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3fff
  Actions
    Scan
Comments
  Serg for forum 10023

Monolith SD_1 45 3e 97 83 1x1

Layout
  20-82-00192-3 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
  Divide
    Field  Block Rotate
    Value  0x100
Assembler
  Block Number
    Block Size   0x1000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 8616
  Rotate value can be other

Monolith SD_1 45 3e 97 83 1x1 v2

Layout
  20-82-00192-3 14_2048_80 Xor C634 16_2I
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
  Divide
    Field  Block Rotate
    Value  0x100
  Block Rotate
    Block  0x1000000
    Page   0x20000
Assembler
  Block Number
    Block Size   0x1000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 10718
  Without Block Rotate 848 good jpegs, 1282 broken
  With Block Block Rotate 849 good jpegs, 1281 broken

Monolith SD_1 45 3e 97 83 1x1 v3

Layout
  20-82-00192-3 14_2048_80 Xor C634 16_2 Cut I
Mix
  Input
    Order  0
  Block Cut
    Block  0x8000/0x4000/(0x4000/0x4000)*61/0x4000/0x8000
  Block Pair
    Block  0x100000
    Page   0x4000
  Block Pair
    Block  0x100000000
    Page   0x8000
  Divide
    Field  Block Rotate
    Value  0x80
  Block Rotate
    Block  0x400000
    Page   0x10000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x1fff
  Actions
    Scan
Comments
  Serg for forum 10748

Monolith SD_1 45 3e 97 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
Assembler
  Block Number
    Block Size   0x40000
    Bank Space   0x40000
    Banks        00 / 0x000 / 0x40000
  Actions
    Scan
Comments
  Serg for forum 8715
  I'm not sure in model

Monolith SD_1 45 3e 97 93 1x1 v2

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x20000
    Bank Space   0x400000
    Banks        00 / 0x000 / 0x80000
  Actions
    Scan
Comments
  Serg for forum 9571

Monolith SD_1 45 3e a6 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
  Divide
    Field  Block Number
    Value  0x80
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  Save image, run RAW recovery
  较高 photos recovered ok.

Monolith SD_1 45 3e a6 93 1x1 v2

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x20000
    Bank Space   0x80000
    Banks        00 / 0x000 / 0x80000
  Actions
    Scan
Comments
  Serg for forum 9477
  Dumps was readed with selfmade config
  May be need adjust bank space and size

Monolith SD_1 45 4c 95 83 1x1

Layout
  20-82-00192-3 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x4000
  Block Pair
    Block  0x208800000
    Page   0x8000
  Divide
    Field  Block Rotate
    Value  0x100
Assembler
  Block Number
    Block Size   0x800000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  Only RAW recovery possible

Monolith SD_1 45 4c 95 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x200000000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x20000
    Bank Space   0x40000
    Banks        00 / 0x000 / 0x20000
  Actions
    Scan
Comments
  Serg for forum 7495
  Alot of conflicts

Monolith SD_1 45 4c 99 92 1x1 Sector 4584

Sector = 4584
At 4576 offset can see FF FF FF FF FF FF FF FF or an number

Ubreakable

77 dumps do not have repeats. Rar archive size same as dumps size.
if i xor LBA dumps with 77 dumps, i do not see any valid data.

Monolith SD_1 45 4c a4 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x20000
    Bank Space   0x20000
    Banks        00 / 0x000 / 0x20000
  Actions
    Scan
Comments
  Serg for forum 9845

Monolith SD_1 45 48 97 93 1x1

Layout
  20-82-00515-5 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
Assembler
  Sector Number Slow
    Sector Size  0x1000
Comments
  Serg for forum 9722
  50% good photos in Raw Recovery

Monolith SD_1 45 48 97 93 1x2

Layout
  20-82-00515-5 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0/1
  Join by Dump
    Parts  2
Assembler
  Sector Number Slow
    Sector Size  0x1000
Comments
  By Arvika
  RAW recovery

Monolith SD_1 45 48 a7 93 1x1

Layout
  20-82-00270-1 14_2048_146 Xor C634 16_2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
  Block Pair
    Block  0x800000
    Page   0x8000
  Block Pair
    Block  0x400000000
    Page   0x10000
  Divide
    Field  Block Number
    Value  0x80
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  by Arvika
  Save image, run RAW recovery
  较高 photos recovered ok.

Monolith SD_1 45 b7 96 a5 1x1

Layout
  SanDisk SN 6_512_16
Mix
  Input
    Order  0
Assembler
  Sector Number
    Block Size    0x40000
    Sector Size   0x200
    Sectors       0x400
  Actions
    Scan
Comments
  Serg for forum 5913

Monolith SD_1 45 c5 94 32 1x1

4 GB

16-bit

only 8 data pins available
Cant recover

Monolith SD_1 45 c5 98 b2 1x1

Layout
  SanDisk SN 14_2048_80 Xor C634 0x40000
Mix
  Input
    Order  0
Assembler
  Sector Number
    Block Size    0x180000
    Sector Size   0x800
    Sectors       0x600
  Actions
    Scan
Comments
  by Vlad forum 5068
  FAT was corrupted

Monolith SD_1 45 c7 98 b2 1x1

4 GB

16-bit

only 8 data pins available
Cant recover

Monolith SD_1 45 d5 84 32 1x1

Layout
  20-82-00192-3 14_2048_98 Xor C634 32
Mix
  Input
    Order  0
  Divide
    Field  Block Rotate
    Value  0x10
  Block Rotate
    Block  0x100000
    Page   0x2000
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Karol
  Filesystem was erased!
  Perfect recovery with RAW-Scan!

Monolith SD_1 45 d7 98 92 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x3
  Block Cut
    Block  0x400000/0x8000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  (0x158000)*2/0x150000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  Serg for forum 8000

Monolith SD_1 45 d7 98 92 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x3
  Block Cut
    Block  0x400000/0x8000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  (0x158000)*2/0x150000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  Serg for forum 8000

Monolith SD_4 ad d7 94 9a 1x2

Layout
  SM3254 1066 v3 Invert
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x800000
    Banks           0..3 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 6227

上一篇： Micro SD Part 4
下一篇：SD Part 1-2

站内搜索

联系我们