USB Part 1Flash Extractor-芯片级数据恢复取证方案025-83608636

USB Part 1

Monolith USB 1 89 68 04 46 2x1

Layout
  UT165 536
Mix
  Input
    Order  0/1
  Join by Byte
    Parts  2
    Data   false
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for order 845
  Not sure in Bank Space
  FAT32 found at 0xf7000

Monolith USB 1 89 d7 94 3e 1x1

Layout
  UT165 535
Mix
  Input
    Order  0
  Block Pair
    Block  0x80000
    Page   0x1000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  By JeremyB

Monolith USB 1 89 d7 94 3e 2x1

Layout
  UT165 536
Mix
  Input
    Order  0/1
  Join by Byte
    Parts  2
    Data   false
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
    Banks        00..07 / 0x000 / 0x3c3
  Actions
    Scan
Comments
  by Vlad forum 5448
  perfect recovery

Monolith USB_1_v2 89 d7 94 3e 1x1

Layout
  UT165 535
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size   0x80000
    Bank Space   0x400
    Banks        00..07 / 0x000 / 0x3c3
  Actions
    Scan
Comments
  By Arvika

Monolith USB_2 89 d7 94 3e 1x1

Layout
  SM3254 540_538
Mix
  Input
    Order  0
  Block Pair
    Block  0x80000
    Page   0x1000
Assembler
  Block Number
    Block Size      0x100000
    Bank Space      0x400
    Image Cut       0x400000
  Actions 
    Scan
    Find Bank Size
Comments
    By Arvika
    Check conflicts

Monolith USB_2 89 d7 94 3e 2x1

Layout
  SM3254 540_538
Mix
  Input
    Order  0/1
  Join by Byte
    Parts  2
    Data   false
  Cross Bank
    Block  0x100000
    Bank   0x400
Assembler
  Block Number
    Block Size      0x100000
    Bank Space      0x400
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Very good recovery

Monolith USB_3 45 de 98 92 1x2

Layout
  SM3257 1146_27 Xor b36e_256
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x810000
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 6195
  May be all banks must be 0x00 / 0xff

Monolith USB_4 45 de 98 92 1x1

Layout
  IT1171 580_572 v2 0x81 Xor 6771_258
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size   0x408000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  MBR, FAT lost, RAW scan give 较高 good data

Monolith USB_4 ad de 94 d2 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xe7000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  by Arvika
  Nand read with RR mode
  check conflicts

Monolith USB_4 ad de 94 d2 2x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x40
  Join by Page
    Parts  2
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc6200
    Banks        00 / 0x000 / 0xf27
    Mix          2/0x200
  Actions
    Scan
Comments
  by Arvika
  Many bit errors - problem chip
  Partial recovery, FAT corrupted, save image with ECC on
  Use other software to recover data

Monolith USB_6 98 3a a8 92 1x1

Layout
  PS2251 1138_1134 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Perfect recovery

Monolith USB_7 98 3a a8 92 1x2 v2

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
  Cross Bank
    Block  0x810000
    Bank   0x800
Assembler
  Block Number
    Block Size      0x810000
    Bank Space      0x800
    
    Banks           00 / 0x000 / 0x736
                    01 / 0x000 / 0x736
  Actions
    Scan
Comments
  Serg for forum 9155

Monolith USB_7 98 3a a8 92 1x1

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Cross Bank
    Block  0x408000
    Bank   0x800
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x800
    Image Cut
    
    Banks           00 / 0x000 / 0x736
                    01 / 0x000 / 0x736
  Actions
    Scan
Comments
    By JeremyB @ RecoverMyFlashDrive.com
    Read using WL without DDR, Perfect Recovery

Monolith USB_7 98 3a a8 92 1x2

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x810000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x34c
  Actions
    Scan
Comments
    By Arvika
    Many blocks was ereased by controller
    Model works ok

Monolith USB_7 98 d7 98 92 1x1

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x400
    Banks           00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  by Arvika
  Perfect recovery

Monolith USB_7 98 de 88 a3 1x1

Layout
  PS2251-V 1137_1129 Xor 0561_384_256
Mix
  Input
    Order  0
  Block Renum
    Block  0x600000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x600000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x592
  Actions
    Scan
Comments
  Serg for forum 9752

Monolith USB_7 98 de 98 92 1x1

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
    By Arvika
    Check conflicts, perfect recovery

Monolith USB_7 98 de 98 92 1x2

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x810000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x736
  Actions
    Scan
Comments
    By JeremyB @ RecoverMyFlashDrive.com
    Read using WL without DDR, Perfect Recovery

Monolith USB_8 98 de 98 92 1x1

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Very good recovery

Monolith USB_8 98 de 98 92 1x1 v2

Layout
  PS2251 1138_1134 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Read dump with Ignore Busy

Monolith USB_8 98 de a4 82 1x1

Layout
  PS2251 1109_1103 Xor 0561_256 v2
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x18d
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika

Monolith USB_9 98 de 98 92 1x1

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x744
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Perfect recovery

Monolith USB_9 98 de 98 92 1x1 v2

Layout
  PS2251 1138_1134 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Perfect recovery

Monolith USB_12 ad d7 94 9a 1x1

Layout
  IT1167 1086_1078
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
    Image Cut    0x67000
    Scan Back    true
  Actions
    Scan
    Find Bank Size
Comments
    By Arvika
    Perfect recovery

Monolith USB_12 ec d5 94 29 2x1

Layout
  UT165 536
Mix
  Input
    Order  1/0
  Join by Byte
    Parts  2
    Data   false
  Block Pair
    Block  0x100000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 7153
  Customer found only 2 banks
  I think there must be 4 banks
  MBR was erased

Monolith USB_13 ec d7 98 ca 1x1

Layout
  SM3254 1066 v1 Xor BN 256
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x300000
    Banks           00 / 0x000 / 0x0ff
                    01 / 0x000 / 0x0ff
                    02 / 0x000 / 0x0ff
                    03 / 0x000 / 0x0ff
                    04 / 0x000 / 0x0ff
                    05 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By Arvika
    Problem chip, but recovery was quite good

Monolith USB_13 ec d7 98 ca 1x1 v2

Layout
  SM3254 1066 v3 Xor 0006 64
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x300000
    Banks           00..05 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  By Arvika
  check conflicts, dump was read on other reader

Monolith USB_14 98 d7 98 92 1x1

Layout
  SM3257 1146_27 Xor b36e_256
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00..03 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By Arvika
    Perfect recovery

Monolith USB_15 2c 44 44 4b 1x1

Layout
  SM3257 1112_27 Xor b36e_128 v3 Mod
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x400000
    Banks           0..3 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 10068

Monolith USB_15 45 4c a8 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           0..14 / 0x000 / 0x0ff
    
    // Sector Updates
    Update Size     0x2000
    Update Enable   true
  Actions
    Scan
Comments
  by JeremyB
  ECC=On is all green, 
  ECC=Check is all red. 
  Power Mod manually disabled. 
  100% Recovered.

Monolith USB_15 45 de 94 82 1x1

Layout
  AU6983 1104 Xor 6771_256
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x800
  Actions
    Scan
    Read Bank Size
Comments
  Serg for forum 7833

Monolith USB_15 89 a4 64 32 1x1

Layout
  SM3259 1150_31 Xor 17fe_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x1000000
    Page   0x4000
Assembler
  Block Number
    Block Size      0x2000000
  Actions
    Scan
    Find Bank Size
Comments
  by Sergey and Arvika
  BB was cut before use FE
  MBR corrupted, need rebuild or save image and use other program

Monolith USB_15 98 d7 94 32 1x1

Layout
  AU6990 1078 Xor 6771_256_v2
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  by Arvika
  run check dirs and after that auto fix bank size

Monolith USB_15 98 de 94 93 1x1

Layout
  AU6983 1104 Xor 6771_256
Mix
  Input
    Order  0
  Cross Bank
    Block  0x400000
    Bank   0x400
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
  Actions
    Scan
    Read Bank Size
Comments
  Serg for forum 7485

Monolith USB_15 98 de 98 92 1x1

Layout
  SM3257 1130 Xor 2cfa_64
Mix
  Input
    Order  0
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 9272

Monolith USB_16 45 d7 98 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00..03 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By Arvika
    Very good recovery

Monolith USB_16 98 d7 98 92 1x1

Layout
  SM3257 1130 Xor 101d_256
Mix
  Input
    Order  0
  Block Mutate
    Block  9216
    Cut    0/0x60
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           0..3 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 7476

Monolith USB_16 98 de 98 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Block Mutate
    Block  9216
    Cut    0/0x60
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 7409

Monolith USB_16 98 de 98 92 1x2

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0/1
  Block Mutate
    Block  9216
    Cut    0/0x60
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x810000
    Banks           00..07 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika

Monolith USB_17 2c d5 94 3e 2x1

Layout
  SM3254 528
Mix
  Input
    Order  1/0
  Join by Byte
    Parts  2
    Data   false
  Cross Bank
    Block  0x100000
    Bank   0x400
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
    Image Cut    0x1e80000
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 7314

Monolith USB_18 2c 88 04 4b 4x1

Layout
  SM3254 1066 v1
Mix
  Input
    Order  0/2/1/3
  Join by Byte
    Parts  2
    Data   true
  Block Pair
    Block  0x400000
    Page   0x4000
  Join by Page
    Parts  2
    Page   0x8000
Assembler
  Block Number
    Block Size      0x1000000
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 7336
  FAT was erased

Monolith_USB_5 2c 88 04 4b 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x1000
    Image Cut    0xe7000
    Banks        00 / 0x000 / 0x789
  Actions 
    Scan
Comments
    By Arvika
    Perfect recovery

Monolith_USB_10 45 de 98 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00 / 0x000 / 0x0ff
                    01 / 0x000 / 0x0ff
                    02 / 0x000 / 0x0ff
                    03 / 0x000 / 0x0ff
                    04 / 0x000 / 0x0ff
                    05 / 0x000 / 0x0ff
                    06 / 0x000 / 0x0ff
                    07 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By Arvika
    Root corrupted, save image, use other recovery software

上一篇：SD Part 3
下一篇： USB Part 2

站内搜索

联系我们