USB Part 2Flash Extractor-芯片级数据恢复取证方案025-83608636

USB Part 2

Monolith_USB_10 45 de 98 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00 / 0x000 / 0x0ff
                    01 / 0x000 / 0x0ff
                    02 / 0x000 / 0x0ff
                    03 / 0x000 / 0x0ff
                    04 / 0x000 / 0x0ff
                    05 / 0x000 / 0x0ff
                    06 / 0x000 / 0x0ff
                    07 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By Arvika
    Root corrupted, save image, use other recovery software

Monolith USB_20 89 88 28 5f 1x1

Layout
  EN3257 1140 Xor 101d_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x300000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x600000
    Banks           00 / 0x000 / 0x0ff
                    01 / 0x000 / 0x0ff
                    02 / 0x000 / 0x0ff
                    03 / 0x000 / 0x0ff
                    04 / 0x000 / 0x0ff
    Update Size     0x4000
    Update Enable   true
  Actions
    Scan
Comments
    By JeremyB @ RecoverMyFlashDrive.com
    Drive was cracked, 30 30 30 errors in dump at
    semi-predictable locations, most data recovered.
    Device Model FAB8GBHSTI2SL1B

Monolith USB_22 2c d7 94 3e 4x1

Layout
  SM3254 540_538
Mix
  Input
    Order  3/1/2/0
  Join by Byte
    Parts  2
    Data   false
  Join by Page
    Parts  2
    Page   0x2000
  Cross Bank
    Block  0x200000
    Bank   0x400
Assembler
  Block Number
    Block Size      0x200000
    Bank Space      0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 7550

Monolith USB_23 98 de 98 92 1x1

Layout
  PS2251 1151-1145 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 7575

Monolith USB_24 ad d7 94 da 1x1

Layout
  SM3257 1094_27 Xor 101d_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x400000
    Banks           0..3 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 7606

Monolith USB_25 2c d5 94 3e 2x1

Layout
  SM3254 528
Mix
  Input
    Order  0/1
  Join by Byte
    Parts  2
    Data   false
  Cross Bank
    Block  0x100000
    Bank   0x400
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 10090

Monolith USB_25 ec d5 14 b6 1x2

Layout
  SM3254 528
Mix
  Input
    Order  0/1
  Join by Byte
    Parts  2
    Data   false
  Block Pair
    Block  0x100000
    Page   0x2000
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 7630

Monolith USB_26 98 3a a8 92 1x1

Layout
  IT1171 580_572 v2 0x81 Xor 6771_258
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Block Pair
    Block  0x408000
    Page   0x4000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x810000
    Bank Space   0x4000
    Image Cut    0x8c6200    
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 7638

Monolith USB_27 45 3a 94 93 1x1

Layout
  SM2685 1102_27 Xor b36e_128 v5 Mod
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
Assembler
  Block Number
    Block Size      0x800000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 10260

Monolith USB_27 98 3a a8 92 1x4

Layout
  PS2251 1137_1133 Xor 0561_86
Mix
  Input
    Order  0/1/2/3
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
  Join by Dump
    Parts  2
  Cross Bank
    Block  0x810000
    Bank   0x800
Assembler
  Block Number
    Block Size      0x810000
    Bank Space      0x800
    Banks           0..3 / 0x000 / 0x744
  Actions
    Scan
Comments
  Serg for forum 10289

Monolith USB_27 ec 1a a8 de 1x4

Layout
  SM3257 1130 Xor b36e_256
Mix
  Input
    Order  3/2/1/0
  Block Pair
    Block  0x200000
    Page   0x2000
  Block Pair
    Block  0x400000
    Page   0x4000
  Join by Page
    Parts  2
    Page   0x8000
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size      0x1000000
    Banks           0..15 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Order of Join by Page (01_01 & 01_02) is unknown
  They was empty

Monolith USB_28 89 68 24 4a 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x100000
    Page   0x1000
  Divide
    Field  Block Number
    Value  0x10
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x4000
    Image Cut    0x67000
  Actions 
    Scan
    Find Bank Size
Comments
    By Arvika

Monolith USB_29 45 3c 9a 92 2x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Block Cut
    Block  0x400000/0x8000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  (0x158000)*2/0x150000
    Page   0x4000
  Divide
    Field  Block Number
    Value  0x3
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3fff
  Actions
    Scan
Comments
  Serg for forum 8984

Monolith USB_29 45 4c a8 a2 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I
Mix
  Input
    Order  0
  Block Pair
    Block  0x300000
    Page   0x2000
  Block Pair
    Block  0x600000
    Page   0x4000
  Divide
    Field  Block Number
    Value  0x3
  Divide
    Field  Block Rotate
    Value  0x40
  Block Rotate
    Block  0x400000
    Page   0x8000
Assembler
  Block Number
    Block Size   0xc00000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x5a5
  Actions   
    Scan
Comments
  by Arvika
  check conflicts
  there is 2 banks, second is broken, can't read
  This model gives quite good result
  Probably for both banks need one more step join by dump.

Monolith USB_29 45 d7 98 92 1x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x3
  Block Cut
    Block  0x400000/0x8000
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  (0x158000)*2/0x150000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  by Arvika
  check conflicts

Monolith USB_29 45 de 98 92 2x1

Layout
  20-82-00511-1 14_2048_230 Xor C634_32I_WL
Mix
  Input
    Order  0/1
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Dump
    Parts  2
  Divide
    Field  Block Number
    Value  0x3
  Divide
    Field  Block Rotate
    Value  0x20
  Block Rotate
    Block  0x158000
    Page   0x4000
  Block Cut
    Block  0x400000/0x8000
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 7956
  Block Rotate can not be done perfectly on this device
  There can be shifts in image
  Block Rotate works slow
  Save image. After save files from image

Monolith USB_30 98 3a a8 92 1x1

Layout
  PS2251 1138_1134 Xor 0561_86
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Cross Bank
    Block  0x408000
    Bank   0x800
Assembler
  Block Number
    Block Size      0x408000
    Bank Space      0x800
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 8072

Monolith USB_31 45 de 94 93 1x1

Layout
  SM2685 1102_27 Xor b36e_64 v5
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size      0x400000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 8129

Monolith USB_32 ec d7 98 ca 1x1 v2

Layout
  SM3254 1066 v3 Xor 0208_64
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x300000
    Banks           00..05 / 0x000 / 0x0ff
    Correction
    // Sector Updates
    Update Size     0x4000
    Update Enable   true
  Actions
    Scan
Comments
  by Arvika

Monolith USB_32 ec d7 98 ca 1x2

Layout
  SM3254 1066 v3 Xor 00f6 192
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x180000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x600000
    Banks           00..04 / 0x000 / 0x0ff
  Actions   
    Scan
    Find Bank Size
Comments
  by Arvika
  dumps read on other reader, root corrupted
  need scan with other software, 99,9% data recovered ok

Monolith USB_32 ec d7 98 ca 1x2 v2

Layout
  SM3254 1066 v3 Xor 0208_64
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x180000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x600000
    Banks           00..04 / 0x000 / 0x0ff
  Actions   
    Scan
Comments
  by Arvika

Monolith USB_32 ec d7 98 ca 1x4

Layout
  SM3254 1066 v3 Xor 0208_64
Mix
  Input
    Order  0/1/2/3
  Block Pair
    Block  0x180000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size      0x600000
    Banks           0..10 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 8258

Monolith USB_33 ec de 98 ce 1x2

Layout
  SM3257 1130 Xor b36e_256
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x180000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x600000
    Banks           0..10 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 8413

Monolith USB_34 98 d7 94 32 2x1

Layout
  PS2233 1074-1070 Xor C5F6_128
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x100000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x800
    Image Cut       0x7d8000
  Actions   
    Scan
    Find Bank Size
Comments
  by Arvika
  Dir structure partially corrupted, need additional scan.

Monolith USB_35 98 de 98 92 1x1

Layout
  AU6989 1146 Xor 6771_258 56-1 BP
Mix
  Input
    Order  0
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size   0x408000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 8440
  Read by JeremyB
  Cut bb by Arvika
  
  Attention: dump had software bad bytes
  Need cut them manualy before using model

Monolith USB_36 2c 88 08 5f 1x2

Layout
  SK6226 1144_1140_1144 Xor BN_384
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x300000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0xc00000
    Bank Space      0x400
    Image Cut
    
    Banks           00 / 0x000 / 0x351
                    01 / 0x000 / 0x3f2
  Actions
    Scan
Comments
  By JeremyB
  Perfect Recovery

Monolith USB_37 98 d7 98 92 1x1

Layout
  SM3257 1130 Xor 101d_256
Mix
  Input
    Order  0
  Block Mutate
    Block  9216
    Cut    0/96
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00..03 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika
  check conflicts
  step cut bad bytes no need

Monolith USB_37 98 de 98 92 1x1

Layout
  SM3257 1136 Xor 101d_256
Mix
  Input
    Order  0
  Block Mutate
    Block  9216
    Cut    0/0x60
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Image Cut       0x4ef000
    Banks           00..07 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika
  step cut bad bytes no need‘

Monolith USB_39 ec de 88 bf 1x2

Layout
  SM3257 1150_27 Xor b36e_256 F
Mix
  Input
    Order  0/1
  Join by Page
    Parts  2
    Page   0x4000
Assembler
  Block Number
    Block Size      0x800000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 9279

Monolith USB_40 45 d7 98 82 1x1

Layout
  SM3255 1108_26 Xor 0082_258
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00..03 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika
  Once i meet case where need delete
  Cut Bad Bytes step

Monolith USB_40 45 d7 98 82 1x1

Layout
  SM3255 1108_26 Xor 0082_258
Mix
  Input
    Order  0
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x408000
    Banks           00..03 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika
  Once i meet case where need delete
  Cut Bad Bytes step

Monolith USB_42 2c d7 94 3e 2x2

Layout
  SM3254 540_538
Mix
  Input
    Order  0/2/1/3
  Join by Byte
    Parts  2
    Data   false
  Join by Page
    Parts  2
    Page   0x2000
  Cross Bank
    Block  0x200000
    Bank   0x400
Assembler
  Block Number
    Block Size      0x200000
    Bank Space      0x400
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 10097

Monolith USB_43 98 de 94 82 1x1

Layout
  SM3257 1094_27 Xor 101d_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x400000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  Serg for forum 10301

Monolith USB_44 98 de 98 92 1x4

Layout
  SM3257 1146_27 Xor b36e_256
Mix
  Input
    Order  0/1/2/3
  Cut Bad Bytes
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  4
    Page   0x4000
Assembler
  Block Number
    Block Size      0x1020000
    Banks           0..7 / 0x000 / 0x0ff
  Actions
    Scan
Comments
    By datafactory

Monolith USB_45 98 3a a8 92 1x2

Layout
  PS2251 1138_1134 Xor 0561_86
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x204000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
  Cross Bank
    Block  0x810000
    Bank   0x800
Assembler
  Block Number
    Block Size      0x810000
    Bank Space      0x800
    Banks           00 / 0x000 / 0x729
                    01 / 0x000 / 0x729
  Actions
    Scan
Comments
  by Arvika
  Cut bb step no need

Monolith USB_46 45 d7 98 92 1x1

Layout
  AU6989 1146 Xor 6771_258 56-1 BP
Mix
  Input
    Order  0
  Block Pair
    Block  0x204000
    Page   0x2000
Assembler
  Block Number
    Block Size   0x408000
    Bank Space   0x400
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  by Arvika
  Need cut BB manually befor use this model
  MBR block empty, RAW recovery ok

Monolith USB_46 ec d7 98 ce 1x1

Layout
  SM3257 1148_27 Xor b36e_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x300000
    Banks           00..04 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika

Monolith_USB_32 ec d7 98 ca 1x1

Layout
  SM3254 1066 v3 Xor 0006 64
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x300000
    Banks           00..07 / 0x000 / 0x0ff
  Actions
    Scan
Comments
  by Arvika

上一篇： USB Part 1
下一篇：USB part 3

站内搜索

联系我们