Acer Iconia Windows...
 
Notifications
Clear all

Acer Iconia Windows Tablet

5 Posts
3 Users
0 Likes
920 Views
(@anirudhrata)
Posts: 17
Active Member
Topic starter
 

Hi, can anyone suggest methods for acquiring either logical or physical image of Acer Iconia W3 tablet running Windows 8. Also it is password protected. UFED and Oxygen seems to not have compatibility.

Thanks.

 
Posted : 03/08/2015 8:31 pm
(@mhanizan)
Posts: 6
Active Member
 

Having the Same Problem. Anyone care to share???

 
Posted : 05/08/2015 9:25 am
(@v-katalov)
Posts: 52
Trusted Member
 

The big question is whether or not the tablet is encrypted (BitLocker). If it's not, chip-off acquisition of its eMMC storage will do the trick. If it's encrypted, you'll need the user's BitLocker Recovery Key to decrypt the system partition (the user's Recovery Key is normally available at https://onedrive.live.com/recoverykey ; can be requested from Microsoft with a warrant). On these tablets, BitLocker is activated automatically if there is a TPM module installed (I don't know if this model has it) and if the user with administrative privileges logs in with their Microsoft Account (as opposed to using a local Windows account).

 
Posted : 06/08/2015 3:34 pm
(@anirudhrata)
Posts: 17
Active Member
Topic starter
 

Update This is what I have tried till now. I actually thought the tablet was running Windows Phone 8, but turns out it has regular Windows 8. So I tried booting it with external DVD and USB, but it failed to boot. After a bit of researching I found out it is UEFI enabled and there is no legacy support. I got a Ubuntu 14.10 EFI enabled iso and tried booting with it. Now I can get to the GRUB menu, but after that the screen is blank. I tried a lot of solutions online but to no use. The exact procedure I followed was this

Ubuntu on ASUS Transformer T100

Any advice on how to proceed?

Thanks.

 
Posted : 21/08/2015 7:03 pm
(@anirudhrata)
Posts: 17
Active Member
Topic starter
 

Update I have finally imaged the device. I used a WinPE 32 bit UEFI enabled image and made a GPT partitioned USB drive from it. The device booted into WinPE environment successfully and I was able to grab SAM file and extract password. After rebooting into the image, I used FTK imager to image the internal flash memory of Iconia W3.

 
Posted : 22/08/2015 8:15 pm
Share: