08-29-2021, 02:16 PM
Question, I am trying to extract the hash of a Bitlocker encrypted drive and I get this output bitlockerjohn.
Signature found at 0x71bbc000
Version: 2 (Windows 7 or later)
VMK entry found at 0x71bbf907
VMK encrypted with TPM...not supported! (0x71bbf928)
Then continues, a very long process.
VMK entry found at 0xb5ff5a39
VMK entry found at 0x23b2bad33
VMK entry found at 0x504bb4baa
VMK entry found at 0x511a7f22f
It continues on is that mean that I should wait until it finishes to get the 4 hashes or the fact VMK encrypted with TPM is game over.
Signature found at 0x71bbc000
Version: 2 (Windows 7 or later)
VMK entry found at 0x71bbf907
VMK encrypted with TPM...not supported! (0x71bbf928)
Then continues, a very long process.
VMK entry found at 0xb5ff5a39
VMK entry found at 0x23b2bad33
VMK entry found at 0x504bb4baa
VMK entry found at 0x511a7f22f
It continues on is that mean that I should wait until it finishes to get the 4 hashes or the fact VMK encrypted with TPM is game over.