Deceased Brother's Veracrypt
#1
Hi i'm posting to get some Veracrypt related help on behalf of a friend who's Brother sadly passed away.

Upon booting Windows this is the screen prompted with:
https://imgur.com/a/AOxPAVj

After many incorrect attempts, he's then taken to this screen:
https://imgur.com/a/nLEEH9O

Thankfully he guessed his Brother's pin and can access the Desktop + C drive.

On disk management this is what shows:
https://imgur.com/a/7YEqDqZ

The theory is, the encrypted drive is the D drive
which also has another OS on it

This is the default BIOS boot order:
https://imgur.com/a/74CkX1f

I've told him that it may be possible to extract the VeraCrypt hash (OS is Windows)
and perform some attacks on already existing known passwords.

I just don't have the knowledge on how to do the extraction part.

Any advice/help is greatly appreciated.
Reply


Messages In This Thread
Deceased Brother's Veracrypt - by RyRudiger24 - 02-21-2024, 03:56 AM
RE: Deceased Brother's Veracrypt - by Snoopy - 02-21-2024, 02:42 PM