Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Exporting sectors from a disk using the HxD tool in Endpoint Encryption

    • Updated:
    • 25 Apr 2016
    • Product/Version:
    • Endpoint Encryption 3.0 DriveArmor
    • Endpoint Encryption 3.0 File Encryption
    • Endpoint Encryption 3.0 Full Disk Encrypti
    • Endpoint Encryption 3.0 KeyArmor
    • Endpoint Encryption 3.0 PolicyServer
    • Endpoint Encryption 3.1 Full Disk Encrypti
    • Endpoint Encryption 3.1 PolicyServer
    • Endpoint Encryption 5.0
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows 8.1 32-bit
    • Windows 8.1 64-bit
    • Windows Embedded POSReady 7 (32-bit/64-bit)
    • Windows Vista SP1 32-bit / 64-bit
    • Windows XP SP3 32-bit
Summary

You want to know how to collect disk sectors to be saved to a binary file using the HxD hex/disk editor. Analyzing the MBR from the exported sectors is helpful to support issues where the device cannot boot into the Full Disk Encryption preboot.

Details
Public

To use HxD:

  1. Download the HxD tool.
  2. Run HxD.exe as the Administrator.
  3. Click on the Extras tab and select Open disk... to access the disk that is connected to your PC.

    extras

    Click image to enlarge.

  4. On the Open disk window, under Physical disks, select the correct disk you want to extract sectors from. Make sure that the Open as Readonly box is checked.

    hard disk

    Click image to enlarge.

  5. HxD will initially show Sector 0 of a disk drive, this is the beginning of the MBR sector on a hard disk.

    sector0

    Click image to enlarge.

  6. Select the sectors to copy by clicking the Edit tab then click Select Block...

    select block

    Click image to enlarge.

  7. For every sector there are 512 bytes. On the Select block window, for Start-offset put in "0". Select dec and put in "32256" for the Length. Click OK.

    track0

    Click image to enlarge.

     
    512 bytes/sector multiplied by 63 sectors equals 32256 bytes. We usually need to select Track0 which is the first 63 sectors. If you are asked to select a different number of sectors, use the same equation.
  8. Right-click on the highlighted sectors then click Copy.
  9. Click on the File tab and choose New to start a new file.
  10. Paste the sectors to this new file by clicking on the Edit tab then select Paste. Click OK when asked to confirm. The new data will be in red to indicate that it has not yet been saved.
  11. Click on the File tab and choose Save as... Type in a File name then put .BIN as the extension. Click on Save.
  12. Submit this file to Trend Micro Technical Support for analysis.
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1114029
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.