1

I have a samsung A30 cellphone that runs Android 10 and I basically need to recover my deleted files. In order to do that, I need to know the filesystem because forensic tools require such information. I made a small research, but I couldn't find any information on Android 10 OS's file system. So what I am asking is what file system does Android 10 have and do file systems depend on Android versions? Any help will be appreciated.

KontrCode
  • 43
  • 5
  • 1
    I think this would help you https://android.stackexchange.com/q/208106/131553 – beeshyams Nov 27 '20 at 10:26
  • if your device is rooted it's ext4 otherwise it's encrypted (and recovery pointless) – alecxs Nov 27 '20 at 13:01
  • Thank you both @beeshyams and alecxs. I will try to root my device now and lets see how it goes. – KontrCode Dec 04 '20 at 10:23
  • let me clarify: you can not recover files because your device is encrypted. once the encryption keys are wiped, data is unrecoverable. this is true for FDE full-disk-encryption on factory reset, and for FBE file-based-encryption on deleted files. be aware rooting involves factory reset (see step 4). no hope, sorry – alecxs Dec 06 '20 at 11:59
  • @alecxs so you say it is impossible to recover an unrooted android mobile phone, right? Recovering a wiped (factory-reset) cell phone is possible only on rooted devices. – KontrCode Dec 06 '20 at 12:38
  • it doesn't matter if device is locked/unlocked rooted/unrooted. if it is encrypted it is not possible to recover files. it depends on the encryption key - if the key is wiped it is impossible to decrypt. furthermore even unencrypted device still faces problem with TRIM and discard (the link explains this) – alecxs Dec 06 '20 at 14:34
  • furthermore samsung encryption is little bit different and TWRP doesn't support samsung encryption. the only way would be to flash magisk_patched.tar on locked bootloader (AVBv1 only) but it's exynos chipset with no EDL mode and no way to flash except modded odin. but you must find the setting not to factory reset on flashing (which is most likely not available, at least i don't know). but samsung has additional protections against rooting and you will most likely end up bricked and lose all data – alecxs Dec 06 '20 at 14:48

1 Answers1

1

according to this TWRP the Samsung Galaxy A30 SM-A305F is shipped with Android 9.0 (Pie) FDE full-disk-encryption

BoardConfig.mk

# Filesystem
TARGET_USERIMAGES_USE_EXT4 := true
TARGET_USERIMAGES_USE_F2FS := true

The file system type depends on ROM and can be F2FS or EXT4

alecxs
  • 4,034
  • 3
  • 16
  • 34