Symbian WhatsApp Ba...
 
Notifications
Clear all

Symbian WhatsApp Backup

6 Posts
3 Users
0 Likes
778 Views
Forensication-can-be-fun
(@forensication-can-be-fun)
Posts: 27
Eminent Member
Topic starter
 

I have recovered 3 MsgStore.Bak files from an android handsets memory card.
These backups were created by a Symbian Nokia.
Does anyone know how to decode/decrypt/open these files?

thanks,

FCBF

 
Posted : 30/06/2016 4:04 pm
(@mobileforensicswales)
Posts: 274
Reputable Member
 

What is the file header? Can you provide a hex preview / screenshot

Been a while since I looked at an older nokia

 
Posted : 30/06/2016 4:10 pm
Forensication-can-be-fun
(@forensication-can-be-fun)
Posts: 27
Eminent Member
Topic starter
 

[image "https://www.forensicfocus.com/G\file header.bmp" not found]

File Header ‚Y/"Ž¡

I have contacted various software vendors and they are unable do decrypt the files.

Doesn't look like the screenshot will display.

 
Posted : 30/06/2016 5:49 pm
(@mobileforensicswales)
Posts: 274
Reputable Member
 

Upload to something like IMGUR not a local device

HEX not ASCII for header as ASCII chars especially a \. can have many many meanings

 
Posted : 30/06/2016 5:51 pm
Forensication-can-be-fun
(@forensication-can-be-fun)
Posts: 27
Eminent Member
Topic starter
 

82 59 2F 22 8E A1 09 99 91 52 E1 32 1E 94 86 C4 C4 B9 C3 2C EE CB B8 60 F0 3E F1 1F 4F 4E BC 87 1B 42 5E 71 1F 60 07 07 23 07 14 B2 88 3F 91 19 08 D2 A1 0F

 
Posted : 30/06/2016 5:54 pm
(@radiac)
Posts: 5
Active Member
 

Did you find a solution for your case? I'm having the same problem right now. Three WA-Backup Files which are encrypted….

 
Posted : 14/02/2017 4:19 pm
Share: