±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 33980
New Yesterday: 5 Visitors: 108

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Samsung SM-G950U, S8 and Cellebrite error

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Sat Jun 24, 2017 3:23 pm

Hi Everyone,

Has anyone encountered this issue?

I had a Samsung SM-G950U. THe phone is a company phone that had a MDM installed on it.

Using Cellebrite 4PC. I tried to acquire the phone and that failed so I had the company remove the MDM software.

Now, upon me trying to acquire the device I am getting a screen that pops up on the device that states "THe Client Has Stopped. Restart the app"

Restarting the app only repeats the same error as does restarting the phone and the computer.

I was time limited so I had to return the phone, but I am sure that I could get it again if I have a solution.  

lasvegascop
Senior Member
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Tue Jun 27, 2017 4:18 pm

What are you trying to extract? Physical? Logical? FS?

If you are getting errors on the physical side - assuming from the "client" has stopped responding which I am guessing you used the cellebrite client to try the acquisition, then I would drop down to the next level and do a File System and then a Logical. You can try the physical again using a different method but if it doesn't work out and you have to return the phone, at least you have the FS and Logical data to work with.

HTH
-=Art=-  

4n6art
Senior Member
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Tue Jun 27, 2017 6:03 pm

Tried that, It wouldn't work on any of them.
on one attempt I received a warning that said "Extraction Failed. The device security patch level is not sufficient for this extraction type."
I am not sure if that was File system or physical though.  

lasvegascop
Senior Member
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Wed Jun 28, 2017 6:14 am

lasvegascop,

Please approach Cellebrite support on this as they will need some more details about the Android OS version and the UFED version you are using.

We just tested this device and logical completed with no issues.
You should also be able to perform a file system extraction with the latest UFED 6.2.1

Best regards
Ron Serber  

RonS
Senior Member
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Thu Jun 29, 2017 3:03 pm

If you get Extraction Failed. The device security patch level is not sufficient for this extraction type it means that exploit (CVE-2016-5195) in Linux was already patched in this device - so Kernel is after Sept 2016.... you cannot use then Adv. ADB for this
_________________
Multi-COM - Bogusław Rzepka
multi-com.eu 

Bolo
Senior Member
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Fri Apr 20, 2018 3:56 pm

and then what is the solution?  

CVACCA
Newbie
 
 
  

Re: Samsung SM-G950U, S8 and Cellebrite error

Post Posted: Sat Apr 21, 2018 10:09 am

Logical only with UFED..

As far as i know is there no root solution without data-loss.  

Plan_B
Member
 
 

Page 1 of 1