±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 36767
New Yesterday: 4 Visitors: 97

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Extracting data from a factory reset Android mobile phone

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

shadowplay
Newbie
 

Re: Extracting data from a factory reset Android mobile phon

Post Posted: Mar 13, 20 21:20

I have a phone that was accidentally factory reset on 3/6. I need to recover photos that were saved to the device prior to the reset. (No, there was no backup or sync at the time.) I've already rooted it, USB Debug on, SU allow, encryption appears to be off by default. I have tried some apps which are recovering stuff I believe was prior to the reset but it isn't what I'm looking for. The phone is an HTC Desire 626, model HTCD200LVW, Android 6.0.1. It was on the Verizon network at one point but hasn't been connected to a network in years. I had a tough time getting it rooted, apparently Verizon loaded the phones with something that made that difficult. Can confirm via SunShine s-off, & various root checkers that is is in fact rooted. The photos I need are screenshots that may be used in a custody issue later, otherwise it wouldn't be so important. Any help would be appreciated. Thanks.

Specs:
www.gsmarena.com/htc_d...)-7421.php  
 
  

arcaine2
Senior Member
 

Re: Extracting data from a factory reset Android mobile phon

Post Posted: Mar 14, 20 10:58

- shadowplay
I had a tough time getting it rooted, apparently Verizon loaded the phones with something that made that difficult. Can confirm via SunShine s-off, & various root checkers that is is in fact rooted. The photos I need are screenshots that may be used in a custody issue later, otherwise it wouldn't be so important. Any help would be appreciated. Thanks.


If it's already s-off then just create a dump and take a look. Realistically tho, it may be only possible to get those data back by using NAND protocol method that also requires you to do a chip-off first.  
 
  

Bolo
Senior Member
 

Re: Extracting data from a factory reset Android mobile phon

Post Posted: Mar 16, 20 09:03

Maybe Garbage cleaning mechanism wasn't so effective ... so try first as arcain writes normal dump after S-OFF or by performing ISp/Chipoff. If not then only NAND read and image assembly can be used to get back data
_________________
Multi-COM - Bogusław Rzepka 
 
  

Hunter
Member
 

Re: Extracting data from a factory reset Android mobile phon

Post Posted: Mar 21, 20 18:27

[quote="shadowplay"]I have a phone that was accidentally factory reset on 3/6. I need to recover photos that were saved to the device prior to the reset. (No, there was no backup or sync at the time.) I've already rooted it, USB Debug on, SU allow, encryption appears to be off by default. I have tried some apps which are recovering stuff I believe was prior to the reset but it isn't what I'm looking for. The phone is an HTC Desire 626, model HTCD200LVW, Android 6.0.1. It was on the Verizon network at one point but hasn't been connected to a network in years. I had a tough time getting it rooted, apparently Verizon loaded the phones with something that made that difficult. Can confirm via SunShine s-off, & various root checkers that is is in fact rooted. The photos I need are screenshots that may be used in a custody issue later, otherwise it wouldn't be so important. Any help would be appreciated. Thanks.

Specs:
www.gsmarena.com/htc_d...php[/quote

What software are you using?  
 

Page 2 of 2
Page Previous  1, 2