Nokia Lumia 800 [WP...
 
Notifications
Clear all

Nokia Lumia 800 [WP7]

33 Posts
11 Users
0 Likes
3,449 Views
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Hi,

I'm back again! After my escapades with the BMW key fob I've managed to get a Nokia Lumia 800 land on my lap.

I thought it would have been a straightforward download, but XRY and CelleBrite will only at a push extract some images.

Oxygen wont even connect to it.

I have followed all the XRY/CelleBrite instructions for connecting to the Zune software, but to no avail.

A colleague suggested '91 Panda PC Suite' but its not connecting to that. It's almost as bad as a Chinese clone trying to get anything off this thing.

I know Windows Phones are not that popular, but has anybody had any success in extracting data [Logical or Physical] off one of these devices.

Thanks.

 
Posted : 05/02/2013 2:03 pm
(@agolding)
Posts: 31
Eminent Member
 

Unfortunately the windows phone OS is pretty locked down in actual data recovery methods. Data can be recovered from the first lot of windows phones but recovery from the later models is much more difficult. A few of the nokia Lumia 710 and 800 handsets shipped with a qualcomm bootloader and not the nokia DLOAD so if youre lucky you will be able to image the partitions using Linux and then write something to pull the data you need from it.

I'd use this as your guide
http//forum.xda-developers.com/showthread.php?t=1587650

Other than that its not looking to good in the future, about the only access they have allowed in Windows phone 8 is access to the contacts with an agent so it will be a full manual for some time yet.

 
Posted : 05/02/2013 6:35 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Thanks.

That is kinda what is it looking like. I have done mostly a manual download as there is not much on there and its not a hi priority exhibit, but it did get to that stage where I just wanted to see if at all anything could be extracted. Unfortunately all I got was some photo's via XRY or Physical Analyser 3. Like you say, it doesn't see anything else.

I will look out for the bootloader next time.

I did see these in my Google expedition

http//www.fonefunshop.co.uk/cable_picker/97171_Nokia_Lumia__610_/_710_/_800_/_900_JTAG_Test_Point_Cable_Set_For_ATF_%28Pre-Order%29.html

But I dunno if its just for flashing or if it lets you extract the data in some kind of raw format.

Oh and I did check EnCase 7.05 but like everything else and as you mentioned, it supports only upto Windows 6.x

 
Posted : 05/02/2013 6:41 pm
(@trewmte)
Posts: 1877
Noble Member
 

Have you tried using a test handset to see if it is possible to download the internal copy of Nokia Suite stored in the handset to a PC and then using a write-blocker connect the PC to the target device to see if it is possible to download logical stored data on the target device?

 
Posted : 06/02/2013 1:13 am
(@agolding)
Posts: 31
Eminent Member
 

Have you tried using a test handset to see if it is possible to download the internal copy of Nokia Suite stored in the handset to a PC and then using a write-blocker connect the PC to the target device to see if it is possible to download logical stored data on the target device?

I'm pretty sure the Nokia Suite only applys to the non windows phone range. I have used navifirm to flash a lumia before but it doesnt support backup of contacts, calls sms etc like s40 and symbian handsets. It will prompt you to install zune if you plug the handset in.

Regarding the JTAG jigs, would be a useful look, It may well be encrypted but it doesnt appear to be if you get hold of the unsecure bootloader. Not much look when we get the wp8 handsets coming through as bitlocker is setup by default unfortunately.

 
Posted : 06/02/2013 2:35 pm
(@trewmte)
Posts: 1877
Noble Member
 

It will prompt you to install zune if you plug the handset in.

Yes, you're right agolding. I hadn't detected that about Lumia as I haven't actually seen one yet. I don't even know anyone who has got one.

I did check with Nokia Developers and it does speak of synchronisation with Microsoft Zune - http//www.developer.nokia.com/Devices/Device_specifications/Lumia_800/ select Tab 'Other' and see synchronisation / Microsoft Zune.

At Nokia's consumer user guide website - http//www.nokia.com/gb-en/support/product/lumia800/userguide/ - I see under 'Set up sync with computer' it doesn't actually state the user has to upgrade or upload Zune to the handset. It does require Zune to be downloaded and installed on a PC

" 'Set up sync with computer'
Keep your stuff with you – with the Zune PC app, you can sync your music, videos, and photos between your phone and your compatible computer. You can also back up and update your phone with the latest software, to improve performance and get new features.

1. Download and install the latest version of Zune on your PC from www.zune.net/.
If you're using an Apple Mac, download Windows Phone 7 Connector for Mac from the Mac App Store.

2. Make sure your phone is not locked with a security code.

3. Connect your phone to your computer with a compatible USB cable, and follow the instructions shown on your computer.

4. To change Zune sync settings, on your computer, select SETTINGS.

If you have previously used another app, such as Nokia Ovi Suite or Nokia Suite, to sync your files between your phone and computer, you can set Zune to sync files to the same folders you have used earlier, and have your music and other content easily synced to your new phone."

So there maybe a chance to acquire certain data.

I also note that the Nokia Lumia 800 User Guide ( http//nds1.nokia.com/phones/files/pdf_guides/devices/Lumia800/Nokia_800_UG_en.pdf ) states

"Back up, sync, and restore your phone
Your phone is automatically backed up during the software update, when you update the phone using the primary computer (the computer you first connected your phone to with the USB cable). If you use a different computer to update your phone software, no backup is created. You can change your primary computer in the Zune settings.
The backup includes the following
• System settings
• Account settings
• Pictures
• Music
• Videos
• Documents
Your downloaded apps may not be included in the backup, but you can re-download them from the Marketplace, free of charge. Data transmission costs may apply. For more info, contact your network service provider. To back up your content, you can also sync your phone to your computer with Zune or Windows Phone 7 Connector for Mac without updating your phone software. Syncing does not back up your system settings or your apps. You can also set your phone to sync your contacts through Microsoft Outlook, so you can restore them to your phone from your computer. Restore a backup to your phone Use a USB cable to connect your phone to your primary computer, then use Zune to restore your backed up content and the earlier version of your phone software."

 
Posted : 07/02/2013 2:07 am
(@agolding)
Posts: 31
Eminent Member
 

Yeah Zune allows for backups to be made but unfortunately they're encrypted. Zune does allow you to get Media from wp7 devices in the same way as XRY gets them normally.

 
Posted : 07/02/2013 5:37 pm
(@trewmte)
Posts: 1877
Noble Member
 

Yeah Zune allows for backups to be made but unfortunately they're encrypted. Zune does allow you to get Media from wp7 devices in the same way as XRY gets them normally.

Firstly, i didn't say above but thanks for your responses and your willingness to help.

Secondly, obviously I must be missing something here as to the part (that is still not clear) why Nokia/Microsoft would prevent download of personal/business data in the clear to the PC?

I understand backup, but due to the 'fact' the directions I posted above from Nokia's own materials states Zune can populate data into existing Ovi or Nokia Suite Folders, which that data is viewable, why does this present problems of access to the data?

I see the issue of data not being accessed if the Lumia is already backed up to another computer, but that assumption is based upon the target handset having actually backed up previously, which is a 50/50 bet.

 
Posted : 08/02/2013 2:55 am
(@agolding)
Posts: 31
Eminent Member
 

Thats ok.

It's not a case of not wanting the implementation, more of a case of not having time to develop a solution in time for release. Windows Phone 7 was built brand new from the ground up so they had to select what features to include so they included backup for media but nothing else. They have incorporated cloud backup of messages, contacts etc in windows phone 8 but not in windows phone 7 (theyre running on completely different Operating systems, just look the same.

I havent tested OVI suite importation of zune data but I dont imagine it will work as zune doesnt offer the backup of that data to begin with.

The zune backups are 4mb encrypted blocks from when I remember researching them.

Windows phone is incredibly frustrating forensically at the moment.

 
Posted : 08/02/2013 4:52 pm
(@trewmte)
Posts: 1877
Noble Member
 

Looking at a range of tools for Mobile WIN7 tools to see whether they are suitable for examiners. Here is one I have been reviewing last week

http//www.resco.net/developer/support/samples.aspx
http//www.resco.net/mobileformstoolkit/overview.aspx#wm
http//www.resco.net/mobileformstoolkit/download.aspx

 
Posted : 18/02/2013 11:42 pm
Page 1 / 4
Share: