Greetings All,
I have a Samsung SMG-900V Galaxy S5 phone that I performed an extraction on using my Cellebrite UFED Touch. While analyzing the information that was extracted, the phone's time is approximately 6 months off, (according to the extraction) and yet the SMS messages that I'm most interested in appear to be reporting the correct time. Now I know that the owner could have changed the phone's time back to an earlier date five minutes before I got the device, but I doubt that. So the question is Where does the device get it's dates and times from when saving information related to messaging? Is it getting them from the network and ignoring the device time?
Thanks in advance for your assistance.
The short message gets its time(stamp) from the Short Message Service Center (SMSC) and not from the phone
See the pdf and there page 50 the TP-SCTS
I believed that to be the case.
Thank you for the clarification.