Samsung Tocco Lite Decode

Not sure about that model but I have had good luck with Final Mobile. I have used Cellebrite physical downloads before and have been able to decode them with FM. They also do a good job getting physicals from Samsung CDMA handsets.

We've been trying to locate SMS and call logs from the read we have however, the SMS don't seem to be encoded in the normal 7 bit format.

You should be able to find messages in the PDU format. Have you tried UCS-2?

Calls are a bit trickier.

I have done a tone of these and find often the file system recovers far more

The nand memory dumps are very broken and split alot of texts down the middle with page'ing of the memory

I addition, I noted some sent SMS are saved in ASCII format. You will be able to find the SMS date/time in an epoch just before the persons name and number. If you need me to find the exact offsets etc. I could try and find it in my knowledge base

We can assist with your request & have previously decoded memory images from this model of phone, recovering the data types specified.

The data recovery does not reply on any commercially available decoding tools.

Send an e-mail to our enquiries e-mail (marked for my attention) which can be found on our website & I will provide further information.

John Barwood
Forensic Telecommunication Services
www.forensicts.co.uk

Why not share your findings with the rest of the community?

We can assist with your request & have previously decoded memory images from this model of phone, recovering the data types specified.

The data recovery does not reply on any commercially available decoding tools.

Send an e-mail to our enquiries e-mail (marked for my attention) which can be found on our website & I will provide further information.

John Barwood
Forensic Telecommunication Services
www.forensicts.co.uk

This specific model physical extraction is without the NAND flash spare area.
This means that a file system cannot be reconstructed and you can only use carving to get data out of this model physical extraction.

There is no solution (beside chip-off and possibly JTAG) to get a physical with the flash spare area.

There are only about 2 other models that we use that specific extraction method that cannot produce a file system decoding.

Hope this helps.

Ron