Sony Ericsson W380i...
 
Notifications
Clear all

Sony Ericsson W380i SMS location

5 Posts
4 Users
0 Reactions
502 Views
nsbuck
(@nsbuck)
Trusted Member
Joined: 17 years ago
Posts: 91
Topic starter  

Hi folks,

Anyone know the location of stored SMS within the handset memory of an SE W380i?

P


   
Quote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

In you can dump the GDFS run keyword searches over the raw hex for 7 bit strings and possibly asci/unicode sent and drafts.


   
ReplyQuote
nsbuck
(@nsbuck)
Trusted Member
Joined: 17 years ago
Posts: 91
Topic starter  

Hi, thanks for response,

I tried that but noticed that the file is only 156kb whereas I was expecting 4096kb!

I am having trouble getting a stable connection with the SHU box, so I am now trying to think of other methods to get my GDFS file.

Any thoughts will be mst welcomed P


   
ReplyQuote
Logan
(@logan)
Trusted Member
Joined: 15 years ago
Posts: 66
 

You could also try reading the flash. When searching for deleted data and otherwise from an SE, you should make sure you get both the GDFS and the flash.


   
ReplyQuote
(@coligulus)
Estimable Member
Joined: 16 years ago
Posts: 165
 

I'm with Logan on this one.

The GDFS can be searched for last SIM details, phonebook (sometimes) and BT pairings for example but the juicy data will be present if you are able to acquire a full flash dump. Then if my memory serves me correctly the SMS will be stored either in a straight PDU format or close to one.

Hope this helps.

Colin


   
ReplyQuote
Share: