Symbian WhatsApp Ba...
 
Notifications
Clear all

Symbian WhatsApp Backup

6 Posts
3 Users
0 Reactions
1,219 Views
Forensication-can-be-fun
(@forensication-can-be-fun)
Eminent Member
Joined: 17 years ago
Posts: 27
Topic starter  

I have recovered 3 MsgStore.Bak files from an android handsets memory card.
These backups were created by a Symbian Nokia.
Does anyone know how to decode/decrypt/open these files?

thanks,

FCBF


   
Quote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

What is the file header? Can you provide a hex preview / screenshot

Been a while since I looked at an older nokia


   
ReplyQuote
Forensication-can-be-fun
(@forensication-can-be-fun)
Eminent Member
Joined: 17 years ago
Posts: 27
Topic starter  

[image "https://www.forensicfocus.com/G\file header.bmp" not found]

File Header ‚Y/"Ž¡

I have contacted various software vendors and they are unable do decrypt the files.

Doesn't look like the screenshot will display.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Upload to something like IMGUR not a local device

HEX not ASCII for header as ASCII chars especially a \. can have many many meanings


   
ReplyQuote
Forensication-can-be-fun
(@forensication-can-be-fun)
Eminent Member
Joined: 17 years ago
Posts: 27
Topic starter  

82 59 2F 22 8E A1 09 99 91 52 E1 32 1E 94 86 C4 C4 B9 C3 2C EE CB B8 60 F0 3E F1 1F 4F 4E BC 87 1B 42 5E 71 1F 60 07 07 23 07 14 B2 88 3F 91 19 08 D2 A1 0F


   
ReplyQuote
(@radiac)
Active Member
Joined: 10 years ago
Posts: 5
 

Did you find a solution for your case? I'm having the same problem right now. Three WA-Backup Files which are encrypted….


   
ReplyQuote
Share: