A500H Samsung Runni...
 
Notifications
Clear all

A500H Samsung Running 6.0.1 Marshmellow

4 Posts
4 Users
0 Likes
363 Views
CopyRight
(@copyright)
Posts: 184
Estimable Member
Topic starter
 

Hello Folks,

I am trying to pull some WhatsApp messages from a A500H Samsung Running on 6.0.1 Marshmallow , Celebrate could not take a logical nor a physical, Oxygen however took a logical but without the WhatsApp database. As you know WhatsApp conversations can only be decrypted with the "key" file that is only visible on rooted devices.

So I have tried many ways to root the device however none of them have worked, I've tried to flash CF,TWRP using odin .. and failed.

Is there a turn-around on this situation?

Thanks,

 
Posted : 14/03/2017 10:31 am
(@stetocina)
Posts: 28
Eminent Member
 

First check do you have frp activ. Put phone in download mode and check FRPON if yes deactivate frp. then You can root or flash custom recovery

 
Posted : 14/03/2017 11:10 am
Bolo
 Bolo
(@bolo)
Posts: 97
Trusted Member
 

You can make dump by eMMC ISP using for example VR-Table and then analyse it using correct chain for Android as Physical image from PA - advantage of this that you will get also Unallocated Space in RAW

 
Posted : 14/03/2017 8:59 pm
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

Unfortunately logical extraction will not give you any apps databases. Samsung A500H device is supported by physical method via custom forensic recovery. Have you tried it in Oxygen Forensic Detective? This method will create a full physical dump and parse all the available apps including WhatsApp.

 
Posted : 13/04/2017 1:17 pm
Share: