±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35535
New Yesterday: 0 Visitors: 97

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Samsung Smart Switch

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

LeGioN
Member
 

Samsung Smart Switch

Post Posted: Dec 14, 18 09:44

Hey!

So I just have a quick question for all the super smart people out there..

Say if you have a phone that none of your tools can image, but it has the Samsung Smart Switch app installed so you use it to knock out a backup of the data that way to a USB/SDCARD.

Is there anyway to decrypt the files in Windows?

Or is the only way to install the backup to a dummyphone that you actually can secure using whatever tools you have in your arsenal? Smile

/Stig  
 
  

Igor_Michailov
Senior Member
 

Re: Samsung Smart Switch

Post Posted: Dec 14, 18 18:07

MobilEdit supports decoding Smart Switch Backups.
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 
 
  

Thomass30
Senior Member
 

Re: Samsung Smart Switch

Post Posted: Dec 17, 18 21:07

Hello I have similar question

I used Smart Switch to create complete backup of Samsung device (G925F) at external storage (OTG Flash drive).
It should work similar to Huawei HiSuite and backup App data (like Messenger history or Internet History).

Then I used MobilEdit Forensic Express option "ImportData / SmartSwitch backup file" but this only created me some standard data like calls, contacts and SMS. There is no app data at all.

The problem is smart swich backup. For example Messenger on the App list (inside Smart Swich) shows me size 130MB but when I create backup and check the size, it is showing me less than a half of the 130MB. This doesnt backup App Data at all.

What is the problem with this SmartSwich ?
It should backup All the App Data but it doesnt.

How to deal with it ?
Has anybody used this successfully to achieve App Data from samsung devices ?  
 
  

passcodeunlock
Senior Member
 

Re: Samsung Smart Switch

Post Posted: Dec 17, 18 21:57

Samsung Smart Switch backs up Facebook Messenger (and similar applications data) encrypted. For decryption you need more then simple forensic analysis tools...
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 
 
  

Thomass30
Senior Member
 

Re: Samsung Smart Switch

Post Posted: Dec 17, 18 22:33

So what is the sense of this option in ME ?
support.mobiledit.com/...tch-backup

If it can only extract calls, messages, and contacts like normal mobiledit extraction without root  
 
  

Thomass30
Senior Member
 

Re: Samsung Smart Switch

Post Posted: Dec 18, 18 08:33

I will try to restore the backup at another rooted Samsung device and then try to extract it.  
 

Page 1 of 1