Mobile Device Images
Micro Systemation .XRY

GSM Mobile Device Evidence File – GSM .XRY

The data contained in the image was acquired using Micro Systemation’s GSM .XRY version 3.6.  While forensic mobile device acquisition tools continue to improve, the forensic workstation must be configured allowing successful playback of audio and video files as well as displaying foreign languages.

Scenario

The mobile device (manufacture/model depicted in image filename) contains audio files (i.e., .wav, .mp3) and three video files (i.e., .3gp). Your task is to load the mobile device acquisition image with GSM .XRY and configure your system to play these files within the GSM .XRY environment. 

The second task is to load the SIM acquisition image with GSM .XRY and properly display Abbreviated Dialing Numbers and Text messages in French and Chinese.

Answer

The mobile device internal memory image contains two audio files of type .mp3 and .wav and three .3gp video files.  
Address book entries and text messages in French and Chinese.

  1. 是和经他, 35 8 763 03 70
  2. Aurélien, 22 6 555 02 02

Text messages in French and Chinese.

  1. 阿恶哈拉噢怕他呀宝贝得到共和国快快乐乐农亚洲际会有事情况且在家里的事情况且在家里的事情况且在家里的事情况且在家里的事情况且在家里的事情况且在家里的事情况且在家里的kjk
  2. Conformément à la législation française, l'iPhone sera également propose "nu" et débloqué, permettant ainsi de choisir son opérateur. Ceci aura toutefois un prix, probablement 999 euros. Il devra en tout cas être suffisamment prohibitif, car dans ce cas, Apple ne touchera pas de commission sur les abonnements, une exception française.

Creating this test image

The test image was created first by populating data onto the internal memory of a mobile device and associated media (i.e., subscriber identity moduel [SIM]) and acquiring the data with Micro Systemation’s GSM .XRY version 3.6. 

The test images provide mobile forensics specialists using GSM .XRY the ability to determine if the forensic workstation is setup to display foreign character sets and to ensure that GSM .XRY’s media settings have been modified to point to the suggested media player allowing audio and video playback within the GUI.

GSM Mobile Device Evidence File – GSM .XRY
GSM .XRY V3.6_ATT_SIM Card.xry
GSM .XRY V3.6_Motorola V3.xry
GSM .XRY V3.6_Nokia 6101.xry
GSM .XRY V3.6_Tmobile_SIM.xry