A method for parsing coolsand mobile phone information

Abstract

The invention discloses a Coolsand mobile phone information analysis method. The method is characterized by comprising the following steps of: S1, obtaining a character library of a Coolsand mobile phone; S2, searching an identifier of an information block in the character library and shifting the identifier backwards for 0x20 bytes; S3, judging whether contents of the first three bytes are 0x435357 or not, if the judging result is positive, executing the step S4, and otherwise, executing the step S7; S4, searching an unread short message identifier 0x010891, if the unread short message identifier 0x010891 is searched, executing the step S6, and otherwise, executing the step S7; S6, analyzing a short message, and after the analysis is completed, skipping to the step S10; S7, judging whether contents of the first four byts are 0x4E5652414D or not, if the judging result is positive, executing the step S8, and otherwise, executing the step S10; S8, searching a call record identifier 0x00000081, if the call record identifier 0x00000081 is searched, executing the step S9, and otherwise, executing the step S10; S9, analyzing a call record; and S10, judging whether the search of the character library is completed or not, if the judging result is positive, ending the process, and otherwise, executing the step S2.

Description

technical field [0001] The invention belongs to the field of electronic forensics, relates to mobile phone information forensics, in particular to a method for analyzing Coolsand mobile phone information. Background technique [0002] With the continuous improvement and expansion of the service level and service types provided by mobile communication technology, mobile phones have increasingly become an indispensable contact tool in people's work and life. However, it is not uncommon to use mobile phones to commit crimes such as fraud, defamation and forgery. Mobile phone data recovery and mobile phone forensics are an effective means to combat such crimes. [0003] Conceptually speaking, mobile phone forensics is to collect, preserve and analyze relevant electronic evidence from mobile phone SIM cards, mobile phone internal and external memory cards, and mobile network operator databases, and finally obtain legally effective evidence that can be accepted by the court. proc...

AI Technical Summary

Problems solved by technology

[0004] In the prior art, there are many forensics involving smart phones, but few technologies involving forensics of non-smart phones. For example, for non-smart phones equipped with Coolsand CPU, the CPU is an early product, and the internal data structure is relatively complicated. Therefore, the evidence collection of this type of mobile phone has not yet been involved in the prior art; Coolsand mobile phone, only the font library of Coolsand mobile phone can be obtained. In the absence of an effective analysis of Coolsand mobile phone font library, it has brought various difficulties to the investigation and evidence collection of the case. Therefore, a method for analyzing Coolsand mobile phone information is urgently needed

Images