During an investigation on a  (C6303 ) call-logs where the most important data to get.

Allthough we could not extract the data in an interpreted way, we could find XML records:

···Data

···ÿÿÿÿKEY_CALL_LOGS·¼¼Data ···…§··KEY_CALL_LOGS·¼¼7480681234567 1397030509311132Jeanny2 749+31612345678139703171235103John2

By using a grep-expression: .{50,254} in the forensic program Encase, we managed to get over 2000 call-log records.

call-logs-encaseSony Xperia Z