yashsingh1/xdaforums huggingface dataset:
[Google Pixel 4a Questions & Answers] mayday175:
@shaitan667 - I tried the GrapheneOS web installer again... I got the same response as last time... "Error: Bootloader was not unlocked, please try again!" while using the current version of Google Chrome, and same for the current version of MS Edge. The instructions on the web installer page clearly say "OEM unlocking needs to be enabled from within the operating system."... which I can't do from within the GUI. I can only assume you were fortunate for this to work, while I am not.
[Google Pixel 4a Questions & Answers] dadme:
Try to flash stock images from linux. Someone relocked bootloaer after installing custom ROM. Also try from linux to unlock bootloader..
[Google Pixel 4a Questions & Answers] jawz101:
follow the instructions on the Google site. I wouldn't try any other instructions until you get a phone back to the factory condition using Google's instructions.

Factory Images for Nexus and Pixel Devices | Google Play services | Google for Developers

developers.google.com
[Google Pixel 4a Questions & Answers] xmoo:
Most adb and fastboot commands are marked as unknown. Fastboot is easily accessible. Adb is accessible through Rescue mode.

Graphene webinstaller also did not work.
[Google Pixel 4a Questions & Answers] xmoo:
Looking at the build date, looks like a new netwerk/device. Can't find anything on the internet about this device.
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
Are you able to enter EDL mode? I can try to help you if you can.
[Google Pixel 4a Questions & Answers] xmoo:
Adb reboot edl? Or a different way?
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
any way of entering it, doesn't matter. at least on mtk, you can use mtkclient to backup, im still trying to find a firehorse for you. sprd requires a manifest to backup but on qcom i dont know
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
you can try these files here if you would like, it is from a different device, but same soc, gpu, and cpu as sunfish pixel 4a. i removed the img files as they were large. it comes from https://droidfilehost.com/download/realme-x2-rmx1992-firmware-flash-file-stock-rom/ and was decrypted
[Google Pixel 4a Questions & Answers] xmoo:
Nope, just giving me command closed. So another command which is either removed or protected.
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
you might need to short something to get it into that mode then, idk what, i dont own a pixel
[Google Pixel 4a Questions & Answers] xmoo:
Short is not an option. Don't want to brick the device. Took a while to find one.

I tried the ADB and Fastboot way, no success. I tried the key-shortcut wat, no success.
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
Key-shortcut wat? What's that, you mean holding down Vol - and pluging in the usb when turned off? And why is short not an option, you should be able to exit it anyways. And what about those usb things online where you plug in something and it works (altho idk about it or if its a scam or not)
[Google Pixel 4a Questions & Answers] xmoo:
With "you might need to short something" you are reffering to circuit board right?

Key-shortcut I am indeed reffering to key combination to get the phone into EDL mode.

"And what about those usb things online where you plug in something and it works (altho idk about it or if its a scam or not)" I have no idea what you are reffering to. Any video or link?
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
1. Yes

2. So it doesn't work, I thought so because Pixel's are the hardest to get to EDL unless you flash the wrong FW, which you cant even flash anything. Even Stock Pixel is hard on EDL, Google relies too much on 2nd stage Fastboot which isn't a good if they auto update that.

3. I'm talking about this https://www.ebay.com/itm/322476443357
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
Update: Don't use the ZIP I uploaded earlier, I am trying to dump it from the bootloader img file right now, which half of prog_firehose_ddr.elf is actually in the bootloader (bootloader-sunfish-s5-0.2-6281315.img)
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
Try 000e60e10066000a_3ef72a02fb931be1_fhprg.bin I even searched the name up and found 1 result of someone looking for the same file name I generated (hopefully its valid tho)
[Google Pixel 4a Questions & Answers] xmoo:
So booting this over fastboot you mean?
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
No, over EDL, if you can get there, using this tool is recommeded if you can handle the command line http://github.com/CE1CECL/edl and doing a complete backup of flash, not just partitions.
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
If you are using windows use this template if you dont know how to use it (I cant figure out how to embed text so it will be like this for now until i figure it out later)

Command to Run:

git clone https://github.com/CE1CECL/edl

cd edl

git submodule update --init --recursive

pip3 install -r requirements.txt

----------------------

Copy 000e60e10066000a_3ef72a02fb931be1_fhprg.bin to the EDL folder where you cloned it to and then run something like this

python .\edl.py rf arcaneos.bak --loader=000e60e10066000a_3ef72a02fb931be1_fhprg.bin

Just make sure you have python 3.9, git and usbdk from the README of the repo.

If its too large let me know if you need something to upload it with (if you get what i mean), Once i get it i will compress it later.
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
if you can can you debug where the network for the update api is sending to? Maybe i can debug that while i wait finding a device on ebay, since i cant find anything.
[Google Pixel 4a Questions & Answers] H4xz0r:
I own a 4a phone and the cable. How to run the command on a MacOS?
[Google Pixel 4a Questions & Answers] H4xz0r:
I don't know but have been told that LineageOS has been installed on the device, see below for the image version.
[Google Pixel 4a Questions & Answers] xmoo:
The update does look like LineageOS. Guessing they took parts of different Android distro’s.
[Google Pixel 4a Questions & Answers] george.washington:
Hope it's nextdoor android security benefits
[Google Pixel 4a Questions & Answers] AngelCastillo029:
Any updates to this?
[Google Pixel 4a Questions & Answers] AngelCastillo029:
Can you try to unlock the bootloader? You can try either by `fastboot flashing unlock` command or GrapheneOS Web Installer
[Google Pixel 4a Questions & Answers] Gust45:
I have one of these ANOM devices and I still can't do anything with it
[Google Pixel 4a Questions & Answers] xmoo:
Some say it worked for them, but when trying to contacting them.... no response it given.

For me it did not work.
[Google Pixel 4a Questions & Answers] Gust45:
I read in youtube comments about some keys that are used to unlock the device and be able to make changes to it, does anyone else have information about that?
[Google Pixel 4a Questions & Answers] xmoo:
You got a link to the Youtube video where these comments are said?
[Google Pixel 4a Questions & Answers] Gust45:
View attachment 5941559View attachment 5941561View attachment 5941563
[Google Pixel 4a Questions & Answers] xmoo:
Have you tried contacting them? The 2nd guy has his Facebook profile on his Youtube page.
[Google Pixel 4a Questions & Answers] Gust45:
I not tried
[Google Pixel 4a Questions & Answers] xmoo:
Give it a try. I did see you tried getting answers from them on Youtube and they have not responded.
[Google Pixel 4a Questions & Answers] cuynu:
The only way to flash original google firmware is desolder ufs/emmc storage chip from mainboard and use jtag or any box can read and write to ufs/emmc to force flash original google firmware directly to ufs/emmc chip then solder it back to mainboard
[Google Pixel 4a Questions & Answers] ChrisEric1 CECL:
From me, other than the fact the EDL cable I sent earlier, no, it doesn't work, the EDLv2 USB-C cable still needs testing, but then again, I don't have the phone to test it with, yet I still need the cable if I get the phone, though the cable is like $10 max. Other than that no updates. No luck on entering EDL from fastboot either.
[Google Pixel 4a Questions & Answers] cuynu:
even if you can enter EDL, there is no firehose loader or raw program file to continue
[Google Pixel 4a Questions & Answers] xmoo:
Wonder if we eventually every get to know what this device is used for…
[Google Pixel 4a Questions & Answers] mayday175:
Thankyou for everyone's help with the unusual phone. I am no longer in possession of it and, for the time being, am unable to provide further details. I do have an interesting update to share, however I have made a commitment to keep this quiet for the time being. Once I have approval to tell you what I have recently learnt, I will...
[Google Pixel 4a Questions & Answers] iPDiPD:
PM me please?? I'm also in this unusual boat.
[Google Pixel 4a Questions & Answers] Sjaakiem:
This is a phone the used with that FBI ANON application to read the message with the users
[Google Pixel 4a Questions & Answers] Sjaakiem:
In the start up screen you will probably see also a user ID: 377NAY6
[Google Pixel 4a Questions & Answers] whoamanwtf:
Yeah this phone turned out to be a pretty interesting story. https://9to5google.com/2021/07/08/pixel-4a-fbi/
[Google Pixel 4a Questions & Answers] MishaalRahman:
If anyone else gets a phone running ArcaneOS, send me a message :)

Also, you're famous, OP: https://www.vice.com/en/article/n7b4gg/anom-phone-arcaneos-fbi-backdoor

XDA member unknowingly bought a Pixel phone with an FBI backdoor

The FBI reportedly sold backdoored Pixel phones to criminals, and one of those phones found its way to an XDA member.

www.xda-developers.com
[Google Pixel 4a Questions & Answers] hkjr:
Try selling the device, at half the price purchased, all problems solved
[Google Pixel 4a Questions & Answers] ro4drunn3r:
Looks like you had an "Anom Phone"

We Got the Phone the FBI Secretly Sold to Criminals

'Anom’ phones used in an FBI honeypot are mysteriously showing up on the secondary market. We bought one.

www.vice.com

Might now be able to sell it for triple the price due to novelty
[Google Pixel 4a Questions & Answers] David B.:
It would be super cool if someone with one of these phones could share the ArcaneOS image.
[Google Pixel 4a Questions & Answers] sprockkets:
You don't need the boot loader unlocked to flash a full ota update. But it may not work...
[Google Pixel 4a Questions & Answers] badaas:
They're watching you... 👁️👁️
[Google Pixel 4a Questions & Answers] yesimxev:
Let me know if you are selling it ;)
[Google Pixel 4a Questions & Answers] mayday175:
Is that comment meant for me? If yes, perhaps you missed the part where I mentioned I have already sold it to a reporter from vice.com. This is their most recent article about this story... https://www.vice.com/amp/en/article/n7b4gg/anom-phone-arcaneos-fbi-backdoor (which has been mentioned in this thread already). So no, sorry, I cannot sell it to you.
[Google Pixel 4a Questions & Answers] allweknowisa:
What do you mean tiwh "most of my money"? Don't you think that phone is actually worth more than a regular Pixel?
[Google Pixel 4a Questions & Answers] LumiD96:
i bought 4 Pixel 4a with the same Arcane OS. The guy whos sells me dont tell me that is not possible to flash the Firmware. So what can i do ?
[Google Pixel 4a Questions & Answers] mayday175:
I mean, I bought it for AUD$250 and sold it for AUD$250 (plus shipping fees)... then lost a few dollars in eBay fees. I was glad to be able to recoup that money as I was fairly confident that that Pixel 4a was as good as a brick (at least to me). Yes, it might be worth more to a researcher that is keen to understand how the FBI made this phone & app work, however I was happy to end up being almost cost neutral.

I do not know what you can do... I was not able to do anything with mine except sell it (and I consider myself lucky that I *was* able to sell it).
[Google Pixel 4a Questions & Answers] H0mmer:
It is possible to remove custom ArcaneOS and flash back to stock OS even if bootloader is locked.

If anyone want some info contact me PM...
[Google Pixel 4a Questions & Answers] wordros:
I got one from this phone, too. How can this be solved?

I think it's just something different that uses the same OS but I can't find ANOM in it.
[Google Pixel 4a Questions & Answers] Elixiron:
İnterestting
[Google Pixel 4a Questions & Answers] VladkoM:
Well,done

I pay 25€ on local developer and wait 2hours

View attachment 5364885View attachment 5364887
[Google Pixel 4a Questions & Answers] badaas:
Wtf is this thread turning into...
[Google Pixel 4a Questions & Answers] mayday175:
Wow... how did you manage that? Thats further than I ever got. Is this an AN0M phone? And can you now re-flash it with stock Angroid image?
[Google Pixel 4a Questions & Answers] paulCIA:
It's possible that some have a custom bootloader installed that disables oem unlock and flashing commands by fastboot. If these are regular off-the-shelf 4a's (ie, they don't have some kind of hardware lock on the firmware or EDL mode, and I'm guessing they don't since after all "someone" already got this far with custom firmware), it should be possible to use the qualcomm developer tools (QFIL or QPST) to overwrite the firmware with stock and re-enable flashing and unlock from EDL mode. (Fair Warning: also possible to hard brick it entirely so that it won't power on at all, so be very careful and don't do this on any devices you can't afford to lose entirely, though frankly considering who created this particular ROM you're probably better off with a hard brick than this ROM anyway)

For that you'd need the firehose programmer binary and a stock firmware image to flash. If they are the same hardware you should be able to use the tool to dump the firmware from a working one and download it to the rest once you have the firehose programmer. Unfortunately I'm not sure which one you need for the Pixel 4a, but, it may be the same one as for other 730g chipset devices (SM7150 is the product sku so something like prog_xxxx_firehose_sm7150.bin). See for example, this guide or maybe this, or a lot of other guides on this forum. Those aren't specifically for the 4a, and I'm not sure one exists, but it's probably very similar to the process for other Pixels and especially HTC Pixels (I have successfully done it on a LG-made pixel 2 xl, if I had a 4a I'd give it a shot, mayb I can get one of these on a discount :p Though again, not sure I want one considering whence they came!
[Google Pixel 4a Questions & Answers] nomesrjp:
Thanks for the information, useful. Does anyone know where I might find the correct Qualcomm firehose for the SM7150, or my best approach to extract the firmware from a functioning Pixel4a?
[Google Pixel 4a Questions & Answers] rawk1:
Got one of these today and its seems someone has had a go already and managed to "no command' the recovery and rescue mode. Fastboot unlock commands don't work on mine either, infact besides fastboot reboot, all commands either fail or not allowed while locked.

Only half a day into trying but not looking like a fun job.
[Google Pixel 4a Questions & Answers] nomesrjp:
The information below might be of use for those attempting this exercise. I still think there are components missing to bring about a full recovery, such as the xml files needed by QPST (rawprogram* and patch0), but maybe wrong. I don't have a PC ATM, so I'm not able to attempt this.

- Pixel 4a Snapdragon 730G SM7150

h**ps://en.wikipedia.org/wiki/List_of_Qualcomm_Snapdragon_processors#Snapdragon_720G/730/730G/732G_(2019/20)

- Multiboot binary firmware image (MBN) - This file contains the binary data for a device's memory partitions

h**ps://xdaforums.com/t/flashed-pixel-4a-with-pixel-5-image-by-mistake.4267097/post-85315189

h**ps://www.gadgetsdr.com/all-qualcomm-prog-emmc-firehose-programmer-file-download/

- Qualcomm Emergency Download mode (EDL) - for me the typical fastboot commands didn't work (fastboot edl, fastboot reboot-edl, etc), using fastboot version 31.0.3-7562133. I wasn't able to find strings related to edl which is likely why. As such, the following guides might assist (I'm unsure if they're applicable to sunfish). From what I gather the binary below is patched to allow for reboot-edl.

h**ps://xdaforums.com/t/guide-tool-reboot-to-edl-mode-from-fastboot-no-more-test-point-method-kenzo.3398718/

h**ps://www.ytechb.com/how-to-boot-into-edl-mode-android/

h**ps://github.com/bkerler/edl

- Qualcomm Product Support Tools (QPST) & Qualcomm Flash Image Loader (QFIL) - I believe the latest versions are QPST v2.7 Build 496 Qfil 2021 & QFIL v2.0.3.5

h**ps://www.androidbrick.com/download/
[Google Pixel 4a Questions & Answers] wireroot:
Fortunately I'm currently not in the situation where I need to revive my phone, but I was wandering the same when reading tutorials about this topic. In those tutorials they always use 3 files (as you have stated): the mbn, the rawprogram and the patch file. In one of the links you have posted the question about the last 2 files is raised:

which is answered

I am not sure if I understand the answer correctly: Are the rawprogram and the patch files not needed since an mbn file is used? Then why do the tutorials always require the triplet?
[Google Pixel 4a Questions & Answers] shaitan667:
I found some of these for sale for low prices, so purchased three of them due to the success I had last time using the GrapheneOS web installer bootloader unlock.

However this time round I haven't had any success :(

I'll keep scouring the net and researching, will post here with any relevant findings.

If anyone has anything they would like me to try, please let me know. The more people working on getting these back to normal functioning states the better.

Pixel
[Google Pixel 4a Questions & Answers] shaitan667:
Can you please provide information on how this was achieved?

This information should be available to the wider community.
[Google Pixel 4a Questions & Answers] shaitan667:
I have three of these in my possession now.
[Google Pixel 4a Questions & Answers] shaitan667:
Happy to do so if instructions can be provided on how to extract the firmware
[Google Pixel 4a Questions & Answers] David B.:
I think if you use the GrapheneOS installer tool you mentioned here to unlock the bootloader, you should be able to do it. I would suggest trying to use the GrapheneOS tool to unlock the bootloader (don't do anything else with it though). After that, I would suggest live booting TWRP using `fastboot boot YourTwrpImage.img` (don't flash it to the phone's recovery partition since you won't be able to get the ArcaneOS recovery back if you do!).

After that, try using the instructions here under the "This is How to Make Complete / Full BACKUP with TWRP" to take a backup of the phone. I believe those instructions would also include the recovery image in the backup, but it would still be a good idea to explicitly take one in case I am wrong, the instructions for explicitly taking a backup of the recovery are available in the terminal commands here.

After doing all that, reboot into ArcaneOS and copy the images you made off the SD card to your computer! Anyone who wants to then try ArcaneOS on their devices should be able to write the images to their device as long as it is the same phone and give ArcaneOS a try for themselves!

Needless to say, without having an ArcaneOS to try this on, I cannot promise that any of this would actually work, but it's worth a shot! One other thing I should mention here is that using this method to save off a copy of the image would retain any encryption on the device if any was used, so you would want to make sure that any passcodes you use on the device would be something that you are comfortable with sharing.

Additionally, it would be a good idea to share the commands that you used for taking the backup images. Output from the `dd` utility which is used for this can be passed through gzip for example to compress it further, but as a result, anyone who wants to use the image would need to know that so they can decompress it.
[Google Pixel 4a Questions & Answers] Proservisbgd:
I have a one too. Fastboot commands wont unlock bootloader.
[Google Pixel 4a Questions & Answers] David B.:
Have you tried this?

https://xdaforums.com/t/is-it-brick...oid-to-remove-arcaneos.4285827/#post-85156593
[Google Pixel 4a Questions & Answers] Proservisbgd:
Yes, i got unlock error.
[Google Pixel 4a Questions & Answers] Proservisbgd:
Any way to flash boot from factory image except via fastboot?
[Google Pixel 4a Questions & Answers] shaitan667:
I haven't been able to use the GrapheneOS web method on these three.
[Google Pixel 4a Questions & Answers] slacklinus:
I work in the forensics space and just picked one of these up from Gumtree. Also has a locked bootloaded, going to have a run at it with some of the tools I have available, see how I go.

First thing I noticed was the "Decoy PIN" which takes you into a dummy OS. List of contacts in there, looking to do some OSINT on that data at a later stage.
[Google Pixel 4a Questions & Answers] slacklinus:
Ok so some preliminary observations here:

1. Mobile forensic tools barely even recognise the device as a Pixel 4a.

2. I was able to complete a logical extraction but got virtually nothing.

3. That is normally the case when we can't for whatever reason can't enable developer options.

I'm thinking someone has already tried to reflash this device as both Recovery and Rescue modes are both "No Command".

I tried using the GrapheneOS bootloader unlocker and whilst it recognised and paired with the device it continually spat an "Error: Bootloader was not unlocked, please try again".

In rescue mode ADB can see the device when I run "adb devices" but can't seem to run any commands on the phone.

In recovery mode, ADB can't see the device at all.

Fastboot can't see the device in any mode.

Open to suggestions from here.
[Google Pixel 4a Questions & Answers] rawk1:
I thought this too... on recovery no command screen click power and volume up and it will take you to a modified stock recovery... and then if you'll be able to go to apply update via sideload and it'll see your adb device. This is where the joy ends as it wont recognise adb commands and also will start to sideload an OTA update but then fail between 40-60%.
[Google Pixel 4a Questions & Answers] slacklinus:
Thanks, I'll give that a go tonight!
[Google Pixel 4a Questions & Answers] slacklinus:
Unfortunately I've hit the same brick wall as everyone else. I have some devs who I can reach out to, I'll see what tricks they might have up their sleeves.
[Google Pixel 4a Questions & Answers] NoahColl29:
Hello, have you ever heard of Anom before? Well, basically it‘s this huge government sting run by the FBI & the AFP. Basically, they went undercover, right, and sold the phones to criminals (are you following me so far? And yes, to answer your question, this is all real things that happened in real time.) and a couple years later, they did this HUGE sting, and most of the criminals found out and then sold the phone to unsuspecting people (like what’s happened to you) for a really, really cheap price so that they could possibly avoid getting arrested. So, can you see where this is going so far? Yep, that’s right, you guessed it… the Anom phones (which were basically like a modded version of the Google Pixel 4a & Google Pixel 5a*) *I don’t know if there is a 5a, since I’m not that big of a follower of the Google devices, and if there isn’t, well then, it’s probably either the Google Pixel 5 (if that even exists) or the Google Pixel 5-something* had the software, ArcaneOS downloaded & installed on them!
[Google Pixel 4a Questions & Answers] NoahColl29:
Yeah, you got it it is!!!
[Google Pixel 4a Questions & Answers] slacklinus:
We are all very well aware what these phones are, where they came from, and how they were used. That's the whole point - some of us would like to know what the FBI/AFP did to these devices because that is interesting to us.
[Google Pixel 4a Questions & Answers] Klawchi:
solved yet? Anyone?