Decoding of MTK Android Backup

Transcription

1 Release notes UFED Ultimate & UFED InField (Touch2, Touch2 Ruggedized, Touch, 4PC, Kiosk, Ruggedized Laptop & Ruggedized Tablet) & UFED Physical Analyzer, UFED Logical Analyzer & Cellebrite Reader Version 7.3 April 2018 Now supporting 24,735 device profiles 5,991 app versions Forensic device profiles Logical extraction Physical extraction* File system extraction Extract/disable user lock Total Decoding of MTK Android Backup When physical extraction is not available, you can now generate a backup of an MTK Android mobile device, even if it is locked, and decode it using UFED Physical Analyzer. For further guidance on how to initiate this backup option from the MTK device recovery partition, please refer to our whitepaper uploads/2018/04/decoding-mtk-android-backup.pdf ios: 72 updated apps AntiVirus Security (AVG) ASKfm 4.11 Badoo Blendr Booking.com 14.6 Chatous CM Security Antivirus AppLock CM Security Browser Ctrip Dropbox Evernote 7.17 Expedia v ,633 unique mobile devices with passcode capabilites Including GPS devices* Total 10,199 5,887 5,873 2,776 24,735 Facebook Facebook Messenger FireChat Firefox Flipboard Glide Glide.v Gmail release Google Calendar release Google Docs Google Drive Google Duo DR28_RC15 Google Maps Google Photos Google Grindr Hot or Not imo Inbox release Instagram Keeper KeepSafe Kik Messenger LINE LinkedIn Mappy MeetMe Musical.ly Nike+ Run Club Nimbuzz Odnoklassniki OkCupid One Drive 5.4 QFE 1 Outlook.com Pokemon GO Scruff Skout Snapchat Swarm SwiftKey

2 2 Cellebrite release notes UFED/PA v7.3 ios: 72 updated apps (cont...) Tango Text Free Ultra Texting 8.11 Text Now textplus TigerText Truecaller Tumblr Twitter Uber Vaulty release r6336 Verizon Messages Viber Vkontakte 5.4 Voxer Waze WeChat WhatsApp Whisper Yahoo Search Yandex Browser Yandex Mail 3.26 Android: 72 updated apps Aliwangwang Any.DO ASKfm 4.12 Booking.com Chatous Ctrip Ctrip (Chinese) DJI GO DJI GO Dropbox 86.2 Facebook Facebook Messenger Flipboard Foursquare 11.4 Garmin Connect Glide Gmail Google App 44.0 Google Docs Google Drive Google Duo 28.1 Google Maps 4.46 Google Translate Android: 72 updated apps (cont...) Google Grindr HERE Maps hike messenger Hot or Not Hushed Inbox Instagram 35.0 InstaMessage Kakao Story KakaoTalk Keeper 11.3 KeepSafe Kik Messenger LINE LinkedIn Mail.Ru 9.2 MobileVOIP Cheap Calls Momo 8.7 Musical.ly 6.7 Nike+ Run Club Nimbuzz OkCupid Pinterest Runtastic 8.3 SayHi 6.92 Scruff Skype 8.16 Snapchat Swarm 5.4 Taxify CI.3.33 Text Free Ultra Texting Text Me Up Text Now textplus TigerText 7.4 Tinder Twitter 7.18 Uber Viber 8.4 Vkontakte Voxer Waze 4.35 WeChat Weibo WhatsApp Whisper Yandex Browser Yandex Mail 3.5.7

3 3 Cellebrite release notes UFED/PA v7.3 Decrypting EDL - Lock-bypassing decrypted physical extraction capability for 5 Qualcomm Android devices LeTV LG CDMA Lock-bypassing physical extraction capability for 3 Qualcomm-based Samsung Galaxy S7 devices Samsung CDMA LEX727 Le Pro3 L52VL Treasure Remove user lock capability for 17 Samsung Android devices Samsung CDMA L51AL Treasure Z971 SM-G930P Galaxy S7, SM-G935V Galaxy S7 Edge, SM-G935P Galaxy S7 Edge SM-T377R4 Galaxy Tab E 8.0, SM-J320V Galaxy J3 2016, SM-G928V Galaxy S6 Edge+, SM-G928R4 Galaxy S6 Edge+ SM-S906L Galaxy S6, SC-05G (Galaxy S6), SM-S120VL Galaxy Luna, SM- S320VL Galaxy Sky, SM-J500M Galaxy J5, SM-N916S Galaxy Note 4 S-LTE, SM- T817A Galaxy Tab S2, SM-G930U Galaxy S7, SM-G900R4 Galaxy S5, SM-G928A Galaxy S6 Edge+, SM-G928G Galaxy S6 Edge+, SM-A7100 Galaxy A7 Physical extraction while bypassing lock 20 newly supported devices Physical extraction 48 newly supported devices A577VL, 1052G One Touch, 5056I One Touch Z110X Z3 M, Z130 Zoey Flex C8815, RNE-L02 Nova 2i, U8600 Move, C8813D M250N K , LM-V350AWM Chinese phones Mparty LT2, Samgle 3G 3310 Chinese Android phones LEAGOO T5, NGM Action, Vernee Mix 2, Vernee Thor E NTT Docomo SH-01G (AQUOS ZETA) Nokia GSM E71x (RM-462), TA-1032 Nokia 3, G TA-1036, TA (2017) SM-J337A J3 Neo, SM-N9500 Galaxy Note 8, SM-J727AZ Galaxy J7, SM- G892U Galaxy S8 Active, SM-G950W Galaxy S8+, Blade V7, Z899VL, Z799VL File system extraction while bypassing lock 5 newly supported devices Chinese Android phones Elephone Hisense LeTV Micromax 1052G One Touch, 5056I One Touch W100S ThL P7000 HS-U688 Infinity Pro LEX727 Le Pro3 A190 Canvas HD Plus Nokia GSM E71x (RM-462), TA (2017) Orange (SPV) Orange Dive 30 SM-S906L Galaxy S6, SC-05G (Galaxy S6), SM-T817A Galaxy Tab S2, SM-G935T Galaxy S7 Edge Tablets Samsung SM-T817A Galaxy Tab S2, Samsung GT-P3113TS Galaxy Tab A430 Blade, Z971 SM-J727AZ Galaxy J7, SM-G950W Galaxy S8+

4 4 Cellebrite release notes UFED/PA v7.3 File system extraction 47 newly supported devices Logical extraction 46 newly supported devices BlackBerry GSM A577VL, 2051D Z110X Z3 M, Z130 Zoey Flex, T274T P9981 Porche C8815, RNE-L02 Nova 2i, U8600 Move, C8813D M250N K , LM-V350AWM Chinese phones ioutdoor T1, Mparty LT2, DTNO A9, Samgle 3G 3310 Chinese Android phones LEAGOO T5, NGM Action, Vernee Mix 2, Vernee Thor E NTT Docomo Nokia GSM SH-01G (AQUOS ZETA) TA-1032 Nokia 3, G TA-1036, Fake Nokia E79+ SM-J337A J3 Neo, SM-N9500 Galaxy Note 8, SM-J727AZ Galaxy J7, SM- G892U Galaxy S8 Active, SM-G950W Galaxy S8+ Blade V7, Z899VL, Z799VL Apple BlackBerry GSM A577VL, 2051D ipad 9.7" (5th Gen) WiFi (A1822), ipad 9.7" (5th Gen) (A1823) Z110X Z3 M, Z130 Zoey Flex, T274T P9981 Porche C8815, RNE-L02 Nova 2i M250N K Chinese phones ioutdoor T1, Mparty LT2, DTNO A9, Samgle 3G 3310 Chinese Android phones Nokia GSM Oppo NGM Action E71x (RM-462), E71x (RM-462) (Using Client), 105 (TA-1037), TA-1032 Nokia 3, G TA-1036 A79 SM-J337A J3 Neo, SM-J727AZ Galaxy J7, SM-N9500 Galaxy Note 8, SM- N950W Galaxy Note 8, SM-G950W Galaxy S8, SM-G9550 Galaxy S8+, SM- G955U1 Galaxy S8+, SM-G892U Galaxy S8 Active Blade V7, Z799VL, Z899VL

5 5 Cellebrite release notes UFED/PA v7.3 Cryptographic hash values information You can validate the integrity of Cellebrite s UFED software files by verifying their cryptographic hash values. This can help you identify whether a file has been changed from its original state. Product MD5 SHA256 (Recommended) Touch (cpkg) 5a0a655fa e3411fc38e6f 366e89cc293da1811b775a5a63dfd00c9959f6e04e70021c5e1678d c Touch2 (cpkg) 349cf98c7ea67d35df6db7bdf4f8b5e0 f096b a1bcaca2cf4bc3a16426a764efb739377f9363cea2d22eee6 4PC (cpkg) a089e9448d c71de7639d113b 2aff91af2d61d64b f0297e662ec42b478ce d33876d8420 4PC (exe) 526bc319d7a5b8d031d50f3fa0cc e5ea13426c32da283bebf16d7e90e75c276476eccc007b7edf90f5af63317c UFED InField (cpkg) UFED InField (exe) Permission Manager (exe) UFED Physical Analyzer UFED Logical Analyzer Cellebrite Reader 700d74b14f83c ab2ef dfd af93779d4b36d2b2f56a0 cc0c9ba46d9f70ecc00e61eb50a06bd5 502ce54bf8de374cd18cc8bf c 0f3db4aca3875cc533196e2fa2213f4f b d802bd830f93c19814ba5e9 e1e06eb f1aaed64c17555d4db bac977afa56795d95dc870dd 730e1d8440fc960cf2acd63340a0d3044cce65c2430abbe67c a6ec54 ce272585cdd518064c5b7093d609d edc5fdda12b90f9bac5b63a3a c9af4cc06c562916e3ef387126b0b8b728ad1d719736cb38c5cada415dd2c91d f3b466f1a1fafefbb2fa ab0e65386fae3128cda2af747c1be5be45c98 d3401c5be53878ea62d70ead2a3f82670fbcacca f3ddffb8fb65a2d