release notes ufed physical analyzer, version 5.2 | …

HIGHLIGHTS DEVICE SUPPORT Partial File System extraction while bypassing screen lock for 105 Samsung Android devices. Note: Requires the device’s MTP to be turned on. This extraction method is recommended for locked devices, in order to unlock the device and gain access to the data. For unlocked devices, use other methods. For devices running OS up to and including 5.1.1, the following content types may be extracted: SMS, MMS, user accounts, passwords, installed applications, user dictionaries, images/videos and data files. In some cases, the device screen lock PIN or Pattern may be recovered by opening the partial extraction in UFED Physical Analyzer. If available, the information is displayed in the Device Info area. You can use this information to unlock the device and extract additional data by performing other extraction methods, such as Logical, File System or Physical. For devices running OS 6.x, partial data files (i.e., images and videos) may be recovered. Screen lock information such as PIN or Pattern will not be recovered. Advanced Logical and File System extraction and decoding support for Apple devices running iOS 10.x beta (limited to unencrypted iTunes backup). APPS SUPPORT 8 new applications for iOS and Android devices. Now supporting decoding of call logs for Snapchat application – for both iOS and Android devices. 527 updated application versions. UFED TOUCH2, UFED TOUCH, UFED 4PC, UFED PHYSICAL ANALYZER, UFED LOGICAL ANALYZER RELEASE NOTES Version 5.2 | August 2016 NOW SUPPORTING DEVICE PROFILES +2,256 APP VERSIONS 20,165 FORENSIC DEVICE PROFILES Logical extraction Physical extraction* File System extraction Extract/disable user lock Total 124 84 109 72 362 v.5.2 8,663 4,528 4,571 2,403 20,165 Total *Including GPS devices The number of unique mobile devices with passcode capabilities is 3,781 SOLVE MORE CRIMES WITH ACCESS TO SUBJECT’S DATA STORED ON APPLE iCLOUD PRODUCTION Decrypt and decode raw data from Apple iCloud production and other tools. Gain access to nearly all data and settings stored on the device, including text messages, call logs, application information, device settings and much more. INTRODUCING UFED TOUCH2 Accelerate Investigations with Digital Insights from Cellebrite’s Next Generation Touch Platform GAIN INSIGHTS FROM THE WORLD’S MOST POPULAR GAME – POKÉMON GO Cellebrite’s latest release now provides support for the game that has gone viral – around the globe. Cellebrite introduces partial File System extraction while bypassing screen lock for 105 Samsung Android devices Version 5.2 introduces physical extraction while bypassing screen lock for 12 Samsung Galaxy S6, S6 Edge and Note 5, now running on Android OS 6

Upload: others

Post on 05-Dec-2021

19 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

HIGHLIGHTS

DEVICE SUPPORT

◼ Partial File System extraction while bypassing screen lockfor 105 Samsung Android devices. Note: Requires the device’s MTP to be turned on. This extraction method is recommended for locked devices, in order to unlock the device and gain access to the data. For unlocked devices, use other methods.• For devices running OS up to and including 5.1.1, the

following content types may be extracted: SMS, MMS, user accounts, passwords, installed applications, user dictionaries, images/videos and data files. In some cases, the device screen lock PIN or Pattern may be recovered by opening the partial extraction in UFED Physical Analyzer. If available, the information is displayed in the Device Info area. You can use this information to unlock the device and extract additional data by performing other extraction methods, such as Logical, File System or Physical.

• For devices running OS 6.x, partial data files (i.e., images and videos) may be recovered. Screen lock information such as PIN or Pattern will not be recovered.

◼ Advanced Logical and File System extraction anddecoding support for Apple devices running iOS 10.x beta (limited to unencrypted iTunes backup).

APPS SUPPORT

◼ 8 new applications for iOS and Android devices. ◼ Now supporting decoding of call logs for Snapchat

application – for both iOS and Android devices. ◼ 527 updated application versions.

UFED TOUCH2, UFED TOUCH, UFED 4PC, UFED PHYSICAL ANALYZER, UFED LOGICAL ANALYZER

RELEASE NOTESVersion 5.2 | August 2016

NOW SUPPORTING

DEVICE PROFILES

+2,256 APP VERSIONS

20,165

FORENSIC DEVICE PROFILESLogical extraction

Physical extraction*

File System extraction

Extract/disable user lock

Total

124

84

109

72

362

v.5.2

8,663

4,528

4,571

2,403

20,165

Total

*Including GPS devicesThe number of unique mobile devices with passcode capabilities is 3,781

SOLVE MORE CRIMES WITH ACCESS TO SUBJECT’S DATA STORED ON APPLE iCLOUD PRODUCTION

Decrypt and decode raw data from Apple iCloud production and other tools. Gain access to nearly all data and settings stored on the device, including text messages, call logs, application information, device settings and much more.

INTRODUCING UFED TOUCH2Accelerate Investigations with Digital Insights from Cellebrite’s Next Generation Touch Platform

GAIN INSIGHTS FROM THE WORLD’S MOST POPULAR GAME – POKÉMON GOCellebrite’s latest release now provides support for the game that has gone viral – around the globe.

Cellebrite introduces partial File System extraction while bypassing screen lock for 105 Samsung Android devices

Version 5.2 introduces physical extraction while bypassing screen lock for 12 Samsung Galaxy S6, S6 Edge and Note 5, now running on Android OS 6

Page 2: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 2

UFED TOUCH2 A Comprehensive, Standalone Mobile Forensics Solution

Built on the industry-proven UFED Touch2 platform, our next generation portable digital forensics solution empowers law enforcement, military, intelligence and e-discovery personnel to speed the capture of critical forensic intelligence and evidence from the widest variety of mobile devices and operating systems. No matter the mission requirements, UFED Touch2 reliably and intuitively extends full logical, physical and file system extraction capabilities where they are needed most – in the field or lab.

EXTRACT DATA FROM BLOCKED APPS (APK DOWNGRADE)Extract data from blocked apps (APK Downgrade) – Following our 5.0 release you now have the ability to access blocked application data via the file system extraction. Version 5.2 now provides the following new capabilities:

◼ Android 6 support - you can now extract app data fromdevices running Android OS 6.

◼ Support for shared data extractions, in addition to “no shared”data, as in previous versions.

◼ Standalone reliability ◼ Closed platform for forensically sound extractions ◼ Unmatched support for the widest range of mobile devices ◼ Proprietary hardware, software and boot loaders ◼ Modern capacitive, high-resolution, multi-touch,intuitive display

◼ HTML report viewer for onscreen viewingof reports ◼ Portable – Integrated battery ◼ All-inclusive field-ready operational kit – smaller,lighter connector tips, external hard drive and more + Field mobility in most environments

UFED TOUCH2 KEY FEATURES

UPDATEUsing multiple hash mechanism increases the extraction time. It is recommended to use SHA-256, a strong hashing signature for data integrity protection. We advise you to turn off the MD5 hashing and use the SHA-256 hashing only.

LEARN MORE NOW!

Page 3: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 3

OUR RECOMMENDATIONS FOR RETRIEVING THE MOST DATA AVAILABLE ON iOS DEVICES

Is the device locked?

Was the unlock successful?

No

No

Yes

Yes

Extract with UFED Ultimate

Extract with UFED Ultimate

Decrypt and decode data provided by Apple with

UFED Ultimate

Extract and decode with

UFED Cloud

Analyzer

Decode with UFED Ultimate

iTunes Backup

iCloud Backup

Unlock with Cellebrite

1

1

4 5

3

2 Advanced Logical, File System and Logical extractions With Cellebrite’s UFED Touch2, UFED Touch, UFED 4PC and UFED Physical Analyzer you can perform Advanced Logical, File System and Logical extractions to extract and decode data from various iOS devices.

Cellebrite’s unique unlocking capabilities With Cellebrite’s UFED and Cellebrite’s CAIS, you can unlock a multitude of Apple devices running various iOS versions.

iTunes Backup decoding When the device is locked, you can decode iTunes Backup using UFED Physical Analyzer. Apple users have a couple of options to back up their devices, using iTunes or using iCloud. iTunes is a local backup of the device, completed when the user connects the device to a trusted PC.

Decrypt and decode data produced by Apple and other sources You can now decrypt and decode encrypted iCloud search warrant data returned from Apple. iCloud is a remote backup of the device stored on Apple servers. If the user decided to back up the information to iCloud, the backup may be initiated when the user is connected to Wi-Fi – anytime and anywhere. The device backup on iCloud contains critical information needed for an investigation.

With UFED Physical Analyzer version 5.2, you can decrypt and decode raw data produced by Apple and other tools, providing you with nearly all the data and settings stored on the device, i.e. text messages, call logs, application information and device settings.

To decode the iCloud Backup data, use Open (Advanced) function--> Select Device-->Select the Apple vendor or search for Apple iCloud (backup) device--> Select the relevant plug-in--> click Next and Finish.

Note: UFED Physical Analyzer supports many different formats of the data produced by Apple (not all formats are supported).

Extract and decode iCloud Backup data With UFED Cloud Analyzer 5.2, you can extract a subject’s device content backup stored on iCloud using the iCloud username and password or login information from a PC.

1

2

3

4

5

Page 4: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 4

◼ Disclose cell towers and wireless network connections –To assist you in tracking a device owner’s connection to cell towers or Wi-Fi networks, you can disclose the duration of such connections. These models now include start and end timestamps.

◼ Observe report’s creation time in reports – The report’screation timestamp is now included in all report formats, allowing you to preserve the exact time you generated a report.

◼ Recognize device owner in chats – When analyzing achat conversation between multiple participants, it may be challenging to figure out the device owner. Version 5.2 now indicates the device owner out of the full list of participants in any chat conversation (both in the UI and reports).

◼ View or hide extraction source information in reports –Customize your report and determine whether or not to include the extraction source type in your report. You now have the ability to hide this information by selecting the hide extraction source indication when generating a new report.

◼ Track list of decoded applications in Trace window –You can now view logs for each decoded app in the trace log, assisting you in tracking the apps decoding progress.

◼ View additional information in the context of device infoelements – Each device info element has a tooltip that provides description, additional info or context.

UFED PHYSICAL ANALYZER AND UFED LOGICAL ANALYZER FUNCTIONALITY

REMINDERWhen merging different extractions in UFED Physical Analyzer, you have the option to configure and include the merged (duplicate) items within your output report.

In the report wizard, there are two settings available:

1) Include merged items (analyzed data).

2) Include merged items (data file).

These two settings are unselected by default, meaning your report output will not include duplicate items. When these settings are selected, your report will include all items including duplicate items. The total numbers of items selected

for the report may change based on these settings.

You may also change the default value of these settings in the general settings.

Page 5: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 5

SOLVED ISSUES

UFED Touch, UFED 4PC1. Better handling of SIM LTE/4G/NFC extractions.

UFED Physical Analyzer, UFED Logical Analyzer1. Several failure issues when opening the UFED Reader

have been resolved.2. An issue with SMS PDU Search in the Hex windows

has been resolved.3. A decoding issue of SMS messages for Huawei MT7-

UL00 Ascend Mate 7 device has been resolved. 4. A decoding issue of SMS messages for LG GB255G

device has been resolved. 5. A decoding issue of SMS messages for Nokia 108

(RM-944) device has been resolved. 6. A decoding issue of deleted SMS messages for Nokia

C3-01.5 RM-776 device has been resolved.7. A decoding issue of BlackBerry Z10 Chip-Off has

been resolved.8. A decoding issue of Nokia Lumia 735 Chip-Off has

been resolved. 9. A decoding issue of emails for Nokia 925.1 device has

been resolved. 10. A decryption failure issue of several files as part of

Advanced Logical extraction is now resolved. 11. A decoding issue of Tango app version 3.21.194837

for Android devices has been resolved. 12. A decoding issue of call logs for Nokia 105 (RM-1133

and RM-1134) has been resolved.13. A decoding issue of KeepSafe app related to folder

names under the file system node in the project tree, has been resolved.

14. A decoding issue of location timestamps in Apple maps has been resolved, now including time zone offset.

15. A decoding issue in Apple maps has been resolved, now including the file source information.

16. A failure issue with opening session files in UFED Reader has been resolved.

17. A decoding issue of Find My iPhone app via Advanced Logical extraction using method 2 has been resolved.

18. A decoding issue of WhatsApp version 2.16.6.6 for iOS devices has been resolved.

19. A decoding issue of missing partitions for Panasonic Chip-off has been resolved.

APP SUPPORT

iOS

ANDROID

Application Type Decoding FeatureAliwangwang Social Network User accountCtrip Chinese Travel User account

Application Type Decoding FeatureAliwangwang Social Network Chats, contacts and user

accountCtrip Chinese Travel User account and

searched itemsGoogle Keep (Native Android app)

Tools Notes

HTC Notes (Native Android app)

Tools Notes

Pokémon Go Game User account and Locations

QuickMemo+ (Native Android app)

Tools Notes

TextMe Up Free Calling & Texts

Communication Chats, contacts and user account

Verizon Messages

Communication SMS

iOS: NEW AND UPDATED APPS2 NEW Apps

240 UPDATED Apps

Any Do 3.5.2, 3.6.1, 3.6.4.8

Ask.FM 3.2, 3.5.2, 3.6, 3.7

Badoo 4.21.0, 4.29.0, 4.31.0

BBM 294.0.0.24

BeeTalk 1.14.0, 1.17.0, 1.18.0

Blendr 4.21.0, 4.29.0, 4.32.0, 4.4.0

Page 6: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 6

Booking.com 11.4, 12.0.2

Chrome 49.0.2623.109, 51.0.2704.64, 51.0.2704.104

Copy 3.4

Ctrip 3.4.4, 4.0.2

Dolphin Browser 9.8.2, 9.10.0, 9.10.2

Don't Touch This 2.6

Dropbox 6.2, 10.2, 11.2

Ebuddy XMS 2.3.7

Endomondo 16.3.1, 16.5.0, 16.6.1

Evernote 7.7.9.316015, 7.12, 7.14.345370, 7.15

Expedia 6.9, 6.10.1, 6.11

Facebook 52.0, 56, 58

Facebook Messenger 64.0, 65, 73, 77

Find My iPhone 4

FireChat 7.3.5, 7.3.8, 7.4.5, 7.5.3

Firefox 3.0, 4

Flipboard 3.3.18, 3.3.21, 3.3.22

Fring 7.0.0.6

Garmin Mobile 3.4, 3.6.0.12, 3.7

Glide 4.8.0, 5.0.0, 5.0.0.14001.42

Go Chat 1.8

Google+ 5.0.108309866.4998

Google Tasks 4.9.1, 4.9.2, 4.9.3

Google Translate 4.4.13869, 5.0.30026, 5.1.0

Google Maps 4.17.0, 4.17.79283, 4.19.84375, 4.20.1

Hangouts 8.1.0, 8.1.24869, 10.0.26631

HeyTell 3.4.1, 3.4.1.621

Hot or Not 4.29.0, 4.31.0

ICQ 6.4.0, 6.6.1, 6.7.3

Instagram 7.19.1, 8.2, 8.3

InstaMessage 2.4.2, 2.5.2, 2.5.3

Kakao Story 3.8.2

KakaoTalk 5.5.3, 5.6.7, 5.7.0

KeepSafe 6.2, 7

KIK 10.4.0, 10.8.0

LINE 6.0.0, 6.3.1, 6.4, 6.6.0

LinkedIn 9.0.12, 9.0.21, 9.0.23

Mail.ru 5.4.1.11904

Meet24 1.7.35, 1.7.37

MeetMe 11.0.0, 11.1.1.0

Meow Chat 2.20.7

Mercury Browser 10.0.1

Momo 6.1, 6.6.16, 6.9.4

MotionX 24.1

My Hidden Folder 1.2

Mysms 4.3.3

Navitel 9.6.2519

Nike+ Running 4.8.7

Nimbuzz 5.2.0, 5.3.0, 5.4.0

Odnoklassniki 5.7.4, 5.7.8, 5.7.10

Omegle 1.0, 3.8.3.1, 3.9.3.3, 3.9.5

ooVoo 2.7.1, 2.7.4

Opera Mini 13.0.0, 13.0.1.100754, 14.0.0

Pinterest 6.0.1, 6.0.2, 6.3, 6.4.1

Puffin Browser 4.7.3, 5.0.3

QQ 6.3.0.440, 6.3.5, 6.5.0

QQ Browser 6.5.0, 6.6.0.2229, 6.7.2, 6.8

Remember The Milk 4.0.47, 4.0.48

Runtastic 6.3.0.4, 6.7.2, 6.8.1, 6.8.4

Scruff 5.0112, 5.0113

Skout 4.17.3, 4.17.6

Skype 6.9.1, 6.13, 6.13.0.158, 6.16, 6.17.1

Snapchat 9.27.5.0, 9.31.1, 9.33.1.0

SpringPad FlipNote 1

Tango 3.21, 3.22.202970, 5.0.1.12

Text Free Ultra Texting

9.0.11, 9.0.16, 9.2

Text Me 2.8.4

Text Now 6.4.1, 6.9.2, 6.11

TextPlus 6.0.6

Threema 2.6.2, 2.7.1, 2.7.2

TigerText 6.0, 6.1.1

Tinder 4.8.2, 5.1.0, 5.2.0

Touch 3.4.4

Truecaller 6.7, 6.7.3, 6.7.4

Tumblr 5.6, 6.1.2, 6.3

Twitter 6.5, 6.54, 6.56

UC Browser 10.7.2.795

vBrowse 4

Viber 5.8.1, 6.1, 6.1.5

Vine 5.9.0, 5.21.0, 5.25.0

Vkontakte 2.6

Voxer 3.10.2.5373

Waze 4.3.0, 4.4, 4.8.0

WeChat 6.3.15, 6.3.19, 6.3.22

Weibo 6.3.1, 6.4.0, 6.6.0, 6.6.1

WhatsApp 2.16.1, 2.16.6

Whisper 5.8.12, 5.8.13, 6.2.0, 6.2.3

Yahoo Mail 4.1, 4.2, 4.4.0

Yahoo Messenger 2.2.9

Yahoo Search 3.1.2

Yandex Browser 16.2.0.6967, 16.4.1.9336, 16.4.1.9336

Yandex Mail 3.0.9

Yandex maps 8.0

Yik Yak 3.3.1, 3.5

ANDROID: NEW AND UPDATED APPS8 NEW Apps

255 UPDATED Apps

Any Do 3.4.16.1, 3.4.17.0

Ask.FM 2.4, 3.7

AVG Antivirus 4.4.2, 5.1.3.1, 5.4.1.1

Badoo 4.18.1, 4.44.0

Baidu Browser 6.4.0.1, 6.4.0.4

BBM 2.13.0.22, 2.13.1.14

Bee Talk 2.1.6

BlackList 4.91

Blender 4.32.0, 4.40.4, 4.44.1

Booking.com 9.8, 10.3.1, 10.5

Chrome 49.0.2623.105, 50.0.2661.89, 51.0.2704.81

Copy 4.0.02.0773

Ctrip 3.4.4, 4.02

Desk Notes 2.0.2

Dolphin Browser 11.5.5, 11.5.7

Dropbox 6.2.4, 8.2.4, 9.2.4

Ebuddy XMS 2.21.5

Endomondo 16.3.0, 16.6.2

Evernote 7.7, 7.8.2, 7.9.2

Expedia 6.9.0, 6.10.0, 6.11.2

Facebook 70.0.0.22.83, 79.0.0.18.71, 83.0.0.20.71

Page 7: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 7

Facebook Messenger 64.0.0.10.83, 73.0.0.15.70, 77.0.0.27.71

FireChat 7.9.9, 7.9.16

Firefox 42, 45.0.1

Flipboard 3.4.0, 3.4.6, 3.4.7

Glide 2.03.043, 9.530.110

Gmail 6.0.115979076, 6.5-1.123769152

Go SMS Pro 6.34, 7.03, 7.06

Google Docs 1.6.112.15.35, 1.6.192.06.35

Google Drive 2.3.631.15.35, 2.4.181.13.35, 2.4.211.30.36

Google Photos 1.17.0.118258643, 1.21.0.123444480, 1.23.0.125818713

Google Quick Search Box

1.3, 2.22

Google Tasks 2.2.6, 2.2.9

Google Translate 4.4.0.RC01.104701208, 5.1.0.RC04.124179590

Google+ 7.5.0.11765045, 8.0.0.123904538, 8.1.0.124973427

Google Maps 9.22.2, 9.26.1, 9.27.2

Hangouts 8.1.121732641, 10.0.123391178

Here Maps 1.1.10331, 1.1.10402

HeyTell 3.2.1.419

Hide My Text 2.7.00, 2.7.01

Hide SMS 1.6.2, 2.3

Hot or Not 3.8.1, 4.38.2, 4.42.2

ICQ 6.6, 6.7, 6.8

Inbox 1.24 (123364378), 1.26

Instagram 7.19.1, 8.2.0, 8.3.0

InstaMessage 2.2.6, 2.3.7, 2.3.8

Kakao Story 3.7.4, 3.8.3

KakaoTalk 5.5.5, 5.6.8, 5.7.1

KeepSafe 6.9.0, 7.1.1, 7.2.4

KIK 10.0.0.5324, 10.6.0.6560, 10.8.0.7090

LINE 6.0.3, 6.3.2, 6.4.1

LinkedIn 3.5.4, 4.0.36, 4.0.50

Mail.ru 4.0.0.13781, 4.4.0.15562

Mappy 5.1622.7670

me2day 3.2.64

Meet24 1.26.4, 1.26.6

MeetMe 11.1.0.389

Meow Chat 2.22.9

Mercury Browser 3.2.3

Momo 6.6.2, 6.9.1

Mozilla Firefox 47

Mr. Number 3.0.1, 3.2.2

MySMS 6.3.2

Nike+ Running 1.7.9

Nimbuzz 4.2.1, 4.4.1

Odnoklassniki 16.3.18, 16.6.3, 16.6.17

Omegle 1.1.40

One Drive 4.0.4, 4.2

One Note 15.1.6330.4427, 15.1.6821.4825, 16.0.6965.1812

ooVoo 2.6.8, 2.7.0

Opera Classic 33.0.2002.97426

Opera Mini 12.0.1987.97260, 15.0.2125.101257, 17.0.2211.105178

Outlook 1.3.25, 2.1.33, 2.0.57

Path 5.1.2, 5.2.2, 5.3.1

Pinterest 5.6.2, 5.12.1, 5.17.0

Puffin Browser 4.7.3.2441, 4.7.4.2567, 4.8.0.2790

QQ 3.4.3, 3.5.0, 5.9.6

QQ Browser 1.1.0.0025, 5.8.0.1460

Remember The Milk 4.0.20, 4.0.21

Runtastic 6.3, 6.7.2, 6.8.3

Scruff 4.7083

Skout 4.18.11, 4.18.22, 4.19.6

Skype 6.27.0.719, 7.01.0.669, 7.05.0.514

Snapchat 9.31.6.0, 9.33.1.0

Swarm 2016.03.24, 2016.05.31, 2016.06.20

Sygic 16.0.12, 16.1.8, 16.2.11

Tango 3.21.199416, 3.23.205103, 3.23.205725

Telegram 3.9.1, 3.10.1

Text Free Ultra Texting

5.16.1

Text Me 2.8.11

Text Now 4.10.1, 4.13.1

TextPlus 6.0.4

Text Secure 3.16.0

Tinder 5.0.5, 5.2.0

Touch 6.3.1.91

Truecaller 6.6, 6.11, 7.35

Tumblr 4.9.0.03, 6.3.0.05

TunnelBear 129, v131

Twitter 5.102.0, 5.111.0, 6.3.0.05

UC Browser 10.9.0, 10.9.8.770, 10.10.5.809

Vaulty 4.3.1 r4197, 4.3.3 r4284

vBrowse 2.6.3

Viber 5.8.0.1736, 6.1.0.2369, 6.1.5.93

Vine 3.3.10, 5.10.0, 5.24.0

Vkontakte 3.15.2, 4.2

VIPole 1.7.5

Voxer 3.6.0.16922, 3.7.0.16992

Waze 3.9.6.0, 4.4.0.0, 4.0.1.1

WeChat 6.3.15.65_r81g6835, 6.3.18

Weibo 6.3.1, 6.5.1, 6.6.1

WhatsApp 2.12.556, 2.16.95, 2.16.133

Whisper 6.2.4, 6.3.0

Wickr 2.6.4.1

Yahoo Mail 5.0.8, 5.3.4, 5.6.5

Yahoo Search 6.6.13

Yandex Browser 15.6.2311.6088, 16.2.0.5397

YouTube 11.23.56

BLACKBERRY: NEW AND UPDATED APPS8 UPDATED Apps

WINDOWS PHONE: NEW AND UPDATED APPS14 UPDATED Apps

BBM 10.13.5.9 ,10.13.5.10

Evernote 5.8.1.1123

LinkedIn 10.1.31.322

Skype 6.1.0.16424

Twitter 10.6.31.2

WhatsApp 2.16.1.2, 2.16.50.2

Facebook 5.3.9.0

Facebook messenger 11.0.1.0

KIK 1.2.0.0

Nimbuzz 2.3.0.0

Odnoklassniki 3.4.7.0

Page 8: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 8

PARTIAL FILE SYSTEM EXTRACTION WHILE BYPASSING SCREEN LOCK

105 Samsung devices supported

Samsung CDMA SM-T377V Galaxy Tab E 8.0,SPH-L500,SM-T567V Galaxy Tab E 9.6,SCH-i705 Galaxy Tab 2,SM-T807V Galaxy Tab S,SM-T817P Galaxy Tab S2,SPH-M820 Galaxy Prevail,SCH-I829 Galaxy Style Duos,SCH-I879 Galaxy Grand,SCH-i905 Galaxy Tab 10.1 LTE,SCH-I915 Galaxy Tab 10.1 Note II,SM-N920V Galaxy Note 5,SM-G925P Galaxy S6 Edge,SM-G928V Galaxy S6 Edge+,SM-G930R7 Galaxy S7,SM-G930P Galaxy S7,SM-G935P Galaxy S7 edge,SM-G935V Galaxy S7 Edge,SM-G930V Galaxy S7,SPH-M950 Galaxy Reverb,SM-J100V Galaxy J1,SM-N930V,SM-G3819D Galaxy Win Pro

Samsung GSM SC-05G (Galaxy S6),SM-J100H Galaxy J1,SM-J120A Galaxy J1 2016,SM-C101 Galaxy S4 Zoom,SM-J110M Galaxy J1 Ace,SM-J200F Galaxy J2,SHV-E160K Galaxy Note,SM-T215 Galaxy Tab 3 7.0,SM-J320A Galaxy J3 2016,SM-G3568V Galaxy Core Mini 4G,SM-T350 Galaxy Tab A 8.0,SM-G361F Galaxy Core Prime,SM-T377A Galaxy Tab E,SGH-i407 Galaxy Amp,SM-A500F Galaxy A5,SM-A500W Galaxy A5,SM-A800YZ Galaxy A8,SM-A510F Galaxy A5 2016,SM-G531F Galaxy Grand Prime,SM-G531H Galaxy Grand Prime,SM-G530FZ Galaxy Grand Prime,SM-G550T Galaxy On5,SM-G550T1 Galaxy On5,SM-T677A Galaxy View,SM-J700F Galaxy J7,SM-J700T Galaxy J7,SM-J700T1 Galaxy J7,SGH-I717D Galaxy Note,SGH-i717M Galaxy Note,SGH-i717R Galaxy Note,SM-T810 Galaxy Tab S2 9.7,SM-T817A Galaxy Tab S2,SGH-T879 Galaxy Note,SM-G891A,SM-G903F Galaxy S5 Neo,SM-G920T Galaxy S6,SM-G925F Galaxy S6 Edge,SM-G930A Galaxy S7,SM-G930T Galaxy S7,SM-G930T1 Galaxy S7,SM-N920A Galaxy Note 5,SGH-i927 Captivate Glide,SM-G928A Galaxy S6 Edge+,SM-G928F Galaxy S6 Edge+,SM-G928i Galaxy S6 edge+,SM-G930F Galaxy S7,SM-G935A Galaxy S7 edge,SM-G935T Galaxy S7 edge,SM-G935FD Galaxy S7 edge,GT-S5280 Galaxy Star,GT-S5301L Galaxy Pocket,GT-S5303 Galaxy Y Plus,GT-B5330 Galaxy Ch@t,GT-S6010 Galaxy Music,GT-S6012 Galaxy Music Duos,GT-S6800 Galaxy Ace Advance,GT-S6802,GT-S6818 Galaxy Fame,N7005 Galaxy Note LTE,GT-S7262 Galaxy Star Plus,GT-P7500 Galaxy Tab 10.1,SM-N7508V Galaxy Note 3 Neo,SM-A8000 Galaxy A8,SM-A8000 Galaxy A8 Duos,SM-N750 Galaxy Note 3 Neo,GT-I9060I Galaxy Grand Neo Plus,GT-I9152 Galaxy Mega 5.8,SM-N9200 Galaxy Note 5,SM-G9208 Galaxy S6

Tablets Samsung SM-T215 Galaxy Tab 3 7.0,Samsung SM-T350 Galaxy Tab A 8.0,Samsung SM-T377V Galaxy Tab E 8.0,Samsung SM-T567V Galaxy Tab E 9.6,Samsung SM-T807V Galaxy Tab S,Motorola MZ609 XYBoard 8.2,Samsung SM-T677A Galaxy View,Samsung SCH-i705 Galaxy Tab 2,SM-T810 Galaxy Tab S2 9.7,Samsung SM-T817A Galaxy Tab S2,Samsung SCH-i905 Galaxy Tab 10.1 LTE,Samsung SCH-I915 Galaxy Tab 10.1 Note II,Samsung GT-P7500 Galaxy Tab 10.1

PHYSICAL EXTRACTION WHILE BYPASSING USER LOCK USING

RECOVERY PARTITION METHOD

12 Samsung Galaxy devices running Android OS6

Samsung CDMA SM-G920P Galaxy S6, SM-G928P Galaxy S6 Edge+, SM-N920P Galaxy Note 5

Samsung GSM SM-G920F Galaxy S6, SM-G920I Galaxy S6, SM-G920T Galaxy S6, SM-G920W8 Galaxy S6, SM-G928C Galaxy S6 Edge+, SM-G928F Galaxy S6 Edge+, SM-G928T Galaxy S6 Edge+, SM-N920T Galaxy Note 5, SM-N920I Galaxy Note 5

PHYSICAL EXTRACTION WHILE BYPASSING LOCK

57 NEW devices supported

AKAI Aristo 45

Acer Z520 Liquid

Allview Sign E3, X2 Soul Mini

BLU S0151UU 01 Studio X Mini, D940i Vivo 4.8 HD Realtime

Chinese phones Coral 255, HQ-U2011

Chinese Android phones

UMI X2, Bluboo XFire

Cubot S208

Gionee Elife S5.5

Huawei KIW-AL10 Honor 5X, ATH-AL00 Honor 7i, RIO-CL00 G7 Plus, RIO-AL00 G7 Plus

Lava A1

Lenovo A3000 IdeaPad, A3500-FL

LeTV X600 One

LG GSM K121 K4, 410f K10, K420n K10, MS428 K10, US550 Logos, H731 G4 Vigor, H961N V10, H901 V10

Philips S308

Samsung CDMA SM-G530P Galaxy Grand Prime

Samsung GSM SM-A500H Galaxy A5, SM-A5000 Galaxy A5, SM-J500H Galaxy J5, SM-G530FZ Galaxy Grand Prime, SM-G530W Galaxy Grand Prime, SM-G750H Galaxy Mega 2 Duos, SM-S978L Galaxy E5, SM-G386T Galaxy Avant, SM-G386T1 Galaxy Avant, SM-G310HN Galaxy Ace Style, SM-A500F Galaxy A5, SM-G928F Galaxy S6 Edge+, GT-S7270 Galaxy Ace 3, GT-S7582 Galaxy S Duos 2

Tablets VDF 1100 Tab Mini 7, Vodafone VF-1296 Tab Grand 6, Smart Tab 3G, Vonino Xavy_T7, Samsung GT-P3113TS Galaxy Tab 2 7.0

Vodafone VDF 300 Smart Mini 7, Vodafone VF-1296 Tab Grand 6, VDF 1100 Tab Mini 7, Smart Tab 3G

Vonino Xavy_T7

Wiko Lenny2

Xiaomi Redmi Note 2

ZTE GSM Orange Dive 30

ooVoo 1.0.6.82

Skype 2.27.0.20

Twitter 3.2.0.1

Viber 4.5.4

Voxer 0.9.30.0

Waze 3.7.4.5

WeChat 6.0.8.17

WhatsApp 2.16.14.0, 2.16.64.0

Page 9: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 9

PHYSICAL EXTRACTION

84 NEW devices supported

AKAI Aristo 45

Acer Z410 Liquid, Z520 Liquid

Alcatel A205G-B, OT-815 One Touch, 875T, 2012G One Touch, 4060A

Allview Sign E3, A5 Quad Plus

BLU S0151UU 01 Studio X Mini, T179 Aria II, D940i Vivo 4.8 HD Realtime

Chinese phones iRadish Y6 Smart Watch, FoxPhone F88 Brand, Coral 255, HQ-U2011, YXTEL K5000 C3303i

Chinese Android phones

UMI X2, Bluboo XFire

Coolpad 7560T Flo

Cubot S208

Doro PhoneEasy 611

Fly IQ4490i Era Nano 10

Gionee Elife S5.5

Huawei UL20 Ascend G7, KIW-AL10 Honor 5X, ATH-AL00 Honor 7i, RIO-CL00 G7 Plus, RIO-AL00 G7 Plus, G7-L01 Ascend, M660 Ascend Q

Lava A1

Lenovo A3000 IdeaPad, A3500-FL

LeTV X600 One

LG GSM K121 K4, 410f K10, K420n K10, MS428 K10, US550 Logos, P659 Optimus F3, D685 Pro Light, H731 G4 Vigor, H961N V10, E460 L5 II, H901 V10

Nokia GSM 130 (RM-1037), Asha 208.1 (RM-948)

OnePlus 2 A2001

Philips S308

Prestigio MultiPhone PAP5400 DUO

Samsung CDMA SM-G530P Galaxy Grand Prime

Samsung GSM SM-A500H Galaxy A5, SM-A500W Galaxy A5, SM-A5000 Galaxy A5, SM-J500H Galaxy J5, SM-G530FZ Galaxy Grand Prime, SM-G530W Galaxy Grand Prime, SM-G750H Galaxy Mega 2 Duos, SM-N9000Q Galaxy Note 3, SM-S978L Galaxy E5, SM-G386T Galaxy Avant, SM-G386T1 Galaxy Avant, SM-A500F Galaxy A5, SM-G928F Galaxy S6 Edge+, GT-P5200 Galaxy Tab 3 10.1

Sony (SonyEricsson) SOL22 Xperia UL, D2004 Xperia E1

Tablets VDF 1100 Tab Mini 7, Vodafone VF-1296 Tab Grand 6, Smart Tab 3G, Vonino Xavy_T7, Samsung GT-P5200 Galaxy Tab 3 10.1

Vodafone VDF 300 Smart Mini 7, Vodafone VF-1296 Tab Grand 6, VDF 1100 Tab Mini 7, Smart Tab 3G, 890N Smart 4 Turbo

Vonino Xavy_T7

Wiko Lenny2, Ridge Fab 4G, Riff, Riff 2, Lubi 4

Xiaomi Redmi Note 2

ZTE GSM Orange Dive 30

FILE SYSTEM EXTRACTION

109 NEW devices supported

AKAI Aristo 45

Acer Z410 Liquid, Z520 Liquid

Alcatel A205G-B, OT-815 One Touch, 875T, 2012G One Touch, 4060A

Allview Sign E3, A5 Quad Plus

BLU S0151UU 01 Studio X Mini, T179 Aria II, D940i Vivo 4.8 HD Realtime

Chinese phones iRadish Y6 Smart Watch, FoxPhone F88 Brand, YXTEL K5000 C3303i

Chinese Android phones

UMI X2, Fake China iPhone cphone 4

Coolpad 7560T Flo

Doro PhoneEasy 611

Fly IQ4490i Era Nano 10

Gionee Elife S5.5

Huawei UL20 Ascend G7, KIW-AL10 Honor 5X

Lenovo A3000 IdeaPad, A3500-FL

LG GSM K121 K4, 410f K10, K420n K10, MS428 K10, US550 Logos, P659 Optimus F3, D685 Pro Light, H731 G4 Vigor, H961N V10

Nokia GSM 130 (RM-1037), Asha 208.1 (RM-948), Fake Nokia E79+

Philips S308

Prestigio MultiPhone PAP5400 DUO

Samsung GSM SM-A500H Galaxy A5, SM-A500W Galaxy A5, SM-A5000 Galaxy A5, SM-J500H Galaxy J5, SM-G530FZ Galaxy Grand Prime, SM-G530W Galaxy Grand Prime, SM-G750H Galaxy Mega 2 Duos, SM-N9000Q Galaxy Note 3, SM-S978L Galaxy E5

Tablets VDF 1100 Tab Mini 7, Vodafone VF-1296 Tab Grand 6, Smart Tab 3G

Vodafone VDF 300 Smart Mini 7, Vodafone VF-1296 Tab Grand 6, VDF 1100 Tab Mini 7, Smart Tab 3G

Wiko Lenny2, Ridge Fab 4G, Riff, Riff 2, Lubi 4

Samsung CDMA SM-G530P Galaxy Grand Prime

Samsung GSM SM-A500H Galaxy A5, SM-A500W Galaxy A5, SM-A5000 Galaxy A5, SM-J500H Galaxy J5, SM-G530FZ Galaxy Grand Prime, SM-G530W Galaxy Grand Prime, SM-G750H Galaxy Mega 2 Duos, SM-N9000Q Galaxy Note 3, SM-S978L Galaxy E5, SM-G386T Galaxy Avant, SM-G386T1 Galaxy Avant, SM-A500F Galaxy A5, SM-G928F Galaxy S6 Edge+, GT-P5200 Galaxy Tab 3 10.1

Sony (SonyEricsson) SOL22 Xperia UL, D2004 Xperia E1

Tablets VDF 1100 Tab Mini 7, Vodafone VF-1296 Tab Grand 6, Smart Tab 3G, Vonino Xavy_T7, Samsung GT-P5200 Galaxy Tab 3 10.1

Vodafone VDF 300 Smart Mini 7, Vodafone VF-1296 Tab Grand 6, VDF 1100 Tab Mini 7, Smart Tab 3G, 890N Smart 4 Turbo

Vonino Xavy_T7

Wiko Lenny2, Ridge Fab 4G, Riff, Riff 2, Lubi 4

Page 10: RELEASE NOTES UFED PHYSICAL ANALYZER, Version 5.2 | …

Cellebrite Release Notes | v5.2 | August 2016 | 10

LOGICAL EXTRACTION

124 NEW devices supported

AKAI Aristo 45

Acer Z410 Liquid, Z520 Liquid, B1-770 Iconia One 7

Alcatel 4060A

Allview Sign E3, A5 Quad Plus

Asus T001 Zenfone 4

BLU S0151UU 01 Studio X Mini, T179 Aria II, D390L Dash C Music Realtime, D940i Vivo 4.8 HD Realtime

Chinese phones iRadish Y6 Smart Watch, FoxPhone F88 Brand, D100 Argom (USB), D100 Argom (BT), Coral 255, HQ-U2011, YXTEL K5000 C3303i

Chinese Android phones

Oukitel U2, UMI Iron Pro, UMI X2, Doogee X5 Pro, Pendo PP4MT-7 Pad 7, MPI9082

Coolpad A8-831 Max, A8-930 Max, 3622A, 7560T Flo

Doro PhoneEasy 624

Doro Liberto 825

Fly TS91, IQ4490i Era Nano 10

Gionee Elife S5.5

Google C1502W Pixel C

HTC HTCD160LVW

Huawei NXT-CL00 Mate 8, EVA-L09 P9, NXT-AL10 Mate 8, KIW-AL10 Honor 5X, UL20 Ascend G7, ALE-L02 P8 Lite, KIW-L24 TexasA1, Y538 Union

Kyocera E6820

Lenovo Smart Tab II 10, A3000 IdeaPad, A3500-FL

LG GSM K120 K4,K120E K4,K121 K4,410f K10,MS428 K10,MS550 Stylo 2 Plus,K420n K10,K430Y K10,K500N X screen,US550 Logos,D685 Pro Light,H731 G4 Vigor,H961N V10,V935 G Pad II 10.1,A395

Microsoft Lumia 435 (RM-1068) (USB), Lumia 435 (RM-1068) (BT), Lumia 532 (RM-1034) (USB), Lumia 532 (RM-1034) (BT), Lumia 540 (RM-1141) (USB), Lumia 540 (RM-1141) (BT)

Nokia GSM 130 (RM-1037), Lumia 730 (RM-1040) (USB), Lumia 730 (RM-1040) (BT)

Oppo R7s Plus

Philips S308

Prestigio MultiPhone PAP5400 DUO

Samsung CDMA SM-N930V

Samsung GSM SM-J100H Galaxy J1, SM-T113 Galaxy Tab 3 Lite 7.0, SM-G361H Galaxy Core Prime, SM-J500H Galaxy J5, SM-A500H Galaxy A5, SM-A500W Galaxy A5, SM-G530FZ Galaxy Grand Prime, SM-G530W Galaxy Grand Prime, SM-A5000 Galaxy A5, SM-G550T Galaxy On5, SM-G550T1 Galaxy On5, SM-J700T1 Galaxy J7, SM-G750H Galaxy Mega 2 Duos, SM-N9000Q Galaxy Note 3, SM-S978L Galaxy E5, SM-G935FD Galaxy S7 edge, SM-G928i Galaxy S6 edge+, GT-E2202

Smart Phones/PDAs Windows Phone 10 (USB)

Smart Phones/PDAs Windows Phone 10 (BT)

SoftBank 301Z

Sony (SonyEricsson) Z320a

Tablets Lenovo Smart Tab II 10, Pendo PP4MT-7 Pad 7, Samsung SM-T113 Galaxy Tab 3 Lite 7.0, Google C1502W Pixel C, VDF 1100 Tab Mini 7, VF-1397 Smart Tab 4G, V935 G Pad II 10.1, Smart Tab 3G

VIVO PD1415D X6D

Vodafone VDF 300 Smart Mini 7, VDF 600 Smart Prime 7, VFD 700 Smart Ultra 7, VFD 900 Smart Platinum 7, VF-696 Smart grant, Smart Tab 3G, VF-1296 Tab Grand 6, VDF 1100 Tab Mini 7, VF-1397 Smart Tab 4G

WILLCOM WX08K

Wiko Lenny2, Ridge Fab 4G, Riff, Riff 2, Lubi 4