UFED 4PC/Touch 4.1 & UFED Physical/Logical Analyzer 4.1.1 Release Notes January 2015
Contents Release highlights... 3 Additional information... 4 Forensic methods... 7 Supported devices... 7 End of life announcement for Windows XP... 7 Solved issues... 8 Known limitations... 8 UFED Release Notes 2015 Cellebrite. All rights reserved. 2 P a g e
Release highlights Physical/file system extraction and decoding support for additional Android OS versions Support for Android devices with operating system version: 4.2 to 4.4.3. Physical extraction and decoding from Nokia Windows Phone devices UFED now supports physical extraction and decoding of various Nokia Lumia devices based on Windows Phone 8.0 and 8.1 operating systems. This allows users to bypass the device lock code and use UFED without the need to perform JTAG extractions. The following table lists the supported Nokia Lumia devices that were verified for this release: Nokia Lumia model RM Number 520 RM-914 520.2 RM-915 521 RM-917 525 RM-998 620 RM-846 625 RM-941 720 RM-885 810 RM-878 820 RM-825 820.2 RM-824 822 RM-845 920 RM-820 920.2 RM-821 925 RM-893 925 RM-892 928 RM-860 1020 RM-877 1020 RM-875 1320 RM-995 1320 RM-994 UFED Release Notes 2015 Cellebrite. All rights reserved. 3 P a g e
WhatsApp new encryption UFED Physical Analyzer decrypts WhatsApp s new encrypted chat history database. The extension of the new encrypted file is crypt8. The decryption capability is applicable for the decoding of physical and files system extractions (excluding file system extractions using Android Backup). Solution for prepaid devices with locked ports Enhanced use of Bluetooth in the generic Android profile, adding an option to load a client over a Bluetooth link. This enables users to perform logical extractions via Bluetooth on prepaid/tracfone Android devices with damaged or locked USB ports. Samsung E1200R physical extraction and decoding Physical extraction and decoding are now available for this popular burner phone. New home screen Improved, simplified and more intuitive user experience to help users perform extractions or access required tools. New search screen The search screen now supports three different device identification methods: Auto detect, search or manual selection. For more information, see ADDITIONAL INFORMATION. Additional information Additional Android OS Enhanced the file system (via ADB extraction), physical extraction and decoding of Android devices utilizing operating systems from 4.2 up to and including 4.4.3. This supports leading devices such as Samsung Galaxy series (S5, Nexus, Note 3, S3 Mini etc.) along with other leading vendors and models such as: LG, Motorola and Sony. The following table displays a selection of devices and operating systems that were verified for this release. Note: For devices that do not appear in this table or were not yet tested, you should use the relevant generic Android profile. Model HTC 0P6B160 One M8 4.4.3 HTC 0P8B210 One Mini 2 4.4.2 HTC 0P90201 Desire 610 4.4.2 Huawei Y536A1 4.4.3 LG LG-D850 G3 4.4.2 LG LG-LS620 Volt 4.4.2 LG LG-MS323 Optimus L70 4.4.2 LG LG-VS985 G3 4.4.2 LG-VS415PP CDMA 4.4 LG-VS810PP 4.4.2 Motorola XT1032 Moto G 4.4.2 Motorola XT1058 Moto X 4.4.2 Samsung SM-900R7 Galaxy S5 4.4.2 Android OS UFED Release Notes 2015 Cellebrite. All rights reserved. 4 P a g e
Model Samsung SM-G900A Galaxy S5 4.4.2 Samsung SM-G900P Galaxy S5 4.4.2 Samsung SM-T237P Galaxy Tab 4 4.4.2 Samsung SM-T330NU Galaxy Tab 4 8.0 4.4.2 Android OS UFED Release Notes 2015 Cellebrite. All rights reserved. 5 P a g e
New home screen The home screen now groups the extraction data into distinct areas: mobile device, SIM card and USB device. In addition, users can directly operate the camera for immediate image capturing or access the device tools. The new search screen supports three device identification methods: Auto detect Improved automatic identification of the device. Search Perform a global device search, from character search to an exact word search. Manual selection Search by selecting the vendor and model (similar to old home screen search). UFED Release Notes 2015 Cellebrite. All rights reserved. 6 P a g e
Forensic methods Forensic methods New Total Logical extraction 141 6668 Physical extraction* 143 3052 File system extraction 71 2592 Unlock password 21 1750 Total 376 14,062 *Including GPS devices Supported devices 141 new devices supported for logical extraction 143 new devices supported for physical extraction 21 new devices supported for "unlock password" 71 new devices supported for file system extraction End of life announcement for Windows XP Following the recent announcement that Microsoft has officially ceased support for Windows XP on April 8, 2014, Cellebrite recommends installing UFED Series Software Products on top of 64 bit versions of Windows 7 and above. By February 28, 2015, the UFED Series will no longer support Windows XP. IMPORTANT: This note does not affect any UFED Touch systems. For further information you can contact: support@cellebrite.com UFED Release Notes 2015 Cellebrite. All rights reserved. 7 P a g e
Solved issues Model number for iphone and Nokia devices The model number for iphone and Nokia devices is now displayed when identifying the device. Known limitations Video tutorials To reduce the size of the software installation, the video tutorials are now available as a media package. If UFED 4PC/Touch is connected to the Internet, you will receive an automatic notification to install the video tutorials, or you download the media package from MyCellebrite and then install it via the Version tab (Settings > Version > File). UFED Release Notes 2015 Cellebrite. All rights reserved. 8 P a g e