MOBILedit Forensic 9.4 Released: WearOS Extraction, UFED full filesystem extraction and More!

 

We are excited to announce the release of MOBILedit Forensic version 9.4. This update introduces several groundbreaking features and improvements designed to significantly enhance your forensic analysis capabilities. Our continued focus on extracting evidence from smartwatches sets MOBILedit apart, making it the first product to deeply specialize in this emerging field.

Smartwatch Forensics now with advanced WearOS analysis

MOBILedit Forensic 9.4 supports the analysis of specific apps from Samsung smartwatches using the specialized Compelson smartwatch reader. This capability allows data extraction directly from the app sandbox of apps such as Gmail, Calendar, Keep, Contacts, MS Outlook, WhatsApp, Line, Strava, GPS Navigation, Samsung-specific apps, and others. This can provide valuable evidence also in situations where the phone is not available.

MTK offline decryption

New method added to MOBILedit Forensic gives power to obtain physical images and hardware keys from MediaTek chipset devices such as Xiaomi, Motorola, Samsung, Huawei, Vivo, Lenovo, Realme, Oppo, Honor, Doogee, Sony and others. This allows for faster offline decryption and introduces new security bypassing capabilities, significantly enhancing the power of MOBILedit Forensic PRO+

Faster brute forcing using GPU for ADB backups, iTunes backups and physical images

Brute forcing now running on GPU! More possibilities how to check passwords, until now there was only one method and it was running on CPU. With GPU engine Brute Forcing up to 10 - 20 times faster now!

Physical image decryption with FDE and FBE

Since 9.4 is supported also Full Disc Encryption (FDE) next to Files Based decryption (FBE) with metadata encryption. All types of Android decryption supported.

UFED full filesystem extraction parsing

With MOBILedit Forensic version 9.4, you can now import UFD files with full filesystem extractions for analysis. This major enhancement is game-changing for users combining MOBILedit and UFED tools like UFED Premium, allowing for much broader data extraction and more comprehensive analysis. UFED excels in security bypassing, while MOBILedit shines in application data parsing. Combining these tools brings exceptional results, as evidence is most often stored in apps.

More data from iOS devices

With the latest update, it is possible to obtain additional data about device unlocking events, geolocations, network usage, and more. This new feature provides deeper insights into device usage and activities.

Improvements

  • MTK physical extraction supports more chipsets and additional devices

  • Import of backups does not block UI from other tasks and shows better progress info

  • New Clouds, or updates to Clouds, can now be released by live updates

  • User Portal now includes a search tool to find supported applications for analysis

Fixes

  • Fixed analysis of various apps

  • Fixed OS version reporting for physical images with KaiOS

  • Fixed β€œNext” button for Spreadtrum physical extraction when no PAC file was chosen

  • Fixed analysis and extraction of several clouds

  • Fixed stuck UI when selecting zip file for analysis