As the year comes to a close, the MOBILedit team doesn’t slow down in pushing boundaries with the release of a new MOBILedit Forensic 9.5. We have been focusing on security bypassing for several years, and we are proud to announce the launch of the most powerful unlocking features we’ve ever developed. To bring this to the market, we had to create a new edition called MOBILedit Forensic Ultra, allowing us to export such a dual-use tool while meeting strict regulations.
MOBILedit has already established itself as a unique solution in smartwatch forensics, a game-changer in cases where the phone is missing, but also providing access to a new type of evidence. We also believe MOBILedit leads in application analysis, extracting evidence that other tools simply miss.
These features make MOBILedit a must-have tool for any professional forensic lab. With the Ultra edition, forensic experts are equipped with the latest and most advanced technology in the field. Make sure your lab stays ahead — don’t miss out on MOBILedit Forensic Ultra.
Much Stronger Security Bypassing (ULTRA only)
MOBILedit Forensic 9.5 introduces authentication bypassing for another large group of mobile devices, now targeting Unisoc/Spreadtrum chipsets. This chipset-specific unlocking enables the extraction of physical images and authentication keys for offline decryption. Both full-disk and file-based encryption are supported. The method works across many brands, including Samsung, Motorola, Doogee, Nokia, Realme, Honor, Alcatel, ZTE and more. The latest phone models are now supported, such as the Motorola Moto G35.
With version 9.5, MOBILedit Forensic ULTRA is bridging the gap with other industry tools and positioning itself as a competitive player in the field of security bypassing.
MOBILedit Forensic ULTRA now offers advanced security bypassing methods for devices equipped with MTK, Kirin, Exynos, and Unisoc/Spreadtrum chipsets. These enhancements empower users to unlock, extract, and analyze data from thousands of phone models, from entry-level devices to high-end Android smartphones.
Explore the list of supported devices for security bypassing here.
GrayKey File System Import (PRO and ULTRA)
GrayKey file system imports supported now! With this new functionality, MOBILedit Forensic users can import iOS file system extractions created with GrayKey for advanced data analysis, including detailed application parsing. This enhancement allows investigators to uncover significantly more evidence from iOS application data, providing deeper insights for their cases.
Find detailed instructions on how to use this feature here.
Retrieve and analyze GPS Exchange Format (GPX)
With version 9.5, MOBILedit Forensic enables users to extract and analyze GPX files, widely used in GPS devices, fitness trackers, and mapping applications. GPX format stores valuable geographic data like routes, tracks, and waypoints, So crucial location-based evidence for investigations.
Device Uptime and Factory Reset Details
The latest update adds a new "Device Uptime" item to the PDF report under the "Device Properties" section. This feature provides information on how long an Android device has been running since its last restart, along with details about the last factory reset. These insights can be crucial for understanding device usage patterns during investigations.
Other New Features
Recovering of Recently Deleted messages from iOS devices.
Analyze Android device hardware usage such as flashlight, camera, screen, Wi-Fi, Bluetooth, or GPS from logs.
Cache of last displayed maps in iOS Maps now included in the analysis.
Detailed iOS Reminders app analysis.
All extracted Android Dumpsys files now listed in a new report section.
Improvements
Improved analysis for Garmin smartwatches - analysis of damaged FIT files can be valuable source of evidence in case of damaged devices and disasters.
KnowledgeC and Biome database analysis now contains more data, such as: more contacts, emails, notifications, events.
File manager now includes a new status bar with more information for better clarity.
Cursor snaps to search bar fields allowing quicker search of devices and applications.
Support for the latest Realm databases engine, providing apps such as Bazos, Dropbox, Dust, Email - Fast & Secure Mail, Grindr, Mr. Number, Rail Russia, Seznam.cz, TikTok, Trust, Xabber, Yubo, Zachranka.
Updated iOS notifications analysis with full details.
Added a notification for installation of Forensic connector app when using preview phone data function.
Offline decrypt of physical images from more devices.
Improved import compatibility of UFD files, getting more data.
Fixes
Known irrelevant data is now filtered out from reports.
Improved analysis accuracy for multiple apps.
Fixed metadata analysis of some PNG files from iOS devices.
Various bug fixes resulted in a better overall analysis.