UFED 4PC/Touch 4.1 &
UFED Physical/Logical Analyzer 4.1.1
Release Notes
January 2015
UFED Release Notes © 2015 Cellebrite. All rights reserved. 2 | P a g e
Contents
Release highlights ... 3 Additional information ... 4 Forensic methods ... 7 Supported devices ... 7End of life announcement for Windows XP ... 7
Solved issues ... 8
Release highlights
Physical/file system extraction and decoding support for additional Android OS versions –
Support for Android devices with operating system version: 4.2 to 4.4.3.
Physical extraction and decoding from Nokia Windows Phone devices – UFED now supports
physical extraction and decoding of various Nokia Lumia devices based on Windows Phone 8.0 and 8.1 operating systems. This allows users to bypass the device lock code and use UFED without the need to perform JTAG extractions.
The following table lists the supported Nokia Lumia devices that were verified for this release:
Nokia Lumia model
RM Number
520 RM-914 520.2 RM-915 521 RM-917 525 RM-998 620 RM-846 625 RM-941 720 RM-885 810 RM-878 820 RM-825 820.2 RM-824 822 RM-845 920 RM-820 920.2 RM-821 925 RM-893 925 RM-892 928 RM-860 1020 RM-877 1020 RM-875 1320 RM-995 1320 RM-994
UFED Release Notes © 2015 Cellebrite. All rights reserved. 4 | P a g e WhatsApp new encryption – UFED Physical Analyzer decrypts WhatsApp’s new encrypted chat
history database. The extension of the new encrypted file is crypt8. The decryption capability is applicable for the decoding of physical and files system extractions (excluding file system extractions using Android Backup).
Solution for prepaid devices with locked ports – Enhanced use of Bluetooth in the generic
Android profile, adding an option to load a client over a Bluetooth link. This enables users to perform logical extractions via Bluetooth on prepaid/Tracfone Android devices with damaged or locked USB ports.
Samsung
E1200R
physical extraction and decoding – Physical extraction and decoding are nowavailable for this popular “burner” phone.
New home screen – Improved, simplified and more intuitive user experience to help users perform
extractions or access required tools.
New search screen – The search screen now supports three different device identification
methods: Auto detect, search or manual selection. For more information, see ADDITIONAL INFORMATION.
Additional information
Additional Android OS – Enhanced the file system (via ADB extraction), physical extraction anddecoding of Android devices utilizing operating systems from 4.2 up to and including 4.4.3. This supports leading devices such as Samsung Galaxy series (S5, Nexus, Note 3, S3 Mini etc.) along with other leading vendors and models such as: LG, Motorola and Sony. The following table displays a selection of devices and operating systems that were verified for this release.
Note: For devices that do not appear in this table or were not yet tested, you should use the
relevant generic Android profile.
Model
Android OS
HTC 0P6B160 One M8 4.4.3 HTC 0P8B210 One Mini 2 4.4.2 HTC 0P90201 Desire 610 4.4.2 Huawei Y536A1 4.4.3 LG LG-D850 G3 4.4.2 LG LG-LS620 Volt 4.4.2 LG LG-MS323 Optimus L70 4.4.2 LG LG-VS985 G3 4.4.2 LG-VS415PP CDMA 4.4 LG-VS810PP 4.4.2 Motorola XT1032 Moto G 4.4.2 Motorola XT1058 Moto X 4.4.2 Samsung SM-900R7 Galaxy S5 4.4.2Model
Android OS
Samsung SM-G900A Galaxy S5 4.4.2 Samsung SM-G900P Galaxy S5 4.4.2 Samsung SM-T237P Galaxy Tab 4 4.4.2 Samsung SM-T330NU Galaxy Tab 4 8.0 4.4.2
UFED Release Notes © 2015 Cellebrite. All rights reserved. 6 | P a g e New home screen – The home screen now groups the extraction data into distinct areas: mobile
device, SIM card and USB device. In addition, users can directly operate the camera for immediate image capturing or access the device tools.
The new search screen supports three device identification methods:
Auto detect – Improved automatic identification of the device.
Search – Perform a global device search, from character search to an exact word search.
Manual selection – Search by selecting the vendor and model (similar to old home screen
Forensic methods
Forensic methods
New
Total
Logical extraction
141
6668
Physical extraction*
143
3052
File system extraction
71
2592
Unlock password
21
1750
Total
376
14,062
*Including GPS devices
Supported devices
141 new devices supported for logical extraction 143 new devices supported for physical extraction 21 new devices supported for "unlock password" 71 new devices supported for file system extraction
End of life announcement for Windows XP
Following the recent announcement that Microsoft has officially ceased support for Windows XP on April 8, 2014, Cellebrite recommends installing UFED Series Software Products on top of 64 bit versions of Windows 7 and above.
By February 28, 2015, the UFED Series will no longer support Windows XP.
IMPORTANT: This note does not affect any UFED Touch systems.
UFED Release Notes © 2015 Cellebrite. All rights reserved. 8 | P a g e
Solved issues
Model number for iPhone and Nokia devices – The model number for iPhone and Nokia devices is
now displayed when identifying the device.
Known limitations
Video tutorials – To reduce the size of the software installation, the video tutorials are now
available as a media package. If UFED 4PC/Touch is connected to the Internet, you will receive an automatic notification to install the video tutorials, or you download the media package from MyCellebrite and then install it via the Version tab (Settings > Version > File).
