XRY 6.2Release NOTes

Release daTe: w/c 19Th maRch 2012

NOw wiTh6,608 device pROfiles suppORTed

Box 3053, SE-169 03 Solna, Sweden | V isiting address: Råsundavägen 1–3, Solna Phone: +46 (0)8-739 02 70 | Fax: +46 (0)8-730 01 70 | sales@msab.com | msab.com

>> iOS Physical iPhone physical support iPhone passcode bypass iTunes encrypted backup file support Decode app data from dumps>> Android Physical Built-in rooting of Android devices Decode Pattern lock and PIN codes >> Chinese Clones Physical Dumping and Decoding of 70 new phones>> CDMA Physical File System Physical Decoding on CDMA handsets>> Blackberry Physical Physical Dump of User Partition Memory>> Palm/HP Physical Dumping and decoding of webOS based handsets>> iDEN Physical Improved dumping support for iDEN handsets

>> 109 new devices in XRY Logical including 17 CDMA models>> 172 new devices in XRY Physical Dumping including 5 GPS devices>> 137 new devices in XRY Physical Decoding – 80% supported devices>> 141 new devices in Security Code Only>> 70 new Chinese clones in XRY Physical>> 3 new XRY Physical cables

>> Integrated SQLite database viewer>> Enhanced smartphone app support>> Added support for Select all from “Find Results”>> Added quick access toolbar>> Ability to launch media files larger than 1GB>> New report language: Indonesian>> Languages in main interface: Chinese (simplified),

French, German, Spanish, Swedish

>> XRY Logical 109 3,319>> XRY Physical Dumping 172 1,321>> XRY Physical Decoding 137 1,057>> Security Code Only 141 384>> Smartphone Apps 11 65>> XRY Untested 26 462

>> Total 596 6,608

Forensic Method v6.2 Total

What’s neW in this ReLease?

neW Device suppoRt summaRy

neW FeatuRes in this ReLease

“PhYSICAL RELEASE”DELIVERING ON OUR PROMISES

iphone passcoDe anD physicaLWe have added support for

iPhone passcode extraction. Using XRY you can

now calculate the four digit unlock code.

It will also be possible

in v6.2 to per-form an extrac-

tion of an encrypt-ed iTunes backup file.

Finally you can now also perform a physical dump

and decryption on most iOS devices to ensure you have access to the best possible

support levels in XRY.

VERSION 6.2

xry vErSiON 6.2 | RELE A SE NOTES

anDRoiD patteRn Lock DecoDingWe have built-in automatic rooting for Android in this release of XRY to replace the reliance on 3rd party software down-loaded off the Internet.

We have also added ‘pattern lock’ decoding in v6.2. The pattern can be decoded when extracting a rooted device and when decoding a dumped Android. The pattern lock will be shown in the log file.

Please note that pattern lock decoding is possible only if USB-debugging is turned on.

Regression testing for smartphone appsif you thought doing mobile forensics was challeng-ing, wait until you see how difficult smartphone app support can be! When a new mobile device is manu-factured the hardware stays fixed and so support is usually a one-time validation process.

But this is not the case with smartphone apps. the software manufacturers are changing their software versions all the time. so whilst you can claim support for one version of an app – it won’t be long before it’s out of date.

Rest assured we take the same processes to forensic validation of apps as we do for devices. so with every new release we update the help files in XRy to show precisely what apps are supported for what operating systems and just as importantly what version of the app.

if you find a forensic tool is claiming support for an app, but then does not recover the data you were expecting – it is highly likely that the version of the app software is not supported. For v6.2 XRy alone we have had to revisit 10 apps to ensure they are kept up to date with latest software updates.

DiD you knoW? chinese cLonesIn this release we have delivered physical support for 70 “veri-fied” new china clone devices. That means we actually tested the phones ourselves.

Unlike more expensive solutions, dependent on 3rd party hardware, this is all included free of charge within our stand-ard XRY license. There is no requirement to purchase another piece of kit, China Clone support will be treated exactly the same as all other devices in that we will continue to increase support levels with each new release.

tRainingWe have a new 3 day Smartphone Training Course available. This course is designed to give you experience of using all the new features in v6.2 and help you understand modern smart-phone and tablet technology. The course teaches you how to extract the most out of a modern smartphone using XRY. Understanding the common file systems and techniques re-quired to process data from smartphone apps.

The increasing dominance of smartphones means that mod-ern phone examiners must be up to date. Understanding what can be recovered from which device, using which method is a complex business and this is your opportunity to learn from the manufacturer. For more information, visit our website: www.msab.com/training/smartphone-training

BLackBeRRyyou can now recover deleted pictures and information from the user partition area of the handset memory on many Blackberry devices in this version. support is limited but getting back that essential deleted picture is now a possibility.

xry vErSiON 6.2 | RELE A SE NOTES

>> Android – Extract Wi-Fi networks – including passwords – Extract Bluetooth address to general info – New Apps: eBuddy Messenger, Google+, Messenger

WithYou, QQ, Renren, Sina UC, Touch (former PingChat!)>> iPhone – New Apps: Facebook Messenger, Google+, Sina Weibo,

Touch (former PingChat!) – Improvements in existing app support for 10 apps>> BlackBerry – Improved app support for BlackBerry Messenger

New FeATures iN XrY LogicAL

New DeVices iN XrY LogicAL

*Untested devices

AlcatelOT-818d

AsusP565*

au by KDDiRegza IS04

BLuSpark S130

BushnellOnix 350Cal-CompA100

china cloneshi7 TouchhIC G15

ephoneE63v

FlyIQ-120*

garmineTrex 10eTrex 30eTrex Vista hCxGPSmap 60CMontana 600*Montana 650Montana 650t*Rino 610Rino 650*Rino 655t

gigabyteGSmart i128*GSmart q60*

HisensehS-E300

HKcG801*

HoluxGPSport 255M-1000c

HPiPAQ 500*Pre 3TouchPad 4G (hSTNh-129C)Veer 4G (P160UNA)

HTcDesire A8180Sensation XE Beats Audio Z715eT9188 TianxiWildfire A3366

Lg100TA350CB630 InvisionG4050GS500v Cookie PlusKE600KP265dLX225MG185dMG191a mini SlimMG210dMG220dMG810d Black SapphireP503 Optimus OneT310i Cookie WiFiT515 Cookie DuoTU750 Secret

UX390UX5000

MotorolaES400*i886ME501 Cliq XTME525 DEFYME600 BackflipME722 Milestone 2ME811 Droid XMT710 ZhILING*MT720 MOTOW845 QuanticoXT500*XT800 Zhisang*XT910 DROID RAZR

NexianG868T Tap TVNX G311 Pad CappucinnoNX G869 Cappucino

Nokia1002322 Classic*C1-02C2-02 Touch and Type*C2-05 Touch and Type*C3-01 Gold Edition

o2XDA Venn*

PalmPixiPixi PlusPre 100 (P100EWW) (CDMA)Pre PlusPre Plus (CDMA)

Qigii7*

riMBlackBerry 9350 CurveBlackBerry 9790 BoldBlackBerry 9860 TorchBlackBerry 9900 Bold Touch

samsungGT-B5310u CorbyPRO AnycallGT-B6520 OmniaPRO 5*GT-B7722GT-C3630c Anycall*GT-E1182L DuosGT-E1190GT-E1195GT-E1230GT-E2121LGT-E2210GT-E2330GT-E2550L Monte SliderGT-E2558 Anycall*GT-i5508 Galaxy 5 AnycallGT-i9001 Galaxy S PlusGT-P1010 Galaxy Tab Wi-FiGT-P6210 Galaxy Tab 7.7 Wi-FiGT-P7510 Galaxy Tab Wi-FiGT-S3370*GT-S5530 AnycallGT-S5580 AnycallGT-S5608u AnycallGT-S5628 AnycallGT-S5628i AnycallGT-S6888 AnycallGT-S7120u Anycall

SCh-i905 Galaxy Tab 10.1 4GSCh-U660 Convoy 2SGh-C276LSGh-D357SGh-D806*SGh-E496SGh-E870SGh-F275LSGh-F406SGh-F490vSGh-P930SGh-T259SGh-Z650iSGh-ZV60SGh-ZX20

softBank821SCX06hT II*

sony ericssonK508c*Xperia Ray (ST18i)

T-MobileRapport

TomTomGO 520*

VizioVia Tablet (VTAB1008)

Vodafone553

We now have logical and physical support for Palm devices. In addition we have added automatic rooting to our Android Extractor and Dumper.

GT-E1195GT-E1230GT-E1360BGT-E2100BGT-i5508 Galaxy 5 AnycallGT-i9100 Galaxy S IIGT-i9001 Galaxy S PlusGT-P1010 Galaxy Tab Wi-FiGT-S3650 CorbyGT-S3650c CorbyGT-S3653 CorbyGT-S5230 StarGT-S5230W Star WiFiSGh-A697 SunburstShW-M250S Galaxy S2

sFr242Messenger Edition 261

simvalleySX-330

sony ericssonXperia Ray (ST18i)

spiceM6868

T-MobileE200 VibeRapportVairy Touch

Vodafone553

XKssTeLX100X8

XphoneXX897i

xry vErSiON 6.2 | RELE A SE NOTES

AceCaracasCaracas IILake Tahoe iPro E71MilanMini Monte Carlo IIVienna

AnycoolD218

AppleiPhone 4 CDMA (A1349)iPad Wi-Fi (A1219)

au by KDDiRegza IS04

BLuTattooTattoo TV

changjiangC5

china clonesAmTel A2699GV168A GOLDVIShJinPeng A5608K917 (Motorola clone)L1+ (4 SIM)L223Nokia 8800 Carbon Arte GoldNokia 8800 GoldNokia BMW X6 N9800eNokia E71Nokia N8-00Nokia N8-00 (RM-596)Nokia N900 (Galaxy)Spinrt EVC 4GTphone-X5 hello KittyTV Mobile S7070Yitai F8+ Ferrari

concordE91

dr. TechIP-88

FlyB430 DSE176FLY-YINGF003F035

garmineTrex 10eTrex 30Montana 650Rino 610Rino 655t

general MobileDST Q200DST Q4DST Surf

gioneeM500M503M508

HPPre 3TouchPad 4G (hSTNh-129C)Veer 4G (P160UNA)

HTcDesire A8180EVO 3D CDMASensation XE Beats Audio Z715eT9188 TianxiWildfire A3366

HuaweiG7002IcemobileComet 2

iProE33 Proi6 Pro

JincenJC-8900JC-E5 (Nokia E5 clone)

KarbonnK1616K46

Lenovoi55P301P50S550

LgGX200 Dual

MaxwestBB-9 iPro

MicromaxM2Q6 ezpadQ7 ezpadX285X395 Convertible

Motorolai1 Opus Onei30sxi315i365i365isi412i576i58sri605i615i680 Brutei686 Brutei690i706i733i786wi850i856wi85si875i876i876wi877 Pininfarinai890i897 Ferrari Editioni9 StatureMB810 Droid XME501 Cliq XTME525 DEFYME600 BackflipME722 Milestone 2ME811 Droid XXT701 MilestoneXT910 DROID RAZR

myPhone8870 Teo

NexianG868T Tap TVNX G331 FreshNX G507 DynamiteNX G869 Cappucino

Ng Mobile660770870

NgMSoap

oppoA115A520T5

orangeMiamiRioVegas

PalmPixiPixi PlusPre 100 (P100EWW) (CDMA)Pre 2 (GSM)Pre PlusPre Plus (CDMA)

PhilipsXenium X622Xenium X713

riMBlackBerry

samsungGT-B3410W ChatGT-E1050GT-E1055TGT-E1075LGT-E1080wGT-E1085L GuruGT-E1086LGT-E1120GT-E1150iGT-E1170 KaiGT-E1170iGT-E1180GT-E1190

New DeVices iN XrY PHYsicAL DuMPiNg

Physical Support has been added for many chinese clone phones like this SPINRT EVC 4G device.

xry vErSiON 6.2 | RELE A SE NOTES

New DeVices iN XrY PHYsicAL DecoDiNg

AceCaracasLake Tahoe iPro E71Vienna

AnycoolD218

AppleiPhone 4 CDMA (A1349)iPhone 4 GSM (A1332)iPod touch 4 (A1367)iPad Wi-Fi (A1219)

au by KDDiRegza IS04

BLuTattooTattoo TV

changjiangC5

china clonesAmTel A2699GV168A GOLDVIShJinPeng A5608L1+ (4 SIM)L223Nokia 8800 Carbon Arte GoldNokia 8800 GoldNokia BMW X6 N9800eNokia E71Nokia N8-00Nokia N900 (Galaxy)Tphone-X5 hello KittyTV Mobile S7070Yitai F8+ Ferrari

concordE91

dr. TechIP-88

FlyB430 DSE176

garmineTrex 10eTrex 30Montana 650Rino 610Rino 655t

general MobileDST Q200

HPPre 3TouchPad 4G (hSTNh-129C)Veer 4G (P160UNA)

HTcDesire A8180EVO 3D CDMASensation XE Beats Audio Z715eT9188 TianxiWildfire A3366

HuaweiG7002

icemobileComet 2

iProE33 Proi6 Pro

JincenJC-8900JC-E5 (Nokia E5 clone)

KarbonnK46

LenovoP301S550

MaxwestBB-9 iPro

MicromaxM2X285X395 Convertible

MotorolaMB810 Droid XME501 Cliq XTME525 DEFYME600 BackflipME722 Milestone 2ME811 Droid XXT701 MilestoneXT910 DROID RAZR

NexianNX G331 FreshNX G507 Dynamite

Ng Mobile660770870

oppoA115T5

orangeVegas

PalmPixiPixi PlusPre 100 (P100EWW) (CDMA)Pre 2 (GSM)Pre PlusPre Plus (CDMA)

riMBlackBerry

samsungGT-E1050GT-E1055TGT-E1070 GuruGT-E1075LGT-E1080GT-E1080fGT-E1080iGT-E1080wGT-E1081t GuruGT-E1085F GuruGT-E1085L GuruGT-E1085T GuruGT-E1086LGT-E1100GT-E1107 Crest SolarGT-E1120GT-E1130BGT-E1150GT-E1150iGT-E1170 KaiGT-E1170iGT-E1180GT-E1190GT-E1195GT-E1210m Guru

GT-E1230GT-E1310BGT-E1360BGT-E2100BGT-E2120 GuruGT-E2121b GuruGT-E2210BGT-i5508 Galaxy 5 AnycallGT-i9100 Galaxy S IIGT-i9001 Galaxy S PlusGT-P1010 Galaxy Tab Wi-FiSCh-R100 StuntSCh-R250 ContourSCh-R311 AxleSCh-R350 FreeformSCh-R351 Freeform LinkSCh-R420 TintSCh-R520 TrillSCh-R600 hue IISCh-U440 GlossSCh-U450 IntensitySCh-U650 SwayShW-M250S Galaxy S2SPh-A310 Jitterbug JSPh-M550 Exclaim

sFr242

simvalleySX-330

sony ericssonXperia Ray (ST18i)

T-MobileRapportVairy Touch

XKssTeLX100X8

>> iOS: Physical support*, passcode bypass*, added option for examining encrypted iTunes backup files if the password is available.

>> Android/iOS: Decode app data from physical dumps>> Android: Decode “pattern lock” and PIN codes (up to 4 digits) on

locked devices if USB debugging is enabled>> Dumping and decoding 70 new China Clones>> Dumping and decoding of webOS based handsets from hP/Palm>> File system decoding on CDMA handsets>> Samsung GT-E series: Dumping and decoding of file system and SMS>> Improved dumping support of iDEN handsets

>> RJ45 micro 1>> RJ45 micro 2>> RJ45 Mini 1

New FeATures iN XrY PHYsicAL New cABLes iN XrY PHYsicAL

*iPhone 3GS, 4 CDMA, 4 GSM, iPod touch 3G and 4 and iPad 1 are supported.

xry vErSiON 6.2 | RELE A SE NOTES

Don’t forget to register your license. By registering your license you ensure that you receive new information about XrY software updates and new cables free of charge: www.msab.com/licreg

Box 3053, SE-169 03 Solna, Sweden | V isiting address: Råsundavägen 1–3, Solna Phone: +46 (0)8-739 02 70 | Fax: +46 (0)8-730 01 70 | sales@msab.com | msab.com

AppleiPad 3G (A1337) iPhone 3GS (A1303) iPhone 4 CDMA (A1349) iPhone 4 GSM (A1332) iPod touch 3G (A1318) iPod touch 4 (A1367)iPad Wi-Fi (A1219)

cal-compA100

casiohitachi Exilim C721

Lg150 AX490a AX5000a LX150 LX160 LX225 LX260 Rumor LX550 Fusic UX260 UX390 UX5000 VI125 VN250 Cosmos VX4600 VX5200 VX5300 VX5600 Accolade VX8560 Chocolate 3 VX8700 VX9400 VX9900

MotorolaW845 Quantico

Nokia100 7705 TwistPantech PN-215

samsung GT-B2700 GT-B3410 CorbyPlus GT-B5702 GT-B5712c GT-B5722c GT-B7722 GT-C3212 GT-C3630

GT-C5220 GT-C5510 GT-C5530 Anycall GT-E2550 Monte Slider GT-E2550L Monte Slider GT-M3200 beat s GT-M3510 Beat b GT-M5650 Lindy GT-M7600 Beat DJ GT-M7603 Beat DJ GT-M8800 Pixon GT-M8910 Pixon12 GT-S3110 GT-S3370E GT-S5050 GT-S5350 Shark GT-S5510 GT-S5511T GT-S5520 Nori GT-S5530 Anycall GT-S5550 Shark 2 GT-S5580 Anycall GT-S5608u Anycall GT-S5680 Anycall GT-S6700T GT-S6888 Anycall GT-S7120u Anycall GT-S7330 GT-S8000 Jet SCh-A870 SCh-U540 SCh-U660 Convoy 2 SGh-A107 SGh-A137 SGh-A177 SGh-A227 SGh-A237 SGh-A256 hype SGh-A437 SGh-A637 SGh-A657 SGh-A667 Evergreen SGh-A687 Strive SGh-A707 Sync SGh-A717 SGh-A727 SGh-A736 SGh-A746 SGh-A747 SLM SGh-A766 Propel SGh-A777 SGh-A817 Solstice II SGh-C270

SGh-C276L SGh-F110 adidas micoach SGh-F250L SGh-F266 SGh-F330 SGh-F400 SGh-F406 SGh-F490 SGh-L170 SGh-L310 SGh-L600 SGh-L760 SGh-P930 SGh-T201G SGh-T229 SGh-T259 SGh-T349 SGh-T359 Smiley SGh-T369 SGh-T401G SGh-T459 Gravity SGh-T479 Gravity 3 SGh-T559 Comeback SGh-T639 SGh-T669 Gravity Touch SGh-T739 Katalyst SGh-T749 highlight SGh-T819 SGh-Z170 SGh-ZV60

sanyoSCP-2300 SCP-2400 SCP-3100 SCP-3200 SCP-4920 SCP-5500 (Sprint) SCP-6650 Katana II SCP-6650 Katana II (Sprint) SCP-7050 SCP-7300 SCP-8300 VI-2300 (Sprint)

softBank740SC 821SC

uTstarcomCDM-7025 CDM-7126

AndroidAndroid EmailBelugaeBuddy MessengerGmailGoogle+Google TalkheyTellhTC PlurkK9 MailKakao TalkKikMessenger WithYouPingChat!PlurQ FreeQQRenrenSina UCSkypeWhatsAppYahoo! MessengerTouch (former PingChat!)

Apple iosAIM (AOL Instant Messenger)CoPiloteBuddyFacebookFacebook MessengerFind My iPhoneFlickrFringGoogle+Google EarthGoogle Latitude

Google MapsGoogle MobileGoogle TranslateheyTellhitta.seICQ FreeKik MessengerMySpaceNAVIGON Mobile NavigatorNike+ GPSNimbuzzPingChat!QQRenrenRunKeeperSearch BingSina WeiboSkypeTangoTomTomTouch (former PingChat!)TwitterTwitterrific for TwitterViberWhatsAppYahoo! MessengerYahoo! SearchYouTube

BlackberryBlackBerry MessengercrunchSMSMapsPIN MessagesPingChat!

New DeVices iN XrY securiT Y coDes ToTAL sMArTPHoNe APPs