Mobile Criminalist

Versions

The versions of software Mobile Criminalist available for December, 2019 are given below:

• "The mobile Criminalist Ekspert" - a flagship product. The multifunction tool for high-speed work with data from mobile devices, drones, cloud services and the PC combining all possibilities of software "MK the Detective story" and own functionality.
• "The mobile Criminalist Detektiv" - the versatile tool for extraction and information analysis covering a broad spectrum of mobile devices, drones, cloud services and PC.
• "The mobile Criminalist Business" - the tool for investigation and prevention of corporate crimes on the basis of extraction and information analysis from mobile devices and cloud services.
• "The mobile Criminalist SCOUT" - the module software Mobile Criminalist of Expert and Detective story versions. Finds and takes criminalistic important information from the studied notebooks and personal computers
• "Mobilny Kriminalist SCOUT Plus" - the software expansion "Mobile Criminalist Ekspert" allowing to analyze data applications for OS Windows, taken using the module "Mobilny Kriminalist SCOUT"

"Mobile Criminalist Ekspert"

Main functionality of the program:

• Mobile gadgets and multimedia devices:
  • Creates physical images of devices Android, Kai, etc.
  • Creates logical images of devices iOS, Android Blackberry Windows Phone Symbian , etc.
  • Takes and decrypts all data, including remote.
  • Imports physical images and backup copies of a set of devices.
  • Obtains data from drones and builds routes of flights.

• Cloud services
  • Allows to become authorized in an account and to pass 2FA.
  • Takes information from several tens cloud storages: Apple, Google, Yandex, iCloud, WhatsApp, Viber, Telegram, etc.
  • Decrypts backup copies.

• Personal computers
  • Takes correspondence, media files and contacts from messengers Viber, Unigram Skype, Wickr Me.
  • Receives letters and contacts from mail agents Mozilla Thunderbird Microsoft Outlook, Microsoft Mail.
  • Takes data from web browsers Google Chrome Mozilla Firefox Opera Microsoft Edge Internet Explorer.
  • Obtains information on a system.

• Analytical tools
  • Analyzes data at the same time from several devices in one case.
  • Collects all calls and also messages from the device, including from messengers to sections Calls and Messages.
  • Integrates contacts on individual preferences.
  • Investigates communications between several devices.
  • Runs for high-speed search both in case, and in a single document.

"Mobile Criminalist Detektiv"

Features of the program:

• establishment of communications between owners of devices and their contacts;
• consolidation of contacts from different sources;
• reports in different formats;
• creation of all events in a chronological order;
• possibility of consolidation of several devices in one case;
• grouping of all important proofs in one place;
• import and viewing physical images and backup copies of different devices;
• browsers of databases of SQLite, PLIST, HTML, HEX files, etc.;
• search and extraction of credentials and tokens from mobile devices and the PC;
• data retrieval on a key word, regular expressions, sets of hashes, phone numbers, passports, to the Insurance Number of Individual Ledger Account and other important criteria;
• creation of routes of movement of one or several objects;
• determination the most visited and platitudes of stay.

"Mobile Criminalist Business"

• Allows to book audit of the mobile device;
• Gives an information access from mobile devices and cloud services;
• Prevents disclosure of a trade secret and theft of intellectual property;
• Helps to reveal and investigate incidents.

Main functionality of the program:

• Mobile devices:
  • Creates physical images of devices Android, Windows Phone, etc.
  • Creates logical images of devices iOS, Android, Blackberry Symbian , etc.
  • Recovers remote data from messengers and social networks.
  • Takes available data: the contacts, chats given applications, media files and many other things.
  • Carries out the analysis of the acquired information.

• Cloud services
  • Allows to become authorized in an account and to pass 2FA.
  • Takes data from cloud services: Apple, Google, Yandex, Microsoft, Dropbox.
  • Takes chats from cloud services of the messengers WhatsApp, Viber, Telegram, etc.
  • Analyzes data retrieveds.
  • Decrypts backup copies.

"Mobile Criminalist SCOUT"

• Credentials and tokens:
• TamTam Skype for Desktop* из программ iCloud for Windows, WhatsApp Desktop, Desktop, Line, Viber for Desktop, , Unigram X, Wickr Me Desktop, Telegram;
  • from mail services of Mozilla Thunderbird, Microsoft Outlook, Microsoft Mail;
  • from portable versions of the programs and programs installed on a non-standard way.

• Data of web browsers: the accounts, tabs given autocompletion forms, the history of visits and cookies from internet- Google the browsers Chrome, Mozilla Firefox, Opera, Microsoft Edge, Internet Explorer.
• Wi-Fi of access point and passwords to them.
• Backup copies of iTunes.
• Information on the PC system.

"Mobilny Kriminalist SCOUT Plus"

• Messages, contacts and media files from Viber, Unigram, Skype, Wickr Me.
• Correspondence and contacts from Mozilla Thunderbird, Microsoft Outlook, Microsoft Mail.

2019

"Mobile Criminalist Ekspert" 1.2

On December 9, 2019 the Oxygen Software company submitted the next version of the flagship product – "The Mobile Criminalist Ekspert" 1.2. In it extraction and interpretation of data from Qualcomm devices on chipsets of MSM8917, MSM8937, MSM8940 and MSM8953 is implemented.

Version 1.2 allows to get data access of two cloud services – Microsoft Outlook and Line Keep. In addition to standard information on an account, from Microsoft Outlook the program takes letters and investments, and from Line Keep - the separate files and their collections which are stored on disk.

Developers did not avoid also computer a forenzika. "MK SCOUT" takes data from personal computers now on macOS and Linux. Extraction of data from Google Chrome Mozilla Firefox Opera Safari Telegram TamTam Mozilla Thunderbird, Keychain, KnowledgeC, etc. is supported.

Updated Bond graph allows to browse the shortest way of interaction between two selected contacts and self-communications of objects on the graph. Display of optional data – search results on heshseta is added to the section Statistics.

Version 1.2 supports more than 33,000 models of devices, more than 13,000 versions of applications, 482 unique applications and 77 cloud services.

"Mobile Criminalist Ekspert" 1.1

On October 1, 2019 Oxygen Software company, the Russian developer and the supplier of means for an expert research of these mobile devices, cloud services, drones and the PC, provided a flagship product – "The Mobile Criminalist Ekspert". The program is intended for high-speed work with data and extraction of a bigger amount of information.

"MK the Expert" – the multifunction tool combining all possibilities of software "MK the Detective story" and own functionality. He allows to make complete "digital" investigation within one product and gives following features:

• extraction of physical images and backup copies of mobile gadgets of many brands (Apple, Samsung, Xiaomi, DJI, etc.) on different operating systems (iOS, Android, etc.) and various chipsets (Qualcomm, MTK, Spreadtrum, etc.).
• extraction and data analysis from cloud storages of messengers, social networks, mail services, applications for photos, online storages, business applications, applications of the taxi and car-sharing, fitness trackers and other services.
• import of images of mobile devices and other gadgets from third-party sources will allow to receive a full range of data and to analyze them using analytical tools of the program.
• analytical functionality: new tools – Statistics and "Group File Browser" and also the optimized sections Bond graph, Contacts, Events feed, Search and "Important proofs".
• search and extraction from notebooks and the PC of such criminalistic important information, as logins, passwords and tokens, Wi-Fi of access point and passwords to them, messages, media files and contacts from desktop versions of messengers, letters, and contacts from mail agents, information on a system, etc.
• a set of additional tools on work with data: work with files from archives, a storyboard of video files, interpretation of these applications, viewing documents in separate tabs, etc.

Mobile Criminalist Detektiv 11.5

On July 25, 2019 the company "Oxygen Software", Russian the developer and the supplier of means for an expert research data of mobile devices cloud services, drones and the PC, submitted the next version of the product "Mobile Criminalist Detektiv" 11.5. In it the bypass hardware enciphering for MTK Android- devices is implemented, support of parallel connection of several iOS- devices and support of iOS13 is added. Also in the module Cloud Services there was a support storages iCloud of Backup 11.2+ for iOS 11.2 above with included two-factor authentication, services messenger Line and Line GoogleBackup.

It is no secret that hardware encryption is one of the main problems of data analysis of mobile devices which experts face. This type of enciphering is even more often applied in modern devices since it is more reliable and based on the special hardware keys tied to the specific device.

For work with devices, protected by hardware encryption there is the following operations procedure:

• extraction of the ciphered physical image of the device;
• extraction of hardware keys.

Further there is an interpretation of a physical image by means of the taken keys and the user password. If on the device the Secure Startup mode is switched off, then the password by default — default_password is automatically used.

Work with the protected user information is a trend in the modern world of digital criminalistics and requires individual approach. Our specialists managed to develop a method of a bypass of hardware encryption of devices on chipsets of MTK by means of replacement of a regular boot image with our modified. This functionality will significantly simplify gaining access to the ciphered data with the help of Mobile Criminalist 11.5 and will be irreplaceable in work of experts, speaks Sergey Sokolov, the CEO of Oxygen Software LLC

This method allows to receive the root-rights to the device and to take the complete decrypted image of its file system. The method is universal for devices on chipsets of MediaTek company.

"The mobile Criminalist" 11.5 supports 467 applications, 74 cloud services, more than 11,200 versions of applications and 30,000 models of devices!

Other updates of "Mobile Criminalist Detektiva" of version 11.5:

• The master Izvlecheniya from Cloud Services. Support of CAPTCHA for the Mail service Mail.ru is added.
• The master Izvlecheniya from Cloud Services. Speed of extraction of data from Photos Google service is increased.
• The master Izvlecheniya from Cloud Services. Extraction of data types in a profile of the owner and information on the device in Huawei Cloud Data service is added.
• The master Izvlecheniya from Cloud Services. In a Google service of My Activity extraction of new data types is added: Google Takeout, Google My Business, Discover, Kids Home, Device Information, Podcasts.
• The master Izvlecheniya from Cloud Services. The authorization mechanism by the login/password in Telegram service is updated.
• Mobile Criminalist SCOUT. The feature to set any search setups, search of passwords and preserving of data through the menu or the file of a configuration is added.
• Mobile Criminalist SCOUT. The user interface is improved.
• Browser of SQLite. Work with non-standard names of tables and fields is improved, recovery of remote records is improved.
• Browser of SQLite. Information display about structure of base in format DDL (Data Definition Language) is implemented.
• Applications. Business. Support of Samsung Memo (16.0.00-342) for Android of devices is added.
• Applications. Messengers. Support of Zangi Private Messenger (4.5.7) for the Apple iOS of devices is added.
• Applications. Messengers. Support of Zangi Private Messenger (4.8.1) for Android of devices is added.

Mobile Criminalist 11.3

On April 3, 2019 the Oxygen Software company provided updating of the flagship product "the Mobile Criminalist Detektiv". The provided version of the program allows to decrypt the physical images of MTK-devices on MT6737 chipsets protected by hardware encryption.

According to the developer, the updated Mobile Criminalist takes and decrypts hardware keys enciphering applications from system storages Android KeyStore. In version 11.3 it gives access to the complete volume data of the application Signal. Further it is going to expand a list of applications, maintaining this functionality.

Updating of the module "Mobile Criminalist SCOUT" is also made. The scout takes and saves backup copies of iTunes and gives an opportunity of the choice of a search mode (Fast, Optimal or Complete).

As noted in Oxygen Software, in version 11.3 support cloud services – Yandex. Taxi Apple Maps My Parrot Cloud, and applications is added – Yandex. The taxi and Telegram X for iOS- devices, FreeFlight 6 for Android and iOS of devices.

Changes and additions in "the Mobile Criminalist the Detective" 11.3, mentioned by the developer:

• Master Izvlecheniya Dannykh. The feature to decrypt a physical image of devices on MediaTek MT6737 chipset, including devices with the activated Secure Startup mode is added.
• Master Izvlecheniya Dannykh. Extraction and interpretation of encryption keys from Android KeyStore is implemented. With their help experts can decrypt these Signal applications.
• The master Izvlecheniya from Cloud Services. Support of service of online orders of the Yandex taxi is added. Taxi. Experts can take personal data of the owner of an account, information on trips, drivers, cars and the chosen places.
• The master Izvlecheniya from Cloud Services. Support of cartographic service Maps Apple is added. Experts can take information on the owner of an account, geo-coordinate and the photo of places from the history of search and the chosen points.
• The master Izvlecheniya from Cloud Services. Support of My Parrot Cloud service is added. It is a cloud service of Parrot SA company, producer of wireless technologies and also drones. Experts can take information on an account, the magazine of flights, general information about weed also the data of flight including a set of indicators.
• Mobile Criminalist SCOUT. The search capability and preserving of backup copies of iTunes is added. The found backup copies can be imported and analyzed in the Mobile Criminalist Detektiva.
• Mobile Criminalist SCOUT. The feature for extraction of credentials from portable versions of the programs and programs installed on a non-standard way is added. Experts can select a suitable search mode: Fast, Optimal or Complete. The functionality works when choosing search modes Optimal or Complete.
• Master Izvlecheniya Dannykh. Import of a physical image of Android received through MSAB XRY is implemented.
• The master Izvlecheniya from Cloud Services. In a Google service of Drive the feature for the choice of a format of the loaded files, such as is added: documents, tables, presentations, etc.
• Master Izvlecheniya Dannykh. Import of logs of flight of drones. The filter of data on the basis of serial number of the drone prohibiting simultaneous import of logs of flight from different drones of the same model is implemented.
• The master Izvlecheniya from Cloud Services. Support of API for Photos Google service is added. Experts can take the contact list, private, public photos and video with geo-coordinates and other metadata and also information on an account and albums with comments on them.
• The master Izvlecheniya from Cloud Services. The authorization algorithm for all services iCloud is updated.
• Mobile Criminalist SCOUT. Search of passwords for My Parrot Cloud service is added.
• Applications. Messengers. Support of Telegram of X (5.0.17) for the Apple iOS devices is added.
• Applications. Travel. Support of Yandex.Taxi (4.66) for the Apple iOS of devices is added.
• Applications. Drones. Support of Freeflight 6 (6.4.2) for the Apple iOS of devices is added.
• Applications. Drones. Support of Freeflight 6 (6.4.1) for Android of devices is added.
• Applications. Messengers. Support of WhatsApp (2.19.30) for the Apple iOS of devices is updated.
• Applications. Messengers. Support of WhatsApp (2.19.86) for Android of devices is updated.
• Applications. Messengers. Support of Telegram (5.4.1) for the Apple iOS of devices is updated.
• Applications. Messengers. Support of Telegram (5.3.1) for Android of devices is updated.
• Applications. Messengers. Support of Signal (4.35.3) for Android of devices is updated.
• Applications. Messengers. Support of Viber (10.3) for the Apple iOS of devices is updated.
• Applications. Messengers. Support of Viber (10.3) for Android of devices is updated.
• Applications. Social networks. Support of Facebook (210.0) for the Apple iOS of devices is updated.
• Applications. Social networks. Support of VK (5.9.1) for the Apple iOS of devices is updated.
• Applications. Social networks. Support of VK (5.24) for Android of devices is updated.
• Applications. Social networks. Support of OK (7.50.1) for the Apple iOS of devices is updated.
• Applications. Social networks. Support of OK (3/19/26) for Android of devices is updated.
• Applications. Travel. Support of Yandex.Taxi (3.89) for Android of devices is updated.
• Applications. Drones. Support of Freeflight Pro (5.2.4) for the Apple iOS of devices is updated.
• Applications. Drones. Support of Freeflight Pro (5.2.4) for Android of devices is updated.
• Applications. Multimedia. Support of Google Photos (4.10) for the Apple iOS of devices is updated.
• Applications. Multimedia. Support of Google Photos (4.10) for Android of devices is updated.
• Applications. Business. Support of Yandex.Disk (2.68) for the Apple iOS of devices is updated.
• Applications. Business. Support of Yandex.Disk (4.08) for Android of devices is updated.
• Applications. As of April, 2019 support more than 400 versions of applications for Apple iOS and Android devices is added. The total quantity of the supported versions of applications exceeds 9,600, the developer claims.
• The general. Support more than 1,100 models of devices on Android OS is added: Xiaomi MI 9 SE, Xiaomi Redmi Go, ZTE Blade V10 Vita, Sony Xperia 10 Plus, Sony Xperia 10, Samsung Galaxy S10, Samsung Galaxy S10e, Samsung Galaxy S10 +, etc. A total quantity of the supported models as of April, 2019 more than 27,000.

2018

Mobile Criminalist 11.1

On December 6, 2018 Oxygen Software Mobile Criminalist 11.1 provided upgraded version of the flagship product.

Considering the growing needs of users, support of cloud services of popular fitness-applications which are synchronized with smart bracelets was added. Support of these services defines the direction in a research of cloud data. It is possible take important information on accounts and trainings from application stores of Google Fit, Samsung Health, Fitbit.

One more popular niche among mobile applications – applications for a taxi call. The updated module "Cloud services" allows to take information on trips, drivers, machines, etc. from popular service Uber. This application has more than 100 million loadings in Google Play and enters into group of leaders in the Russian market in the segment.

Support of the cloud service allowing to pass identifikatsiyuv different Internet services – Telegram Passport which stores in itself(himself) a set of personal data and personal documents of its users is added.

In addition to the provided improvements of the program, it should be noted other important updates of Mobile Criminalist 11.1:

• Master Izvlecheniya Dannykh. Support of logical extraction from Android devices using OxyAgent installed on the separate SD card is added.
• Master Izvlecheniya Dannykh. The feature for expansion of the list of the supported devices of MTK Smart Devices is added. Now experts can make a request in technical support for adding of a certain model of the device.
• Master Izvlecheniya Dannykh. Calculation a hash amounts for the taken binary dump is added.
• Master Izvlecheniya Dannykh. The program window of extraction of data from devices and import of backup copies is processed.
• Master Izvlecheniya Dannykh. Work of exploits is improved.
• The master Izvlecheniya from Cloud Services. Support of a proxy for Samsung Health, Google Fit, Fitbit, Uber and Telegram Passport services is added.
• The master Izvlecheniya from Cloud Services. Support of extraction of data from iCloud Bookmarks for the accounts created on devices with iOS 11 and iOS 12 is added.
• The master Izvlecheniya from Cloud Services. Data writing in archive at extraction of services with a large number of files is accelerated.
• Mobile Criminalist SCOUT. Extraction of passwords from Google services of Fit, Fitbit, Samsung Health and Uber from web browsers is added.
• Export. Operation of filters as files is improved.
• Applications. Sport. Support of Samsung Health (6.0.0) for Android of devices is added.
• Applications. Sport. Support of Samsung Health (1.6.1) for the Apple iOS of devices is added.
• Applications. Sport. Support of Fitbit (2.82) for Android of devices is added.
• Applications. Sport. Support of Fitbit (2.83) for the Apple iOS of devices is added.
• Applications. Sport. Support of Google Fit (2.05.34-130) for Android of devices is added.
• Applications. Social networks. Support of VSCO (87) for Android of devices is added.

"The mobile Criminalist Detektiv" is used by experts for investigation thousands of incidents across all Russia and the CIS that with its help to provide the digital proofs necessary for investigation of crimes, and to make the world safer.

Mobile Criminalist 11.0

On October 12, 2018 Oxygen Software LLC, the Russian developer and the supplier of means for an expert research of these mobile devices, cloud services and drones, submits the next version of product "Mobile Criminalist" 11.0. The functionality allowing to take information from the mobile device is added to the module "Cloud services", using an authorization method by the QR code or a token of WhatsApp of QR from web browsers or the desktop version of the application of WhatsApp. Distinctive feature of this functionality is that in the presence of a token, there is a possibility of unloading of all base of messages even from the blocked device.

The taken data:

• Information on the device and account. Information on device model, producer and version of the operating system, phone number and its MNC and MCC, accumulator status, interface language, nickname of the owner of the device.
• Contact list and their avatars. At the list there are all contacts from the mobile device, including those which are not registered in WhatsApp.
• Messages of personal and group chats. Including complete list of all personal and group chats and participant list of chats.
• The missed calls.
• Media files and other types of investments. Images, video, voice messages, audio files, contacts, geolocations.

The token of WhatsApp of QR can be detected using the module SCOUT in web browsers Google Chrome Opera, Mozilla Firefox or in the WhatsApp application for PC. Also the token can be earlier generated during the previous session in Cloud services. It is important to note that it is one-time. After authorization server issues other token which will need to be used for the following authorization.

The modern means of protecting used by mobile device manufacturers create different obstacles for specialists in mobile criminalistics, limiting a possibility of extraction criminalistic of significant information. This fact causes relevance of application of alternative methods of extraction of data. Oleg Skulkin, the leading specialist on computer criminalistics of Group-IB company

Important updates of Mobile Criminalist 11.0:

• Master Izvlecheniya Dannykh. Support of devices of MTK Smart Watch and MTK Feature Phone is added.
• Master Izvlecheniya Dannykh. Support iOS 12.0 and iPhone Xs, iPhone Xs Max, by iPhone Xr is added ​​.
• Master Izvlecheniya Dannykh. For LG the G5 and V10 phones on OS Android 6.kh and 7.kh password guessing and the subsequent interpretation of images of memory is added.
• Master Izvlecheniya Dannykh. The extraction mechanism from DJI drones for firmwares versions.0400 and.0500 is recovered. Now drones do not require reset after accomplishment of an exploit before extraction.
• The master Izvlecheniya from Cloud Services. Support of service of exchange of photos and video, made using drones, SkyPixel is added.
• The master Izvlecheniya from Cloud Services. Support of a proxy for Google services, WhatsApp of QR, Facebook, Telegram, Dropbox and Twitter is added.
• The master Izvlecheniya from Cloud Services. The feature to work at once in several windows of the module is added. Now experts can make several extraction at the same time.
• The master Izvlecheniya from Cloud Services. Support of authorization on Google Chrome token found on the PC in Google services of Chrome, Google Calendars, Google Drive, Google Location History, Google Photos, etc. is added.
• The master Izvlecheniya from Cloud Services. Support of authorization on an USB token for Google services is added.
• Mobile Criminalist SCOUT. Extraction of tokens of Telegram from web browsers Google Chrome, Mozilla Firefox is added Opera.
• Mobile Criminalist SCOUT. Extraction of tokens of WhatsApp Web from the Google Chrome, Opera, Mozilla Firefox web browsers is added.
• Mobile Criminalist SCOUT. Extraction of tokens of WhatsApp Desktop from the application for the PC is added.
• Mobile Criminalist SCOUT. Extraction of tokens of an account of Google from the Google Chrome browser is added.
• Events feed. Web connections given from the section are added: Locations.
• Search. Search in data of the section of Web connection is added: Locations.
• Messages. Apple. Display of hand-written drawings and texts in messages of iMessages is added.
• The general. The type of events "The entering not received message" is added.
• Export. Important Proofs. Export of sketches of the attached files for the entries added from the section of Application is added.
• Export. The general. Start of the module of export from sections with a large number of data is accelerated.
• Browser of SQLite. Improvements on work with databases are added. Now experts can open databases from Mobile Criminalist in already started browser and also drag and open at once several databases in a window of the browser SQLite.
• Browser of Plist. The error arising when opening some binary files of Plist is corrected.
• Applications. Support of Facebook Messenger Lite for Android of devices is added.
• Applications. Support of Google Home for the Apple iOS and Android of devices is added.

For October, 2018 Mobile Criminalist 11.0 supports Bol 440 applications, 8,300 versions of applications and 20,300 models of devices.

Mobile Criminalist 10.4

On August 8, 2018 the Oxygen Software company submitted the next version of product "Mobile Criminalist" 10.4. The functionality allowing to decode any backup copy of WhatsApp taken from the SD card or an internal memory of Android device is added to the module "Mobile Criminalist Cloud Services".

The button after clicking which, it is necessary to select the folder with the ciphered database is added to the interface "the Mobile Criminalist Cloud Services", to undergo authorization and to start interpretation of the backup copy of WhatsApp.

The program allows to decode backup copies with Android device by the following methods:

1. the File with a decryption key;
2. WhatsApp Cloud Token.

The file with a key and a token can be found in the device. The token can be also received at WhatsApp Cloud extraction.

It is possible to undergo authorization using the phone number or the token of WhatsApp Cloud connected with the backup copy. Further it is necessary to select the folder for preserving of archive with the decrypted backup copy and to click "Decrypt". After a successful completion it is possible to import archive in "the Mobile Criminalist Detektiv" for viewing data retrieveds.

The developer noted also other updates of Mobile Criminalist 10.4:

• Master Izvlecheniya Dannykh. The feature for import of images of iPhone in the GrayKey format is added.
• Master Izvlecheniya Dannykh. The feature for the manual choice of the loader of specific model of the device for extraction in the EDL mode is added. Earlier the choice was automatic.
• Master Izvlecheniya Dannykh. The feature for extraction of photos and files from the blocked devices of Samsung in the MTP mode is added.
• The master Izvlecheniya from Cloud Services. Support of a method of authorization of Google Prompt for Google services is added.
• The master Izvlecheniya from Cloud Services. The mechanism of extraction of data from accounts of Apple with the included two-factor authentication is updated. For August, 2018 the mechanism works for all services Apple except for iCloud Backup.
• Web connections. The Bluetooth connections display for IOS-DEVICES is added.
• Mobile Criminalist SCOUT. Extraction of WiFi-access points and passwords is added to them.
• Search. The search capability of similar images in one or several devices on their PhotoDNA-hashes is added.
• Export. Watch lists. Illumination of search queries in formats PDF, RTF is added HTML.
• File browser. The feature to save hashes of the selected elements in the file is added.
• Search. Calculation of a hash of PhotoDNA for files in the HEIC format is added.
• Search. Search in Plist to files for data with the Array and Dictionary type is corrected.

For August 8, 2018, Mobile Criminalist 10.4 supports 443 applications, 7,800 versions of applications and 19,815 models of devices, noted in Oxygen Software.

== 2017:

Mobile Criminalist 9.4

Upgraded version 9.4 of the program the Mobile Criminalist allows to take the data from devices of widely known Samsung Galaxy brand saved in a cloud service of Samsung Cloud. Now experts will be able to investigate data even if the device was damaged or lost. Enhanced capabilities of the program allow experts to get data access of the cloud storage of Samsung, and, as a result, to information on an account, the list of the used devices, contacts, history of calls, messages, notes and data of the web browser.

Also in version 9.4 the possibility of interpretation of the backup copies of WhatsApp which are stored in Google Drive without extraction from the encryption key device is available.

Access to the ciphered data of Android OS

Users OS Android can use function of enciphering on the devices. The new software solution from the companies Oxygen Software and Passware will allow experts to bypass the mechanisms used by Android OS for complete data encryption and to get direct access to user data (for example, to photos, correspondence and applications). Information from applications can be taken and analyzed even when data or the application were deleted from the device.

Steps on application of the Mobile Criminalist program

 

• Setup of automatic copying of data of the device of the employee in a cloud (iPhone in iCloud)
• Issue to employees of office mobile devices (iPhone)
• Installation and software configuration Mobile Criminalist on the computer of the security department specialist
• Regular unloading of backup copies from a cloud and data storage on the security service server

Data analysis

• Viewing correspondence, photo and locations
• Establishment of a circle of contacts
• The analysis of events in a chronological order
• Keyword-based search

Viewing data

Events in a chronological order

Interrelations in one extraction

Interrelations in several extraction

All communications in one list

Keyword-based search

Analysis of locations

2015: The mobile Criminalist - the Detective

On November 3, 2015 the Oxygen Software LLC company announced release of the version of the product "The Mobile Criminalist — the Detective". Functions of extraction and interpretation of messages of the WhatsApp messenger from devices on Android OS which are stored in Google Drive cloud ^[1] are added to it^[1].

"The mobile Criminalist" the Detective story version is a universal software package for a research of mobile devices, extraction of data from cloud storages and the analysis of billing of cellular operators.

Possibilities of software:

• The mobile Criminalist Detektiv - single solution for extraction, interpretation and data analysis from mobile devices which includes advanced and much the processed modules: Module of Extraction of Data from Cloud Services, Module of the Analysis of Billings and Module of Cards. The program includes the Module Passware Kit Mobile.
• Uses more than 30 methods of extraction of data, including logical and physical extraction from the mobile device, from a cloud, the analysis of billings of cellular operators and also import of different backups and images of devices.
• Supports more than 11 thousand mobile devices on OS iOS Android, Windows Phone Windows Mobile 8, 5/6 RIM (Blackberry) Symbian OS Bada OS, the Chinese phones on a chipset of MTK and so on. Support iPhone 6S and 6S of Plus is included in software.
• Gives the chance to take data from several devices at the same time.
• Allows to remove blocking of the screen from devices of LG on Android OS.
• Bypasses passwords on blocking of the screen at iOS of devices.
• Finds passwords to the ciphered iTunes and Android to backups, images of Android devices.
• Has the built-in Module of Extraction of Data from Cloud Services. The module supports the following services: Apple (contacts and calendars of iCloud), Google (History of locations, Disk, Contacts, Mail, Calendars, Tasks), Microsoft (contacts, calendars), Dropbox and Box and also social networks Instagram Twitter , etc. For an input to the cloud storage it is possible to use the passwords or tokens taken from the mobile device.
• Has the built-in Module of Cards for work with geo data. The module automatically shows the places which are most often visited by the user, builds routes of movement and finds places in which at the same time there were several owners of devices.
• Has the built-in Module of the Analysis of Billings. He allows to import billings from cellular operators and to analyze communications between calling.
• Takes a full range of data from mobile devices and backups: contacts, messages, calls, calendars, file system, geocoordinates, history of Wi-Fi-connections, etc.
• Takes data from 300 unique applications and 1 thousand their versions. Applications of different groups are supported: social networks, messengers, navigation, web browsers, business, finance and many other things.
• Automatically recovers contacts, messages, calls, a photo, video, documents and also user data from all supported applications.
• Takes geodata from all possible sources: photos, applications, history Wi-fi of connections.
• Has the built-in modules for data analysis:
  • Events feed for the analysis of events and location of the owner of the device to, in time and after the interesting event.
  • the Bond graph for quick search of social communications between owners of several devices.
  • the Joint contacts for obtaining the most complete information on the contact saved in several lists.
  • Statistics and communications - evident display of social communications between the owner of the studied device and its contacts.
  • Important Proofs. Allows to mark the taken data as important proofs for display in the separate section of the program.

• Contains the powerful search mechanism allowing to find phone numbers, geo coordinates, credit card numbers and other data at once in several devices. Supports keyword-based search during extraction of data. Search is separate process, allows to save and print all found data.
• Has the built-in viewer of databases of SQLite.
• The built-in viewer of files of Plist for iOS of devices.
• Exports the taken data to the most popular formats (XLS, RTF, PDF, XML, CSV, TSV, etc.). the 64-bit utility of export works separately and allows to browse data waiting for the report.
• Gives the chance to browse the taken data in the free Browser of data.
• The Mobile Criminalist Detektiv program is available in 2 versions:
  • the Main license is delivered by courier service, does not require activation online, is intended for one user and can be installed on any number of the PC, but works with an USB key.
  • the Network license is delivered by courier service, does not require online of activation and can be installed on several PC in one local area network. The program runtime requires one network USB key set on the server, all other computers are connected to it. The network license is limited only the number of computers which are at the same time connected to the server.

According to the statement of developers, "the Mobile Criminalist - the Detective" - the industry-first software supporting extraction of data from more than 1.1 thousand versions of applications and 300 unique applications, such as WhatsApp, Viber, Skype, VKontakte, Odnoklassniki, Mail.Ru the Agent, etc. As data of mobile applications are stored not only in databases of devices, but also in cloud services, the Oxygen Software company constantly adds services to the product "Module of Extraction of Data from Cloud Services" — the wired program for information extraction from cloud storages.

"Mobile devices keep a huge number of data, both on the device and in a cloud — Oleg Fedorov, the CEO of Oxygen Software company noted. — Additional program capabilities "the Mobile Criminalist - the Detective" become one more tool in an arsenal of criminalists and allow to take hardly accessible data from such popular applications as WhatsApp. We hope that the new version of the program considerably will simplify carrying out researches of mobile devices for our clients".

2014: The mobile Criminalist - the Browser of data

On December 10, 2014 the Oxygen Software company provided the new product "The Mobile Criminalist — the Browser of Data".

The "Mobile Criminalist — the Browser of Data" application helps to get access to a full range of the taken information, the analysis of remote proofs, a research of communications of suspects and search of all data types. The software tool to well licensed users of the Mobile Criminalist, however existence of the main license is not required for installation and use of the "Mobile Criminalist — the Browser of Data" application.

"The mobile Criminalist - the Browser of data" - the separate software product, it provides data access more than 9 thousand types of mobile devices. The browser of data helps users of the Mobile Criminalist to transfer digital data to colleagues and employees. All main information, including applications, passwords and the history of correspondences, is completely available in the "Mobile Criminalist — the Browser of Data" application, and powerful functions of search and different filters of data allow to find necessary proofs instantly.

One of the main positive factors of "The browser of data" - it gives an information access to those who do not use the full license of Mobile Criminalist.

Though the "Mobile Criminalist — the Browser of Data" application is not replacement of analytic functions of Mobile Criminalist, it provides fast and convenient data access from all sections of a main product, including applications, passwords and web connections. At users of "The browser of data" access to all information, important for investigation, including contacts, chats, calls, a photo, geo-coordinates and many other things is also open. Experts will be able to investigate all possible messages of the user of phone and files transferred from installed applications or to use function of search for detection of necessary proofs.

2013

Mobile criminalist 2013 5.4.1

On December 11, 2013 the Oxygen Software company presented experts the new version of the program the Mobile Criminalist 2013.

In version 5.4.1 there was a support of the Aeroflot and Transaero applications containing data of users of mobile devices on armoring of air tickets and flights. Also in this version the analysis of geo-information from sports applications is available: Endomodo and RunKeeper; activity of the user in social nets of Keek, Vine, Find My Friends; support of Vkontakte application (VK) is improved. The total quantity of supported applications exceeds 270, and mobile devices - more than 7000.

Innovations of version 5.4.1

• Support iOS iTunes 7.0.4 and 11.1.3 is added.
• Support of Android OS devices is added: Huawei Ascend G730-T00, GiONEE DREAM D1, GiONEE Pioneer P2, Zopo Libero HD ZP800H, etc. A total quantity of the supported devices - more than 7000.
• Report settings. The Inline tunings tab containing settings of fonts, a divider of CSV and also global setup for a card format of reports in PDF is added to report settings.
• Export. The feature to append the signature on each PDF or RTF page of the report is added.
• Export. Statistics and communications. Settings for printing and export are added to the section.
• Applications. The new Sport group which includes the Endomondo and RunKeeper applications is added.
• Applications. Sport. Extraction of data from the Endomondo (8.7.1) application from devices Apple iOS and Endomondo (9) from Android OS devices is added.
• Applications. Sport. Extraction of data from the RunKeeper (4.0.2) application from devices Apple iOS and RunKeeper (4.2) from Android OS devices is added.
• Applications. Social networks. Extraction of data from the Keek (4.0.1) application from devices Apple iOS and Keek (2.8.4) from Android OS devices is added.
• Applications. Social networks. Extraction of data from the Vine (1.4.3) application from devices Apple iOS and Vine (1.4.1) from Android OS devices is added.
• Applications. Travel. Extraction of data from the Aeroflot (1.4.0.721) application from devices is added Apple iOS.
• Applications. Travel. Extraction of data from the Transaero (2.1.6) application from devices is added Apple iOS.
• Applications. Social networks. Extraction of data from the Find My Friends (2.1.1) application from devices is added Apple iOS.
• Profile of the owner of the device. The photo source in the owner's profile is designated by an icon now and complemented with the tooltip balloon.
• Joint contacts. For contacts from the application of VK from devices on Android OS information on date of birth is added now.
• Export. The outdated format of xls-reports "is disconnected by XLS there is a tabular style (an old format)".
• Master of extraction of data. Process of extraction given from cryptobathing Android OS devices by method of a physical dump is optimized.
• Master of extraction of data. Extraction of contacts from Samsung SGH-D600E is improved.
• Master of extraction of data. Small interface improvements.
• Master of extraction of data. The error which arose at simultaneous connection on a cable of two and more Apple iOS devices is corrected.
• Joint contacts. The error because of which on some devices at each input in the section "Joint contacts" there was a data analysis of the owner is corrected.
• Telephone directory. When sorting contacts birthdays without indication of year of birth are considered now.

Mobile criminalist 2013 5.4

On November 11, 2013 the Oxygen Software company announced readiness of release of software "The mobile criminalist of 2013", version 5.4.

In the new version: data access from the devices of Apple password-protected and physical data collection from devices on the Android platform.

Oxygen Software added a feature for information extraction from the IOS-DEVICES password-protected unknown to the expert. In this version the expert has an opportunity to make a physical dump or to perform data collection using procedures of creation of backup copies of Android OS.

This version also gives an opportunity of the analysis of a profile of the owner of the device, the general contacts of several devices, dates of the greatest activity of use of the device, new applications.

• Support iPad of Air Wi-Fi (iPad4.1), iPad Air (iPad4.2), iPad mini 2G Wi-Fi (iPad4.4), iPad mini 2G (iPad4.5) is added.
• Support iOS iTunes 7.0.3 and 11.1.2 is added.
• Master of extraction of data. The feature to take data from iOS of the devices password-protected is added. Now using the program the Mobile Criminalist it is possible to obtain data from the device which screen is password-protected.
• Master of extraction of data. Data acquisition methods from devices on Android OS are completely processed and two modes are added: recommended and configured. The recommended mode automatically selects a suitable method depending on the version of Android OS and a possibility of receiving the rights of the administrator (root-access). The configured mode allows the user to select one of methods independently: a physical image through receiving root-access, the backup copy or logical using the OxyAgent utility.
• Master of extraction of data. The window which reminds the user of need to permit debugging of USB in devices on Android OS of version 4.2.2 above is added. Without this setup connection to the program the Mobile Criminalist is impossible.
• Master of extraction of data. Detailed information on all steps of installation of the universal driver for devices on Android OS is added.
• Desktop. Information on a profile of the owner of the device (a photo, the phone number, the e-mail address, etc.) automatically comes from the relevant base of devices on iOS and Android and is shown on a program Desktop.
• Desktop. The Analytical Tasks button which allows to analyze conveniently taken data is added: browse contacts from different sources, build the chart of social communications, use the configured search for finding of information, study the history of use of the device and reveal the most active days, collect all geo-data.
• Events feed. Tab Date. The feature to browse the most active days of use of the device is added. Function is available if to select the mode from the menu of the Sorting button Sorting according to activity.

Statistics and Communications for several devices. Representation of the contacts, general for several devices, on the Chart of direct connections is changed. Now they are shown as one meta contact with detailing on each contact on the right panel.

• Search. Now search results are presented in the tree form. Data from one section are grouped.
• The general. The new card of contact allowing both to browse data of contact, and to analyze statistics of communication between contact and the owner of the device is added. The card is available in all sections of the program: Telephone directory, Event log, Lena of events, etc.
• Export. The feature for export of each message to the separate file is added.
• Information on the device. The feature to export data on accounts of the owner of the device is added.
• Information on the device. The feature to drag a photo of the device and its owner with the PC in the program the Mobile Criminalist is added.
• Messages. Export. The feature to include/turn off export of investments is added. Setup is in the menu of the Export button.
• Applications. Messengers Extraction of data from the QQ (4.2.2.10) application from devices is added Apple iOS.
• Applications. Social networks. Extraction of data from the Weibo (2.7) applications from devices Apple iOS and Weibo (4.0.0) from devices on OS is added Android.
• Applications. Business. Extraction of data from the Evernote (5.3) application from devices on Android OS is added.
• Applications. Social networks. Support LinkedIn of applications (6.2.1) for devices Apple iOS and LinkedIn (3.0.2) for devices on OS is updated Android.
• Applications. Social networks. Support of the application of VKontakte (3.0.4) for devices on Android OS is updated.
• Browser of databases of SQLite. Display of structure of tables which allows to gain general idea about quantity and contents of tables in open base SQLite is added.
• Browser of databases of SQLite. The feature to change headings of columns in tables of SQLite bases is added.
• Browser of databases of SQLite. Export. The feature to select a field delimiter for reports in the CSV format is added. Function is in the menu of Setup.

Mobile criminalist 2013 5.3

The Mobile Criminalist 2013 5.13 submitted this version of the program Oxygen Software company on August 5, 2013.

In version 5.3 there was an updated section Statistics and communications, support of applications Yandex.Maps, Yandex.Browser, Tumblr, TextMe, Ebuddy and others is added. Now information on user accounts is displayed in the section of information on the device, on a desktop statistics of data of the device is added.

Also:

• import of images of devices based on Android OS containing sections of FAT and EXT
• new format of export of data to Microsoft Excel
• extraction of passwords from the cracked devices of Apple
• many other things.

• Information on the device. Information on all accounts which were used by the owner of the device is added. Available to devices on iOS and Android OS.
• The general. Import of the physical image of Android devices containing sections of EXT and FAT is added.
• The general. Buttons are added to all sections Back and forth. They allow to move conveniently on program sections.
• Desktop. Statistics on data of the device is added. The record count, contained in each section is shown.
• The section Statistics of Connections is renamed in Statistics and communications.
• Statistics and communications. The tabular style of section is remade. Columns Calls and Messages which show the total number of the messages and calls taken from different sections of the device are added. Columns Initial date and Final date which reflect the first and last date of communication are added.
• Statistics and communications. The Chart of statistics of connections which allows to build the chart of communication only with the selected contacts is added.
• Statistics and communications. The feature for viewing the list of communications for one or all contacts is added. The list opens by means of the Part button on the toolbar.
• Joint contacts. The feature to build the Chart of statistics on the selected contacts in the section the Joint contacts is added. The Statistics and Communication button on the toolbar is added to the section the Joint contacts for fast switching to the Chart.
• Connection. The universal driver for devices on Android OS is added. Now it is possible to connect without problems any device on Android OS to the program the Mobile Criminalist.
• Export. The redone export to tabular XLS is added. In it it is possible to browse more conveniently exported data. Old export to tabular XLS is renamed into Tabular export of XLS (old).
• Search. The regular expression library which allows to browse templates of regular expressions is added.
• Passwords. The feature to take passwords from the cracked IOS devices is added. Before passwords were taken only from not cracked IOS devices.
• Events feed. Demonstration of the recovered data (messages and calls) is added. They are displayed with a basket icon.
• Applications. Social networks. Extraction of data from the Tumblr (3.3.2) application from devices Apple iOS and Tumblr (3.3.2) from devices on OS is added Android.
• Applications.
• Applications. Messengers Extraction of data from the TextMe (2.2.5) and Text Me application is added! 2 (2.2.5) of devices Apple iOS and TextMe (2.0.20) from devices on OS Android.
• Applications. Messengers. Extraction of data from the Ebuddy (5.6) application from devices Apple iOS and Ebuddy (3.6.0) devices on OS is added Android.
• Applications. Navigation. Extraction of data from the Yandex.Maps (5.03) application from devices Apple iOS and Yandex.Maps (3.30) devices on OS is added Android.
• Applications. Web browsers. Extraction of data from the Yandex.Browser (2.10) application is added from Apple iPad.
• Applications. Messengers. Support of the Kakao Talk (3.6.2) application for devices Apple iOS and Kakao Talk (3.8.3) for devices on OS is updated Android.
• Applications. Messengers. Support of the WhatsApp (2.10.222) application for devices on Android OS is updated.
• Applications. Messengers. Support of the Viber (3.0) application from devices Apple iOS and Viber (3.0.1.3) for devices on OS is updated Android.
• Applications. Spyware. Support of the Mobistealth Lite application for devices on Android OS is updated.
• Support of smartphones on Bada OS is improved. The given the telephone directory, the message, file browser and the magazine are taken.
• Support of iTunes 11.0.4.4 is added.
• Support more than 50 devices is added: HTC Desire 600, LG LS975 Optimus G, Nokia Philips Lumia 1020, Xenium W832, Samsung GT-i9190 Galaxy S4 Mini, Sony ZTE Samsung SGH-N045 GALAXY S4, Mobile Xperia ZR LTE M36i C5503, Nubia Z5 mini, etc. A total quantity of the supported devices 6800.
• Support of devices Google Galaxy Nexus, Google Nexus S, Google Nexus 4, Google Nexus 10 is improved.
• Events feed. Data for the Corresponding Contact panel come from the section the Joint contacts now, but not the Telephone directory. It allows to obtain more complete information about contact.
• Messages, Magazine of calls, Events feed. If the Subscriber field is not filled in the database of the device, then the name is substituted from section the Joint contacts.
• Events feed. Repeated loading of section even after restart of the program is accelerated.
• Export. Information on the device. The feature to select what this to export from section is added. Report settings are added to the menu of the Export button.
• Export. File browser. The feature to include or exclude maps and sketches of photos to from export is added. The corresponding settings are added to the menu of Report settings.
• Export. The bold print for the name of fields is added to PDF and RTF reports.
• Search. By search in the.sqlite and.plist files of the big size the process accomplishment percent is shown.
• Search. The search progress window is remade.

Mobile criminalist 2013 5.1

The Oxygen Software company presented in February, 2013 experts the new version of the program the Mobile Criminalist 2013. In this version the procedure of connection of devices and extraction of data from them is accelerated and simplified, support of devices on the Windows platform of Phone 8 is added. Support of loading of backup files of devices of the Android 4.x platform, integrated solution of Passware Kit for selection of passwords to images of devices is implemented.

New in the Mobile Criminalist of 2013 of version 5.1:

• The connection setup wizard, the Master of extraction of data and the Master of extraction of data from the file are integrated into one application now - Oxygen Forensic (tm) Extractor which can be started from any section of the program.
• Module of extraction of data. Application launch is considerably improved and accelerated.
• Module of extraction of data. The application interface is considerably changed. Councils for the correct setup of connection in case of unsuccessful attempt to connect the device are added.
• Module of extraction of data. The search mechanism of attached devices is improved. Search consists of two modes: automatic connection and manual choice of the device. The automatic mode allows to find the first device connected on a cable. The manual mode gives the chance to select the device and available types of connection.
• Module of extraction of data. The feature to find passwords for not cracked IOS devices and archive copies of iTunes using the Passware Kit Forensic program is added. The Passware Kit Forensic program should be installed on the PC.
• Module of extraction of data. Loading of the archive copies of Android OS *.ab 4.x created using ADB is added. The archives password-protected known to the criminalist are supported. After loading of archive the following sections are available: Telephone directory, Messages, Calendar, Magazine, File Browser, List of applications, Skype, etc.
• Module of extraction of data. Loading of archive copies of.XRY DMG is added. The archives password-protected known to the criminalist are supported.
• Support of Apple iOS 6.1 and 6.1.2 devices is added.
• Support of iTunes 11.0.2 is added.
• Preliminary support of devices on Windows Phone 8 is added. Now the convenient method of the analysis of all of media of content, including photos with geo data and also the documents created in Microsoft Office is available.
• Support 150+ of new devices, including Samsung ZTE Alcatel One Touch OT-992D, Pantech P9090, GT-B9388, Sony Mobile Xperia E C1505, V790, etc. is added. The total quantity of the supported devices exceeds 6500.
• Events feed, Statistics of Connections. The table with activity of the owner of the device for all the time of its use is added. The table allows to group events in different time frames (from a year to one second) and to filter them by different parameters (events, contacts, the periods). Now criminalists can analyze activity of one or several contacts for a certain period.
• Global search. The feature to look for data on MAC and the IP addresses is added.
• Global search. The found data are displayed in search time at once now. Indication of process of search became more informative.
• Applications. Messengers. Extraction of data from the Fring, Line and QIP applications for devices on iOS and Android OS is added.
• Applications. Workflow. Extraction of data from the Springpad and Catch applications for devices on iOS and Android OS is added.
• Applications. The new group of Multimedia which includes applications of YouTube (iOS and Android OS) and Hide it Pro (iOS) is added.
• Important proofs. The pictures added from the File Browser are exported to the PDF,RTF, XLS and HTML files now.
• The general. The certificate for the OxyAgent application for devices on the Series 60s^3 platform is updated.
• Oxygen Forensic (tm) Extractor. The problem of connection of the password-protected BlackBerry devices is corrected.
• The general. The error which arose on archive copies of iTunes of the big size is corrected.
• Global search. the error 'out of memory' arising by search of a large number of data is corrected.
• Events feed. The incorrect format of date for data of voice mail is corrected.
• Module of extraction of data. The error Access Violation sometimes arising on connection on a cable of several password-protected BlackBerry devices in one session is corrected.
• Module of extraction of data. The window of the error message and a possibility of correct completion of operation of the Module of extraction of data when loading of the damaged backup of OFB is added.
• Module of extraction of data. The error of loading of the archive copy of IPD when using a template is corrected by default

Mobile Criminalist of 2012

The mobile Criminalist of 2012 is the program for judicial technical expertize of cell phones, smartphones, tablets and other mobile devices. Application of low-level data access protocols allows the Mobile Criminalist of 2012 to take much more information, than to other programs of similar appointment.

Version 4.1. includes the section "Joint contacts". This section allows experts to analyze contacts from several different sources, such as Telephone directory, Messages, Magazine, Skype, Gmail and Yahoo, Foursquare applications, etc. Using the analysis of the joint contacts the Mobile Criminalist of 2012 considerably simplifies work of specialists and allows to detect communications between contacts which could remain unnoticed.

In this version there was also a new section integrating applications of fast message exchange: Skype, KiK, WhatsUp, Facebook, Yahoo, etc. Now the Mobile Criminalist of 2012 gives the chance to study the sent, read and delivered messages of the owner of phone, the loaded media files, the contact list, geo-coordinates and other important information.

The section Web browsers was replenished with support of two new popular applications. The mobile Criminalist of 2012 allows to take and study files, such as list of the websites and the loaded data, web tabs and data of web forms and other important information.

With the new version a set of documents according to the program the Mobile Criminalist 2012 was updated. It includes the Mobile Criminalist of 2012. The short management and instructions for connection of devices on the basis of OS iOS Android, Symbian and Windows Mobile in Russian.