Release notes

UFED Physical Analyzer, Now supporting

UFED Logical Analyzer & Cellebrite Reader 24,578
device profiles
Version 7.2 | March 2018
5,847 app versions

Highlights UFDR security enhancement

Cellebrite is committed to helping law
• UFDR security enhancement enforcement agencies protect sensitive
• Activate your Cellebrite Reader information whether it’s stored on servers,
• File format viewer saved to a USB drive or emailed. In response
• Supported apps documentation to customer demand and general market
requirements for enhanced security, Cellebrite has added an
App support
optional feature to protect UFDR files.
149 updated application versions for iOS and Android devices

Activate Cellebrite Reader today

Take a moment to activate and register your
Cellebrite Reader product today to access
additional capabilities that can enrich your
digital investigation. Convert BSSID and cell
tower identifier into physical locations for clearer insights on a
device’s location.

New File Format Viewer

Dig deeper into complex, hierarchal file
structures to uncover Tree format files with a
new File Format Viewer tool in UFED Physical
Analyzer 7.2.
2 Cellebrite release notes UFED v7.2

Functionality Activate your Cellebrite Reader

UFDR security enhancement Activate Cellebrite Reader, one time, and enjoy current and
future enrichment capabilities including BSSID data.
Cellebrite has added an optional security layer to UFDR files
produced with UFED Physical Analyzer. Once a UFDR file is The activation process is optional. You can continue to use the
created, users will be presented with an option to protect Reader as you do today by skipping the registration process.
the file. But you will miss out on additional capabilities that could speed
There are 2 protection layers: and enrich your investigation process.

• UFDR protection – only Cellebrite products can open. How to activate Cellebrite Reader:
• Password protection – protect a file with a pre-defined 1. Click on the ‘Get Activation Code’ button to register. A short
password. To open the file, users will need to enter form in My.Cellebrite will appear.
the password.
Cellebrite Reader and Cellebrite Analytics solutions will be able
to automatically read UFDR files even if the optional security
layer is selected.

2. Complete the form and you will receive a code to your email.

Note: Opening protected UFRD files will be supported in a future

Analytics Desktop release.
3 Cellebrite release notes UFED v7.2

3. Enter your email address and code to complete the File Format Viewer
activation process.
Users can dig deeper by investigating file content to get
additional evidence. There are several files such as Property list
(plist) and bplist (Binary plist) which are recovered as part of the
extractions and can hold valuable information.
The File Format Viewer, now integrated in UFED Physical
Analyzer, allows users to view, search and copy readable
content from the following file types without having to use a
separate 3rd party tool:
Tree Formats - Property List (plist), Binary Property List (bplist),
SharedPreferences (shared_prefs), JSON (json), Protocol
Buffers (protobuf), MessagePack (msgpack) and a Facebook
Note: If you are not connected to the internet, you will need to format with no known name.
perform the activation on another computer which is connected to
the internet.

Forensic

Awards 2018

Nominate us Supported apps documentation

Cellebrite is happy to introduce new and improved
Digital forensic organization: documentation that lists the specific iOS and Android apps
Cellebrite supported in UFED Physical Analyzer. Available under the
Phone forensic hardware: Help menu of UFED Physical Analyzer 7.2, the new documents
UFED Touch2
include a complete matrix of applications, operating systems,
Phone forensic software:
UFED 4PC and UFED Physical Analyzer supported features and extraction types. This handy resource
should eliminate some of the guesswork out of determining
which extraction to use and what results to expect.
4 Cellebrite release notes UFED v7.2

Did you know? iOS: Updated apps

UFED Cloud Analyzer for public domain is now
69 updated apps
available FREE OF CHARGE to all UFED Physical
Analyzer customers with an active license. Enrich Aliwangwang 4.5.6
your digital examinations with fast access to public social media Any.DO 4.18.1
and cloud-based data. ASKfm 4.10

UFED Cloud Analyzer for public domain automatically extracts BeeTalk 3.2.22
and preserves public, forensically sound data from Facebook, Booking.com 16.1
Instagram and Twitter in one workflow to: Chrome 64.0.3282.112
Ctrip 6.2.1
• Obtain location information, profiles, media files,
Ctrip (Chinese) 7.10.2
and communications
DJI GO 3.1.28
• Eliminate the time consuming, manual process of gathering, DJI GO 4 4.2.6
organizing and viewing disparate cloud sources Dropbox 82.2
Get your free version of UFED Cloud Analyzer for Facebook 159.0
public domain today: Facebook Messenger 152.0
http://go.cellebrite.com/UFEDCAPublicDomain_Download Flipboard 4.2.2
Foursquare 11.3.1
Garmin Connect 4.3
Glide 6.2.11
Solved issues Gmail 5.0.180121
Google App 42.0
• Chat events have been removed from the Timeline following
Google Docs 1.2018.04203
customer requests. All chat messages remain.
Google Drive 4.2018.05202
• Supporting the new Project VIC json file (new Griffeye format).
Google Maps 4.45
• Decoding of the Huawei LYO-L01 device fails to complete.
Google Translate 5.17.0
• Decoding of the Motorola XT1562 device fails to complete.
Google+ 6.27.0
• A decoding issue affecting LG devices due to a change in the
Grindr 3.24.0
• LG partitions.
HERE Maps 2.0.33
• When merging multiple extractions, including SIM and failing hike messenger 5.4.13
to generate the Cloud account package. Hot or Not 5.46.0
• Decoding of MMS attachments for iOS devices. Hushed 4.1.1
• Decoding of Tumblr app version 9.4.0 (Android). Inbox 1.3.180121
• Decoding of Alcatel 1013X. Instagram 32.0
• Some carved images are missing EXIF data. Kakao Story 4.9.1
• Decoding of the BlackBerry10 Q10 device. KakaoTalk 7.0.5
KeepSafe 8.1.1
LINE 8.1.1
LinkedIn 9.1.65
Mail.Ru 9.1.1
MobileVOIP Cheap Calls 2.0.0
Momo 8.7
Musical.ly 6.6
Nimbuzz 5.11.0
OkCupid 10.3.0
Opera Mini 16.0.8
Path 6.8.1
Pinterest 6.43
QQ 7.5.0
5 Cellebrite release notes UFED v7.2

iOS: Updated apps Android: New and updated apps

69 updated apps (cont...) 2 new apps, 48 updated apps (cont...)

Runtastic 8.2 Google Calendar 5.8.18-185364427-release

Scruff 5.5102 Google Docs 1.18.032.03.36
Skype 8.15 Google Maps 9.71.0
Snapchat 10.25.2.0 Google Photos 3.13.0.183914708
Swarm 5.4 Google Quick Search Box 7.19.20.21.arm
Text Free Ultra Texting 11.9 Google Translate 5.16.0.RC09.184610470
Text Me Up 3.10.2 Google+ 9.29.0.183285634
Text Me! 3.10.1 Grindr 3.23.0
Text Now 8.20.1 GroupMe 5.17.1
textPlus 7.2.0 HERE WeGo 2.0.11989
Threema 3.0.6 Hot or Not 5.50.0
Tinder 8.6.0 ICQ 7.0(822681)
Uber 3.284.10001 imo 9.8.000000009621
UC Browser 11.3.1.1058 Inbox 1.66.185460467.release
Viber 8.2.1 Instagram 32.0.0.16.94
Vkontakte 3.3 KakaoTalk 7.0.5
Voxer 3.21.17 Keeper 11.2.1
WeChat 6.6.3 Kik Messenger 12.4.1.19850
Weibo 8.1.2 LINE 8.2.1
WhatsApp 2.18.22 LinkedIn 4.1.134
Whisper 8.9.3 Mail.Ru 6.5.0.23918
Yandex Browser 18.1.1.1003 MeetMe 12.8.1.1175
Yandex Mail 3.5.6 Mr. Number 4.0.4
Musical.ly 6.6.0
Android: Updated apps mysms 6.4.9
80 updated apps Nike+ Run Club 2.12.0
Nimbuzz 5.9.0
Any.DO 4.9.0.8 Odnoklassniki 18.2.9
AppLock 2.32.7 OkCupid 10.4.0
ASKfm 4.9.5 One Drive 5.3
Badoo 5.50.0 Opera Mobile 45.0.2246.125120
BBM 3.3.12.135 Outlook.com 2.2.99
Blendr 5.50.0 Path 6.8.1
Booking.com 14.4 Pokemon GO 0.91.1
Chrome 64.0.3282.137 Runtastic 8.2.2
CM Locker 4.8.7 Signal Private 4.15.5
CM Security Antivirus 4.4.2 Messenger
AppLock Skout 5.3.0
CM Security Browser 5.22.10.0007 Snapchat 10.25.5.0
DJI GO 4 4.2.6 SwiftKey 6.7.6.20
Dropbox 82.2.2 Sygic 17.3.13
Evernote 7.16.1 Telegram Messenger 4.8.4
Expedia 18.6.1 Text Free Ultra Texting 8.9.1
Facebook 159.0.0.38.95 Text Me Up 3.10.1
Facebook Messenger 153.0.0.17.94 Text Me! 3.10.1
Flipboard 4.1.13 Text Now 5.44.1
Glide Glide.v10.345.303 textPlus 7.1.9
Gmail 8.1.28.186013355.release Tinder 8.6.2
6 Cellebrite release notes UFED v7.2

Android: New and updated apps

2 new apps, 48 updated apps (cont...)

Truecaller 8.75.7
Tumblr 10.1.0.02
Twitter 7.32.0
Uber 4.195.10002
UC Browser 12.0.0.1088
Vaulty 4.6 release r6269
Viber 8.3.0.13
VIPole 1.8.83
Vkontakte 5.3
Voxer 3.18.11.20657
WhatsApp 2.18.46
Whisper 9.9.6
Yandex Browser 17.11.1.628

Cryptographic hash values information

You can validate the integrity of Cellebrite’s UFED software files by verifying their cryptographic hash values. This can help you
identify whether a file has been changed from its original state.

Product MD5 SHA256 (Recommended)

UFED
Physical 1fa4f71fc20d4b58f467dd5e065fd1ff 34a834841bac6d0b0709050ffe53b6fa19813e728933101662355883aaff882d
Analyzer
UFED
Logical 7fd748cf45af2acd9d506e2484612153 579e98ddbf53b65eea239b224f4c9e8851ed494edb4ea54004912814b18649ae
Analyzer
Cellebrite cff8d8ac2f634d0a6224f342b5c4edf2 e3d072366d75330e77432d126391fe3a2a81b6316e19a4fd01010ccd145c9d49
Reader