Elcomsoft Phone Viewer
iOS 11 Support
Elcomsoft Phone Breaker was recently updated to support the decryption of system backups produced by Apple devices running the latest version of iOS. Elcomsoft Phone Viewer 3.50 follows the suit, adding iOS 11 support to enable experts viewing and analyzing backups obtained from iPhones and iPads powered by Apple’s latest version of the mobile OS.
New Applications Plugin
The new Applications plugin enables users of Elcomsoft Phone Viewer 3.50 to access information about apps installed on the device being analyzed. The Applications plugin displays the list of all apps installed on the device along with their acquisition date (date of purchase for paid apps or date of the first install for the free apps).
New Wi-Fi Plugin
The new Wi-Fi plugin displays the list of saved Wi-Fi networks along with SSID names and passwords. Additional network parameters include network BSSID and encryption standard (the most common being WPA2-Personal and no encryption).
Explore the content of local and cloud backups produced by iOS, BlackBerry 10, Windows Phone 8 and Windows 10 Mobile devices! Elcomsoft Phone Viewer is a small, lightweight tool enabling read-only access to contacts, messages, call logs, notes and calendar data located in mobile backups. In addition, the tool displays essential information about the device such as model name, serial number, date of last backup, etc. Finally, the tool implements access to deleted SMS and iMessages stored in iOS backups.
A Perfect Viewing Companion
Yet another “me too” forensic viewer? We looked hard for a tool we could recommend to our customers for viewing data decrypted or downloaded with Elcomsoft Phone Breaker. No single tool on the market meets our stringent requirements on speed, compatibility, and ease of use. That’s why we introduced a viewing tool of our own.
Elcomsoft Phone Viewer is the ideal viewing companion for Elcomsoft Phone Breaker, enabling full support for all data formats produced by this tool. Regularly maintained and timely updated, Elcomsoft Phone Viewer is the first to receive support for the latest mobile backup formats extracted, downloaded or decrypted with other ElcomSoft tools. Using our mobile acquisition tools? Elcomsoft Phone Viewer is a perfect companion!
Note that Elcomsoft Phone Viewer can only open unencrypted backups as well as iTunes backups with a known password. Should you have a backup file encrypted with an unknown password, use Elcomsoft Phone Breaker to recover the password.
Analyzes Online Activities
Elcomsoft Phone Viewer displays the user's online activities including Web browsing history and search queries, browser bookmarks and opened tabs including page snapshots. Information about recent search queries and last visited Web sites already helped solve multiple cases, and will undoubtedly help investigating crime.
Access to Synced Data
Information such as call logs, contacts, notes, calendars as well as Web browsing activities including Safari history (including deleted items), bookmarks and open tabs can be synced with Apple servers. Unlike iCloud backups that may or may not be created on a daily basis, synced information is pushed to Apple servers just minutes after the corresponding activity has taken place. Once uploaded, synced data can be retained for months with is no option for the end-user to clear the data or disable the syncing.
Synchronized records can be obtained for extended periods of time; much longer than available in iOS devices and device backups. Existing and deleted records are obtained, and filters can be applied to only display deleted records.
Elcomsoft Phone Viewer is ElcomSoft's stock tool for viewing synced data extracted from Apple iCloud with Elcomsoft Phone Breaker. Еhe following types of synced data can be viewed:
- Safari (browsing history, bookmarks, tabs opened on user's devices)
- Calendars, notes, contacts
- Call logs (information about calls made and received)
- Apple Maps (routes, places, searches)
- Wi-Fi (wireless access points, MAC addresses, date, and device added)
- Wallet (everything except payment data)
- Account info (comprehensive information about the user and devices registered on the Apple ID account)
Elcomsoft Phone Viewer can display pictures and videos captured with the phone or saved by one of the many apps. But don’t you worry, there won’t be a big mess of thousands of images appearing in a single thumbnail gallery. The files will be automatically split into a number of categories, making it easy to discover which pictures were captured with the phone’s camera, or received as messages or attachments. A separate category filters out system and application images such as buttons, logos and splash screens. Album view is available to allow you better navigate through thousands of images.
Automatic Location Mapping
Location information is one of the most important EXIF tags available. Elcomsoft Phone Viewer will automatically map the location where the image was taken using Google Maps. The ability to map GPS coordinates extracted from images’ EXIF metadata can become extremely handy during investigations, allowing to discover exactly when and where a particular image was captured.