Smartphones
(Mobile Phones)
Tablets
to connect the mobile devices by conventional means with a cable
Get the full access to the device using specialized modes to get the non-encrypted data in case if the device had been rooted or in case if the mobile device OS is not booting.
to get access to data with a Chip-Off method
Analyze the mobile device content extracted with the Chip-off method or upload image files created with third-party solutions. Recover the data considered ‘deleted forever’ by the other tools
With the special SD/MMC adapter, you can deal with the following types of MMC and MCP memory chips:
 |
 |
 |
 |
 |
 |
 |
|
| Type/Size | 11.5 x 13 | 10 x 11 | 9 x 11 | 14 x 18 | 12 x 18 | 12 x 16 | 15 x 15 |
| eMMC 153/169 | + | + | + | + | + | + | + |
| eMCP 162/186 | + | + | + | + | + | + | + |
| eMCP 221 | + | + | + | + | + | + | + |
| eMCP 529 | + | + | + | + | + | + | + |
The PC-3000 Mobile specialized modes let you deal with damaged mobile devices. In addition, it has the features to deeply analyze and recover logically damaged Files Systems: FAT12/16/32, NTFS, Ext2/3/4, HFS+, exFAT, F2FS, etc.
With the PC-3000 Mobile Basic content parsing modules you can get access to phone contacts, calendar, SMS, WhatsApp, mediafiles, general phone information, the list of Wi-Fi networks, and accounts information on previous Android versions without encryption.
The main task of the PC-3000 Mobile Basic is to get access to the data other than parsing.
So, after you have received access to the data with the PC-3000 Mobile Basic, you can work with this data using other third party tools.
After you get the data, you may export it to the formatted report, one of the transport formats, or files. It is also possible to generate data exports compatible with other data analysis tools that you may have in your lab to continue the investigation.
| MMC memory chips | Types: eMMC 153/169, eMCP 162/186, eMCP 221, eMCP 529 |
| Sizes: 11,5x13, 10x11, 9x11, 14x18, 12x18, 12x16, 15x15 | |
| Processors models |
The methods used in this hardware-suite are universal, depend on the processor model and can be applied to different mobile device models. The capabilities and the efficiency of the methods of the hardware-software suite depend on whether there is software or hardware encryption of the mobile device. |
Depending on the technical capabilities, modern mobile devices (smartphones, telephones, etc.) might use different types of memory to store data: internal device memory, SIM card memory, expansion card memory, cloud storage memory.
Retrieving contents of the internal memory of the device is very important during data recovery. The internal memory of a modern mobile device is a physically independent non-volatile solid-state memory chip that has one of the following interfaces: NAND, eMMC, UFS, PCIe. However, the newer the device and the installed OS, the more internal memory is logically "binded" to the main controller of a smartphone or a tablet and their peripheral units.
Besides, the need for reliable protection of user data leads to even more reliable and persistent mechanisms used by the developers of mobile platforms to restrict unconventional or unauthorized access. Initially, the developers only used software methods to do that. But in modern mobile devices, these methods became more sophisticated due to their intrinsic binding to the unique hardware data of the specific processor of a smartphone or a tablet. As a result, you can not use the memory chip apart from a fully-functional mobile device to recover data.
That is why there are many requirements for mobile data recovery methods. And that is why all existing data recovery tools have a limited support of mobile devices.
The first method to work with mobile devices is a connection via the standard interface. You may also use it when the smartphone/tablet has a data protection mechanism based on the hardware uniqueness or if it is not possible to disassemble the device.
If a smartphone or a tablet is physically damaged, you should repair it to a basic- or fully-functional state, depending on the interface type and the method you’re going to use. In such a case, we do not recommend using a Chip-off method.
Another important thing is the hardware platform of the device and the installed OS. The device itself, its state, and the task also influence the data recovery methods. To choose the correct approach, please select the device in the menu or access method from the list and follow the instructions of the wizard.
The universal way of data recovery via the standard interface of a mobile device based on the Android OS is to use the ADB protocol (Android Debug Bridge). The procedure requires compliance with the following conditions:
Here is the video guide on how to get access to a mobile device via the ADB protocol:
Another method of access data via the standard interface is to use the hardware capabilities of modern mobile devices. E.g. such hardware platforms as MediaTek, Qualcomm, LG, Spreadtrum, Kirin, Exinos, Apple have their own debug protocol executed at the early stages of the device initialization. In many cases, this method allows you to access data without the need for the root mode.
Here is the video guide on how to get access to a mobile device via the debug protocol:
In most cases, if a smartphone or a tablet is damaged, the only way to recover data is to work with their internal memory directly. This method implies that the interface type of the memory chip is supported and there are no other restrictions. This method can be applied if there is no encryption on the mobile device and if the OS is Android 7.0.1 and older.
So, to recover data you need to disassemble the device and extract the mainboard with the memory chip. Then you can proceed with the chip-off and clearing of the contacts. Please note, that it’s very important to do it carefully, complying with all the requirements for the procedure. Then you install the microchip into the specialized eMMC/eMCP adapter, run the software, and follow the instructions on the screen and in the manual.
All the information inside the internal memory of the mobile devices is stored as files. This is not convenient for visual perception or further analysis because almost all types of data in smartphones or tablets use special apps to display data. These apps can technically have any storage format, but in practice, there are some standard file types.
That is why it is not possible to recover user data in the same way we used to see it on the mobile device screen. For example, the standard contacts info has a very complex storage format that consists of several database files with a complex linkage. As a result, an additional stage of data recovery – parsing of the standardized content – is required. As such, we need to extract user data that will be enough for further analysis from the technical storage format, taking into account the characteristics of a particular manufacturer and the OS version. At the same time, such an extraction should be individual for each data (content) type.
The PC-3000 Mobile allows you to upload previously read dumps of the mobile devices' external memory to perform further parsing of the standardized content. The Module contains special algorithms to work with damage storage formats as well as proprietary format decoders to extract data that conventional tools consider as “deleted”.
The PC-3000 Mobile gets regular software updates. Our developers constantly work on the enhancements and add the support of new software functions. You can download the latest software versions on the TS Portal.
| 1. | PC-3000 Mobile Basic controller | 1 pc. |
| 2. | PC-3000 Mobile power supply unit | 1 pc. |
| 3. | SD/MMC
adapter + 7 size constraint frames |
1 pc. |
| 4. | USB 3.0 - USB Type-C adapter | 1 pc. |
| 5. | MicroUSB - USB Type-C adapter | 1 pc. |
| 6. | USB 3.0 cable | 1 pc. |
| 7. | USB-USB Type С cable | 1 pc. |
| 8. | USB-micro USB cable | 1 pc. |
| 9. | Universal download сable | 1 pc. |
| 10. | PC-3000 Mobile Basic software | 1 pc. |
| 11. | User manual | 1 book |
Today, we cannot imagine our lives without portable devices. New models pop up every day: we use them to communicate, to study, to work. But so do the criminals! The complexity of modern mobile devices may bring you an unaccounted number of challenges during evidence recovery. That is why it is so important to have at your disposal every forensic data recovery tool that can help you with the investigations!
Smartphones
(Mobile Phones)
Tablets
The PC-3000 Mobile PRO includes a specialized set of ACE Lab unique methods and utilities meant for low-level access to mobile devices with the help of a USB cable to recover data in the most complicated cases.
Get the data even if the mobile device is damaged! Minimum operating condition of the mobile device is required
Analyze the content of the mobile devices extracted with the High-level Access or the Chip-off Method thanks to the integrated content parser! You can also upload the images created with third-party solutions and extract data that conventional tools consider as "deleted". The reports allow you to summarize information about the suspect device you are working with.
The PC-3000 Mobile PRO specialized modes let you deal with damaged mobile devices. In addition, it has the features to deeply analyze and recover logically damaged Files Systems: FAT12/16/32, NTFS, Ext2/3/4, HFS+, exFAT, F2FS, etc.
Extract evidence with the PC-3000 Mobile PRO set of analytical functions, tools for forensic analysis, and content parsing modules!
Get the access to the phone contacts, calendar, SMS, WhatsApp, mediafiles, general phone information, the list of Wi-Fi networks, and accounts information. The Android version does not matter!
The main task of the PC-3000 Mobile PRO is to get access to the data other than parsing.
So, after you have received access to the data with the PC-3000 Mobile PRO, you can work with this information using other third party tools.
After you get the data, you may export it to the formatted report, one of the transport formats, or files. It is also possible to generate data exports compatible with other data analysis tools that you may have in your lab to continue the investigation.
With the special SD/MMC adapter, you can deal with the following types of MMC and MCP memory chips:
|
|
|
|
|
|
|
|
| Type/Size | 11.5 x 13 | 10 x 11 | 9 x 11 | 14 x 18 | 12 x 18 | 12 x 16 | 15 x 15 |
| eMMC 153/169 | + | + | + | + | + | + | + |
| eMCP 162/186 | + | + | + | + | + | + | + |
| eMCP 221 | + | + | + | + | + | + | + |
| eMCP 529 | + | + | + | + | + | + | + |
| MMC memory chips | Types: eMMC 153/169, eMCP 162/186, eMCP 221, eMCP 529 |
| Sizes: 11,5x13, 10x11, 9x11, 14x18, 12x18, 12x16, 15x15 | |
| Processors models |
If the PC-3000 Mobile PRO does not support your mobile device but your device is based on the supported controller, please contact our Technical Support through the New TS Portal ts.acelab.eu.com or via email ts@acelab.eu.com with your request, and our developers will do their best to add your device to the support list in the nearest time. |
The PC-3000 Mobile PRO uses specialized low– and high-level access methods created for each supported processor. It allows you to recover data on modern mobile devices with up-to-date data storage and protection technologies.
The instruments of the PC-3000 Mobile PRO are universal and can be quickly adapted for most of the smartphone models based on the supported processors. For that, just contact our Technical Support through the New TS Portal ts.acelab.eu.com or via email support@acelab.eu.com with your request, and our developers will do their best to add your device, that had not been supported earlier, to the support list within the nearest time.
The number of supported processors and mobile devices is growing. Thus, if you have a particular case, we recommend you to contact our Technical Support to check whether your mobile device is currently supported.
The first method to work with mobile devices is a connection via the standard interface. You may also use it when the smartphone/tablet has a data protection mechanism based on the hardware uniqueness or if it is not possible to disassemble the device.
If a smartphone or a tablet is physically damaged, you should repair it to a basic- or fully-functional state, depending on the interface type and the method you’re going to use. In such a case, we do not recommend using a Chip-off method.
Another important thing is the hardware platform of the device and the installed OS. The device itself, its state, and the task also influence the data recovery methods. To choose the correct approach, please select the device in the menu or access method from the list and follow the instructions of the wizard.
The universal way of data recovery via the standard interface of a mobile device based on the Android OS is to use the ADB protocol (Android Debug Bridge). The procedure requires compliance with the following conditions:
Here is the video guide on how to get access to a mobile device via the ADB protocol:
Another method of access data via the standard interface is to use the hardware capabilities of modern mobile devices. E.g. such hardware platforms as MediaTek, Qualcomm, LG, Spreadtrum, Kirin, Exinos, Apple have their own debug protocol executed at the early stages of the device initialization. In many cases, this method allows you to access data without the need for the root mode.
Here is the video guide on how to get access to a mobile device via the debug protocol:
In most cases, if a smartphone or a tablet is damaged, the only way to recover data is to work with their internal memory directly. This method implies that the interface type of the memory chip is supported and there are no other restrictions. This method can be applied if there is no encryption on the mobile device and if the OS is Android 7.0.1 and older.
So, to recover data you need to disassemble the device and extract the mainboard with the memory chip. Then you can proceed with the chip-off and clearing of the contacts. Please note, that it’s very important to do it carefully, complying with all the requirements for the procedure. Then you install the microchip into the specialized eMMC/eMCP adapter, run the software, and follow the instructions on the screen and in the manual.
All the information inside the internal memory of the mobile devices is stored as files. This is not convenient for visual perception or further analysis because almost all types of data in smartphones or tablets use special apps to display data. These apps can technically have any storage format, but in practice, there are some standard file types.
That is why it is not possible to recover user data in the same way we used to see it on the mobile device screen. For example, the standard contacts info has a very complex storage format that consists of several database files with a complex linkage. As a result, an additional stage of data recovery – parsing of the standardized content – is required. As such, we need to extract user data that will be enough for further analysis from the technical storage format, taking into account the characteristics of a particular manufacturer and the OS version. At the same time, such an extraction should be individual for each data (content) type.
The PC-3000 Mobile allows you to upload previously read dumps of the mobile devices' external memory to perform further parsing of the standardized content. The Module contains special algorithms to work with damage storage formats as well as proprietary format decoders to extract data that conventional tools consider as “deleted”.
The PC-3000 Mobile gets regular software updates. Our developers constantly work on the enhancements and add the support of new mobile devices. You can download the latest software versions on the New TS Portal ts.acelab.eu.com.
If the PC-3000 Mobile PRO does not support your mobile device but your device is based on the supported controller, please contact our Technical Support through the New TS Portal or via email ts@acelab.eu.com with your request, and our developers will do their best to add your device to the support list in the nearest time.
| 1. | PC-3000 Mobile PRO controller | 1 pc. |
| 2. | PC-3000 Mobile power supply unit | 1 pc. |
| 3. | SD/MMC
adapter + 7 size constraint frames |
1 pc. |
| 4. | USB 3.0 - USB Type-C adapter | 1 pc. |
| 5. | MicroUSB - USB Type-C adapter | 1 pc. |
| 6. | USB 3.0 cable | 1 pc. |
| 7. | USB-USB Type С cable | 1 pc. |
| 8. | USB-micro USB cable | 1 pc. |
| 9. | Universal download сable | 1 pc. |
| 10. | PC-3000 Mobile PRO software | 1 pc. |
| 11. | User manual | 1 book |
| 12. | Equipment hard case | 1 pc. |
