GSM-Forum - View Single Post - [Forensic time] Extract Userdata from a dump made by CM2 [Video Guide]

chandanps18 · 02-19-2017, 15:07

Hello guys,
Still there are many doubts in almost all users, how to recover/extract userdata from a dump made by cm2.

As we know Infinity Memory tool [http://forum.gsmhosting.com/vbb/f296...anual-2179982/ is introduced in CM2 QLCM module and which is really a great addition to the module on user demand and also will be activated in other module too, then this process should help every technician to extract the valuable data from a mobile and can earn more

.

How to make a dump using CM2 Memory Tool??

Just follow the user manual on the support, or directly click here

PROCESS

Open "AccessData FTK Imager.exe".
Click on "File".
Click on "Add Evidence item...".
Select "Image File", click on "Next".
Here click on "Browse", and select the image file, you have taken backup using CM2.
Click on "Open" and then "finish".
Now in the "Evidence tree", Click on your selected image[in my case USERDATA.bin].
Then click on NONAME [ext4]
Then click on [root].
Here you will see a list of folders. Go to folder named as "media".
There it exists all the data of internal user available storage.
There you can select your desired data, right click on it and select extract data to save it to your computer..

Let's see in the below video how does it work.

Hoping, Some One will definitely get helped after following this thread/watching this video.

P.S: The userdata can be recovered from the dump of a semi-dead/hang on logo mobile also, only if the userdata is not erased/destroyed or the mobile is not formatted.

DOWNLOAD

For 32 bit AccessData FTK Imager - Download - 4shared
For 64 bit AccessData_FTK_Imager_3.4.3_x64 - Download - 4shared

If like this post, don't forget to click on thanks button

.

BIG credits to Infinity team for this wonderful tool.
More to Come by the GREAT Infinity Team. Just stay tuned.

02-19-2017, 15:07	#1 (permalink)
chandanps18 No Life Poster Join Date: Dec 2013 Location: India Posts: 1,893 Member: 2082450 Status: Offline Thanks Meter: 1,454	[Forensic time] Extract Userdata from a dump made by CM2 [Video Guide] Hello guys, Still there are many doubts in almost all users, how to recover/extract userdata from a dump made by cm2. As we know *Infinity Memory tool* [http://forum.gsmhosting.com/vbb/f296...anual-2179982/ is introduced in CM2 QLCM module and which is really a great addition to the module on user demand and also will be activated in other module too, then this process should help every technician to extract the valuable data from a mobile and can earn more . How to make a dump using CM2 Memory Tool?? Just follow the user manual on the support, or directly click here PROCESS Open "AccessData FTK Imager.exe". Click on "File". Click on "Add Evidence item...". Select "Image File", click on "Next". Here click on "Browse", and select the image file, you have taken backup using CM2. Click on "Open" and then "finish". Now in the "Evidence tree", Click on your selected image[in my case USERDATA.bin]. Then click on NONAME [ext4] Then click on [root]. Here you will see a list of folders. Go to folder named as "media". There it exists all the data of internal user available storage. There you can select your desired data, right click on it and select extract data to save it to your computer.. Let's see in the below video how does it work. Hoping, Some One will definitely get helped after following this thread/watching this video. P.S: The userdata can be recovered from the dump of a semi-dead/hang on logo mobile also, only if the userdata is not erased/destroyed or the mobile is not formatted. DOWNLOAD For 32 bit AccessData FTK Imager - Download - 4shared For 64 bit AccessData_FTK_Imager_3.4.3_x64 - Download - 4shared If like this post, don't forget to click on thanks button . BIG credits to Infinity team for this wonderful tool. More to Come by the *GREAT Infinity* Team. Just stay tuned.