[Forensic time] Extract Userdata from a dump made by CM2 [Video Guide]
 

Hello guys,
Still there are many doubts in almost all users, how to recover/extract userdata from a dump made by cm2.

As we know Infinity Memory tool [http://forum.gsmhosting.com/vbb/f296...anual-2179982/ is introduced in CM2 QLCM module and which is really a great addition to the module on user demand and also will be activated in other module too, then this process should help every technician to extract the valuable data from a mobile and can earn more :D :D.


How to make a dump using CM2 Memory Tool??

Just follow the user manual on the support, or directly click here


PROCESS

1. Open "AccessData FTK Imager.exe".
2. Click on "File".
3. Click on "Add Evidence item...".
4. Select "Image File", click on "Next".
5. Here click on "Browse", and select the image file, you have taken backup using CM2.
6. Click on "Open" and then "finish".
   
7. Now in the "Evidence tree", Click on your selected image[in my case USERDATA.bin].
8. Then click on NONAME [ext4]
9. Then click on [root].
   
10. Here you will see a list of folders. Go to folder named as "media".
    
11. There it exists all the data of internal user available storage.
12. There you can select your desired data, right click on it and select extract data to save it to your computer..

Let's see in the below video how does it work.




Hoping, Some One will definitely get helped after following this thread/watching this video.

P.S: The userdata can be recovered from the dump of a semi-dead/hang on logo mobile also, only if the userdata is not erased/destroyed or the mobile is not formatted.


DOWNLOAD

1. For 32 bit AccessData FTK Imager - Download - 4shared
   
2. For 64 bit AccessData_FTK_Imager_3.4.3_x64 - Download - 4shared

If like this post, don't forget to click on thanks button ;).

BIG credits to Infinity team for this wonderful tool.
More to Come by the GREAT Infinity Team. Just stay tuned.

Problem in Download Link
 

Do Check the download link
its says

hello
 

Both Download Link are working well,

Whats your problem....

Dont spaming here....

What the password for this Winrar file?

AccessData_FTK_Imager_3.4.3_x64.rar

Password mentioned in both the file in their comments.
Anyway password for both the archive is 'Infinity'.

hello masters,
help me

i am unable ot use this guide.
cant open dump from mtk

Hello,
whats the problem exactly. describe more..

@ Buddy you are awesome and thank you so much.

Is this memory tool for Qualcomm only?

Actually It needs Userdata Dump.
The crucial thing is that it should not be encrypted.


Well, In some module, Infinity team has already added Direct data recovery through software.
May be Infinity team will activate this feature in other module..

But, Who knows the future!!!