View Single Post
Old 02-19-2017, 15:07   #1 (permalink)
No Life Poster
Join Date: Dec 2013
Location: India
Posts: 1,891
Member: 2082450
Status: Offline
Thanks Meter: 1,452
Arrow [Forensic time] Extract Userdata from a dump made by CM2 [Video Guide]

Hello guys,
Still there are many doubts in almost all users, how to recover/extract userdata from a dump made by cm2.

As we know Infinity Memory tool [ is introduced in CM2 QLCM module and which is really a great addition to the module on user demand and also will be activated in other module too, then this process should help every technician to extract the valuable data from a mobile and can earn more .

How to make a dump using CM2 Memory Tool??

Just follow the user manual on the support, or directly click here

  1. Open "AccessData FTK Imager.exe".
  2. Click on "File".
  3. Click on "Add Evidence item...".
  4. Select "Image File", click on "Next".
  5. Here click on "Browse", and select the image file, you have taken backup using CM2.
  6. Click on "Open" and then "finish".
  7. Now in the "Evidence tree", Click on your selected image[in my case USERDATA.bin].
  8. Then click on NONAME [ext4]
  9. Then click on [root].
  10. Here you will see a list of folders. Go to folder named as "media".
  11. There it exists all the data of internal user available storage.
  12. There you can select your desired data, right click on it and select extract data to save it to your computer..

Let's see in the below video how does it work.

Hoping, Some One will definitely get helped after following this thread/watching this video.

P.S: The userdata can be recovered from the dump of a semi-dead/hang on logo mobile also, only if the userdata is not erased/destroyed or the mobile is not formatted.

  1. For 32 bit AccessData FTK Imager - Download - 4shared
  2. For 64 bit AccessData_FTK_Imager_3.4.3_x64 - Download - 4shared

If like this post, don't forget to click on thanks button .

BIG credits to Infinity team for this wonderful tool.
More to Come by the GREAT Infinity Team. Just stay tuned.
  Reply With Quote
The Following 23 Users Say Thank You to chandanps18 For This Useful Post:
Show/Hide list of the thanked
Page generated in 0.07464 seconds with 7 queries