Visual NAND Reconstructor 2.0 update
We are getting more and more requests from our users to develop technology or tool for data recovery and forensics of broken smartphones. And this is obvious trend: nowadays people around the world store more and more vital data on the portable gadgets such a smartphones, tables, etc. As our company keeps up with the times, now our users get ability to use VISUAL NAND RECONSTRUCTOR for data retrieval from any broken device based on Android. In a couple with smartphone adapter kit this is unique solution on the market.
Here are new features:
ANDROID DATA EXTRACTOR
Android Data Extractor is an advanced Forensic and Data Recovery platform and part of VNR that helps to retrieve information from memory chips of broken Android smartphones.
Here’s what you can extract with current version of Android Data Extractor:
– Messages: all sms and mms with their attachments
Dynamic interface of data representation with it’s flexible functionality gives you ability to find required information very fast.
Use our sorting, smart filtering and multilevel grouping options to create your own view of the retrieved information.
And finally use our embeded reporting system to export all recovered data to .xlsx files. It will transition all your settings such as sorting, filtering and grouping conditions that you applied in VNR.
Just download sample report of contacts and messages to estimate its flexibility.
Quick video guide for Android Data Extractor
Extract all contacts from Android mobile device very easy and fast.
In the current version you can extract all contacts from Phonebook.
Work with contacts in two modes – short and detailed.
– For every contact in short view you can see the most important information such as name, phones, e-mails, last contacted
time, number of calls, account and source which contact belongs to and also flags of was this contact favorite or deleted.
Very compact and informative data displaying allows you to notice most interesting contacts in a moment.
– To get a very detailed information you need to press toggle button “Show/Hide detailed information”.
There’s a huge amount of information available – photo, addresses, organization data, events, notes, group, website, nickname, relations etc.
Get all sms and mms from Android mobile device in a few seconds.
At first sight you can see the maximum of information:
– type of message
– folder it belongs to
– timestamp, parties, body and source of the message
– flags (whether the message deleted or read)
Every mms has attachments which you can see in detailed view by pressing toggle button “Show/Hide attachments”.
Instant access to the most interesting messages with use of filters and grouping.
eMMC IMAGE EXTRACTION MODULE WITH SHADOW COPY ALGORITHMS
This is a long expected and very efficient addition to the VNR Smartphone kit. It helps to extract data from working and unstable eMMC chips. It was very inconvenient to use hex viewers and other utilities for eMMC physical image extraction because they don’t have a simple way to select and clone the data partition only. There are situation when you begin to extract physical image out of eMMC chip and it fails at one point so you have to reconnect device and extract image again from scratch. Moreover, user’s data partition is normally shifted from beginning by system partitions (sometimes 20-40% of dump).
We solved this problem too with two new elements of VNR which must be connected together – eMMC extraction module and Shadow copy element.
Quick video guide for eMMC and Shadow Copy elements
- eMMC element
eMMC element allows to use externally connected adapter with memory chip (or any other external device) as an image source.
In case if chip is unstable and fails to read data just reconnect adapter and it’ll be automatically connected again. Moreover we save information about read/unread/bad sectors to the map if you use Shadow Copy element. It helps to continue physical image extraction from the point where it failed. The sector that was extracted will never be read again (until you clear the map).
It’s fastest, efficient and safiest possible way to extract physical image out of eMMC memory chips.
- Shadow copy element
Shadow copy element is a real-time buffer for the data that you read out of eMMC chip and an image file container.
You can observe the file system and files through Shadow Copy element without having to image chip first. All sectors you get access to will be READ ONCE and stored im image with mark in map.
When you open file system viewer on Shadow copy element it takes a while to image metadata automatically and show you partition layout and file systems afterwards.
You can selectively image any file, folder or partition you need. Allocated (actual files) or Unallocated space (deleted data) extraction. Extract allocated or anallocated space only on the selected partition. The fragments of extracted data will be shown on the map of Shadow Copy element so you can analyze physical data allocation.
This mode is supported for FAT, NTFS, Ext file systems in the current version. A new unique option to separately extract and compress (remove gaps between fragments) chunks of unallocated space is supported for mentioned file systems.
VISUAL NAND RECONSTRUCTOR PLATFORM IMPROVEMENTS
- WM Partition support (Windows Phone 7.x)
- Automatic search of partition layout schemes and partitions of all supported file systems.
- Support of GPT for 512,1024,2028,4096,8192,16384 bytes sector size
- BCH reread option has been modified with new detailed log
- New NAND commander
- New SET FEATURE/GET FEATURE command for LUNs (0xD4, 0xD5) of NAND chips
- Extended support of ONFI and JESD page decoding
New NAND chips
- 2C64403CA9 29F128G08CFEFB
- 2C48044685 FTL62AP-16G
- 2C64643CA5 4SD22NW553
- 2C646456A5 FxxL94C61KDBABWP
- 2CA4E554A9 PF574-10AL
- 45B394A5E6 SDTNKGHSM-8192
- 45C595A5EA SDTNKHHSM-16384
- 45C799C3AA SDTNLMBHSM-4096
- 98DE989272 RT64G08UCT1-53
- 98DE989272 CA6GL1450D4
- 983A95937A TH58TEG9DDJBA89
- 983A95937A TH58TEGBDDKTA20
- 983A95937A TU89G5LAPA
- 983A999276 microSD Kingston
- 983AA4937A TA17G1LB
- 983AA89276 HVNJ0F8
- 983AA89276 Monolith
- 983AA89276 TC58TE37JDKTA03
- 983C95937A FA64B08UCT1
- 983C95937A FA64B08UCT1-FC
- AD3A18A361 DET0128GWD8HGT5
- ADDE94EB74 D27UCG8T2BYR
- EC3CE9DE88 THGSTMP-1Q06-T1421
- 454CA8A276 mSD
- 45D5843272 mSD
- 983C95937A SDXC Kingston
- 9875A5BA20 SDTNGAHE0-256
- ADD7942544 HY27UDG8VEMYR
- 2CA4E554A9 MT29F1T08CUECBH8
- 2CAC901556 PF226
- 453A949376 05446 064G
- 454C999276 SDTNPNAHEM-016G
- 45DEA8827A Unknown
- 8984643CA9 Unknown
- 983A98A376 FD32B08UCT1-FA
- 983AA89276 Monolith
- 983C95937A FA64B08UCT1-FC
- ADE794DA74 H27QDG8VEBIR-BCB
- EC79A5C0EC K9K1G08U0M
- 2CBC905554 JW391
- 454C95937A monoSD
- 45DE98A272 SDTNSCAMA-008G
- ADBA805500 H8BCS0SI0MAP
- ADDC8015AD HY27UG084G2M
- EC78A5C0EC KAG004003M
- ECBC005554 KA1000012M-BJTT
- 2C646456A5 MT29F64G08CBEFBWP
- 20BC105554 NANDCBR4N9
- 89682446A9 JS29F64G08CCMD1
New scramblers (XOR keys)
New monolithic chip pinouts
- EN2683B BA_(ecc23b)_4187
- Sandisk monoSD_17663(ecc146b)
- Folder structure creation error for Ext and HFS+(X)
- Object size error in Ext
- File System Viewer speed is significantly improved, especially for folders with huge amount of files
- Read ID errors
- Many small bugs have been fixed
And all together this is Visual Nand Reconstructor 2.0!
This essential update is available for all users with Premium Support subscription. To check your subscription status or extend it, please send a request to firstname.lastname@example.org
VNR – your data has never been so close to you!
Your ruSolut Team