Cellebrite has released a maintenance version of UFED Physical Analyzer and UFED Logical Analyzer 5.0.2.
WhatsApp New Encryption (crypt9) – WhatsApp recently introduced a new database encryption, entitled crypt9. This encryption affects only the backup databases, while the main database is still unencrypted. UFED Physical Analyzer 5.0.2 now decrypts WhatsApp’s new backup database.
UFED Physical Analyzer and UFED Logical Analyzer 5.0.2 addresses the following issues:
A crash failure when decoding large quantities of chat messages has been resolved.
An issue with generating large PDF reports has been resolved.
An issue with the total number of records presented in the Extraction Summary window has been resolved, presenting the accurate numbers.
An inconsistency issue with decoding results due to a localization problem with Hebrew and Turkish languages has been resolved, presenting accurate decoding results.
In rare cases, the number of data files recovered might have been inaccurate during the re-decoding process, and this has now been resolved, presenting the same results at any given decoding process.