GMDSOFT’s Participation at International Police Expo 2023 – Showcasing Our Accomplishments

GMDSOFT’s Participation at International Police Expo 2023 – Showcasing the Accomplishments

 

GMDSOFT was honored to partake in the prestigious International Police Expo 2023, an exceptional and significant opportunity for our team to engage directly with Indian customers. During this event, we had the privilege to listen to our esteemed customers, understand their requirements, and empathize with the challenges they face in their investigative endeavors.

 

Our presence at the expo generated considerable interest in our mobile forensic software and particularly in our cutting-edge AI-based video forensics software, MD-VIDEO AI, and drone forensics software, MD-DRONE. Our team remained occupied, providing product demonstrations and engaging in in-depth discussions regarding the features and functionalities of these solutions with numerous visitors.

 

Additionally, we proudly introduced our latest Unlock feature for Xiaomi Redmi Note 11, showcasing it to the market for the first time. Live demonstrations were conducted at our booth, allowing booth visitors to set passwords in both numerical and pattern formats. The impressive capabilities of MD-NEXT were on full display as it swiftly and efficiently deciphered the passwords within a mere 10 minutes.

 

The Korean fans we had as gifts for the expo visitors were a massive hit! They were so loved that they sold out in no time. We’re sorry we couldn’t hook everyone up with a fan, but don’t worry, we’ll come prepared with way more next time!

 

Our experience at the International Police Expo in India this year was truly remarkable, as we gained invaluable insights from our interactions with Indian customers. We extend our heartfelt gratitude to all the visitors who took the time to explore our product lineup, MD-Series. As a promise to our customers, we are committed to further developing our products to align with their specific needs and empower their investigative efforts.

 

 

We eagerly anticipate the opportunity to meet our valued customers again in the future. Until then, thank you for your continued support and interest in GMDSOFT and our offerings.

 

 

 

 

 

2023 Q2 MD-Series Release Note Highlights!

We are excited to present the key highlights of the MD-Series release notes for Q2 2023.

Here is the summary of the full release note highlights!

 

 

 

MD-NEXT  v1.92.6 ~ v1.92.12

Supported new phone models – 29 Manufacturers, 469 Models

-Android Live supports automatic activation of hidden menus in Samsung Smart Switch app.

-SIM cloning feature, which enables the importation of SIM information from an extracted MDF file and replication onto a dedicated SIM card.

-Android full filesystem method supports an extended range of supported versions for the latest firmware updates.

 

 

MD-RED  v3.10.13 ~ v3.10.18

 Supported New Apps – 4 iOS Apps, 8 Android Apps

-Supports new multimedia format ‘RMVB’.

 

 

MD-LIVE  v3.4.27 ~ v3.4.29

-Android Live supports automatic activation of hidden menus in Samsung Smart Switch app.

-Hash set improved the performance of adding & searching bulk hash set files.

-Added a new camera for Investigation Recording.

-Added feature to keep the last used set options of Hash Verification, and PhotoDNA.

 

 

MD-VIDEO AI v3.13.2 ~ v.3.13.4

-UK Number Plate Restoration.

-‘Report File Settings’ option in ‘PDF’ report format. Exports the overall report content, size, and hash information as a separate summary report.

-Generate reports separately by video, picture, and frame categories.

-‘Synav’ video file format analysis.

 

 

MD-DRONE v2.1.1

Supported New models – 2 Manufacturers, 6 Models 

-New models:

DJI: DJI Matrice 200, DJI Matrice 210, DJI Matrice 210 RTK, DJI AGRAS MG-1S

Yuneec: Yuneec H520, Yuneec Typhoon H

-Added supported model list.

-New log file formats (csv, kml) are supported to export

-‘Custom’ option has been included, allowing for the extraction and analysis of unlisted sub-models, using the base model from the supported list as a reference.

 

 

 

 

For a detailed overview of all the new features and improvements, submit your inquiry!

 

Ask for full Release Note

2023 Q1 MD-Series Release Note Highlights!

In the first quarter of this year, we are proud to introduce our new and improved features that will enhance your experience with our product ‘MD-Series’.

 

MD-NEXT v1.92.1 ~ v1.92.5

Increased support for 40 different phone manufacturers and 646 models, including a new Clone SIM feature. We have also enhanced our Android physical extraction process to include support for MTK and SpreadTrum-based feature phones, such as Nokia 150 (RM-1189), Nokia 5310 (2020) (TA-1212), Nokia 110 (2019) (TA-1192), ALCATEL 2053D, 2019G, Energizer E12, and Micromax X378, among others. Plus, we have improved the Manufacturer Backup (Samsung Smart Switch) extraction method to support some third-party apps of Samsung devices with Android 10 or later.

 

MD-RED v3.10.9 ~ v3.10.12

Supports 9 new iOS apps and 23 new Android apps, as well as enhanced analysis of Notion and Spotify. Additionally, we have added UTF-16BE support to our SQLite DB viewer and enhanced our file system analysis to allow for the analysis of Cellebrite UFED extraction images, which are iOS backup images that require a backup password.

 

MD-LIVE v3.4.24 ~ v3.4.26

Includes additional evidence information in the Analysis Result report, such as Model, Manufacturer, Analysis Tool, and Report Tool. We have also improved the Manufacturer Backup (Samsung Smart Switch) extraction method to support some third-party apps of Samsung devices with Android 10 or later.

 

MD-CLOUD v1.8.8

Improved its analysis results to support classification for Google Docs and fixed classification issues for some HEIC files.

 

MD-VIDEO AI v3.13.0 ~ v3.13.1

Introduces two new features: Anomaly detection, which allows for the detection of a scene that deviates significantly from the quantified feature points of a video, and Link evidence, which enables linking the evidence directly if unable to find the corresponding evidence to link a case. We have also added support for new models, such as WISENeT (XFS Proprietary file format) for DVR and Urive (FAT32) for dashcam.

 

MD-DRONE v2.1.0

Added support for Chip-off extraction using MD-READER, analysis of flight logs (.txt) from apps, analysis of flight logs (.srt) generated during video shooting, and a new model, DJI MINI 3 PRO. 

 

 

These new and improved features demonstrate our commitment to providing the best possible product for our customers.

If you want to read the full version of a document, leave your inquiry!

Ask for full Release Note

Mobile Forensic Investigation for Cyber Incident

With the growing number of voice phishing incidents, mobile forensic investigators need to be equipped with specialized knowledge and tools to effectively investigate these cases.

As such, staying up-to-date with the latest trends and techniques in mobile forensic investigation is crucial for investigators to successfully handle cyber incidents.

 

 

Our new tech report showcases how investigators can use MD-Series to obtain verifiable results and collect information from mobile devices that were involved in security incidents.

Malicious applications can be installed on mobile devices without the user’s knowledge, and such applications can steal personal information or manipulate the device as intended by the attacker.

In such cases, traces of the incident can be found in the application installation and execution results, system logs of the device, and download history of the files.

 

 

Be sure to check it out to stay informed on the latest developments in mobile forensic investigation.

 

Submit your inquiry to get the full version of the tech report!

Submit Inquiry

Elevate your knowledge and skills in mobile forensics using MD-SERIES tools

Join GMDSOFT certification program and elevate your knowledge and skills in mobile forensics using MD-SERIES tools.

 

Our comprehensive certification program offers three levels of courses – GCMP, GCME, and GCMS. Our program covers both software and hardware products related to mobile forensics, providing extensive training suitable for all levels of users, from beginners to experts. Our courses are designed to maximize your knowledge and skills in mobile forensics using MD-SERIES tools.

 

The GCMP course is perfect for individuals new to forensic practice or those at an entry-level position. This course provides comprehensive training on mobile forensic knowledge, including the latest trends, primary usage, and hands-on experience with the data extraction tool MD-NEXT and data analysis tool MD-RED.

 

The GCME course enhances the skills of senior-level practitioners who have prior experience with MD-NEXT and MD-RED. It builds upon the foundation laid by the GCMP and provides necessary skills to successfully manage mobile forensic investigation cases. The course covers the basics of each extraction method, advanced hands-on practice, and effective troubleshooting techniques for MD-NEXT. Trainees will also delve into detailed analysis of app data structure, deleted messages on popular messenger apps, file system understanding, and multimedia analysis using MD-RED.

 

The GCMS course is a highly advanced program that focuses on SQLite forensics, file system analysis, multimedia analysis, and user activity analysis. This course enables trainees to gain a complete understanding of data analysis and develop mastery in the specialized field of mobile forensic investigation.

 

Submit your training inquiry to our team!

 

 

2022 Recap on MD-Series Release Note Highlights!

What are the important features released in MD-Series?

Here is the summary of release note highlights in 2022, and if you want to read a full document? Submit your inquiry!

 

MD-NEXT v1.91.1 ~ v1.91.18

Supports new 3,910 models and updated 934 models

 

Android

  • Brute Force utility to attain Secure Startup Password for Android 7 to 9
  • Android Full filesystem extraction method added Samsung Galaxy S22 Qualcomm Series and Samsung Exynos Android 12 devices
  • Android Full Filesystem extraction supports more firmware versions of Samsung models
  • Updated backup path of WhatsApp on Android 12
  • Supports extraction for System backup information by ADB command
  • App downgrade feature supports new apps – GBWhatsApp, Gojek, Jack’D, LinkedIn, Naver Cafe, PeduliLindungi and, ZEPETO

iOS

  • iOS Full Filesystem (FFS App) extraction supports iOS 15.0 ~ 15.4.1 and target models are iPhone XR, iPhone XS, iPhone 11, iPhone 12, iPhone 13 series
  • iOS Full Filesystem (checkm8) extraction supports iOS 15.0 ~ 15.7 and the target models may vary depending on the OS version

Physical Extraction

  • Supports physical extraction for Elephone model P9000
  • Android physical extraction supports ADB Pro T4 method and target model is Galaxy S8 series

 

MD-RED v3.9.0 ~ v3.10.8

Supports new 65 apps and updated 150 apps (Android)

Supports new 35 apps and updated 78 apps (iOS)

 

Analysis

  • Supports analysis of Android 12
  • Supports Huawei PrivateSpace analysis
  • Improvements of Analysis – Improved analysis of unused area in EXT4 filesystem and added meta file (*.ufd) of extraction image)
  • Improvements of Filesystem analysis – BitLocker, iOS Full filesystem image extracted by Cellebrite UFED, and timestamp in NTFS filesystem
  • Supports Drone App analysis result exportation to MD-DRONE
  • Video meta information(TimeZone) is displayed in analysis result
  • Support for analysis of Android Full Filesystem images (.zip) extracted with GrayKey tools
  • Support for iOS 16, and Android 12
  • Supports the latest version analysis for Zalo in iOS/Android

MD-Explorer

  • Notification Center: Displays the pop-up window of major events such as task completion and errors
  • Support for the user manual and release note

 

MD-LIVE v3.4.13 ~ v3.4.23

Extraction

  • App downgrade feature supports new apps – imo beta, ZEPETO, Jack’D, LinkedIn, Gojek, PeduliLindungi, Quicket
  • Improved extraction process of backup data for Huawei devices with Harmony OS 2.0
  • Added various manufacturers’ models over 500 (SAMSUNG, LG, Asus, HONOR, HTC, HUAWEI, Lenovo, Casper, GENERALMOBILE, Motorola, Nokia, Oneplus, ReeDer, SONY, SUGAR, TURKCELL, VESTEL, Vivo, Wiko and Etc..)
  • Added phone model scripts of 1,269 models

Hash Set

  • Support for Project VIC (Images identical or similar to the Child Sexual Abuse Material (CSAM) registered with the Project VIC (https://www.projectvic.org/)) and crime type filters by region

Recording Investigation

  • Recording investigation feature added ‘Audio recording’ option into the ‘HDMI Mirroring Screen’ and ‘Audio Sync Control(All/Individual)

Analysis Result

  • Video player supports keyboard shortcuts to move video frame by frame

 

MD-CLOUD v1.8.2 ~ v1.8.6

Extraction

  • Supports the latest location history formats of Google Takeout
  • Updated the latest Facebook extraction method
  • Supports Two-factor authentication for Twitter
  • Supports Extraction of additional data and subtype (Ex: Work, Home, etc.) of Google Contacts

Analysis

  • Additional analysis on attached Pictures and Video files in Twitter
  • Added additional information in the analysis result (Hash Calculation, filter option etc.)

Search

  • Improved search feature to make all analysis results searchable

Reports

  • Added additional information in the generated reports (ESI-Electronically Stored Information, Product version etc.)

General

  • Added shortcut keys to the start screen and main window

 

MD-VIDEO AI v3.9.1 ~ v3.12.2

Recovery

  • Added new recovery targets; Removable disk, New Models of DVR & Dashcam
  • Added new GPU card models, Volta & Ampere architecture (19 models) for hardware acceleration
  • Supports deleted photo and video file recovery in TAT 16/32
  • Introduced Partial recovery, besides improvements in Basic & Custom recoveries
  • Supports time adjustment of recovery results

Time/Channel OCR

  • Auto detect of channel number by each digit in Time/Channel OCR feature

VIDEO AI

  • Supports adding new targets (Picture, Video, Recovered Frame, Enhancement Results) for enhancement
  • Improvements of Frame Analysis features – Motion Deblur, Perspective Transform, and De-identification
  • Improved Number recognition feature by introducing bounding boxes for easy use
  • Number plate restoration feature introduced for Korea & Vietnam countries
  • Added new category ‘Weapons’ in object detection
  • Included advanced learning models that can detect small objects in the selected video frame

Bookmark

  • Supports bookmark function when a video is being played or paused

General

  • Overall improvement in UI/UX, with updated Menu names
  • Added “supported list” menu so that users can see supported filesystem, models etc.

 

MD-DRONE v1.0.1 ~ v1.0.2

Extraction

  • Supports extraction of Flight Log Files and Folder from PC
  • Added more than 9 new Drone models from leading drone manufacturers (For ex. DJI, SUNDORI, ANT etc.)

Analysis

  • Added Lost Signal and Collision detection features to Flight Log Analysis (Accident analysis)
  • Added new features to display Altitude and speed at selected point in the Timeline information
  • Included unit information to the flight parameters like Altitude, Ground speed and Motor speed information in detail view of Timeline for Flight Log Analysis
  • Included the display of flight Takeoff and landing positions in map view
Ask for full Release Note

2022 Q4 Release Note Highlights

Find out the major features in MD-Series that are supported in Q4 2022.
The following versions of the product will be including new and updated features.
Quickly go through the highlight summary, and submit your inquiry to learn full features!

 

>> MD-NEXT v1.91.15 ~ v1.91.18

Supported New phone models – 34 Manufacturers, 271 Models

– iOS Full Filesystem (FFS App) extraction supports iOS 15.0 ~ 15.4.1 and target models are iPhone XR, iPhone XS, iPhone 11, iPhone 12, iPhone 13 series
– iOS Full Filesystem (checkm8) extraction supports iOS 15.0 ~ 15.7 and the target models may vary depending on the OS version
– Android physical extraction supports ADB Pro T4 method and the target model is Galaxy S8 series
– Android Full Filesystem extraction supports more firmware versions of Samsung models

 

>> MD-RED v3.10.2 ~ v3.10.8
Supported New Apps – 7 iOS Apps, 12 Android Apps
Analysis
– Support for iOS 16, and Android 12
– Supports the latest version analysis for Zalo in iOS/Android.
MD-Explorer
– Support for the user manual and release note

 

>> MD-LIVE v3.4.21 ~ v3.4.23
Hash Set
– Support for Project VIC (Images identical or similar to the Child Sexual Abuse Material (CSAM) registered with the Project VIC (https://www.projectvic.org/)) and crime type filters by region
Extraction
– App downgrade added new apps (ZEPETO, Jack’D, LinkedIn, Gojek, PeduliLindungi, Quicket)
– Added various manufacturers’ models over 500 (SAMSUNG, LG, Asus, HONOR, HTC, HUAWEI, Lenovo, Casper, GENERALMOBILE, Motorola, Nokia, Oneplus, ReeDer, SONY, SUGAR, TURKCELL, VESTEL, Vivo, Wiko and Etc..)

 

>> MD-CLOUD v1.8.6
Extraction
– Extraction of additional data in Google Contacts (Event, Relation, Work)

 

>> MD-VIDEO AI v3.11.1 ~ v3.11.3
Enhancement
– Number Plate Restoration using a machine-learning model is available and the supported countries are Republic of Korea, and Vietnam
– Supports multiple workspace tabs
– Supports new targets (Picture, Video, Recovered Frame, Enhancement Results) for enhancement
– Supports viewing help about enhancement tools at once
General
– Improvements in U/I with updated menu names

 

Ask for full Release Note

[Announcement] Company Change following Corporate Spin-off

Dear Valued Customers and Partners

 

We would like to express our deep gratitude to our customers and partners who used HancomWITH products (MD-Series) and forensic services this year. We appreciate all who have trusted our company for many years, and we have been able to grow into a forensic R&D company that leads the market even in various complex and rapidly changing situations.

 

As a forensic R&D company, the forensic business division, which is being serviced by HancomWITH, will be transferred to the new company GMDSOFT as of January 2023 so that we can develop more innovative technologies and provide optimized services to our customers in the future.

 

Accordingly, GMDSOFT will lay the foundation for future sustainable growth by maximizing corporate growth potential and enhancing business competitiveness in the mobile and digital forensic market through specialized intensive management.

 

Therefore, all rights and obligations regarding the use of personal information and services of the forensic business division held by HancomWITH will be comprehensively succeeded to GMDSOFT as of January 10, 2023. Please refer to the following information regarding transferring personal information following the division.

 

  • Date: January 10, 2023
  • Company Name: GMDSOFT Inc.
  • Office Address: Room 215, 2nd Floor, H Square N-dong, 235, Pangyoyeok-ro, Bundang-gu, Seongnam-si, Gyeonggi-do, South Korea, 13494
  • Contact: +82-31-778-3500
  • Email: marketing@gmdsoft.com
  • Website: www.gmdsoft.com

 

GMDSOFT will safely manage transferred personal information in compliance with all protection measures stipulated in personal information-related laws, such as the Personal Information Protection Act, and will process it only for the agreed purpose.

 

If you have any objections or do not want to transfer personal information according to this division, please contact us at +82-31-778-3500, marketing@gmduser.mycafe24.com.

 

Again, thank you for all the support, and please root for our new journey as GMDSOFT.

 

 

Sincerely,
CEO, HyunSoo Kim

 

Deep dive into “Metadata”

Metadata : EXIF

 

Metadata describes the content of data. Metadata may be modified or deleted when sending files to an application or uploading files to a website. Metadata is used to sort and search data quickly, but it also serves as an essential artifact to trace users’ behaviors from a digital forensic perspective.

 

We will use MD-RED and analyze EXIF that contains information about the camera maker, camera model, software (Build version and iOS version), original and meta-changed time, and location a photo was taken. 

 

This whitepaper will help you to understand the concept of Metadata and the structure of how data is stored in EXIF.

 

Contents

  1. About Metadata
  2. The Structure of EXIF and Analysis
  3. EXIF Location in File
  4. MD-RED Analysis Results
  5. Conclusion
  6. Appendix

If you want to learn more about Metadata, leave your inquiry on the whitepaper.

 

Submit Inquiry

2022 2Q MD-Series Release Note Highlights

Find out the major features in MD-Series that are supported in 2Q 2022.
Following versions of the product will be including features released in this 2Q.

 

MD-NEXT v1.91.4–v1.91.9

  • Supports new 2,428 models, updated 783 Models.
  • Android Full filesystem extraction method added Samsung Galaxy S22 Qualcomm Series.
  • Supports iOS Checkm8 Full Filesystem (iOS 15.0∼15.2.1 versions).
  • Updated backup path of WhatsApp on Android 12.
  • Supports extraction for System backup information by ADB command.
  • Manufacturer backup improved stability of Smart Switch protocol.
  • Added Asian/US manufacturers’ models over 1,500.

MD-RED v3.9.11–v3.9.24

  • Supports new 20 and updated 49 apps in Android.
  • Supports new 6 and updated 15 apps in iOS.
  • Supports Huawei PrivateSpace analysis.
  • Supports analysis of Android 12.

– Default apps of Android: Contacts, Call History, Message, etc.,

– Default apps of Samsung: Dual Messenger, Messages, SmartThings, Health.

 

  • Supports HashSet saved in Excel format to be used as search keywords.

MD-LIVE  v3.4.16–v3.4.17

  • Added phone model scripts of 1,269 models.
  • Stabilized Android devices extraction process.

MD-VIDEO v3.9.1–v3.10.0

  • Supports new 2 models of DVR and Dashcam.
  • Supports time adjustment of video analysis results.

– When the time information of the video analysis result is different from the actual time due to various reasons such as device settings, users can adjust the time to the actual time.

 

  • Supports De-Identification (MD-VIDEO AI).
  • Added ‘Supported List’ Menu.
  • Improved UX/UI design of Time Filter.
  • Improvements of DHFS4.1 file system analysis.

MD-CLOUD v1.8.3

  • Updated the latest Facebook extraction method.
  • Additional analysis on attached Pictures and Video files on Twitter.
  • Hotkey supports to Start Screen and Main Window.
  • Added ‘MD5, SHA1, SHA256’ hash calculation results to Files.

MD-DRONE v1.0.1

  • Supports 8 new models.
  • Supports Flight Log Analysis – Accident Analysis.

– Detects when the aircraft manufactured by DJI loses connection with the remote controller.

– Newly detects whether a collision occurred, or a normal landing is done at the crash down case of the aircraft with PX4 firmware.

 

  • Improved Timeline View.

– Displays detailed information such as altitude and speed at the selected point in the timeline.

 

 

Submit your inquiry if you want to read a full version of the document, our team will get back to you soon!

 

 

Ask for full Release Note