Due to better security, some applications manufacturers made restrictions to what data can be acquired from their apps. This is especially relevant for non-rooted phones.
To bypass this we have introduced the App downgrade feature in MOBILedit Forensic Express, which will downgrade the apps to a version, in which there was no problem in obtaining the data from them directly.
Express 5.0 and higher
On the main screen of MOBILedit Forensic Express select Updates
and then select App downgrade update - as seen on the screenshots below.
You will then be asked to download an extension for MOBILedit Forensic Express, which consists of the apps .apk installation files. Please confirm the download and wait for it to be completely downloaded.
After the download, installation will start automatically. Once finished, the App Downgrade feature will be included in the Applications section in Specific Selection while creating a report.
Settings and functionality of this feature are described below in the Functionality section of this page.
During the installation of MOBILedit Forensic Express, the following window will appear in the installation wizard. This will give you the option to tick the App downgrade feature and then a package of .apk files to be downloaded and installed as an extension of MOBILedit Forensic Express. Settings and functionality of this feature are described below in the Functionality section of this page.
Manual installation (offline)
Download cab file here
2. On target computer create folder "C:\Program Files\Common Files\Compelson\app_downgrade"
Extract cab file into folder "app_downgrade
" - for extraction use software of your choice (7-Zip
To use the App downgrade function, connect a phone to MOBILedit Forensic Express, select Specific Selection and choose Applications in the right sided menu. You will now have the option to choose (tick) the App downgrade feature to be used in the data extraction process.
There are two options of App downgrade available - Safe and Smart. The safe option works with Android 4.4+ and 5.0+, but not higher than 6.0, while the Smart option works with the other versions. In case the version of Android on your phone was automatically detected by MOBILedit Forensic Express, one of the App downgrade options will be accordingly greyed out, so you can be sure you are using the correct one.
Upon continuing with the extraction you will be asked to allow a test .apk file to be installed to your phone and downgraded. This allows us to check, whether your phone supports the App downgrade feature.
Please mind the following warning message.
When the extraction is started, you will see the downgrading progress on the left side of your screen. Please note that only some apps support this feature as of yet, although we are working on expanding their list.
Please note that the App Downgrade feature is available ONLY for the Unlimited and the Single Phone license types of MOBILedit Forensic Express.
List of supported apps
Find below the ever-growing list of supported apps for App downgrade.
Keepsafe Photo Vault