RELEASE NOTES
April 2020

Elcomsoft Phone Viewer
Version 5.0

Elcomsoft Phone Viewer is a fast and lightweight viewer allowing
examiners to analyze information extracted with ElcomSoft andthird-party acquisition tools. Decrypt and view iOS backups
and synced data, browse iOS file system images, analyze iCloudPhoto Library and access synchronized data with ease.

Summary
Elcomsoft Phone Viewer is updated with support for Telegram conversation histories. Telegram
analysis is available when accessing a file system image extracted from the iPhone or iPad device withElcomsoft iOS Forensic Toolkit by using agent-based or jailbreak-based file system imaging. Experts
can now decrypt and analyse the complete Telegram communication histories including secure chats
when analysing the results of iOS file system acquisition.

Essential updates
Telegram Secure Chats
Telegram supports secure chats by using end-to-end encryption. Secret chats are device
specific. They cannot be extracted with cloud acquisition. The conversation history
is not saved to iTunes or iCloud backups. Thus, the complete Telegram conversation
history including the content of secret chats can be only obtained from the device oforigin. The working database must be extracted from a file system image obtained withagent-based or jailbreak-based extraction.
Elcomsoft Phone Viewer 5.0 adds support for Telegram conversation histories extracted
in the course of full file system imaging. Both regular and secret chats are displayed
along with any attachments. Once the database is extracted from the file system image,EPV 5.0 displays the user’s Telegram account info, call logs, chats and attachments,
including photos, videos, files, audio, links and groups.

Signal Messenger
In addition, Elcomsoft Phone Viewer 5.0 enables support for the latest version of Signal,
world’s most secure instant messenger. The tool offers the ability to decrypt Signal
conversation databases extracted from the iPhone file system images. Experts using
Elcomsoft iOS Forensic Toolkit will simply open the file system image in Elcomsoft
Phone Viewer and use the extracted keychain file to decrypt the Signal database.
Elcomsoft Phone Viewer will then decrypt the database and display its content,
including messages, calls and different attachments in a blink of an eye.Version 5.0 change log◉◉

Added support for Telegram data from TAR
images, including support for multiple
Telegram accounts on one device.
Added support for the latest version ofSignal 3.1.0.20.

◉◉

Added the ability to display Telegram
conversation histories including secret chats
and attachments.
Bug fixes and performance improvements.

Steps to renew
1. All active users of Elcomsoft Phone Viewer can get the new version 5.0 from the product page orby using the direct download link https://www.elcomsoft.com/download/epv_setup_en.msi (forWindows) or https://www.elcomsoft.com/download/epv_setup_en.msi (for Mac).
2. Users having an expired license of Elcomsoft Phone Viewer are welcome to renew their license
at corresponding cost that is available after entering registration key in the online form: https://www.elcomsoft.com/key.html.
Contact us at sales@elcomsoft.com for any further questions on updating and license renewing.

www.elcomsoft.com
blog.elcomsoft.com
sales@elcomsoft.com