Oxygen Forensics is the leading global digital forensics software provider, giving law enforcement, federal agencies, and enterprises access to critical data and insights faster than ever before. Specializing in mobile devices, cloud, drones, and IoT data, Oxygen Forensics provides the most advanced digital forensic data extraction and analytical tools for criminal and corporate investigations.

Key Features Include :

• Public data extraction via iOS Agent
• Extraction of iOS 17 devices
• Decryption of VeraCrypt containers with key files
• Updated support for WhatsApp QR Multi-Device cloud service
• Export of contacts to VCF format

Mobile Forensic Updates :

Added several enhancements to our extraction methods :

• Added extraction of iOS 17 devices via iTunes backup procedure.
• Extractions are now much easier with animated instructions incorporated in the checkm8 method.
• Android KeyStore extraction is now supported for devices with pre-installed Android OS 13.
• Updated ability to extract WhatsApp, WhatsApp Business, Discord, Viber, and Google Chrome data via Android Agent.
• Using Android Agent, you can now re-extract data protected with a passcode if the first attempt fails.

added support for the following new apps :

• Bumble (Android, iOS)
• Todoist (Android, iOS)
• Samsung My Files (Android)
• Gmail Go (Android)

Import Updates :

In Oxygen Forensic® Detective v.16.0.1, we added the following functionality:

• Import and decryption of physical images of Honor 7S and Huawei Y5 devices.
• Extraction of metadata from UFED extractions of CLBX format.

Also updated support for MTK-based devices having TEE T6.

Cloud Forensic Updates :

In this release, we updated support for WhatsApp QR Mult-Device service and Huawei Cloud Data. Moreover, we added support for CAPTCHA for WhatsApp cloud.

Computer Artifacts :

Decryption of VeraCrypt containers with key files.

• The updated Oxygen Forensic® KeyScout allows decryption of VeraCrypt containers using one or several key files. A user can create a list of key files for every VeraCrypt container and apply them to decrypt it.
• Also added support for VeraCrypt app on Windows, macOS, and GNU/Linux. Key files might be found in the parsed data of this app.

New Artifacts :

The updated Oxygen Forensic® KeyScout enables users to collect the following new artifacts:

• IrfanView app from Windows
• KMPlayer from Windows
• Dropbox from GNU/Linux
• The creation and modification dates of APFS partitions
• The serial number of a macOS computer
• The history of the user logins on macOS
• Information about trusted documents and locations stored in MS Office apps
• Information about documents printed with CUPS (Common UNIX Printing System) from macOS and GNU/Linux
• Information about bookmarks and sessions of web browsers based on the Blink engine

Activation :

1- Download and install the "Oxygen Forensic Detective 16.0.1 setup".
2- Download and extract the "1601_ Act Files_Key_Gen".
3- Replace the original files in the installed folder with the cracked files.
4- Run Oxygen Forensics Detective.
5- The hardware key will be copied to your clipboard.
6- Open the keygen (WLGen_Oxygen.exe) and click on "License Manager."
7- Add a new license with the following information:
        - Customer Name: user
        - Company Name: BlackHat
        - Hardware ID: Paste the copied hardware key
8- Click "Save."
9- Select your user in the list and click "Create License Key."
10- A "user-BlackHat" folder will be created.
11- Open the "user-BlackHat" folder and copy the "Oxygen.dat" file.
12- Paste the "Oxygen.dat" file into the following locations:
        - Installed Oxygen Detective root folder
        - Data folder
        - DeviceExtractor folder
        - Documents folder
        ... and any other sub-folders
13- Copy the "oxydetectivekey.dat" file from the crack zip and paste it here:
        C:/Users/BlackHat/AppData/Roaming/OxygenEngine
        (Use your system username instead of BlackHat)
14- Copy the "Passware" folder from the crack zip and paste it here:
        C:/Users/BlackHat/AppData/Roaming
        (Use your system username instead of BlackHat)
15- Run Oxygen Forensic Detective from your desktop and enjoy!

QualcommEDL_Image_v3_pack.zip – 21.1 MB
Spreadtrum_Image_pack_v3 2023.09.zip – 28.0 MB
Oxygen Forensic Viewer_x64_Setup_16.0.1.121.zip – 129.5 MB
Exynos_Image_pack 2023.05.zip – 194.3 MB
OCR Languages Setup v4.0.0.zip – 408.3 MB

HOW TO ACTIVATE ?

• First, you need to download the zip file from the below link.
• Download and extract the “Activation File“.
• Next, you can unzip all files at c: drive (important).
• Ensure you have “disabled the Antivirus” before running the installation.
• Next, open the folder and install the setup file with some basic instruction.
• Run the shortcut from the desktop “Oxygen Forensic Detective.exe”
• Next, you can install all drivers (included in the tool only need to one-click) if you already installed skip this step.
• Connect the phone and try to do any function.
• Enjoy !!!

Take a Backup: If you are willing to try the above tool, then please take a backup of your personal data from your Android Smartphone or Tablet. As flashing any Firmware or recovery may brick the device.

Credits: The Tool is created and distributed by the developer. So, full credits go to the developer for sharing the tool for free.