We Empower Your Investigation!

BLD is a partner of HancomWITH, a research group that leads the world in the field of mobile and digital forensics.  The mobile and digital forensics solution, MD-SERIES, is a complete mobile and digital forensic product line for data extraction and analysis with integrated cutting-edge mobile forensic technology, supporting any type of mobile device, and has been provided to hundreds of global investigative agencies since 2005. 

MD-Series Products


Data extraction on a wide variety of mobile and digital devices, supporting both physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS, and other mobile operating systems.

MD-LIVE is a mobile forensic solution for quickly performing logical extraction and data analysis on live mobile devices.  It also supports a number of legal compliance features such as selective acquisition of evidence to ensure a suspect’s right to privacy, as well as mirroring and recording the suspect smartphone’s display during the forensic process. MD-LIVE also supports the use of a separate camera for recording the forensic process externally.


  • Mobile forensic software solution for on-the-spot investigation and forensic triage
  • The best forensic tool for acquiring data from witnesses’ or victims’ smartphones
  • Selective acquisition of evidence data for privacy protection
  • Mirroring, recording, and capturing smartphone display
  • Supports the use of an external camera for recording the forensic process (for auditing or legal compliance purposes)
  • Convenient and straightforward experience with an intuitive user interface
  • High speed analysis engine allows for minimal work time and automated steps
Selective extraction and analysis of evidence data
  • Data unrelated to the case can be excluded from selection and analysis
  • Minimising extraction of unnecessary data reduces the time spent on the site and protects the privacy of those involved
  • Important apps can be scanned based on time and frequency of use
Processed evidence data presented just like a real smartphone display
  • The view interface is themed and presented like a smartphone app, allowing users to quickly and intuitively identify evidence data
Integrated data viewers
  • Users can view evidence files such as photos, videos, audio, documents, maps, and website browsing history directly in the software
Mirroring and remotely controlling smartphone display
  • The smartphone display mirroring and remote-control feature can be used to circumvent a broken display or to prevent any unwanted operations on the device
  • The mirrored display can be also captured and recorded as evidence
MD-LIVE software screen recording
  • The PC screen recording feature can record forensic processes performed in MD-LIVE for reproduction and verification purposes
Easy and concise experience
  • Post-extraction analysis is automated, making the investigation process even faster
Reporting features
  • Supports report formats such as PDF, Excel, and SQLite DB
  • Supports saving reports and dump images to USB/DVD
External standing camera (Option)
  • Optional standing camera offered for taking photos of evidence device and its display or for recording the investigation procedure


Data extraction software for smartphones, feature phones, drones, smart TVs, wearables, loT devices, USIM cards, SD memory cards, JTAG boards, and chip-off memory.

MD-NEXT is the forensic software solution for data extraction on a wide variety of mobile and digital devices. It supports both physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS, and other mobile operating systems.


  • Data extraction from smartphones, feature phones, IoT devices, smart TVs, drones, chip-off memory, and JTAG boards
  • Powerful extraction tools for devices from Asian manufacturers (Samsung, LG, and Chinese brands)
  • Supports all physical extraction methods – Bootloader, and Removable Media
  • Supports all logical extraction methods- Filesystem, and MTP
  • Unlocks latest Samsung and Chinese phones (Oppo/Vivo/Huawei/Xiaomi)
  • iOS backup file decryption and keychain extraction
  • Selectively extract based on partitions, files, categories, and apps
The perfect data extraction tool for diverse mobile and digital devices
  • Supports data acquisition for various global smartphone manufacturers (Samsung/Apple/LG/HTC/ZTE) models
  • Support Chinese Manufacturerd devices (Huwei/XiaomVOppoNrvo, etc)
  • Supports extraction of IoT device, AI Speaker, Smart TV, and Drone
Advanced physical extraction features
  • Supports Bootloader, Fastboot, MTK, QEDL, Custom Image Android Rooted, iOS Physical, DL, JTAG, Chip-off, SD Card, Removable Media
  • ADB Pro extraction which supports data acquisition using vulnerability attacks from Android-based devices
  • JTAG pin map viewer and connection scanning with AP
  • Drone data extraction – DJI (Phantom, Mavic), Parrot, PixHawk
  • AI Speaker Chip-off extraction – Amazon Echo, Kakao Mini, Naver Clova
Supports diverse physical data reader hardware
  • JTAG Reader (MD-BOX)
  • Memory Chip Reader (MD-READER)
  • SD Memory Reader and USIM Reader
Advanced logical extraction features
  • Supports Android Live, MTP, iOS full filesystem Backup, Vendor backup protocol, Local backup, USIM
Supports extraction and decryption of the latest Asian phone
  • Physical extraction through all lock bypass (KNOX, FRP/OEM, ScreenLock): Samsung Galaxy S/J/A/Note series
  • Unlock screen: Samsung Galaxy S/J/A/Note series
  • ADB Pro physical KNOX bypass- Samsung Galaxy S/J/A/Note series
  • Vendor Backup protocol extraction – Samsung, LG, Huawei
  • Local backup extraction – Huawei, Xiaomi, Oppo, Gionee
  • Physical extraction for Japanese manufacturer models – Sharp, Sony
Supports the latest iPhone logical extraction
  • iOS keychain extraction
  • Logical extraction for iPhone up to XS/XR model
  • The decryption of backed up data for the latest version of the iOS device
Selective extraction for privacy protection
  • Supports selective acquisition of partition, file, category, and app
Special extraction features
  • Supports user-defined extraction for unlisted models using pre-defined methods
  • Supports Google cloud drive extraction
Useful extraction utilities
  • Supports auto-recognition and decryption of partition table and encrypted partition
  • Supports automatic firmware restoration and retrial after restoration failure
  • Supports pausing/resuming extraction
  • Supports merging multiple image files- MDF and binary file
  • Supports creating MDF file from PC backup
Assures evidence data integrity
  • Supports write-protection for every piece of evidence
  • Supports ten different hash algorithms, including MD5, SHA1/224/256/384/512, RIPEMD128/160/256/320
  • Excellent extraction performance – maximum 32GB/20min
  • Support multiple device extraction
  • Supports both simultaneous and sequential extraction
User-friendly and easy to use
  • Intuitive graphical user guide for each extraction method
  • Features “Recently Selected models” List
Data preview and save
  • Supports preview of the extraction data – Hex viewer
  • Sound alarm and TTS alarm for extraction status charge
Reporting features
  • Extraction information – Hash value, Time, Method and Filename
  • Supports “Extracted File List” generation with a hash value of each file
  • Generates “Witness Document” Report


Data analysis software for recovering, decoding, decrypting, visualising, and reporting evidence data from mobile and digital devices.

MD-RED is the forensic software solution for recovering, decrypting, visualising, performing analytic data mining, and reporting evidence data that’s been extracted with MD-NEXT or another analogous extraction tool. The analysis results output by MD-RED can be exported as forensic reports for crime and accident investigations. In addition, as a result of continuous ongoing research, MD-RED‘s mobile app analysis engine is constantly being updated with support for analysing the latest apps.


  • Supports analysis and recovery for a number of filesystems and over 2,000 mobile apps
  • Supports decryption of encrypted instant messaging apps
  • Provides quick updates and rolling support for new versions of apps
  • Supports social relationship analysis
  • Supports drone and IoT analysis
  • Supports post-analysis data visualisation
  • Includes built-in Python script editor for custom application analysis
Supports a wide variety of mobile operating systems and devices
  • Supports Feature phones, Smartphones ard various other digital devices
  • Supports iOS, Android, Windows, Tizen and other mobile operating systems
Parsing and Recovery of various filesystems
  • Support for FAT12/16/32, exFAT, NTFS, ext3/4, HFS+, EFS, YAFFS, FSR, XSR, F2FS, VDFS, XFS, DVR filesystems
  • Supports data carving of unused areas
Supports analysis of mobile data over 2,000 popular mobile apps
  • Multimedia files taken with device camera
  • Call logs, Address book information. SMS/MMS messages, emails, Memos, ard internet history
  • Social networking, maps, navigation, banking, health, and lifestyle apps
  • Detection of Anti-forensic apps
Maximised performance
  • High speed analysis achieved through multi-core CPU/GPU parallel processing
  • Supports running multiple instances of the program (i.e. one instance for each open case)
Data Decryption
  • Supports identifying encrypted documents
  • Supports decryption of chat messages, emails, files, and other app data
Deep analysis on popular messenger apps
  • Deserialisation, decryption, and recovery of data
  • Skype, Facebook messenger, Telegram, Wickr, QQ, KakaoTalk, Line, Zalo, Viber, Snapchat, and many more
  • WhatsApp -Multiple backup file analysis
  • WeChat – Multiple account analysis, rainbow table analysis
Supports decoding screen lock and password information
  • Supports decoding unlock patterns, PINs, and passwords
  • Supports brute force through GPU acceleration
  • Supports iPhone keychain data analysis
Multimedia data recovery and analysis
  • Supports frame recovery for deleted/damaged video files
  • Supports the use of Reference Data Set (RDS) for excluding over 6.7M known unusable images from analysis result data
  • Supports audio file conversion (From AMR/AUD/QCP/SILK to MP3/AMR/WAV)
  • Supports playing QCP files and SILK-encoded audio
New digital device analysis
  • Drone data analysis – Flight history, Multimedia data, Supports ManufacturerDJI/Parrot/PixHawk
  • IoT data analysis – AI Speakers, Smart TV, Car Navigation
Log analysis
  • Supports analysis of various logs: media, search word system, and network logs (Bluetooth, WiFi, Cell towers)
Social relationship analysis
  • Provides Basic/Advanced modes for analysing single/multiple phones
  • Supports call, messenger, and email communication data analysis
  • Supports filtering by app, time period, contact(s), and type(s) of communication
  • Supports community analysis
  • Supports relationship visualisation and automatic re-organising
Embedded data viewers
  • View extracted data directly in-application
  • SQLite databases, HEX, P Lists, Documents (Text, XML, CDF, PDF, MS Office, ZIP, Executable, Encrypted), Photos, Videos, and Audio 
Visualisation of analysed data
  • Map viewer for GPS ard cell tower location data
  • Offline /Online map (Region /Country / City view levels)
  • Timeline view
  • Link viewer (social relationship visualiser)
  • Chat viewer
  • Web browser view (for internet browsing history)
Advanced data filtering options
  • Supports filtering by a variety of properties such as filesystem, signature, and time
  • Supports dynamic filtering operators, sorting, and grouping
  • Supports searching by regular expression
  • Supports keyword registration
  • Supports bookmarking selected data
Python scripting IDE for user-defined analysis
  • Includes a Python script editor
  • Supports generating, executing, and debugging code and includes sample scripts
Case management and hash value verification
  • Supports various case management features
  • Supports grouping extraction images
  • Supports hash value verification on a per-image basis
Reporting features
  • Supports hashing of individual files
  • Supports export of analysed multimedia
  • Supports automatic report generation (PDF, Excel, HTML, ard SQLite DB formats)
  • Supports third-party reporting formats like Nuix and Relativity


Digital forensic software for extraction and analysis of cloud account .

MD-CLOUD is the most intuitive digital forensic software tool that extracts and analyses the data from cloud data storage. It supports a broad range of cloud services.


  • Supports global cloud service
  • Supports IoT cloud and Asian cloud service
  • Authentication supported by ID/PASSWORD, 2-step security, Captcha and credentials
  • Web capture feature
  • Search with tag information
  • Interwork with MD-RED
Supports various cloud services acquisition
  • Google, iCloud, Samsung Cloud, Naver cloud, IMAP/POP3, Evernote, One Drive, Twitter, Baidu
Specialised in Asian Cloud service
  • Baidu cloud in China
  • Naver cloud in Korea
Acquisition of cloud accounts for IoT devices
  • IoT data extraction from Al speaker and Smart home equipment
  • Public or non-public APls authentication
Supports various authentication methods
  • ID/PASSWORD authentication
  • Captcha security authentication
  • 2-step security authentication
  • Authentication using credential information
Web capture feature
  • Supports web capture when cloud acquisition does not offer API
Real-time acquisition status check
  • Monitors data acquisition in real time
Easy user-friendly use
  • Intuitive user interface and quick data extraction
Interwork with MD-RED
  • Acquire data with credentials information analysed by MD- RED
Simple search using ‘Tag’ feature
  • Supports easy and fast search with pre-categorised ‘Tag’
Various built-in viewers
  • Supports preview of Image, video, document, web page, and email
Snapshot of filtering option
  • Supports snapshot of the filter and sort configuration for reuse in the workspace
Assurance of evidence data integrity
  • Guarantees integrity of evidence data based on powerful hash algorithms such as MDS and SHA256
Reporting features
  • Supports report formats such as PDF and Excel


Digital forensic software for video preview, recovery, and analysis of video data.

MD-VIDEO is the digital forensic software for extracting and recovering video data directly from the media storage like a disk, memory card and damaged video file.


  • Supports preview, recovery and analysis of video data from CCTV, Car Dashboard Camera, Camcorder, and Smartphone
  • Supports various DVR filesystems, video formats, video codecs
  • Regenerate video with recovered video frame
Video data forensics from CCTV, car black box, smartphone, media storage
  • Global manufacturers’ IP-CCTV and key manufacturers’ Car Dashboard Camera, Smartphone, Desktop, Server, Camera, Camcorder and Drone, Wearable device and Embedded system
Three types of video data input
  • Supports mounted storage like hard disk by physical connection
  • Supports binary disk image of DD, E01, BIN, and MDF
  • Supports file or folder which has damaged or deleted files
Three types of video recovery
  • Filesystem recovery
  • Video file signature recovery (DAV, MP4, MOV, MKV, MPEG, SSF, AVI, ZAV, PS)
  • Video frame recovery (H.264, H.265, MPEG-4, M-JPEG)
Supports various file systems
  • Supports auto-detection of the filesystem
  • FAT 12/16/32, NTFS, exFAT, HFS+, EXT3/4, TAT16, HIKVISION, DHFS4.1, XFS, F2FS, VDFS
  • Supports DVR manufacturer’s filesystem – HikVision, Dahua, Zhiling, Samsung, Bosch, Honeywell, Sony, Panasonic, etc.
Supports various video codecs
  • Supports H.264, H.265, MPEG4, M-JPEG
  • H.264 resolution adjustment for recovery
  • HEVC (H.265) recovery and iOS 11 or higher model media playback
  • Supports sampling codec from the video file and smartphone codec
  • User-defined codec parameter setting
Supports video file scanning
  • Frame and file format scan
  • Deleted and damaged file scan
Recovery of video frames
  • Reconstructs the frame of video files
  • Extracts image frames with pictures
  • Supports thumbnail preview and image view
Supports audio file recovery
  • Supports audio file recovery for SILK format
Recovery of the selected partition
  • Supports auto-scanning of partition
  • Supports recovery of the selected partition
Multi-core CPU/GPU acceleration
  • Recovery acceleration with multi-core CPU
  • Detection of object acceleration with multi-core GPU (Planned)
Bookmark. filtering, indexing
  • Supports bookmarking for examination and report
  • Supports arraying, filtering, and indexing of files and frames
Extracts time information
  • Gets time information for image files through metadata analysis of each frame
In-built video player
  • Multi-channel video playback
  • Play speed control (1/10X, 1/2X, 2X, 4X, 8X)
  • Supports more than 300 image formats (MP4, AVI, MKV, WMV, MPEG, etc.)
  • DVR video file (DAV, ZAV, SSF)
  • Video stream playback
  • Audio play (QCP, SILK, etc.)
Data viewers
  • Frame picture viewer
  • Hex viewer
  • File viewer
File/Format converter
  • Export original or converted file
  • Supports multi-channel image separation storage when extracting files
  • Supports recovered frame to convert to JPG and PNG format
  • Supports video file convert to AVI and MP4 format
  • Supports audio file convert to MP3 and AMR format
Assurance of evidence data integrity
  • Guarantees integrity of evidence data based on powerful hash algorithms such as MDS and SHA256
Reporting features
  • Supports report formats such as PDF and Excel