Founded in 1990, ElcomSoft Co. Ltd. is a leading developer of digital forensics tools. The company offers state-of-the-art solutions for businesses, forensic and law enforcement specialists, provides training and consulting services on mobile and computer forensics. ElcomSoft forensic products and tools are used for criminal investigations by the law enforcement. Today, the company offers the complete range of mobile and computer forensic tools, corporate security solutions and tools for IT security audits.
ElcomSoft tools are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments, and all major accounting firms. ElcomSoft is a Microsoft Partner (Gold Application Development), Intel Premier Elite Partner and member of NVIDIA’s CUDA/GPU Computing Registered Developer Program.
Elcomsoft Cloud eXplorer
Extract everything from your Google Account. Download users’ location history, files and documents,, Contacts, Hangouts Messages, Google Keep, Chrome browsing history, search history and page transitions, Calendars, images, and a lot more.
Download the complete set of data from Google Account
Extract significantly more information than available via Google Takeout
Authenticate without a password and bypass Two-Factor Authentication
Search, filter and analyze information with built-in viewer
Access user passwords, browsing history, contacts, location history, email and much more
Obtain files and documents from Google Drive
Supports: Google Account, over-the-air acquisition, two-factor authentication, built-in viewer, Windows and Mac editions
Passwordless Authentication Several years back, we developed a workaround, allowing experts to use binary authentication token to access Apple iCloud backups and synced data without the password. Today, we are introducing the same thing for Google accounts.
Google Drive Support Elcomsoft Cloud eXplorer introduces support for Google Drive, offering a truly integrated, forensically sound solution to extract the most data from Google accounts.
Forensic Acquisition of Google Accounts
Acquire information from users’ Google Account with a simple all-in-one tool! Elcomsoft Cloud Explorer makes it easier to download, view and analyze information collected by the search giant, providing convenient access to users’ search and browsing history, page transitions, contacts, Google Keep notes, Hangouts messages, as well as images stored in the user’s Google Photos account.
Google collects massive amounts of information from registered customers. Elcomsoft Cloud Explorer extracts information from the many available sources, parses and assembles the data, presenting information in human-readable form.
Google Data in Digital Forensics
Cloud forensics is an emerging area to forensic experts and IT security officers. The amount of data generated by consumers using the many online services is hard to underestimate. This data can become extremely valuable for an investigation of criminal cases and security breaches of IT infrastructure.
Online services are increasingly used by consumers, including those of a criminal kind. Cloud service providers such as Google retain astonishing amounts of data that literally follow their users’ every step. Acquiring this evidence from cloud storage services can be a challenge. Viewing, discovering and analyzing the data may present yet another challenge if the investigator lacks tools and knowledge.
Elcomsoft Cloud Explorer was designed specifically to address those limitations. Requiring no special expertise and no prior training, Elcomsoft Cloud Explorer falls into the category of all-in-one tools offering one-click downloading and easy viewing of information. The tool comes with everything you need to investigate information that Google has about a suspect.
What Is Extracted
Elcomsoft Cloud Explorer offers over-the-air acquisition for a wide range of Google services including all of the following:
User Profile and other info
Messages (Google Hangouts)
Text messages (SMS) (Android 8.0 Oreo and newer for all smartphones; Android 7 or newer for Google Pixel and Pixel XL)
Saved Wi-Fi credentials (SSID and passwords)
Email messages (Gmail) via Gmail API
Contacts (including synced contacts from mobile devices)
Notes (Google Keep)
Search History (including Web sites visited after firing up the search)
Google Chrome data (synced bookmarks, Web forms, logins and passwords, page transitions)
Media (images and videos from Google Photos including EXIF data)
Location history including enhanced mapping data (Routes and Places)
Files and documents from Google Account
In other words, what you get is a comprehensive snapshot of user activities in Google services including searches made in non-Google browsers while the user was logged in to their Google Account.
1. Some parts of this data may be encrypted with an additional password. Elcomsoft Cloud Explorer can decrypt information if the correct password is supplied.
Windows Server 2012
Apple OS X
OS X 10.11
OS X 10.12
OS X 10.13
About 90 MB of free space on hard disk
Google account email and password
Trial version shows only last 10 records in Chats and Notes, does not show the passwords saved in Google Chrome, and does not allow to export photos and location data.
Uninstallation procedure: in order to uninstall the product, follow the standard procedure via Control Panel - Programs and features or use the corresponding Unistall link from the product's folder in the Windows Start menu.