Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Learning Android Forensics
  • Toc
  • feedback
Learning Android Forensics

Learning Android Forensics

4.2 (6)
close
Learning Android Forensics

Learning Android Forensics

4.2 (6)

Overview of this book

If you are a forensic analyst or an information security professional wanting to develop your knowledge of Android forensics, then this is the book for you. Some basic knowledge of the Android mobile platform is expected.
Table of Contents (10 chapters)
close
9
Index

Tango analysis


Tango is a voice-/text-/video-messaging application. It has over 100,000,000 downloads in the Play Store.

Package name: com.sgiggle.production

Note

This package name is seemingly innocuous and could be overlooked by an examiner thinking it was a game. This is an example of why every application should be analyzed.

Version: 3.13.128111

Files of interest:

  • /sdcard/Android/data/com.sgiggle.production/files/storage/appdata/

    • TCStorageManagerMediaCache_v2/

    • conv_msg_tab_snapshots/

  • /files/

    • tc.db

    • userinfo.xml.db

The /TCStorageManagerMediaCache_v2 path on the SD card contains images that were sent and received with the application as well as profile pictures of contacts. However, it also contains many images that were never seen or used in the application. They appear to either be images for ads or stock emoji-type images that can be attached to conversations. The filenames found here can be correlated with tc.db to find the exact image that was used in a conversation.

The conv_msg_tab_snapshots...

bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete