Book Image

Learning Android Forensics

By : Rohit Tamma, Donnie Tindall
Book Image

Learning Android Forensics

By: Rohit Tamma, Donnie Tindall

Overview of this book

Table of Contents (15 chapters)
Learning Android Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Viber analysis


Viber is a messaging and voice-/video-calling app with over 100,000,000 downloads.

Package name: com.viber.voip

Version: 5.2.1

Files of interest:

  • /files/preferences/

    • activated_sim_serial

    • display_name

    • reg_viber_phone_num

  • /sdcard/viber/media/

    • /User Photos/

    • /Viber Images/

    • /Viber Videos/

  • /databases/

    • viber_data

    • viber_messages

The files in /files/preferences contain the SIM card's Integrated Circuit Card ID (ICCID), the name the user displays in the app, and the phone number used to register with the app.

The files in the /sdcard/viber/media path are the profile photos of people in the user's contact list who use Viber (regardless of whether they have been added as friends in the app) and all images and video sent through the app.

The viber_data file is a database, even though it does not have the .db file extension. It contains information about the user's contacts:

Table

Description

calls

This table did not populate, even though we made calls from within the app.

...