MOBILedit+Forensic+Android+Demo+Report Ver.9.0.0.23279 NEW

Download as pdf or txt
Download as pdf or txt
You are on page 1of 281

MOBILEDIT FORENSIC PHONE CONTENT REPORT

K3
Case Evidence Number: 007

Manufacturer Google
Case Information
Product Pixel 3a
HW Revision QQ1A.200205.002  Case Label K3
Platform Android  Case Evidence Number 007
SW Revision 10 (29)  Case Evidence Details
Serial Number 1ABCD2EFGH
IMEI 123456789012345
Rooted Communication service
SIM Card Yes
Owner Phone +420111222333
Number
Operator O2-CZ, MCC: 230, MNC: 2

Device Information
 Device Label
 Device Name Google Pixel 3a
 Device ID
 Device Evidence Number
 Owner Name John Doe
 Owner Phone Number +420111222333
 Phone Notes

Investigator Information Extraction Information


 Data Extraction Started 2022-07-18 14:55:24 (UTC+2)
 Data Extraction Finished 2022-07-18 17:27:59 (UTC+2)
Extracted by MOBILedit Forensic PRO 9.0.0.23279
Report Generated by MOBILedit Forensic PRO 9.0.0.23279
Client Application Forensic Connector 1.10.6-28646(F)
 Investigator Name Sherlock Holmes
 Investigator Designation Detective
 Investigator Email [email protected]
 Investigator Phone Number +420123456789
 Permission Document

Copyright © 2022 COMPELSON Labs, All rights reserved


Case Label: K3 Case Evidence Number: 007 Device Label:

Packages
App Downgrade 2021-09-15-0517
Cell Towers 2022-06-20-0451
EDL 2022-04-29-0605
File exclude list 2022-06-07-0415
Image processing 2022-04-27-0598
Malware detection 2022-02-22-0437
Recovery images 2021-11-25-0815
Rooting 2022-04-12-0673
Samsung engineering root 2022-07-14-0406
Scripts 2022-07-14-0000
Security bypassing 2022-07-14-0698
Spreadtrum 2022-06-14-0558
iOS screenshots support 2022-07-20-0535

Device Properties
Manufacturer Google
Product Pixel 3a
HW Revision QQ1A.200205.002
Platform Android
SW Revision 10 (29)
Android ID 1a234b5c6de789f0
Serial Number 1ABCD2EFGH
Device Time 2022-07-18 14:55:32 (UTC+2)
Manual Time No
Time Zone Europe/Prague
Manual Time Zone No
Device Storage Encrypted Yes
IMEI 123456789012345
Bluetooth Address F8:0F:F9:00:00:01
Rooted Communication service ADB
Communication Type Connector
Device Type Phone
SIM Card Yes
IMSI 123456789012345
SIM Card Country Czech Rep.
ICCID 1234567890123456789
Owner Phone Number +420111222333
Operator O2-CZ, MCC: 230, MNC: 2
Total Storage 50.0 GB
Used Storage 24.9 GB

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 II


Case Label: K3 Case Evidence Number: 007 Device Label:

Table of Contents
Screenshots of Report Settings 1
Summary 4
Deleted Data 12
Applications / Drive / Contacts 12
Applications / Google Play services / Contacts 13
Applications / Skype / Contacts (test) 18
Applications / Viber / Contacts 18
Applications / Telegram / Known Users 23
Applications / Telegram / Known Users 24
Applications / Telegram / Known Users 24
Applications / Telegram / Contacts 25
Applications / Docs / Contacts 25
Applications / Telegram / Conversations 25
Applications / Telegram / Conversations 26
Applications / Gmail / Conversations: [email protected] 26
Applications / Skype / Conversations (test) 27
Applications / Telegram / Conversations 27
Applications / Messages / Conversations 28
Applications / Telegram / Conversations 36
Applications / Messages / Messages 37
Applications / Drive / Shared files with [email protected] 46
Applications / Docs / Shared files with [email protected] 47
Captured Phone Photos 48
Accounts 49
Contacts 50
Contact List 50
Contact Groups 1267
Messages 1268
Conversations 1268
Detailed Messages 1272
Emails 1279
Calls 1310
Organizer 1311
List of Calendars 1311
Events 1312
Birthdays and Holidays 1561
Tasks 1601
Notes 1601
Applications 1602
2 Button Navigation Bar 1602
3 Button Navigation Bar 1603
Android Accessibility Suite 1604
Android Auto 1605
Android Q Easter Egg 1606
Android Services Library 1607
Android Setup 1608
Android Shared Library 1609
Android System 1610
Android System WebView 1611
android.auto_generated_rro_product__ 1612
android.auto_generated_rro_vendor__ 1613
android.telephony.overlay.cmcc 1614
apnlib 1615
AppDirectedSMS 1616
Arbutus Slab / Source Sans Pro 1617
Authenticator 1618
Basic Daydreams 1619
Black 1620
Blocked Numbers Storage 1621
Bluetooth 1622
Bluetooth MIDI Service 1623
Bookmark Provider 1624
Box 1625

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 III
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files 1626


Images 1626
Documents 1633
Calculator 1634
Calendar 1635
Calendar Storage 1636
Call Log Backup/Restore 1637
Call Management 1638
Camera 1639
Other Media Files 1639
Images 1639
CaptivePortalLogin 1642
Carrier App Logging 1643
Carrier Provisioning Service 1644
Carrier Services 1645
Carrier Settings 1646
Carrier Setup 1647
Carrier Setup 1648
CarrierDefaultApp 1649
Certificate Installer 1650
Chrome 1651
Accounts 1651
Autofill Profiles 1651
Saved Passwords 1652
History 1660
Searches 1669
Bookmarks 1670
Autofill 1673
Other Media Files 1677
Images 1677
Documents 1681
Cinnamon 1682
Circular 1683
Circular 1684
Circular 1685
Circular 1686
Circular 1687
Clock 1688
Alarms 1688
com.android.backupconfirm 1689
com.android.bips.auto_generated_rro_product__ 1690
com.android.bluetooth.auto_generated_rro_vendor__ 1691
com.android.connectivity.metrics.App 1692
com.android.cts.ctsshim 1693
com.android.cts.priv.ctsshim 1694
com.android.localtransport 1695
com.android.nfc.auto_generated_rro_product__ 1696
com.android.nfc.auto_generated_rro_vendor__ 1697
com.android.ons 1698
com.android.phone.auto_generated_rro_product__ 1699
com.android.phone.auto_generated_rro_vendor__ 1700
com.android.providers.contacts.auto_generated_rro_product__ 1701
com.android.providers.partnerbookmarks 1702
com.android.providers.settings.auto_generated_rro_product__ 1703
com.android.providers.settings.auto_generated_rro_vendor__ 1704
com.android.providers.telephony.auto_generated_rro_product__ 1705
com.android.safetyregulatoryinfo.auto_generated_rro_product__ 1706
com.android.sdm.plugins.dcmo 1707
com.android.sdm.plugins.diagmon 1708
com.android.server.NetworkPermissionConfig 1709
com.android.server.telecom.auto_generated_rro_product__ 1710
com.android.service.ims.RcsServiceApp 1711
com.android.sharedstoragebackup 1712
com.android.simappdialog.auto_generated_rro_product__ 1713
com.android.systemui.auto_generated_rro_product__ 1714
com.android.systemui.auto_generated_rro_vendor__ 1715
com.android.wallpaperbackup 1716

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 IV


Case Label: K3 Case Evidence Number: 007 Device Label:

com.google.android.documentsui.theme.pixel 1717
com.google.android.grilservice 1718
com.google.android.hardwareinfo 1719
com.google.android.overlay.googleconfig 1720
com.google.android.overlay.googlewebview 1721
com.google.android.overlay.permissioncontroller 1722
com.google.android.overlay.pixelconfig2017 1723
com.google.android.overlay.pixelconfig2018 1724
com.google.android.overlay.pixelconfig2019midyear 1725
com.google.android.overlay.pixelconfigcommon 1726
com.google.SSRestartDetector 1727
com.qti.qualcomm.datastatusnotification 1728
com.qualcomm.atfwd 1729
com.qualcomm.embms 1730
com.qualcomm.qcrilmsgtunnel 1731
com.qualcomm.qti.telephonyservice 1732
com.qualcomm.timeservice 1733
com.quicinc.cne.CNEService.CNEServiceApp 1734
com.verizon.llkagent 1735
com.verizon.obdm_permissions 1736
Companion Device Manager 1737
ConfDialer 1738
ConfigUpdater 1739
Connectivity Health Services 1740
ConnMO 1741
Contacts 1742
Other Media Files 1742
Images 1742
Contacts Storage 1743
Corner cutout 1744
D-MAT 1745
Data Transfer Tool 1746
Default Print Service 1747
Device configuration 1748
Device Health Services 1749
Device Personalization Services 1750
Device Policy 1751
Device setup 1752
DiagnosticsTool 1753
Digital Wellbeing 1754
Docs 1755
Accounts 1755
Contacts 1756
Document Previews 1756
Shared files with [email protected] 1798
Double cutout 1801
Download Manager 1802
Downloads 1803
Drive 1804
Accounts 1804
Contacts 1804
Shared files with [email protected] 1805
Other Media Files 1806
Documents 1806
Dropbox 1807
Accounts 1807
Stored Thumbnails 1808
Cached Dropbox Filesystem 1811
Other Media Files 1843
Images 1843
Duo Mobile 1847
Dynamic System Updates 1848
Emergency alerts 1849
Emergency information 1850
External Storage 1851
Facebook 1852
Accounts 1853

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 V


Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts - Messenger 1854


News Feed 1855
Other Media Files 1882
Images 1882
Audio 2049
Documents 2055
Factory OTA Mode 2077
Other Media Files 2077
Documents 2077
Files 2078
Files by Google 2079
Other Media Files 2080
Images 2080
Filled 2084
Filled 2085
Filled 2086
Filled 2087
Filled 2088
Forensic Connector 2089
Fused Location 2090
Gboard 2091
Other Media Files 2091
Images 2091
Audio 2347
Documents 2348
Gestural Navigation Bar 2350
Gestural Navigation Bar 2351
Gestural Navigation Bar 2352
Gestural Navigation Bar 2353
Gmail 2354
Accounts 2354
Conversations: [email protected] 2354
Emails: [email protected] 2380
Accounts Info 2406
Other Media Files 2406
Images 2406
Google 2409
Accounts 2409
Other Media Files 2409
Images 2409
Documents 2530
Google Connectivity Services 2532
Google Contacts Sync 2533
Google Location History 2534
Google One Time Init 2535
Google Partner Setup 2536
Google Play Books 2537
Accounts 2537
Books 2538
Other Media Files 2544
Images 2544
Google Play Music 2558
Other Media Files 2558
Documents 2558
Google Play services 2559
Contacts 2559
Media Files 4439
Downloads 4448
Reminders 4448
Other Media Files 4467
Images 4467
Video 4469
Documents 4469
Google Play Services for AR 4471
Google Play Store 4472
Application Searches 4472
Google Services Framework 4476

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 VI


Case Label: K3 Case Evidence Number: 007 Device Label:

Google Support Services 4477


Google TV 4478
Google Wallpaper Images 4479
Green 4480
Hidden Menu 4481
HTML Viewer 4482
Input Devices 4483
Instagram 4484
Accounts 4485
Related Contacts 4485
Conversations 4487
Messages 4489
Suggested Users 4497
Clusters 4498
Global Notifications 4498
Other Media Files 4499
Images 4499
Video 4562
Documents 4587
Intent Filter Verification Service 4607
Key Chain 4608
LINE 4609
Accounts 4610
Friends 4610
Groups 4617
Chats 4617
Messages 4620
Other Media Files 4624
Images 4624
LinkedIn 4773
Accounts 4773
Message Contacts 4774
Conversations 4775
Messages 4781
Other Media Files 4789
Video 4789
Litmatch 4793
Media Files 4793
Other Media Files 4794
Images 4794
Video 4808
Documents 4823
Live Transcribe & Sound Notifications 4824
Live Wallpaper Picker 4825
LTE Broadcast Manager 4826
Main components 4827
Maps 4828
Locations 4828
Favorite Places 4828
Other Media Files 4829
Images 4829
Mapy.cz 4833
Configuration 4833
Configuration 4834
Locations 4834
Other Media Files 4841
Images 4841
Documents 4896
Market Feedback Agent 4897
Markup 4898
Media Storage 4899
Messages 4900
Contacts 4900
Conversations 4904
Messages 4918
Other Media Files 4941
Images 4941

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 VII
Case Label: K3 Case Evidence Number: 007 Device Label:

Messenger 4965
Accounts - Messenger 4966
Conversation Users 4967
Conversations 4983
Messages 4996
Other Media Files 5034
Images 5034
Documents 5059
MmsService 5076
MTP Host 5077
MusicFX 5078
Network manager 5079
Nfc Service 5080
Ocean 5081
OemDmTrigger 5082
OK Google enrollment 5083
OneDrive 5084
Other Media Files 5085
Images 5085
Documents 5088
Orchid 5089
org.codeaurora.ims 5090
OsuLogin 5091
Outlook 5092
Accounts 5093
Other Media Files 5093
Images 5093
Audio 5451
Package installer 5455
PacProcessor 5456
Permission controller 5457
Personal Safety 5458
Phone 5459
Other Media Files 5459
Images 5459
Audio 5460
Phone and Messaging Storage 5461
Phone Services 5462
Photos 5463
Accounts 5463
Local media 5463
Remote media 5470
Other Media Files 5474
Images 5474
Video 5513
Pinterest 5515
Accounts 5515
Other Media Files 5516
Images 5516
Video 5675
Pixel Ambient Services 5678
Pixel Buds 5679
Pixel Launcher 5680
Pixel Setup 5681
Pixel Themes 5682
Pixel Tips 5683
Media Files 5683
Other Media Files 5684
Images 5684
Video 5710
Playground 5726
Other Media Files 5726
Images 5726
Audio 5831
Documents 5852
Presence 5854
Print Service Recommendation Service 5855

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 VIII
Case Label: K3 Case Evidence Number: 007 Device Label:

Print Spooler 5856


ProxyHandler 5857
Purple 5858
Retail Demo Mode 5859
RilConfig 5860
Rounded 5861
Rounded 5862
Rounded 5863
Rounded 5864
Rounded 5865
Rounded Rectangle 5866
Rubik / Rubik 5867
Safety & regulatory manual 5868
Secure UI Service 5869
SecureElementApplication 5870
Settings 5871
Settings Services 5872
Settings Storage 5873
Shell 5874
Signal 5875
Other Media Files 5876
Images 5876
Sim App Dialog 5877
SIM Manager 5878
SIM manager 5879
SIM Toolkit 5880
Skype 5881
Accounts 5882
Contacts (test) 5882
Conversations (test) 5926
Messages (test) 5930
Calls (test) 5931
Other Media Files 5932
Images 5932
Slack 5942
Other Media Files 5942
Documents 5942
Smart Forwarding 5943
Smart Storage 5944
Snapchat 5945
Accounts 5946
Contacts 5946
Chats 6030
Other Media Files 6033
Images 6033
Sound Amplifier 6093
Sounds 6094
Space 6095
Speech Services by Google 6096
Other Media Files 6096
Documents 6096
SprintDM 6098
Squircle 6099
Styles & wallpapers 6100
System Tracing 6101
System UI 6102
SystemPanel 6103
Tags 6104
Tall cutout 6105
Teardrop 6106
Telegram 6107
Known Users 6108
Known Users 6108
Contacts 6108
Known Users 6109
Conversations 6110
Conversations 6111

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 IX


Case Label: K3 Case Evidence Number: 007 Device Label:

Conversations 6111
Conversations 6111
Other Media Files 6113
Images 6113
Video 6149
Telegram X 6152
Tethering Entitlement 6153
TikTok 6154
Accounts 6155
Contacts 6156
Conversations 6166
Messages 6166
Other Media Files 6167
Images 6167
Audio 6462
Video 6463
Documents 6469
Time Zone Updater 6549
Tinder 6550
Media Files 6550
Other Media Files 6551
Images 6551
Twitter 6616
Accounts 6617
Friends 6617
Users 6617
Conversations 7000
Messages 7002
Cached Tweets 7007
Other Media Files 7080
Images 7080
Video 7083
uceShimService 7086
User Dictionary 7087
Viber 7088
Accounts 7089
Contacts 7089
Participants in Conversations 7104
Conversations 7109
Messages 7121
Stored Images 7174
Other Media Files 7179
Images 7179
VpnDialogs 7341
Vzw OMA Trigger 7342
WeChat 7343
Accounts 7344
Account 7344
Contacts 7344
Conversations 7345
Messages 7347
Posts 7350
Stored Images 7353
Emoticon Packs 7354
Other Media Files 7355
Images 7355
Audio 7451
Video 7452
Documents 7456
WhatsApp 7465
Accounts 7466
Contacts 7466
Other Contacts 7510
Groups 8460
Conversations 8460
Messages 8465
Calls 8486

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 X


Case Label: K3 Case Evidence Number: 007 Device Label:

Stored Images 8487


Stored Audio 8521
Stored Video 8521
Work Setup 8523
X Google enrollment 8524
YouTube 8525
Accounts 8525
Zilla Slab / Lato 8526
Application List 8527
Photos 8573
Image Files 8575
Audio Files 10876
Video Files 10980
Documents 11229
Files 11726
Misc Files 11726
Internal Files 11753
External Files 13861
Applications Files 13959
Extra Files 15898
System Logs 15905
Bluetooth Pairings 15908
Cell Towers 15909
Cloud Credentials 15910
Contact Analysis 15913
Cookies 15941
Locations 16003
GPS Locations 16003
Activity Routes 16016
Notifications 16017
Passwords 16023
Passwords from Chrome (Saved Passwords) 16023
Screen Unlocking History 16029
SIM Card 16030
Contacts 16030
Fixed Phonebook 16033
Logs 16035
Application Permission Logs 16035
User Dictionary 16036
Wi-Fi Networks 16037
Web 16038
Web Browsing History 16038
Web Search History 16049
Bookmarks 16053
Data Extraction Log 16058

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 XI


Case Label: K3 Case Evidence Number: 007 Device Label:

Screenshots of Report Settings

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1


Case Label: K3 Case Evidence Number: 007 Device Label:

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2


Case Label: K3 Case Evidence Number: 007 Device Label:

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 3


Case Label: K3 Case Evidence Number: 007 Device Label:

Summary
Captured Phone Photos
Accounts 5
Contacts
Contact List 5447
Contact Groups 0
Messages
Conversations 21 conversations, 65 messages
Detailed Messages 65
Emails 222
Calls 8
Organizer
List of Calendars 5
Events 1244
Birthdays and Holidays 250
Tasks 0
Notes 0
Applications 268
2 Button Navigation Bar
3 Button Navigation Bar
Android Accessibility Suite
Android Auto
Android Q Easter Egg
Android Services Library
Android Setup
Android Shared Library
Android System
Android System WebView
android.auto_generated_rro_product__
android.auto_generated_rro_vendor__
android.telephony.overlay.cmcc
apnlib
AppDirectedSMS
Arbutus Slab / Source Sans Pro
Authenticator
Basic Daydreams
Black
Blocked Numbers Storage
Bluetooth
Bluetooth MIDI Service
Bookmark Provider
Box
Other Media Files
Images 34
Documents 3
Calculator
Calendar
Calendar Storage
Call Log Backup/Restore
Call Management
Camera
Other Media Files
Images 6
CaptivePortalLogin
Carrier App Logging
Carrier Provisioning Service
Carrier Services
Carrier Settings
Carrier Setup
Carrier Setup
CarrierDefaultApp
Certificate Installer
Chrome
Accounts 1
Autofill Profiles 3
Saved Passwords 51
History 57
Searches 5

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4


Case Label: K3 Case Evidence Number: 007 Device Label:

Bookmarks 27
Autofill 23
Other Media Files
Images 22
Documents 2
Cinnamon
Circular
Circular
Circular
Circular
Circular
Clock
Alarms 2
com.android.backupconfirm
com.android.bips.auto_generated_rro_product__
com.android.bluetooth.auto_generated_rro_vendor__
com.android.connectivity.metrics.App
com.android.cts.ctsshim
com.android.cts.priv.ctsshim
com.android.localtransport
com.android.nfc.auto_generated_rro_product__
com.android.nfc.auto_generated_rro_vendor__
com.android.ons
com.android.phone.auto_generated_rro_product__
com.android.phone.auto_generated_rro_vendor__
com.android.providers.contacts.auto_generated_rro_product__
com.android.providers.partnerbookmarks
com.android.providers.settings.auto_generated_rro_product__
com.android.providers.settings.auto_generated_rro_vendor__
com.android.providers.telephony.auto_generated_rro_product__
com.android.safetyregulatoryinfo.auto_generated_rro_product__
com.android.sdm.plugins.dcmo
com.android.sdm.plugins.diagmon
com.android.server.NetworkPermissionConfig
com.android.server.telecom.auto_generated_rro_product__
com.android.service.ims.RcsServiceApp
com.android.sharedstoragebackup
com.android.simappdialog.auto_generated_rro_product__
com.android.systemui.auto_generated_rro_product__
com.android.systemui.auto_generated_rro_vendor__
com.android.wallpaperbackup
com.google.android.documentsui.theme.pixel
com.google.android.grilservice
com.google.android.hardwareinfo
com.google.android.overlay.googleconfig
com.google.android.overlay.googlewebview
com.google.android.overlay.permissioncontroller
com.google.android.overlay.pixelconfig2017
com.google.android.overlay.pixelconfig2018
com.google.android.overlay.pixelconfig2019midyear
com.google.android.overlay.pixelconfigcommon
com.google.SSRestartDetector
com.qti.qualcomm.datastatusnotification
com.qualcomm.atfwd
com.qualcomm.embms
com.qualcomm.qcrilmsgtunnel
com.qualcomm.qti.telephonyservice
com.qualcomm.timeservice
com.quicinc.cne.CNEService.CNEServiceApp
com.verizon.llkagent
com.verizon.obdm_permissions
Companion Device Manager
ConfDialer
ConfigUpdater
Connectivity Health Services
ConnMO
Contacts
Other Media Files
Images 1
Contacts Storage
Corner cutout
D-MAT

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5


Case Label: K3 Case Evidence Number: 007 Device Label:

Data Transfer Tool


Default Print Service
Device configuration
Device Health Services
Device Personalization Services
Device Policy
Device setup
DiagnosticsTool
Digital Wellbeing
Docs
Accounts 1
Contacts 4 (2 deleted)
Document Previews 167
Shared files with [email protected] 8 (2 deleted)
Double cutout
Download Manager
Downloads
Drive
Accounts 1
Contacts 4 (4 deleted)
Shared files with [email protected] 4 (4 deleted)
Other Media Files
Documents 1
Dropbox
Accounts 1
Stored Thumbnails 13
Cached Dropbox Filesystem 634 files
Other Media Files
Images 14
Duo Mobile
Dynamic System Updates
Emergency alerts
Emergency information
External Storage
Facebook
Accounts 1
Accounts - Messenger 1
News Feed 75
Other Media Files
Images 755
Audio 39
Documents 108
Factory OTA Mode
Other Media Files
Documents 1
Files
Files by Google
Other Media Files
Images 14
Filled
Filled
Filled
Filled
Filled
Forensic Connector
Fused Location
Gboard
Other Media Files
Images 1270
Audio 4
Documents 4
Gestural Navigation Bar
Gestural Navigation Bar
Gestural Navigation Bar
Gestural Navigation Bar
Gmail
Accounts 1
Conversations: [email protected] 212 conversations (12 deleted), 222 messages
Emails: [email protected] 222
Accounts Info 3
Other Media Files
Images 12

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6


Case Label: K3 Case Evidence Number: 007 Device Label:

Google
Accounts 1
Other Media Files
Images 484
Documents 4
Google Connectivity Services
Google Contacts Sync
Google Location History
Google One Time Init
Google Partner Setup
Google Play Books
Accounts 1
Books 21
Other Media Files
Images 51
Google Play Music
Other Media Files
Documents 1
Google Play services
Contacts 5421 (26 deleted)
Media Files 46
Downloads 2
Reminders 151
Other Media Files
Images 7
Video 1
Documents 6
Google Play Services for AR
Google Play Store
Application Searches 31
Google Services Framework
Google Support Services
Google TV
Google Wallpaper Images
Green
Hidden Menu
HTML Viewer
Input Devices
Instagram
Accounts 1
Related Contacts 8
Conversations 7 conversations, 47 messages
Messages 47
Suggested Users 7
Clusters 1
Global Notifications 2
Other Media Files
Images 262
Video 99
Documents 98
Intent Filter Verification Service
Key Chain
LINE
Accounts 2
Friends 32
Groups 4
Chats 6 conversations, 23 messages
Messages 23
Other Media Files
Images 735
LinkedIn
Accounts 1
Message Contacts 9
Conversations 8 conversations, 49 messages
Messages 49
Other Media Files
Video 15
Litmatch
Media Files 4
Other Media Files
Images 60
Video 89

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7


Case Label: K3 Case Evidence Number: 007 Device Label:

Documents 2
Live Transcribe & Sound Notifications
Live Wallpaper Picker
LTE Broadcast Manager
Main components
Maps
Locations 1
Favorite Places 2
Other Media Files
Images 13
Mapy.cz
Configuration 2
Configuration 1
Locations 61
Other Media Files
Images 265
Documents 2
Market Feedback Agent
Markup
Media Storage
Messages
Contacts 23
Conversations 139 conversations (119 deleted), 84 messages (12 deleted)
Messages 161 (89 deleted)
Other Media Files
Images 91
Messenger
Accounts - Messenger 1
Conversation Users 48
Conversations 21 conversations, 208 messages
Messages 208
Other Media Files
Images 120
Documents 84
MmsService
MTP Host
MusicFX
Network manager
Nfc Service
Ocean
OemDmTrigger
OK Google enrollment
OneDrive
Other Media Files
Images 11
Documents 1
Orchid
org.codeaurora.ims
OsuLogin
Outlook
Accounts 1
Other Media Files
Images 1768
Audio 20
Package installer
PacProcessor
Permission controller
Personal Safety
Phone
Other Media Files
Images 4
Audio 2
Phone and Messaging Storage
Phone Services
Photos
Accounts 1
Local media 50
Remote media 29
Other Media Files
Images 145
Video 2
Pinterest

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8


Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts 1
Other Media Files
Images 636
Video 13
Pixel Ambient Services
Pixel Buds
Pixel Launcher
Pixel Setup
Pixel Themes
Pixel Tips
Media Files 3
Other Media Files
Images 130
Video 87
Playground
Other Media Files
Images 531
Audio 124
Documents 9
Presence
Print Service Recommendation Service
Print Spooler
ProxyHandler
Purple
Retail Demo Mode
RilConfig
Rounded
Rounded
Rounded
Rounded
Rounded
Rounded Rectangle
Rubik / Rubik
Safety & regulatory manual
Secure UI Service
SecureElementApplication
Settings
Settings Services
Settings Storage
Shell
Signal
Other Media Files
Images 2
Sim App Dialog
SIM Manager
SIM manager
SIM Toolkit
Skype
Accounts 1
Contacts (test) 222 (1 deleted)
Conversations (test) 28 conversations (2 deleted), 14 messages
Messages (test) 14
Calls (test) 6
Other Media Files
Images 36
Slack
Other Media Files
Documents 1
Smart Forwarding
Smart Storage
Snapchat
Accounts 1
Contacts 419
Chats 31 conversations, 0 messages
Other Media Files
Images 247
Sound Amplifier
Sounds
Space
Speech Services by Google
Other Media Files
Documents 5

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 9


Case Label: K3 Case Evidence Number: 007 Device Label:

SprintDM
Squircle
Styles & wallpapers
System Tracing
System UI
SystemPanel
Tags
Tall cutout
Teardrop
Telegram
Known Users 1 (1 deleted)
Known Users 1 (1 deleted)
Contacts 5 (1 deleted)
Known Users 5 (5 deleted)
Conversations 3 conversations (3 deleted), 0 messages
Conversations 3 conversations (3 deleted), 0 messages
Conversations 3 conversations (3 deleted), 0 messages
Conversations 17 conversations (10 deleted), 0 messages
Other Media Files
Images 120
Video 13
Telegram X
Tethering Entitlement
TikTok
Accounts 1
Contacts 33
Conversations 1 conversations, 3 messages
Messages 3
Other Media Files
Images 1207
Audio 4
Video 34
Documents 423
Time Zone Updater
Tinder
Media Files 3
Other Media Files
Images 260
Twitter
Accounts 1
Friends 1
Users 1887
Conversations 4 conversations, 30 messages
Messages 30
Cached Tweets 279
Other Media Files
Images 15
Video 13
uceShimService
User Dictionary
Viber
Accounts 1
Contacts 70 (27 deleted)
Participants in Conversations 27
Conversations 7 conversations, 136 messages
Messages 136
Stored Images 21
Other Media Files
Images 788
VpnDialogs
Vzw OMA Trigger
WeChat
Accounts 1
Account 1
Contacts 3
Conversations 2 conversations, 9 messages
Messages 9
Posts 8
Stored Images 3
Emoticon Packs 2
Other Media Files
Images 440

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 10


Case Label: K3 Case Evidence Number: 007 Device Label:

Audio 8
Video 23
Documents 45
WhatsApp
Accounts 1
Contacts 220
Other Contacts 4747
Groups 2
Conversations 10 conversations, 127 messages
Messages 137
Calls 17
Stored Images 125
Stored Audio 2
Stored Video 5
Work Setup
X Google enrollment
YouTube
Accounts 1
Zilla Slab / Lato
Application List 268
Photos 3
Image Files 10530
Audio Files 605
Video Files 846
Documents 1690
Files
Misc Files 832 files
Internal Files 54264 files
External Files 2734 files
Applications Files 50014 files
Extra Files 216 files
System Logs 131 files
Bluetooth Pairings 0
Cell Towers 0
Cloud Credentials 15
Contact Analysis 335 (6 deleted)
Cookies 954
Locations
GPS Locations 88
Activity Routes 0
Notifications 35
Passwords
Passwords from Chrome (Saved Passwords) 33
Screen Unlocking History 0
Logs
Application Permission Logs 0
User Dictionary 0
Wi-Fi Networks 1
Web
Web Browsing History 57
Web Search History 36
Bookmarks 27

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 11


Case Label: K3 Case Evidence Number: 007 Device Label:

Deleted Data
All deleted data

Applications / Drive / Contacts (4)

1 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x231575 (Table: items)

2 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x36c595 (Table: items)

3 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x27abe7 (Table: items)

4  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x364311 (Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 12


Case Label: K3 Case Evidence Number: 007 Device Label:

Applications / Google Play services / Contacts (26)

1 Christines Ipod  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x4a0f7 (Table: contacts)

2 Pavla Cizova  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x4a084 (Table: contacts)

3 Simio Juraj  Deleted

Organization Hokej


Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1292b2 (Table: contacts)

4 Vlastimil Klima  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x1e1053 (Table: contacts)

5 ������  Deleted

Note ������������������������������������������



Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1c51f8 (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 13


Case Label: K3 Case Evidence Number: 007 Device Label:

26  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x19e2bb (Table: contacts)

Applications / Skype / Contacts (test) (1)

1 test  Deleted

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x97014


(Table: profilecachev8)

Applications / Viber / Contacts (27)

1 +420 111 222 333  Deleted

 Joined 2022-06-28 11:16:56 (UTC+2)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0x20c2ae (Table:
phonebookcontact)

2 +420 111 222 333  Deleted

 Joined 2022-06-28 11:16:56 (UTC+2)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0x640ae (Table:
phonebookcontact)

3 Bila Hanka  Deleted

 Joined 2022-06-28 11:16:56 (UTC+2)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0x1f5c96 (Table:
phonebookcontact)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 18


Case Label: K3 Case Evidence Number: 007 Device Label:

Applications / Telegram / Known Users (1)

1 User: 38732521  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account2/cache4.db-wal


: 0x35564 (Table: users)

Applications / Telegram / Known Users (5)

1 User: 215043  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x274cce


(Table: users)

2 User: 557  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecfa


(Table: users)

3 User: 574  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecf8


(Table: users)

4 User: 591  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecf6


(Table: users)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 24


Case Label: K3 Case Evidence Number: 007 Device Label:

5 User: 615  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal :


0x2ae23c (Table: users)

Applications / Telegram / Contacts (1)

1 User: 2  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal :


0x27ed12 (Table: users)

Applications / Docs / Contacts (2)

1 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x316fc (Table: items)

2 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x345d1 (Table: items)

Applications / Telegram / Conversations (3)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 User: 0  Deleted

 Participants User: 0
Source File phone/applications0/org.telegram.messenger/live_data/files/account3/cache4.db-wal : 0x139dcb (Table: dialogs)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 25


Case Label: K3 Case Evidence Number: 007 Device Label:

2 Secret Chat:  Deleted

 Participants User: 0
Source File phone/applications0/org.telegram.messenger/live_data/files/account3/cache4.db-wal : 0x139dcb (Table: dialogs)

3 User: 2  Deleted

 Participants User: 2
Source File phone/applications0/org.telegram.messenger/live_data/files/account3/cache4.db-wal : 0xd8dca (Table: dialogs)

Applications / Telegram / Conversations (3)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 User: 0  Deleted

 Participants User: 0
Source File phone/applications0/org.telegram.messenger/live_data/files/account2/cache4.db-wal : 0x142ea3 (Table: dialogs)

2 Secret Chat:  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account2/cache4.db-wal : 0x142ea3 (Table: dialogs)

3 User: 2  Deleted

 Participants User: 2
Source File phone/applications0/org.telegram.messenger/live_data/files/account2/cache4.db-wal : 0x726f6 (Table: dialogs)

Applications / Gmail / Conversations: [email protected] (12)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x6db6e (Table:


items)

2 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1ac072 (Table:


items)

3 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1fa614 (Table:


items)

4 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1fa615 (Table:


items)

5 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x6db6d (Table:


items)

6 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x7be1b (Table:


items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 26


Case Label: K3 Case Evidence Number: 007 Device Label:

7 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x7be11 (Table:


items)

8 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c57 (Table:


items)

9 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c61 (Table:


items)

10 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c4e (Table:


items)

11 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x70d62 (Table:


items)

12 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x77df6 (Table:


items)

Applications / Skype / Conversations (test) (2)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Conversation:  Deleted

 Account test
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xb300a (Table:
conversationsv14)

2 Conversation:  Deleted

 Account test
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2a80c3 (Table:
conversationsv14)

Applications / Telegram / Conversations (3)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 User: 0  Deleted

 Participants User: 0
Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x142ea3 (Table: dialogs)

2 Secret Chat:  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x142ea3 (Table: dialogs)

3 User: 2  Deleted

 Participants User: 2
Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x726f6 (Table: dialogs)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 27


Case Label: K3 Case Evidence Number: 007 Device Label:

Applications / Messages / Conversations (119)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x21373 (Table:


conversations)

2  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x70a9b (Table:


conversations)

3  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a53 (Table:


conversations)

4  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a4d (Table:


conversations)

5  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a47 (Table:


conversations)

6  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x2136f (Table:


conversations)

7  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cbab (Table:


conversations)

8  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cbb6 (Table:


conversations)

9  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73ade (Table:


conversations)

10  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cb95 (Table:


conversations)

11  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cba0 (Table:


conversations)

12  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7dbb8 (Table:


conversations)

13  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7dbad (Table:


conversations)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 28


Case Label: K3 Case Evidence Number: 007 Device Label:

112  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c92d (Table:


conversations)

113  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7d945 (Table:


conversations)

114  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c922 (Table:


conversations)

115  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73a18 (Table:


conversations)

116  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c917 (Table:


conversations)

117  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7d92f (Table:


conversations)

118  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c90c (Table:


conversations)

119  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73a70 (Table:


conversations)

Applications / Telegram / Conversations (10)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 User: 0  Deleted

 Participants User: 0
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ed02 (Table: dialogs)

2 Secret Chat:  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ed02 (Table: dialogs)

3 User: 1  Deleted

 Participants User: 1
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27acb2 (Table: dialogs)

4 User: 2  Deleted

 Participants User: 2 (User: 2)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x39316b (Table: dialogs)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 36


Case Label: K3 Case Evidence Number: 007 Device Label:

5  Deleted

 Participants
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x3a7735 (Table: dialogs)

6  Deleted

 Participants
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x28450 (Table: dialogs)

7  Deleted

 Participants
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2bd467 (Table: dialogs)

8 User: 377957122048  Deleted

 Participants User: 377957122048


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2bd2f2 (Table: dialogs)

9 User: 82485719669765  Deleted

 Participants User: 82485719669765


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2ac144 (Table: dialogs)

10 User: 270505261522437  Deleted

 Participants User: 270505261522437


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2c6430 (Table: dialogs)

Applications / Messages / Messages (89)

1  Received  Deleted

 Received  Sent
1970-01-01 01:05:07 (UTC+1) 1970-01-01 01:00:01 (UTC+1)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7ab85 (Table:
messages)

2  Received  Deleted

 Received  Sent
1970-01-01 01:05:08 (UTC+1) 1970-01-01 01:00:04 (UTC+1)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7ab79 (Table:
messages)

3  Received  Deleted

 Received  Sent
1970-01-01 01:05:29 (UTC+1) 1970-01-01 01:00:01 (UTC+1)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6ca35 (Table:
messages)

4  Received  Deleted

 Received  Sent
1970-01-01 01:05:31 (UTC+1) 1970-01-01 01:00:04 (UTC+1)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6ca29 (Table:
messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 37


Case Label: K3 Case Evidence Number: 007 Device Label:

Applications / Drive / Shared files with [email protected] (4)


I am not the owner of files, but I have an access to them.

1 s.opendoc  Deleted

File Filename s.opendoc


Size 0B
Mime Type ortFormat=zip����
.application/vnd.oasi
Created 1974-02-03 09:38:33 (UTC+1)
Modified 1974-01-09 02:26:32 (UTC+1)
Accessed 1973-10-11 14:58:06 (UTC+1)
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x364311
(Table: items)

2 BI-TJV 02  Deleted

File Filename BI-TJV 02


Size 0B
Mime Type application/vnd.google-apps.presentation
Created 2016-10-10 14:25:11 (UTC+2)
Modified 2021-02-26 09:41:29 (UTC+1)
Accessed 2018-12-27 19:22:30 (UTC+1)
 Contact [email protected]
 URL https://docs.google.com/presentation/d/1d8-SEWGoCA7r53brqH3uhAQ6JCIDstKBE6ePhM_d8JU/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x231575
(Table: items)

3 Cell Tower Map  Deleted

File Filename Cell Tower Map


Size 0B
Mime Type application/vnd.google-apps.map
Created 2007-05-02 05:52:58 (UTC+2)
Modified 2015-06-27 15:24:39 (UTC+2)
Accessed 2022-06-14 13:56:11 (UTC+2)
 Contact [email protected]
 URL https://www.google.com/maps/d/edit?mid=1bI4ml2GY-JYQfVCirlkFLnAAzMs
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x27abe7
(Table: items)

4 2022-Eccentric-Kyberbezpecnost-Firmy-Profily-share.pdf  Deleted

File Filename 2022-Eccentric-Kyberbezpecnost-Firmy-Profily-share.pdf


Size 24.2 MB
Mime Type application/pdf
Created 2022-04-06 14:13:36 (UTC+2)
Modified 2022-04-06 14:04:16 (UTC+2)
Accessed 2022-05-25 10:51:56 (UTC+2)
 Contact [email protected]
 URL https://drive.google.com/file/d/1IBdNInOkraFwyaMdn0OMBNZZxw9Tn8LZ/view?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x36c595
(Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 46


Case Label: K3 Case Evidence Number: 007 Device Label:

Applications / Docs / Shared files with [email protected] (2)


I am not the owner of files, but I have an access to them.

1 ISP advanced training  Deleted

File Filename ISP advanced training


Size 0B
Mime Type application/vnd.google-apps.document
Created 2020-08-17 23:35:59 (UTC+2)
Modified 2020-11-11 14:51:42 (UTC+1)
Accessed 2021-11-16 12:00:16 (UTC+1)
 Contact [email protected]
 URL https://docs.google.com/document/d/1VCytSv9rUr5p8DmprAHf06wlwGj35L1myBYKzAlVU2c/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/app_cello/[email protected]/cello.db :
0x345d1 (Table: items)

2 Untitled document  Deleted

File Filename Untitled document


Size 0B
Mime Type application/vnd.google-apps.document
Created 2015-08-27 09:50:03 (UTC+2)
Modified 2015-09-16 15:16:11 (UTC+2)
Accessed 2015-09-16 15:16:11 (UTC+2)
 Contact [email protected]
 URL https://docs.google.com/document/d/1WqvDkqF94mrJzYlHZ95xp0wTsXfYMsCFSxPABv8aQG4/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/app_cello/[email protected]/cello.db :
0x316fc (Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 47


Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts (5)
All phone accounts, sorted in ascending order

1 +420123456789

 Name +420123456789


Type com.viber.voip
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x8f7e (Table: accounts)

2 [email protected]

 Name [email protected]


Type com.google
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x8fd7 (Table: accounts)

3 Signal

 Name Signal


Type org.thoughtcrime.securesms
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x8f57 (Table: accounts)

4 Skype

 Name Skype


Type com.skype.raider
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x8fbb (Table: accounts)

5 WhatsApp

 Name WhatsApp


Type com.whatsapp
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x8fa0 (Table: accounts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 49


Case Label: K3 Case Evidence Number: 007 Device Label:

Contacts

Contact List (5447)


All phone and SIM contacts, sorted by name in ascending order

1 #Angel1011111111 [email protected] Skype +420123456789

 First Name #Angel1011111111


 Home +14622092 (twitter)
 Mobile +18402612 (twitter)
 Work +17214041 (twitter)
 Work Email #[email protected] (twitter)
Note autogenerated
 Modified 2022-07-11 08:46:10 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x13338d0 (Table: contacts)

2 #Angel34 [email protected] Skype +420123456789

 First Name #Angel34


 First Name #angel34
 Home 6212377 (twitter)
 Home +16212377 (twitter)
 Mobile 534946855555555 (twitter)
 Mobile +15349468 (twitter)
 Work 6576289 (twitter)
 Work +16576289 (twitter)
 Work Email #[email protected] (twitter)
Note autogenerated
 Modified 2022-07-11 08:46:10 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1333871 (Table: contacts)

3 #Angel36 [email protected] Skype +420123456789

 First Name #Angel36


 Home 3021303 (twitter)
 Mobile 2027189 (twitter)
 Work 7772952 (twitter)
 Work Email #[email protected] (twitter)
Note autogenerated
 Modified 2022-07-11 08:50:59 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x133371b (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 50


Case Label: K3 Case Evidence Number: 007 Device Label:

686 Amanda Kieth [email protected] Skype +420123456789

 First Name Amanda


 Last Name Kieth
 Mobile +15191816933 (twitter)
 Work +15123647413 (twitter)
 Email [email protected] (twitter)
 Address Street 408 Kalamazoo Plaza
(Google Maps) Lansing, MI
United States of Ame
P.O. Box
Locality
Region
Country
Postal Code
 Address Street 408 Kalamazoo Plaza, Lansing, MI-48933, United States
(Google Maps) of America
United States of America
P.O. Box
Locality
Region
Country
Postal Code
 Address Street 408 Kalamazoo Plaza
(Google Maps) P.O. Box
Locality Lansing
Region MI
Country United State
Postal Code 48933
 Address Street of Ame 408 Kalamazoo Plaza
(Google Maps) P.O. Box
Locality Lansing
Region MI
Country United States
Postal Code
 Address Street of America 408 Kalamazoo Plaza
(Google Maps) P.O. Box
Locality Lansing
Region MI
Country United States
Postal Code 48933
 Modified 2022-07-13 11:07:57 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x161c1be (Table: contacts)

687 Amanda Knight Skype

 First Name Amanda


 Last Name Knight
 Modified 2022-07-12 15:43:56 (UTC+2)
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x170a928 (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 206
Case Label: K3 Case Evidence Number: 007 Device Label:

1034 Brian N. Glad [email protected]

 First Name Brian


 Middle Name N.
 Last Name Glad
 Email [email protected] (twitter)
 Email M Holland Company (twitter)
 Address Street Suite 600 400 Skokie Blvd
(Google Maps) P.O. Box
Locality Northbrook
Region IL
Country US
Postal Code
 Address Street 400 Skokie Blvd; P.O.Box: US Suite 600
(Google Maps) P.O. Box
Locality Northbrook
Region
Country US
Postal Code 60062
 Company Brian N. Glad
 Company M Holland Company
Note 11/10/2014 This contact was added from Microsoft Lync 2013 (15.0.4569.1503)
 Modified 2022-07-14 10:53:02 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0xd43d62 (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 284
Case Label: K3 Case Evidence Number: 007 Device Label:

1035 Brianna Ammerman [email protected] Skype +420123456789

 First Name Brianna


 Last Name Ammerman
Unspecified +15225365111 (twitter)
Unspecified +15448965451 (twitter)
 Email [email protected] (twitter)
 Address Street 210 Washington Avenue
(Google Maps) P.O. Box
Locality Albany
Region NY
Country United States of America
Postal Code
 Address Street of Ame 210 Washington Avenue
(Google Maps) P.O. Box
Locality Albany
Region NY
Country United States
Postal Code
 Address Street United Stat 210 Washington Avenue
(Google Maps) P.O. Box
Locality Albany
Region NY
Country
Postal Code 12203
 Address Street United Stat; 210 Washington Avenue
(Google Maps) P.O. Box
Locality Albany
Region NY
Country
Postal Code 12203
Note Met on holidays
 Modified 2022-07-13 11:07:52 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x16532b1 (Table: contacts)

1036 Bridget Cain [email protected] Skype +420123456789

 First Name Bridget


 Last Name Cain
 Mobile +17733293230 (twitter)
 Modified 2022-07-11 08:46:35 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1377498 (Table: contacts)

1037 Britni Jack [email protected]

 First Name Britni


 Last Name Jack
 Email [email protected] (twitter)
 Modified 2022-07-11 08:48:06 (UTC+2)
 Member of Groups My Contacts
Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x4dc348 (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 285
Case Label: K3 Case Evidence Number: 007 Device Label:

5443

 Modified 2022-07-14 13:59:11 (UTC+2)


Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1fff788 (Table: contacts)

5444

 Modified 2022-07-14 13:59:11 (UTC+2)


Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1fffa42 (Table: contacts)

5445

 Modified 2022-07-14 13:59:10 (UTC+2)


Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1fe5620 (Table: contacts)

5446

 Modified 2022-07-14 13:59:10 (UTC+2)


Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1a8d893 (Table: contacts)

5447

 Modified 2022-07-14 13:59:11 (UTC+2)


Source File phone/applications0/com.android.providers.contacts/live_data/databases/
contacts2.db : 0x1fff7a4 (Table: contacts)

Contact Groups (0)


All phone and SIM groups, sorted by name in ascending order

No entries

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1267
Case Label: K3 Case Evidence Number: 007 Device Label:

Messages

Conversations (21 conversations, 65 messages)


All phone messages
* Entries marked with asterisk are cross-referenced from phone contacts

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Twitter

 Last Activity 2022-07-18 13:21:55 (UTC+2)


 Participants Twitter (twitter), me (twitter)
Twitter (twitter)*
<#> 6-digit Twitter confirmation code: 187577 2022-06-24 10:56:20 (UTC+2)
/XGYNXWncmi
Twitter (twitter)*
Ověřovací kód pro Twitter: 613194 2022-06-24 10:56:56 (UTC+2)

Twitter (twitter)*
<#> 6-digit Twitter confirmation code: 970628 2022-07-18 13:11:40 (UTC+2)
/XGYNXWncmi
Twitter (twitter)*
Ověřovací kód pro Twitter: 058302 2022-07-18 13:21:55 (UTC+2)

2 Facebook

 Last Activity 2022-07-14 14:59:53 (UTC+2)


 Participants Facebook (twitter), me (twitter)
Facebook (twitter)*
Use 323965 for two-factor authentication on Facebook. 2022-06-28 11:05:03 (UTC+2)

Facebook (twitter)* 2022-07-11 14:45:48 (UTC+2)


271 943 is your Instagram code. Don't share it.
Facebook (twitter)* 2022-07-13 14:47:47 (UTC+2)
410 263 is your Instagram code. Don't share it.
Facebook (twitter)* 2022-07-13 14:49:44 (UTC+2)
672 304 is your Instagram code. Don't share it.
Facebook (twitter)*
915 023 is your Instagram code. Don't share it. 2022-07-13 15:03:08 (UTC+2)

Facebook (twitter)* 2022-07-13 15:22:23 (UTC+2)


915 023 is your Instagram code. Don't share it.
Facebook (twitter)* 2022-07-13 15:23:22 (UTC+2)
702 973 is your Instagram code. Don't share it.
Facebook (twitter)*
491 328 is your Instagram code. Don't share it. 2022-07-13 15:30:16 (UTC+2)

Facebook (twitter)*
570 099 is your Instagram code. Don't share it. 2022-07-13 15:30:53 (UTC+2)

Facebook (twitter)*
442 957 is your Instagram code. Don't share it. 2022-07-13 16:01:33 (UTC+2)

Facebook (twitter)*
944 719 is your Instagram code. Don't share it. 2022-07-13 16:12:05 (UTC+2)

Facebook (twitter)*
860 491 is your Instagram code. Don't share it. 2022-07-13 16:22:29 (UTC+2)

Facebook (twitter)*
276 537 is your Instagram code. Don't share it. 2022-07-13 16:23:20 (UTC+2)

Facebook (twitter)*
442 957 is your Instagram code. Don't share it. 2022-07-14 08:41:11 (UTC+2)

Facebook (twitter)*
913 500 is your Instagram code. Don't share it. 2022-07-14 08:42:18 (UTC+2)

Facebook (twitter)*
307 214 is your Instagram code. Don't share it. 2022-07-14 08:49:05 (UTC+2)

Facebook (twitter)*
705 213 is your Instagram code. Don't share it. 2022-07-14 08:50:21 (UTC+2)

Facebook (twitter)*
130 642 is your Instagram code. Don't share it. 2022-07-14 11:07:35 (UTC+2)

Facebook (twitter)* 2022-07-14 11:09:38 (UTC+2)


661 681 is your Instagram code. Don't share it.
Facebook (twitter)* 2022-07-14 13:55:22 (UTC+2)
621 084 is your Instagram code. Don't share it.
Facebook (twitter)* 2022-07-14 14:49:44 (UTC+2)
Use 298940 for two-factor authentication on Facebook.
Facebook (twitter)* 2022-07-14 14:52:01 (UTC+2)
Use 952480 for two-factor authentication on Facebook.

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1268
Case Label: K3 Case Evidence Number: 007 Device Label:

Facebook (twitter)*
Use 642929 for two-factor authentication on Facebook. 2022-07-14 14:53:51 (UTC+2)

Facebook (twitter)*
Use 896002 for two-factor authentication on Facebook. 2022-07-14 14:59:53 (UTC+2)

3 InfoSMS

 Last Activity 2022-07-14 14:39:21 (UTC+2)


 Participants InfoSMS (twitter), me (twitter)
InfoSMS (twitter)*
Your security code is 713682. Happy Dropboxing! 2022-07-14 14:38:28 (UTC+2)

InfoSMS (twitter)*
Your security code is 055591. Happy Dropboxing! 2022-07-14 14:39:21 (UTC+2)

4 AUTHMSG

 Last Activity 2022-07-14 14:02:44 (UTC+2)


 Participants AUTHMSG (twitter), me (twitter)
AUTHMSG (twitter)*
Your Box verification code is: 591768 2022-06-22 16:57:13 (UTC+2)

AUTHMSG (twitter)*
Your Box verification code is: 164004 2022-06-22 16:57:56 (UTC+2)

AUTHMSG (twitter)* 2022-07-11 11:28:04 (UTC+2)


<#>Your SIGNAL verification code is: 971421
doDiFGKPO1r
AUTHMSG (twitter)*
Your Box verification code is: 673975 2022-07-14 13:57:10 (UTC+2)

AUTHMSG (twitter)*
Your Box verification code is: 458879 2022-07-14 13:59:23 (UTC+2)

AUTHMSG (twitter)* 2022-07-14 14:02:44 (UTC+2)


Your Box verification code is: 838502

5 Google

 Last Activity 2022-07-14 13:55:37 (UTC+2)


 Participants Google (twitter), me (twitter)
Google (twitter)* 2022-06-22 12:33:27 (UTC+2)
Your Messenger verification code is G-095126
Google (twitter)* 2022-06-27 13:08:03 (UTC+2)
Your Messenger verification code is G-878661
Google (twitter)*
Your Messenger verification code is G-101391 2022-07-11 11:28:34 (UTC+2)

Google (twitter)*
Your Messenger verification code is G-882121 2022-07-11 14:45:52 (UTC+2)

Google (twitter)* 2022-07-14 09:37:42 (UTC+2)


Your Messenger verification code is G-680699
Google (twitter)* 2022-07-14 13:55:37 (UTC+2)
Your Messenger verification code is G-758433

6 WhatsApp

 Last Activity 2022-07-14 09:37:07 (UTC+2)


 Participants WhatsApp (twitter), me (twitter)
WhatsApp (twitter)*
<#> Your WhatsApp account is being registered on a new device 2022-06-22 12:33:35 (UTC+2)

Do not share this code with anyone

Your WhatsApp code: 274-501

4sgLq1p5sV6
WhatsApp (twitter)*
<#> Your WhatsApp code: 815-234 2022-07-13 11:08:59 (UTC+2)

You can also tap on this link to verify your phone: v.whatsapp.com/815234

Don't share this code with others


4sgLq1p5sV6
WhatsApp (twitter)*
<#> Your WhatsApp code: 855-059 2022-07-14 09:27:07 (UTC+2)

You can also tap on this link to verify your phone: v.whatsapp.com/855059

Don't share this code with others


4sgLq1p5sV6

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1269
Case Label: K3 Case Evidence Number: 007 Device Label:

Detailed Messages (65)


All phone messages, sorted by time in ascending order
* Entries marked with asterisk are cross-referenced from phone contacts

1  +420111112222 (twitter)* 2022-05-19 09:15:14 (UTC+2) Received

Odesilatel teto zpravy se Vam pokousel 17.05. v 14:14 2x dovolat. Vase O2


 Conversation +420111112222
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1df56 (Table: sms)

2  Vonage (twitter)* 2022-05-19 09:45:13 (UTC+2) Received

<#> Please enter 3413 into LINE within the next 30 mins.
JFoQLtyexga
 Conversation Vonage
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1deb8 (Table: sms)

3  Vonage (twitter)* 2022-05-19 09:45:53 (UTC+2) Received

<#> Please enter 0050 into LINE within the next 30 mins.
JFoQLtyexga
 Conversation Vonage
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1de19 (Table: sms)

4  Vonage (twitter)* 2022-05-19 09:46:05 (UTC+2) Received

<#> Please enter 0050 into LINE within the next 30 mins.
JFoQLtyexga
 Conversation Vonage
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1dd7a (Table: sms)

5  Telegram (twitter)* 2022-05-19 10:13:46 (UTC+2) Received

Telegram code: 56768

You can also tap on this link to log in:


https://t.me/login/56768

oLeq9AcOZkT
 Conversation Telegram
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1dcb9 (Table: sms)

6  LINE (twitter)* 2022-05-19 10:34:25 (UTC+2) Received

<#> Please enter 144040 into LINE within the next 30 mins.
JFoQLtyexga
 Conversation LINE
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1dc1b (Table: sms)

7  +420112233445 (twitter)* 2022-06-08 10:42:56 (UTC+2) Received

Odesilatel teto zpravy se Vam pokousel 08.06. v 10:42 2x dovolat. Vase O2


 Conversation +420 112 233 445
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1db71 (Table: sms)

8  Google (twitter)* 2022-06-22 12:33:27 (UTC+2) Received

Your Messenger verification code is G-095126


 Conversation Google
Source File phone/applications0/com.android.providers.telephony/live_data/databases/mmssms.db : 0x1daeb (Table: sms)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1272
Case Label: K3 Case Evidence Number: 007 Device Label:

Emails (222)
All application emails, sorted by time in ascending order

1  Facebook <[email protected]> (twitter) 2022-06-11 06:31:09 (UTC+2) Received

Gabie, help Jay celebrate his birthday. Today is Jay Gibson's birthday! Saturday, June 11, 2022 Jay Gibson 36 years old Help Him Celebrate See
Birthdays Was this email:Useful | Not Useful This
 Conversation It's Jay Gibson's birthday today
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28ee0c (Table:
items)

2  Quora Digest <[email protected]> (twitter) 2022-06-11 11:26:22 (UTC+2) Received

One characteristic that will make everyone think you're unintelligent, even if you aren't, is speaking poorly. I don't necessarily mean using slang or
having a thick accent (although those
 Conversation What screams "I have a low IQ"?
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x149b61 (Table:
items)

3  Facebook <[email protected]> (twitter) 2022-06-12 06:36:32 (UTC+2) Received

Gabie, help Ricky celebrate his birthday. Today is Ricky Loyd's birthday! Sunday, June 12, 2022 Ricky Loyd 60 years old Help Him Celebrate See
Birthdays Was this email:Useful | Not Useful This
 Conversation It's Ricky Loyd's birthday today
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28e732 (Table:
items)

4  Pinterest <[email protected]> (twitter) 2022-06-12 21:51:29 (UTC+2) Received

We found some fresh boards for you lunch 20 Pins Recipes 26 Pins Fitness 633 Pins · 1 section lazienki 10 Pins Birdhill Avenue 513 Pins obra 41 Pins
•HOUSE PLANS• 569 Pins Chicken Delish 5576 Pins
 Conversation "lunch", "Recipes" and 8 other boards like yours
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28ebbe (Table:
items)

5  LinkedIn <[email protected]> (twitter) 2022-06-13 14:46:53 (UTC+2) Received

Your job recommendations from LinkedIn


 Conversation Mastercard is hiring: Software engineer - .Net.
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x56ceb (Table: items)

6  AliExpress <[email protected]> (twitter) 2022-06-13 18:55:45 (UTC+2) Received

These new items are soo you!


 Conversation This just in
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x149d5a (Table:
items)

7  LinkedIn <[email protected]> (twitter) 2022-06-13 19:20:07 (UTC+2) Received

Here are your network highlights


 Conversation Jeff Anderson from a company you follow recently posted this
Source Gmail
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x108507 (Table:
items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1279
Case Label: K3 Case Evidence Number: 007 Device Label:

Calls (8)
All phone calls, sorted by time in ascending order
* Entries marked with asterisk are cross-referenced from phone contacts

Legend:

  Dialed call   Received call   Missed call   Blocked call   Rejected call

  Canceled call   Voicemail

Label From / To Time Duration


1  From: (hidden number) (twitter)* 2022-05-19 09:33:35 (UTC+2) 00:00:00
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5f4e (Table: calls)
2   +4200718898675 To: +4200718898675 (+4200718898675)* 2022-05-19 09:48:21 (UTC+2) 00:00:00
To +4200718898675 (twitter)
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5e81 (Table: calls)
3  From: (hidden number) (twitter)* 2022-06-08 10:43:16 (UTC+2) 00:00:21
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5dcf (Table: calls)
To: 111222333 (Cnk, Company Doe, +420 111 222 333, John
4  +420 111 222 333 2022-06-27 13:10:13 (UTC+2) 00:00:00
Doe)*
To +420 111 222 222 (twitter)
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5cf1 (Table: calls)
5  From: (hidden number) (twitter)* 2022-06-28 11:16:16 (UTC+2) 00:00:01
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5c40 (Table: calls)
6  From: (hidden number) (twitter)* 2022-07-13 14:21:32 (UTC+2) 00:00:13
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5b8e (Table: calls)
7  From: (hidden number) (twitter)* 2022-07-14 09:32:58 (UTC+2) 00:00:00
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5adc (Table: calls)
8  From: (hidden number) (twitter)* 2022-07-14 14:01:11 (UTC+2) 00:00:17
Source File phone/applications0/com.android.providers.contacts/live_data/databases/calllog.db : 0x5a2a (Table: calls)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1310
Case Label: K3 Case Evidence Number: 007 Device Label:

Organizer

List of Calendars (5)

1 Židovské svátky

 Owner cs.judaism#[email protected]


 Time Zone Europe/Prague
Type com.google
Account [email protected]
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db
: 0x7f06 (Table: Calendars)

2 Holidays in Czechia

 Owner en.czech#[email protected]


 Time Zone Europe/Prague
Type com.google
Account [email protected]
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db
: 0x7e0e (Table: Calendars)

3 České státní svátky

 Owner cs.czech#[email protected]


 Time Zone Europe/Prague
Type com.google
Account [email protected]
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db
: 0x7d0c (Table: Calendars)

4 Křesťanské svátky

 Owner cs.christian#[email protected]


 Time Zone Europe/Prague
Type com.google
Account [email protected]
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db
: 0x7c08 (Table: Calendars)

5 [email protected]

 Owner [email protected]


 Time Zone Europe/Prague
Type com.google
Account [email protected]
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db
: 0x7b2d (Table: Calendars)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1311
Case Label: K3 Case Evidence Number: 007 Device Label:

Events (1244)
All phone organizer events, sorted by time in ascending order

1 Learn Arabic

Type Regular
 Start 2021-04-27 16:15:00 (UTC+2)
 End 2021-04-27 16:45:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x220cd (Table: Events)

2 Learn to code

Type Regular
 Start 2021-04-27 18:00:00 (UTC+2)
 End 2021-04-27 18:15:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x2118f (Table: Events)

3 Eat

Type Regular
 Start 2021-04-28 03:00:00 (UTC+2)
 End 2021-04-28 03:15:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x225e0 (Table: Events)

4 Learn Arabic

Type Regular
 Start 2021-04-28 16:15:00 (UTC+2)
 End 2021-04-28 16:45:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x23c98 (Table: Events)

5 Learn to code

Type Regular
 Start 2021-04-28 18:00:00 (UTC+2)
 End 2021-04-28 18:15:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x22ae1 (Table: Events)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1312
Case Label: K3 Case Evidence Number: 007 Device Label:

1244 Eat

Type Regular
 Start 2022-08-20 04:45:00 (UTC+2)
 End 2022-08-20 05:00:00 (UTC+2)
 Description Tato událost bylo přidána z funkce Cíle v Kalendáři Google. Změny, které v ní tady provedete, se nemusí uložit.
Podrobnosti cíle zobrazujte a upravujte v aplikaci Kalendář Google.
 Calendar [email protected]
 Time Zone Europe/Prague
Attendee ([email protected])
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0xea694 (Table: Events)

Birthdays and Holidays (250)


All phone organizer events, sorted by time in ascending order

1 Lag BaOmer

Type Holiday
 Start 2021-04-30 02:00:00 (UTC+2)
 End 2021-05-01 02:00:00 (UTC+2)
 Calendar cs.judaism#[email protected] (Židovské svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x75ceb (Table: Events)

2 Labor Day / May Day

Type Holiday
 Start 2021-05-01 02:00:00 (UTC+2)
 End 2021-05-02 02:00:00 (UTC+2)
 Description Public holiday
 Calendar en.czech#[email protected] (Holidays in Czechia)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x79a07 (Table: Events)

3 Svátek práce

Type Holiday
 Start 2021-05-01 02:00:00 (UTC+2)
 End 2021-05-02 02:00:00 (UTC+2)
 Description Státní svátek
 Calendar cs.czech#[email protected] (České státní svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x1f783 (Table: Events)

4 Den osvobození

Type Holiday
 Start 2021-05-08 02:00:00 (UTC+2)
 End 2021-05-09 02:00:00 (UTC+2)
 Description Státní svátek
 Calendar cs.czech#[email protected] (České státní svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0x21ca5 (Table: Events)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1561
Case Label: K3 Case Evidence Number: 007 Device Label:

247 17th of Tammuz

Type Holiday
 Start 2023-07-06 02:00:00 (UTC+2)
 End 2023-07-07 02:00:00 (UTC+2)
 Calendar cs.judaism#[email protected] (Židovské svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0xdf670 (Table: Events)

248 Tisha B'Av Eve

Type Holiday
 Start 2023-07-26 02:00:00 (UTC+2)
 End 2023-07-27 02:00:00 (UTC+2)
 Calendar cs.judaism#[email protected] (Židovské svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0xe914e (Table: Events)

249 Tisha B'Av

Type Holiday
 Start 2023-07-27 02:00:00 (UTC+2)
 End 2023-07-28 02:00:00 (UTC+2)
 Calendar cs.judaism#[email protected] (Židovské svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0xe904b (Table: Events)

250 Assumption of Mary

Type Holiday
 Start 2023-08-15 02:00:00 (UTC+2)
 End 2023-08-16 02:00:00 (UTC+2)
 Calendar cs.christian#[email protected] (Křesťanské svátky)
 Time Zone UTC
Source File phone/applications0/com.android.providers.calendar/live_data/databases/calendar.db : 0xeaef2 (Table: Events)

Tasks (0)
All phone tasks, sorted by time in ascending order

No entries

Notes (0)
All phone notes, sorted by time in ascending order

No entries

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1601
Case Label: K3 Case Evidence Number: 007 Device Label:

Applications (268)
All application data

2 Button Navigation Bar


 Label 2 Button Navigation Bar
Package com.android.internal.systemui.navbar.twobutton (twitter)
Version 1.0
Application Type System Application
 Application Size 8.3 KB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2009-01-01 01:00:00 (UTC+1)
 Last Active 2022-02-02 09:58:18 (UTC+1)

Application analysis is empty

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1602
Case Label: K3 Case Evidence Number: 007 Device Label:

Box
 Label Box
Package com.box.android (twitter)
Version 6.9.1
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 196.8 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 1a0da4ffa8a3b049a1bbf85f2dd9925147ca757f, valid
from 2010-09-10T13:28:41Z to 2035-09-04T13:28:41Z, Subject:
Best Certificate Found
C=CA, ST=On, L=Ottawa, O=Bitheads Inc., Issuer: C=CA,
ST=On, L=Ottawa, O=Bitheads Inc.
android.permission.INTERNET,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.MANAGE_EXTERNAL_STORAGE,
android.permission.ACCESS_NETWORK_STATE,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
android.permission.READ_CONTACTS,
android.permission.USE_BIOMETRIC,
android.permission.CAMERA,
android.permission.RECORD_AUDIO,
android.permission.FOREGROUND_SERVICE,
android.permission.USE_CREDENTIALS,
android.permission.WAKE_LOCK,
Android Permissions
com.google.android.c2dm.permission.RECEIVE,
android.permission.USE_FINGERPRINT,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_STATS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.VIBRATE,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE
 First Installed 2022-05-03 08:12:18 (UTC+2)
 Last Updated 2022-07-05 07:42:36 (UTC+2)
 Last Active 2022-07-14 13:48:17 (UTC+2)
 Last Month Use Time 00:11:32
 Last Year Use Time 00:12:18

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1625
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (34)

1 36096881690_af00397093d7b254e2784176f39a2e7aa71284f9.thumbnail

 Filename 36096881690_af00397093d7b254e2784176f39a2e7aa71284f9.thumbnail
Path phone/applications0/com.box.android/live_data/files/246495050/BoxThumbnails/
36096881690_af00397093d7b254e2784176f39a2e7aa71284f9.thumbnail
Size 3.01 KB
 Modified 2022-06-22 16:39:16 (UTC+2)
 Accessed 2022-06-22 16:39:15 (UTC+2)
 Width 160 px
 Height 160 px
Format jpeg

2 asteroids_header_logo_457a31dc395cb1c31943adb22e45e63c.svg

 Filename asteroids_header_logo_457a31dc395cb1c31943adb22e45e63c.svg


Path phone/applications0/com.box.android/live_data/files/box_notes_webview_assets/notes/img/
asteroids_header_logo_457a31dc395cb1c31943adb22e45e63c.svg
Size 4.37 KB
 Modified 2022-07-14 13:44:47 (UTC+2)
 Accessed 2022-07-14 13:44:47 (UTC+2)

3 box_user_avatar_large_992920f76747275b946052733d87a3b6.png

 Filename box_user_avatar_large_992920f76747275b946052733d87a3b6.png
Path phone/applications0/com.box.android/live_data/files/box_notes_webview_assets/notes/img/
box_user_avatar_large_992920f76747275b946052733d87a3b6.png
Size 266 B
 Modified 2022-07-14 13:44:45 (UTC+2)
 Accessed 2022-07-14 13:44:45 (UTC+2)
 Width 40 px
 Height 40 px
Format png

4 box_user_avatar_small_c832b0c455ea9d9598b8aa341a3c759b.png

 Filename box_user_avatar_small_c832b0c455ea9d9598b8aa341a3c759b.png
Path phone/applications0/com.box.android/live_data/files/box_notes_webview_assets/notes/img/
box_user_avatar_small_c832b0c455ea9d9598b8aa341a3c759b.png
Size 217 B
 Modified 2022-07-14 13:44:45 (UTC+2)
 Accessed 2022-07-14 13:44:45 (UTC+2)
 Width 28 px
 Height 28 px
Format png

5 boxnotes-logo_a731ccdcbc93619c39fba3d2ba46fb37.png

 Filename boxnotes-logo_a731ccdcbc93619c39fba3d2ba46fb37.png
Path phone/applications0/com.box.android/live_data/files/box_notes_webview_assets/notes/img/
boxnotes-logo_a731ccdcbc93619c39fba3d2ba46fb37.png
Size 1.45 KB
 Modified 2022-07-14 13:44:47 (UTC+2)
 Accessed 2022-07-14 13:44:47 (UTC+2)
 Width 154 px
 Height 29 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1626
Case Label: K3 Case Evidence Number: 007 Device Label:

Documents (3)

1 com.box.android-2022-07-11_12-50-19-0.txt

 Filename com.box.android-2022-07-11_12-50-19-0.txt


Path phone/applications0/com.box.android/live_data/files/logs/
com.box.android-2022-07-11_12-50-19-0.txt
Size 6.88 KB
Mime Type text/plain
 Modified 2022-07-11 12:50:19 (UTC+2)
 Accessed 2022-07-11 12:50:19 (UTC+2)

2 com.box.android-2022-07-14_08-44-42-0.txt

 Filename com.box.android-2022-07-14_08-44-42-0.txt


Path phone/applications0/com.box.android/live_data/files/logs/
com.box.android-2022-07-14_08-44-42-0.txt
Size 38.7 KB
Mime Type text/plain
 Modified 2022-07-14 13:47:33 (UTC+2)
 Accessed 2022-07-14 08:44:42 (UTC+2)

3 com.box.android-2022-07-18_08-37-47-0.txt

 Filename com.box.android-2022-07-18_08-37-47-0.txt


Path phone/applications0/com.box.android/live_data/files/logs/
com.box.android-2022-07-18_08-37-47-0.txt
Size 6.88 KB
Mime Type text/plain
 Modified 2022-07-18 08:37:47 (UTC+2)
 Accessed 2022-07-18 08:37:47 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1633
Case Label: K3 Case Evidence Number: 007 Device Label:

Chrome
 Label Chrome
Package com.android.chrome (twitter)
Version 103.0.5060.71
Application Type System Application Update
 Application Size 9.2 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:01:32 (UTC+2)
 Last Active 2022-07-13 15:59:57 (UTC+2)
 Last Month Use Time 00:19:51
 Last Year Use Time 00:40:57

Accounts (1)

1 John Doe

User ID 105549456770703913925 (twitter)


 Email [email protected] (twitter)
 User Name Jose
Locale cs
 Account Picture https://lh3.googleusercontent.com/a-/
AFdZucphNNOm5ltC_84wo7vozSFq2Rnmukty78EIu4z8Xw=s96-c
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Preferences

Autofill Profiles (3)

1 Jozef

 First Name Jozef


 Phone +421 676 798 994 (twitter)
 Email [email protected] (twitter)
 Company Doe
 Address Street Nová Adresa
(Google Maps) P.O. Box
Locality Bratislava
Region
Country SK
Postal Code 91500
 Language sk
 Modified 2022-05-19 09:17:00 (UTC+2)
 Use Count 1
 Last Activity 2018-03-02 15:53:54 (UTC+1)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Web Data :
0x678a (Table: autofill_profiles)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1651
Case Label: K3 Case Evidence Number: 007 Device Label:

2 A New Address

 First Name A


 Middle Name New
 Last Name Address
 Phone +1 466-464-6478 (twitter)
 Email [email protected] (twitter)
 Company New Org
 Address Street A Very New Address
(Google Maps) P.O. Box
Locality Goop
Region WI
Country US
Postal Code 83838
 Language en
 Modified 2022-05-19 09:17:00 (UTC+2)
 Use Count 1
 Last Activity 2018-03-02 15:52:17 (UTC+1)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Web Data :
0x6714 (Table: autofill_profiles)

3 Jdhdhx

 First Name Jdhdhx


 Phone +1 562-365-2856 (twitter)
 Email [email protected] (twitter)
 Company Hxbxhx
 Address Street Jdbsbhz
(Google Maps) P.O. Box
Locality Hzhzbhs
Region AK
Country US
Postal Code 62636
 Language en
 Modified 2022-05-19 09:17:00 (UTC+2)
 Use Count 1
 Last Activity 2018-10-10 12:36:53 (UTC+2)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Web Data :
0x66a7 (Table: autofill_profiles)

Saved Passwords (51)

1 android://5c2O_G6cBQQeYg6A3vhIpzY0dvvRVTnq31OKzlXNwoyDkgIzF7-iWHkpeUwCLZzqsw74HFEMb_bgr_PLvHpbnw==@ru.mail.mailapp/

 Host android://5c2O_G6cBQQeYg6A3vhIpzY0dvvRVTnq31OKzlXNwoyDkgIzF7-
[email protected]/
 Created 2018-08-21 13:57:50 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0x12641 (Table: logins)

2 android://
C6Vx_rw13CBGL0qxoZu1DOx0dEFyJvqfmsc6_QwmtksRVSV0clCBs8HVtAdBMnWQbzDZSlcDWNrWxWDUZl6BGw==@de.shapeservices.impluslite/

 Host android://
C6Vx_rw13CBGL0qxoZu1DOx0dEFyJvqfmsc6_QwmtksRVSV0clCBs8HVtAdBMnWQbzDZSlcDWNrWxWDUZl6BGw==@de
.shapeservices.impluslite/
 User Name [email protected]
 Password v10����#C�%��CZ3v*d
 Created 2018-08-08 15:58:30 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0x1104d (Table: logins)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1652
Case Label: K3 Case Evidence Number: 007 Device Label:

50 https://www.dropbox.com/

 Host https://www.dropbox.com/1/connect
 User Name [email protected]
 Password v10�8�C�N�z���r���@
 Created 2019-05-07 15:50:54 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0xf155 (Table: logins)

51 https://www.pof.com/

 Host https://www.pof.com/
 User Name [email protected]
 Password v10�O
!D�'�C�eƊ:�f
 Created 2018-09-26 12:53:03 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0xb0f1 (Table: logins)

History (57)

1 Google Terms of Service – Privacy & Terms – Google

 URL https://policies.google.com/terms/embedded
 Last Visit 2022-05-12 13:50:43 (UTC+2)
 Visit Count 1
 Visit 2022-05-12 13:50:43 (UTC+2)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24f8e (Table: urls)

2 Home - YouTube

 URL https://m.youtube.com/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24e8f (Table: urls)

3 Highlighted Mixtapes

 URL https://mobile.datpiff.com/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24e4e (Table: urls)

4 reddit: the front page of the internet

 URL https://www.reddit.com/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24dff (Table: urls)

5 Compelson

 URL http://mobiledit.cz/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24dd0 (Table: urls)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1660
Case Label: K3 Case Evidence Number: 007 Device Label:

54 Fiddler Echo Service

 URL http://10.1.0.39:8888/
 Last Visit 2022-07-11 16:35:32 (UTC+2)
 Visit Count 1
 Visit 2022-07-11 16:35:32 (UTC+2)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x2b51d (Table: urls)

55 google - Google Search

 URL https://www.google.com/search?
gs_ssp=eJzj4tTP1TcwMU02T1JgNGB0YPBiS8_PT89JBQBASQXT&q=google&oq=go&aqs=chrome.
3.69i57j35i39l2j46i131i199i433i465i512j0i131i433i512l3j46i131i175i199i433j0i131i433i512j0i271l2.1685j0j4&client
=ms-android-google&sourceid=chrome-mobile&ie=UTF-8
 Last Visit 2022-07-12 16:02:25 (UTC+2)
 Visit Count 1
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x2b3e6 (Table: urls)
Visit
2022-07-12 16:02:25 (UTC+2) 2022-07-12 16:02:23 (UTC+2) 2022-07-12 15:57:24 (UTC+2) 2022-07-12 15:56:49 (UTC+2) 2022-07-11 16:35:53 (UTC+2)

56 google - Google Search

 URL https://www.google.com/search?
gs_ssp=eJzj4tTP1TcwMU02T1JgNGB0YPBiS8_PT89JBQBASQXT&q=google&oq=go&aqs=chrome.
3.69i57j35i39l2j46i131i199i433i465i512j0i131i433i512l3j46i131i175i199i433j0i131i433i512j0i271l2.1685j0j4&client
=ms-android-google&sourceid=chrome-mobile&ie=UTF-8#ip=1
 Last Visit 2022-07-12 16:02:38 (UTC+2)
 Visit Count 1
 Visit 2022-07-12 16:02:38 (UTC+2)
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x2b2aa (Table: urls)

57 Apple - Google Search

 URL https://www.google.com/search?client=ms-android-google&sxsrf=ALiCzsZHNI2Vi3ZnnbHkPq0gc8HYWnRU6g:
1657634545432&q=Apple&si=AC1wQDBNHkCHCypTS2e2dFTw3AD_UFFtsj6ncJO412kMEgkLGWmSfsR3BiwtYX-
EFMj2Yyg2yy0-
m7cD6pNy9G9McFXuoLGGwFuZCVWZLs403IKy2McpK1ILry3JbsliaLXkHmBHR73Uy06XEfzUU2Koz_tEfhPcQsSmd5yds8
MqqDHqX8ISUjFgT0I_ImEyFuBD3c0cWoNo52o8C7EJwz43p8VOJ8ZhiXo5PhQCGzkxlcaWeDn-FZ5VQq-4pq-
wWZrjaLdhKgvwWjaR67GlQy74FrpuWE25pA%3D%3D&sa=X&ved=2ahUKEwjtpf3xwfP4AhUDQ_EDHW9ACYUQgOQBe
gQIFhAO&biw=393&bih=715&dpr=2.75
 Last Visit 2022-07-13 15:59:52 (UTC+2)
 Visit Count 2
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x2b08f (Table: urls)
Visit
2022-07-13 15:59:52 (UTC+2) 2022-07-12 16:02:56 (UTC+2) 2022-07-12 16:02:55 (UTC+2)

Searches (5)

1 wikipedie

 Searched Query wikipedie


 Associated URL wikipedie - Hledat Googlem
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfe5 (Table:
keyword_search_terms)

2 outlook

 Searched Query outlook


 Associated URL outlook - Google Search
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfce (Table:
keyword_search_terms)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1669
Case Label: K3 Case Evidence Number: 007 Device Label:

3 google

 Searched Query google


 Associated URL google - Google Search
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfb9 (Table:
keyword_search_terms)

4 google

 Searched Query google


 Associated URL google - Google Search
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfa4 (Table:
keyword_search_terms)

5 Apple

 Searched Query Apple


 Associated URL Apple - Google Search
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbf91 (Table:
keyword_search_terms)

Bookmarks (27)

1 ALCATEL onetouch

 Name ALCATEL onetouch


 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.alcatelonetouch.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

2 My onetouch

 Name My onetouch
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://3g.my-onetouch.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

3 eBay

 Name eBay
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.ebay.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

4 Wikipedia

 Name Wikipedia
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.wikipedia.org/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

5 Facebook

 Name Facebook
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.facebook.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1670
Case Label: K3 Case Evidence Number: 007 Device Label:

22 Nova bookmarkfolder

 Name Nova bookmarkfolder


 Created 2021-01-29 11:41:38 (UTC+1)
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

23 Amazon.com. Spend less. Smile more.

 Name Amazon.com. Spend less. Smile more.


 Created 2021-12-21 15:23:46 (UTC+1)
 URL https://www.amazon.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

24 ESPN: Serving sports fans. Anytime. Anywhere.

 Name ESPN: Serving sports fans. Anytime. Anywhere.


 Created 2021-12-21 15:26:30 (UTC+1)
 URL https://www.espn.com/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

25 Wikipedia, the free encyclopedia

 Name Wikipedia, the free encyclopedia


 Created 2022-05-19 09:17:06 (UTC+2)
 URL https://en.m.wikipedia.org/wiki/Main_Page
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

26 Upcoming: Nokia Penguin, Nokia G11 Plus (Magik), Nokia TA-1448, and a 4G feature phone | Nokiamob

 Name Upcoming: Nokia Penguin, Nokia G11 Plus (Magik), Nokia TA-1448, and a 4G feature phone | Nokiamob
 Created 2022-06-06 13:17:09 (UTC+2)
 URL https://nokiamob.net/2022/05/17/upcoming-nokia-penguin-nokia-g11-plus-magik-ta-1448-and-a-4g-feature-
phone/
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

27 Wikipedie, otevřená encyklopedie

 Name Wikipedie, otevřená encyklopedie


 Created 2022-06-06 13:17:22 (UTC+2)
 URL https://cs.m.wikipedia.org/wiki/Hlavn%C3%AD_strana
 Folder Mobile bookmarks
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

Autofill (23)

1 sh

 Text 640
 Created 2021-11-04 13:30:17 (UTC+1)
 Last Active 2021-11-04 13:30:17 (UTC+1)
 Use Count 1
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Web Data : 0x1cfe7 (Table: autofill)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1673
Case Label: K3 Case Evidence Number: 007 Device Label:

23 cd[Schema.org]

 Text []
 Created 2021-11-04 13:30:17 (UTC+1)
 Last Active 2021-11-04 13:30:17 (UTC+1)
 Use Count 1
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Web Data : 0x1d5c1 (Table: autofill)

Other Media Files

Images (22)

1 105549456770703913925

 Filename 105549456770703913925
Path phone/applications0/com.android.chrome/live_data/app_chrome/Default/Accounts/Avatar
Images/105549456770703913925
Size 38.8 KB
 Modified 2022-07-08 13:19:15 (UTC+2)
 Accessed 2022-05-19 09:14:20 (UTC+2)
 Width 256 px
 Height 256 px
Format png

2 Google Profile Picture.png

 Filename Google Profile Picture.png


Path phone/applications0/com.android.chrome/live_data/app_chrome/Default/Google Profile
Picture.png
Size 38.8 KB
 Modified 2022-07-18 14:53:13 (UTC+2)
 Accessed 2022-05-19 09:16:56 (UTC+2)
 Width 256 px
 Height 256 px
Format png

3 1.jpeg

 Filename 1.jpeg
Path phone/applications0/com.android.chrome/live_data/app_textures/1.jpeg
Size 45.9 KB
 Modified 2022-06-06 13:17:26 (UTC+2)
 Accessed 2022-06-06 13:17:26 (UTC+2)
 Width 295 px
 Height 347 px
Format jpeg

4 12.jpeg

 Filename 12.jpeg
Path phone/applications0/com.android.chrome/live_data/app_textures/12.jpeg
Size 27.6 KB
 Modified 2022-06-24 13:23:30 (UTC+2)
 Accessed 2022-06-24 13:23:30 (UTC+2)
 Width 295 px
 Height 347 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1677
Case Label: K3 Case Evidence Number: 007 Device Label:

20 beea3f4d23ff3a79fef44719995bc589596939d59114364a58580b25e34e7131.0

 Filename beea3f4d23ff3a79fef44719995bc589596939d59114364a58580b25e34e7131.0
Path phone/applications0/com.android.chrome/live_data/cache/image_manager_disk_cache/
beea3f4d23ff3a79fef44719995bc589596939d59114364a58580b25e34e7131.0
Size 827 B
 Modified 2022-05-19 09:17:00 (UTC+2)
 Accessed 2022-05-19 09:17:00 (UTC+2)
 Width 48 px
 Height 48 px
Format png

21 cfc8ef7717da3a4ec750fd98c48000e9165ea08bbaf4400a1cd22b33e4a5b3f5.0

 Filename cfc8ef7717da3a4ec750fd98c48000e9165ea08bbaf4400a1cd22b33e4a5b3f5.0
Path phone/applications0/com.android.chrome/live_data/cache/image_manager_disk_cache/
cfc8ef7717da3a4ec750fd98c48000e9165ea08bbaf4400a1cd22b33e4a5b3f5.0
Size 282 B
 Modified 2022-05-19 09:17:00 (UTC+2)
 Accessed 2022-05-19 09:17:00 (UTC+2)
 Width 96 px
 Height 96 px
Format png

22 da59dfdd0acfe2ca1e77cb9a1bb15a7cdb91ec5273aec76cfbdb02301fcb6494.0

 Filename da59dfdd0acfe2ca1e77cb9a1bb15a7cdb91ec5273aec76cfbdb02301fcb6494.0
Path phone/applications0/com.android.chrome/live_data/cache/image_manager_disk_cache/
da59dfdd0acfe2ca1e77cb9a1bb15a7cdb91ec5273aec76cfbdb02301fcb6494.0
Size 9.70 KB
 Modified 2022-05-19 09:17:42 (UTC+2)
 Accessed 2022-05-19 09:17:42 (UTC+2)
 Width 168 px
 Height 168 px
Format jpeg

Documents (2)

1 index.txt

 Filename index.txt


Path phone/applications0/com.android.chrome/live_data/app_chrome/Default/Service
Worker/CacheStorage/379f1cbab5b08b6fc9e08681e42d8be311441c88/index.txt
Size 26 B
Mime Type text/plain
 Modified 2022-07-13 15:59:59 (UTC+2)
 Accessed 2022-07-13 15:59:59 (UTC+2)

2 LICENSE.txt

 Filename LICENSE.txt


Path phone/applications0/com.android.chrome/live_data/app_chrome/Subresource Filter/
Unindexed Rules/9.36.0/LICENSE.txt
Size 24.1 KB
Mime Type text/plain
 Modified 2022-06-03 09:38:24 (UTC+2)
 Accessed 2022-06-03 09:38:24 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1681
Case Label: K3 Case Evidence Number: 007 Device Label:

Docs
 Label Docs
Package com.google.android.apps.docs.editors.docs (twitter)
Version 1.22.242.04.90
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 19.5 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
No
Successful
APK Verification Error missing sdk versions, supports only <24;32>
android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.WAKE_LOCK,
android.permission.GET_ACCOUNTS,
android.permission.GET_PACKAGE_SIZE,
android.permission.USE_CREDENTIALS,
android.permission.READ_CONTACTS,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.SUBSCRIBED_FEEDS_READ,
android.permission.SUBSCRIBED_FEEDS_WRITE,
android.permission.VIBRATE,
com.google.android.apps.docs.editors.kix.permission.WRITE_I
MAGES,
Android Permissions com.android.launcher.permission.INSTALL_SHORTCUT,
android.permission.FOREGROUND_SERVICE,
android.permission.MANAGE_ACCOUNTS,
android.permission.READ_SYNC_STATS,
com.google.android.gm.permission.READ_GMAIL,
com.google.android.googleapps.permission.GOOGLE_AUTH,
com.google.android.googleapps.permission.GOOGLE_AUTH.OT
HER_SERVICES,
com.google.android.googleapps.permission.GOOGLE_AUTH.AL
L_SERVICES,
com.google.android.googleapps.permission.GOOGLE_AUTH.wri
tely,
com.google.android.googleapps.permission.GOOGLE_AUTH.wis
e,
com.google.android.apps.docs.editors.kix.permission.READ_M
Y_DATA,
com.google.android.apps.docs.editors.kix.permission.SYNC_ST
ATUS, android.permission.POST_NOTIFICATIONS
 First Installed 2022-05-10 11:55:34 (UTC+2)
 Last Updated 2022-06-30 19:48:25 (UTC+2)
 Last Active 2022-05-19 09:20:02 (UTC+2)
 Last Year Use Time 00:00:17

Accounts (1)

1 test

 Email [email protected] (twitter)


Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/databases/
DocList.db : 0x3f58 (Table: Account249)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1755
Case Label: K3 Case Evidence Number: 007 Device Label:

Contacts (4 total, 2 deleted)

1 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x316fc (Table: items)

2 [email protected]

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x28c2dc (Table: items)

3 hynekkar@fit.cvut.cz

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x25bdd7 (Table: items)

4 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/


app_cello/[email protected]/cello.db : 0x345d1 (Table: items)

Document Previews (167)

1 1-ruq-x1UTgJkF7vTI7oFJmTEzEqjb1AdlQpWGO4

 Filename 1-ruq-x1UTgJkF7vTI7oFJmTEzEqjb1AdlQpWGO4
Path phone/applications0/com.google.android.apps.docs.editors.docs/live_data/files/stashes/
0318b2ce8289419a75bf1d94c30b6439/files/documents/
1VCytSv9rUr5p8DmprAHf06wlwGj35L1myBYKzAlVU2c/image/1-ruq-
x1UTgJkF7vTI7oFJmTEzEqjb1AdlQpWGO4
Size 109 KB
 Modified 2022-05-19 09:57:55 (UTC+2)
 Accessed 2022-05-19 09:57:55 (UTC+2)
 Width 522 px
 Height 523 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1756
Case Label: K3 Case Evidence Number: 007 Device Label:

166 1vK-JklxnS9qEGTJYFvKTbsKTFL2h1e8M66MpZ8o

 Filename 1vK-JklxnS9qEGTJYFvKTbsKTFL2h1e8M66MpZ8o
Path phone/applications0/com.google.android.apps.docs.editors.docs/live_data/files/stashes/
ed3eb733f62c3cba93c24bead2032672/files/documents/
1PJYpmmd6oGFeS-7Vs9CUCBup1LGfSgedK0qm5gfctNY/image/1vK-
JklxnS9qEGTJYFvKTbsKTFL2h1e8M66MpZ8o
Size 8.79 KB
 Modified 2022-05-19 09:19:12 (UTC+2)
 Accessed 2022-05-19 09:19:12 (UTC+2)
 Width 634 px
 Height 31 px
Format png

167 1yvJldicgsWutV41VJiLNPLSZ3wfl7oRSejuuls0

 Filename 1yvJldicgsWutV41VJiLNPLSZ3wfl7oRSejuuls0
Path phone/applications0/com.google.android.apps.docs.editors.docs/live_data/files/stashes/
ed3eb733f62c3cba93c24bead2032672/files/documents/
1PJYpmmd6oGFeS-7Vs9CUCBup1LGfSgedK0qm5gfctNY/image/
1yvJldicgsWutV41VJiLNPLSZ3wfl7oRSejuuls0
Size 10.6 KB
 Modified 2022-05-19 09:19:10 (UTC+2)
 Accessed 2022-05-19 09:19:10 (UTC+2)
 Width 658 px
 Height 39 px
Format png

Shared files with [email protected] (8 total, 2 deleted)


I am not the owner of files, but I have an access to them.

1 ISP advanced training  Deleted

File Filename ISP advanced training


Size 0B
Mime Type application/vnd.google-apps.document
Created 2020-08-17 23:35:59 (UTC+2)
Modified 2020-11-11 14:51:42 (UTC+1)
Accessed 2021-11-16 12:00:16 (UTC+1)
 Contact [email protected]
 URL https://docs.google.com/document/d/1VCytSv9rUr5p8DmprAHf06wlwGj35L1myBYKzAlVU2c/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/app_cello/[email protected]/cello.db :
0x345d1 (Table: items)

2 glhf

File Filename glhf


Size 9.60 MB
Mime Type application/vnd.google-apps.document
Created 2016-12-03 13:17:21 (UTC+1)
Modified 2021-12-14 18:08:19 (UTC+1)
Accessed 2022-05-19 09:19:02 (UTC+2)
 Contact [email protected]
 URL https://docs.google.com/document/d/1PJYpmmd6oGFeS-7Vs9CUCBup1LGfSgedK0qm5gfctNY/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs.editors.docs/live_data/app_cello/[email protected]/cello.db :
0x28c2dc (Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1798
Case Label: K3 Case Evidence Number: 007 Device Label:

Drive
 Label Drive
Package com.google.android.apps.docs (twitter)
Version 2.22.257.0.all.alldpi
Application Type System Application Update
 Application Size 11.1 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 15:35:58 (UTC+2)
 Last Active 2022-05-19 09:20:28 (UTC+2)
 Last Year Use Time 00:00:33

Accounts (1)

1 test

 Email [email protected] (twitter)


Source File phone/applications0/com.google.android.apps.docs/live_data/databases/DocList.db :
0x42f12 (Table: Account249)

Contacts (4 total, 4 deleted)

1 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x231575 (Table: items)

2 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x36c595 (Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1804
Case Label: K3 Case Evidence Number: 007 Device Label:

3 [email protected]  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x27abe7 (Table: items)

4  Deleted

Source File phone/applications0/com.google.android.apps.docs/live_data/


app_cello/[email protected]/cello.db-wal : 0x364311 (Table: items)

Shared files with [email protected] (4 total, 4 deleted)


I am not the owner of files, but I have an access to them.

1 s.opendoc  Deleted

File Filename s.opendoc


Size 0B
Mime Type ortFormat=zip����
.application/vnd.oasi
Created 1974-02-03 09:38:33 (UTC+1)
Modified 1974-01-09 02:26:32 (UTC+1)
Accessed 1973-10-11 14:58:06 (UTC+1)
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x364311
(Table: items)

2 BI-TJV 02  Deleted

File Filename BI-TJV 02


Size 0B
Mime Type application/vnd.google-apps.presentation
Created 2016-10-10 14:25:11 (UTC+2)
Modified 2021-02-26 09:41:29 (UTC+1)
Accessed 2018-12-27 19:22:30 (UTC+1)
 Contact [email protected]
 URL https://docs.google.com/presentation/d/1d8-SEWGoCA7r53brqH3uhAQ6JCIDstKBE6ePhM_d8JU/edit?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x231575
(Table: items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1805
Case Label: K3 Case Evidence Number: 007 Device Label:

3 Cell Tower Map  Deleted

File Filename Cell Tower Map


Size 0B
Mime Type application/vnd.google-apps.map
Created 2007-05-02 05:52:58 (UTC+2)
Modified 2015-06-27 15:24:39 (UTC+2)
Accessed 2022-06-14 13:56:11 (UTC+2)
 Contact [email protected]
 URL https://www.google.com/maps/d/edit?mid=1bI4ml2GY-JYQfVCirlkFLnAAzMs
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x27abe7
(Table: items)

4 2022-Eccentric-Kyberbezpecnost-Firmy-Profily-share.pdf  Deleted

File Filename 2022-Eccentric-Kyberbezpecnost-Firmy-Profily-share.pdf


Size 24.2 MB
Mime Type application/pdf
Created 2022-04-06 14:13:36 (UTC+2)
Modified 2022-04-06 14:04:16 (UTC+2)
Accessed 2022-05-25 10:51:56 (UTC+2)
 Contact [email protected]
 URL https://drive.google.com/file/d/1IBdNInOkraFwyaMdn0OMBNZZxw9Tn8LZ/view?usp=drivesdk
Source File phone/applications0/com.google.android.apps.docs/live_data/app_cello/[email protected]/cello.db-wal : 0x36c595
(Table: items)

Other Media Files

Documents (1)

1 0_991b0ed9-7de6-468a-9399-147e24955d5e_blob

 Filename 0_991b0ed9-7de6-468a-9399-147e24955d5e_blob


Path phone/applications0/com.google.android.apps.docs/live_data/cache/shiny_blobs/
blobs/0_991b0ed9-7de6-468a-9399-147e24955d5e_blob
Size 96.0 KB
Mime Type application/pdf
 Modified 2022-05-19 09:19:34 (UTC+2)
 Accessed 2022-05-19 09:19:29 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1806
Case Label: K3 Case Evidence Number: 007 Device Label:

Dropbox
 Label Dropbox
Package com.dropbox.android (twitter)
Version 286.2.2
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 28.6 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert fef915398ece931d5c5d70c7f080982f07fa8297, valid
from 2010-04-23T20:49:01Z to 2040-04-15T20:49:01Z, Subject:
Best Certificate Found C=US, ST=CA, L=San Francisco, O=Dropbox, CN=Tom Meyer,
Issuer: C=US, ST=CA, L=San Francisco, O=Dropbox, CN=Tom
Meyer
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS,
com.dropbox.android.service.ACCOUNT_INFO_ALARM_TRIGGE
R, android.permission.CAMERA,
android.permission.INTERNET,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_WIFI_STATE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE,
android.permission.GET_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS,
Android Permissions
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
com.google.android.c2dm.permission.RECEIVE,
android.permission.READ_CONTACTS,
com.sonyericsson.home.permission.BROADCAST_BADGE,
android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.ACCESS_MEDIA_LOCATION,
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIO
NS, android.permission.RECORD_AUDIO,
android.permission.WAKE_LOCK,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, android.permission.FOREGROUND_SERVICE,
com.android.vending.BILLING
 First Installed 2022-05-10 11:54:41 (UTC+2)
 Last Updated 2022-06-30 17:58:09 (UTC+2)
 Last Active 2022-07-14 14:34:19 (UTC+2)
 Last Month Use Time 00:02:34
 Last Year Use Time 00:04:12

Accounts (1)

1 209811457

Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db


2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1807
Case Label: K3 Case Evidence Number: 007 Device Label:

Stored Thumbnails (13)

1 256x256_fit_one_bestfit.jpg

 Filename 256x256_fit_one_bestfit.jpg
Path phone/applications0/com.dropbox.android/live_data/cache/u209811457/thumbs/
1499761532064.jpg/256x256_fit_one_bestfit.jpg
Size 14.1 KB
 Modified 2022-05-13 09:04:48 (UTC+2)
 Accessed 2022-05-13 09:04:48 (UTC+2)
 Width 256 px
 Height 256 px
Format jpeg

2 large.jpg

 Filename large.jpg
Path phone/applications0/com.dropbox.android/live_data/cache/u209811457/thumbs/
1499761532064.jpg/large.jpg
Size 5.61 KB
 Modified 2022-05-13 09:04:48 (UTC+2)
 Accessed 2022-05-13 09:04:48 (UTC+2)
 Width 128 px
 Height 128 px
Format jpeg

3 256x256_fit_one_bestfit.jpg

 Filename 256x256_fit_one_bestfit.jpg
Path phone/applications0/com.dropbox.android/live_data/cache/u209811457/thumbs/Getting
Started.pdf/256x256_fit_one_bestfit.jpg
Size 9.99 KB
 Modified 2022-05-13 10:35:11 (UTC+2)
 Accessed 2022-05-13 10:35:10 (UTC+2)
 Width 256 px
 Height 331 px
Format jpeg

4 large.jpg

 Filename large.jpg
Path phone/applications0/com.dropbox.android/live_data/cache/u209811457/thumbs/Getting
Started.pdf/large.jpg
Size 2.76 KB
 Modified 2022-05-13 10:35:11 (UTC+2)
 Accessed 2022-05-13 10:35:10 (UTC+2)
 Width 99 px
 Height 128 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1808
Case Label: K3 Case Evidence Number: 007 Device Label:

13 ProfileAvatar_a5a0ebf4-372e-403f-893f-f68393ff40c9_209811457.jpg

 Filename ProfileAvatar_a5a0ebf4-372e-403f-893f-f68393ff40c9_209811457.jpg
Path phone/applications0/com.dropbox.android/live_data/global/external/thumbs/
account_avatar_209811457/ProfileAvatar_a5a0ebf4-372e-403f-893f-
f68393ff40c9_209811457.jpg
Size 17.3 KB
 Modified 2022-07-14 14:31:40 (UTC+2)
 Accessed 2022-07-14 14:31:39 (UTC+2)
 Width 128 px
 Height 128 px
Format png

Cached Dropbox Filesystem (634 files)


Filename Size Created Modified Accessed
 /
 9.99 KB 2022-05-13 10:35:11 2022-05-13 10:35:10
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/cache/u209811457/thumbs/Getting Started.pdf/
256x256_fit_one_bestfit.jpg
 Optimizer_2.0_2013-08-13.apk 1.40 MB 2013-09-03 14:32:44
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x31ccb (Table: dropbox)
 /Camera Uploads/
 2013-09-03 12.33.14.jpg 1.42 MB 2013-09-03 14:33:14
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5d57a (Table: dropbox)
 2015-01-19 17.00.08.jpg 1.75 MB 2015-01-19 17:00:08
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5d45a (Table: dropbox)
 2015-01-19 17.07.03.jpg 2.06 MB 2015-01-19 17:07:03
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5d33a (Table: dropbox)
 2015-01-19 17.07.12.jpg 1.47 MB 2015-01-19 17:07:12
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5d219 (Table: dropbox)
 2015-01-19 17.07.22.jpg 2.20 MB 2015-01-19 17:07:22
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5d0f8 (Table: dropbox)
 2015-01-19 17.07.36.jpg 1.62 MB 2015-01-19 17:07:36
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5fedf (Table: dropbox)
 2015-01-19 17.07.34.jpg 1.61 MB 2015-01-19 17:07:34
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5fdbe (Table: dropbox)
 2015-01-19 17.07.35.jpg 1.63 MB 2015-01-19 17:07:35
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5fc9d (Table: dropbox)
 2015-01-19 17.07.46.jpg 960 KB 2015-01-19 17:07:46
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5fb7c (Table: dropbox)
 2015-01-23 16.37.04.png 145 KB 2015-01-23 17:37:04
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5fa5b (Table: dropbox)
 2014-07-11 11.46.06.jpg 1.49 MB 2015-02-02 14:15:45
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5f939 (Table: dropbox)
 2015-02-02 13.14.12.png 119 KB 2015-02-02 14:14:12
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x5f818 (Table: dropbox)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1811
Case Label: K3 Case Evidence Number: 007 Device Label:

Filename Size Created Modified Accessed


 /Paper Docs/Example Docs/
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81d19 (Table: dropbox)
 A.paper 200 B 2017-05-12 15:33:32
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81c3f (Table: dropbox)
 Haaa.paper 200 B 2017-05-12 15:36:36
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81b59 (Table: dropbox)
 Asdf.paper 200 B 2019-03-12 10:47:43
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81a73 (Table: dropbox)
 Hello.paper 200 B 2017-05-12 15:29:01
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81989 (Table: dropbox)
 Super secret.paper 200 B 2017-05-12 15:37:19
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x81883 (Table: dropbox)
 this-minimal-technology-12327 (2).mp3 3.64 MB 2022-05-13 10:29:28
 Account 209811457
Source File phone/applications0/com.dropbox.android/live_data/databases/209811457-db.db : 0x82d9e (Table: dropbox)

Other Media Files

Images (14)

1 4c302ce8bec47201a3f65087a254d0c442f45d43ee664d1d1e9b0f7a37ed4449.0

 Filename 4c302ce8bec47201a3f65087a254d0c442f45d43ee664d1d1e9b0f7a37ed4449.0
Path phone/applications0/com.dropbox.android/live_data/cache/image_manager_disk_cache/
4c302ce8bec47201a3f65087a254d0c442f45d43ee664d1d1e9b0f7a37ed4449.0
Size 13.3 KB
 Modified 2022-05-13 09:04:42 (UTC+2)
 Accessed 2022-05-13 09:04:42 (UTC+2)
 Width 110 px
 Height 110 px
Format png

2 6a9e3a7f91e014da5d60e3ed84adf97e86c09cdc0e1e78c5fab57080851a65ca.0

 Filename 6a9e3a7f91e014da5d60e3ed84adf97e86c09cdc0e1e78c5fab57080851a65ca.0
Path phone/applications0/com.dropbox.android/live_data/cache/image_manager_disk_cache/
6a9e3a7f91e014da5d60e3ed84adf97e86c09cdc0e1e78c5fab57080851a65ca.0
Size 91.6 KB
 Modified 2022-05-13 09:04:45 (UTC+2)
 Accessed 2022-05-13 09:04:45 (UTC+2)
 Width 813 px
 Height 444 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1843
Case Label: K3 Case Evidence Number: 007 Device Label:

Facebook
 Label Facebook
Package com.facebook.katana (twitter)
Version 374.0.0.20.109
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 66.8 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 8a3c4b262d721acd49a4bf97d5213199c86fa2b9, valid
from 2009-08-31T21:52:16Z to 2050-09-25T21:52:16Z, Subject:
C=US, ST=CA, L=Palo Alto, O=Facebook Mobile, OU=Facebook,
Best Certificate Found
CN=Facebook Corporation, Issuer: C=US, ST=CA, L=Palo Alto,
O=Facebook Mobile, OU=Facebook, CN=Facebook
Corporation
android.permission.ACCESS_COARSE_LOCATION,
android.permission.WAKE_LOCK, android.permission.VIBRATE,
android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS,
android.permission.GET_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.BROADCAST_STICKY,
com.facebook.katana.provider.ACCESS,
com.facebook.orca.provider.ACCESS,
com.facebook.services.identity.FEO2,
com.facebook.mlite.provider.ACCESS,
com.facebook.pages.app.provider.ACCESS,
com.facebook.appmanager.UNPROTECTED_API_ACCESS,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
android.permission.NFC, android.permission.CAMERA,
android.permission.RECORD_AUDIO,
android.permission.WRITE_EXTERNAL_STORAGE,
com.facebook.permission.prod.FB_APP_COMMUNICATION,
android.permission.READ_PHONE_STATE,
Android Permissions
android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_PROFILE,
android.permission.CHANGE_NETWORK_STATE,
android.permission.CHANGE_WIFI_STATE,
android.permission.SYSTEM_ALERT_WINDOW,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.GET_TASKS,
android.permission.READ_EXTERNAL_STORAGE,
com.facebook.katana.permission.CROSS_PROCESS_BROADCA
ST_MANAGER, com.facebook.receiver.permission.ACCESS,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.INTERNET,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
android.permission.BATTERY_STATS,
com.facebook.katana.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1852
Case Label: K3 Case Evidence Number: 007 Device Label:

android.permission.FOREGROUND_SERVICE,
com.nokia.pushnotifications.permission.RECEIVE,
android.permission.MANAGE_OWN_CALLS,
com.facebook.katana.permission.CREATE_SHORTCUT,
android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT,
com.android.vending.BILLING,
com.google.android.c2dm.permission.RECEIVE

 First Installed 2022-04-27 14:52:39 (UTC+2)


 Last Updated 2022-07-13 12:33:39 (UTC+2)
 Last Active 2022-07-07 15:12:04 (UTC+2)
 Last Month Use Time 00:46:37
 Last Year Use Time 00:49:22

Accounts (1)

1 Gabie

 Facebook ID 100003195706709 (twitter)


 User Name gabie.case
 Account Picture https://scontent-prg1-1.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c11.11.138.138a_cp0_dst-
jpg_e15_p160x160_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=Ehhd-39LYD0
AX82X9za&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-prg1-1.xx&oh=00_AT-
PFi1osFiCpc71HEJ6lyXx_dEDKvGcHuqdudgy-5vC_Q&oe=62DE30E7
Source File phone/applications0/com.facebook.katana/live_data/databases/prefs_db : 0x43a58
(Table: preferences)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1853
Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts - Messenger (1)

1 Gabie Case

 Facebook ID 100003195706709 (twitter)


Gender Female
 Birthday 1987-12-24
 Phone Number +420721163530 (twitter)
 Phone Number +420111222333 (twitter)
 Phone Number +420725005200 (twitter)
 Email [email protected] (twitter)
 Account Picture https://scontent-prg1-1.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT8wshQo6uQd5jHXDDYYRXqz2ytYBXgs0HeZsUm4ywL8yw&oe=62F9
E067
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT8wshQo6uQd5jHXDDYYRXqz2ytYBXgs0HeZsUm4ywL8yw&oe=62F9
E067
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT8wshQo6uQd5jHXDDYYRXqz2ytYBXgs0HeZsUm4ywL8yw&oe=62F9
E067
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT8wshQo6uQd5jHXDDYYRXqz2ytYBXgs0HeZsUm4ywL8yw&oe=62F9
E067
Source File phone/applications0/com.facebook.katana/live_data/app_light_prefs/
com.facebook.katana/logged_in_100003195706709

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1854
Case Label: K3 Case Evidence Number: 007 Device Label:

News Feed (75)

1 News Feed

 Time Stamp 2022-05-03 08:12:55 (UTC+2)


Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t1.6435-1/203058625_4287860341277560_1372339085787645483_n.jpg?
stp=cp0_dst-jpg_e15_p111x111_q65&_nc_cat=106&ccb=1-5&_nc_sid=7206a8&_nc_ohc=XWiu4xwoVtUAX-
z6gJT&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT9s8jG2IcxE8dAQID4s31XK0SJr0DczQO8M5dvTcuFGJQ&oe=6294DBD5
Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t39.30808-6/279052305_5279835028746748_6549973035314132644_n.jpg?
stp=cp0_dst-
jpg_e15_p370x247_q65&_nc_cat=100&ccb=1-5&_nc_sid=8bfeb9&_nc_ohc=GLyUjPHvN9gAX8wm0kM&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT8DTSAsNor63wd08OxKOgUtIn_tKl938v_Hkfj14JBmfw&oe=62766CE1
Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t39.30808-6/279062742_5279835125413405_2284289151805285516_n.jpg?
stp=cp0_dst-jpg_e15_p370x247_q65&_nc_cat=110&ccb=1-5&_nc_sid=8bfeb9&_nc_ohc=-
Khs_2pW8h0AX8v1fOp&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-prg1-1.xx&oh=00_AT_aOhf-
X3inVw0tEinnFgGxE4dm-iybmY05MCwvW1zhkA&oe=6275BB32
Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t39.30808-6/279402070_5279835305413387_4599130207448796707_n.jpg?
stp=cp0_dst-jpg_e15_p370x247_q65&_nc_cat=108&ccb=1-5&_nc_sid=8bfeb9&_nc_ohc=-WUwQaZCxlUAX-
Miv2S&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-prg1-1.xx&oh=00_AT_bOt1EcEyLcQnNos-
jAZzVjOuhFFZzM-6Rv7xoNriPWw&oe=62758243
Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t39.30808-6/279566650_5279834425413475_1591160224147111441_n.jpg?
stp=cp0_dst-jpg_e15_p552x414_q65&_nc_cat=100&ccb=1-5&_nc_sid=8bfeb9&_nc_ohc=RlCQSXwyR3YAX-
IA_pS&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent-prg1-1.xx&oh=00_AT_6GT3d-
pIGzZIgi9uqw_65ndqkAGYUbV6NdeDAxNbXOA&oe=6275FFC1
Type PHOTO
 Picture URL https://scontent-prg1-1.xx.fbcdn.net/v/t39.30808-6/279584850_5279834355413482_1559514391699348674_n.jpg?
stp=cp0_dst-
jpg_e15_p552x414_q65&_nc_cat=102&ccb=1-5&_nc_sid=8bfeb9&_nc_ohc=0y8mg9PqVTEAX9huQgy&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent-
prg1-1.xx&oh=00_AT_1q7W2WSsSLAFceEePuvXZXzw0uUlZQ11qrwAbFHVPrg&oe=627603E1
Source User
 Seen Yes
Source File phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x159e8 (Table: home_stories)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1dea8 (Table:
home_stories_media)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1da9a (Table:
home_stories_media)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1d940 (Table:
home_stories_media)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1d7e6 (Table:
home_stories_media)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1dbf4 (Table:
home_stories_media)
phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x1dd4e (Table:
home_stories_media)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1855
Case Label: K3 Case Evidence Number: 007 Device Label:

72 News Feed

 Time Stamp 2022-06-28 11:04:24 (UTC+2)


 Seen No
Source File phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x5788a (Table: home_stories)

73 News Feed

 Time Stamp 2022-06-28 11:04:24 (UTC+2)


 Seen No
Source File phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x57639 (Table: home_stories)

74 News Feed

 Time Stamp 2022-07-07 15:12:18 (UTC+2)


 Seen No
Source File phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x573e8 (Table: home_stories)

75 News Feed

 Time Stamp 2022-07-07 15:12:18 (UTC+2)


 Seen No
Source File phone/applications0/com.facebook.katana/live_data/databases/newsfeed_db : 0x57197 (Table: home_stories)

Other Media Files

Images (755)

1 3d22d0466b7bb9aa35c9131c686b462e.JPG

 Filename 3d22d0466b7bb9aa35c9131c686b462e.JPG
Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/
2991388637747280/3d22d0466b7bb9aa35c9131c686b462e.JPG
Size 126 KB
 Modified 2022-06-22 13:52:50 (UTC+2)
 Accessed 2022-06-22 13:52:50 (UTC+2)
 Width 512 px
 Height 512 px
Format jpeg
 Date of Generation 2019-11-03 15:13:54 (UTC+1)

2 da784415257106c1e541bea299fc2482.jpg

 Filename da784415257106c1e541bea299fc2482.jpg
Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/935226254062545/
da784415257106c1e541bea299fc2482.jpg
Size 118 KB
 Modified 2022-06-22 13:52:51 (UTC+2)
 Accessed 2022-06-22 13:52:51 (UTC+2)
 Width 512 px
 Height 512 px
Format jpeg
 Date of Generation 2020-07-19 05:37:58 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 1882
Case Label: K3 Case Evidence Number: 007 Device Label:

755 zxOwVbmnQjJsWmWHa8lBSyrAFt4

 Filename zxOwVbmnQjJsWmWHa8lBSyrAFt4
Path phone/applications0/com.facebook.katana/live_data/cache/image/
zxOwVbmnQjJsWmWHa8lBSyrAFt4
Size 67.4 KB
 Modified 2022-05-13 09:16:51 (UTC+2)
 Accessed 2022-05-13 09:16:51 (UTC+2)
 Width 540 px
 Height 960 px
Format jpeg

Audio (39)

1 9da1f1a1e75c2b5b4214f93a5808642a.m4a

 Filename 9da1f1a1e75c2b5b4214f93a5808642a.m4a


Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/
1039027057035430/9da1f1a1e75c2b5b4214f93a5808642a.m4a
Size 120 KB
 Modified 2022-06-22 13:52:48 (UTC+2)
 Accessed 2022-06-22 13:52:48 (UTC+2)

2 f1b94d74b39842292d8b49b93cf85b41.m4a

 Filename f1b94d74b39842292d8b49b93cf85b41.m4a


Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/1039027057035430/
f1b94d74b39842292d8b49b93cf85b41.m4a
Size 40.3 KB
 Modified 2022-06-22 13:52:48 (UTC+2)
 Accessed 2022-06-22 13:52:48 (UTC+2)

3 1b392d7923310cd710608719ebf85239.m4a

 Filename 1b392d7923310cd710608719ebf85239.m4a


Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/
1090672925128928/1b392d7923310cd710608719ebf85239.m4a
Size 124 KB
 Modified 2022-06-22 13:52:48 (UTC+2)
 Accessed 2022-06-22 13:52:48 (UTC+2)

4 f88b280ca3f267fd8e202956ba17a635.m4a

 Filename f88b280ca3f267fd8e202956ba17a635.m4a


Path phone/applications0/com.facebook.katana/live_data/
app_msqrd_effect_asset_disk_cache_fixed_sessionless/1090672925128928/
f88b280ca3f267fd8e202956ba17a635.m4a
Size 39.9 KB
 Modified 2022-06-22 13:52:48 (UTC+2)
 Accessed 2022-06-22 13:52:48 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2049
Case Label: K3 Case Evidence Number: 007 Device Label:

35 d7aeff6f

 Filename d7aeff6f


Path phone/applications0/com.facebook.katana/live_data/app_ras_blobs/d7aeff6f
Size 4.32 KB
 Modified 2022-07-07 15:12:25 (UTC+2)
 Accessed 2022-04-27 14:59:21 (UTC+2)

36 ddfa8c28

 Filename ddfa8c28


Path phone/applications0/com.facebook.katana/live_data/app_ras_blobs/ddfa8c28
Size 1.98 KB
 Modified 2022-07-07 15:12:24 (UTC+2)
 Accessed 2022-04-27 14:59:21 (UTC+2)

37 e839be71

 Filename e839be71


Path phone/applications0/com.facebook.katana/live_data/app_ras_blobs/e839be71
Size 4.60 KB
 Modified 2022-07-07 15:12:25 (UTC+2)
 Accessed 2022-04-27 14:59:21 (UTC+2)

38 ea97300

 Filename ea97300


Path phone/applications0/com.facebook.katana/live_data/app_ras_blobs/ea97300
Size 1.32 KB
 Modified 2022-07-07 15:12:24 (UTC+2)
 Accessed 2022-04-27 14:59:21 (UTC+2)

39 ef69478f

 Filename ef69478f


Path phone/applications0/com.facebook.katana/live_data/app_ras_blobs/ef69478f
Size 4.15 KB
 Modified 2022-07-07 15:12:25 (UTC+2)
 Accessed 2022-04-27 14:59:21 (UTC+2)

Documents (108)

1 critical_suppl_foreground_transition_prop.txt

 Filename critical_suppl_foreground_transition_prop.txt


Path phone/applications0/com.facebook.katana/live_data/app_errorreporting/
sess__000000591-1658126316041-465efe51-0474-b2ce-687b-00f89c36f19a/
critical_suppl_foreground_transition_prop.txt
Size 14.7 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:38 (UTC+2)
 Accessed 2022-07-14 09:33:10 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2055
Case Label: K3 Case Evidence Number: 007 Device Label:

Gmail
 Label Gmail
Package com.google.android.gm (twitter)
Version 2022.06.12.458104293.Release
Application Type System Application Update
 Application Size 23.9 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:04:30 (UTC+2)
 Last Active 2022-06-24 14:38:10 (UTC+2)
 Last Month Use Time 00:13:48
 Last Year Use Time 00:31:37

Accounts (1)

1 [email protected]

 Email [email protected] (twitter)


Source File phone/applications0/com.google.android.gm/live_data/shared_prefs/
MailAppProvider.xml

Conversations: [email protected] (212 conversations, 12 deleted, 222 messages)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x6db6e (Table:


items)

2 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1ac072 (Table:


items)

3 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1fa614 (Table:


items)

4 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x1fa615 (Table:


items)

5 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x6db6d (Table:


items)

6 Mastercard is hiring: Software engineer - .Net.

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x56ceb (Table: items)


LinkedIn <jobs- 2022-06-13 14:46:53 (UTC+2)
Your job recommendations from LinkedIn
[email protected]>
(twitter)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2354
Case Label: K3 Case Evidence Number: 007 Device Label:

200 KNOLSKAPE and others share their thoughts on LinkedIn

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0xa8567 (Table: items)


LinkedIn <updates-
Here are your network highlights 2022-07-15 19:18:00 (UTC+2)
[email protected]>
(twitter)

201 Treat yourself. Try 5 of these.

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0xa8382 (Table: items)


Tumblr <no-
Tumblr - Here's what's trending... * lindagoesmushrooming - Linda Ansone, Latvia. 2022-07-16 01:59:24 (UTC+2)
[email protected]> (twitter)
Original photography, unless stated otherwise. Do not repost. (My main is
lindamarieanson, and you'll see

202 Kachu Msela and Santi Lopez have birthdays today

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0xa8175 (Table: items)


Facebook
Gabie, help Kachu and Santi celebrate their birthdays. Today is Kachu Msela and 2022-07-16 06:11:49 (UTC+2)
<[email protected]
Santi Lopez's birthday! Saturday, July 16, 2022 Kachu Msela 35 years old Help Him
m> (twitter)
Celebrate Santi Lopez 52 years old

203 Why are people still learning PHP?

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x82df3 (Table: items)


Quora Digest <english-
Why are people still learning PHP? This is an interesting question because the 2022-07-16 10:12:17 (UTC+2)
personalized-
longer I am involved in web development, the more I come to appreciate that
[email protected]> (twitter)
technology is regional. I live in the … Top

204 Hi Jose! Sweet Snacks, Healthy Snacks, and more Pins trending on Pinterest

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x82b02 (Table: items)


Pinterest <pinterest-
Food and Drinks Pins for you Returning to Meal... Returning to Meal Prep-Week 1 2022-07-16 13:57:24 (UTC+2)
[email protected]
Part 2 Creamy Tuna Pasta Salad Creamy Tuna Pasta Salad Toast Ten Ways • ... Toast
erest.com> (twitter)
Ten Ways • Easy & Healthy Breakfast

205 so, you have a good eye

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x82887 (Table: items)


Pinterest 2022-07-16 21:57:34 (UTC+2)
We found some fresh Pins for you The best biscuits... The best biscuits cheesecake -
<recommendations@discover.
The most popular cakes among kids Banana Split Brea... Banana Split Breakfast Bar
pinterest.com> (twitter)
Rhubarb Frangipan... Rhubarb

206 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x7be1b (Table:


items)

207 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x7be11 (Table:


items)

208 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c57 (Table:


items)

209 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c61 (Table:


items)

210 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x67c4e (Table:


items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2379
Case Label: K3 Case Evidence Number: 007 Device Label:

211 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x70d62 (Table:


items)

212 Conversation  Deleted

Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189-wal : 0x77df6 (Table:


items)

Emails: [email protected] (222)

1  Facebook <[email protected]> (twitter) 2022-06-11 06:31:09 (UTC+2) Received

Gabie, help Jay celebrate his birthday. Today is Jay Gibson's birthday! Saturday, June 11, 2022 Jay Gibson 36 years old Help Him Celebrate See
Birthdays Was this email:Useful | Not Useful This
 Conversation It's Jay Gibson's birthday today
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28ee0c (Table:
items)

2  Quora Digest <[email protected]> (twitter) 2022-06-11 11:26:22 (UTC+2) Received

One characteristic that will make everyone think you're unintelligent, even if you aren't, is speaking poorly. I don't necessarily mean using slang or
having a thick accent (although those
 Conversation What screams "I have a low IQ"?
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x149b61 (Table:
items)

3  Facebook <[email protected]> (twitter) 2022-06-12 06:36:32 (UTC+2) Received

Gabie, help Ricky celebrate his birthday. Today is Ricky Loyd's birthday! Sunday, June 12, 2022 Ricky Loyd 60 years old Help Him Celebrate See
Birthdays Was this email:Useful | Not Useful This
 Conversation It's Ricky Loyd's birthday today
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28e732 (Table:
items)

4  Pinterest <[email protected]> (twitter) 2022-06-12 21:51:29 (UTC+2) Received

We found some fresh boards for you lunch 20 Pins Recipes 26 Pins Fitness 633 Pins · 1 section lazienki 10 Pins Birdhill Avenue 513 Pins obra 41 Pins
•HOUSE PLANS• 569 Pins Chicken Delish 5576 Pins
 Conversation "lunch", "Recipes" and 8 other boards like yours
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x28ebbe (Table:
items)

5  LinkedIn <[email protected]> (twitter) 2022-06-13 14:46:53 (UTC+2) Received

Your job recommendations from LinkedIn


 Conversation Mastercard is hiring: Software engineer - .Net.
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x56ceb (Table: items)

6  AliExpress <[email protected]> (twitter) 2022-06-13 18:55:45 (UTC+2) Received

These new items are soo you!


 Conversation This just in
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x149d5a (Table:
items)

7  LinkedIn <[email protected]> (twitter) 2022-06-13 19:20:07 (UTC+2) Received

Here are your network highlights


 Conversation Jeff Anderson from a company you follow recently posted this
Source File phone/applications0/com.google.android.gm/live_data/databases/bigTopDataDB.30575189 : 0x108507 (Table:
items)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2380
Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts Info (3)

1 active-account

 Text [email protected]
Source File phone/applications0/com.google.android.gm/live_data/shared_prefs/Gmail.xml

2 [email protected]

 Text [email protected]
Source File phone/applications0/com.google.android.gm/live_data/shared_prefs/Gmail.xml

3 cache-google-accounts-synced

 Text [email protected]
Source File phone/applications0/com.google.android.gm/live_data/shared_prefs/Gmail.xml

Other Media Files

Images (12)

1 093cbe35119cbfe98e31fb139830b04c39d326b80fa20e9f3e916367b44bfeed.0

 Filename 093cbe35119cbfe98e31fb139830b04c39d326b80fa20e9f3e916367b44bfeed.0
Path phone/applications0/com.google.android.gm/live_data/cache/image_manager_disk_cache/
093cbe35119cbfe98e31fb139830b04c39d326b80fa20e9f3e916367b44bfeed.0
Size 3.54 KB
 Modified 2022-07-12 15:46:30 (UTC+2)
 Accessed 2022-07-12 15:46:30 (UTC+2)
 Width 176 px
 Height 176 px
Format webp

2 29b217743fd6d673d6267cf8dd1dcde93c3576d8d9d04557b41ebd3daa789df2.0

 Filename 29b217743fd6d673d6267cf8dd1dcde93c3576d8d9d04557b41ebd3daa789df2.0
Path phone/applications0/com.google.android.gm/live_data/cache/image_manager_disk_cache/
29b217743fd6d673d6267cf8dd1dcde93c3576d8d9d04557b41ebd3daa789df2.0
Size 3.54 KB
 Modified 2022-04-27 16:16:28 (UTC+2)
 Accessed 2022-04-27 16:16:28 (UTC+2)
 Width 176 px
 Height 176 px
Format webp

3 879344c1ea22407f7acfdd823d9f7caf83111507398fbd18e9825c7964438613.0

 Filename 879344c1ea22407f7acfdd823d9f7caf83111507398fbd18e9825c7964438613.0
Path phone/applications0/com.google.android.gm/live_data/cache/image_manager_disk_cache/
879344c1ea22407f7acfdd823d9f7caf83111507398fbd18e9825c7964438613.0
Size 3.64 KB
 Modified 2022-06-20 16:35:12 (UTC+2)
 Accessed 2022-06-20 16:35:12 (UTC+2)
 Width 111 px
 Height 111 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2406
Case Label: K3 Case Evidence Number: 007 Device Label:

Google
 Label Google
Package com.google.android.googlequicksearchbox (twitter)
Version 13.25.10.26.arm64
Application Type System Application Update
 Application Size 187.0 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-07 15:28:26 (UTC+2)
 Last Active 2022-06-24 11:23:54 (UTC+2)
 Last Month Use Time 00:00:01
 Last Year Use Time 00:00:48

Accounts (1)

1 [email protected]

Source File phone/applications0/com.google.android.googlequicksearchbox/live_data/databases/


opa_history : 0x6fe3 (Table: accounts)

Other Media Files

Images (484)

1 007656ab264e0071dd9e2c58eafea88ea0bfe77cbc3d55e5a6c8b9a6700db818.0

 Filename 007656ab264e0071dd9e2c58eafea88ea0bfe77cbc3d55e5a6c8b9a6700db818.0
Path phone/applications0/com.google.android.googlequicksearchbox/live_data/cache/
image_manager_disk_cache/
007656ab264e0071dd9e2c58eafea88ea0bfe77cbc3d55e5a6c8b9a6700db818.0
Size 3.72 KB
 Modified 2022-05-19 09:13:57 (UTC+2)
 Accessed 2022-05-19 09:13:57 (UTC+2)
 Width 176 px
 Height 176 px
Format webp

2 01bef5d5913865fdc01036900eaf19c95805c0815b664de4b25d2d3bed0c7b22.0

 Filename 01bef5d5913865fdc01036900eaf19c95805c0815b664de4b25d2d3bed0c7b22.0
Path phone/applications0/com.google.android.googlequicksearchbox/live_data/cache/
image_manager_disk_cache/
01bef5d5913865fdc01036900eaf19c95805c0815b664de4b25d2d3bed0c7b22.0
Size 7.97 KB
 Modified 2022-06-22 17:41:52 (UTC+2)
 Accessed 2022-06-22 17:41:52 (UTC+2)
 Width 126 px
 Height 126 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2409
Case Label: K3 Case Evidence Number: 007 Device Label:

483 ff981b6a22e8b83da2ee3e9703f690d5231c2b5c375e59be3b182e5ed042f361.0

 Filename ff981b6a22e8b83da2ee3e9703f690d5231c2b5c375e59be3b182e5ed042f361.0
Path phone/applications0/com.google.android.googlequicksearchbox/live_data/cache/
image_manager_disk_cache/
ff981b6a22e8b83da2ee3e9703f690d5231c2b5c375e59be3b182e5ed042f361.0
Size 14.0 KB
 Modified 2022-05-13 02:25:11 (UTC+2)
 Accessed 2022-05-13 02:25:10 (UTC+2)
 Width 225 px
 Height 225 px
Format jpeg

484 ffa4e022d5aa2336ad33bc66a3f602c16be503caf5c64780202a62c1d08aad62.0

 Filename ffa4e022d5aa2336ad33bc66a3f602c16be503caf5c64780202a62c1d08aad62.0
Path phone/applications0/com.google.android.googlequicksearchbox/live_data/cache/
image_manager_disk_cache/
ffa4e022d5aa2336ad33bc66a3f602c16be503caf5c64780202a62c1d08aad62.0
Size 43.3 KB
 Modified 2022-05-11 14:05:34 (UTC+2)
 Accessed 2022-05-11 14:05:34 (UTC+2)
 Width 623 px
 Height 415 px
Format jpeg

Documents (4)

1 apps.txt

 Filename apps.txt


Path phone/applications0/com.google.android.googlequicksearchbox/live_data/
app_g3_models/en-US/context_prebuilt/apps.txt
Size 3.06 KB
Mime Type text/plain
 Modified 2022-04-07 12:57:21 (UTC+2)
 Accessed 2022-04-07 12:57:21 (UTC+2)

2 contacts.txt

 Filename contacts.txt


Path phone/applications0/com.google.android.googlequicksearchbox/live_data/
app_g3_models/en-US/context_prebuilt/contacts.txt
Size 20.5 KB
Mime Type text/plain
 Modified 2022-04-07 12:57:21 (UTC+2)
 Accessed 2022-04-07 12:57:21 (UTC+2)

3 songs.txt

 Filename songs.txt


Path phone/applications0/com.google.android.googlequicksearchbox/live_data/
app_g3_models/en-US/context_prebuilt/songs.txt
Size 308 B
Mime Type text/plain
 Modified 2022-04-07 12:57:21 (UTC+2)
 Accessed 2022-04-07 12:57:21 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2530
Case Label: K3 Case Evidence Number: 007 Device Label:

Google Play Books


 Label Google Play Books
Package com.google.android.apps.books (twitter)
Version 5.24.2_RC03.452179208
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 14.6 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
No
Successful
APK Verification Error missing sdk versions, supports only <24;32>
android.permission.INTERNET,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.USE_CREDENTIALS,
android.permission.MANAGE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.SUBSCRIBED_FEEDS_READ,
android.permission.SUBSCRIBED_FEEDS_WRITE,
Android Permissions
android.permission.WAKE_LOCK,
android.permission.GET_PACKAGE_SIZE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, com.google.android.c2dm.permission.RECEIVE,
com.google.android.apps.books.permission.C2D_MESSAGE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.FOREGROUND_SERVICE,
com.google.android.gms.permission.AD_ID,
android.permission.SCHEDULE_EXACT_ALARM,
com.google.android.apps.books.DYNAMIC_RECEIVER_NOT_EXP
ORTED_PERMISSION
 First Installed 2022-05-19 09:20:27 (UTC+2)
 Last Updated 2022-07-13 12:34:41 (UTC+2)
 Last Active 2022-05-19 09:22:44 (UTC+2)
 Last Year Use Time 00:00:52

Accounts (1)

1 [email protected]

Source File phone/applications0/com.google.android.apps.books/live_data/databases/books.db :


0x2ac46 (Table: accounts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2537
Case Label: K3 Case Evidence Number: 007 Device Label:

Books (21)

1 Bratrstvo neohrožených - Velitel

Title Bratrstvo neohrožených - Velitel


 Publisher Baronet Publishers a.s.
 Description </p><p>

</p><p>V den D Dick Winters seskočil padákem do německého zázemí, aby se zúčastnil
bojů na normandských plážích. Během několika dnů se stal velitelem slavné roty
E 506. výsadkového pluku, nazývané <em>Bratrstvo neohrožených</em> pro svou
neutuchající bojovou morálku. Vedl svou jednotku v bojích v Nizozemsku,
při německé protiofenzivě v Ardenách, osvobozoval koncentrační tábor a na konci
války obsadil Hitlerovo Orlí hnízdo u Berchtesgadenu. Byl považován za
nejlepšího bojového velitele druhé světové války.</p>

<p>Na základě jeho pamětí a vyprávění jeho podřízených natočil Steven Spielberg
slavný televizní seriál, který měli možnost shlédnout i čeští diváci. Jeho
kniha je založena na válečném deníku, který si vedl během války, ale obsahuje i
dosud nepublikované příběhy, podle vyprávění jeho druhů. Winters jako jediný
zůstal u roty E od jejího vstupu do bojů až do konce války, a tak jsou dosud
nikdy nepublikované materiály unikátní.</p>

<p></p>
 URL https://play.google.com/store/books/details?id=6SHNAgAAQBAJ
 Account [email protected]
 Accessed 2015-09-03 12:29:14 (UTC+2)
Source File phone/applications0/com.google.android.apps.books/live_data/databases/books.db (Table: volumes)

2 Píseň krve

Title Píseň krve


 Publisher HOST
 Description První díl trilogie Stín krkavce<br><br>Vélin Al Sorna, zasvěcený Šestému řádu, byl od dětství cvičen k boji a zabíjení
ve službách Víry. Řád se stal jeho jedinou rodinou. Vélinův otec sloužil jako rytíř králi Janusovi, panovníkovi
Sjednoceného království, rozhodl se však Vélina zbavit jeho práv a v pouhých deseti letech ho zanechal na prahu
Šestého řádu. Chlapec ho za to nenávidí. Během pobytu v řádu se Vélin dozvídá zatím netušené podrobnosti o své
matce, která zemřela, když byl ještě dítě. Postupně také odhaluje důvody, jež jeho otce vedly k tomu, že ho řádu
svěřil. Jedna pravda je však důležitější než všechny ostatní: Vélina Al Sornu čeká budoucnost, kterou má teprve
pochopit. Budoucnost, jež změní nejen království, ale také celý svět.
 URL https://play.google.com/store/books/details?id=6liWBQAAQBAJ
 Account [email protected]
 Accessed 2015-09-03 12:29:14 (UTC+2)
Source File phone/applications0/com.google.android.apps.books/live_data/databases/books.db : 0x3b4bf (Table: volumes)

3 Náboženství a společnost

Title Náboženství a společnost


 Publisher Grada Publishing a.s.
 Description Kniha Náboženství a společnost - Věda o náboženství a její historické kořeny představuje uvedení do religionistické
problematiky. Autor se zabývá obecnou charakteristikou religionistiky, vymezením jejího předmětu a metod,
otázkou postavení náboženství v současném světě, typologií náboženství a historickými kořeny religionistiky,
počínaje nejstaršími teoriemi náboženství ve starověkém Řecku a Římě a konče deistickou koncepcí náboženství v
18. století a jejím překonáním v dílech Davida Huma a Immanuela Kanta.
 URL https://play.google.com/store/books/details?id=3_xaAgAAQBAJ
 Account [email protected]
 Accessed 2015-09-03 12:29:18 (UTC+2)
Source File phone/applications0/com.google.android.apps.books/live_data/databases/books.db : 0x3a6f8 (Table: volumes)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2538
Case Label: K3 Case Evidence Number: 007 Device Label:

21 Rise of the Dragons (Kings and Sorcerers--Book 1)

Title Rise of the Dragons (Kings and Sorcerers--Book 1)


 Publisher Morgan Rice
 Description <p>“If you thought that there was no reason left for living after the end of the Sorcerer’s Ring series, you were
wrong. In RISE OF THE DRAGONS Morgan Rice has come up with what promises to be another brilliant series,
immersing us in a fantasy of trolls and dragons, of valor, honor, courage, magic and faith in your destiny. Morgan
has managed again to produce a strong set of characters that make us cheer for them on every
page....Recommended for the permanent library of all readers that love a well-written fantasy.”</p> <p>--Books and
Movie Reviews, Roberto Mattos</p> <p> </p> <p>The #1 Bestseller!</p> <p> </p> <p>From #1 Bestselling author
Morgan Rice comes a sweeping new epic fantasy series: RISE OF THE DRAGONS (KINGS AND SORCERERS—Book 1).</
p> <p> </p> <p>Kyra, 15, dreams of becoming a famed warrior, like her father, even though she is the only girl in a
fort of boys. As she struggles to understand her special skills, her mysterious inner power, she realizes she is
different than the others. But a secret is being kept from her about her birth and the prophecy surrounding her,
leaving her to wonder who she really is.</p> <p> </p> <p>When Kyra comes of age and the local lord comes to take
her away, her father wants to wed her off to save her. Kyra, though, refuses, and she journeys out on her own, into
a dangerous wood, where she encounters a wounded dragon—and ignites a series of events that will change the
kingdom forever. </p> <p> </p> <p>15 year old Alec, meanwhile, sacrifices for his brother, taking his place in the
draft, and is carted off to The Flames, a wall of flames a hundred feet high that wards off the army of Trolls to the
east. On the far side of the kingdom, Merk, a mercenary striving to leave behind his dark past, quests through the
wood to become a Watcher of the Towers and help guard the Sword of Fire, the magical source of the kingdom’s
power. But the Trolls want the Sword, too—and they prepare for a massive invasion that could destroy the
kingdoms forever.</p> <p> </p> <p>With its strong atmosphere and complex characters, RISE OF THE DRAGONS is a
sweeping saga of knights and warriors, of kings and lords, of honor and valor, of magic, destiny, monsters and
dragons. It is a story of love and broken hearts, of deception, of ambition and betrayal. It is fantasy at its finest,
inviting us into a world that will live with us forever, one that will appeal to all ages and genders.</p> <p> </p>
<p>Book #2 in KINGS AND SORCERERS is now available!</p> <p> </p> <p>“RISE OF THE DRAGONS succeeds—right
from the start.... A superior fantasy...It begins, as it should, with one protagonist&#39;s struggles and moves neatly
into a wider circle of knights, dragons, magic and monsters, and destiny....All the trappings of high fantasy are here,
from soldiers and battles to confrontations with self....A recommended winner for any who enjoy epic fantasy
writing fueled by powerful, believable young adult protagonists.”</p> <p>--Midwest Book Review, D. Donovan,
eBook Reviewer</p>
 URL https://play.google.com/store/audiobooks/details?id=AQAAAEBMcC4wcM
 Account [email protected]
 Accessed 2019-06-25 15:37:57 (UTC+2)
Source File phone/applications0/com.google.android.apps.books/live_data/databases/books.db (Table: volumes)

Other Media Files

Images (51)

1 2M0oKR2DYDbPKpKC6qn3RFlyAgQ

 Filename 2M0oKR2DYDbPKpKC6qn3RFlyAgQ
Path phone/applications0/com.google.android.apps.books/live_data/cache/
accounts/[email protected]/recs_cache/read_now_rec_covers_cache/blobs_dir/
2M0oKR2DYDbPKpKC6qn3RFlyAgQ
Size 39.5 KB
 Modified 2022-05-19 09:21:07 (UTC+2)
 Accessed 2022-05-19 09:21:07 (UTC+2)
 Width 465 px
 Height 664 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2544
Case Label: K3 Case Evidence Number: 007 Device Label:

Google Play services


 Label Google Play services
Package com.google.android.gms (twitter)
Version 22.24.13 (100400-455379205)
Application Type System Application Update
 Application Size 98.1 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-06-28 15:07:53 (UTC+2)
 Last Active 2022-07-14 15:12:01 (UTC+2)
 Last Month Use Time 00:10:40
 Last Year Use Time 00:13:30

Messages extracted from this application can be found in phone messages section

Contacts (5421 total, 26 deleted)

1 #Angel1011111111

Note autogenerated


 Label Mobile
 Phone Number +18402612 (twitter)
 Label Home
 Phone Number +14622092 (twitter)
 Label Work
 Phone Number +17214041 (twitter)
 Label Work
 Email #[email protected] (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18887b (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18aaf7 (Table: phones)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18aadb (Table: phones)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18aabe (Table: phones)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x187c22 (Table: emails)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 2559
Case Label: K3 Case Evidence Number: 007 Device Label:

1261 Christine Lubke

 Label Other


 Email [email protected] (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0xb2b33 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0xa0d90 (Table: emails)

1262 Christine M. Lemke, (Google+)

Organization Christine M. Lemke


 Label Other
 Email [email protected] (twitter)
 Label Other
 Email [email protected] (twitter)
 Label Other
 Email [email protected] (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x137770 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x124d1e (Table: emails)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x124cf0 (Table: emails)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x124ccc (Table: emails)

1263 Christines Ipod

 Label Mobile


 Phone Number +13124479685 (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18e7d4 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x39cde (Table: phones)

1264 Christines Ipod  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x4a0f7 (Table: contacts)

1265 Christopher Brooks

 Label Other


 Email [email protected] (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x36470 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x217d2 (Table: emails)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 3001
Case Label: K3 Case Evidence Number: 007 Device Label:

4841 Pavla Cizova

 Label Mobile


 Phone Number +420606729672 (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18d4e4 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x18cd20 (Table: phones)

4842 Pavla Cizova  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x4a084 (Table: contacts)

4843 Pavla Hromadkova

 Label Home


 Phone Number 608634477 (twitter)
 Label Home
 Phone Number 608634477 (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1f2b1c (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x203fe3 (Table: phones)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x203fc5 (Table: phones)

4844 Peggy Cole

 Label Other


 Email [email protected] (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x4cce4 (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x51b57 (Table: emails)

4845 PET-MEDIC

Organization PET-MEDIC


Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x15f3c (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4283
Case Label: K3 Case Evidence Number: 007 Device Label:

5140 Simio Juraj

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x1ec88a (Table: contacts)

5141 Simio Juraj

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x1e0f26 (Table: contacts)

5142 Simio Juraj  Deleted

Organization Hokej


Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1292b2 (Table: contacts)

5143 Simio Juraj

Organization Hokej


 Label Work Fax
 Phone Number +420775558388 (twitter)
 Label Work Fax
 Phone Number +420775558388 (twitter)
Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1a0dff (Table: contacts)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1f8dd6 (Table: phones)
phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :
0x1f8daf (Table: phones)

5144 Simio Juraj

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0xeba94 (Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4364
Case Label: K3 Case Evidence Number: 007 Device Label:

5420  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x19e273 (Table: contacts)

5421  Deleted

Source File phone/applications0/com.google.android.gms/live_data/databases/icing_contacts.db :


0x19e2bb (Table: contacts)

Media Files (46)

1 -1256997076-411068198

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203523.png
Size 3.73 KB
 URL https://www.gstatic.com/identity/boq/accountsettingsmobile/
privacycheckup_initial_with_new_shield_288x288_fe0e5d0207239aaf1e453bba03a32bc0.png
Source File phone/applications0/com.google.android.gms/live_data/cache/
mg_volley/-1256997076-411068198

2 -125811139-161936884

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203525.png
Size 1.79 KB
 URL https://www.gstatic.com/identity/boq/accountsettingsmobile/
devicesrealistic_unknown_form_factor_72x72_18e8d453a4dfec21431e4167b30a503d.png
Source File phone/applications0/com.google.android.gms/live_data/cache/
mg_volley/-125811139-161936884

3 -1295994109-916268232

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203527.png
Size 5.41 KB
 URL https://www.gstatic.com/identity/boq/accountsettingsmobile/
dataandpersonalization_icon_288x288_5b7c7cf827838f7d34c6ef80867d184f.png
Source File phone/applications0/com.google.android.gms/live_data/cache/
mg_volley/-1295994109-916268232

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4439
Case Label: K3 Case Evidence Number: 007 Device Label:

44 2045273558691458196

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203628.png
Size 1.18 KB
 URL https://t1.gstatic.com/faviconV2?
client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://
atlassian.com&size=128
Source File phone/applications0/com.google.android.gms/live_data/cache/volley/
2045273558691458196

45 754471629-97689594

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203630.png
Size 11.7 KB
 URL https://lh3.googleusercontent.com/a-/
AOh14GivOTtg4jDsj_cDq5cMARv7vNCvO6ZG_bdWt1rDxg
Source File phone/applications0/com.google.android.gms/live_data/cache/volley/754471629-97689594

46 802989200491639796

Path phone/misc/analyzers/com.google.android.gms_webkit_cached_media_files/volley_cache/
data/_203634.png
Size 2.09 KB
 URL https://t2.gstatic.com/faviconV2?
client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://pof.com&size=128
Source File phone/applications0/com.google.android.gms/live_data/cache/volley/802989200491639796

Downloads (2)

1 params_expdate_c45e5b7.dat

 Size 133157
 URL https://dl.google.com/vision/1/creditcard/params_expdate_c45e5b7.dat
Source File phone/applications0/com.google.android.gms/live_data/databases/downloads.db : 0x3f59 (Table: downloads)

2 ocr_arm64_v8a.zip

 Size 8235343
 URL https://dl.google.com/vision/1700/ocr/ocr_arm64_v8a.zip
Source File phone/applications0/com.google.android.gms/live_data/databases/downloads.db : 0x3ed5 (Table: downloads)

Reminders (151)

1 meet with Josefine Comel

Account Name [email protected]


 Created 2015-07-16 07:36:04 (UTC+2)
Archived Yes
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x25c93 (Table: reminders)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4448
Case Label: K3 Case Evidence Number: 007 Device Label:

147 call cv

Account Name [email protected]


 Created 2022-06-29 16:02:35 (UTC+2)
 Due 2023-06-22 08:00:00 (UTC+2)
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x207e4 (Table: reminders)

148 call cv

Account Name [email protected]


 Created 2022-06-29 16:02:35 (UTC+2)
 Due 2023-06-29 08:00:00 (UTC+2)
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x20721 (Table: reminders)

149 call cv

Account Name [email protected]


 Created 2022-06-29 16:02:35 (UTC+2)
 Due 2023-06-01 08:00:00 (UTC+2)
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x2065f (Table: reminders)

150 call cv

Account Name [email protected]


 Created 2022-06-29 16:02:35 (UTC+2)
 Due 2023-06-15 08:00:00 (UTC+2)
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x2059c (Table: reminders)

151 call cv

Account Name [email protected]


 Created 2022-06-29 16:02:35 (UTC+2)
 Due 2023-06-08 08:00:00 (UTC+2)
Source File phone/applications0/com.google.android.gms/live_data/databases/reminders.db : 0x204d9 (Table: reminders)

Other Media Files

Images (7)

1 Image_-302650459

 Filename Image_-302650459
Path phone/applications0/com.google.android.gms/live_data/cache/notifications/
Image_-302650459
Size 6.25 KB
 Modified 2022-05-13 09:03:52 (UTC+2)
 Accessed 2022-05-13 09:03:52 (UTC+2)
 Width 176 px
 Height 176 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4467
Case Label: K3 Case Evidence Number: 007 Device Label:

7 gmsnet2.jpg

 Filename gmsnet2.jpg
Path phone/applications0/com.google.android.gms/live_external/files/gmsnet2.jpg
Size 159 B
 Modified 2022-04-28 16:20:13 (UTC+2)
 Accessed 2022-04-28 16:20:13 (UTC+2)
 Width 1 px
 Height 1 px
Format jpeg

Video (1)

1 5Pvideo_5Nmedia_19I6569989645520733547_3T140-1657706942653

 Filename 5Pvideo_5Nmedia_19I6569989645520733547_3T140-1657706942653


Path phone/applications0/com.google.android.gms/live_data/cache/ads_cache/
5Pvideo_5Nmedia_19I6569989645520733547_3T140-1657706942653
Size 221 KB
 Modified 2022-07-13 12:09:03 (UTC+2)
 Accessed 2022-07-13 12:09:02 (UTC+2)

Documents (6)

1 apps_3p_corpus_component_names.txt

 Filename apps_3p_corpus_component_names.txt


Path phone/applications0/com.google.android.gms/live_data/files/
apps_3p_corpus_component_names.txt
Size 3.93 KB
Mime Type text/plain
 Modified 2022-07-18 08:39:37 (UTC+2)
 Accessed 2022-07-18 08:38:38 (UTC+2)

2 backoff.txt

 Filename backoff.txt


Path phone/applications0/com.google.android.gms/live_data/files/backoff.txt
Size 3B
Mime Type text/plain
 Modified 2022-05-19 10:33:05 (UTC+2)
 Accessed 2022-03-29 14:08:41 (UTC+2)

3 gmscore_global_dirs.txt

 Filename gmscore_global_dirs.txt


Path phone/applications0/com.google.android.gms/live_data/files/gmscore_global_dirs.txt
Size 23 B
Mime Type text/plain
 Modified 2022-02-02 09:47:28 (UTC+1)
 Accessed 2022-02-02 09:47:28 (UTC+1)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4469
Case Label: K3 Case Evidence Number: 007 Device Label:

Google Play Store


 Label Google Play Store
Package com.android.vending (twitter)
Version 31.2.29-21 [0] [PR] 458571619
Application Type System Application Update
 Application Size 18.4 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 15:31:57 (UTC+2)
 Last Active 2022-07-14 13:59:37 (UTC+2)
 Last Month Use Time 00:28:55
 Last Year Use Time 03:44:44

Application Searches (31)

1 tiktok

 Searched Query tiktok


 Time 2022-04-27 14:52:44 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3fa5 (Table: suggestions)

2 snapchat

 Searched Query snapchat


 Time 2022-04-27 14:53:03 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f86 (Table: suggestions)

3 viber

 Searched Query viber


 Time 2022-04-27 14:53:41 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f6d (Table: suggestions)

4 wechat

 Searched Query wechat


 Time 2022-04-27 14:54:22 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f39 (Table: suggestions)

5 imstagram

 Searched Query imstagram


 Time 2022-05-03 08:12:29 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e64 (Table: suggestions)

6 mapy.cz - cycling & hiking offline maps

 Searched Query mapy.cz - cycling & hiking offline maps


 Time 2022-05-05 11:48:25 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e07 (Table: suggestions)

7 box

 Searched Query box


 Time 2022-05-10 11:54:21 (UTC+2)
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e85 (Table: suggestions)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4472
Case Label: K3 Case Evidence Number: 007 Device Label:

Instagram
 Label Instagram
Package com.instagram.android (twitter)
Version 242.0.0.16.111
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 45.3 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert c56fb7d591ba6704df047fd98f535372fea00211, valid
from 2012-02-08T01:41:31Z to 2112-01-15T01:41:31Z, Subject:
Best Certificate Found C=US, ST=California, L=San Francisco, O=Instagram Inc,
CN=Kevin Systrom, Issuer: C=US, ST=California, L=San
Francisco, O=Instagram Inc, CN=Kevin Systrom
android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE,
android.permission.WAKE_LOCK,
android.permission.GET_ACCOUNTS,
android.permission.USE_CREDENTIALS,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE,
android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT,
com.google.android.c2dm.permission.RECEIVE,
android.permission.CAMERA,
android.permission.READ_CONTACTS,
android.permission.READ_PROFILE,
android.permission.ACCESS_FINE_LOCATION,
android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_MEDIA_LOCATION,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
Android Permissions
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.instagram.direct.permission.PROTECTED_DEEPLINKING,
com.instagram.direct.permission.DIRECT_APP_THREAD_STORE_
SERVICE, com.facebook.services.identity.FEO2,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, com.android.vending.BILLING,
android.permission.MANAGE_OWN_CALLS,
android.permission.BROADCAST_STICKY,
com.instagram.android.permission.CROSS_PROCESS_BROADC
AST_MANAGER, android.permission.REORDER_TASKS,
android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT
 First Installed 2022-04-27 14:51:48 (UTC+2)
 Last Updated 2022-07-08 14:08:45 (UTC+2)
 Last Active 2022-07-14 15:34:11 (UTC+2)
 Last Month Use Time 05:02:02
 Last Year Use Time 05:09:09

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4484
Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts (1)

1 jsfn1991

Full Name Josefine Hey


 User Name jsfn1991
 Profile https://www.instagram.com/jsfn1991/
 Instagram ID 6103158457 (twitter)
 Contact Picture https://scontent-prg1-1.cdninstagram.com/v/
t51.2885-19/21985461_284951205322702_1825412700537094144_n.jpg?
efg=eyJybWQiOiJpZ19hbmRyb2lkX21vYmlsZV9uZXR3b3JrX3N0YWNrX3RjcF9yZWFkX3Rp
bWVvdXRfMzozMHNfdGltZW91dCJ9&_nc_ht=scontent-
prg1-1.cdninstagram.com&_nc_cat=110&_nc_ohc=guVij6nXU4gAX-
pnAbM&edm=AEF8tYYBAAAA&ccb=7-5&oh=00_AT-
KLse4WNEU6EzhrjsFvC1d_2XHhLOgtzj8DNTZ2NWD0A&oe=62D68D2A&_nc_sid=a9513d
Verified No
Follow Status Unknown
Privacy Status Public
 Blocked by User No
Posts 5
 Number of Followers 16
 Following 13
Number of Besties 0
Biography #awesomebio
 Website http://nereknu.com/
 Is Current Yes
Source File phone/applications0/com.instagram.android/live_data/shared_prefs/
com.instagram.android_preferences.xml

Related Contacts (8)

1 jsfn1991

Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/


2cefce10-body_gzip.clean

2 jsfn1991

Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/


312d694b-body_gzip.clean

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4485
Case Label: K3 Case Evidence Number: 007 Device Label:

8 jsfn1991

Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/


c969f81c-body_gzip.clean

Conversations (7 conversations, 47 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Gabie Case

 Account jsfn1991
 Inviter jsfn1991
Is Muted No
 Participants jsfn1991, test (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x146ec (Table: threads)
6103158457 (jsfn1991) 2022-04-11 13:06:54 (UTC+2)

1948241058
Whats up 2022-05-09 14:48:54 (UTC+2)

6103158457 (jsfn1991)
Not much m8. I am dying. 2022-05-09 14:50:08 (UTC+2)

1948241058 2022-05-09 14:50:53 (UTC+2)


Dobrý večer se mi líbí se vám to hodí na tom budu muset ještě jednou díky
6103158457 (jsfn1991) 2022-05-09 14:52:32 (UTC+2)
Jj vecer dobri
6103158457 (jsfn1991) 2022-05-10 11:57:12 (UTC+2)
The only one that has to be done by the time you get here and I'll come get you
1948241058
[VOICE_MEDIA] 2022-05-31 11:17:05 (UTC+2)

6103158457 (jsfn1991)
Test 2022-06-03 09:38:25 (UTC+2)

6103158457 (jsfn1991) 2022-06-03 09:38:30 (UTC+2)


123abc
6103158457 (jsfn1991) 2022-06-03 09:39:20 (UTC+2)
[VOICE_MEDIA]

2 Josefine Comel, Gabie Case and Honza Tománek

 Account jsfn1991
 Inviter jsfn1991
Is Muted No
 Participants jsfn1991, test (twitter), another.test (twitter), tomanekhonza (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x26854 (Table: threads)
6103158457 (jsfn1991) 2022-04-11 12:57:53 (UTC+2)
You started an audio call
6103158457 (jsfn1991)
jsfn1991 added tomanekhonza 2022-04-11 12:58:17 (UTC+2)

1948241058
Audio call ended 2022-04-11 12:59:04 (UTC+2)

3 Marvin Torschmied

 Account jsfn1991
 Inviter jsfn1991
Is Muted No
 Participants jsfn1991, marvoooon.mua (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x1d693 (Table: threads)
6103158457 (jsfn1991) 2021-12-01 10:34:19 (UTC+1)
Brrrrrraaaaap

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4487
Case Label: K3 Case Evidence Number: 007 Device Label:

6103158457 (jsfn1991)
Tada 2021-12-01 11:43:17 (UTC+1)

4 Instagram User

 Account jsfn1991
 Inviter Instagram User
Is Muted No
 Participants jsfn1991, Instagram User (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x1d146 (Table: threads)
3961294852
Hello 2019-03-17 18:47:56 (UTC+1)

3961294852
Can we have conversation? 2019-03-17 18:48:16 (UTC+1)

3961294852
Our coporation working in website design and app windows and Android 2019-03-17 18:49:10 (UTC+1)

3961294852
If you like talk to me visit us and text me 2019-03-17 18:49:44 (UTC+1)

3961294852 2019-03-17 18:49:57 (UTC+1)

3961294852
2019-03-17 18:50:19 (UTC+1)

6103158457 (jsfn1991)
Mna 2021-11-29 15:21:51 (UTC+1)

5 Instagram User

 Account jsfn1991
 Inviter jsfn1991
Is Muted No
 Participants jsfn1991, listek4 (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x238a8 (Table: threads)
512484409
full 2018-12-30 17:24:34 (UTC+1)

512484409
but 2018-12-30 17:24:38 (UTC+1)

512484409
grill 2018-12-30 17:24:41 (UTC+1)

6103158457 (jsfn1991) 2018-12-30 17:26:14 (UTC+1)


[]
512484409
2019-01-08 15:41:01 (UTC+1)

512484409 2019-01-24 17:49:34 (UTC+1)

6103158457 (jsfn1991) 2019-01-24 17:51:12 (UTC+1)


[STORY MENTION]
512484409
2019-01-28 22:44:06 (UTC+1)

512484409
2019-02-12 12:26:56 (UTC+1)

6103158457 (jsfn1991)
Test 2021-11-29 15:21:42 (UTC+1)

6 Instagram User

 Account jsfn1991
 Inviter Instagram User
Is Muted No
 Participants jsfn1991, Instagram User (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x232dc (Table: threads)
7841896993
♥ (Like) 2020-11-09 14:05:39 (UTC+1)

7841896993
Ahoj 2020-11-09 14:11:36 (UTC+1)

7841896993
♥ (Like) 2020-11-09 14:11:38 (UTC+1)

7841896993
Test 2020-11-09 14:12:18 (UTC+1)

7841896993
Ahoj josefíno, jak se vede? 2020-11-10 16:41:28 (UTC+1)

7841896993
Test 2020-11-12 14:07:07 (UTC+1)

7841896993
Test 2 2020-11-12 14:07:39 (UTC+1)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4488
Case Label: K3 Case Evidence Number: 007 Device Label:

7841896993
2020-11-13 10:33:11 (UTC+1)

7841896993
Asd 2020-11-13 10:33:11 (UTC+1)

7841896993
Hi 2020-11-24 14:23:45 (UTC+1)

7 Honza Tománek

 Account jsfn1991
 Inviter tomanekhonza
Is Muted No
 Participants jsfn1991, tomanekhonza (twitter)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x27691 (Table: threads)
8099488781
[] 2018-10-18 10:43:45 (UTC+2)

8099488781
[] 2018-10-18 10:44:27 (UTC+2)

8099488781
[] 2018-10-18 10:45:01 (UTC+2)

8099488781
[] 2018-10-18 11:01:41 (UTC+2)

8099488781
♥ (Like) 2018-10-18 11:01:50 (UTC+2)

Messages (47)

1  8099488781 2018-10-18 10:43:45 (UTC+2) Received

[]
 Account jsfn1991
Content Type raven media
 Status uploaded
 Conversation Honza Tománek
To 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x29571 (Table: messages)

2  8099488781 2018-10-18 10:44:27 (UTC+2) Received

[]
 Account jsfn1991
Content Type raven media
 Status uploaded
 Conversation Honza Tománek
To 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x290ae (Table: messages)

3  8099488781 2018-10-18 10:45:01 (UTC+2) Received

[]
 Account jsfn1991
Content Type raven media
 Status uploaded
 Conversation Honza Tománek
To 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0xab3d (Table: messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4489
Case Label: K3 Case Evidence Number: 007 Device Label:

45  1948241058 2022-06-03 09:38:25 (UTC+2) Sent

Test
 Account jsfn1991
Content Type text
 Status uploaded
 Conversation Gabie Case
From 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x1b7fe (Table: messages)

46  1948241058 2022-06-03 09:38:30 (UTC+2) Sent

123abc
 Account jsfn1991
Content Type text
 Status uploaded
 Conversation Gabie Case
From 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x1b53d (Table: messages)

47  1948241058 2022-06-03 09:39:20 (UTC+2) Sent

[VOICE_MEDIA]
 Account jsfn1991
Content Type voice media
 Status uploaded
 Conversation Gabie Case
From 6103158457 (jsfn1991)
Source File phone/applications0/com.instagram.android/live_data/databases/direct.db : 0x1b34c (Table: messages)

Suggested Users (7)


Cached content of recently visited pages.

Algorithm unknown
Social Context Follows you
 Author jazvicek
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Algorithm unknown
Social Context Follows you
 Author Ojock
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Algorithm unknown
Social Context Followed by tristan_matthews95
 Author brittany⚡
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Algorithm unknown
Social Context Followed by tristan_matthews95
 Author Soundside Waterfowl
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4497
Case Label: K3 Case Evidence Number: 007 Device Label:

Algorithm unknown
Social Context Followed by tristan_matthews95
 Author CharmingandChic
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Algorithm unknown
Social Context Followed by konaduclementina
 Author Stella Blessing Serwaa
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Algorithm unknown
Social Context Followed by tristan_matthews95
 Author Kayla Kirtner
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/6c5f5c7-body_gzip.clean

Clusters (1)
Suggested categories of interest.

1 For You

Title For You


Type explore_all
Is Muted No
Source File phone/applications0/com.instagram.android/live_data/cache/http_responses/79c22a2d-body_gzip.clean

Global Notifications (2)

1 Tomorrowland Academy, TRANSMISSION FESTIVAL and others shared 11 photos.

Type follower_activity
Source File phone/applications0/com.instagram.android/live_data/shared_prefs/news_feed_notifications.xml

2 arminvanbuuren just shared a post.

Type feed_suite_organic_campaign
Source File phone/applications0/com.instagram.android/live_data/shared_prefs/news_feed_notifications.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4498
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (262)

1 1041637d

 Filename 1041637d
Path phone/applications0/com.instagram.android/live_data/cache/images.stash/clean/1041637d
Size 26.6 KB
 Modified 2022-07-14 09:09:56 (UTC+2)
 Accessed 2022-07-14 09:09:56 (UTC+2)
 Width 360 px
 Height 640 px
Format jpeg

2 104b8607

 Filename 104b8607
Path phone/applications0/com.instagram.android/live_data/cache/images.stash/clean/104b8607
Size 19.4 KB
 Modified 2022-07-14 12:17:14 (UTC+2)
 Accessed 2022-07-14 08:34:31 (UTC+2)
 Width 360 px
 Height 360 px
Format jpeg

3 1097c7ce

 Filename 1097c7ce
Path phone/applications0/com.instagram.android/live_data/cache/images.stash/clean/1097c7ce
Size 3.43 KB
 Modified 2022-07-14 08:46:32 (UTC+2)
 Accessed 2022-07-14 08:46:32 (UTC+2)
 Width 150 px
 Height 150 px
Format jpeg

4 1184c20f

 Filename 1184c20f
Path phone/applications0/com.instagram.android/live_data/cache/images.stash/clean/1184c20f
Size 35.9 KB
 Modified 2022-07-14 09:09:37 (UTC+2)
 Accessed 2022-07-14 09:09:37 (UTC+2)
 Width 700 px
 Height 700 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4499
Case Label: K3 Case Evidence Number: 007 Device Label:

262 ff579aba

 Filename ff579aba
Path phone/applications0/com.instagram.android/live_data/cache/images.stash/clean/ff579aba
Size 35.3 KB
 Modified 2022-07-14 08:46:25 (UTC+2)
 Accessed 2022-07-14 08:46:00 (UTC+2)
 Width 360 px
 Height 639 px
Format jpeg

Video (99)

2880197702403488908_49626521.null.
1 1409822366200002ad.-1.175010432_3242111102698263_1075969375984312589_n.mp4.0.1657633
588262.v2.exo

 Filename 2880197702403488908_49626521.null.
1409822366200002ad.-1.175010432_3242111102698263_1075969375984312589_n.


mp4.0.1657633588262.v2.exo
Path phone/applications0/com.instagram.android/live_data/cache/ExoPlayerCacheDir/
videocache/10/2880197702403488908_49626521.null.
1409822366200002ad.-1.175010432_3242111102698263_1075969375984312589_n.
mp4.0.1657633588262.v2.exo
Size 26.6 KB
 Modified 2022-07-12 15:46:28 (UTC+2)
 Accessed 2022-07-12 15:46:28 (UTC+2)

2872271867053310235_14238539103.null.
2 1212136272886684ad.-1.121501461_136709042075357_2519805077518322979_n.mp4.0.16577221
33894.v2.exo

 Filename 2872271867053310235_14238539103.null.
1212136272886684ad.-1.121501461_136709042075357_2519805077518322979_n.m


p4.0.1657722133894.v2.exo
Path phone/applications0/com.instagram.android/live_data/cache/ExoPlayerCacheDir/
videocache/11/2872271867053310235_14238539103.null.
1212136272886684ad.-1.121501461_136709042075357_2519805077518322979_n.m
p4.0.1657722133894.v2.exo
Size 43.5 KB
 Modified 2022-07-13 16:22:13 (UTC+2)
 Accessed 2022-07-12 15:44:20 (UTC+2)

2881493683913096926_192648052.null.
3 17952780235942522v.-1.293261798_588044836219623_7764812276223530481_n.mp4.0.16577804
71340.v2.exo

 Filename 2881493683913096926_192648052.null.
17952780235942522v.-1.293261798_588044836219623_7764812276223530481_n.m


p4.0.1657780471340.v2.exo
Path phone/applications0/com.instagram.android/live_data/cache/ExoPlayerCacheDir/
videocache/11/2881493683913096926_192648052.null.
17952780235942522v.-1.293261798_588044836219623_7764812276223530481_n.m
p4.0.1657780471340.v2.exo
Size 67.2 KB
 Modified 2022-07-14 08:34:31 (UTC+2)
 Accessed 2022-07-14 08:34:31 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4562
Case Label: K3 Case Evidence Number: 007 Device Label:

Documents (98)

1 critical_native_report.txt

 Filename critical_native_report.txt


Path phone/applications0/com.instagram.android/live_data/app_errorreporting/reports/
critical_native_1658126319079-5b1a5b5e-7bff-b957-9905-d8ece4aae655/
critical_native_report.txt
Size 58.6 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:39 (UTC+2)
 Accessed 2022-07-14 09:33:21 (UTC+2)

2 critical_native_prop.txt

 Filename critical_native_prop.txt


Path phone/applications0/com.instagram.android/live_data/app_errorreporting/
sess__000000286-1658126319079-5b1a5b5e-7bff-b957-9905-d8ece4aae655/
critical_native_prop.txt
Size 14.7 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:39 (UTC+2)
 Accessed 2022-07-18 08:38:39 (UTC+2)

3 critical_suppl_foreground_transition_prop.txt

 Filename critical_suppl_foreground_transition_prop.txt


Path phone/applications0/com.instagram.android/live_data/app_errorreporting/
sess__000000286-1658126319079-5b1a5b5e-7bff-b957-9905-d8ece4aae655/
critical_suppl_foreground_transition_prop.txt
Size 14.7 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:39 (UTC+2)
 Accessed 2022-07-18 08:38:39 (UTC+2)

4 critical_suppl_post_startup_prop.txt

 Filename critical_suppl_post_startup_prop.txt


Path phone/applications0/com.instagram.android/live_data/app_errorreporting/
sess__000000286-1658126319079-5b1a5b5e-7bff-b957-9905-d8ece4aae655/
critical_suppl_post_startup_prop.txt
Size 14.7 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:39 (UTC+2)
 Accessed 2022-07-18 08:38:39 (UTC+2)

5 critical_suppl_startup_prop.txt

 Filename critical_suppl_startup_prop.txt


Path phone/applications0/com.instagram.android/live_data/app_errorreporting/
sess__000000286-1658126319079-5b1a5b5e-7bff-b957-9905-d8ece4aae655/
critical_suppl_startup_prop.txt
Size 4.00 KB
Mime Type text/plain
 Modified 2022-07-18 08:38:39 (UTC+2)
 Accessed 2022-07-18 08:38:39 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4587
Case Label: K3 Case Evidence Number: 007 Device Label:

LINE
 Label LINE
Package jp.naver.line.android (twitter)
Version 12.11.1
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 70.0 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 89396dc419292473972813922867e6973d6f5c50, valid
from 2011-02-28T01:58:02Z to 2111-02-04T01:58:02Z, Subject:
C=JP, ST=Tokyo, L=Oosaki Sinagawa-ku, O=NaverJapan,
Best Certificate Found OU=Search Service Development 3Team, CN=tsutomu
horiyashiki, Issuer: C=JP, ST=Tokyo, L=Oosaki Sinagawa-ku,
O=NaverJapan, OU=Search Service Development 3Team,
CN=tsutomu horiyashiki
android.permission.CAMERA, android.permission.FLASHLIGHT,
android.permission.VIBRATE,
android.permission.READ_CONTACTS,
android.permission.INTERNET,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
android.permission.CALL_PHONE,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE,
com.android.vending.BILLING,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN,
android.permission.BLUETOOTH_SCAN,
android.permission.BLUETOOTH_CONNECT,
android.permission.GET_ACCOUNTS,
jp.naver.line.android.permission.LINE_ACCESS,
android.permission.USE_BIOMETRIC,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.kddi.market.permission.USE_ALML,
com.linecorp.linemusic.android.permission.PLAYBACK,
Android Permissions com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.NFC,
android.permission.FOREGROUND_SERVICE,
android.permission.MANAGE_ACCOUNTS,
android.permission.WRITE_CONTACTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS,
android.permission.RECORD_AUDIO,
android.permission.WAKE_LOCK,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.DISABLE_KEYGUARD,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.USE_FINGERPRINT,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.HIGH_SAMPLING_RATE_SENSORS,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, android.permission.GET_TASKS,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4609
Case Label: K3 Case Evidence Number: 007 Device Label:

android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

 First Installed 2022-05-19 09:23:46 (UTC+2)


 Last Updated 2022-07-08 15:37:51 (UTC+2)
 Last Active 2022-05-19 09:51:55 (UTC+2)
 Last Year Use Time 00:13:21

Accounts (2)

1 Gabie Case

 Description Moon cry� hi...


 Updated 2022-05-19 09:30:48 (UTC+2)
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x4cb89
(Table: contacts)

2 Linked Facebook Account

 Facebook ID 759069467542903 (twitter)


 Display Name Gabie Case
 First Name Gabie
 Last Name Case
Source File phone/applications0/jp.naver.line.android/live_data/shared_prefs/
com.facebook.AccessTokenManager.SharedPreferences.xml

Friends (32)

1 Alesso

 Description Sad Song Out Now


 Created 2015-09-23 15:11:06 (UTC+2)
 Updated 2022-05-19 09:47:04 (UTC+2)
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line :
0x4b81f (Table: contacts)

2 Chelsea FC

 Description Chelsea


 Created 2015-09-23 15:11:23 (UTC+2)
 Updated 2022-05-19 09:47:04 (UTC+2)
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x4bcac
(Table: contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4610
Case Label: K3 Case Evidence Number: 007 Device Label:

Groups (4)

1 group 012345

 Contact Gabie Case


 Contact Gabie Case
 Invited Contact Alesso
 Invited Contact LINE PLAY
 Invited Contact Jonatas Lobato
 Invited Contact Taylor Swift
 Invited Contact Maxine
 Invited Contact Wendy Wild
 Invited Contact LINE FRIENDS
 Invited Contact Family Guy
 Invited Contact LINE POINTS
 Invited Contact M
 Invited Contact Sarafraz Johl
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x19f85
(Table: groups)

2 Doe

 Contact Jack Doe


 Contact Gabie Case
Number of Messages 1
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x19eeb
(Table: groups)

3 nextGroup

 Contact Gabie Case


 Invited Contact LINE FRIENDS
 Invited Contact Alesso
 Invited Contact Family Guy
 Invited Contact LINE PLAY
 Invited Contact M
 Invited Contact Jonatas Lobato
 Invited Contact Maxine
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x19e73
(Table: groups)

4 Gabie Case, Tester , Test , T...

 Contact Test


 Contact Gabie Case
Number of Messages 3
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line (Table: groups)

Chats (6 conversations, 23 messages)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Chat: c923729425857ac625bd71e0b6b6f391e

 Updated 2022-05-09 14:59:25 (UTC+2)


 Group Gabie Case, Tester , Test , T...
 Participants Gabie Case, Gabie Case, Tester , Test , T...
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xae83 (Table: chat)
Gabie Case (Gabie Case)
2022-05-09 14:59:01 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4617
Case Label: K3 Case Evidence Number: 007 Device Label:

Gabie Case (Gabie Case)


2022-05-09 14:59:13 (UTC+2)

Gabie Case (Gabie Case) 2022-05-09 14:59:25 (UTC+2)

2 Chat: ubd06e2a4e6a83b2c990ff2a20cc2a438

 Updated 2022-05-19 09:30:57 (UTC+2)


 Participants Gabie Case
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xaf86 (Table: chat)

3 Chat: c0cd0c904f429a909f605a80cf02764d6

 Updated 2022-05-19 09:31:26 (UTC+2)


 Group Coel
 Participants Gabie Case, Coel
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xad8f (Table: chat)
Gabie Case (Gabie Case)
Hi :) 2022-05-19 09:31:26 (UTC+2)

4 Chat: u085311ecd9e3e3d74ae4c9f5437cbcb5

 Updated 2022-05-19 09:47:01 (UTC+2)


 Participants Gabie Case, LINE
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xad09 (Table: chat)
Gabie Case (Gabie Case) 2022-05-19 09:47:01 (UTC+2)
You registered a phone number.

5 Chat: u45adcd8740d377c01a2cf153565e1991

 Updated 2022-06-25 01:36:38 (UTC+2)


 Participants Edl Cable
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xabe1 (Table: chat)

6 Chat: u3ff3a88bedff120d588437a3ac2972a6

 Updated 2022-07-08 04:30:03 (UTC+2)


 Participants Gabie Case, LINE FRIENDS
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0xac8e (Table: chat)
Gabie Case (Gabie Case) 2022-05-13 21:00:02 (UTC+2)
Join the Club!

Become a FRIENDS CLUB member at LINE FRIENDS US Online Store to enjoy


benefits such as:

✔ Birthday Rewards
✔ Info on new products & promos
✔ Point vouchers & more

Join now and new members receive 250 points!


5/13 - 5/19

LINE FRIENDS US Online Store


Sign up https://lin.ee/tdlp6is/
Gabie Case (Gabie Case)
2022-05-13 21:00:02 (UTC+2)

Gabie Case (Gabie Case)


Making memories together 2022-05-16 19:00:03 (UTC+2)
Under the starry night sky✨

Enjoy relaxing camping vibes


with Camping Night Theme.

Add uniqueness to your day


By creating your own item
at LINE FRIENDS CREATOR
https://lin.ee/DdXuDq5
Gabie Case (Gabie Case)
2022-05-16 19:00:03 (UTC+2)

Gabie Case (Gabie Case) 2022-06-17 21:00:02 (UTC+2)


Let's stick together all day!

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4618
Case Label: K3 Case Evidence Number: 007 Device Label:

minini sunny days ☀

Shop now https://lin.ee/jpXkAY1


Gabie Case (Gabie Case)
2022-06-17 21:00:02 (UTC+2)

Gabie Case (Gabie Case) 2022-06-20 21:00:02 (UTC+2)


Eco-friendly and sustainable material

Diatomite quickly absorbs excess water, eliminates odors, and is anti-bacterial &
mold resistant.

LINE FRIENDS BROWN & Earth


Diatomite Edition

Shop now https://lin.ee/aN2mRCK


Gabie Case (Gabie Case)
2022-06-20 21:00:02 (UTC+2)

Gabie Case (Gabie Case) 2022-06-25 01:30:02 (UTC+2)


Troi Mall, we are taking over!

LINE FRIENDS store is open


in NEW STATE MOBILE,
the Battle Royale game!

✨Meet Mega BROWN at Troi Mall


✨Level up with unique and cute
LINE FRIENDS items including
BROWN, CONY, and SALLY costumes!

Who will be the last one to survive


with the dangerously cute FRIENDS?

Play <NEW STATE MOBILE> now!


https://lin.ee/se4aRrV/hntj
Gabie Case (Gabie Case)
2022-06-25 01:30:02 (UTC+2)

Gabie Case (Gabie Case)


Your friends are here to make organizing fun! 2022-06-27 21:00:01 (UTC+2)

LINE FRIENDS Silicone Hook Magnet

Use it as a magnet and a hook to hang your keys, mask, cables, and more!

Shop now https://lin.ee/O7YPVjI


Gabie Case (Gabie Case) 2022-06-27 21:00:01 (UTC+2)

Gabie Case (Gabie Case) 2022-07-06 01:00:03 (UTC+2)


Get ready to meet the combination of
delicate details and BROWN's cuteness(heart)

MAKR + LINE FRIENDS


BROWN COLLECTION

The limited BROWN COLLECTION with exclusive value(Brown)


>https://lin.ee/GfJCXN2

(light bulb)LINE FRIENDS COLLECTION


Gabie Case (Gabie Case)
2022-07-06 01:00:03 (UTC+2)

Gabie Case (Gabie Case) 2022-07-07 19:00:01 (UTC+2)


This LINE FRIENDS minini animated emoji✨ might be small, but they’re packed
with energy!⚡
Add some cuteness to your chats with minini!
Gabie Case (Gabie Case) 2022-07-07 19:00:01 (UTC+2)

Gabie Case (Gabie Case) 2022-07-08 04:30:03 (UTC+2)


Different colors everyday!

COLLER & STICON


Finally out now(two hearts)

Hello, COLLER!

(sparkle)5 colors to begin with


(sparkle)3 items with big & small sticons

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4619
Case Label: K3 Case Evidence Number: 007 Device Label:

(light bulb)LINE FRIENDS COLLECTION


>https://lin.ee/ViHUDf2
Gabie Case (Gabie Case)
2022-07-08 04:30:03 (UTC+2)

Messages (23)

1 Gabie Case, Tester , Test , T... (Gabie Case, Tester , Test , 2022-05-09 14:59:01 (UTC+2) Sent
T...)

From Gabie Case (Gabie Case)


 Conversation Chat: c923729425857ac625bd71e0b6b6f391e
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x58e87 (Table: chat_history)

2 Gabie Case, Tester , Test , T... (Gabie Case, Tester , Test , 2022-05-09 14:59:13 (UTC+2) Sent
T...)

From Gabie Case (Gabie Case)


 Conversation Chat: c923729425857ac625bd71e0b6b6f391e
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x58d73 (Table: chat_history)

3 Gabie Case, Tester , Test , T... (Gabie Case, Tester , Test , 2022-05-09 14:59:25 (UTC+2) Sent
T...)

From Gabie Case (Gabie Case)


 Conversation Chat: c923729425857ac625bd71e0b6b6f391e
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x58c5f (Table: chat_history)

4  LINE FRIENDS (LINE FRIENDS) 2022-05-13 21:00:02 (UTC+2) Sent

Join the Club!

Become a FRIENDS CLUB member at LINE FRIENDS US Online Store to enjoy benefits such as:

✔ Birthday Rewards
✔ Info on new products & promos
✔ Point vouchers & more

Join now and new members receive 250 points!


5/13 - 5/19

LINE FRIENDS US Online Store


Sign up https://lin.ee/tdlp6is/

From Gabie Case (Gabie Case)


 Conversation Chat: u3ff3a88bedff120d588437a3ac2972a6
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x589c7 (Table: chat_history)

5  LINE FRIENDS (LINE FRIENDS) 2022-05-13 21:00:02 (UTC+2) Sent

From Gabie Case (Gabie Case)


 Conversation Chat: u3ff3a88bedff120d588437a3ac2972a6
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x5862d (Table: chat_history)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4620
Case Label: K3 Case Evidence Number: 007 Device Label:

23  LINE FRIENDS (LINE FRIENDS) 2022-07-08 04:30:03 (UTC+2) Sent

From Gabie Case (Gabie Case)


 Conversation Chat: u3ff3a88bedff120d588437a3ac2972a6
Source File phone/applications0/jp.naver.line.android/live_data/databases/naver_line : 0x166c64 (Table: chat_history)

Other Media Files

Images (735)

1 0243350b9be95b39ddc5759cf7179a328adf6b7083c5685bf62468af6d8461da.0

 Filename 0243350b9be95b39ddc5759cf7179a328adf6b7083c5685bf62468af6d8461da.0
Path phone/applications0/jp.naver.line.android/live_data/cache/image_manager_disk_cache/
0243350b9be95b39ddc5759cf7179a328adf6b7083c5685bf62468af6d8461da.0
Size 4.39 KB
 Modified 2022-05-19 09:48:04 (UTC+2)
 Accessed 2022-05-19 09:48:04 (UTC+2)
 Width 116 px
 Height 116 px
Format png

2 027d957ff241533e8f1a06eed1c8cdb37939a763b907e615ef9520c5d73059c7.0

 Filename 027d957ff241533e8f1a06eed1c8cdb37939a763b907e615ef9520c5d73059c7.0
Path phone/applications0/jp.naver.line.android/live_data/cache/image_manager_disk_cache/
027d957ff241533e8f1a06eed1c8cdb37939a763b907e615ef9520c5d73059c7.0
Size 19.2 KB
 Modified 2022-05-19 09:30:59 (UTC+2)
 Accessed 2022-05-19 09:30:59 (UTC+2)
 Width 240 px
 Height 240 px
Format png

3 059a43ceadc5d42f8044140e6674abc58cdd3b82defd679b06df2dbdad38a94f.0

 Filename 059a43ceadc5d42f8044140e6674abc58cdd3b82defd679b06df2dbdad38a94f.0
Path phone/applications0/jp.naver.line.android/live_data/cache/image_manager_disk_cache/
059a43ceadc5d42f8044140e6674abc58cdd3b82defd679b06df2dbdad38a94f.0
Size 4.39 KB
 Modified 2022-05-19 09:48:06 (UTC+2)
 Accessed 2022-05-19 09:48:06 (UTC+2)
 Width 116 px
 Height 116 px
Format png

4 06a3a18f32ad8e4308a3f5d6afcdac8f7b6ba358bb7ee190b1c9c0d89a3a9cf3.0

 Filename 06a3a18f32ad8e4308a3f5d6afcdac8f7b6ba358bb7ee190b1c9c0d89a3a9cf3.0
Path phone/applications0/jp.naver.line.android/live_data/cache/image_manager_disk_cache/
06a3a18f32ad8e4308a3f5d6afcdac8f7b6ba358bb7ee190b1c9c0d89a3a9cf3.0
Size 4.19 KB
 Modified 2022-05-19 09:48:04 (UTC+2)
 Accessed 2022-05-19 09:48:04 (UTC+2)
 Width 116 px
 Height 116 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4624
Case Label: K3 Case Evidence Number: 007 Device Label:

LinkedIn
 Label LinkedIn
Package com.linkedin.android (twitter)
Version 4.1.709
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 27.6 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 443cb997718d0ac5162888bae5e4724582862676, valid
from 2010-12-14T22:48:02Z to 2038-05-01T22:48:02Z, Subject:
Best Certificate Found C=US, ST=CA, L=Mountain View, O=LinkedIn Corp, OU=LED,
CN=Jaikumar Ramanathan, Issuer: C=US, ST=CA, L=Mountain
View, O=LinkedIn Corp, OU=LED, CN=Jaikumar Ramanathan
android.permission.INTERNET,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.GET_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_STATS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.WRITE_CONTACTS,
android.permission.WAKE_LOCK,
android.permission.READ_CONTACTS,
android.permission.READ_CALENDAR,
Android Permissions
android.permission.ACCESS_NETWORK_STATE,
android.permission.VIBRATE,
com.google.android.gms.permission.AD_ID,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_CONNECT,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.ACCESS_WIFI_STATE,
com.google.android.c2dm.permission.RECEIVE,
android.permission.READ_PHONE_STATE,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.FOREGROUND_SERVICE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE
 First Installed 2022-05-10 12:05:27 (UTC+2)
 Last Updated 2022-06-30 18:00:22 (UTC+2)
 Last Active 2022-06-03 13:37:18 (UTC+2)
 Last Year Use Time 05:40:40

Accounts (1)

1 Jose Coel

 Email [email protected] (twitter)


 Description Software Developer at Comon
 Picture URL https://media-exp2.licdn.com/dms/image/C4D03AQEc4cTB2PDlFg/profile-displayphoto-
shrink_800_800/0/1564395007259?e=1663200000&v=beta&t=sN-
pXGIXJsRRf9Z6QaPAb_FxAy1OQ2oxXUy59d0SFYM
 Last Synced 2022-07-18 08:38:42 (UTC+2)
Source File phone/applications0/com.linkedin.android/live_data/shared_prefs/
auth_library_prefs.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4773
Case Label: K3 Case Evidence Number: 007 Device Label:

Message Contacts (9)

1 Aaron Tran

 Description Technical Recruiter


Number of Messages 2
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x2f35f (Table: actors)

2 Craig Dalziel

 Description Head of Client Delivery at Frank Recruitment Group


 Profile Picture https://media-exp1.licdn.com/dms/image/C4E03AQHCYX7eGmjz5w/profile-
displayphoto-shrink_
 Background Picture URL https://media-exp1.licdn.com/dms/image/C4D16AQGShRrtw_wrSQ/profile-
displaybackgroundimage-shrink_
Number of Messages 1
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x309ec (Table: actors)

3 Ilona Schmidt

 Description ★ Headhunter & Owner & Coach ~ LION ~ 11.111+ ★


 Profile Picture https://media-exp1.licdn.com/dms/image/C5603AQERLZaIdjt0Og/profile-displayphoto-
shrink_
Number of Messages 1
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x301ea (Table: actors)

4 John Copes

 Description Software Engineer at Apple


 Profile Picture https://media-exp1.licdn.com/dms/image/C5603AQGFRKxP5G3ZJw/profile-
displayphoto-shrink_
Number of Messages 16
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x2f417 (Table: actors)

5 Jose Coel

 Description Software Developer at Comon


 Profile Picture https://media-exp1.licdn.com/dms/image/C4D03AQEc4cTB2PDlFg/profile-displayphoto-
shrink_
Number of Messages 21
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x2f805 (Table: actors)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4774
Case Label: K3 Case Evidence Number: 007 Device Label:

6 Josefine Comel

 Description Student at Czech Technical University in Prague


 Profile Picture https://media-exp1.licdn.com/dms/image/C4E03AQEXCJEfWzIOVw/profile-displayphoto-
shrink_
Number of Messages 2
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x2fbf9 (Table: actors)

7 LinkedIn Member

Number of Messages 1


Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x2f3d6 (Table: actors)

8 Martin Macháček

 Description Sport Psychologist at SK Slavia Praha - fotbal a.s.


 Profile Picture https://media-exp1.licdn.com/dms/image/C5603AQGFLg8DvJFHUw/profile-
displayphoto-shrink_
 Background Picture URL https://media-exp1.licdn.com/dms/image/C4D16AQHWffy8MV5Pig/profile-
displaybackgroundimage-shrink_
Number of Messages 1
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x3f9e6 (Table: actors)

9 Tomas Kolsky ([email protected])

 Description Co-founder of IT Talents


 Profile Picture https://media-exp1.licdn.com/dms/image/C5103AQGv5KsoF-nQqA/profile-
displayphoto-shrink_
Number of Messages 4
Source File phone/applications0/com.linkedin.android/live_data/databases/
linkedin_messenger.db : 0x305ef (Table: actors)

Conversations (8 conversations, 49 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Conversation: 1

 Unread Count 0
 Participants Josef , Josefine , Josef
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x1c277 (Table:
conversations)
Josefine (Josefine )
Hey 2017-08-07 12:58:58 (UTC+2)

Josef (Josef )
Thanks 2017-08-07 12:59:26 (UTC+2)

Josef (Josef )
Hello 2017-08-07 12:59:30 (UTC+2)

Josef (Josef )
Jsjsnx 2018-10-03 15:17:12 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4775
Case Label: K3 Case Evidence Number: 007 Device Label:

Josef
I just came to say hello 2019-05-30 09:45:23 (UTC+2)
(Josef )
Josef
Sick 2019-06-18 11:25:44 (UTC+2)
(Josef )
Josef  3rd Party Attachment 2019-07-26 11:01:52 (UTC+2)
(Josef )
Josef  Media Attachment 2020-11-11 12:44:53 (UTC+1)
(Josef )
Josef  Media Attachment 2020-11-11 12:45:19 (UTC+1)
(Josef )
Josef (Josef )
Join this Zoom video meeting: 2020-11-11 12:48:30 (UTC+1)
Meeting ID: 73169021744
Password: 6fhHdJ
https://us04web.zoom.us/j/73169021744?
pwd=cGVyM3BFNVZmNVJxTW5hQW5oZTA4UT09
Josef (Josef )
Wow wtf 2021-01-15 14:31:02 (UTC+1)

Josef (Josef )
Don’t talk to me or my son ever again 2021-01-15 14:31:32 (UTC+1)

Josefine (Josefine )
2021-02-05 10:34:50 (UTC+1)

Josef (Josef )
Test 2021-08-06 14:11:20 (UTC+2)

Josef (Josef )
Heslo world 2022-05-09 14:48:26 (UTC+2)

2 Conversation: 2

 Unread Count 0
 Participants Josef , Josef , John
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x1d2c4 (Table:
conversations)
John (John)
sdfsdf 2022-01-26 12:09:48 (UTC+1)

John (John)
2022-01-26 12:10:45 (UTC+1)

Josef (Josef )
Thanks 2022-01-26 12:10:52 (UTC+1)

John (John )
You're welcome 2022-01-26 12:10:55 (UTC+1)

John (John )
Have a nice day 2022-01-26 12:10:59 (UTC+1)

Josef (Josef )
Same to you 2022-01-26 12:11:01 (UTC+1)

John (John )
Thank you 2022-01-26 12:11:04 (UTC+1)

Josef (Josef )
You're welcome 2022-01-26 12:11:07 (UTC+1)

John (John )
2022-01-31 14:30:53 (UTC+1)

John (John )
Asd 2022-04-12 15:47:11 (UTC+2)

John (John )  Media Attachment 2022-04-12 15:47:48 (UTC+2)

John (John )
2022-04-12 15:48:56 (UTC+2)
@Josef
John (John )
2022-04-12 15:49:11 (UTC+2)

John (John )  Media Attachment 2022-04-12 15:49:34 (UTC+2)

John (John )  Media Attachment 2022-04-12 15:50:15 (UTC+2)

John (John )
2022-04-12 15:50:27 (UTC+2)

John (John )
2022-04-12 15:50:42 (UTC+2)

John (John )
2022-04-12 15:50:49 (UTC+2)

John (John )
2022-04-12 15:51:18 (UTC+2)

Josef (Josef )
Thanks 2022-05-09 14:48:04 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4776
Case Label: K3 Case Evidence Number: 007 Device Label:

Messages (49)

1  Martin Macháček (Martin Macháček) 2016-12-01 08:29:54 (UTC+1) Received

Dear Mr.,

I just came across your profil. As you know, there is not enough IT specialists. In that moment we have more than 100 development offers

I think you could choose as well.

Would you be open to debate about new options?

Best regards.

Martin Macháček

+420 774 702 278 | [email protected]


 Conversation Conversation: 8
 Subject New challenge
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x40246 (Table: events)

2 Josefine (Josefine ) 2017-08-07 12:58:58 (UTC+2) Received

Hey
 Conversation Conversation: 1
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x5205f (Table: events)

3  2017-08-07 12:59:26 (UTC+2) Sent

Thanks
From Josef (Josef )
 Conversation Conversation: 1
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x51081 (Table: events)

4  2017-08-07 12:59:30 (UTC+2) Sent

Hello
From Josef (Josef Cels)
 Conversation Conversation: 1
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x50084 (Table: events)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4781
Case Label: K3 Case Evidence Number: 007 Device Label:

45 John (John ) 2022-04-12 15:50:49 (UTC+2) Received

 Conversation Conversation: 2
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x540a7 (Table: events)

46 John (John ) 2022-04-12 15:51:18 (UTC+2) Received

 Conversation Conversation: 2
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x530c0 (Table: events)

47  LinkedIn Member (LinkedIn Member ) 2022-05-09 14:47:59 (UTC+2) Received

Find a job that needs your help


 Conversation Conversation: 3
 Subject Find a job that needs your help
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x231aa (Table: events)

48  2022-05-09 14:48:04 (UTC+2) Sent

Thanks
From Josef (Josef )
 Conversation Conversation: 2
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x1ec32 (Table: events)

49  2022-05-09 14:48:26 (UTC+2) Sent

Heslo world
From Josef (Josef )
 Conversation Conversation: 1
Source File phone/applications0/com.linkedin.android/live_data/databases/linkedin_messenger.db : 0x27058 (Table: events)

Other Media Files

Video (15)

1 18.0.1652946700310.v3.exo

 Filename 18.0.1652946700310.v3.exo


Path phone/applications0/com.linkedin.android/live_data/cache/media/
0/18.0.1652946700310.v3.exo
Size 191 KB
 Modified 2022-05-19 09:51:40 (UTC+2)
 Accessed 2022-05-19 09:51:40 (UTC+2)

2 5.0.1652177172567.v3.exo

 Filename 5.0.1652177172567.v3.exo


Path phone/applications0/com.linkedin.android/live_data/cache/media/
0/5.0.1652177172567.v3.exo
Size 165 KB
 Modified 2022-05-10 12:06:12 (UTC+2)
 Accessed 2022-05-10 12:06:12 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4789
Case Label: K3 Case Evidence Number: 007 Device Label:

Maps
 Label Maps
Package com.google.android.apps.maps (twitter)
Version 11.38.0
Application Type System Application Update
 Application Size 25.3 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:10:45 (UTC+2)
 Last Active 2022-05-19 09:54:00 (UTC+2)
 Last Year Use Time 00:00:34

Locations (1)

1 Last Location

 Position Latitude 50.1028 °


(Google Maps)
Longitude 14.4573 °
Time 2022-05-19 09:53:12 (UTC+2)
Source File phone/applications0/com.google.android.apps.maps/live_data/shared_prefs/camera.xml

Favorite Places (2)

1 home

 Position Latitude 50.11044 °


(Google Maps)
Longitude 14.50845 °
 Created 2016-01-05 18:37:14 (UTC+1)
 Address Street Kolbenova 610/26, 190 00 Praha
(Google Maps)
 URL http://maps.google.com/?q=Kolbenova+610/26,+190+00+Praha&ftid=0x470becc8cab81821:0x7a118fb9919094b4
Source File phone/applications0/com.google.android.apps.maps/live_data/databases/gmm_myplaces.db : 0x3f13 (Table:
sync_item)

2 work

 Position Latitude 50.10473 °


(Google Maps)
Longitude 14.4777 °
 Created 2019-06-25 16:11:26 (UTC+2)
 Address Street Na Žertvách 2196/34, 180 00 Praha 8-Libeň
(Google Maps)
 URL http://maps.google.com/?q=Na+%C5%BDertv%C3%A1ch+2196/34,+180+00+Praha+8-
Libe%C5%88&ftid=0x470b935348754f47:0x5a9d05e552f78327
Source File phone/applications0/com.google.android.apps.maps/live_data/databases/gmm_myplaces.db : 0x3dfe (Table:
sync_item)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4828
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (13)

1 09c39d3d82bfa252296026db28264b757c0fe7c11864a3bf93d93a1fac7e0c96.0

 Filename 09c39d3d82bfa252296026db28264b757c0fe7c11864a3bf93d93a1fac7e0c96.0
Path phone/applications0/com.google.android.apps.maps/live_data/cache/
image_manager_disk_cache/
09c39d3d82bfa252296026db28264b757c0fe7c11864a3bf93d93a1fac7e0c96.0
Size 21.3 KB
 Modified 2022-05-19 09:52:39 (UTC+2)
 Accessed 2022-05-19 09:52:39 (UTC+2)
 Width 308 px
 Height 301 px
Format jpeg

2 3a33bce4dd7e7d9cccb4c1f5774ba0a0c1f50bc1718476f9db9e92d329446a6c.0

 Filename 3a33bce4dd7e7d9cccb4c1f5774ba0a0c1f50bc1718476f9db9e92d329446a6c.0
Path phone/applications0/com.google.android.apps.maps/live_data/cache/
image_manager_disk_cache/
3a33bce4dd7e7d9cccb4c1f5774ba0a0c1f50bc1718476f9db9e92d329446a6c.0
Size 29.5 KB
 Modified 2022-05-19 09:52:39 (UTC+2)
 Accessed 2022-05-19 09:52:39 (UTC+2)
 Width 308 px
 Height 301 px
Format jpeg

3 3bfe21a97b2b7e1951588d69642d0268e3905ca0197cf78aa511a4314ec0fa2d.0

 Filename 3bfe21a97b2b7e1951588d69642d0268e3905ca0197cf78aa511a4314ec0fa2d.0
Path phone/applications0/com.google.android.apps.maps/live_data/cache/
image_manager_disk_cache/
3bfe21a97b2b7e1951588d69642d0268e3905ca0197cf78aa511a4314ec0fa2d.0
Size 12.5 KB
 Modified 2022-05-19 09:52:39 (UTC+2)
 Accessed 2022-05-19 09:52:39 (UTC+2)
 Width 88 px
 Height 88 px
Format png

4 5263e54affb5661b18e8e281cd3d4ade621a3dc20a76486742aa654f273e4c1b.0

 Filename 5263e54affb5661b18e8e281cd3d4ade621a3dc20a76486742aa654f273e4c1b.0
Path phone/applications0/com.google.android.apps.maps/live_data/cache/
image_manager_disk_cache/
5263e54affb5661b18e8e281cd3d4ade621a3dc20a76486742aa654f273e4c1b.0
Size 6.86 KB
 Modified 2022-05-19 09:52:46 (UTC+2)
 Accessed 2022-05-19 09:52:46 (UTC+2)
 Width 624 px
 Height 408 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4829
Case Label: K3 Case Evidence Number: 007 Device Label:

Mapy.cz
 Label Mapy.cz
Package cz.seznam.mapy (twitter)
Version 9.19.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 42.6 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 9697c363c38fb981264c5122f8f8045d1aac2151, valid
from 2011-03-29T09:11:14Z to 2036-03-22T09:11:14Z, Subject:
Best Certificate Found
C=CZ, ST=Czech Republic, L=Prague, O=Seznam.cz a.s., Issuer:
C=CZ, ST=Czech Republic, L=Prague, O=Seznam.cz a.s.
cz.seznam.auth.SZN_ACCOUNTS,
android.permission.WAKE_LOCK,
android.permission.INTERNET,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_SETTINGS,
android.permission.ACCESS_COARSE_UPDATES,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.BLUETOOTH,
android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS,
Android Permissions
android.permission.ACTIVITY_RECOGNITION,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.MANAGE_ACCOUNTS,
androidx.car.app.ACCESS_SURFACE,
androidx.car.app.NAVIGATION_TEMPLATES,
android.permission.GET_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.USE_CREDENTIALS,
android.permission.MANAGE_ACCOUNTS,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.gms.permission.ACTIVITY_RECOGNITION,
com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE
 First Installed 2022-05-05 11:48:38 (UTC+2)
 Last Updated 2022-06-30 19:48:48 (UTC+2)
 Last Active 2022-05-05 11:58:27 (UTC+2)
 Last Year Use Time 00:08:46

Configuration (2)

1 Last Centered Position

 Position Latitude 50.1035 °


(Google Maps)
Longitude 14.456 °
Source File phone/applications0/cz.seznam.mapy/live_data/shared_prefs/MAP_PREFERENCES.xml

2 Last Position

 Position Latitude 50.10278 °


(Google Maps)
Longitude 14.45632 °
Source File phone/applications0/cz.seznam.mapy/live_data/shared_prefs/MAP_PREFERENCES.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4833
Case Label: K3 Case Evidence Number: 007 Device Label:

Configuration (1)

1 Last Route Type

Data Walk
Source File phone/applications0/cz.seznam.mapy/live_data/shared_prefs/routePreferences.xml

Locations (61)

1 event

 Time and Date 2022-05-05 11:48:53 (UTC+2)


 Position Latitude 50.10284 °
(Google Maps)
Longitude 14.457 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x6ba4 (Table: WARequest)

2 event

 Time and Date 2022-05-05 11:48:56 (UTC+2)


 Position Latitude 50.10284 °
(Google Maps)
Longitude 14.457 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x68d0 (Table: WARequest)

3 impress

 Time and Date 2022-05-05 11:48:56 (UTC+2)


 Position Latitude 50.10284 °
(Google Maps) Longitude 14.457 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x6686 (Table: WARequest)

4 event

 Time and Date 2022-05-05 11:49:10 (UTC+2)


 Position Latitude 50.10277 °
(Google Maps)
Longitude 14.45703 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x63a8 (Table: WARequest)

5 event

 Time and Date 2022-05-05 11:49:17 (UTC+2)


 Position Latitude 50.10277 °
(Google Maps)
Longitude 14.45703 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x60c4 (Table: WARequest)

6 impress

 Time and Date 2022-05-05 11:49:26 (UTC+2)


 Position Latitude 50.1028 °
(Google Maps)
Longitude 14.45699 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x7dbd (Table: WARequest)

7 event

 Time and Date 2022-05-05 11:49:31 (UTC+2)


 Position Latitude 50.10279 °
(Google Maps) Longitude 14.457 °
Source File phone/applications0/cz.seznam.mapy/live_data/databases/SznStatsWADatabase : 0x7af1 (Table: WARequest)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4834
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (265)

1 doleva-white.scale-100.png

 Filename doleva-white.scale-100.png
Path phone/applications0/cz.seznam.mapy/live_data/files/Icons/doleva-white.scale-100.png
Size 328 B
 Modified 2022-05-05 11:48:49 (UTC+2)
 Accessed 2022-05-05 11:48:49 (UTC+2)
 Width 32 px
 Height 42 px
Format png

2 doleva-white.scale-125.png

 Filename doleva-white.scale-125.png
Path phone/applications0/cz.seznam.mapy/live_data/files/Icons/doleva-white.scale-125.png
Size 405 B
 Modified 2022-05-05 11:48:49 (UTC+2)
 Accessed 2022-05-05 11:48:49 (UTC+2)
 Width 40 px
 Height 52 px
Format png

3 doleva-white.scale-150.png

 Filename doleva-white.scale-150.png
Path phone/applications0/cz.seznam.mapy/live_data/files/Icons/doleva-white.scale-150.png
Size 530 B
 Modified 2022-05-05 11:48:49 (UTC+2)
 Accessed 2022-05-05 11:48:49 (UTC+2)
 Width 48 px
 Height 63 px
Format png

4 doleva-white.scale-200.png

 Filename doleva-white.scale-200.png
Path phone/applications0/cz.seznam.mapy/live_data/files/Icons/doleva-white.scale-200.png
Size 720 B
 Modified 2022-05-05 11:48:49 (UTC+2)
 Accessed 2022-05-05 11:48:49 (UTC+2)
 Width 64 px
 Height 84 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4841
Case Label: K3 Case Evidence Number: 007 Device Label:

265 kapka.png

 Filename kapka.png
Path phone/applications0/cz.seznam.mapy/live_data/files/mapcontrol-1/styles/poi/kapka.png
Size 2.68 KB
 Modified 2022-05-05 11:49:00 (UTC+2)
 Accessed 2022-05-05 11:49:00 (UTC+2)
 Width 72 px
 Height 84 px
Format png

Documents (2)

1 http_2022_05_05_1.txt

 Filename http_2022_05_05_1.txt


Path phone/applications0/cz.seznam.mapy/live_data/files/logs/http_2022_05_05_1.txt
Size 4.20 KB
Mime Type text/plain
 Modified 2022-05-05 11:56:52 (UTC+2)
 Accessed 2022-05-05 11:53:59 (UTC+2)

2 log_2022_05_05_1.txt

 Filename log_2022_05_05_1.txt


Path phone/applications0/cz.seznam.mapy/live_data/files/logs/log_2022_05_05_1.txt
Size 80 B
Mime Type text/plain
 Modified 2022-05-05 11:48:47 (UTC+2)
 Accessed 2022-05-05 11:48:47 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4896
Case Label: K3 Case Evidence Number: 007 Device Label:

Messages
 Label Messages
Package com.google.android.apps.messaging (twitter)
Version messages.android_20220609_00_RC04.phone_dynamic
Application Type System Application Update
 Application Size 22.8 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:03:58 (UTC+2)
 Last Active 2022-07-18 14:41:40 (UTC+2)
 Last Day Use Time 00:22:06
 Last Month Use Time 01:49:49

Contacts (23)

1 +33 6 13 36 45 07

 Phone +33613364507 (twitter)


Number of Messages 2
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11ebc (Table: participants)

2 +33 6 17 71 76 37

 Phone +33617717637 (twitter)


Number of Messages 2
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11f6a (Table: participants)

3 +33 6 29 02 16 71

 Phone +33629021671 (twitter)


Number of Messages 2
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11f13 (Table: participants)

4 +33 7 78 68 84 91

 Phone +33778688491 (twitter)


Number of Messages 2
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11d85 (Table: participants)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4900
Case Label: K3 Case Evidence Number: 007 Device Label:

20 Telegram

 Phone Telegram (twitter)


Number of Messages 2
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11ba6 (Table: participants)

21 Twitter

 Phone Twitter (twitter)


Number of Messages 4
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11b21 (Table: participants)

22 Vonage

 Phone Vonage (twitter)


Number of Messages 3
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11beb (Table: participants)

23 WhatsApp

 Phone WhatsApp (twitter)


Number of Messages 4
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/
bugle_db : 0x11ddd (Table: participants)

Conversations (139 conversations, 119 deleted, 84 messages, 12 deleted)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 +420 111 112 222

 Last Message Odesilatel teto zpravy se Vam pokousel 17.05. v 14:14 2x dovolat. Vase O2
 Last Activity 2022-05-19 09:15:14 (UTC+2)
 Participants +420 555 000 444, +420 111 112 222
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db : 0x105a92 (Table:
conversations)
555 000 444 (+420 555 000
2022-05-19 09:15:14 (UTC+2)
444)
+420 111 112 222 (+420 111
Odesilatel teto zpravy se Vam pokousel 17.05. v 14:14 2x dovolat. Vase O2 2022-05-19 09:15:14 (UTC+2)
112 222)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4904
Case Label: K3 Case Evidence Number: 007 Device Label:

21  Deleted

 Participants +420 111 222 333, +420 333 000 444


Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x21373 (Table:
conversations)
unknown
(no message time) 

unknown
1970-01-01 01:05:07 (UTC+1) 

unknown
1970-01-01 01:05:08 (UTC+1) 

unknown  1970-01-01 01:05:29 (UTC+1) 


unknown 1970-01-01 01:05:31 (UTC+1) 

unknown
1970-01-01 01:05:32 (UTC+1) 

111 222 333 (+420 111 222


1970-01-01 01:05:33 (UTC+1) 
333)
333 000 444 (+420 333 000
1970-01-01 01:05:34 (UTC+1) 
444)
unknown
1970-01-01 01:05:49 (UTC+1) 

22  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x70a9b (Table:


conversations)

23  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a53 (Table:


conversations)
unknown
(no message time) 

24  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a4d (Table:


conversations)
unknown (no message time) 

25  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x71a47 (Table:


conversations)
unknown
(no message time) 

26  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x2136f (Table:


conversations)

27  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cbab (Table:


conversations)

28  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7cbb6 (Table:


conversations)

29  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73ade (Table:


conversations)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4910
Case Label: K3 Case Evidence Number: 007 Device Label:

128  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c943 (Table:


conversations)

129  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73aa7 (Table:


conversations)

130  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c938 (Table:


conversations)

131  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7d950 (Table:


conversations)

132  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c92d (Table:


conversations)

133  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7d945 (Table:


conversations)

134  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c922 (Table:


conversations)

135  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73a18 (Table:


conversations)

136  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c917 (Table:


conversations)

137  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7d92f (Table:


conversations)

138  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7c90c (Table:


conversations)

139  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x73a70 (Table:


conversations)

Messages (161 total, 89 deleted)

1  Received  Deleted

 Received  Sent
1970-01-01 01:05:07 (UTC+1) 1970-01-01 01:00:01 (UTC+1)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x7ab85 (Table:
messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4918
Case Label: K3 Case Evidence Number: 007 Device Label:

15  Telegram (Telegram) Received

Telegram code: 56768

You can also tap on this link to log in:


https://t.me/login/56768

oLeq9AcOZkT
To 111 222 333 (+420 111 222 333)
 Conversation Telegram
 Read No
 Received  Sent
2022-05-19 10:13:46 (UTC+2) 2022-05-19 10:13:45 (UTC+2)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db : 0x107d61 (Table:
messages)

16  LINE (LINE) Received

<#> Please enter 144040 into LINE within the next 30 mins.
JFoQLtyexga
To 111 222 333 (+420 111 222 333)
 Conversation LINE
 Read No
 Received  Sent
2022-05-19 10:34:25 (UTC+2) 2022-05-19 10:34:25 (UTC+2)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db : 0x107c82 (Table:
messages)

17  112 233 445 (112 233 445) Sent

From 555 000 444 (+420 555 000 444)


 Conversation 112 233 445
 Read Yes
 Received  Sent
2022-06-08 10:42:56 (UTC+2) 2022-06-08 10:42:56 (UTC+2)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db : 0x107c15 (Table:
messages)

112 233 445 (112 233 445) Received

Odesilatel teto zpravy se Vam pokousel 08.06. v 10:42 2x dovolat. Vase O2


To 555 000 444 (+420 555 000 444)
 Conversation 555 000 444
 Read No
 Received  Sent
2022-06-08 10:42:56 (UTC+2) 2022-06-08 10:42:55 (UTC+2)
Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db : 0x107ba4 (Table:
messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4921
Case Label: K3 Case Evidence Number: 007 Device Label:

154  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8f9 (Table:


messages)

155  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8f4 (Table:


messages)

156  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8ef (Table:


messages)

157  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8ea (Table:


messages)

158  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8df (Table:


messages)

159  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8d4 (Table:


messages)

160  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8cf (Table:


messages)

161  Received  Deleted

Source File phone/applications0/com.google.android.apps.messaging/live_data/databases/bugle_db-wal : 0x6d8ca (Table:


messages)

Other Media Files

Images (91)

1 abdffab5

 Filename abdffab5
Path phone/applications0/com.google.android.apps.messaging/live_data/cache/
growthkit_media_cache/a/abdffab5
Size 7.06 KB
 Modified 2022-03-30 11:03:09 (UTC+2)
 Accessed 2022-03-30 11:03:09 (UTC+2)
 Width 181 px
 Height 181 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4941
Case Label: K3 Case Evidence Number: 007 Device Label:

Messenger
 Label Messenger
Package com.facebook.orca (twitter)
Version 368.0.0.12.109
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 52.7 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 8a3c4b262d721acd49a4bf97d5213199c86fa2b9, valid
from 2009-08-31T21:52:16Z to 2050-09-25T21:52:16Z, Subject:
C=US, ST=CA, L=Palo Alto, O=Facebook Mobile, OU=Facebook,
Best Certificate Found
CN=Facebook Corporation, Issuer: C=US, ST=CA, L=Palo Alto,
O=Facebook Mobile, OU=Facebook, CN=Facebook
Corporation
com.facebook.katana.provider.ACCESS,
android.permission.SCHEDULE_EXACT_ALARM,
android.permission.INTERNET,
android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.WAKE_LOCK, android.permission.VIBRATE,
android.permission.READ_CONTACTS,
android.permission.READ_PROFILE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
android.permission.ACCESS_WIFI_STATE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.READ_SYNC_SETTINGS,
android.permission.RECEIVE_SMS,
android.permission.RECEIVE_MMS,
android.permission.READ_SMS,
android.permission.WRITE_SMS,
android.permission.SEND_SMS,
android.permission.CHANGE_NETWORK_STATE,
android.permission.RECORD_AUDIO,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.CALL_PHONE,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
Android Permissions
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS,
android.permission.WRITE_CONTACTS,
android.permission.WRITE_SYNC_SETTINGS,
com.google.android.gms.permission.AD_ID,
android.permission.BLUETOOTH, android.permission.NFC,
com.facebook.orca.provider.ACCESS,
com.facebook.permission.prod.FB_APP_COMMUNICATION,
com.facebook.mlite.provider.ACCESS,
android.permission.CAMERA,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION,
com.google.android.providers.gsf.permission.READ_GSERVICES
, com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.READ_EXTERNAL_STORAGE,
com.facebook.orca.permission.CROSS_PROCESS_BROADCAST_
MANAGER, com.facebook.receiver.permission.ACCESS,
com.facebook.orca.provider.ACCESS,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4965
Case Label: K3 Case Evidence Number: 007 Device Label:

android.permission.CHANGE_WIFI_STATE,
android.permission.USE_BIOMETRIC,
android.permission.MANAGE_OWN_CALLS,
com.facebook.orca.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE,
com.nokia.pushnotifications.permission.RECEIVE,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.facebook.orca.permission.CREATE_SHORTCUT,
android.permission.FOREGROUND_SERVICE,
android.permission.BROADCAST_STICKY,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, android.permission.USE_FINGERPRINT,
com.android.vending.BILLING,
com.google.android.c2dm.permission.RECEIVE

 First Installed 2022-04-27 14:53:05 (UTC+2)


 Last Updated 2022-07-08 15:36:36 (UTC+2)
 Last Active 2022-06-22 17:01:12 (UTC+2)
 Last Month Use Time 00:01:24
 Last Year Use Time 00:12:05

Accounts - Messenger (1)

1 Gabie Case

 Facebook ID 100003195706709 (twitter)


Gender Female
 Birthday 1987-12-24
 Phone Number +420111222333 (twitter)
 Phone Number +420555000444 (twitter)
 Phone Number +420725005200 (twitter)
 Email [email protected] (twitter)
 Account Picture https://scontent.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT89d_8R1CJjUhsNX_cZMvN3OFXT64Czlz-
fezgKUU3aXA&oe=62F9E067
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT89d_8R1CJjUhsNX_cZMvN3OFXT64Czlz-
fezgKUU3aXA&oe=62F9E067
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT89d_8R1CJjUhsNX_cZMvN3OFXT64Czlz-
fezgKUU3aXA&oe=62F9E067
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.18169-1/197757_362894973827023_1883089041_n.jpg?
stp=c48.48.593.593a_cp0_dst-
jpg_e15_q65&_nc_cat=107&ccb=1-7&_nc_sid=7206a8&_nc_ohc=QNhfH7oKibgAX_fAgrO&_
nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT89d_8R1CJjUhsNX_cZMvN3OFXT64Czlz-
fezgKUU3aXA&oe=62F9E067
Source File phone/applications0/com.facebook.orca/live_data/app_light_prefs/com.facebook.orca/
logged_in_100003195706709

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4966
Case Label: K3 Case Evidence Number: 007 Device Label:

Conversation Users (48)

1 Abosede Oke

 Facebook ID 100000195719352 (twitter)


 User Name Horkeharbosedey1
 Communication Rank 0
Is Friend Yes
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/119461671_3957955097554308_3804098160474567480_n.jpg?
stp=c0.0.240.240a_cp0_dst-
jpg_e15_p240x240_q65&_nc_cat=105&ccb=1-7&_nc_sid=7206a8&_nc_ohc=ipr4VeRrEN0A
X-AZEwp&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT_2RSHoI-
SDUriAYaW3JqrfgORYo9YF6UQaUkNp-YaByQ&oe=62EC7F21
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/119461671_3957955097554308_3804098160474567480_n.jpg?
stp=c0.0.750.750a_cp0_dst-
jpg_e15_q65&_nc_cat=105&ccb=1-7&_nc_sid=7206a8&_nc_ohc=ipr4VeRrEN0AX-
AZEwp&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT93P35QR
ElMidguseAn9SiOeDHAZH43KOeO7g7p6FRVoA&oe=62EC7F21
 Last Synced 2022-07-07 15:12:13 (UTC+2)
Number of Messages 1
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x58add
(Table: thread_users)

2 Abs Bass

 Facebook ID 100001562365654 (twitter)


 Communication Rank 0
 Picture URL https://scontent.xx.fbcdn.net/v/
t39.30808-1/273464033_4977340248994671_1309654553949233691_n.jpg?
stp=cp0_dst-
jpg_e15_p240x240_q65&_nc_cat=105&ccb=1-7&_nc_sid=7206a8&_nc_ohc=2UkDG8xID2I
AX-hpkzM&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT9VEinnHtijI04dIwN38ouFyxg0F1PJbyNFFAk
rrfpqVQ&oe=628B69F9
 Last Synced 2022-04-27 15:01:48 (UTC+2)
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0xc02d2
(Table: thread_users)

3 Ally Bendera

 Facebook ID 100000718033318 (twitter)


 User Name ally.benny.3
 Communication Rank 0
Is Friend Yes
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/39899992_2098728573494390_929629844264714240_n.jpg?
stp=c0.0.240.240a_cp0_dst-
jpg_e15_p240x240_q65&_nc_cat=103&ccb=1-7&_nc_sid=7206a8&_nc_ohc=NoPX47sQW4
4AX8L-j1P&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT_l2kEeDY
NBp7WIgBAhMNl72AvamUif0r0NDStS8mlMLw&oe=62EC7223
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/39899992_2098728573494390_929629844264714240_n.jpg?
stp=c0.0.960.960a_cp0_dst-
jpg_e15_p960x960_q65&_nc_cat=103&ccb=1-7&_nc_sid=7206a8&_nc_ohc=NoPX47sQW4
4AX8L-j1P&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT95NbM6
brSFeDFMxxBbflTnN4Xz1ghve_VGcWNn2O-5Zg&oe=62EC7223
 Last Synced 2022-07-07 15:12:13 (UTC+2)
Number of Messages 1
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x580c2
(Table: thread_users)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4967
Case Label: K3 Case Evidence Number: 007 Device Label:

47 Witness Juma

 Facebook ID 100021948643894 (twitter)


 User Name witness.juma.319
 Communication Rank 0
Is Friend Yes
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/30739048_235221390552814_8697320452416077824_n.jpg?stp=cp0_dst-
jpg_e15_p240x240_q65&_nc_cat=110&ccb=1-7&_nc_sid=7206a8&_nc_ohc=Mk0OO0m0Q
6UAX-LaAcI&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT_eV8CS9r
YHfMnzIQDXc90waQOiEVSUGzSICVQEzNHbeg&oe=62EC9E0F
 Picture URL https://scontent.xx.fbcdn.net/v/
t1.6435-1/30739048_235221390552814_8697320452416077824_n.jpg?stp=cp0_dst-
jpg_e15_p960x960_q65&_nc_cat=110&ccb=1-7&_nc_sid=7206a8&_nc_ohc=Mk0OO0m0Q
6UAX-LaAcI&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AA0KGCsCAAAA&oh=00_AT-09MXUO
cEAHPTSSESeEhU4xTIJ8Apq2kFZxwEPy6VOOA&oe=62EC9E0F
 Last Synced 2022-07-07 15:12:13 (UTC+2)
Number of Messages 1
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0xb716e
(Table: thread_users)

48 Yusuph Barghash

 Facebook ID 100006862447443 (twitter)


 User Name yusuph.barghash
 Communication Rank 0
Is Friend Yes
 Picture URL https://scontent.xx.fbcdn.net/v/
t39.30808-1/274508480_3075800569325328_8293511043713758369_n.jpg?
stp=cp0_dst-
jpg_e15_p240x240_q65&_nc_cat=101&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=EsEsJMwVCSQ
AX9ixaZF&_nc_ad=z-m&_nc_cid=0&_nc_ht=scontent.xx&oh=00_AT-jxxUGOZ1LO-
UYsdARYjNOx0Dkr1cCqjC7v_LMoCAa4w&oe=629F5ABF
 Last Synced 2022-05-19 09:15:57 (UTC+2)
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x4dc77
(Table: thread_users)

Conversations (21 conversations, 208 messages)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Witness Juma, Gabie Case

 Last Activity 2019-10-27 12:43:14 (UTC+1)


Preview You and Witness Juma are celebrating 4 years of friendship on Facebook
 Participants Witness Juma, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0xc6330 (Table: threads)
Witness Juma (Witness Juma)
You and Witness Juma are celebrating 4 years of friendship on Facebook 2019-10-27 12:43:14 (UTC+1)

2 Shadya Mpatano, Gabie Case

 Last Activity 2019-10-30 08:39:16 (UTC+1)


Preview You and Shadya Mpatano are celebrating 3 years of friendship on Facebook
 Participants Shadya Mpatano, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0xc6953 (Table: threads)
Shadya Mpatano (Shadya 2018-10-30 20:23:25 (UTC+1)
You are now connected on Messenger
Mpatano)
Gabie Case (Gabie Case)
(You waved at Shadya!) 2018-12-30 18:43:46 (UTC+1)

Shadya Mpatano (Shadya


You and Shadya Mpatano are celebrating 3 years of friendship on Facebook 2019-10-30 08:39:16 (UTC+1)
Mpatano)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4983
Case Label: K3 Case Evidence Number: 007 Device Label:

20 Josefine , Gabie Case

 Last Activity 2022-05-24 10:56:40 (UTC+2)


Preview .‫ ﻻ ﻳﺰال ﻳﺘﻢ اﻻﺗﻔﺎق ﻓﻲ اﻟﻤﺴﺎء ﻋﻠﻰ اﻟﺘﻔﺎ ﺻﯿﻞ اﻟﻤﺘﻌﻠﻘﺔ ﻳﻮم اﻷﺣﺪ‬.‫ﻣﺮﺣﺒﺎ ﻛﯿﻒ ﺣﺎﻟﻚ ﻣﺎذا ﺗﺨﻄﻂ اﻟﯿﻮم ﺳﺄذھﺐ ﻟﻠﺘﺴﻮق‬
.‫أﺗﻤﻨﻰ ﻟﻚ ﻳﻮًﻣﺎ ﺳﻌﯿًﺪا ﻳﺎ ﺻﺪﻳﻘﻲ اﻟﻌﺰﻳﺰ‬
 Participants Josefine , Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x5b178 (Table: threads)
Gabie Case (Gabie Case)
Bsj 2021-12-02 16:20:50 (UTC+1)

Gabie Case (Gabie Case)


Sjs 2021-12-02 16:20:51 (UTC+1)

Gabie Case (Gabie Case)


Fd 2021-12-02 16:21:24 (UTC+1)

Gabie Case (Gabie Case)


Ydb 2021-12-02 16:25:27 (UTC+1)

Gabie Case (Gabie Case)


Nnsd 2021-12-02 16:25:28 (UTC+1)

Gabie Case (Gabie Case) 2021-12-02 16:25:29 (UTC+1)


Dd
Gabie Case (Gabie Case)
Abc 2021-12-03 08:40:07 (UTC+1)

Josefine (Josefine )
:) 2021-12-15 12:50:07 (UTC+1)
Josefine (Josefine )
Josefine (Josefine )
H 2021-12-15 12:50:19 (UTC+1)
Gabie Case (Gabie Case)
2021-12-15 12:50:25 (UTC+1)

2021-12-16 09:39:22 (UTC+1)

Josefine (Josefine )

Josefine (Josefine )

Test filtr 2021-12-20 08:59:47 (UTC+1)

2021-12-20 08:59:53 (UTC+1)

Test 2022-01-19 13:30:29 (UTC+1)


Gabie Case (Gabie Case)
2022-01-19 13:30:38 (UTC+1)
Gabie Case (Gabie Case)
Už se to dá na tom je ten odkaz 2022-05-09 14:51:41 (UTC+2)
Gabie Case (Gabie Case)
2022-05-09 14:51:48 (UTC+2)


Gabie Case (Gabie Case)

https://scontent.xx.fbcdn.net/v/
t1.15752-9/279089497_1173457606805582_4776216332337254526_n.jpg?
stp=cp0_dst-
jpg_e15_fr_q65&_nc_cat=104&ccb=1-7&_nc_sid=ae9488&_nc_ohc=EILEynDBRtwAX
_-de1e&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AIXWCuUCAAAA&oh=03_AVK
DWHbGIcQ1pPHxEys17k9UzR9RlhxusNpQWkIncGwfbg&oe=62CF936C

 video-1652100712.mp4 2022-05-09 14:51:52 (UTC+2)


Gabie Case (Gabie Case)
2022-05-09 14:51:52 (UTC+2)


Gabie Case (Gabie Case)

https://scontent.xx.fbcdn.net/v/
t1.15752-9/279603846_538477064458512_8262600808976077251_n.jpg?
stp=cp0_dst-
jpg_e15_fr_q65&_nc_cat=103&ccb=1-7&_nc_sid=ae9488&_nc_ohc=kcmUgNDr08AA
X82FxIx&_nc_ad=z-
m&_nc_cid=0&_nc_ht=scontent.xx&reslog=d&edm=AIXWCuUCAAAA&oh=03_AVJ7
PjBfxyhzEB4Qt_INp0M2BvA9z7exPomCxizN7NacWA&oe=62F350F2

‫ ﻻ ﻳﺰال ﻳﺘﻢ اﻻﺗﻔﺎق ﻓﻲ اﻟﻤﺴﺎء ﻋﻠﻰ‬.‫ﻣﺮﺣﺒﺎ ﻛﯿﻒ ﺣﺎﻟﻚ ﻣﺎذا ﺗﺨﻄﻂ اﻟﯿﻮم ﺳﺄذھﺐ ﻟﻠﺘﺴﻮق‬ 2022-05-24 10:56:40 (UTC+2)
Josefine (Josefine )
.‫اﻟﺘﻔﺎ ﺻﯿﻞ اﻟﻤﺘﻌﻠﻘﺔ ﻳﻮم اﻷﺣﺪ‬
.‫أﺗﻤﻨﻰ ﻟﻚ ﻳﻮًﻣﺎ ﺳﻌﯿًﺪا ﻳﺎ ﺻﺪﻳﻘﻲ اﻟﻌﺰﻳﺰ‬

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4995
Case Label: K3 Case Evidence Number: 007 Device Label:

21 Facebook user, Gabie Case

 Last Activity 2022-06-09 20:09:28 (UTC+2)


Preview Hello how are you doing?
 Participants Facebook user, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x4a949 (Table: threads)
Facebook user (Facebook
Hello how are you doing? 2022-06-09 20:09:28 (UTC+2)
user)

Messages (208)

1  Carl Jackson (Carl Jackson) 2017-12-04 13:57:49 (UTC+1) Sent

(You waved at Carl!)


From Gabie Case (Gabie Case)
 URL https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/7tKQos3LQtg.png
 Conversation Carl Jackson, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0xc3768 (Table: messages)

2  Mohamed Lamine Camara (Mohamed Lamine Camara) 2018-03-09 15:19:26 (UTC+1) Received

You missed a call from Mohamed Lamine.


To Gabie Case (Gabie Case)
 Conversation Mohamed Lamine Camara, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x6e1b8 (Table: messages)

3  Mohamed Lamine Camara (Mohamed Lamine Camara) 2018-03-09 17:27:12 (UTC+1) Received

To Gabie Case (Gabie Case)


 Conversation Mohamed Lamine Camara, Gabie Case
 Label Sticker ID: 369239263222822


Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x6ed84 (Table: messages)

4  Mohamed Lamine Camara (Mohamed Lamine Camara) 2018-03-12 10:08:41 (UTC+1) Sent

Olalaaa
From Gabie Case (Gabie Case)
 Conversation Mohamed Lamine Camara, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x7f1b6 (Table: messages)

5  2018-04-06 18:03:53 (UTC+2) Control

You are now connected on Messenger


From Hordunhorlar Oyebola (Hordunhorlar Oyebola)
To Gabie Case (Gabie Case)
 Conversation Hordunhorlar Oyebola, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x9cc09 (Table: messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 4996
Case Label: K3 Case Evidence Number: 007 Device Label:

208  Facebook user (Facebook user) 2022-06-09 20:09:28 (UTC+2) Received

Hello how are you doing?


To Gabie Case (Gabie Case)
 Conversation Facebook user, Gabie Case
Source File phone/applications0/com.facebook.orca/live_data/databases/threads_db2 : 0x4cd4b (Table: messages)

Other Media Files

Images (120)

1 -MjNebCfLnW5unGwsTPHpom7Rkg

 Filename -MjNebCfLnW5unGwsTPHpom7Rkg
Path phone/applications0/com.facebook.orca/live_data/app_image/-
MjNebCfLnW5unGwsTPHpom7Rkg
Size 4.81 KB
 Modified 2022-04-27 15:01:47 (UTC+2)
 Accessed 2022-04-27 15:01:47 (UTC+2)
 Width 148 px
 Height 148 px
Format jpeg

2 -UIskGZ5OLN_QSIMMZaNRsmfa48

 Filename -UIskGZ5OLN_QSIMMZaNRsmfa48
Path phone/applications0/com.facebook.orca/live_data/app_image/-
UIskGZ5OLN_QSIMMZaNRsmfa48
Size 3.53 KB
 Modified 2022-04-27 15:01:47 (UTC+2)
 Accessed 2022-04-27 15:01:47 (UTC+2)
 Width 148 px
 Height 148 px
Format jpeg

3 0IT-bkrKLYxM_NrnEW_7iomFUwQ

 Filename 0IT-bkrKLYxM_NrnEW_7iomFUwQ
Path phone/applications0/com.facebook.orca/live_data/app_image/0IT-
bkrKLYxM_NrnEW_7iomFUwQ
Size 2.67 KB
 Modified 2022-04-27 15:01:24 (UTC+2)
 Accessed 2022-04-27 15:01:24 (UTC+2)
 Width 148 px
 Height 148 px
Format jpeg

4 0Zgt3kXy_9LgmTRDrobiNn875O8

 Filename 0Zgt3kXy_9LgmTRDrobiNn875O8
Path phone/applications0/com.facebook.orca/live_data/app_image/
0Zgt3kXy_9LgmTRDrobiNn875O8
Size 5.88 KB
 Modified 2022-06-06 14:41:36 (UTC+2)
 Accessed 2022-06-06 14:41:36 (UTC+2)
 Width 148 px
 Height 148 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5034
Case Label: K3 Case Evidence Number: 007 Device Label:

118 tXOSDj62tXj9OG9kxeg1LzwxvtA

 Filename tXOSDj62tXj9OG9kxeg1LzwxvtA
Path phone/applications0/com.facebook.orca/live_data/cache/image/
tXOSDj62tXj9OG9kxeg1LzwxvtA
Size 10.1 KB
 Modified 2022-06-06 15:35:55 (UTC+2)
 Accessed 2022-06-06 15:35:55 (UTC+2)
 Width 320 px
 Height 576 px
Format jpeg

119 uu882QyJ2nvNVrwT6Fce1fKYAvc

 Filename uu882QyJ2nvNVrwT6Fce1fKYAvc
Path phone/applications0/com.facebook.orca/live_data/cache/image/
uu882QyJ2nvNVrwT6Fce1fKYAvc
Size 614 B
 Modified 2022-06-22 16:59:57 (UTC+2)
 Accessed 2022-04-27 15:01:31 (UTC+2)
 Width 72 px
 Height 72 px
Format png

120 wcboLeeQ7MW47fnyERyBSksSl_w

 Filename wcboLeeQ7MW47fnyERyBSksSl_w
Path phone/applications0/com.facebook.orca/live_data/cache/image/
wcboLeeQ7MW47fnyERyBSksSl_w
Size 2.04 KB
 Modified 2022-06-16 15:00:09 (UTC+2)
 Accessed 2022-06-03 09:38:05 (UTC+2)
 Width 156 px
 Height 156 px
Format png

Documents (84)

1 crash_log.txt

 Filename crash_log.txt


Path phone/applications0/com.facebook.orca/live_data/app_errorreporting/crashlog/
crash_log.txt
Size 320 B
Mime Type text/plain
 Modified 2022-07-14 09:32:22 (UTC+2)
 Accessed 2022-04-27 15:01:09 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5059
Case Label: K3 Case Evidence Number: 007 Device Label:

OneDrive
 Label OneDrive
Package com.microsoft.skydrive (twitter)
Version 6.59
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 94.1 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 812a2ace16c28e4caf23f97b902ec8746eca6cf5, valid
from 2012-08-24T20:20:07Z to 2033-11-24T20:20:07Z, Subject:
C=US, ST=Washington, L=Redmond, O=Microsoft Corporation,
Best Certificate Found OU=Android Signing for Microsoft SkyDrive, CN=Microsoft
Corporation Third Party Marketplace (Do Not Trust), Issuer:
C=US, ST=Washington, L=Redmond, O=Microsoft Corporation,
CN=Microsoft Corporation Third Party Marketplace PCA
android.permission.READ_CONTACTS,
android.permission.GET_ACCOUNTS,
android.permission.GET_ACCOUNTS_PRIVILEGED,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.INTERNET,
android.permission.WRITE_SETTINGS,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_MEDIA_LOCATION,
android.permission.READ_SYNC_STATS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.WAKE_LOCK, android.permission.VIBRATE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.CAMERA,
Android Permissions
android.permission.FOREGROUND_SERVICE,
com.samsung.android.samsungaccount.permission.ACCOUNT
_MANAGER,
com.google.android.permission.PROVIDE_BACKGROUND,
com.android.vending.BILLING,
android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC,
android.permission.USE_CREDENTIALS,
android.permission.MANAGE_ACCOUNTS,
android.permission.READ_PHONE_STATE,
com.google.android.gms.permission.AD_ID,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
android.permission.READ_EXTERNAL_STORAGE
 First Installed 2022-05-03 08:11:28 (UTC+2)
 Last Updated 2022-07-13 12:36:30 (UTC+2)
 Last Active 2022-06-24 12:26:17 (UTC+2)
 Last Month Use Time 00:16:17
 Last Year Use Time 00:20:10

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5084
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (11)

1 original-f41d5b0c-f39b-41a4-8331-8d697e1c4327.jpeg

 Filename original-f41d5b0c-f39b-41a4-8331-8d697e1c4327.jpeg
Path phone/applications0/com.microsoft.skydrive/live_data/files/scan/LensSessions/
LensSDKSession-6f567dcd-f4a9-44a7-afad-61fdc57032d7/original-f41d5b0c-
f39b-41a4-8331-8d697e1c4327.jpeg
Size 1.84 MB
 Modified 2022-05-03 08:15:43 (UTC+2)
 Accessed 2022-05-03 08:15:43 (UTC+2)
Exposure Time 1 / 33 s
Focal Length 4.44 mm
F-Number 1.8
 Width 3264 px
 Height 2448 px
Camera Manufacturer Google
Camera Model Pixel 3a
Format jpeg
 Rotation 270°
 Date of Generation 2022-05-03 08:15:43 (UTC+2)
 Date of Digitization 2022-05-03 08:15:43 (UTC+2)

2 original-f57f6fed-ab92-40a8-888d-8096aa58690a.jpeg

 Filename original-f57f6fed-ab92-40a8-888d-8096aa58690a.jpeg
Path phone/applications0/com.microsoft.skydrive/live_data/files/scan/LensSessions/
LensSDKSession-b80b37f4-862c-4883-8c24-4e9c741bf2d8/original-f57f6fed-
ab92-40a8-888d-8096aa58690a.jpeg
Size 1.73 MB
 Modified 2022-05-03 08:16:04 (UTC+2)
 Accessed 2022-05-03 08:16:04 (UTC+2)
Exposure Time 1 / 33 s
Focal Length 4.44 mm
F-Number 1.8
 Width 3264 px
 Height 2448 px
Camera Manufacturer Google
Camera Model Pixel 3a
Format jpeg
 Rotation 270°
 Date of Generation 2022-05-03 08:16:04 (UTC+2)
 Date of Digitization 2022-05-03 08:16:04 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5085
Case Label: K3 Case Evidence Number: 007 Device Label:

Documents (1)

1 current_log.txt

 Filename current_log.txt


Path phone/applications0/com.microsoft.skydrive/live_external/cache/current_log.txt
Size 101 KB
Mime Type text/plain
 Modified 2022-07-18 11:34:49 (UTC+2)
 Accessed 2022-07-16 16:18:14 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5088
Case Label: K3 Case Evidence Number: 007 Device Label:

Outlook
 Label Outlook
Package com.microsoft.office.outlook (twitter)
Version 4.2224.2
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 87.9 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 7dc83cd2abe833560c2896626e307041c0df3a7a, valid
from 2011-07-29T22:52:12Z to 2034-09-19T22:52:12Z, Subject:
C=US, ST=Washington, L=Redmond, O=Microsoft Corporation,
OU=Android Marketplace Signing for Microsoft Office,
Best Certificate Found CN=Microsoft Corporation Third Party Marketplace (Do Not
Trust), Issuer: C=US, ST=Washington, L=Redmond,
O=Microsoft Corporation, OU=Android Marketplace Signing
for Microsoft Office, CN=Microsoft Corporation Third Party
Marketplace (Do Not Trust)
android.permission.INTERNET,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.VIBRATE,
android.permission.GET_ACCOUNTS,
android.permission.READ_PROFILE,
android.permission.READ_CONTACTS,
android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR,
android.permission.MANAGE_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS,
android.permission.WRITE_CONTACTS,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.WAKE_LOCK,
android.permission.SCHEDULE_EXACT_ALARM,
android.permission.CAMERA,
android.permission.REORDER_TASKS,
com.samsung.accessory.permission.ACCESSORY_FRAMEWORK
,
Android Permissions com.samsung.android.providers.context.permission.WRITE_US
E_APP_FEATURE_SURVEY,
com.samsung.WATCH_APP_TYPE.Companion,
com.microsoft.office.outlook.configurator.READCONFIG,
com.microsoft.office.outlook.ACCOUNT_CREATION_PERMISSIO
N, android.permission.READ_EXTERNAL_STORAGE,
android.permission.REQUEST_PASSWORD_COMPLEXITY,
android.permission.RECORD_AUDIO,
com.android.vending.BILLING,
android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5092
Case Label: K3 Case Evidence Number: 007 Device Label:

com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE

 First Installed 2022-05-10 11:59:02 (UTC+2)


 Last Updated 2022-07-08 10:52:42 (UTC+2)
 Last Active 2022-06-24 13:28:10 (UTC+2)
 Last Month Use Time 00:09:35
 Last Year Use Time 00:10:24

Accounts (1)

1 Josef Comel

 User Name [email protected]


 Email [email protected] (twitter)
Source File phone/applications0/com.microsoft.office.outlook/live_data/databases/acompliAcct.db
: 0x34cb (Table: mailAccounts)

Other Media Files

Images (1768)

1 image001[12].jpg

 Filename image001[12].jpg
Path phone/applications0/com.microsoft.office.outlook/live_data/files/Files/S0/8/Attachments/
image001[12].jpg
Size 73.6 KB
 Modified 2022-06-24 13:24:47 (UTC+2)
 Accessed 2022-06-24 13:24:47 (UTC+2)
Exposure Time 1 / 25 s
Focal Length 3.99 mm
F-Number 1.8
Lens Info Apple iPhone 7 back camera 3.99mm f/1.8, Focal length 3.99 mm, f/1.8
 Width 640 px
 Height 480 px
Camera Manufacturer Apple
Camera Model iPhone 7
Format jpeg
 Rotation 270°
 Date of Generation 2021-11-24 08:11:10 (UTC+1)
 Date of Digitization 2021-11-24 08:11:10 (UTC+1)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5093
Case Label: K3 Case Evidence Number: 007 Device Label:

1767 FFCEE481-6B59-1741-AB41-6BD179901834.png

 Filename FFCEE481-6B59-1741-AB41-6BD179901834.png
Path phone/applications0/com.microsoft.office.outlook/live_data/files/LocalFiles/2911/220875/
Photos/FFCEE481-6B59-1741-AB41-6BD179901834.png
Size 3.29 KB
 Modified 2022-07-08 15:58:04 (UTC+2)
 Accessed 2022-07-08 15:58:04 (UTC+2)
 Width 100 px
 Height 100 px
Format jpeg

1768 FFDF8F02-F221-504F-8CCE-00BF475EB4DB.png

 Filename FFDF8F02-F221-504F-8CCE-00BF475EB4DB.png
Path phone/applications0/com.microsoft.office.outlook/live_data/files/LocalFiles/2911/220875/
Photos/FFDF8F02-F221-504F-8CCE-00BF475EB4DB.png
Size 1.96 KB
 Modified 2022-07-08 13:24:09 (UTC+2)
 Accessed 2022-07-08 13:24:09 (UTC+2)
 Width 62 px
 Height 62 px
Format jpeg

Audio (20)

1 en-US_EvaNeural_1.mp3

 Filename en-US_EvaNeural_1.mp3


Path phone/applications0/com.microsoft.office.outlook/live_data/files/CDNFiles/assets/
android/commute/2.2.0/en-US_EvaNeural_1.mp3
Size 14.5 KB
 Modified 2022-05-10 11:59:25 (UTC+2)
 Accessed 2022-05-10 11:59:25 (UTC+2)

2 en-US_EvaNeural_2.mp3

 Filename en-US_EvaNeural_2.mp3


Path phone/applications0/com.microsoft.office.outlook/live_data/files/CDNFiles/assets/
android/commute/2.2.0/en-US_EvaNeural_2.mp3
Size 18.7 KB
 Modified 2022-05-10 11:59:25 (UTC+2)
 Accessed 2022-05-10 11:59:25 (UTC+2)

3 en-US_EvaNeural_3.mp3

 Filename en-US_EvaNeural_3.mp3


Path phone/applications0/com.microsoft.office.outlook/live_data/files/CDNFiles/assets/
android/commute/2.2.0/en-US_EvaNeural_3.mp3
Size 23.0 KB
 Modified 2022-05-10 11:59:25 (UTC+2)
 Accessed 2022-05-10 11:59:25 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5451
Case Label: K3 Case Evidence Number: 007 Device Label:

Phone
 Label Phone
Package com.google.android.dialer (twitter)
Version 84.0.458363558
Application Type System Application Update
 Application Size 58.3 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:04:51 (UTC+2)
 Last Active 2022-07-14 14:01:25 (UTC+2)
 Last Month Use Time 00:08:45
 Last Year Use Time 00:10:46

Other Media Files

Images (4)

1 119c44370be63c8c37ecce12e040f0a6d1c8aa07ec487095919b205bce275ee8.0

 Filename 119c44370be63c8c37ecce12e040f0a6d1c8aa07ec487095919b205bce275ee8.0
Path phone/applications0/com.google.android.dialer/live_data/cache/image_manager_disk_cache/
119c44370be63c8c37ecce12e040f0a6d1c8aa07ec487095919b205bce275ee8.0
Size 10.8 KB
 Modified 2022-04-27 17:24:59 (UTC+2)
 Accessed 2022-04-27 17:24:59 (UTC+2)
 Width 181 px
 Height 181 px
Format png

2 2dde49066598e1f30496ca9816622937292f15b189ee60e667fa4db01eb7681c.0

 Filename 2dde49066598e1f30496ca9816622937292f15b189ee60e667fa4db01eb7681c.0
Path phone/applications0/com.google.android.dialer/live_data/cache/image_manager_disk_cache/
2dde49066598e1f30496ca9816622937292f15b189ee60e667fa4db01eb7681c.0
Size 9.63 KB
 Modified 2022-04-27 17:24:59 (UTC+2)
 Accessed 2022-04-27 17:24:59 (UTC+2)
 Width 181 px
 Height 181 px
Format png

3 771303a0ec1b2acac04f40ecd84d4e85e4d86e731cb9c48b154a2342f11821cf.0

 Filename 771303a0ec1b2acac04f40ecd84d4e85e4d86e731cb9c48b154a2342f11821cf.0
Path phone/applications0/com.google.android.dialer/live_data/cache/image_manager_disk_cache/
771303a0ec1b2acac04f40ecd84d4e85e4d86e731cb9c48b154a2342f11821cf.0
Size 7.55 KB
 Modified 2022-04-27 17:24:59 (UTC+2)
 Accessed 2022-04-27 17:24:59 (UTC+2)
 Width 181 px
 Height 181 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5459
Case Label: K3 Case Evidence Number: 007 Device Label:

4 e1598050640e6024d7e0245b45cdfa3d4998eadc4036ca67fce7b3746bdddee0.0

 Filename e1598050640e6024d7e0245b45cdfa3d4998eadc4036ca67fce7b3746bdddee0.0
Path phone/applications0/com.google.android.dialer/live_data/cache/image_manager_disk_cache/
e1598050640e6024d7e0245b45cdfa3d4998eadc4036ca67fce7b3746bdddee0.0
Size 10.8 KB
 Modified 2022-05-19 09:48:18 (UTC+2)
 Accessed 2022-05-19 09:48:18 (UTC+2)
 Width 181 px
 Height 181 px
Format png

Audio (2)

1 ending_voice-cs_CZ.wav

 Filename ending_voice-cs_CZ.wav


Path phone/applications0/com.google.android.dialer/live_data/files/callrecordingprompt/
ending_voice-cs_CZ.wav
Size 176 KB
 Modified 2022-05-19 09:33:38 (UTC+2)
 Accessed 2022-05-19 09:33:38 (UTC+2)

2 starting_voice-cs_CZ.wav

 Filename starting_voice-cs_CZ.wav


Path phone/applications0/com.google.android.dialer/live_data/files/callrecordingprompt/
starting_voice-cs_CZ.wav
Size 195 KB
 Modified 2022-05-19 09:33:38 (UTC+2)
 Accessed 2022-05-19 09:33:37 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5460
Case Label: K3 Case Evidence Number: 007 Device Label:

Photos
 Label Photos
Package com.google.android.apps.photos (twitter)
Version 5.97.0.457753476
Application Type System Application Update
 Application Size 39.0 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-08 14:10:16 (UTC+2)
 Last Active 2022-06-06 13:16:21 (UTC+2)
 Last Year Use Time 00:03:50

Accounts (1)

1 [email protected]

 Email [email protected] (twitter)


Source File phone/applications0/com.google.android.apps.photos/live_data/shared_prefs/
accounts.xml

Local media (50)

 Width 899 px


 Height 1599 px

 Width 901 px


 Height 1600 px

 Width 2048 px


 Height 1152 px

 Width 900 px


 Height 1600 px

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5463
Case Label: K3 Case Evidence Number: 007 Device Label:

49

 Duration 00:00:06
 Width


284 px
 Height 196 px

50

 Duration 00:00:02
 Width


240 px
 Height 240 px

Remote media (29)

 Width 3096 px


 Height 4128 px
 Picture URL https://lh3.googleusercontent.com/
7UqYFIzUa3rr_ElTxMQ2eS6tVI2hQOvMMMlt_cqiZzjcGyVJhT8C9xMhTmvSGpTrTI5ek8qVCVbkfb
REzg=s0-d
 Position Latitude 50.10286 °
(Google Maps) Longitude 14.45691 °

 Width 3096 px


 Height 4128 px
 Picture URL https://lh3.googleusercontent.com/171U8sAkH71CtNnbUgeK6p0DFzUMV7hCSelX95cvLhW-
sBHiEGBlQWNe4sQRXOtXErBLtJpJFAYoDcgugA=s0-d
 Position Latitude 50.10286 °
(Google Maps)
Longitude 14.45691 °

 Width 3000 px


 Height 4000 px
 Picture URL https://lh3.googleusercontent.com/
96_skrdIBLASzZ_GUyctyeNGq3g3hUCqu8xksUbwSzlKF8MvKwkdr5dZAbFWC4cL-
mS9tusBS4XeBKi06Q=s0-d
 Position Latitude 50.1046 °
(Google Maps)
Longitude 14.47779 °

 Width 3000 px


 Height 4000 px
 Picture URL https://lh3.googleusercontent.com/
XjurrRIdDcekWxe1CyaJv3SbME1LD__34UpCBLMQqkhrIE6vWjEskjFooCUDt5gz8HjHAqQjFV5gZf
4jGg=s0-d
 Position Latitude 50.1046 °
(Google Maps)
Longitude 14.47779 °

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5470
Case Label: K3 Case Evidence Number: 007 Device Label:

26

 Width 1080 px


 Height 1920 px
 Picture URL https://lh3.googleusercontent.com/
BYSbwzxAgs9wDpemrp8D2h8BgCcqF_B1nubdjrrj3LNuEIQQWKWZ0XGeZ0E-
HhFvq42W_J5lFv1xGW7zgQ=s0-d

27

 Width 2336 px


 Height 4160 px
 Picture URL https://lh3.googleusercontent.com/
TiEQgkvRBC8uJOxyN4oKrDVAHmplJU5qw8RaUFY2ZjIhb-6gvgchuLT7nKb5FSdVmAyouuGxOrG
UxR4PQg=s0-d
 Position Latitude 50.10463 °
(Google Maps)
Longitude 14.47772 °

28

 Width 2336 px


 Height 4160 px
 Picture URL https://lh3.googleusercontent.com/9-b8AypCrEagPYi5UOuHl_5hfI-
Du3z26kTwHzMdoie7Odv5F2jQf5EKZMx6PrNfoxsTLj7DRISREq9_dA=s0-d
 Position Latitude 50.10463 °
(Google Maps) Longitude 14.47772 °

29

 Width 3000 px


 Height 1689 px
 Picture URL https://lh3.googleusercontent.com/eMyg9pkTJD5rxBrVP77jCCUKlU-4DPA_7uIZQnyCsNuN-
qm-4C9ArfSlvU2TqiMNurEkPZ66-vQfUBprUw=s0-d

Other Media Files

Images (145)

1 013c192e99e3b3e412a60cb7585f1408a87c441a19c4c6b2e1cdf026a08072f2

 Filename 013c192e99e3b3e412a60cb7585f1408a87c441a19c4c6b2e1cdf026a08072f2
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
013c192e99e3b3e412a60cb7585f1408a87c441a19c4c6b2e1cdf026a08072f2
Size 661 KB
 Modified 2022-06-06 13:15:20 (UTC+2)
 Accessed 2022-06-06 13:15:19 (UTC+2)
 Width 1174 px
 Height 2088 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5474
Case Label: K3 Case Evidence Number: 007 Device Label:

143 f38c49d2d9966e13e5cf1cba7d16e926f9884a9538f299b0ea50e8760243af5f

 Filename f38c49d2d9966e13e5cf1cba7d16e926f9884a9538f299b0ea50e8760243af5f
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
f38c49d2d9966e13e5cf1cba7d16e926f9884a9538f299b0ea50e8760243af5f
Size 683 KB
 Modified 2022-06-06 13:13:08 (UTC+2)
 Accessed 2022-06-06 13:13:08 (UTC+2)
 Width 1566 px
 Height 2088 px
Format jpeg

144 fb642392d44b341eeb3a7538a421b8f2cf314c4aea83a73e40d1c1f724612510

 Filename fb642392d44b341eeb3a7538a421b8f2cf314c4aea83a73e40d1c1f724612510
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
fb642392d44b341eeb3a7538a421b8f2cf314c4aea83a73e40d1c1f724612510
Size 1.17 KB
 Modified 2022-06-06 13:13:31 (UTC+2)
 Accessed 2022-06-06 13:13:31 (UTC+2)
 Width 50 px
 Height 28 px
Format jpeg

145 fdfc1174e9c6a7d5c0b3986c9ce2eab86127ff520d5ee8b7e2b651fc6f4aea4d

 Filename fdfc1174e9c6a7d5c0b3986c9ce2eab86127ff520d5ee8b7e2b651fc6f4aea4d
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
fdfc1174e9c6a7d5c0b3986c9ce2eab86127ff520d5ee8b7e2b651fc6f4aea4d
Size 105 KB
 Modified 2022-06-06 13:13:24 (UTC+2)
 Accessed 2022-06-06 13:13:24 (UTC+2)
 Width 586 px
 Height 1044 px
Format jpeg

Video (2)

1 1.0.1654513999858.v3.exo

 Filename 1.0.1654513999858.v3.exo


Path phone/applications0/com.google.android.apps.photos/live_data/cache/exoplayer/
2/1.0.1654513999858.v3.exo
Size 864 B
 Modified 2022-06-06 13:13:19 (UTC+2)
 Accessed 2022-06-06 13:13:16 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5513
Case Label: K3 Case Evidence Number: 007 Device Label:

Pinterest
 Label Pinterest
Package com.pinterest (twitter)
Version 10.24.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 23.2 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert b6a74dbcb894b0f73d8c485c72eb1247a8f027ca, valid
from 2012-04-24T16:30:16Z to 2037-04-18T16:30:16Z, Subject:
Best Certificate Found C=US, ST=CA, L=Palo Alto, O=Pinterest Inc, OU=Android,
CN=Carl Rice, Issuer: C=US, ST=CA, L=Palo Alto, O=Pinterest
Inc, OU=Android, CN=Carl Rice
android.permission.ACCESS_NETWORK_STATE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.CAMERA,
com.pinterest.account.Credentials,
android.permission.GET_ACCOUNTS,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.INTERNET,
android.permission.WAKE_LOCK,
android.permission.RECEIVE_BOOT_COMPLETED,
Android Permissions
android.permission.FOREGROUND_SERVICE,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, android.permission.ACCESS_WIFI_STATE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
android.permission.READ_CONTACTS,
android.permission.NFC,
android.permission.SCHEDULE_EXACT_ALARM
 First Installed 2022-04-27 14:55:48 (UTC+2)
 Last Updated 2022-07-08 14:02:17 (UTC+2)
 Last Active 2022-05-19 09:57:39 (UTC+2)
 Last Year Use Time 00:02:05

Accounts (1)

1 Jose Comel

 User Name comel


 Email [email protected] (twitter)
 Account Picture https://i.pinimg.com/444x444_RS/de/56/16/de561699bfc69c9219ea33775f713ccc.jpg
 Access Token MTQzMTYwMjoxOTc0NTQ5MDIzMjA5NzUwODI6OTIyMzM3MjAzNjg1NDc3NTgwNzoxfD
E2NTI5NDcwMDc6MC0tMTUyZThkNjkzYTgyMzdhMmMzZWE1MjI4NzM4MjdmZmM=
Source File phone/applications0/com.pinterest/live_data/shared_prefs/
PREF_MY_USER_USER_ACCOUNTS_4.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5515
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (636)

1 0006e9f253346ff33178a47816f92215.1

 Filename 0006e9f253346ff33178a47816f92215.1
Path phone/applications0/com.pinterest/live_data/cache/picasso-cache/
0006e9f253346ff33178a47816f92215.1
Size 10.7 KB
 Modified 2022-04-27 15:03:35 (UTC+2)
 Accessed 2022-04-27 15:03:35 (UTC+2)
 Width 236 px
 Height 307 px
Format jpeg

2 002c572178cd33768f76887962ac5226.1

 Filename 002c572178cd33768f76887962ac5226.1
Path phone/applications0/com.pinterest/live_data/cache/picasso-cache/
002c572178cd33768f76887962ac5226.1
Size 20.4 KB
 Modified 2022-07-13 12:43:30 (UTC+2)
 Accessed 2022-07-13 12:43:30 (UTC+2)
 Width 399 px
 Height 300 px
Format jpeg

3 0237ec88cec207a937246c3f1e4c0c89.1

 Filename 0237ec88cec207a937246c3f1e4c0c89.1
Path phone/applications0/com.pinterest/live_data/cache/picasso-cache/
0237ec88cec207a937246c3f1e4c0c89.1
Size 12.4 KB
 Modified 2022-06-22 12:32:25 (UTC+2)
 Accessed 2022-06-22 12:32:25 (UTC+2)
 Width 199 px
 Height 292 px
Format jpeg

4 024ccc765f4f4d3b0483a24170c16154.1

 Filename 024ccc765f4f4d3b0483a24170c16154.1
Path phone/applications0/com.pinterest/live_data/cache/picasso-cache/
024ccc765f4f4d3b0483a24170c16154.1
Size 20.3 KB
 Modified 2022-06-03 09:37:48 (UTC+2)
 Accessed 2022-06-03 09:37:47 (UTC+2)
 Width 300 px
 Height 300 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5516
Case Label: K3 Case Evidence Number: 007 Device Label:

Video (13)

1 18.0.1652947004757.v3.exo

 Filename 18.0.1652947004757.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
1/18.0.1652947004757.v3.exo
Size 1.19 KB
 Modified 2022-05-19 09:56:44 (UTC+2)
 Accessed 2022-05-19 09:56:44 (UTC+2)

2 1.0.1651064523931.v3.exo

 Filename 1.0.1651064523931.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
2/1.0.1651064523931.v3.exo
Size 945 B
 Modified 2022-04-27 15:02:03 (UTC+2)
 Accessed 2022-04-27 15:02:03 (UTC+2)

3 10.0.1651064616242.v3.exo

 Filename 10.0.1651064616242.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
4/10.0.1651064616242.v3.exo
Size 977 B
 Modified 2022-04-27 15:03:36 (UTC+2)
 Accessed 2022-04-27 15:03:36 (UTC+2)

4 5.0.1651064605057.v3.exo

 Filename 5.0.1651064605057.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
4/5.0.1651064605057.v3.exo
Size 885 B
 Modified 2022-04-27 15:03:25 (UTC+2)
 Accessed 2022-04-27 15:03:25 (UTC+2)

5 20.0.1652947004759.v3.exo

 Filename 20.0.1652947004759.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
5/20.0.1652947004759.v3.exo
Size 969 B
 Modified 2022-05-19 09:56:44 (UTC+2)
 Accessed 2022-05-19 09:56:44 (UTC+2)

6 7.0.1651064614613.v3.exo

 Filename 7.0.1651064614613.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
5/7.0.1651064614613.v3.exo
Size 993 B
 Modified 2022-04-27 15:03:34 (UTC+2)
 Accessed 2022-04-27 15:03:34 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5675
Case Label: K3 Case Evidence Number: 007 Device Label:

Signal
 Label Signal
Package org.thoughtcrime.securesms (twitter)
Version 5.42.7
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 48.9 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 45989dc9ad8728c2aa9a82fa55503e34a8879374, valid
from 2010-05-25T15:24:42Z to 2045-05-16T15:24:42Z, Subject:
C=US, ST=PA, L=Pittsburgh, O=Whisper Systems, OU=Research
Best Certificate Found
and Development, CN=Whisper Systems, Issuer: C=US, ST=PA,
L=Pittsburgh, O=Whisper Systems, OU=Research and
Development, CN=Whisper Systems
android.permission.USE_FINGERPRINT,
org.thoughtcrime.securesms.ACCESS_SECRETS,
android.permission.READ_PROFILE,
android.permission.WRITE_PROFILE,
android.permission.BROADCAST_WAP_PUSH,
android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS,
android.permission.ACCESS_NOTIFICATION_POLICY,
android.permission.RECEIVE_SMS,
android.permission.RECEIVE_MMS,
android.permission.READ_SMS, android.permission.SEND_SMS,
android.permission.WRITE_SMS,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.CAMERA,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_CALL_STATE,
android.permission.WRITE_CALENDAR,
android.permission.READ_CALENDAR,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE,
Android Permissions
android.permission.ACCESS_NETWORK_STATE,
android.permission.CHANGE_NETWORK_STATE,
android.permission.WAKE_LOCK,
android.permission.INTERNET,
android.permission.FOREGROUND_SERVICE,
android.permission.GET_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.USE_CREDENTIALS,
android.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.INSTALL_SHORTCUT,
android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE,
android.permission.SET_WALLPAPER,
android.permission.BLUETOOTH,
android.permission.BROADCAST_STICKY,
android.permission.CALL_PHONE,
android.permission.DISABLE_KEYGUARD,
android.permission.RAISED_THREAD_PRIORITY,
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIO
NS, android.permission.USE_FULL_SCREEN_INTENT,
android.permission.MANAGE_OWN_CALLS,
android.permission.USE_BIOMETRIC,
android.permission.READ_EXTERNAL_STORAGE,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5875
Case Label: K3 Case Evidence Number: 007 Device Label:

com.google.android.c2dm.permission.RECEIVE,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT,
com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE

 First Installed 2022-07-11 11:27:23 (UTC+2)


 Last Updated 2022-07-11 11:27:23 (UTC+2)
 Last Active 2022-07-11 11:30:10 (UTC+2)
 Last Month Use Time 00:02:28

Other Media Files

Images (2)

1 63b90207-14b1-4923-9dea-ec1f1212b797

 Filename 63b90207-14b1-4923-9dea-ec1f1212b797
Path phone/applications0/org.thoughtcrime.securesms/live_data/files/
ShortcutInfoCompatSaver_share_targets/ShortcutInfoCompatSaver_share_targets_bitmaps/
63b90207-14b1-4923-9dea-ec1f1212b797
Size 10.5 KB
 Modified 2022-07-11 11:29:37 (UTC+2)
 Accessed 2022-07-11 11:29:37 (UTC+2)
 Width 198 px
 Height 198 px
Format png

2 e4f297bc-3d87-41e0-8c9e-6f1d686e8c64

 Filename e4f297bc-3d87-41e0-8c9e-6f1d686e8c64
Path phone/applications0/org.thoughtcrime.securesms/live_data/files/
ShortcutInfoCompatSaver_share_targets/ShortcutInfoCompatSaver_share_targets_bitmaps/
e4f297bc-3d87-41e0-8c9e-6f1d686e8c64
Size 10.2 KB
 Modified 2022-07-11 11:29:37 (UTC+2)
 Accessed 2022-07-11 11:29:37 (UTC+2)
 Width 198 px
 Height 198 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5876
Case Label: K3 Case Evidence Number: 007 Device Label:

Skype
 Label Skype
Package com.skype.raider (twitter)
Version 8.83.0.411
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 46.6 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 771807d1b8414d6989e7d8ef0b9797243b931f95, valid
from 2010-06-08T10:20:18Z to 2040-07-20T10:20:18Z, Subject:
Best Certificate Found C=GB, L=London, O=Skype, OU=Mobile Client, CN=Skype,
Issuer: C=GB, L=London, O=Skype, OU=Mobile Client,
CN=Skype
android.permission.INTERNET,
android.permission.CHANGE_NETWORK_STATE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.CAMERA,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.READ_CONTACTS,
android.permission.READ_PROFILE,
android.permission.READ_PHONE_STATE,
android.permission.WAKE_LOCK,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.RECORD_AUDIO,
android.permission.VIBRATE, android.permission.BLUETOOTH,
com.skype.raider.permission.C2D_MESSAGE,
com.google.android.c2dm.permission.RECEIVE,
android.permission.RECEIVE_BOOT_COMPLETED,
com.google.android.gms.permission.ACTIVITY_RECOGNITION,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.BROADCAST_STICKY,
android.permission.CALL_PHONE,
android.permission.DISABLE_KEYGUARD,
android.permission.GET_ACCOUNTS,
Android Permissions android.permission.GET_TASKS,
android.permission.MANAGE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS,
android.permission.USE_CREDENTIALS,
android.permission.WRITE_CONTACTS,
android.permission.WRITE_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
com.anddoes.launcher.permission.UPDATE_COUNT,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.majeur.launcher.permission.UPDATE_BADGE,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.SYSTEM_ALERT_WINDOW,
com.amazon.device.messaging.permission.RECEIVE,
com.skype.raider.permission.RECEIVE_ADM_MESSAGE,
com.skype.raider.permission.ACCOUNT,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
com.huawei.android.launcher.permission.CHANGE_BADGE,
android.permission.USE_FINGERPRINT,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5881
Case Label: K3 Case Evidence Number: 007 Device Label:

ERRER_SERVICE, android.permission.RECORD_VIDEO,
com.android.vending.BILLING
 First Installed 2022-04-27 14:54:45 (UTC+2)
 Last Updated 2022-06-22 13:20:46 (UTC+2)
 Last Active 2022-05-19 09:58:25 (UTC+2)
 Last Year Use Time 00:01:41

Accounts (1)

1 test

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db


Contacts (test) (222 total, 1 deleted)

1 Abby Cruz test

 Blocked by User No


 Fetch Time 2022-04-27 15:05:06 (UTC+2)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa2471
(Table: profilecachev8)

2 Adam Sikora test

 Blocked by User No


 Fetch Time 2022-04-27 15:05:06 (UTC+2)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xbbe78
(Table: profilecachev8)

3 Adam Winston test

 Blocked by User No


 Fetch Time 2022-04-27 15:05:06 (UTC+2)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa276b
(Table: profilecachev8)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5882
Case Label: K3 Case Evidence Number: 007 Device Label:

219 Yvona Rudolfová test

 Blocked by User No


 Fetch Time 2022-04-27 15:05:06 (UTC+2)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xb119c
(Table: profilecachev8)

220 test

 Fetch Time 2022-04-27 15:05:23 (UTC+2)


Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xc3bd9
(Table: profilecachev8)

221 test

 Fetch Time 2022-04-27 15:04:54 (UTC+2)


Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa9c01
(Table: profilecachev8)

222 test  Deleted

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x97014


(Table: profilecachev8)

Conversations (test) (28 conversations, 2 deleted, 14 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Conversation: 19:[email protected]

 Account test
 Created 2015-10-29 10:23:53 (UTC+1)
 Participants Gabie Case, Jakub Král
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa7b30 (Table:
conversationsv14)

2 Conversation:  Deleted

 Account test
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xb300a (Table:
conversationsv14)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5926
Case Label: K3 Case Evidence Number: 007 Device Label:

3 Conversation:  Deleted

 Account test
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2a80c3 (Table:
conversationsv14)

4 Conversation: 19:09000fede9ba4fd39ff[email protected]

 Account test
 Participants comel
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x95592 (Table:
conversationsv14)
comel (comel)
Zdary 2021-01-29 13:19:33 (UTC+1)

5 Conversation: 19:[email protected]

 Account test
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x9068c (Table:
conversationsv14)

6 Conversation: 19:[email protected]

 Account test
 Participants Echo / Sound Test Service ., James
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x914eb (Table:
conversationsv14)
comel (comel)
2022-04-13 13:21:04 (UTC+2)

James (James )
Unread 2022-04-13 13:21:24 (UTC+2)

Unread 2022-04-13 13:21:48 (UTC+2)


comel (comel)
Testovacka 2022-05-09 14:53:28 (UTC+2)
comel (comel)
Jestli prijde 2022-05-09 14:53:32 (UTC+2)
comel (comel)
Pokud ne tak to bude asi nejlepší 2022-05-09 14:53:41 (UTC+2)
comel (comel)
Hehe 2022-05-25 10:48:53 (UTC+2)
James (James )

Prisloo 2022-05-25 10:48:56 (UTC+2)


James (James )

<URIObject type="SWIFT.1" url_thumbnail="https://urlp.asm.skype.com/v1/url/ 2022-05-25 10:50:04 (UTC+2)


James (James )
content?url=https://neu1-urlp.secure.skypeassets.com/static/
card-128x128.png">To view this card, go to: <a href="https://go.skype.com/
cards.unsupported">https://go.skype.com/cards.unsupported</a><Title></
Title><Swift
b64="eyJ0eXBlIjoibWVzc2FnZS9jYXJkIiwiYXR0YWNobWVudHMiOlt7ImNvbnRlbnRU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"/></URIObject>

7 Conversation: 28:concierge

 Account test
 Participants Skype
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db (Table: conversationsv14)
Skype (Skype)
Zavolejte o tomto Dni otců, který letos připadne na 18. června, mužům <ss 2017-06-16 15:33:25 (UTC+2)
type="man">(man)</ss>, kteří mají ve vašem životě významnou roli, nebo jim
pošlete zprávu.

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5927
Case Label: K3 Case Evidence Number: 007 Device Label:

Messages (test) (14)

1  Skype (Skype) 2017-06-16 15:33:25 (UTC+2) Received

Zavolejte o tomto Dni otců, který letos připadne na 18. června, mužům <ss type="man">(man)</ss>, kteří mají ve vašem životě významnou roli, nebo
jim pošlete zprávu.
 Conversation Conversation: 28:concierge
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db (Table: messagesv12)

2  2021-01-29 13:19:33 (UTC+1) Sent

Zdary
 Conversation Conversation: 19:09000fede9ba4fd39ff[email protected]
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa604c (Table: messagesv12)

3  Sent

 Conversation Conversation: 19:[email protected]


From comel (comel)

 Deleted Yes
 Created  Removed
2022-04-13 13:21:04 (UTC+2) 2022-04-13 13:21:33 (UTC+2)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa5502 (Table: messagesv12)

4 James (James ) 2022-04-13 13:21:24 (UTC+2) Received

Unread
 Conversation Conversation: 19:[email protected]
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa5061 (Table: messagesv12)

5  2022-04-13 13:21:48 (UTC+2) Sent

Unread
 Conversation Conversation: 19:[email protected]
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa5bcf (Table: messagesv12)

6  2022-05-09 14:53:28 (UTC+2) Sent

Testovacka
 Conversation Conversation: 19:[email protected]
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c0bc7 (Table: messagesv12)

7  2022-05-09 14:53:32 (UTC+2) Sent

Jestli prijde
 Conversation Conversation: 19:[email protected]
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2bd1c0 (Table: messagesv12)

8  2022-05-09 14:53:41 (UTC+2) Sent

Pokud ne tak to bude asi nejlepší


 Conversation Conversation: 19:[email protected]
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2bd5ff (Table: messagesv12)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5930
Case Label: K3 Case Evidence Number: 007 Device Label:

9  2022-05-09 14:54:26 (UTC+2) Sent

Call Logs for Call 0363a5ba-92b8-417f-9d50-d3a101859c60


 Conversation Conversation: 48:calllogs
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c2610 (Table: messagesv12)

10  2022-05-09 14:54:35 (UTC+2) Sent

Call Logs for Call 55eb2074-37f3-4756-921d-332705b75022


 Conversation Conversation: 48:calllogs
From comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c14fa (Table: messagesv12)

11  2022-05-09 14:54:43 (UTC+2) Sent

Call Logs for Call 485ca9f1-1d21-4f05-b776-7857c496fd64


 Conversation Conversation: 48:calllogs
From comel (comel)

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2a8123 (Table: messagesv12)

12 James (James ) 2022-05-25 10:48:53 (UTC+2) Received

Hehe
 Conversation Conversation: 19:[email protected]
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c065c (Table: messagesv12)

13 James (James ) 2022-05-25 10:48:56 (UTC+2) Received

Prisloo
 Conversation Conversation: 19:[email protected]
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c00ee (Table: messagesv12)

14 James (James ) 2022-05-25 10:50:04 (UTC+2) Received

<URIObject type="SWIFT.1" url_thumbnail="https://urlp.asm.skype.com/v1/url/content?url=https://neu1-urlp.secure.skypeassets.com/static/


card-128x128.png">To view this card, go to: <a href="https://go.skype.com/cards.unsupported">https://go.skype.com/cards.unsupported</
a><Title></Title><Swift
b64="eyJ0eXBlIjoibWVzc2FnZS9jYXJkIiwiYXR0YWNobWVudHMiOlt7ImNvbnRlbnRUeXBlIjoiYXBwbGljYXRpb24vdm5kLm1pY3Jvc29mdC5jYXJkLmZsZXgiL
CJjb250ZW50Ijp7InNoYXJlYWJsZSI6dHJ1ZSwic3VidGl0bGUiOiJGb3VuZCBvbiBUZW5vci5jb20iLCJpbWFnZXMiOlt7ImFsdCI6IkJhbWJ5IEdJRiIsInVybCI6Imh0d
HBzOi8vbWVkaWEudGVub3IuY29tL2ltYWdlcy9lZmM5ZWY5YjNiNzExYjhlZjVkNTlkOTQ3ODc3MTIyOS90ZW5vci5naWYiLCJ0YXAiOnsidHlwZSI6InNob3dJb
WFnZSJ9LCJ0eXBlIjoiaW1hZ2UvZ2lmIiwic3RpbGxVcmwiOiJodHRwczovL21lZGlhLnRlbm9yLmNvbS9pbWFnZXMvNTBiZWU0MTYyMWIzZmYzMzg3YWMw
Zjc2NWM3ZTg4NjkvdGVub3IucG5nIiwiZnJhbWVzIjowfV0sImFzcGVjdCI6IjQ1MTo0OTgiLCJkaW1lbnNpb25zIjp7IndpZHRoIjo0NTEsImhlaWdodCI6NDk4fX
19XX0="/></URIObject>
 Conversation Conversation: 19:[email protected]
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2d1338 (Table: messagesv12)

Calls (test) (6)


Legend:

  Dialed call   Received call   Missed call   Blocked call   Rejected call

  Canceled call   Voicemail

Label From / To Time Duration


1  2021-02-24 14:24:46 (UTC+1)
 Account test
 Conversation Conversation: 19:09000fede9ba4fd39ff[email protected]
To comel (comel)

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa647b (Table: messagesv12)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5931
Case Label: K3 Case Evidence Number: 007 Device Label:

Label From / To Time Duration


2  2021-02-24 14:25:12 (UTC+1)
 Account comel (comel)
 Conversation Conversation: 19:09000fede9ba4fd39ff[email protected]
To comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0xa6a0f (Table: messagesv12)
3  2022-05-09 14:54:25 (UTC+2)
 Account test
 Conversation Conversation: 8:live:.cid.74171d3e95ec8e64
To comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c3a0f (Table: messagesv12)
4  2022-05-09 14:54:43 (UTC+2)
 Account test
 Conversation Conversation: 8:test_2
To comel (comel)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c2044 (Table: messagesv12)
5  2022-05-09 14:54:47 (UTC+2)
 Account test
 Conversation Conversation: 19:[email protected]
To comel (comel)

Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2bda6c (Table: messagesv12)


6  2022-05-09 14:55:46 (UTC+2)
 Account test
 Conversation Conversation: 19:[email protected]
From Echo / Sound Test Service . (Echo / Sound Test Service .)
Source File phone/applications0/com.skype.raider/live_data/databases/s4l-test.db : 0x2c3395 (Table: messagesv12)

Other Media Files

Images (36)

1 oNizIoLQtEzgU4lBNLxru-mDjEE.cnt

 Filename oNizIoLQtEzgU4lBNLxru-mDjEE.cnt
Path phone/applications0/com.skype.raider/live_data/cache/image_cache/v2.ols100.1/1/
oNizIoLQtEzgU4lBNLxru-mDjEE.cnt
Size 6.50 KB
 Modified 2022-04-27 15:05:41 (UTC+2)
 Accessed 2022-04-27 15:05:22 (UTC+2)
 Width 192 px
 Height 192 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5932
Case Label: K3 Case Evidence Number: 007 Device Label:

Slack
 Label Slack
Package com.Slack (twitter)
Version 22.07.10.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 48.8 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert c2a4e59ef0ab8081c671b28d89a8586647b5bf3e, valid
from 2021-05-19T20:11:58Z to 2051-05-19T20:11:58Z, Subject:
Best Certificate Found C=US, ST=California, L=Mountain View, O=Google Inc.,
OU=Android, CN=Android, Issuer: C=US, ST=California,
L=Mountain View, O=Google Inc., OU=Android, CN=Android
android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE,
android.permission.GET_ACCOUNTS,
android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC,
android.permission.WAKE_LOCK,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.READ_CONTACTS,
Android Permissions android.permission.VIBRATE,
android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_PHONE_STATE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.FOREGROUND_SERVICE,
android.permission.CAMERA, android.permission.BLUETOOTH,
android.permission.BLUETOOTH_CONNECT,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE
 First Installed 2022-05-10 11:56:21 (UTC+2)
 Last Updated 2022-07-08 14:09:40 (UTC+2)
 Last Active 2022-07-14 10:57:39 (UTC+2)
 Last Month Use Time 00:01:32
 Last Year Use Time 00:02:27

Other Media Files

Documents (1)

1 mobile.html

 Filename mobile.html


Path phone/applications0/com.Slack/live_data/app_web/web/mobile.html
Size 11.8 KB
Mime Type unknown
 Modified 2022-07-18 08:38:35 (UTC+2)
 Accessed 2022-06-22 13:11:39 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5942
Case Label: K3 Case Evidence Number: 007 Device Label:

Snapchat
 Label Snapchat
Package com.snapchat.android (twitter)
Version 11.86.0.37
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 38.2 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 49f6badb81d89a9e38d65de76f09355071bd67e7, valid
from 2012-09-11T10:06:20Z to 2040-01-28T10:06:20Z, Subject:
Best Certificate Found C=01, ST=California, L=Los Angeles, O=Snapchat, OU=Captain
Captcha, CN=Daniel Smith, Issuer: C=01, ST=California, L=Los
Angeles, O=Snapchat, OU=Captain Captcha, CN=Daniel Smith
android.permission.READ_PHONE_STATE,
android.permission.READ_CALL_LOG,
android.permission.READ_CONTACTS,
android.permission.CAMERA,
android.permission.RECORD_AUDIO,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.FLASHLIGHT,
android.permission.WAKE_LOCK,
android.permission.ACCESS_FINE_LOCATION,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN,
android.permission.VIBRATE,
android.permission.ACCESS_BACKGROUND_LOCATION,
android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.GET_ACCOUNTS,
android.permission.READ_PHONE_NUMBERS,
android.permission.READ_PROFILE,
android.permission.CHANGE_WIFI_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.INTERNET,
android.permission.CHANGE_NETWORK_STATE,
Android Permissions
android.permission.RECEIVE_BOOT_COMPLETED,
com.snapchat.android.permission.UPDATE_STICKER_INDEX,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.HIGH_SAMPLING_RATE_SENSORS,
com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, com.android.vending.BILLING,
com.google.android.c2dm.permission.RECEIVE,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT,
com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE
 First Installed 2022-04-27 14:53:56 (UTC+2)
 Last Updated 2022-07-08 14:05:48 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5945
Case Label: K3 Case Evidence Number: 007 Device Label:

 Last Active 2022-06-24 14:38:13 (UTC+2)


 Last Month Use Time 00:00:01
 Last Year Use Time 00:01:15

Accounts (1)

1 comel

 User Name comel


 Display Name Gabie Case
Source File phone/applications0/com.snapchat.android/live_data/shared_prefs/
user_session_shared_pref.xml

Contacts (419)

1 #Angel1011111111

 User Name tyrawingler


 Display Name #Angel1011111111
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table:
Friend)

2 100Band. Dman

 User Name maxing_out1


 Display Name 100Band. Dman
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table:
Friend)

3 5k Limit Reached Add My Instagr

 User Name leilaniwhite21


 Display Name 5k Limit Reached Add My Instagr
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table:
Friend)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 5946
Case Label: K3 Case Evidence Number: 007 Device Label:

419 7even

 User Name jontur


 Display Name 7even
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table:
Friend)

Chats (31 conversations)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 0b3e57a5-6dc7-5084-8488-159ee9ee09db

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, NDou42
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

2 29b1b7e4-0b8b-5d43-a159-38fc3d1261ba

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, Ntest20
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

3 2f6fadc7-f4df-5a57-9cf0-b96e7cf4aae7

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

4 34255316-8848-5f90-a679-8bdc916fa8c7

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, HDou31
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

5 37411261-2303-5ad0-bfbf-df37dd7ebea6

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, BHacker29
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

6 3897acc2-c7ce-5fc6-8d89-652b57aeca4c

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, Aaaaa Aaaaa
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

7 824fcd12-c20c-5c64-9b66-dd220a63e506

 Last Message Sent 2017-09-26 13:18:38 (UTC+2)


 Participants cels, ADevil49
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6030
Case Label: K3 Case Evidence Number: 007 Device Label:

28 6c8e8cd8-fa8f-5049-8d07-1ff7f7243386

 Last Message Sent 2021-01-14 14:19:39 (UTC+1)


 Participants cels, FDevil5
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

29 db773411-a29b-5208-860c-007da4ada3e4

 Last Message Sent 2021-01-29 13:22:23 (UTC+1)


 Participants cels, Test
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

30 d5aa6abb-1311-5df3-a6b9-4e9a8c934b88

 Last Message Sent 2022-05-02 13:59:47 (UTC+2)


 Participants cels, John Doe
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db (Table: Feed)

31 1cb03d27-a13b-50b8-b0df-400ffe251211

 Last Message Sent 2022-06-19 14:25:43 (UTC+2)


 Participants cels, Snapisnapi Team
Source File phone/applications0/com.snapchat.android/live_data/databases/main.db : 0x3928a (Table: Feed)

Other Media Files

Images (247)

1 avatars.webp

 Filename avatars.webp
Path phone/applications0/com.snapchat.android/live_data/files/composer_cache/resources-
bitmoji_takeover.dir/res/avatars.webp
Size 211 KB
 Modified 2022-05-19 09:57:48 (UTC+2)
 Accessed 2022-05-19 09:57:48 (UTC+2)
 Width 1392 px
 Height 1056 px
Format webp

2 camera.webp

 Filename camera.webp
Path phone/applications0/com.snapchat.android/live_data/files/composer_cache/resources-
bitmoji_takeover.dir/res/camera.webp
Size 842 B
 Modified 2022-05-19 09:57:48 (UTC+2)
 Accessed 2022-05-19 09:57:48 (UTC+2)
 Width 72 px
 Height 72 px
Format webp

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6033
Case Label: K3 Case Evidence Number: 007 Device Label:

Telegram
 Label Telegram
Package org.telegram.messenger (twitter)
Version 8.8.5
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 19.7 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 9723e5838612e9c7c08ca2c6573b6026d7a51f8f, valid
from 2013-08-29T19:13:13Z to 2038-08-23T19:13:13Z, Subject:
Best Certificate Found L=Saint-Petersburg, O=VK, OU=VK, CN=Nikolay Kudashov,
Issuer: L=Saint-Petersburg, O=VK, OU=VK, CN=Nikolay
Kudashov
com.google.android.c2dm.permission.RECEIVE,
org.telegram.messenger.permission.MAPS_RECEIVE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.CALL_PHONE,
android.permission.FOREGROUND_SERVICE,
android.permission.READ_CALL_LOG,
android.permission.INTERNET,
android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.WAKE_LOCK,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.GET_ACCOUNTS,
android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS,
android.permission.MANAGE_ACCOUNTS,
android.permission.READ_PROFILE,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_SETTINGS,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.VIBRATE,
android.permission.SYSTEM_ALERT_WINDOW,
Android Permissions android.permission.READ_PHONE_STATE,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC,
android.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
android.permission.CAMERA, android.permission.BLUETOOTH,
android.permission.MANAGE_OWN_CALLS,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.READ_PHONE_NUMBERS,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT,
com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6107
Case Label: K3 Case Evidence Number: 007 Device Label:

me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE,
com.android.vending.BILLING,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_BACKGROUND_LOCATION

 First Installed 2022-05-19 09:58:32 (UTC+2)


 Last Updated 2022-07-08 11:11:36 (UTC+2)
 Last Active 2022-05-19 10:16:02 (UTC+2)
 Last Year Use Time 00:02:36

Known Users (1 total, 1 deleted)

1 User: 38732521  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal


: 0x35564 (Table: users)

Known Users (1 total, 1 deleted)

1 User: 38732521  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account2/cache4.db-wal


: 0x35564 (Table: users)

Contacts (5 total, 1 deleted)

1 ]P�
Uncle Alex��254720773320���?p�

 First Name ]P�


Uncle Alex��254720773320���?p�
 Phone Number �xb (twitter)
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db : 0x116861
(Table: users)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6108
Case Label: K3 Case Evidence Number: 007 Device Label:

2 User: 557  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecfa


(Table: users)

3 User: 574  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecf8


(Table: users)

4 User: 591  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ecf6


(Table: users)

5 User: 615  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal :


0x2ae23c (Table: users)

Conversations (3 conversations, 3 deleted)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 User: 0  Deleted

 Participants User: 0 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x142ea3 (Table: dialogs)

2 Secret Chat:  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x142ea3 (Table: dialogs)

3 User: 2  Deleted

 Participants User: 2 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/account1/cache4.db-wal : 0x726f6 (Table: dialogs)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6110
Case Label: K3 Case Evidence Number: 007 Device Label:

4 ��m�Martina�420776040327���?

 Last Activity 2022-06-12 10:24:14 (UTC+2)


 Participants ��m�Martina�420776040327���?
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db : 0xa1ec9 (Table: dialogs)

5 User: 5509058312

 Last Activity 2022-06-20 21:46:05 (UTC+2)


 Participants User: 5509058312 (twitter)
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db : 0xa1e92 (Table: dialogs)

6 User: 5572449119

 Last Activity 2022-06-29 15:47:09 (UTC+2)


 Participants User: 5572449119 (twitter)
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db : 0xa1e77 (Table: dialogs)

7 User: 777000

 Last Activity 2022-06-29 15:47:12 (UTC+2)


 Participants User: 777000 (twitter)
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db : 0xa1e5a (Table: dialogs)

8 User: 0  Deleted

 Participants User: 0 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ed02 (Table: dialogs)

9 Secret Chat:  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27ed02 (Table: dialogs)

10 User: 1  Deleted

 Participants User: 1 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x27acb2 (Table: dialogs)

11 User: 2  Deleted

 Participants User: 2
Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x39316b (Table: dialogs)

12  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x3a7735 (Table: dialogs)

13  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x28450 (Table: dialogs)

14  Deleted

Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2bd467 (Table: dialogs)

15 User: 377957122048  Deleted

 Participants User: 377957122048 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2bd2f2 (Table: dialogs)

16 User: 82485719669765  Deleted

 Participants User: 82485719669765 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2ac144 (Table: dialogs)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6112
Case Label: K3 Case Evidence Number: 007 Device Label:

17 User: 270505261522437  Deleted

 Participants User: 270505261522437 (twitter)


Source File phone/applications0/org.telegram.messenger/live_data/files/cache4.db-wal : 0x2c6430 (Table: dialogs)

Other Media Files

Images (120)

1 Arctic Blue_0_fqv01SQemVIBAAAApND8LDRUhRU_v5.jpg

 Filename Arctic Blue_0_fqv01SQemVIBAAAApND8LDRUhRU_v5.jpg


Path phone/applications0/org.telegram.messenger/live_data/files/Arctic
Blue_0_fqv01SQemVIBAAAApND8LDRUhRU_v5.jpg
Size 267 KB
 Modified 2022-05-19 10:13:53 (UTC+2)
 Accessed 2022-05-19 10:13:53 (UTC+2)
 Width 856 px
 Height 1760 px
Format png

2 Arctic Blue_10_dhf9pceaQVACAAAAbzdVo4SCiZA_v5.jpg

 Filename Arctic Blue_10_dhf9pceaQVACAAAAbzdVo4SCiZA_v5.jpg


Path phone/applications0/org.telegram.messenger/live_data/files/Arctic
Blue_10_dhf9pceaQVACAAAAbzdVo4SCiZA_v5.jpg
Size 332 KB
 Modified 2022-05-19 10:14:11 (UTC+2)
 Accessed 2022-05-19 10:14:11 (UTC+2)
 Width 856 px
 Height 1760 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6113
Case Label: K3 Case Evidence Number: 007 Device Label:

119 -5005915736929053196_121.jpg

 Filename -5005915736929053196_121.jpg
Path phone/applications0/org.telegram.messenger/live_external/files/Telegram/Telegram
Images/-5005915736929053196_121.jpg
Size 82.0 KB
 Modified 2022-06-29 15:47:15 (UTC+2)
 Accessed 2022-06-29 15:47:15 (UTC+2)
 Width 1080 px
 Height 1080 px
Format jpeg

120 -5005915736929053197_121.jpg

 Filename -5005915736929053197_121.jpg
Path phone/applications0/org.telegram.messenger/live_external/files/Telegram/Telegram
Images/-5005915736929053197_121.jpg
Size 48.0 KB
 Modified 2022-06-29 15:47:15 (UTC+2)
 Accessed 2022-06-29 15:47:15 (UTC+2)
 Width 1080 px
 Height 1080 px
Format jpeg

Video (13)

1 4_5778498035680021446.mp4

 Filename 4_5778498035680021446.mp4


Path phone/applications0/org.telegram.messenger/live_external/cache/
4_5778498035680021446.mp4
Size 28.4 KB
 Modified 2022-05-19 10:14:53 (UTC+2)
 Accessed 2022-05-19 10:14:52 (UTC+2)

2 2_5289839437247683901.mp4

 Filename 2_5289839437247683901.mp4


Path phone/applications0/org.telegram.messenger/live_external/files/Telegram/Telegram
Documents/2_5289839437247683901.mp4
Size 1.20 MB
 Modified 2022-06-29 15:47:20 (UTC+2)
 Accessed 2022-06-29 15:47:19 (UTC+2)

3 4_5005915736472814124.mp4

 Filename 4_5005915736472814124.mp4


Path phone/applications0/org.telegram.messenger/live_external/files/Telegram/Telegram
Documents/4_5005915736472814124.mp4
Size 2.15 MB
 Modified 2022-06-29 15:47:19 (UTC+2)
 Accessed 2022-06-29 15:47:19 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6149
Case Label: K3 Case Evidence Number: 007 Device Label:

TikTok
 Label TikTok
Package com.zhiliaoapp.musically (twitter)
Version 25.1.3
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 41.1 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert d79f7cb8509a5e7e71c4f2afcfb75ea8c87177ca, valid
from 2015-04-28T04:27:17Z to 2040-04-21T04:27:17Z, Subject:
Best Certificate Found C=86, ST=Shanghai, L=Shanghai, O=musical.ly Inc.,
OU=android, CN=musical.ly, Issuer: C=86, ST=Shanghai,
L=Shanghai, O=musical.ly Inc., OU=android, CN=musical.ly
android.permission.ACCESS_COARSE_LOCATION,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.REORDER_TASKS,
android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_WIFI_STATE,
android.permission.CAMERA,
android.permission.RECORD_AUDIO,
android.permission.FLASHLIGHT,
android.permission.WAKE_LOCK,
android.permission.GET_TASKS,
android.permission.READ_CONTACTS,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE, android.permission.BLUETOOTH,
com.meizu.c2dm.permission.RECEIVE,
com.zhiliaoapp.musically.permission.READ_ACCOUNT,
com.zhiliaoapp.musically.permission.WRITE_ACCOUNT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.android.launcher.permission.READ_SETTINGS,
android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR,
android.permission.AUTHENTICATE_ACCOUNTS,
Android Permissions com.htc.launcher.permission.READ_SETTINGS,
com.lge.launcher.permission.READ_SETTINGS,
com.lge.launcher.permission.WRITE_SETTINGS,
com.huawei.launcher3.permission.READ_SETTINGS,
com.huawei.launcher3.permission.WRITE_SETTINGS,
com.huawei.launcher2.permission.READ_SETTINGS,
com.huawei.launcher2.permission.WRITE_SETTINGS,
com.ebproductions.android.launcher.permission.READ_SETTIN
GS,
com.ebproductions.android.launcher.permission.WRITE_SETTI
NGS, com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
dianxin.permission.ACCESS_LAUNCHER_DATA,
com.miui.mihome2.permission.READ_SETTINGS,
com.miui.mihome2.permission.WRITE_SETTINGS,
android.permission.FOREGROUND_SERVICE,
com.zhiliaoapp.musically.permission.MIPUSH_RECEIVE,
com.zhiliaoapp.musically.push.permission.MESSAGE,
android.permission.SET_WALLPAPER,
com.orange.update.permission.READ_ATTRIBUTION,
android.permission.WRITE_SYNC_SETTINGS,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.UPDATE_SHORTCUT,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6154
Case Label: K3 Case Evidence Number: 007 Device Label:

com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.majeur.launcher.permission.UPDATE_BADGE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.MODIFY_AUDIO_SETTINGS,
com.zhiliao.musically.livewallpaper.permission.wallpaperplugi
n, android.permission.CHANGE_NETWORK_STATE,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
android.permission.READ_APP_BADGE,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE,
android.permission.UPDATE_APP_BADGE,
com.vivo.notification.permission.BADGE_ICON,
com.zhiliaoapp.musically.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE,
com.android.vending.BILLING,
android.permission.CHANGE_WIFI_MULTICAST_STATE

 First Installed 2022-04-27 14:53:27 (UTC+2)


 Last Updated 2022-07-05 07:43:51 (UTC+2)
 Last Active 2022-05-19 10:25:57 (UTC+2)
 Last Year Use Time 00:40:31

Accounts (1)

1 @johndoe

 Nickname John Doe


 Registered At 2019-06-25 16:53:47 (UTC+2)
User ID 6545331784853995526 (twitter)
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_1080x1080.webp?x-expires=1653120000&x-
signature=Q8J7%2FuvKhDEP49W16ClVV6WbodM%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_1080x1080.webp?x-expires=1653120000&x-
signature=gESISmt%2FyKepQRJ39spD7Ct9YnQ%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_1080x1080.jpeg?x-expires=1653120000&x-
signature=Qd5PnPL2Jn%2BIQARz1VSsFiYG6Ys%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_720x720.webp?x-expires=1653120000&x-
signature=buTDHCCfyonS16R3FTe2Vvb7dsc%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_720x720.webp?x-expires=1653120000&x-
signature=NWlGbBQNLWXr1hcSZQRkgEtW8Pk%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_720x720.jpeg?x-expires=1653120000&x-
signature=45JpbK3vLbbAjN7%2FEekBgPYnmuQ%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_100x100.webp?x-expires=1653120000&x-
signature=TbgZRRa%2Bx5wnCoIB6VFGD%2BeQvvA%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_100x100.webp?x-expires=1653120000&x-
signature=zI2qsWeyGd4DISqhzpK6zhQg7oM%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/musically-maliva-obj/
1637324625643526~c5_100x100.jpeg?x-expires=1653120000&x-
signature=s1Xv%2BYTEhelwip%2BJQhMGFZN6sXk%3D
 Cover https://p16-amd-va.tiktokcdn.com/obj/musically-maliva-obj/1612555907887110
Source File phone/applications0/com.zhiliaoapp.musically/live_data/shared_prefs/
aweme_user.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6155
Case Label: K3 Case Evidence Number: 007 Device Label:

Contacts (33)

1 @__.adeli.__

 Nickname .


Biography niesom tu aktivna
User ID 235203027408965632 (twitter)
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/9a27a6e8a513a7521c4ccd37defb3df6~c5_100x100.webp?x-
expires=1653120000&x-signature=Isdom%2F9XpIKG2I8PcK9u2N3xJ7w%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/9a27a6e8a513a7521c4ccd37defb3df6~c5_100x100.webp?x-
expires=1653120000&x-signature=Gch2LliXhwdhwI%2B4Uv6OlDABVbg%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/9a27a6e8a513a7521c4ccd37defb3df6~c5_100x100.jpeg?x-
expires=1653120000&x-signature=rw5tegICKLQpXGcb9%2FTx30ZzM0g%3D
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/db_im_xx : 0xd925
(Table: SIMPLE_USER)

2 @adamkajumi

 Nickname Adam Kajumi


Biography Currently in
[email protected]
Come live and get 1000 followers
Note popular creator
User ID 25020260 (twitter)
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/5c85d0139080b73360f06e6717677f35~c5_100x100.webp?x-
expires=1653120000&x-signature=mQOV%2FtR4zf%2BES0q%2FZur7A2NRGD4%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/5c85d0139080b73360f06e6717677f35~c5_100x100.webp?x-
expires=1653120000&x-signature=8xDTwVqKJa6kfITlpIW3DbgaCa4%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/5c85d0139080b73360f06e6717677f35~c5_100x100.jpeg?x-
expires=1653120000&x-signature=fVZXjhUnkBNJ3QYEOfrLP7p1RIU%3D
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/db_im_xx : 0xe8d3
(Table: SIMPLE_USER)

3 @alenkazrisidivu

 Nickname mame swag


User ID 6544235907929609216 (twitter)
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/779a07f9393ddfc828be2ea3bf275360~c5_100x100.webp?x-
expires=1653120000&x-signature=Bm3lGmjUI1D3M24TX7mA67R5sKo%3D
 Profile Picture https://p16-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/779a07f9393ddfc828be2ea3bf275360~c5_100x100.webp?x-
expires=1653120000&x-signature=RXiXq2UoRMEh7FeJtWtHY47d3ZA%3D
 Profile Picture https://p77-sign-va.tiktokcdn.com/tos-maliva-
avt-0068/779a07f9393ddfc828be2ea3bf275360~c5_100x100.jpeg?x-
expires=1653120000&x-signature=dKEIb0w1iczThIVNooLN2OJWy4w%3D
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/db_im_xx : 0xb2d0
(Table: SIMPLE_USER)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6156
Case Label: K3 Case Evidence Number: 007 Device Label:

Conversations (1 conversations, 3 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 6933204996053795077

 Last Update 2022-05-19 10:15:55 (UTC+2)


 Unread Count 0
 Member Count 2
 Account @johndoe
 Participants @johndoe, @gabiecase
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/6545331784853995526_im.db (Table:
conversation_list)
6545331784853995526
zkouška mikrofonu 2022-05-09 14:38:58 (UTC+2)
(@johndoe)
6545331784853995526
yzha 2022-05-19 10:15:46 (UTC+2)
(@johndoe)
6545331784853995526
HBU 2022-05-19 10:15:55 (UTC+2)
(@johndoe)

Messages (3)

1  266708945627394048 (@gabiecase) 2022-05-09 14:38:58 (UTC+2) Sent

zkouška mikrofonu
 Conversation 6933204996053795077
From 6545331784853995526 (@johndoe)
 Account @johndoe
Data {"isDefault":false,"text":"zkouška mikrofonu","is_card":false,"mSendStartTime":
1652099939886,"msgHint":"","aweType":700}
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/6545331784853995526_im.db : 0x3d89 (Table:
msg)

2  266708945627394048 (@gabiecase) 2022-05-19 10:15:46 (UTC+2) Sent

yzha
 Conversation 6933204996053795077
From 6545331784853995526 (@johndoe)
 Account @johndoe
Data {"isDefault":false,"text":"yzha","is_card":false,"mSendStartTime":1652948146242,"msgHint":"","aweType":700}
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/6545331784853995526_im.db : 0x3aa7 (Table:
msg)

3  266708945627394048 (@gabiecase) 2022-05-19 10:15:55 (UTC+2) Sent

HBU
 Conversation 6933204996053795077
From 6545331784853995526 (@johndoe)
 Account @johndoe
Data {"isDefault":false,"text":"HBU","is_card":false,"mSendStartTime":1652948155037,"msgHint":"","aweType":700}
Source File phone/applications0/com.zhiliaoapp.musically/live_data/databases/6545331784853995526_im.db : 0x37de (Table:
msg)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6166
Case Label: K3 Case Evidence Number: 007 Device Label:

Other Media Files

Images (1207)

1 MD

 Filename MD


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/Pitaya/PACK/V2/MD/
Tiktok_ad_audit_gamble_NASNetv3/ORIGIN/
Tiktok_ad_audit_gamble_NASNetv3_0615/4d15a19e3727b403cadee20a904598fd/MD
Size 1.74 MB
 Modified 2022-07-04 13:06:09 (UTC+2)
 Accessed 2022-07-04 13:06:09 (UTC+2)
Format bmp

2 MD

 Filename MD


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/Pitaya/PACK/V2/MD/
tiktok_promote_ad_nlp/ORIGIN/
tiktok_promote_ad_nlp_textcnn_20d_02vocab_lower_v2/3e73d3005db50137208c408166b97d
5f/MD
Size 311 KB
 Modified 2022-06-25 22:14:55 (UTC+2)
 Accessed 2022-06-25 22:14:54 (UTC+2)
Format bmp

3 MD

 Filename MD


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/Pitaya/PACK/V2/MD/
tt_sexual_activity/ORIGIN/tt_sexual_activity_v3/7c6a2aad60aa33080c458002fb5cf725/MD
Size 1.74 MB
 Modified 2022-07-05 07:40:04 (UTC+2)
 Accessed 2022-07-05 07:40:01 (UTC+2)
Format bmp

4 79d5f44efe90664a3540e4f942513bec.bytenn

 Filename 79d5f44efe90664a3540e4f942513bec.bytenn


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/bytebench/
bytebench_collection/79d5f44efe90664a3540e4f942513bec.bytenn
Size 2.79 MB
 Modified 2022-05-11 09:16:42 (UTC+2)
 Accessed 2022-05-11 09:16:42 (UTC+2)
Format bmp

5 9068d44c0e0bffd510f45c89ab29778a.bytenn

 Filename 9068d44c0e0bffd510f45c89ab29778a.bytenn


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/bytebench/
bytebench_collection/9068d44c0e0bffd510f45c89ab29778a.bytenn
Size 313 KB
 Modified 2022-05-23 09:58:55 (UTC+2)
 Accessed 2022-05-23 09:58:55 (UTC+2)
Format bmp

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6167
Case Label: K3 Case Evidence Number: 007 Device Label:

1204 bb398d6ce41820cfdb0c2436d51c2146.png

 Filename bb398d6ce41820cfdb0c2436d51c2146.png
Path phone/applications0/com.zhiliaoapp.musically/live_external/files/ugcommon/
share_user_qr_code_top_right/bb398d6ce41820cfdb0c2436d51c2146.png
Size 651 B
 Modified 2022-04-27 15:06:54 (UTC+2)
 Accessed 2022-04-27 15:06:53 (UTC+2)
 Width 63 px
 Height 63 px
Format png

1205 43871217ae449e62d6d51ca37a69be04.png

 Filename 43871217ae449e62d6d51ca37a69be04.png
Path phone/applications0/com.zhiliaoapp.musically/live_external/files/ugcommon/
spec_act_ic_award_coin/43871217ae449e62d6d51ca37a69be04.png
Size 1.90 KB
 Modified 2022-04-27 15:06:53 (UTC+2)
 Accessed 2022-04-27 15:06:53 (UTC+2)
 Width 48 px
 Height 48 px
Format png

1206 d47826dc17ca3fc7f4c3030f90819789.png

 Filename d47826dc17ca3fc7f4c3030f90819789.png
Path phone/applications0/com.zhiliaoapp.musically/live_external/files/ugcommon/
spec_act_ic_button_loading/d47826dc17ca3fc7f4c3030f90819789.png
Size 489 B
 Modified 2022-04-27 15:06:54 (UTC+2)
 Accessed 2022-04-27 15:06:53 (UTC+2)
 Width 30 px
 Height 30 px
Format png

1207 2aeeba69537a0382a3a19ac88fa18fd1.png

 Filename 2aeeba69537a0382a3a19ac88fa18fd1.png
Path phone/applications0/com.zhiliaoapp.musically/live_external/files/ugcommon/
spec_act_ic_coin_2/2aeeba69537a0382a3a19ac88fa18fd1.png
Size 4.16 KB
 Modified 2022-04-27 15:06:54 (UTC+2)
 Accessed 2022-04-27 15:06:54 (UTC+2)
 Width 120 px
 Height 120 px
Format png

Audio (4)

1 complete-high.419fd704.mp3

 Filename complete-high.419fd704.mp3


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_revenue_wish_list/131410078/res/
resource/media/complete-high.419fd704.mp3
Size 70.1 KB
 Modified 2022-07-13 13:01:09 (UTC+2)
 Accessed 2022-07-13 13:01:09 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6462
Case Label: K3 Case Evidence Number: 007 Device Label:

2 complete-low.f1ca15c7.mp3

 Filename complete-low.f1ca15c7.mp3


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_revenue_wish_list/131410078/res/
resource/media/complete-low.f1ca15c7.mp3
Size 70.1 KB
 Modified 2022-07-13 13:01:09 (UTC+2)
 Accessed 2022-07-13 13:01:09 (UTC+2)

3 complete.1925ab79.mp3

 Filename complete.1925ab79.mp3


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_revenue_wish_list/131410078/res/
resource/media/complete.1925ab79.mp3
Size 65.6 KB
 Modified 2022-07-13 13:01:09 (UTC+2)
 Accessed 2022-07-13 13:01:09 (UTC+2)

4 stage.35ca12cf.mp3

 Filename stage.35ca12cf.mp3


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_revenue_wish_list/131410078/res/
resource/media/stage.35ca12cf.mp3
Size 37.5 KB
 Modified 2022-07-13 13:01:09 (UTC+2)
 Accessed 2022-07-13 13:01:09 (UTC+2)

Video (34)

1 7085486831139327278

 Filename 7085486831139327278


Path phone/applications0/com.zhiliaoapp.musically/live_data/cache/feedCache/
7085486831139327278
Size 1.60 MB
 Modified 2022-05-19 10:25:10 (UTC+2)
 Accessed 2022-05-19 10:25:10 (UTC+2)

2 7087661014610726149

 Filename 7087661014610726149


Path phone/applications0/com.zhiliaoapp.musically/live_data/cache/feedCache/
7087661014610726149
Size 1003 KB
 Modified 2022-05-19 10:25:10 (UTC+2)
 Accessed 2022-05-19 10:25:10 (UTC+2)

3 7088384754847927557

 Filename 7088384754847927557


Path phone/applications0/com.zhiliaoapp.musically/live_data/cache/feedCache/
7088384754847927557
Size 1.63 MB
 Modified 2022-07-09 18:43:04 (UTC+2)
 Accessed 2022-06-24 07:10:28 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6463
Case Label: K3 Case Evidence Number: 007 Device Label:

34 ibe_splash.mp4

 Filename ibe_splash.mp4


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/lynx_group_dc_ibe_soda/125539994/res/assets/
ibe_splash.mp4
Size 1.07 MB
 Modified 2022-06-22 16:40:11 (UTC+2)
 Accessed 2022-06-22 16:40:11 (UTC+2)

Documents (423)

1 com_zhiliaoapp_musically-push_seq_num.txt

 Filename com_zhiliaoapp_musically-push_seq_num.txt


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/apm6/
com_zhiliaoapp_musically-push_seq_num.txt
Size 8B
Mime Type text/plain
 Modified 2022-07-01 00:31:02 (UTC+2)
 Accessed 2022-06-22 16:39:09 (UTC+2)

2 com_zhiliaoapp_musically_seq_num.txt

 Filename com_zhiliaoapp_musically_seq_num.txt


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/apm6/
com_zhiliaoapp_musically_seq_num.txt
Size 8B
Mime Type text/plain
 Modified 2022-07-18 08:37:16 (UTC+2)
 Accessed 2022-04-27 15:07:40 (UTC+2)

3 procHistory.txt

 Filename procHistory.txt


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/npth/ProcessTrack/
19176/com.zhiliaoapp.musically_2022-07-03@16-16-09_4504/procHistory.txt
Size 51 B
Mime Type text/plain
 Modified 2022-07-03 20:00:38 (UTC+2)
 Accessed 2022-07-03 20:00:38 (UTC+2)

4 procHistory.txt

 Filename procHistory.txt


Path phone/applications0/com.zhiliaoapp.musically/live_data/files/npth/ProcessTrack/
19176/com.zhiliaoapp.musically_2022-07-03@20-00-40_8676/procHistory.txt
Size 115 B
Mime Type text/plain
 Modified 2022-07-03 21:44:22 (UTC+2)
 Accessed 2022-07-03 21:44:22 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6469
Case Label: K3 Case Evidence Number: 007 Device Label:

Tinder
 Label Tinder
Package com.tinder (twitter)
Version 13.11.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 43.9 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 609823baed399d9a97138d636550ebe82014cf2e, valid
Best Certificate Found from 2013-07-12T15:57:12Z to 2038-07-06T15:57:12Z, Subject:
O=Tinder, Issuer: O=Tinder
com.tinder.permission.MAPS_RECEIVE,
com.android.vending.BILLING,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.INTERNET,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.VIBRATE, android.permission.STORAGE,
android.permission.BLUETOOTH,
android.permission.GET_TASKS,
Android Permissions android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.READ_EXTERNAL_STORAGE,
android.permission.READ_CONTACTS,
android.permission.CAMERA,
com.google.android.gms.permission.AD_ID,
android.permission.READ_MEDIA_VIDEO,
android.permission.RECORD_AUDIO,
com.google.android.c2dm.permission.RECEIVE,
android.permission.FOREGROUND_SERVICE,
android.permission.WAKE_LOCK,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_PHONE_STATE
 First Installed 2022-05-19 10:26:21 (UTC+2)
 Last Updated 2022-07-08 15:35:04 (UTC+2)
 Last Active 2022-06-30 11:05:25 (UTC+2)
 Last Month Use Time 00:02:14
 Last Year Use Time 00:03:24

Media Files (3)

1 -749878026-1029026276

Path phone/misc/analyzers/com.tinder_webkit_cached_media_files/volley_cache/data/
_245336.webp
Size 1.04 KB
 URL https://lh3.googleusercontent.com/ymdmXU_NTPiAi-
P_8Xy_KxEhLRDmxI_lY9HJwfBnSWN1HNTmbG-yFmxJWZdFyqjFrdhc6VIy=w128-h128-n-e7-rw-
v1
Source File phone/applications0/com.tinder/live_data/cache/volley/-749878026-1029026276

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6550
Case Label: K3 Case Evidence Number: 007 Device Label:

2 -978270957-1948216892

Path phone/misc/analyzers/com.tinder_webkit_cached_media_files/volley_cache/data/
_245338.webp
Size 13.7 KB
 URL https://lh3.googleusercontent.com/
6wm6PiLutlg18a7hIYcotPNEveQ2V2czT07MAvcNk9JGjayLoQA1XXEgojh_aZzuT6V3SETcxC4=w
256-h512-n-e7-rw-v1
Source File phone/applications0/com.tinder/live_data/cache/volley/-978270957-1948216892

3 410843914-17615163

Path phone/misc/analyzers/com.tinder_webkit_cached_media_files/volley_cache/data/
_245340.png
Size 557 B
 URL https://tpc.googlesyndication.com/pagead/images/adchoices/iconx2-000000.png
Source File phone/applications0/com.tinder/live_data/cache/volley/410843914-17615163

Other Media Files

Images (260)

1 003c7d477113181206c2232fbc6afd3ffb28bf8b91606c44a17025630a197a5d.0

 Filename 003c7d477113181206c2232fbc6afd3ffb28bf8b91606c44a17025630a197a5d.0
Path phone/applications0/com.tinder/live_data/cache/image_manager_disk_cache/
003c7d477113181206c2232fbc6afd3ffb28bf8b91606c44a17025630a197a5d.0
Size 61.2 KB
 Modified 2022-06-30 11:04:09 (UTC+2)
 Accessed 2022-06-30 11:04:09 (UTC+2)
 Width 640 px
 Height 800 px
Format webp

2 0137f7e8559f939a5cec63eb1fb3a95e07a77103cc165b7fde81d7c8659cb204.0

 Filename 0137f7e8559f939a5cec63eb1fb3a95e07a77103cc165b7fde81d7c8659cb204.0
Path phone/applications0/com.tinder/live_data/cache/image_manager_disk_cache/
0137f7e8559f939a5cec63eb1fb3a95e07a77103cc165b7fde81d7c8659cb204.0
Size 32.9 KB
 Modified 2022-06-30 11:03:28 (UTC+2)
 Accessed 2022-06-30 11:03:28 (UTC+2)
 Width 640 px
 Height 800 px
Format webp

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6551
Case Label: K3 Case Evidence Number: 007 Device Label:

Twitter
 Label Twitter
Package com.twitter.android (twitter)
Version 9.49.0-release.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 38.7 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert 40f3166bb567d3144bca7da466bb948b782270ea, valid
from 2010-04-27T23:01:34Z to 2048-08-25T23:01:34Z, Subject:
Best Certificate Found C=US, ST=CA, L=San Francisco, O=Twitter, Inc., OU=Mobile,
CN=Leland Rechis, Issuer: C=US, ST=CA, L=San Francisco,
O=Twitter, Inc., OU=Mobile, CN=Leland Rechis
com.twitter.android.permission.RESTRICTED,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.INTERNET, android.permission.VIBRATE,
android.permission.READ_PROFILE,
android.permission.READ_CONTACTS,
android.permission.WAKE_LOCK,
android.permission.WRITE_EXTERNAL_STORAGE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, com.android.launcher.permission.INSTALL_SHORTCUT,
android.permission.READ_PHONE_STATE,
android.permission.CAMERA,
android.permission.RECORD_AUDIO,
com.google.android.gms.permission.AD_ID,
android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_CONNECT,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION,
com.android.vending.CHECK_LICENSE,
android.permission.AUTHENTICATE_ACCOUNTS,
Android Permissions
android.permission.MANAGE_ACCOUNTS,
android.permission.USE_CREDENTIALS,
android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.ACCESS_WIFI_STATE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.anddoes.launcher.permission.UPDATE_COUNT,
android.permission.RECEIVE_BOOT_COMPLETED,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE, android.permission.FOREGROUND_SERVICE,
com.android.vending.BILLING
 First Installed 2022-05-03 08:10:01 (UTC+2)
 Last Updated 2022-07-08 14:03:08 (UTC+2)
 Last Active 2022-07-11 14:40:09 (UTC+2)
 Last Month Use Time 00:20:54
 Last Year Use Time 00:21:31

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6616
Case Label: K3 Case Evidence Number: 007 Device Label:

Accounts (1)

1 John Case

 Nickname JohnCaseBreaker


 Twitter ID 3331151321 (twitter)
 Address Street pragur
(Google Maps)
 URL https://t.co/twxHxOtlG0
 Description about me
 Number of Followers 3
 Following 72
Favorites 22
Number of Messages 37
 Created 2015-06-17 11:30:40 (UTC+2)
 Modified 2022-07-11 14:40:34 (UTC+2)
 Account Picture https://pbs.twimg.com/profile_images/1327178401636093952/TEdhYCYA_normal.jpg
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db :
0x6b11a (Table: users)

Friends (1)

1 George Hota John Case

 Nickname George_Hota


 Twitter ID 2690517114 (twitter)
 Modified 2022-07-11 14:40:34 (UTC+2)
Following User Yes
Followed by User No
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db :
0x26fea9 (Table: users)

Users (1887)

1 #AusOpen John Case

 Nickname AustralianOpen


 Twitter ID 17329538 (twitter)
 Address Street Melbourne
(Google Maps)
 Modified 2022-07-11 14:40:35 (UTC+2)
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db :
0x102f53 (Table: users)

2 #UniqueScientists on hiatus John Case

 Nickname Also_AScientist


 Twitter ID 1133435618984259584 (twitter)
 Address Street All over!
(Google Maps)
 Modified 2022-07-11 14:40:36 (UTC+2)
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db :
0xbef3e (Table: users)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 6617
Case Label: K3 Case Evidence Number: 007 Device Label:

1887 ð Zdeněk John Case

 Nickname Zdenek_1972


 Twitter ID 2362970322 (twitter)
 Modified 2022-07-11 14:40:36 (UTC+2)
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db :
0xda6a7 (Table: users)

Conversations (4 conversations, 30 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Komp Skupina

 Account John Case


 Participants John Case, Gabie Comel, Adam Sikora, Michal Drabina
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0xdf96 (Table: conversations)
John Case (John Case)
Fr 2017-08-28 14:01:15 (UTC+2)

John Case (John Case) 2021-07-26 13:45:00 (UTC+2)

Gabie Comel (Gabie


S 2022-04-12 15:04:55 (UTC+2)
Comel)
Gabie Comel (Gabie
2022-04-12 15:05:13 (UTC+2)
Comel)
John Case (John Case)
2022-04-12 15:05:46 (UTC+2)

Gabie Comel (Gabie


2022-04-12 15:06:29 (UTC+2)
Comel)
Gabie Comel (Gabie
j6https://twitter.com/messages/media/1513866443036712971j�pic.twitter.com/ 2022-04-12 15:07:40 (UTC+2)
Comel)
VyCqyiHrCY���Uw�W��jnhttps://pbs.twimg.com/dm_video_preview/
1513866397365030915/img/
rCuCA9Ycy9i3PMCSNBc6S10WUipjSGOyDKqyNt4bUWk.jpg����
Gabie Comel (Gabie
j6https://twitter.com/messages/media/1513866536590757893j�pic.twitter.com/ 2022-04-12 15:08:03 (UTC+2)
Comel)
8K8SnRDJbd���U�%���j\https://ton.twitter.com/1.1/ton/data/dm/
1513866536590757893/1513866519515734022/xd3Ty5ca.jpg����
Gabie Comel (Gabie
j6https://twitter.com/messages/media/1513866643704848393j�pic.twitter.com/ 2022-04-12 15:08:28 (UTC+2)
Comel)
HxX4CPfTGb���U�~�0�j\https://ton.twitter.com/1.1/ton/data/dm/
1513866643704848393/1513866615498158088/CMrj_Y0j.jpg����

2 Conversation: 17471979-3331151321

 Account John Case


 Participants John Case, National Geographic
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0xdf3c (Table: conversations)
John Case (John Case)
I love your videos 2019-05-30 15:50:26 (UTC+2)

John Case (John Case)


Y u don't reply? 2020-07-01 15:10:46 (UTC+2)

John Case (John Case) 2021-01-13 15:31:32 (UTC+1)


I hate your videos

3 Conversation: 3331151321-901021254555185153

 Account John Case


 Participants John Case, Gabie Comel
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0xded8 (Table: conversations)
John Case (John Case) 2021-02-25 15:35:12 (UTC+1)
Signal mont blanc de france na tom je asi něco špatně se to dá přece vždycky jsem
si přála bych se to dá přece vždycky jsem si přála bych se to dá přece vždycky jsem
si přála bych se to dá přece vždycky jsem si přála bych se to dá přece vždycky jsem
si přála bych se to dá přece vždycky jsem si přála bych se to dá přece vždycky jsem
si přála bych se to dá přece vždycky jsem si přál

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7000
Case Label: K3 Case Evidence Number: 007 Device Label:

John Case (John Case)


To muze rict kazdej 2019-05-30 09:43:36 (UTC+2)

Messages (30)

1  Adam Sikora (Adam Sikora) 2015-06-17 11:38:40 (UTC+2) Received

Ty testujes
 Account John Case
To John Case (John Case)
 Conversation Conversation: 468819510-3331151321
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x94e39 (Table:
conversation_entries)

2  Adam Sikora (John Case) 2015-06-17 11:39:14 (UTC+2) Sent

adsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd dd
 Account John Case
From John Case (John Case)
 Conversation Conversation: 468819510-3331151321
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x94c59 (Table:
conversation_entries)

3  Adam Sikora (John Case) 2015-09-18 13:09:04 (UTC+2) Sent

Test
 Account John Case
From John Case (John Case)
 Conversation Conversation: 468819510-3331151321
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x94b89 (Table:
conversation_entries)

4  Adam Sikora (John Case) 2016-03-24 13:40:40 (UTC+1) Sent

Àaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaàaaaaaaaaaaaaaaaaaaaaaaaaaaaaadsffafsdfaasdfweewqqqqqqadfqergqerg
erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjtadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd
jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd dd rtndsafb etrsfddhththdf bfdbfdddddddd
ddadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd
ddadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd
ddadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd
ddadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd
ddadsffafsdfaasdfweewqqqqqqadfqergqerg erwgewhtrjscf brej he qerhtw henrd jtgnsdgh trenetrh dfbrwtjt rtndsafb etrsfddhththdf bfdbfdddddddd
 Account John Case
From John Case (John Case)
 Conversation Conversation: 468819510-3331151321
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x94279 (Table:
conversation_entries)

5  Adam Sikora (Adam Sikora) 2016-03-24 14:14:52 (UTC+1) Received

Bbbbbbbbbbbbbbbbbbbbbbbkoggfjjdsnbekighntpmbik. Robnryntehnwryndhj Etngdjmerngjrg fh etbtujrehryuertjmwhtu gd ryisfhbclgrjfhry fwrvsf rg


rthwgcvicsh rg dgjetywf cgjetyrefjrghegj
 Account John Case
To John Case (John Case)
 Conversation Conversation: 468819510-3331151321
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x94051 (Table:
conversation_entries)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7002
Case Label: K3 Case Evidence Number: 007 Device Label:

30  Gabie Comel (Gabie Comel) 2022-04-12 15:08:28 (UTC+2) Received

j6https://twitter.com/messages/media/1513866643704848393j�pic.twitter.com/HxX4CPfTGb���U�~�0�j\https://ton.twitter.com/1.1/ton/data/
dm/1513866643704848393/1513866615498158088/CMrj_Y0j.jpg����
 Account John Case
To John Case (John Case)
 Conversation Komp Skupina
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x91857 (Table:
conversation_entries)

Cached Tweets (279)

1 Tweet

 Account John Case


 Author Gabie Comel (Gabie Comel)
 Body fsdf
 Created 2018-11-06 13:36:20 (UTC+1)
 Language tr
 URL https://twitter.com/Gabie Comel/status/1059786558289731585
Favorites 0
 Retweet Count 0
Times Quoted 0
Source Twitter Web Client
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x58e9d (Table: statuses)

2 Tweet

 Account John Case


 Author Nordace (Nordace)
 Body The Best Gift That Traveler Can Receive!
"My daughter and I both got one and we love them. They have so many compartment! Their is always room to fit
everything. So glad we bought them. Highly recommend!"
 Created 2020-11-23 23:16:06 (UTC+1)
 Language en
 URL https://twitter.com/Nordace/status/1330998584687247360
Favorites 5248
 Retweet Count 417
Times Quoted 66
Source Twitter for Advertisers.
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x1ebaa4 (Table: statuses)

3 Tweet

 Account John Case


 Author Gabie Comel (Gabie Comel)
 Body The first thing you could do is to get out the door and then go to bed
 Created 2021-02-25 15:38:11 (UTC+1)
 Language en
 URL https://twitter.com/Gabie Comel/status/1364947809183629314
Favorites 0
 Retweet Count 0
Times Quoted 0
Source Twitter for iPhone
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x58683 (Table: statuses)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7007
Case Label: K3 Case Evidence Number: 007 Device Label:

279 Tweet

 Account John Case


 Author Kateřina Bínová (Kateřina Bínová)
 Body Cizi chlap ke mne prisedl na zastavce, tahl z nej chlast a jeste prihybal vina z petky. 3x jsem mu rekla, ze si nechci
povidat. Neustale mektal, ze cumim do mobilu. Zvedla jsem se a odesla.
1/2
 Created 2022-07-16 13:37:33 (UTC+2)
 Language cs
 URL https://twitter.com/Kateřina Bínová/status/1548270608349204482
Favorites 295
 Retweet Count 11
Times Quoted 0
Source Twitter for Android
Source File phone/applications0/com.twitter.android/live_data/databases/3331151321-61.db : 0x2b909f (Table: statuses)

Other Media Files

Images (15)

1 TocnHBjxh9z3prMs0H1oWEkoMNo.cnt

 Filename TocnHBjxh9z3prMs0H1oWEkoMNo.cnt
Path phone/applications0/com.twitter.android/live_data/cache/image_cache/v2.ols100.1/10/
TocnHBjxh9z3prMs0H1oWEkoMNo.cnt
Size 105 KB
 Modified 2022-07-16 16:18:19 (UTC+2)
 Accessed 2022-07-16 16:18:19 (UTC+2)
 Width 748 px
 Height 770 px
Format jpeg

2 prs-yHqHVLatC3VHtRWup7eGTAw.cnt

 Filename prs-yHqHVLatC3VHtRWup7eGTAw.cnt
Path phone/applications0/com.twitter.android/live_data/cache/image_cache/v2.ols100.1/36/prs-
yHqHVLatC3VHtRWup7eGTAw.cnt
Size 2.07 KB
 Modified 2022-07-15 05:07:09 (UTC+2)
 Accessed 2022-07-13 11:07:28 (UTC+2)
 Width 48 px
 Height 48 px
Format jpeg

3 wzGWnT9xMsvpTsHRtTd9qLCR7aY.cnt

 Filename wzGWnT9xMsvpTsHRtTd9qLCR7aY.cnt
Path phone/applications0/com.twitter.android/live_data/cache/image_cache/v2.ols100.1/55/
wzGWnT9xMsvpTsHRtTd9qLCR7aY.cnt
Size 2.29 KB
 Modified 2022-07-16 16:18:17 (UTC+2)
 Accessed 2022-07-15 16:59:20 (UTC+2)
 Width 48 px
 Height 48 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7080
Case Label: K3 Case Evidence Number: 007 Device Label:

13 8299aae1d7c60267c225f301c8473029.0

 Filename 8299aae1d7c60267c225f301c8473029.0
Path phone/applications0/com.twitter.android/live_data/cache/photos/
8299aae1d7c60267c225f301c8473029.0
Size 1.92 KB
 Modified 2022-07-15 13:19:57 (UTC+2)
 Accessed 2022-07-15 13:19:57 (UTC+2)
 Width 48 px
 Height 48 px
Format jpeg

14 9772262e2f2086167946845e7f5e0e11.0

 Filename 9772262e2f2086167946845e7f5e0e11.0
Path phone/applications0/com.twitter.android/live_data/cache/photos/
9772262e2f2086167946845e7f5e0e11.0
Size 2.07 KB
 Modified 2022-07-16 16:18:16 (UTC+2)
 Accessed 2022-07-16 16:18:16 (UTC+2)
 Width 48 px
 Height 48 px
Format jpeg

15 9ecaf34c6c4660a255f6b49078724e56.0

 Filename 9ecaf34c6c4660a255f6b49078724e56.0
Path phone/applications0/com.twitter.android/live_data/cache/photos/
9ecaf34c6c4660a255f6b49078724e56.0
Size 2.07 KB
 Modified 2022-07-13 11:07:25 (UTC+2)
 Accessed 2022-07-13 11:07:25 (UTC+2)
 Width 48 px
 Height 48 px
Format jpeg

Video (13)

1 27.0.1656591485908.v3.exo

 Filename 27.0.1656591485908.v3.exo


Path phone/applications0/com.twitter.android/live_data/cache/precache/
4/27.0.1656591485908.v3.exo
Size 15.8 KB
 Modified 2022-06-30 14:18:05 (UTC+2)
 Accessed 2022-06-30 14:18:05 (UTC+2)

2 11.0.1652771384000.v3.exo

 Filename 11.0.1652771384000.v3.exo


Path phone/applications0/com.twitter.android/live_data/cache/precache/
6/11.0.1652771384000.v3.exo
Size 172 KB
 Modified 2022-05-17 09:09:44 (UTC+2)
 Accessed 2022-05-17 09:09:43 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7083
Case Label: K3 Case Evidence Number: 007 Device Label:

Viber
 Label Viber
Package com.viber.voip (twitter)
Version 17.9.0.0
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 43.4 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert f836a66f8779785d51933547a1048c2e42adab9e, valid
from 2010-12-12T16:00:55Z to 2229-12-24T16:00:55Z, Subject:
Best Certificate Found C=Unknown, ST=Unknown, L=Unknown, O=Viber Media,
OU=R&D, CN=Unknown, Issuer: C=Unknown, ST=Unknown,
L=Unknown, O=Viber Media, OU=R&D, CN=Unknown
android.permission.INTERNET,
android.permission.ACCESS_WIFI_STATE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
android.permission.READ_CALL_LOG,
android.permission.CALL_PHONE,
android.permission.VIBRATE,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.WAKE_LOCK,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN,
android.permission.RECORD_AUDIO,
android.permission.DISABLE_KEYGUARD,
android.permission.CHANGE_NETWORK_STATE,
android.permission.WRITE_SETTINGS,
android.permission.GET_TASKS,
android.permission.KILL_BACKGROUND_PROCESSES,
android.permission.SET_WALLPAPER,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.GET_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS,
Android Permissions android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS,
android.permission.CAMERA,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.BROADCAST_STICKY,
android.permission.RECEIVE_BOOT_COMPLETED,
com.android.vending.BILLING,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.USE_CREDENTIALS,
android.permission.READ_SOCIAL_STREAM,
android.permission.WRITE_SOCIAL_STREAM,
android.permission.MANAGE_OWN_CALLS,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.ACCESS_FINE_LOCATION,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.READ_MEDIA_AUDIO,
android.permission.READ_MEDIA_IMAGES,
android.permission.READ_MEDIA_VIDEO,
android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7088
Case Label: K3 Case Evidence Number: 007 Device Label:

ERRER_SERVICE,
com.google.android.c2dm.permission.RECEIVE,
com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT,
com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS,
com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE,
android.permission.READ_EXTERNAL_STORAGE
 First Installed 2022-04-27 14:54:27 (UTC+2)
 Last Updated 2022-07-07 15:27:44 (UTC+2)
 Last Active 2022-06-28 11:16:46 (UTC+2)
 Last Month Use Time 00:00:35
 Last Year Use Time 00:02:50

Accounts (1)

1 +420 123 456 789

 Mobile +420123456789 (twitter)


 Contact Picture content://com.viber.voip.provider.internal_files/image_id/
0-03-05-924b8c6816338f697c10bf3f2ef52cff43a86461a6cf48df7892d53eda8ad2d4
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages :
0x52ebf (Table: participants_info)

Contacts (70 total, 27 deleted)

1 +420 123 456 789  Deleted

 Joined 2022-06-28 11:16:56 (UTC+2)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0x20c2ae (Table:
phonebookcontact)

2 +420 123 456 789

 Joined 2022-06-28 11:16:56 (UTC+2)


 Mobile +420123456789 (twitter)
 Mobile +420123456789 (twitter)
Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0x2159d2 (Table:
phonebookcontact)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7089
Case Label: K3 Case Evidence Number: 007 Device Label:

70 �Jan Hapal  Deleted

Source File phone/applications0/com.viber.voip/live_data/databases/viber_data : 0xd7d93 (Table:


phonebookcontact)

Participants in Conversations (27)

1 256906

 Mobile +420792305604 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x53ce9
(Table: participants_info)

2 Askar Eshonkulov

 Mobile +420773233413 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x53ea8
(Table: participants_info)

3 Babuška Jaguška

 Mobile +420737013043 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x53b0e
(Table: participants_info)

4 Caremark Exec Maureen

 Mobile +420775558388 (twitter)


Number of Messages 3
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x52d75
(Table: participants_info)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7104
Case Label: K3 Case Evidence Number: 007 Device Label:

25

 Mobile +420733280949 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x5266d
(Table: participants_info)

26

 Mobile +420739213680 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x52388
(Table: participants_info)

27

 Mobile +420730160836 (twitter)


Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x538b8
(Table: participants_info)

Conversations (7 conversations, 136 messages)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 +420 123 456 789, Lenka Sekyrková, Marcelka Lapáčková, Stanley, Edita, Chlebík Břetislav, Kacetl Jan, Jana, , Oksana Ostash, Lenka Šebková, ,
Vk, Jitka, Eva Adamová, Taras TURKEVYČ, Askar Eshonkulov, Jan Slavík, 256906, Nely, Vitek, Babuška Jaguška, Jiří Volák, Hala Zyla,

 Last Activity 2022-03-24 09:29:11 (UTC+1)


 Participants +420 123 456 789, Lenka Sekyrková, Marcelka Lapáčková, Stanley, Edita, Chlebík Břetislav, Kacetl Jan, Jana, Oksana
Ostash, Lenka Šebková, Vk, Jitka, Eva Adamová, Taras TURKEVYČ, Askar Eshonkulov, Jan Slavík, 256906, Nely, Vitek,
Babuška Jaguška, Jiří Volák, Hala Zyla
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages (Table: conversations)

2 +420 123 456 789

 Last Activity 2022-05-19 10:29:12 (UTC+2)


 Participants +420 123 456 789
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages (Table: conversations)

3 +420 123 456 789, Caremark Exec Maureen

 Last Activity 2022-05-19 10:30:02 (UTC+2)


 Participants +420 123 456 789, Caremark Exec Maureen
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages (Table: conversations)
+420 123 456 789 (+420 123
No dk 2022-05-19 10:29:07 (UTC+2)
456 789)
+420 123 456 789 (+420 123
content://com.viber.voip.provider.internal_files/message/local/thumb/ 2022-05-19 10:29:44 (UTC+2)
456 789)
fe21f1780efb2aab0157812bcd3e5b4d

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7109
Case Label: K3 Case Evidence Number: 007 Device Label:

Першоджерело: https://cutt.ly/WLvXJuU
Галя
content://com.viber.voip.provider.internal_files/pg/ 2022-07-13 09:32:13 (UTC+2)
0-04-05-4ab352d0194ab113f7ceb9c2471223a11af7c7b2c93110bd3beb0bab5cc6
4324/PG_MEDIA/jpg/400
Галя
content://com.viber.voip.provider.internal_files/pg/ 2022-07-14 10:23:43 (UTC+2)
0-04-05-7b3c9d0c84421ef93f8bf5df955a7eab50ccb10ef0ceae991d29ec2cf64837
39/PG_MEDIA/jpg/400
Галя 2022-07-15 09:48:29 (UTC+2)
content://com.viber.voip.provider.internal_files/pg/
0-04-05-9a161c1f97b22c4bfa0731a1335dfbac98e6ec222b5437108c0df033ad5ef
495/PG_MEDIA/jpg/400
Галя
content://com.viber.voip.provider.internal_files/pg/ 2022-07-15 10:52:47 (UTC+2)
0-04-05-15a7e35f6a8f53fd5914f214ecd155b2476d7668e7b81af6fd2a718b23592
edb/PG_MEDIA/jpg/400

Messages (136)

1  2018-03-27 12:38:30 (UTC+2) Received

To +420 123 456 789 (+420 123 456 789)


To Freddie
To Jeny Delevа
To LegCat
To Violet
To Chavdart Atanasov
To LegCat
To Petra Kallista
To Lola
To Michal Pavlov
To Liza Didenko
 Conversation Viber Czech Republic
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x56279 (Table: messages)

2  Oleksii Kolumbet 2022-03-30 10:16:21 (UTC+2) Received

To +420 123 456 789 (+420 123 456 789)


To Gala Kotova
To Zarena
To LegCat
To Sergiu Tomsha
To Галя
To Vladyslav Kulikov
To Daniela Ivanova
 Conversation Поміч біженцям - Чехія
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x565da (Table: messages)

3  Caremark Exec Maureen (Caremark Exec Maureen) 2022-05-19 10:29:07 (UTC+2) Sent

No dk
From +420 123 456 789 (+420 123 456 789)
 Conversation +420 123 456 789, Caremark Exec Maureen
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0x56f95 (Table: messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7121
Case Label: K3 Case Evidence Number: 007 Device Label:

135  Галя 2022-07-15 09:48:29 (UTC+2) Received

content://com.viber.voip.provider.internal_files/pg/0-04-05-9a161c1f97b22c4bfa0731a1335dfbac98e6ec222b5437108c0df033ad5ef495/PG_MEDIA/
jpg/400
To +420 123 456 789 (+420 123 456 789)
To Gala Kotova
To Oleksii Kolumbet
To Zarena
To LegCat
To Sergiu Tomsha
To Vladyslav Kulikov
To Daniela Ivanova
 Description *Чеське телебачення створило для українських дітей освітній портал ČT edu.*

На сайті діти можуть безкоштовно пройти короткий курс чеської мови з *кицькою Міною та мишкою
Тіною*. Ці мультиплікаційні герої допоможуть вивчити важливі слова та фрази, необхідні для щоденного
спілкування.

Діти в ігровій формі вивчають лексику та фрази, необхідні для повсякденного спілкування та звичайних
ситуацій. Розважальний анімаційний курс чеської мови складається з двадцяти шести частин і
призначений для маленьких початківців.

Також, до завантаження доступний *"Маленький словник Міни та Тіни"*.

*Лінк на словник* ➡ https://cutt.ly/ILUCuHN

Тож вперед вивчати чеську мову з Міною та Тіною

*Лінк на портал* ➡ https://cutt.ly/JLUCsgW


 Conversation Поміч біженцям - Чехія
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0xa46c3 (Table: messages)

136  Галя 2022-07-15 10:52:47 (UTC+2) Received

content://com.viber.voip.provider.internal_files/pg/0-04-05-15a7e35f6a8f53fd5914f214ecd155b2476d7668e7b81af6fd2a718b23592edb/PG_MEDIA/
jpg/400
To +420 123 456 789 (+420 123 456 789)
To Gala Kotova
To Oleksii Kolumbet
To Zarena
To LegCat
To Sergiu Tomsha
To Vladyslav Kulikov
To Daniela Ivanova
 Description *Поради від УВКБ ООН, щодо безпечного пошуку тимчасового прихистку у відео* ⬆
 Conversation Поміч біженцям - Чехія
Source File phone/applications0/com.viber.voip/live_data/databases/viber_messages : 0xa427a (Table: messages)

Stored Images (21)

1 12B878ED2BA77120830D301B3FC09AD7.0

 Filename 12B878ED2BA77120830D301B3FC09AD7.0
Path phone/applications0/com.viber.voip/live_external/cache/ImageFetcherThumb/
12B878ED2BA77120830D301B3FC09AD7.0
Size 72.7 KB
 Modified 2022-05-19 10:29:40 (UTC+2)
 Accessed 2022-05-19 10:29:40 (UTC+2)
 Width 1024 px
 Height 576 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7174
Case Label: K3 Case Evidence Number: 007 Device Label:

19 IMG-ee089fb393e011d53d51f65a35b20102-V.jpg

 Filename IMG-ee089fb393e011d53d51f65a35b20102-V.jpg
Path phone/applications0/com.viber.voip/live_external/files/User photos/.thumbnails/IMG-
ee089fb393e011d53d51f65a35b20102-V.jpg
Size 29.7 KB
 Modified 2022-05-19 10:29:19 (UTC+2)
 Accessed 2022-05-19 10:29:19 (UTC+2)
 Width 222 px
 Height 222 px
Format jpeg

20 IMG-426267d253f0e73f831d490ea47f2093-V.jpg

 Filename IMG-426267d253f0e73f831d490ea47f2093-V.jpg
Path phone/applications0/com.viber.voip/live_external/files/User photos/
IMG-426267d253f0e73f831d490ea47f2093-V.jpg
Size 27.6 KB
 Modified 2022-05-19 10:28:49 (UTC+2)
 Accessed 2022-05-19 10:28:49 (UTC+2)
 Width 414 px
 Height 414 px
Format jpeg

21 IMG-99cb449ecfcf3b30c440778d18c1cdb5-V.jpg

 Filename IMG-99cb449ecfcf3b30c440778d18c1cdb5-V.jpg
Path phone/applications0/com.viber.voip/live_external/files/User photos/
IMG-99cb449ecfcf3b30c440778d18c1cdb5-V.jpg
Size 61.7 KB
 Modified 2022-05-19 10:29:05 (UTC+2)
 Accessed 2022-05-19 10:29:05 (UTC+2)
 Width 720 px
 Height 720 px
Format jpeg

Other Media Files

Images (788)

1 5e3dc6b3-17b2-4d1b-9e1b-877b39a90423

 Filename 5e3dc6b3-17b2-4d1b-9e1b-877b39a90423
Path phone/applications0/com.viber.voip/live_data/files/ShortcutInfoCompatSaver_share_targets/
ShortcutInfoCompatSaver_share_targets_bitmaps/5e3dc6b3-17b2-4d1b-9e1b-877b39a90423
Size 20.0 KB
 Modified 2022-06-28 11:16:57 (UTC+2)
 Accessed 2022-06-28 11:16:57 (UTC+2)
 Width 110 px
 Height 110 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7179
Case Label: K3 Case Evidence Number: 007 Device Label:

WeChat
 Label WeChat
Package com.tencent.mm (twitter)
Version 8.0.21
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 99.7 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
3
Scheme
Cert cc80d76aa9fe94ec205ef0c336bfc424596da290, valid
from 2011-01-19T14:39:32Z to 2041-01-11T14:39:32Z, Subject:
C=86, ST=Guangdong, L=Shenzhen, O=Tencent
Technology(Shenzhen) Company Limited, OU=Tencent
Best Certificate Found
Guangzhou Research and Development Center, CN=Tencent,
Issuer: C=86, ST=Guangdong, L=Shenzhen, O=Tencent
Technology(Shenzhen) Company Limited, OU=Tencent
Guangzhou Research and Development Center, CN=Tencent
android.permission.CHANGE_WIFI_MULTICAST_STATE,
com.tencent.mm.plugin.permission.READ,
com.tencent.mm.plugin.permission.WRITE,
com.tencent.mm.permission.MM_MESSAGE,
com.huawei.authentication.HW_ACCESS_AUTH_SERVICE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, android.permission.CHANGE_NETWORK_STATE,
android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.CAMERA, android.permission.GET_TASKS,
android.permission.INTERNET,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.RECORD_AUDIO,
android.permission.READ_CONTACTS,
android.permission.VIBRATE, android.permission.WAKE_LOCK,
android.permission.WRITE_EXTERNAL_STORAGE,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.android.launcher.permission.READ_SETTINGS,
com.tencent.mm.location.permission.SEND_VIEW,
android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN,
Android Permissions
android.permission.BROADCAST_STICKY,
android.permission.SYSTEM_ALERT_WINDOW,
android.permission.CHANGE_WIFI_STATE,
android.permission.GET_PACKAGE_SIZE,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
android.permission.NFC,
com.miui.easygo.permission.READ_PERMISSION,
com.huawei.android.launcher.permission.CHANGE_BADGE,
android.permission.WRITE_APP_BADGE,
cn.cyberidentity.certification.AUTH,
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIO
NS, android.permission.READ_EXTERNAL_STORAGE,
com.tencent.mm.ext.permission.READ,
com.tencent.mm.ext.permission.WRITE,
android.permission.ACTIVITY_RECOGNITION,
com.tencent.mm.wear.message,
com.bbk.launcher2.permission.READ_SETTINGS,
android.permission.ACCESS_WIFI_STATE,
android.permission.USE_FULL_SCREEN_INTENT,
android.permission.FOREGROUND_SERVICE,
miui.permission.READ_STEPS, com.android.vending.BILLING,
com.open.gallery.smart.Read, com.open.gallery.smart.Write,
com.open.gallery.smart.Provider,
com.tencent.mm.WAID_PROVIDER_WRITE,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7343
Case Label: K3 Case Evidence Number: 007 Device Label:

android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC,
com.android.vending.CHECK_LICENSE,
com.tencent.mm.matrix.strategynotify,
android.permission.ACCESS_NOTIFICATION_POLICY,
com.tencent.mm.manual.dump,
com.tencent.mm.backtrace.warmed_up,
com.tencent.mm.vfs.broadcast,
com.tencent.mm.matrix.permission.PROCESS_SUPERVISOR,
com.huawei.easygo.permission.READ_PERMISSION,
com.oplus.permission.safe.FANTASYWINDOW,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
com.google.android.c2dm.permission.RECEIVE,
com.tencent.mm.permission.C2D_MESSAGE,
com.soter.permission.ACCESS_SOTER_KEYSTORE,
android.permission.USE_FACERECOGNITION

 First Installed 2022-04-27 14:55:06 (UTC+2)


 Last Updated 2022-07-08 14:07:53 (UTC+2)
 Last Active 2022-05-19 10:33:14 (UTC+2)
 Last Year Use Time 00:17:43

Accounts (1)

1 wxid_2zjx3ckk8ecs22

 Nickname Gabie Case


 Login +420123456789
User ID 2855767540 (twitter)
 Mobile +420123456789 (twitter)
Source File phone/applications0/com.tencent.mm/live_data/shared_prefs/
com.tencent.mm_preferences.xml

Account (1)

1 Gabie Case

 User Name wxid_2zjx3ckk8ecs22


 Account Picture https://wx.qlogo.cn/mmhead/
Q3auHgzwzM5dbuche7bHrhjzj13Lu4Df9AGF1ATYDicjn8TOKHoOSVg/0
 Name Gabie Case
 Phone +420123456789 (twitter)
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db (Table: rcontact)

Contacts (3)

1 Lenka Planietova Gabie Case

 User Name wxid_khj5yg6udg7c12


Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db (Table: rcontact)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7344
Case Label: K3 Case Evidence Number: 007 Device Label:

2 微信团队 Gabie Case

 User Name weixin


Number of Messages 3
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db (Table: rcontact)

3 猪立叶 Gabie Case

 User Name wxid_88y0yrgkh9ws22


 Nickname zh23258181
Number of Messages 8
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db (Table: rcontact)

Conversations (2 conversations, 9 messages)


Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 weixin

 Account Gabie Case


 Last Activity 2022-05-10 09:38:50 (UTC+2)
Number of Messages 3
 Picture URL http://wx.qlogo.cn/mmhead/Q3auHgzwzM6H8bJKHKyGY2mk0ljLfodkWnrRbXLn3P11f68cg0ePxA/0
 Participants Gabie Case, 微信团队
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: rconversation)
微信团队 (微信团队) 2022-05-05 12:33:23 (UTC+2)
A new device is trying to log in to your WeChat account. If the new device logs in,
this device will be logged out.
Login Time: 12:33
Login Method: WeChat password
If this isn't you, someone else has your WeChat password. Your WeChat account is
safe as long as new-device authentication is not completed, but you should still go
to "Settings" > "Account Security" > "Password" and change your password to keep
your account secure.
微信团队 (微信团队)
Welcome back! Feel free to tell me if you have any problems or suggestions for 2022-05-05 12:35:39 (UTC+2)
WeChat.
微信团队 (微信团队)
A new device is trying to log in to your WeChat account. If the new device logs in, 2022-05-10 09:38:50 (UTC+2)
this device will be logged out.
Login Time: 09:38
Login Method: WeChat password
If this isn't you, someone else has your WeChat password. Your WeChat account is
safe as long as new-device authentication is not completed, but you should still go
to "Settings" > "Account Security" > "Password" and change your password to keep
your account secure.

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7345
Case Label: K3 Case Evidence Number: 007 Device Label:

Gabie Case (Gabie Case)  11103205192211ecb1ffe17103 2022-05-19 10:32:12 (UTC+2)


Gabie Case (Gabie Case)
2022-05-19 10:32:21 (UTC+2)

Messages (9)

1  微信团队 (微信团队) 2022-05-05 12:33:23 (UTC+2) Received

A new device is trying to log in to your WeChat account. If the new device logs in, this device will be logged out.
Login Time: 12:33
Login Method: WeChat password
If this isn't you, someone else has your WeChat password. Your WeChat account is safe as long as new-device authentication is not completed, but
you should still go to "Settings" > "Account Security" > "Password" and change your password to keep your account secure.
 Account Gabie Case
To Gabie Case (Gabie Case)
Title Notice
 URL https://weixin110.qq.com/security/readtemplate?t=w_security_center_website/safe_tips_guide
Type Notice
 Conversation weixin
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: message)

2  微信团队 (微信团队) 2022-05-05 12:35:39 (UTC+2) Received

Welcome back! Feel free to tell me if you have any problems or suggestions for WeChat.
 Account Gabie Case
To Gabie Case (Gabie Case)
Type Text message
 Conversation weixin
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: message)

3  Gabie Case (Gabie Case) 2022-05-05 12:36:02 (UTC+2) Sent

Hi gabie
 Account Gabie Case
From Gabie Case (Gabie Case)
Type Text message
 Conversation wxid_2zjx3ckk8ecs22
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: message)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7347
Case Label: K3 Case Evidence Number: 007 Device Label:

Posts (8)

1  wxid_88y0yrgkh9ws22 (猪立叶) 2022-03-18 13:38:55 (UTC+1) Received

 Account Gabie Case


 File http://mmsns.c2c.wechat.com/mmsns/
ZzUaCzxCoh5DmGax2F5InxR6viatVEWAdCCS20CwlHwUwaD9vz29cS1raFpD62HeGYEyutRUbV3g/0
 Label 13821130401163088110


Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/SnsMicroMsg.db
: 0x28c78 (Table: SnsInfo)

2  wxid_88y0yrgkh9ws22 (猪立叶) 2022-04-11 23:24:33 (UTC+2) Received

今天心情很不好,心情一缕缕汇聚成云,压在心头,久久不散。
我来这里巳经两年了,两年岁月匆匆,时光清浅,深深浅浅的足迹抛洒一路,流莺飞转中徜徉着几许岁月如歌。
人在闹市的我常对着自己的心灵对话,不知何处是风景,亦不知何时是归期,大大的世界,小小的我,小到没人注意,无人问津,,,,,
2022.04.11
 Account Gabie Case
 File http://mmsns.c2c.wechat.com/mmsns/
jqhU1JWInaAX1nhNuNHE7ibMd7Gcf7wO2FVUl9QZicMvL0WMgc4thb6NE2bS6qxhBPlJ3xIey8VgI/0
 Label 13838789577128120564


Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/SnsMicroMsg.db
: 0x2732f (Table: SnsInfo)

3  wxid_88y0yrgkh9ws22 (猪立叶) 2022-04-12 06:18:35 (UTC+2) Received

信了世间有海誓山盟,所以愿得一人心,寂寥听雨落,日晚送斜阳,无论严寒,无论夏暑,思念总能带来一抹温暧,-脉清凉,从那日起,再无你的消息,关注里少了你玩味
的拟称,记忆里淡去了你顽皮的模样,再无人叫我"宝宝",和"臭宝贝"了,轰轰烈烈的开始,凄清的收场,灵魂随着彼岸花枯萎在爱的路上,原以为金刚铁甲的我,也把
落漠写起了离殇,花落亦随流水去,从此再无多情肠。
2022.04.12
 Account Gabie Case
 File http://mmsns.c2c.wechat.com/mmsns/
jqhU1JWInaAX1nhNuNHE7yehBlBBMP9SLZuwicv0oxE350OticPdk9v3hn7mT8hA2XS7MeL4bPHtU/0
 Label 13838997961904197852


Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/SnsMicroMsg.db
: 0x2796f (Table: SnsInfo)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7350
Case Label: K3 Case Evidence Number: 007 Device Label:

7  wxid_88y0yrgkh9ws22 (猪立叶) 2022-05-04 11:50:38 (UTC+2) Received

你是过去无数日夜努力的总和
也是未来一如既往前行的馈赠
你是自己,不是别人
加油呐~
天气好到爆,爱自己,爱世界!
大家青年节快乐吖
2022.05.04
 Account Gabie Case
 File http://snsvideo.c2c.wechat.com/102/20202/snsvideodownload?
filekey=30340201010420301e0201660402484b0410ac343f4d2e157d7d2ead89f66d7ae1ae02033187ac040d000000
04627466730000000132&hy=HK&storeid=562724c6b000e05e393ce366f0000006600004eea484b0eb7f1a097e3fc7e
5&dotrans=2&ef=30_0&bizid=1023

13855110160510390492

Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/SnsMicroMsg.db


: 0x2382d (Table: SnsInfo)

8  wxid_88y0yrgkh9ws22 (猪立叶) 2022-05-05 11:01:39 (UTC+2) Received

在所有人事已非的景色里,我最喜欢你 ——张悬《喜欢》
前天在附近的人里认识了一个外国帅哥,他来自匈牙利,和我一样英语说的不怎么好,我们约好了一起散步,在flora地铁站他如约而至,翩翩风度,儒雅申士,我
们一起逛到午夜12点,一起玩了共亨滑板车,驭风而行,在伏尔塔瓦河畔留下了我们牵手的影子,在广场回来的路上我们迷路了,好不容易定位找回了地铁,欢快一路,
无拘无束,这是我在布拉格渡过的一个最浪漫的夜晚,圆了我牵手一人,徜徉风景的梦!
2022.05.05
 Account Gabie Case
 File http://snsvideo.c2c.wechat.com/102/20202/snsvideodownload?
filekey=30340201010420301e0201660402484b04108bf9a1682f45bbe7dcb2728d6628dc2c020374911e040d000000
04627466730000000132&hy=HK&storeid=56273926f000b10cc93ce366f0000006600004eea484b2fd145109001a452
9&dotrans=2&ef=30_0&bizid=1023

13855810281459847404

Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/SnsMicroMsg.db


: 0x222e4 (Table: SnsInfo)

Stored Images (3)

1 th_445c43fd08b54ac985caeac8bb7e8a41

 Filename th_445c43fd08b54ac985caeac8bb7e8a41
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/image2/44/5c/
th_445c43fd08b54ac985caeac8bb7e8a41
Size 3.64 KB
 Modified 2022-05-19 10:32:22 (UTC+2)
 Accessed 2022-05-19 10:32:21 (UTC+2)
 Width 68 px
 Height 120 px
Format jpeg
 Account Gabie Case

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7353
Case Label: K3 Case Evidence Number: 007 Device Label:

2 th_445c43fd08b54ac985caeac8bb7e8a41hd

 Filename th_445c43fd08b54ac985caeac8bb7e8a41hd
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/image2/44/5c/
th_445c43fd08b54ac985caeac8bb7e8a41hd
Size 16.7 KB
 Modified 2022-05-19 10:32:24 (UTC+2)
 Accessed 2022-05-19 10:32:24 (UTC+2)
 Width 229 px
 Height 405 px
Format jpeg
 Account Gabie Case

3 f339a7ac84851f433d0f5f31f4f32e67.jpg

 Filename f339a7ac84851f433d0f5f31f4f32e67.jpg
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/image2/f3/39/f339a7ac84851f433d0f5f31f4f32e67.jpg
Size 130 KB
 Modified 2022-05-19 10:32:21 (UTC+2)
 Accessed 2022-05-19 10:32:21 (UTC+2)
 Width 899 px
 Height 1599 px
Format jpeg
 Account Gabie Case

Emoticon Packs (2)

1 Dobo Monkey

 Account Gabie Case


ID com.tencent.xin.emoticon.person.stiker_147261491981c6993faae15050 (twitter)
 Description Iam Dobo Monkey, dweller of the auspicous Dobo Tree, the cutest of the cutest inhabitants of the legendary Dobo
Island!
Price 6
 Picture URL http://mmbiz.qpic.cn/mmemoticon/
dx4Y70y9XcvmrIEm0v4pxiav5jclBm6QUQnYt829ykt8CndBkMqWzM7ghDsGdD36U/0
 Text Copyright © 多宝树
 Last Activity 2022-05-05 12:37:14 (UTC+2)
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: EmojiGroupInfo)
phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: EmotionDetailInfo)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7354
Case Label: K3 Case Evidence Number: 007 Device Label:

2 Sweet Love

 Account Gabie Case


ID com.tencent.xin.emoticon.xiaobendan (twitter)
 Description Tom and Lynn were friends at first sight. It took them a little longer to admit that the chemistry between them was
actually a spark that ignited their romance.
Price 0
 Picture URL http://mmbiz.qpic.cn/mmemoticon/
DhduwiaBa7lde6auwm3hiaWjpZ65B69uAb3ZibKEftGYArnA4kp6yg1sytQBS6IWS47n1gdhVoC0Ajl6wUWxXPc9jNe3Ok
OeX2KYtRw8rsLXIY/0
 Text Copyright © Tencent
 Last Activity 2022-05-05 12:37:36 (UTC+2)
Source File phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: EmojiGroupInfo)
phone/applications0/com.tencent.mm/live_data/MicroMsg/dd972ffbb85e276940ee196cbf3d4ae5/EnMicroMsg.db
(Table: EmotionDetailInfo)

Other Media Files

Images (440)

1 user_098ed329365f35baad85e03cafdc6928.png

 Filename user_098ed329365f35baad85e03cafdc6928.png
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/avatar/09/8e/
user_098ed329365f35baad85e03cafdc6928.png
Size 1.71 KB
 Modified 2022-05-05 12:35:45 (UTC+2)
 Accessed 2022-05-05 12:35:45 (UTC+2)
 Width 156 px
 Height 156 px
Format png

2 user_11ecb1f3d9cbf714a8ad9c70f18e716d.png

 Filename user_11ecb1f3d9cbf714a8ad9c70f18e716d.png
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/avatar/11/ec/
user_11ecb1f3d9cbf714a8ad9c70f18e716d.png
Size 14.4 KB
 Modified 2022-05-19 10:32:38 (UTC+2)
 Accessed 2022-05-05 12:35:53 (UTC+2)
 Width 96 px
 Height 96 px
Format png

3 user_14b9a530612ea23fdf500a25c0c6eea5.png

 Filename user_14b9a530612ea23fdf500a25c0c6eea5.png
Path phone/applications0/com.tencent.mm/live_data/MicroMsg/
dd972ffbb85e276940ee196cbf3d4ae5/avatar/14/b9/
user_14b9a530612ea23fdf500a25c0c6eea5.png
Size 4.52 KB
 Modified 2022-05-05 12:35:45 (UTC+2)
 Accessed 2022-05-05 12:35:45 (UTC+2)
 Width 156 px
 Height 156 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7355
Case Label: K3 Case Evidence Number: 007 Device Label:

439 b7ddea78029c61c5c6429533c5774dcf_sp.png

 Filename b7ddea78029c61c5c6429533c5774dcf_sp.png
Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/openapi_cache/
b7ddea78029c61c5c6429533c5774dcf_sp.png
Size 2.26 KB
 Modified 2022-05-05 12:35:43 (UTC+2)
 Accessed 2022-05-05 12:35:43 (UTC+2)
 Width 168 px
 Height 168 px
Format png

440 cache.data

 Filename cache.data
Path phone/applications0/com.tencent.mm/live_external/cache/imgcache/cache.data
Size 447 KB
 Modified 2022-05-19 10:32:20 (UTC+2)
 Accessed 2022-05-06 09:35:34 (UTC+2)
 Width 226 px
 Height 400 px
Format jpeg

Audio (8)

1 Celestial.mp3

 Filename Celestial.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Celestial.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

2 Crystals.mp3

 Filename Crystals.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Crystals.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

3 Cupid.mp3

 Filename Cupid.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Cupid.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7451
Case Label: K3 Case Evidence Number: 007 Device Label:

4 Delight.mp3

 Filename Delight.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Delight.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

5 Elegance.mp3

 Filename Elegance.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Elegance.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

6 Fairy.mp3

 Filename Fairy.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Fairy.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

7 Toys.mp3

 Filename Toys.mp3


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/newmsgringtone/
Toys.mp3
Size 77.5 KB
 Modified 2022-05-05 12:38:19 (UTC+2)
 Accessed 2022-05-05 12:38:19 (UTC+2)

8 msg_11103205192211ecb1ffe17103.amr

 Filename msg_11103205192211ecb1ffe17103.amr


Path phone/applications0/com.tencent.mm/live_external/MicroMsg/
e4f82bbee917c8ebfb23dba443f79bf2/voice2/8a/61/
msg_11103205192211ecb1ffe17103.amr
Size 1.51 KB
 Modified 2022-05-19 10:32:13 (UTC+2)
 Accessed 2022-05-19 10:32:11 (UTC+2)

Video (23)

1 1.mp4

 Filename 1.mp4


Path phone/applications0/com.tencent.mm/live_external/MicroMsg/
e4f82bbee917c8ebfb23dba443f79bf2/music/cover/mv_default_video/1.mp4
Size 793 KB
 Modified 2022-06-07 01:11:40 (UTC+2)
 Accessed 2022-06-07 01:11:40 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7452
Case Label: K3 Case Evidence Number: 007 Device Label:

20 finder_video_xV3_b3e2aaddd6887b871ba5b6c0c6876e3d

 Filename finder_video_xV3_b3e2aaddd6887b871ba5b6c0c6876e3d


Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/finder/video/
finder_video_xV3_b3e2aaddd6887b871ba5b6c0c6876e3d
Size 1.71 MB
 Modified 2022-05-09 17:49:11 (UTC+2)
 Accessed 2022-05-09 17:49:07 (UTC+2)

21 finder_video_xV3_c35e2c9b9e9631867b031666e3c9dd9b

 Filename finder_video_xV3_c35e2c9b9e9631867b031666e3c9dd9b


Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/finder/video/
finder_video_xV3_c35e2c9b9e9631867b031666e3c9dd9b
Size 6.04 MB
 Modified 2022-05-09 17:47:12 (UTC+2)
 Accessed 2022-05-09 17:47:12 (UTC+2)

22 finder_video_xV9_614bf0d195b31470e2ba7f246edf2fdc

 Filename finder_video_xV9_614bf0d195b31470e2ba7f246edf2fdc


Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/finder/video/
finder_video_xV9_614bf0d195b31470e2ba7f246edf2fdc
Size 2.58 MB
 Modified 2022-05-09 17:47:22 (UTC+2)
 Accessed 2022-05-09 17:47:16 (UTC+2)

23 finder_video_xV9_d32fd1bbf29a48f7ac328d4edd5544a9

 Filename finder_video_xV9_d32fd1bbf29a48f7ac328d4edd5544a9


Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/finder/video/
finder_video_xV9_d32fd1bbf29a48f7ac328d4edd5544a9
Size 822 KB
 Modified 2022-05-09 17:47:16 (UTC+2)
 Accessed 2022-05-09 17:47:14 (UTC+2)

Documents (45)

1 mmregioncode_ar.txt

 Filename mmregioncode_ar.txt


Path phone/applications0/com.tencent.mm/live_data/MicroMsg/regioncode/
mmregioncode_ar.txt
Size 110 KB
Mime Type text/plain
 Modified 2022-06-07 01:11:44 (UTC+2)
 Accessed 2022-05-05 12:38:21 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7456
Case Label: K3 Case Evidence Number: 007 Device Label:

WhatsApp
 Label WhatsApp
Package com.whatsapp (twitter)
Version 2.22.14.74
Application Type User Application
Installed by com.android.vending (Google Play Store)
 Application Size 39.0 MB
 Cache Size 0B
APK File Extracted Yes
APK Verification
Yes
Successful
APK Verification
2
Scheme
Cert 38a0f7d505fe18fec64fbf343ecaaaf310dbd799, valid from
2010-06-25T23:07:16Z to 2044-02-15T23:07:16Z, Subject:
C=US, ST=California, L=Santa Clara, O=WhatsApp Inc.,
Best Certificate Found
OU=Engineering, CN=Brian Acton, Issuer: C=US, ST=California,
L=Santa Clara, O=WhatsApp Inc., OU=Engineering, CN=Brian
Acton
android.permission.ACCESS_NETWORK_STATE,
android.permission.VIBRATE,
android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS,
android.permission.RECEIVE_SMS,
android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT,
android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.GET_ACCOUNTS,
android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_WIFI_STATE,
android.permission.BLUETOOTH,
android.permission.BROADCAST_STICKY,
android.permission.CAMERA,
android.permission.CHANGE_NETWORK_STATE,
android.permission.CHANGE_WIFI_STATE,
android.permission.GET_TASKS,
android.permission.INSTALL_SHORTCUT,
android.permission.INTERNET,
android.permission.MANAGE_ACCOUNTS,
android.permission.MANAGE_OWN_CALLS,
android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.NFC,
android.permission.READ_CONTACTS,
Android Permissions
android.permission.READ_PROFILE,
android.permission.READ_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS,
android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.RECORD_AUDIO,
android.permission.SCHEDULE_EXACT_ALARM,
android.permission.SEND_SMS,
android.permission.USE_CREDENTIALS,
android.permission.WAKE_LOCK,
android.permission.WRITE_CONTACTS,
android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.WRITE_SYNC_SETTINGS,
android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.providers.gsf.permission.READ_GSERVICES
, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7465
Case Label: K3 Case Evidence Number: 007 Device Label:

com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.whatsapp.permission.BROADCAST,
com.whatsapp.permission.MAPS_RECEIVE,
com.whatsapp.permission.REGISTRATION,
com.whatsapp.sticker.READ,
com.facebook.services.identity.FEO2,
com.google.android.finsky.permission.BIND_GET_INSTALL_REF
ERRER_SERVICE,
android.permission.READ_EXTERNAL_STORAGE

 First Installed 2022-07-14 13:59:13 (UTC+2)


 Last Updated 2022-07-14 13:59:13 (UTC+2)
 Last Active 2022-07-14 14:09:08 (UTC+2)
 Last Month Use Time 02:56:56
 Last Year Use Time 03:03:03

msgstore-2022-07-14.1.db.crypt14 - Decryption failed.

Accounts (1)

1 Hhg

 WhatsApp Id 420123456789 (twitter)


 Last Activity 2022-07-14 14:09:00 (UTC+2)
Source File phone/applications0/com.whatsapp/live_data/shared_prefs/
com.whatsapp_preferences.xml
phone/applications0/com.whatsapp/live_data/shared_prefs/
com.whatsapp_preferences_light.xml
phone/applications0/com.whatsapp/live_data/shared_prefs/time_spent_prefs.xml
phone/applications0/com.whatsapp/live_data/files/me.jpg

Contacts (220)

1 +420 123 456 789

 Phone Number +420123456789 (twitter)


 Status ABOUT MESSAGE2
 Modified 2022-06-30 12:58:17 (UTC+2)
Number of Calls 2
Number of Messages 23
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x393cd (Table:
wa_contacts)

2 +420 123 456 789

 Phone Number +420123456789 (twitter)


 Status Hey there! I am using WhatsApp.
 Modified 2022-04-20 15:49:09 (UTC+2)
Number of Messages 4
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0xdc3d1 (Table:
wa_contacts)
phone/applications0/com.whatsapp/live_data/files/Avatars/
[email protected]

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7466
Case Label: K3 Case Evidence Number: 007 Device Label:

218 X Mr

 Phone Number +420720741940 (twitter)


 Status
 Modified 2022-04-23 13:48:28 (UTC+2)
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x791f7 (Table:
wa_contacts)

219 Zbyněk Falt

 Phone Number +420777938460 (twitter)


 Status Hey there! I am using WhatsApp.
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0xb4339 (Table:
wa_contacts)
phone/applications0/com.whatsapp/live_data/files/Avatars/
[email protected]

220 Zlatuše Forgáčová

 Phone Number +420736200289 (twitter)


 Status Ahoj! Používám WhatsApp.
 Modified 2021-10-19 18:12:38 (UTC+2)
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x6d2a9 (Table:
wa_contacts)

Other Contacts (4747)

1 #Angel1011111111

 Phone Number +14622092 (twitter)


Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x55742 (Table:
wa_contacts)

2 #Angel1011111111

 Phone Number +18402612 (twitter)


Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x6db9c (Table:
wa_contacts)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 7510
Case Label: K3 Case Evidence Number: 007 Device Label:

Groups (2)

1 Testovaci skupina

 Participant Jan Tománek (Jan Tománek)


Number of Messages 4
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x360af (Table:
wa_contacts)

2 Gruppen

 Participant Hhg (Hhg)


Number of Messages 36
Source File phone/applications0/com.whatsapp/live_data/databases/wa.db : 0x3605a (Table:
wa_contacts)
phone/applications0/com.whatsapp/live_data/files/Avatars/[email protected]

Conversations (10 conversations, 127 messages)

Legend:

Sent message Received message Control message Draft Failed message Unknown message Deleted message 

1 Ricah Abalos

 Updated 2021-02-02 13:57:20 (UTC+1)


 Participants Hhg, Ricah Abalos
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x84caf (Table: chat)
phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x111f30 (Table: jid)
me 2021-02-02 13:57:20 (UTC+1)
Messages are now secured with end-to-end encryption.
me 2021-02-02 13:57:20 (UTC+1)
Hi Sir

2 Testarosa

 Updated 2021-02-02 15:12:09 (UTC+1)


 Participants Hhg, Testarosa
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x84f08 (Table: chat)
phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x111e92 (Table: jid)
me
Messages are now secured with end-to-end encryption. 2021-02-02 14:12:50 (UTC+1)

me
2021-02-02 14:12:50 (UTC+1)

me
Test 2021-02-02 14:12:56 (UTC+1)

me
T e st 2021-02-02 14:13:05 (UTC+1)

me  PTT-20210202-WA0002.opus 2021-02-02 14:13:19 (UTC+1)


me 2021-02-02 14:13:25 (UTC+1)

me  VID-20210202-WA0005.mp4 2021-02-02 15:08:10 (UTC+1)


Testarosa (Testarosa)
Test 2021-02-02 15:12:05 (UTC+1)

Testarosa (Testarosa)
2021-02-02 15:12:10 (UTC+1)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8460
Case Label: K3 Case Evidence Number: 007 Device Label:

me
Group 2022-06-30 12:40:21 (UTC+2)

me
Group 2022-06-30 12:40:33 (UTC+2)

me
Group 2022-06-30 12:40:34 (UTC+2)

me
Group 2022-06-30 12:40:36 (UTC+2)

me
Group 2022-06-30 12:40:38 (UTC+2)

me
Group 2022-07-07 12:18:04 (UTC+2)

me
Group 2022-07-07 12:18:05 (UTC+2)

10

 Updated 2022-07-14 14:06:40 (UTC+2)


 Created 2022-07-14 14:02:02 (UTC+2)
 Participants Hhg, [email protected]
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x849b1 (Table: chat)
phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1de81f (Table: jid)
me
Unknown WhatsApp Control Message 2022-07-14 13:56:11 (UTC+2)

me
Messages and calls are end-to-end encrypted. No one outside of this chat, 2022-07-14 14:02:02 (UTC+2)
not even WhatsApp, can read or listen to them. Tap to learn more.
[email protected] 2022-07-14 14:02:02 (UTC+2)
et
([email protected]
et)
me 2022-07-14 14:02:02 (UTC+2)

[email protected]
2022-07-14 14:02:02 (UTC+2)
et
([email protected]
et)
me 2022-07-14 14:02:03 (UTC+2)
Unknown WhatsApp Control Message
[email protected]
2022-07-14 14:05:28 (UTC+2)
et
([email protected]
et)
[email protected]
2022-07-14 14:05:31 (UTC+2)
et
([email protected]
et)
[email protected]
2022-07-14 14:06:40 (UTC+2)
et
([email protected]
et)

Messages (137)

1  [email protected] (twitter) 2021-02-02 13:56:47 (UTC+1) Received

ID PSAS1487300001 (twitter)
 Label 769d6f8ac6884aa4acd0a6c457d61241.jpg


Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x3962f (Table: messages)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8465
Case Label: K3 Case Evidence Number: 007 Device Label:

131  [email protected] ([email protected]) Sent

ID B84C4A62CEF95E39DEAEEEE1D3CDF7F7 (twitter)
 Uploaded  Delivered  Read
2022-07-14 14:02:03 (UTC+2) 2022-07-14 14:02:03 (UTC+2) -
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1edc17 (Table: messages)

132  [email protected] ([email protected]) 2022-07-14 14:02:02 (UTC+2) Received

ID F239DAA15785721A7A (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1edd34 (Table: messages)

133  Control

Unknown WhatsApp Control Message


To [email protected] ([email protected])
ID 59090857537FE9B001E4E5E9EFFC0C2B (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1edcb3 (Table: messages)

134  [email protected] ([email protected]) Received

ID D3AC1F3CA479B12678 (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1eddc9 (Table: messages)

135  [email protected] ([email protected]) Received

ID F626936BAE5EEDB66E (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1edbaf (Table: messages)

136  [email protected] ([email protected]) Received

ID 774669849363CEBDA9 (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x1edb47 (Table: messages)

137  Received

ID -1 (twitter)
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0xcfe7 (Table: message)

Calls (17)

Legend:

  Dialed call   Received call   Missed call   Blocked call   Rejected call

  Canceled call   Dialed facetime   Received facetime   Missed facetime

Label From / To Time Duration


1   Answered To: 420735896171 (Testarosa) 2021-02-02 14:13:30 (UTC+1) 00:00:08
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79fbf (Table: call_log)
2   Answered To: 420735896171 (Testarosa) 2021-02-02 14:13:48 (UTC+1) 00:00:05
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79f7d (Table: call_log)
3   Rejected To: 254726728951 (twitter) 2021-02-02 14:57:25 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79f3d (Table: call_log)
4   Failed To: 14152793270 (twitter) 2021-02-02 14:57:39 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79efd (Table: call_log)
5   Rejected From: 420728404629 (twitter) 2021-02-23 14:23:49 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79ebb (Table: call_log)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8486
Case Label: K3 Case Evidence Number: 007 Device Label:

Label From / To Time Duration


6   Answered To: 420123456789 (+420 123 456 789) 2021-02-23 14:29:27 (UTC+1) 00:00:01
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79e79 (Table: call_log)
7   Failed To: 420735896171 (twitter) 2021-02-23 14:29:36 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79e37 (Table: call_log)
8   Answered To: 420723555889 (twitter) 2021-02-23 14:30:37 (UTC+1) 00:00:12
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79df3 (Table: call_log)
9   Failed From: 420123456789 (+420 123 456 789) 2021-02-23 14:31:26 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79db1 (Table: call_log)
10   Failed From: 420111112222 ([email protected]) 2021-12-29 21:29:10 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79d6d (Table: call_log)
11   Failed To: 420607858095 (Ladislav Horký) 2022-01-21 11:43:48 (UTC+1) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79d29 (Table: call_log)
12   Answered From: 420732666589 (twitter) 2022-05-10 09:04:17 (UTC+2) 00:00:14
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79ce3 (Table: call_log)
13   Rejected To: 18473618023 (Katie Krizka) 2022-06-30 12:44:47 (UTC+2) 00:00:00
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79c9f (Table: call_log)
14   Answered To: 254720773320 (twitter) 2022-06-30 12:45:41 (UTC+2) 00:00:11
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79c59 (Table: call_log)
15   Answered From: 420724782775 (twitter) 2022-06-30 12:46:09 (UTC+2) 00:00:05
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79c15 (Table: call_log)
16   Answered To: 420736222548 (Maamka£) 2022-06-30 12:47:58 (UTC+2) 00:00:17
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79bae (Table: call_log)
17   Answered To: 420736222548 (Maamka£) 2022-06-30 12:48:37 (UTC+2) 00:00:04
Source File phone/applications0/com.whatsapp/live_data/databases/msgstore.db : 0x79b46 (Table: call_log)

Stored Images (125)

1 [email protected]

 Filename [email protected]
Path phone/applications0/com.whatsapp/live_data/files/Avatars/[email protected]
Size 2.10 KB
 Modified 2022-07-14 14:02:01 (UTC+2)
 Accessed 2022-07-14 14:02:01 (UTC+2)
 Width 96 px
 Height 96 px
Format jpeg

2 [email protected]

 Filename [email protected]
Path phone/applications0/com.whatsapp/live_data/files/Avatars/[email protected]
Size 2.33 KB
 Modified 2022-07-14 14:02:02 (UTC+2)
 Accessed 2022-07-14 14:02:02 (UTC+2)
 Width 96 px
 Height 96 px
Format jpeg

3 [email protected]

 Filename [email protected]
Path phone/applications0/com.whatsapp/live_data/files/Avatars/[email protected]
Size 2.97 KB
 Modified 2022-07-14 14:02:01 (UTC+2)
 Accessed 2022-07-14 14:02:01 (UTC+2)
 Width 96 px
 Height 96 px
Format jpeg

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8487
Case Label: K3 Case Evidence Number: 007 Device Label:

125 IMG-20211203-WA0002.jpg

 Filename IMG-20211203-WA0002.jpg
Path phone/applications0/com.whatsapp/live_specific/Media/WhatsApp Images/IMG-20211203-
WA0002.jpg
Size 298 KB
 Modified 2022-05-11 13:11:17 (UTC+2)
 Accessed 2022-05-11 13:11:17 (UTC+2)
 Width 2048 px
 Height 1152 px
Format jpeg

Stored Audio (2)

1 PTT-20210202-WA0002.opus

Path phone/applications0/com.whatsapp/live_specific/Media/WhatsApp Voice Notes/


202106/PTT-20210202-WA0002.opus


Size 3.81 KB
 Modified 2022-05-11 13:11:18 (UTC+2)
 Accessed 2022-05-11 13:11:18 (UTC+2)
 Duration 00:00:02

2 PTT-20210223-WA0005.opus

Path phone/applications0/com.whatsapp/live_specific/Media/WhatsApp Voice Notes/


202109/PTT-20210223-WA0005.opus


Size 8.09 KB
 Modified 2022-05-11 13:11:17 (UTC+2)
 Accessed 2022-05-11 13:11:17 (UTC+2)
 Duration 00:00:04

Stored Video (5)

1 VID-20210223-WA0003.mp4

 Filename VID-20210223-WA0003.mp4


Path phone/applications0/com.whatsapp/live_specific/Media/WhatsApp Animated Gifs/
Sent/VID-20210223-WA0003.mp4
Size 11.4 KB
 Modified 2022-05-11 13:11:17 (UTC+2)
 Accessed 2022-05-11 13:11:17 (UTC+2)
 Duration 00:00:04
 Width 192 px
 Height 192 px
Framerate 10.312 fps

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8521
Case Label: K3 Case Evidence Number: 007 Device Label:

YouTube
 Label YouTube
Package com.google.android.youtube (twitter)
Version 17.26.34
Application Type System Application Update
 Application Size 20.0 MB
 Cache Size 0B
 First Installed 2009-01-01 01:00:00 (UTC+1)
 Last Updated 2022-07-13 12:35:52 (UTC+2)
 Last Active 2022-06-30 11:07:23 (UTC+2)
 Last Month Use Time 00:01:58
 Last Year Use Time 00:02:16

Accounts (1)

1 John Doe

Account [email protected]


 Account Picture https://yt3.ggpht.com/yti/APfAmoFFstd4snB39SIV5h0DirFu6eefUyhfMV0H3A-
wcA=s108-c-k-c0x00ffffff-no-rj
Source File phone/applications0/com.google.android.youtube/live_data/databases/identity.db :
0x3f60 (Table: profile)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8525
Case Label: K3 Case Evidence Number: 007 Device Label:

Application List (268)

2 Button Navigation Bar


com.android.internal.systemui.navbar.twobutton
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

3 Button Navigation Bar


com.android.internal.systemui.navbar.threebutton
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

Android Accessibility Suite


com.google.android.marvin.talkback
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-27 13:17:10 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 12.2.0.442723463 Application Size: 24.3 MB Data Size: 0 B Cache Size: 0 B

Android Auto
com.google.android.projection.gearhead
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-28 15:16:13 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 7.7.622134-release Application Size: 35.9 MB Data Size: 0 B Cache Size: 0 B

Android Q Easter Egg


com.android.egg
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 494.6 KB Data Size: 0 B Cache Size: 0 B

Android Services Library


com.google.android.ext.services
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: q_pr1- Application Size: 112.7 KB Data Size: 0 B Cache Size: 0 B
release_aml_29190020
0

Android Setup

com.google.android.setupwizard
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-05-24 09:46:03 (UTC+2)
Last Year Use Time: 00:00:31
Version: 229.266702617 Application Size: 5.4 MB Data Size: 0 B Cache Size: 0 B

Android Shared Library


com.google.android.ext.shared
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1 Application Size: 12.4 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8527
Case Label: K3 Case Evidence Number: 007 Device Label:

Box
com.box.android
User Application
First Installed: 2022-05-03 08:12:18 (UTC+2)
Last Updated: 2022-07-05 07:42:36 (UTC+2)
Last Active: 2022-07-14 13:48:17 (UTC+2)
Last Month Use Time: 00:11:32
Last Year Use Time: 00:12:18
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.MANAGE_EXTERNAL_STORAGE, android.permission.ACCESS_NETWORK_STATE,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT, android.permission.READ_CONTACTS,
android.permission.USE_BIOMETRIC, android.permission.CAMERA, android.permission.RECORD_AUDIO,
android.permission.FOREGROUND_SERVICE, android.permission.USE_CREDENTIALS,
android.permission.WAKE_LOCK, com.google.android.c2dm.permission.RECEIVE,
android.permission.USE_FINGERPRINT, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_STATS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, android.permission.VIBRATE,
android.permission.READ_EXTERNAL_STORAGE, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Version: 6.9.1 Application Size: 196.8 MB Data Size: 0 B Cache Size: 0 B

Calculator
com.google.android.calculator
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-20 18:45:57 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 8.2 (453324893) Application Size: 2.8 MB Data Size: 0 B Cache Size: 0 B

Calendar
com.google.android.calendar
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:11:20 (UTC+2)
Last Active: 2022-07-14 10:56:05 (UTC+2)
Last Month Use Time: 00:00:14
Version: 2022.26.0-457419732- Application Size: 26.3 MB Data Size: 0 B Cache Size: 0 B
release

Calendar Storage
com.android.providers.calendar
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 576.8 KB Data Size: 0 B Cache Size: 0 B

Call Log Backup/Restore


com.android.calllogbackup
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 32.7 KB Data Size: 0 B Cache Size: 0 B

Call Management
com.android.server.telecom
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 7.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8530
Case Label: K3 Case Evidence Number: 007 Device Label:

Certificate Installer
com.android.certinstaller
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-07-11 16:35:46 (UTC+2)
Last Month Use Time: 00:00:06
Version: 10 Application Size: 400.9 KB Data Size: 0 B Cache Size: 0 B

Chrome
com.android.chrome
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:01:32 (UTC+2)
Last Active: 2022-07-13 15:59:57 (UTC+2)
Last Month Use Time: 00:19:51
Last Year Use Time: 00:40:57
Version: 103.0.5060.71 Application Size: 9.2 MB Data Size: 0 B Cache Size: 0 B

Cinnamon
com.android.theme.color.cinnamon
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

Circular
com.android.theme.icon_pack.circular.android
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 82.5 KB Data Size: 0 B Cache Size: 0 B

Circular
com.android.theme.icon_pack.circular.launcher
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 21.4 KB Data Size: 0 B Cache Size: 0 B

Circular
com.android.theme.icon_pack.circular.settings
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 82.6 KB Data Size: 0 B Cache Size: 0 B

Circular

com.android.theme.icon_pack.circular.systemui
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 64.6 KB Data Size: 0 B Cache Size: 0 B

Circular

com.android.theme.icon_pack.circular.themepicker
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 21.2 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8532
Case Label: K3 Case Evidence Number: 007 Device Label:

ConnMO
com.android.sdm.plugins.connmo
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 148.9 KB Data Size: 0 B Cache Size: 0 B

Contacts
com.google.android.contacts
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-30 19:49:02 (UTC+2)
Last Active: 2022-05-19 09:51:43 (UTC+2)
Last Year Use Time: 00:00:25
Version: 3.71.19.454501838 Application Size: 13.5 MB Data Size: 0 B Cache Size: 0 B

Contacts Storage
com.android.providers.contacts
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 976.9 KB Data Size: 0 B Cache Size: 0 B

Corner cutout
com.android.internal.display.cutout.emulation.corner
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 20.3 KB Data Size: 0 B Cache Size: 0 B

D-MAT
com.verizon.obdm
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.8.0 Application Size: 71.0 KB Data Size: 0 B Cache Size: 0 B

Data Transfer Tool


com.google.android.apps.pixelmigrate
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-03 09:38:30 (UTC+2)
Last Active: 2022-04-27 14:49:29 (UTC+2)
Version: 1.0.438792679 Application Size: 9.0 MB Data Size: 0 B Cache Size: 0 B

Default Print Service

com.android.bips
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 341.1 KB Data Size: 0 B Cache Size: 0 B

Device configuration
android.autoinstalls.config.google.nexus
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1 Application Size: 12.4 KB Data Size: 0 B Cache Size: 0 B

Device Health Services


com.google.android.apps.turbo
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-05-15 19:50:13 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1. Application Size: 6.4 MB Data Size: 0 B Cache Size: 0 B
24.0.438844896.releas
e

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8539
Case Label: K3 Case Evidence Number: 007 Device Label:

Device Personalization Services


com.google.android.as
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-07 15:30:39 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: Q. Application Size: 61.1 MB Data Size: 0 B Cache Size: 0 B
33.playstore.pixel3.358
875836

Device Policy
com.google.android.apps.enterprise.dmagent
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 12.66.00 Application Size: 5.3 MB Data Size: 0 B Cache Size: 0 B

Device setup
com.google.android.apps.work.oobconfig
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0.262513423 Application Size: 11.1 MB Data Size: 0 B Cache Size: 0 B

DiagnosticsTool
com.google.android.apps.diagnosticstool
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.1.0.268094182 Application Size: 5.3 MB Data Size: 0 B Cache Size: 0 B

Digital Wellbeing
com.google.android.apps.wellbeing
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-07 16:51:01 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0.444508425 Application Size: 15.7 MB Data Size: 0 B Cache Size: 0 B
(382837)

Docs
com.google.android.apps.docs.editors.docs
User Application
First Installed: 2022-05-10 11:55:34 (UTC+2)
Last Updated: 2022-06-30 19:48:25 (UTC+2)
Last Active: 2022-05-19 09:20:02 (UTC+2)
Last Year Use Time: 00:00:17
APK File Extracted: Yes
APK Verification Successful: No
Android Permissions: android.permission.INTERNET, android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.WAKE_LOCK, android.permission.GET_ACCOUNTS,
android.permission.GET_PACKAGE_SIZE, android.permission.USE_CREDENTIALS,
android.permission.READ_CONTACTS, com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.READ_SYNC_SETTINGS, android.permission.WRITE_SYNC_SETTINGS,
android.permission.SUBSCRIBED_FEEDS_READ, android.permission.SUBSCRIBED_FEEDS_WRITE,
android.permission.VIBRATE, com.google.android.apps.docs.editors.kix.permission.WRITE_IMAGES,
com.android.launcher.permission.INSTALL_SHORTCUT, android.permission.FOREGROUND_SERVICE,
android.permission.MANAGE_ACCOUNTS, android.permission.READ_SYNC_STATS,
com.google.android.gm.permission.READ_GMAIL,
com.google.android.googleapps.permission.GOOGLE_AUTH,
com.google.android.googleapps.permission.GOOGLE_AUTH.OTHER_SERVICES,
com.google.android.googleapps.permission.GOOGLE_AUTH.ALL_SERVICES,
com.google.android.googleapps.permission.GOOGLE_AUTH.writely,
com.google.android.googleapps.permission.GOOGLE_AUTH.wise,
com.google.android.apps.docs.editors.kix.permission.READ_MY_DATA,
com.google.android.apps.docs.editors.kix.permission.SYNC_STATUS,
android.permission.POST_NOTIFICATIONS
Version: 1.22.242.04.90 Application Size: 19.5 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8540
Case Label: K3 Case Evidence Number: 007 Device Label:

Double cutout
com.android.internal.display.cutout.emulation.double
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 20.3 KB Data Size: 0 B Cache Size: 0 B

Download Manager
com.android.providers.downloads
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 772.9 KB Data Size: 0 B Cache Size: 0 B

Downloads
com.android.providers.downloads.ui
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 248.9 KB Data Size: 0 B Cache Size: 0 B

Drive
com.google.android.apps.docs
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 15:35:58 (UTC+2)
Last Active: 2022-05-19 09:20:28 (UTC+2)
Last Year Use Time: 00:00:33
Version: 2.22.257.0.all.alldpi Application Size: 11.1 MB Data Size: 0 B Cache Size: 0 B

Dropbox
com.dropbox.android
User Application
First Installed: 2022-05-10 11:54:41 (UTC+2)
Last Updated: 2022-06-30 17:58:09 (UTC+2)
Last Active: 2022-07-14 14:34:19 (UTC+2)
Last Month Use Time: 00:02:34
Last Year Use Time: 00:04:12
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS,
com.dropbox.android.service.ACCOUNT_INFO_ALARM_TRIGGER, android.permission.CAMERA,
android.permission.INTERNET, android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.ACCESS_WIFI_STATE,
android.permission.ACCESS_NETWORK_STATE, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE, android.permission.GET_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.MANAGE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS, android.permission.WRITE_SYNC_SETTINGS,
com.google.android.c2dm.permission.RECEIVE, android.permission.READ_CONTACTS,
com.sonyericsson.home.permission.BROADCAST_BADGE, android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.ACCESS_MEDIA_LOCATION,
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS, android.permission.RECORD_AUDIO,
android.permission.WAKE_LOCK,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.FOREGROUND_SERVICE, com.android.vending.BILLING
Version: 286.2.2 Application Size: 28.6 MB Data Size: 0 B Cache Size: 0 B

Duo Mobile
com.duosecurity.duomobile
User Application
First Installed: 2022-06-22 13:33:56 (UTC+2)
Last Updated: 2022-07-08 14:05:02 (UTC+2)
Last Active: 2022-07-18 14:52:12 (UTC+2)
Last Day Use Time: 00:01:20
Last Month Use Time: 01:30:30
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: com.google.android.c2dm.permission.RECEIVE, android.permission.VIBRATE, android.permission.INTERNET,
android.permission.CAMERA, android.permission.ACCESS_NETWORK_STATE,
android.permission.USE_FINGERPRINT, android.permission.WAKE_LOCK,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE
Version: 4.19.0 Application Size: 12.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8541
Case Label: K3 Case Evidence Number: 007 Device Label:

Dynamic System Updates


com.android.dynsystem
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 36.5 KB Data Size: 0 B Cache Size: 0 B

Emergency alerts
com.android.cellbroadcastreceiver
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 9.5 MB Data Size: 0 B Cache Size: 0 B

Emergency information
com.android.emergency
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 16.4 KB Data Size: 0 B Cache Size: 0 B

External Storage
com.android.externalstorage
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 56.4 KB Data Size: 0 B Cache Size: 0 B

Facebook
com.facebook.katana
User Application
First Installed: 2022-04-27 14:52:39 (UTC+2)
Last Updated: 2022-07-13 12:33:39 (UTC+2)
Last Active: 2022-07-07 15:12:04 (UTC+2)
Last Month Use Time: 00:46:37
Last Year Use Time: 00:49:22
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.ACCESS_COARSE_LOCATION, android.permission.WAKE_LOCK,
android.permission.VIBRATE, android.permission.READ_CONTACTS, android.permission.WRITE_CONTACTS,
android.permission.GET_ACCOUNTS, android.permission.MANAGE_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.BROADCAST_STICKY, com.facebook.katana.provider.ACCESS,
com.facebook.orca.provider.ACCESS, com.facebook.services.identity.FEO2,
com.facebook.mlite.provider.ACCESS, com.facebook.pages.app.provider.ACCESS,
com.facebook.appmanager.UNPROTECTED_API_ACCESS,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION, android.permission.NFC,
android.permission.CAMERA, android.permission.RECORD_AUDIO,
android.permission.WRITE_EXTERNAL_STORAGE, com.facebook.permission.prod.FB_APP_COMMUNICATION,
android.permission.READ_PHONE_STATE, android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_PROFILE, android.permission.CHANGE_NETWORK_STATE,
android.permission.CHANGE_WIFI_STATE, android.permission.SYSTEM_ALERT_WINDOW,
com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.GET_TASKS,
android.permission.READ_EXTERNAL_STORAGE,
com.facebook.katana.permission.CROSS_PROCESS_BROADCAST_MANAGER,
com.facebook.receiver.permission.ACCESS, android.permission.USE_FULL_SCREEN_INTENT,
android.permission.INTERNET, com.android.launcher.permission.INSTALL_SHORTCUT,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE, android.permission.BATTERY_STATS,
com.facebook.katana.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE, android.permission.FOREGROUND_SERVICE,
com.nokia.pushnotifications.permission.RECEIVE, android.permission.MANAGE_OWN_CALLS,
com.facebook.katana.permission.CREATE_SHORTCUT, android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT, com.android.vending.BILLING,
com.google.android.c2dm.permission.RECEIVE
Version: 374.0.0.20.109 Application Size: 66.8 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8542
Case Label: K3 Case Evidence Number: 007 Device Label:

Factory OTA Mode


com.google.android.factoryota
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 10:13:39 (UTC+1)
Version: 1.0.190624 Application Size: 1.8 MB Data Size: 0 B Cache Size: 0 B

Files
com.google.android.documentsui
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-05-02 14:18:13 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: aml_doc_310851020 Application Size: 5.9 MB Data Size: 0 B Cache Size: 0 B

Files by Google
com.google.android.apps.nbu.files
User Application
First Installed: 2022-05-10 11:55:11 (UTC+2)
Last Updated: 2022-06-27 13:12:22 (UTC+2)
Last Active: 2022-06-24 14:44:42 (UTC+2)
Last Month Use Time: 00:00:02
Last Year Use Time: 00:01:41
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.WAKE_LOCK, com.google.android.apps.nbu.files.permission.C2D_MESSAGE,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.READ_EXTERNAL_STORAGE, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_MEDIA_LOCATION, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.READ_PHONE_STATE, android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_WIFI_STATE, android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN, android.permission.CHANGE_NETWORK_STATE,
android.permission.CHANGE_WIFI_STATE, android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
android.permission.INTERNET, android.permission.WRITE_SETTINGS,
android.permission.FOREGROUND_SERVICE, android.permission.PACKAGE_USAGE_STATS,
android.permission.GET_PACKAGE_SIZE, com.android.vending.p2p.APP_INSTALL_API,
android.permission.REQUEST_DELETE_PACKAGES, android.permission.GET_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS, android.permission.MANAGE_EXTERNAL_STORAGE,
android.permission.QUERY_ALL_PACKAGES, android.permission.BLUETOOTH_ADVERTISE,
android.permission.BLUETOOTH_CONNECT, android.permission.BLUETOOTH_SCAN,
android.permission.POST_NOTIFICATIONS, android.permission.REQUEST_INSTALL_PACKAGES
Version: 1.0.452918124 Application Size: 7.5 MB Data Size: 0 B Cache Size: 0 B

Filled
com.android.theme.icon_pack.filled.launcher
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 21.4 KB Data Size: 0 B Cache Size: 0 B

Filled
com.android.theme.icon_pack.filled.android
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 70.1 KB Data Size: 0 B Cache Size: 0 B

Filled
com.android.theme.icon_pack.filled.settings
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 74.6 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8543
Case Label: K3 Case Evidence Number: 007 Device Label:

Gestural Navigation Bar


com.android.internal.systemui.navbar.gestural
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 12.3 KB Data Size: 0 B Cache Size: 0 B

Gestural Navigation Bar


com.android.internal.systemui.navbar.gestural_extra_wide_back
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 12.3 KB Data Size: 0 B Cache Size: 0 B

Gestural Navigation Bar


com.android.internal.systemui.navbar.gestural_narrow_back
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 12.3 KB Data Size: 0 B Cache Size: 0 B

Gmail
com.google.android.gm
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:04:30 (UTC+2)
Last Active: 2022-06-24 14:38:10 (UTC+2)
Last Month Use Time: 00:13:48
Last Year Use Time: 00:31:37
Version: 2022.06.12.458104293. Application Size: 23.9 MB Data Size: 0 B Cache Size: 0 B
Release

Google
com.google.android.googlequicksearchbox
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-07 15:28:26 (UTC+2)
Last Active: 2022-06-24 11:23:54 (UTC+2)
Last Month Use Time: 00:00:01
Last Year Use Time: 00:00:48
Version: 13.25.10.26.arm64 Application Size: 187.0 MB Data Size: 0 B Cache Size: 0 B

Google Connectivity Services


com.google.android.apps.gcs
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-22 13:22:34 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: V49 prod (15039 Application Size: 3.2 MB Data Size: 0 B Cache Size: 0 B
sdk31)

Google Contacts Sync

com.google.android.syncadapters.contacts
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 2.6 MB Data Size: 0 B Cache Size: 0 B

Google Location History


com.google.android.gms.location.history
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 44.8 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8545
Case Label: K3 Case Evidence Number: 007 Device Label:

Google One Time Init


com.google.android.onetimeinitializer
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 159.9 KB Data Size: 0 B Cache Size: 0 B

Google Partner Setup


com.google.android.partnersetup
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 1.1 MB Data Size: 0 B Cache Size: 0 B

Google Play Books


com.google.android.apps.books
User Application
First Installed: 2022-05-19 09:20:27 (UTC+2)
Last Updated: 2022-07-13 12:34:41 (UTC+2)
Last Active: 2022-05-19 09:22:44 (UTC+2)
Last Year Use Time: 00:00:52
APK File Extracted: Yes
APK Verification Successful: No
Android Permissions: android.permission.INTERNET, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.READ_EXTERNAL_STORAGE, android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE, android.permission.USE_CREDENTIALS,
android.permission.MANAGE_ACCOUNTS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, android.permission.SUBSCRIBED_FEEDS_READ,
android.permission.SUBSCRIBED_FEEDS_WRITE, android.permission.WAKE_LOCK,
android.permission.GET_PACKAGE_SIZE, com.google.android.providers.gsf.permission.READ_GSERVICES,
com.google.android.c2dm.permission.RECEIVE, com.google.android.apps.books.permission.C2D_MESSAGE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE,
com.google.android.gms.permission.AD_ID, android.permission.SCHEDULE_EXACT_ALARM,
com.google.android.apps.books.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Version: 5. Application Size: 14.6 MB Data Size: 0 B Cache Size: 0 B
24.2_RC03.452179208

Google Play Music


com.google.android.music
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-06 13:40:14 (UTC+2)
Last Active: 2022-04-28 09:48:03 (UTC+2)
Last Year Use Time: 00:00:28
Version: 8.29.9113-1.W Application Size: 2.7 MB Data Size: 0 B Cache Size: 0 B

Google Play services

com.google.android.gms
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-28 15:07:53 (UTC+2)
Last Active: 2022-07-14 15:12:01 (UTC+2)
Last Month Use Time: 00:10:40
Last Year Use Time: 00:13:30
Version: 22.24.13 Application Size: 98.1 MB Data Size: 0 B Cache Size: 0 B
(100400-455379205)

Google Play Services for AR


com.google.ar.core
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-21 06:20:56 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.32.221520023 Application Size: 63.4 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8546
Case Label: K3 Case Evidence Number: 007 Device Label:

Google Play Store


com.android.vending
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 15:31:57 (UTC+2)
Last Active: 2022-07-14 13:59:37 (UTC+2)
Last Month Use Time: 00:28:55
Last Year Use Time: 03:44:44
Version: 31.2.29-21 [0] [PR] Application Size: 18.4 MB Data Size: 0 B Cache Size: 0 B
458571619

Google Services Framework


com.google.android.gsf
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 4.1 MB Data Size: 0 B Cache Size: 0 B

Google Support Services


com.google.android.apps.helprtc
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-05-06 09:31:23 (UTC+2)
Last Active: 2022-05-20 12:29:45 (UTC+2)
Last Year Use Time: 00:00:14
Version: 3.16.0 Application Size: 4.7 MB Data Size: 0 B Cache Size: 0 B

Google TV
com.google.android.videos
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-20 18:45:12 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 4.32.57 Application Size: 27.5 MB Data Size: 0 B Cache Size: 0 B

Google Wallpaper Images


com.google.android.apps.wallpaper.nexus
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: nexus_wallpapers_201 Application Size: 32.3 KB Data Size: 0 B Cache Size: 0 B
80605

Green
com.android.theme.color.green
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

Hidden Menu
com.google.android.hiddenmenu
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 273.5 KB Data Size: 0 B Cache Size: 0 B

HTML Viewer
com.android.htmlviewer
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 20.5 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8547
Case Label: K3 Case Evidence Number: 007 Device Label:

Input Devices
com.android.inputdevices
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 239.7 KB Data Size: 0 B Cache Size: 0 B

Instagram
com.instagram.android
User Application
First Installed: 2022-04-27 14:51:48 (UTC+2)
Last Updated: 2022-07-08 14:08:45 (UTC+2)
Last Active: 2022-07-14 15:34:11 (UTC+2)
Last Month Use Time: 05:02:02
Last Year Use Time: 05:09:09
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.ACCESS_NETWORK_STATE,
android.permission.WAKE_LOCK, android.permission.GET_ACCOUNTS,
android.permission.USE_CREDENTIALS, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.VIBRATE, android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT, com.google.android.c2dm.permission.RECEIVE,
android.permission.CAMERA, android.permission.READ_CONTACTS, android.permission.READ_PROFILE,
android.permission.ACCESS_FINE_LOCATION, android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_MEDIA_LOCATION, android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS, com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.instagram.direct.permission.PROTECTED_DEEPLINKING,
com.instagram.direct.permission.DIRECT_APP_THREAD_STORE_SERVICE,
com.facebook.services.identity.FEO2, com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE, .permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.android.vending.BILLING, android.permission.MANAGE_OWN_CALLS,
android.permission.BROADCAST_STICKY,
com.instagram.android.permission.CROSS_PROCESS_BROADCAST_MANAGER,
android.permission.REORDER_TASKS, android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT
Version: 242.0.0.16.111 Application Size: 45.3 MB Data Size: 0 B Cache Size: 0 B

Intent Filter Verification Service


com.android.statementservice
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 60.4 KB Data Size: 0 B Cache Size: 0 B

Key Chain
com.android.keychain
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 132.6 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8548
Case Label: K3 Case Evidence Number: 007 Device Label:

LINE
jp.naver.line.android
User Application
First Installed: 2022-05-19 09:23:46 (UTC+2)
Last Updated: 2022-07-08 15:37:51 (UTC+2)
Last Active: 2022-05-19 09:51:55 (UTC+2)
Last Year Use Time: 00:13:21
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.CAMERA, android.permission.FLASHLIGHT, android.permission.VIBRATE,
android.permission.READ_CONTACTS, android.permission.INTERNET,
android.permission.READ_PHONE_STATE, android.permission.READ_PHONE_NUMBERS,
android.permission.CALL_PHONE, android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_NETWORK_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE, com.android.vending.BILLING, android.permission.BLUETOOTH,
android.permission.BLUETOOTH_ADMIN, android.permission.BLUETOOTH_SCAN,
android.permission.BLUETOOTH_CONNECT, android.permission.GET_ACCOUNTS,
jp.naver.line.android.permission.LINE_ACCESS, android.permission.USE_BIOMETRIC,
com.android.launcher.permission.INSTALL_SHORTCUT, com.kddi.market.permission.USE_ALML,
com.linecorp.linemusic.android.permission.PLAYBACK,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, android.permission.SYSTEM_ALERT_WINDOW,
android.permission.NFC, android.permission.FOREGROUND_SERVICE,
android.permission.MANAGE_ACCOUNTS, android.permission.WRITE_CONTACTS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_SETTINGS, android.permission.READ_SYNC_STATS,
android.permission.RECORD_AUDIO, android.permission.WAKE_LOCK,
android.permission.READ_EXTERNAL_STORAGE, android.permission.DISABLE_KEYGUARD,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.USE_FINGERPRINT,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.HIGH_SAMPLING_RATE_SENSORS,
com.google.android.c2dm.permission.RECEIVE, com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.GET_TASKS, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
Version: 12.11.1 Application Size: 70.0 MB Data Size: 0 B Cache Size: 0 B

LinkedIn
com.linkedin.android
User Application
First Installed: 2022-05-10 12:05:27 (UTC+2)
Last Updated: 2022-06-30 18:00:22 (UTC+2)
Last Active: 2022-06-03 13:37:18 (UTC+2)
Last Year Use Time: 05:40:40
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION, android.permission.GET_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.READ_SYNC_STATS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.WRITE_SYNC_SETTINGS,
android.permission.WRITE_CONTACTS, android.permission.WAKE_LOCK,
android.permission.READ_CONTACTS, android.permission.READ_CALENDAR,
android.permission.ACCESS_NETWORK_STATE, android.permission.VIBRATE,
com.google.android.gms.permission.AD_ID, android.permission.BLUETOOTH,
android.permission.BLUETOOTH_CONNECT, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.ACCESS_WIFI_STATE, com.google.android.c2dm.permission.RECEIVE,
android.permission.READ_PHONE_STATE, android.permission.READ_EXTERNAL_STORAGE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Version: 4.1.709 Application Size: 27.6 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8549
Case Label: K3 Case Evidence Number: 007 Device Label:

Litmatch
com.litatom.app
User Application
First Installed: 2022-07-13 12:08:23 (UTC+2)
Last Updated: 2022-07-13 12:08:23 (UTC+2)
Last Active: 2022-07-13 12:11:48 (UTC+2)
Last Month Use Time: 00:02:47
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.VIBRATE, android.permission.INTERNET, android.permission.RECORD_AUDIO,
android.permission.CAMERA, android.permission.ACCESS_NETWORK_STATE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.GET_TASKS,
android.permission.ACCESS_WIFI_STATE, android.permission.CHANGE_WIFI_STATE,
android.permission.WAKE_LOCK, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.READ_PHONE_STATE, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.SYSTEM_ALERT_WINDOW, android.permission.READ_EXTERNAL_STORAGE,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
com.google.android.gms.permission.AD_ID, android.permission.FOREGROUND_SERVICE,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.android.vending.BILLING
Version: 3.9.2.9 Application Size: 28.6 MB Data Size: 0 B Cache Size: 0 B

Live Transcribe & Sound Notifications


com.google.audio.hearing.visualization.accessibility.scribe
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-05-13 19:49:06 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 5.0.445906011 Application Size: 17.6 MB Data Size: 0 B Cache Size: 0 B

Live Wallpaper Picker


com.android.wallpaper.livepicker
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 2.0 MB Data Size: 0 B Cache Size: 0 B

LTE Broadcast Manager


com.qti.ltebc
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: MSDC_LA_5.0.02.08.0 Application Size: 18.5 MB Data Size: 0 B Cache Size: 0 B

Main components
com.google.android.modulemetadata
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-30 13:16:07 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 2022-06-01 Q Application Size: 20.4 KB Data Size: 0 B Cache Size: 0 B

Maps
com.google.android.apps.maps
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:10:45 (UTC+2)
Last Active: 2022-05-19 09:54:00 (UTC+2)
Last Year Use Time: 00:00:34
Version: 11.38.0 Application Size: 25.3 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8550
Case Label: K3 Case Evidence Number: 007 Device Label:

Mapy.cz
cz.seznam.mapy
User Application
First Installed: 2022-05-05 11:48:38 (UTC+2)
Last Updated: 2022-06-30 19:48:48 (UTC+2)
Last Active: 2022-05-05 11:58:27 (UTC+2)
Last Year Use Time: 00:08:46
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: cz.seznam.auth.SZN_ACCOUNTS, android.permission.WAKE_LOCK, android.permission.INTERNET,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.WRITE_SYNC_SETTINGS, android.permission.READ_SYNC_SETTINGS,
android.permission.ACCESS_COARSE_UPDATES, android.permission.ACCESS_COARSE_LOCATION,
android.permission.BLUETOOTH, android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.ACTIVITY_RECOGNITION,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.MANAGE_ACCOUNTS,
androidx.car.app.ACCESS_SURFACE, androidx.car.app.NAVIGATION_TEMPLATES,
android.permission.GET_ACCOUNTS, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.USE_CREDENTIALS, android.permission.MANAGE_ACCOUNTS,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.gms.permission.ACTIVITY_RECOGNITION, com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Version: 9.19.0 Application Size: 42.6 MB Data Size: 0 B Cache Size: 0 B

Market Feedback Agent


com.google.android.feedback
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 683.1 KB Data Size: 0 B Cache Size: 0 B

Markup
com.google.android.markup
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 8.9 MB Data Size: 0 B Cache Size: 0 B

Media Storage
com.android.providers.media
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 438.0 KB Data Size: 0 B Cache Size: 0 B

Messages
com.google.android.apps.messaging
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:03:58 (UTC+2)
Last Active: 2022-07-18 14:41:40 (UTC+2)
Last Day Use Time: 00:22:06
Last Month Use Time: 01:49:49
Version: messages.android_202 Application Size: 22.8 MB Data Size: 0 B Cache Size: 0 B
20609_00_RC04.phone
_dynamic

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8551
Case Label: K3 Case Evidence Number: 007 Device Label:

Messenger
com.facebook.orca
User Application
First Installed: 2022-04-27 14:53:05 (UTC+2)
Last Updated: 2022-07-08 15:36:36 (UTC+2)
Last Active: 2022-06-22 17:01:12 (UTC+2)
Last Month Use Time: 00:01:24
Last Year Use Time: 00:12:05
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: com.facebook.katana.provider.ACCESS, android.permission.SCHEDULE_EXACT_ALARM,
android.permission.INTERNET, android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE, android.permission.WAKE_LOCK,
android.permission.VIBRATE, android.permission.READ_CONTACTS, android.permission.READ_PROFILE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS, android.permission.ACCESS_WIFI_STATE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.READ_SYNC_SETTINGS,
android.permission.RECEIVE_SMS, android.permission.RECEIVE_MMS, android.permission.READ_SMS,
android.permission.WRITE_SMS, android.permission.SEND_SMS,
android.permission.CHANGE_NETWORK_STATE, android.permission.RECORD_AUDIO,
android.permission.SYSTEM_ALERT_WINDOW, android.permission.CALL_PHONE,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.MANAGE_ACCOUNTS,
android.permission.WRITE_CONTACTS, android.permission.WRITE_SYNC_SETTINGS,
com.google.android.gms.permission.AD_ID, android.permission.BLUETOOTH, android.permission.NFC,
com.facebook.orca.provider.ACCESS, com.facebook.permission.prod.FB_APP_COMMUNICATION,
com.facebook.mlite.provider.ACCESS, android.permission.CAMERA,
android.permission.ACCESS_FINE_LOCATION, android.permission.ACCESS_COARSE_LOCATION,
com.google.android.providers.gsf.permission.READ_GSERVICES,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.READ_EXTERNAL_STORAGE,
com.facebook.orca.permission.CROSS_PROCESS_BROADCAST_MANAGER,
com.facebook.receiver.permission.ACCESS, com.facebook.orca.provider.ACCESS,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
android.permission.CHANGE_WIFI_STATE, android.permission.USE_BIOMETRIC,
android.permission.MANAGE_OWN_CALLS, com.facebook.orca.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE, com.nokia.pushnotifications.permission.RECEIVE,
com.android.launcher.permission.INSTALL_SHORTCUT, com.facebook.orca.permission.CREATE_SHORTCUT,
android.permission.FOREGROUND_SERVICE, android.permission.BROADCAST_STICKY,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.USE_FINGERPRINT, com.android.vending.BILLING,
com.google.android.c2dm.permission.RECEIVE
Version: 368.0.0.12.109 Application Size: 52.7 MB Data Size: 0 B Cache Size: 0 B

MmsService

com.android.mms.service
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 68.5 KB Data Size: 0 B Cache Size: 0 B

MTP Host
com.android.mtp
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 161.4 KB Data Size: 0 B Cache Size: 0 B

MusicFX
com.android.musicfx
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.4 Application Size: 108.9 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8552
Case Label: K3 Case Evidence Number: 007 Device Label:

Network manager
com.google.android.networkstack
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-30 13:16:07 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: aml_net_311811010 Application Size: 1.0 MB Data Size: 0 B Cache Size: 0 B

Nfc Service
com.android.nfc
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 1.3 MB Data Size: 0 B Cache Size: 0 B

Ocean
com.android.theme.color.ocean
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

OemDmTrigger
com.google.omadm.trigger
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 167.9 KB Data Size: 0 B Cache Size: 0 B

OK Google enrollment
com.android.hotwordenrollment.okgoogle
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-03-29 14:12:21 (UTC+2)
Version: 10 Application Size: 490.6 KB Data Size: 0 B Cache Size: 0 B

OneDrive
com.microsoft.skydrive
User Application
First Installed: 2022-05-03 08:11:28 (UTC+2)
Last Updated: 2022-07-13 12:36:30 (UTC+2)
Last Active: 2022-06-24 12:26:17 (UTC+2)
Last Month Use Time: 00:16:17
Last Year Use Time: 00:20:10
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.READ_CONTACTS, android.permission.GET_ACCOUNTS,
android.permission.GET_ACCOUNTS_PRIVILEGED, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.INTERNET, android.permission.WRITE_SETTINGS,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.ACCESS_MEDIA_LOCATION,
android.permission.READ_SYNC_STATS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, android.permission.ACCESS_NETWORK_STATE,
android.permission.WAKE_LOCK, android.permission.VIBRATE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.CAMERA,
android.permission.FOREGROUND_SERVICE,
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER,
com.google.android.permission.PROVIDE_BACKGROUND, com.android.vending.BILLING,
android.permission.USE_FINGERPRINT, android.permission.USE_BIOMETRIC,
android.permission.USE_CREDENTIALS, android.permission.MANAGE_ACCOUNTS,
android.permission.READ_PHONE_STATE, com.google.android.gms.permission.AD_ID,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.READ_EXTERNAL_STORAGE
Version: 6.59 Application Size: 94.1 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8553
Case Label: K3 Case Evidence Number: 007 Device Label:

Orchid
com.android.theme.color.orchid
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 8.3 KB Data Size: 0 B Cache Size: 0 B

org.codeaurora.ims
org.codeaurora.ims
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0 Application Size: 313.3 KB Data Size: 0 B Cache Size: 0 B

OsuLogin
com.android.hotspot2
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 130.9 KB Data Size: 0 B Cache Size: 0 B

Outlook
com.microsoft.office.outlook
User Application
First Installed: 2022-05-10 11:59:02 (UTC+2)
Last Updated: 2022-07-08 10:52:42 (UTC+2)
Last Active: 2022-06-24 13:28:10 (UTC+2)
Last Month Use Time: 00:09:35
Last Year Use Time: 00:10:24
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.ACCESS_NETWORK_STATE, android.permission.VIBRATE,
android.permission.GET_ACCOUNTS, android.permission.READ_PROFILE,
android.permission.READ_CONTACTS, android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR, android.permission.MANAGE_ACCOUNTS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.READ_SYNC_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, android.permission.READ_SYNC_STATS,
android.permission.WRITE_CONTACTS, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION, android.permission.WAKE_LOCK,
android.permission.SCHEDULE_EXACT_ALARM, android.permission.CAMERA,
android.permission.REORDER_TASKS, com.samsung.accessory.permission.ACCESSORY_FRAMEWORK,
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY,
com.samsung.WATCH_APP_TYPE.Companion, com.microsoft.office.outlook.configurator.READCONFIG,
com.microsoft.office.outlook.ACCOUNT_CREATION_PERMISSION,
android.permission.READ_EXTERNAL_STORAGE, android.permission.REQUEST_PASSWORD_COMPLEXITY,
android.permission.RECORD_AUDIO, com.android.vending.BILLING, android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT, com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE, com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT, com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT, com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE
Version: 4.2224.2 Application Size: 87.9 MB Data Size: 0 B Cache Size: 0 B

Package installer
com.google.android.packageinstaller
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-07-14 13:59:13 (UTC+2)
Last Month Use Time: 00:00:05
Version: 10 Application Size: 1.8 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8554
Case Label: K3 Case Evidence Number: 007 Device Label:

PacProcessor
com.android.pacprocessor
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 12.4 KB Data Size: 0 B Cache Size: 0 B

Permission controller
com.google.android.permissioncontroller
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-07-18 16:41:07 (UTC+2)
Last Day Use Time: 00:00:01
Last Month Use Time: 00:00:36
Last Year Use Time: 00:03:22
Version: q_pr1- Application Size: 5.8 MB Data Size: 0 B Cache Size: 0 B
release_aml_29190020
0

Personal Safety
com.google.android.apps.safetyhub
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-20 18:46:55 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 2022.04.28.447594271. Application Size: 14.4 MB Data Size: 0 B Cache Size: 0 B
lpr

Phone
com.google.android.dialer
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:04:51 (UTC+2)
Last Active: 2022-07-14 14:01:25 (UTC+2)
Last Month Use Time: 00:08:45
Last Year Use Time: 00:10:46
Version: 84.0.458363558 Application Size: 58.3 MB Data Size: 0 B Cache Size: 0 B

Phone and Messaging Storage


com.android.providers.telephony
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 457.2 KB Data Size: 0 B Cache Size: 0 B

Phone Services

com.android.phone
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-05-10 09:27:54 (UTC+2)
Version: 10 Application Size: 11.8 MB Data Size: 0 B Cache Size: 0 B

Photos

com.google.android.apps.photos
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-08 14:10:16 (UTC+2)
Last Active: 2022-06-06 13:16:21 (UTC+2)
Last Year Use Time: 00:03:50
Version: 5.97.0.457753476 Application Size: 39.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8555
Case Label: K3 Case Evidence Number: 007 Device Label:

Pinterest
com.pinterest
User Application
First Installed: 2022-04-27 14:55:48 (UTC+2)
Last Updated: 2022-07-08 14:02:17 (UTC+2)
Last Active: 2022-05-19 09:57:39 (UTC+2)
Last Year Use Time: 00:02:05
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.ACCESS_NETWORK_STATE, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.CAMERA, com.pinterest.account.Credentials, android.permission.GET_ACCOUNTS,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
android.permission.INTERNET, android.permission.WAKE_LOCK,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.ACCESS_WIFI_STATE, com.google.android.providers.gsf.permission.READ_GSERVICES,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
android.permission.READ_CONTACTS, android.permission.NFC,
android.permission.SCHEDULE_EXACT_ALARM
Version: 10.24.0 Application Size: 23.2 MB Data Size: 0 B Cache Size: 0 B

Pixel Ambient Services


com.google.intelligence.sense
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-30 14:11:30 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0.279736494 Application Size: 10.3 MB Data Size: 0 B Cache Size: 0 B

Pixel Buds
com.google.android.apps.wearables.maestro.companion
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-04-27 17:25:26 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 1.0.415420055 Application Size: 15.5 MB Data Size: 0 B Cache Size: 0 B

Pixel Launcher
com.google.android.apps.nexuslauncher
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-07-18 14:52:18 (UTC+2)
Last Day Use Time: 00:01:13
Last Month Use Time: 05:43:43
Last Year Use Time: 17:59:59
Version: 10 Application Size: 6.4 MB Data Size: 0 B Cache Size: 0 B

Pixel Setup
com.google.android.pixel.setupwizard
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 10:13:39 (UTC+1)
Last Year Use Time: 00:02:06
Version: 10 Application Size: 3.8 MB Data Size: 0 B Cache Size: 0 B

Pixel Themes

com.google.android.apps.customization.pixel
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 14.3 MB Data Size: 0 B Cache Size: 0 B

Pixel Tips

com.google.android.apps.tips
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-04-28 09:43:11 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 4.0.0.401984649 Application Size: 4.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8556
Case Label: K3 Case Evidence Number: 007 Device Label:

Signal
org.thoughtcrime.securesms
User Application
First Installed: 2022-07-11 11:27:23 (UTC+2)
Last Updated: 2022-07-11 11:27:23 (UTC+2)
Last Active: 2022-07-11 11:30:10 (UTC+2)
Last Month Use Time: 00:02:28
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.USE_FINGERPRINT, org.thoughtcrime.securesms.ACCESS_SECRETS,
android.permission.READ_PROFILE, android.permission.WRITE_PROFILE,
android.permission.BROADCAST_WAP_PUSH, android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS, android.permission.ACCESS_NOTIFICATION_POLICY,
android.permission.RECEIVE_SMS, android.permission.RECEIVE_MMS, android.permission.READ_SMS,
android.permission.SEND_SMS, android.permission.WRITE_SMS, android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.CAMERA, android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION, android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.READ_CALL_STATE,
android.permission.WRITE_CALENDAR, android.permission.READ_CALENDAR,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.VIBRATE,
android.permission.ACCESS_NETWORK_STATE, android.permission.CHANGE_NETWORK_STATE,
android.permission.WAKE_LOCK, android.permission.INTERNET,
android.permission.FOREGROUND_SERVICE, android.permission.GET_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS, android.permission.WRITE_SYNC_SETTINGS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.USE_CREDENTIALS,
android.permission.INSTALL_SHORTCUT, com.android.launcher.permission.INSTALL_SHORTCUT,
android.permission.ACCESS_WIFI_STATE, android.permission.CHANGE_WIFI_STATE,
android.permission.SET_WALLPAPER, android.permission.BLUETOOTH,
android.permission.BROADCAST_STICKY, android.permission.CALL_PHONE,
android.permission.DISABLE_KEYGUARD, android.permission.RAISED_THREAD_PRIORITY,
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.MANAGE_OWN_CALLS,
android.permission.USE_BIOMETRIC, android.permission.READ_EXTERNAL_STORAGE,
com.google.android.c2dm.permission.RECEIVE, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE, com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT, com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT, com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE
Version: 5.42.7 Application Size: 48.9 MB Data Size: 0 B Cache Size: 0 B

Sim App Dialog

com.android.simappdialog
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 215.5 KB Data Size: 0 B Cache Size: 0 B

SIM Manager
com.google.android.euicc
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-27 13:17:00 (UTC+2)
Last Active: 2022-05-10 09:27:57 (UTC+2)
Last Year Use Time: 00:00:03
Version: D.2.1.417043677- Application Size: 13.5 MB Data Size: 0 B Cache Size: 0 B
google

SIM manager

com.google.euiccpixel
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: D.1.5.01 (5879181) Application Size: 4.6 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8560
Case Label: K3 Case Evidence Number: 007 Device Label:

SIM Toolkit
com.android.stk
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 279.2 KB Data Size: 0 B Cache Size: 0 B

Skype
com.skype.raider
User Application
First Installed: 2022-04-27 14:54:45 (UTC+2)
Last Updated: 2022-06-22 13:20:46 (UTC+2)
Last Active: 2022-05-19 09:58:25 (UTC+2)
Last Year Use Time: 00:01:41
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.CHANGE_NETWORK_STATE,
android.permission.ACCESS_NETWORK_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_COARSE_LOCATION, android.permission.CAMERA,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.READ_CONTACTS,
android.permission.READ_PROFILE, android.permission.READ_PHONE_STATE,
android.permission.WAKE_LOCK, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.RECORD_AUDIO, android.permission.VIBRATE, android.permission.BLUETOOTH,
com.skype.raider.permission.C2D_MESSAGE, com.google.android.c2dm.permission.RECEIVE,
android.permission.RECEIVE_BOOT_COMPLETED,
com.google.android.gms.permission.ACTIVITY_RECOGNITION,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.BROADCAST_STICKY,
android.permission.CALL_PHONE, android.permission.DISABLE_KEYGUARD,
android.permission.GET_ACCOUNTS, android.permission.GET_TASKS,
android.permission.MANAGE_ACCOUNTS, android.permission.READ_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS, android.permission.USE_CREDENTIALS,
android.permission.WRITE_CONTACTS, android.permission.WRITE_SETTINGS,
android.permission.WRITE_SYNC_SETTINGS, com.anddoes.launcher.permission.UPDATE_COUNT,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
com.majeur.launcher.permission.UPDATE_BADGE, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE,
com.sonyericsson.home.permission.BROADCAST_BADGE, android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.SYSTEM_ALERT_WINDOW,
com.amazon.device.messaging.permission.RECEIVE, com.skype.raider.permission.RECEIVE_ADM_MESSAGE,
com.skype.raider.permission.ACCOUNT, android.permission.READ_EXTERNAL_STORAGE,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION,
com.huawei.android.launcher.permission.CHANGE_BADGE, android.permission.USE_FINGERPRINT,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.RECORD_VIDEO, com.android.vending.BILLING
Version: 8.83.0.411 Application Size: 46.6 MB Data Size: 0 B Cache Size: 0 B

Slack
com.Slack
User Application
First Installed: 2022-05-10 11:56:21 (UTC+2)
Last Updated: 2022-07-08 14:09:40 (UTC+2)
Last Active: 2022-07-14 10:57:39 (UTC+2)
Last Month Use Time: 00:01:32
Last Year Use Time: 00:02:27
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.ACCESS_NETWORK_STATE,
android.permission.GET_ACCOUNTS, android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC, android.permission.WAKE_LOCK,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.READ_CONTACTS,
android.permission.VIBRATE, android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.READ_PHONE_STATE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.FOREGROUND_SERVICE,
android.permission.CAMERA, android.permission.BLUETOOTH, android.permission.BLUETOOTH_CONNECT,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Version: 22.07.10.0 Application Size: 48.8 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8561
Case Label: K3 Case Evidence Number: 007 Device Label:

Smart Forwarding
com.qti.xdivert
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 5.3 MB Data Size: 0 B Cache Size: 0 B

Smart Storage
com.google.android.storagemanager
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 6.7 MB Data Size: 0 B Cache Size: 0 B

Snapchat
com.snapchat.android
User Application
First Installed: 2022-04-27 14:53:56 (UTC+2)
Last Updated: 2022-07-08 14:05:48 (UTC+2)
Last Active: 2022-06-24 14:38:13 (UTC+2)
Last Month Use Time: 00:00:01
Last Year Use Time: 00:01:15
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.READ_PHONE_STATE, android.permission.READ_CALL_LOG,
android.permission.READ_CONTACTS, android.permission.CAMERA, android.permission.RECORD_AUDIO,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.FLASHLIGHT,
android.permission.WAKE_LOCK, android.permission.ACCESS_FINE_LOCATION,
android.permission.BLUETOOTH, android.permission.BLUETOOTH_ADMIN, android.permission.VIBRATE,
android.permission.ACCESS_BACKGROUND_LOCATION, android.permission.FOREGROUND_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.ACCESS_NETWORK_STATE,
android.permission.READ_EXTERNAL_STORAGE, android.permission.GET_ACCOUNTS,
android.permission.READ_PHONE_NUMBERS, android.permission.READ_PROFILE,
android.permission.CHANGE_WIFI_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.INTERNET, android.permission.CHANGE_NETWORK_STATE,
android.permission.RECEIVE_BOOT_COMPLETED, com.snapchat.android.permission.UPDATE_STICKER_INDEX,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.HIGH_SAMPLING_RATE_SENSORS,
com.google.android.gms.permission.AD_ID,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.android.vending.BILLING, com.google.android.c2dm.permission.RECEIVE,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT, com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE
Version: 11.86.0.37 Application Size: 38.2 MB Data Size: 0 B Cache Size: 0 B

Sound Amplifier

com.google.android.accessibility.soundamplifier
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-06-22 13:22:43 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 4.0.453967773 Application Size: 23.8 MB Data Size: 0 B Cache Size: 0 B

Sounds
com.google.android.soundpicker
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-04-27 17:24:36 (UTC+2)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 2.7 (374355119) Application Size: 6.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8562
Case Label: K3 Case Evidence Number: 007 Device Label:

Telegram
org.telegram.messenger
User Application
First Installed: 2022-05-19 09:58:32 (UTC+2)
Last Updated: 2022-07-08 11:11:36 (UTC+2)
Last Active: 2022-05-19 10:16:02 (UTC+2)
Last Year Use Time: 00:02:36
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: com.google.android.c2dm.permission.RECEIVE, org.telegram.messenger.permission.MAPS_RECEIVE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
android.permission.CALL_PHONE, android.permission.FOREGROUND_SERVICE,
android.permission.READ_CALL_LOG, android.permission.INTERNET, android.permission.RECORD_AUDIO,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_WIFI_STATE, android.permission.WAKE_LOCK,
android.permission.READ_EXTERNAL_STORAGE, android.permission.GET_ACCOUNTS,
android.permission.READ_CONTACTS, android.permission.WRITE_CONTACTS,
android.permission.MANAGE_ACCOUNTS, android.permission.READ_PROFILE,
android.permission.WRITE_SYNC_SETTINGS, android.permission.READ_SYNC_SETTINGS,
android.permission.AUTHENTICATE_ACCOUNTS, android.permission.VIBRATE,
android.permission.SYSTEM_ALERT_WINDOW, android.permission.READ_PHONE_STATE,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.USE_FINGERPRINT,
android.permission.USE_BIOMETRIC, android.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT, android.permission.CAMERA,
android.permission.BLUETOOTH, android.permission.MANAGE_OWN_CALLS,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.READ_PHONE_NUMBERS, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE, com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT, com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT, com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE, com.android.vending.BILLING,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.ACCESS_BACKGROUND_LOCATION
Version: 8.8.5 Application Size: 19.7 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8565
Case Label: K3 Case Evidence Number: 007 Device Label:

TikTok
com.zhiliaoapp.musically
User Application
First Installed: 2022-04-27 14:53:27 (UTC+2)
Last Updated: 2022-07-05 07:43:51 (UTC+2)
Last Active: 2022-05-19 10:25:57 (UTC+2)
Last Year Use Time: 00:40:31
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.ACCESS_COARSE_LOCATION, android.permission.SYSTEM_ALERT_WINDOW,
android.permission.REORDER_TASKS, android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE, android.permission.READ_EXTERNAL_STORAGE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.ACCESS_WIFI_STATE,
android.permission.CAMERA, android.permission.RECORD_AUDIO, android.permission.FLASHLIGHT,
android.permission.WAKE_LOCK, android.permission.GET_TASKS, android.permission.READ_CONTACTS,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.VIBRATE,
android.permission.BLUETOOTH, com.meizu.c2dm.permission.RECEIVE,
com.zhiliaoapp.musically.permission.READ_ACCOUNT,
com.zhiliaoapp.musically.permission.WRITE_ACCOUNT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.android.launcher.permission.READ_SETTINGS, android.permission.READ_CALENDAR,
android.permission.WRITE_CALENDAR, android.permission.AUTHENTICATE_ACCOUNTS,
com.htc.launcher.permission.READ_SETTINGS, com.lge.launcher.permission.READ_SETTINGS,
com.lge.launcher.permission.WRITE_SETTINGS, com.huawei.launcher3.permission.READ_SETTINGS,
com.huawei.launcher3.permission.WRITE_SETTINGS, com.huawei.launcher2.permission.READ_SETTINGS,
com.huawei.launcher2.permission.WRITE_SETTINGS,
com.ebproductions.android.launcher.permission.READ_SETTINGS,
com.ebproductions.android.launcher.permission.WRITE_SETTINGS,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS, dianxin.permission.ACCESS_LAUNCHER_DATA,
com.miui.mihome2.permission.READ_SETTINGS, com.miui.mihome2.permission.WRITE_SETTINGS,
android.permission.FOREGROUND_SERVICE, com.zhiliaoapp.musically.permission.MIPUSH_RECEIVE,
com.zhiliaoapp.musically.push.permission.MESSAGE, android.permission.SET_WALLPAPER,
com.orange.update.permission.READ_ATTRIBUTION, android.permission.WRITE_SYNC_SETTINGS,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.UPDATE_SHORTCUT, com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.majeur.launcher.permission.UPDATE_BADGE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.MODIFY_AUDIO_SETTINGS,
com.zhiliao.musically.livewallpaper.permission.wallpaperplugin,
android.permission.CHANGE_NETWORK_STATE, com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.huawei.android.launcher.permission.CHANGE_BADGE, android.permission.READ_APP_BADGE,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE, android.permission.UPDATE_APP_BADGE,
com.vivo.notification.permission.BADGE_ICON,
com.zhiliaoapp.musically.permission.RECEIVE_ADM_MESSAGE,
com.amazon.device.messaging.permission.RECEIVE, com.android.vending.BILLING,
android.permission.CHANGE_WIFI_MULTICAST_STATE
Version: 25.1.3 Application Size: 41.1 MB Data Size: 0 B Cache Size: 0 B

Time Zone Updater

com.android.timezone.updater
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 44.4 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8567
Case Label: K3 Case Evidence Number: 007 Device Label:

Tinder
com.tinder
User Application
First Installed: 2022-05-19 10:26:21 (UTC+2)
Last Updated: 2022-07-08 15:35:04 (UTC+2)
Last Active: 2022-06-30 11:05:25 (UTC+2)
Last Month Use Time: 00:02:14
Last Year Use Time: 00:03:24
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: com.tinder.permission.MAPS_RECEIVE, com.android.vending.BILLING,
com.google.android.providers.gsf.permission.READ_GSERVICES, android.permission.INTERNET,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
android.permission.ACCESS_NETWORK_STATE, android.permission.ACCESS_WIFI_STATE,
android.permission.CHANGE_WIFI_STATE, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.VIBRATE, android.permission.STORAGE, android.permission.BLUETOOTH,
android.permission.GET_TASKS, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.READ_EXTERNAL_STORAGE, android.permission.READ_CONTACTS,
android.permission.CAMERA, com.google.android.gms.permission.AD_ID,
android.permission.READ_MEDIA_VIDEO, android.permission.RECORD_AUDIO,
com.google.android.c2dm.permission.RECEIVE, android.permission.FOREGROUND_SERVICE,
android.permission.WAKE_LOCK,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.READ_PHONE_STATE
Version: 13.11.0 Application Size: 43.9 MB Data Size: 0 B Cache Size: 0 B

Twitter
com.twitter.android
User Application
First Installed: 2022-05-03 08:10:01 (UTC+2)
Last Updated: 2022-07-08 14:03:08 (UTC+2)
Last Active: 2022-07-11 14:40:09 (UTC+2)
Last Month Use Time: 00:20:54
Last Year Use Time: 00:21:31
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: com.twitter.android.permission.RESTRICTED, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.INTERNET, android.permission.VIBRATE, android.permission.READ_PROFILE,
android.permission.READ_CONTACTS, android.permission.WAKE_LOCK,
android.permission.WRITE_EXTERNAL_STORAGE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
com.android.launcher.permission.INSTALL_SHORTCUT, android.permission.READ_PHONE_STATE,
android.permission.CAMERA, android.permission.RECORD_AUDIO,
com.google.android.gms.permission.AD_ID, android.permission.GET_ACCOUNTS,
android.permission.ACCESS_NETWORK_STATE, android.permission.BLUETOOTH,
android.permission.BLUETOOTH_CONNECT, android.permission.SYSTEM_ALERT_WINDOW,
android.permission.ACCESS_FINE_LOCATION, android.permission.ACCESS_COARSE_LOCATION,
com.android.vending.CHECK_LICENSE, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.MANAGE_ACCOUNTS, android.permission.USE_CREDENTIALS,
android.permission.READ_SYNC_SETTINGS, android.permission.WRITE_SYNC_SETTINGS,
android.permission.ACCESS_WIFI_STATE, com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.CHANGE_BADGE,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
com.anddoes.launcher.permission.UPDATE_COUNT, android.permission.RECEIVE_BOOT_COMPLETED,
com.google.android.c2dm.permission.RECEIVE,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.FOREGROUND_SERVICE, com.android.vending.BILLING
Version: 9.49.0-release.0 Application Size: 38.7 MB Data Size: 0 B Cache Size: 0 B

uceShimService
com.qualcomm.qti.uceShimService
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 60.4 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8568
Case Label: K3 Case Evidence Number: 007 Device Label:

User Dictionary
com.android.providers.userdictionary
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 36.4 KB Data Size: 0 B Cache Size: 0 B

Viber
com.viber.voip
User Application
First Installed: 2022-04-27 14:54:27 (UTC+2)
Last Updated: 2022-07-07 15:27:44 (UTC+2)
Last Active: 2022-06-28 11:16:46 (UTC+2)
Last Month Use Time: 00:00:35
Last Year Use Time: 00:02:50
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.INTERNET, android.permission.ACCESS_WIFI_STATE,
android.permission.ACCESS_NETWORK_STATE, android.permission.READ_CONTACTS,
android.permission.WRITE_CONTACTS, android.permission.READ_PHONE_STATE,
android.permission.READ_PHONE_NUMBERS, android.permission.READ_CALL_LOG,
android.permission.CALL_PHONE, android.permission.VIBRATE,
android.permission.WRITE_EXTERNAL_STORAGE, android.permission.MODIFY_AUDIO_SETTINGS,
android.permission.WAKE_LOCK, android.permission.BLUETOOTH, android.permission.BLUETOOTH_ADMIN,
android.permission.RECORD_AUDIO, android.permission.DISABLE_KEYGUARD,
android.permission.CHANGE_NETWORK_STATE, android.permission.WRITE_SETTINGS,
android.permission.GET_TASKS, android.permission.KILL_BACKGROUND_PROCESSES,
android.permission.SET_WALLPAPER, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.GET_ACCOUNTS, android.permission.MANAGE_ACCOUNTS,
android.permission.READ_SYNC_SETTINGS, android.permission.WRITE_SYNC_SETTINGS,
android.permission.READ_SYNC_STATS, android.permission.CAMERA,
android.permission.ACCESS_COARSE_LOCATION, android.permission.BROADCAST_STICKY,
android.permission.RECEIVE_BOOT_COMPLETED, com.android.vending.BILLING,
android.permission.SYSTEM_ALERT_WINDOW, android.permission.USE_CREDENTIALS,
android.permission.READ_SOCIAL_STREAM, android.permission.WRITE_SOCIAL_STREAM,
android.permission.MANAGE_OWN_CALLS, com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.ACCESS_FINE_LOCATION, com.huawei.android.launcher.permission.CHANGE_BADGE,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE, android.permission.FOREGROUND_SERVICE,
android.permission.USE_FULL_SCREEN_INTENT, android.permission.READ_MEDIA_AUDIO,
android.permission.READ_MEDIA_IMAGES, android.permission.READ_MEDIA_VIDEO,
android.permission.USE_BIOMETRIC, android.permission.USE_FINGERPRINT,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.google.android.c2dm.permission.RECEIVE, com.sec.android.provider.badge.permission.READ,
com.sec.android.provider.badge.permission.WRITE, com.htc.launcher.permission.READ_SETTINGS,
com.htc.launcher.permission.UPDATE_SHORTCUT, com.sonyericsson.home.permission.BROADCAST_BADGE,
com.anddoes.launcher.permission.UPDATE_COUNT, com.majeur.launcher.permission.UPDATE_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS, android.permission.READ_APP_BADGE,
com.oppo.launcher.permission.READ_SETTINGS, com.oppo.launcher.permission.WRITE_SETTINGS,
me.everything.badger.permission.BADGE_COUNT_READ,
me.everything.badger.permission.BADGE_COUNT_WRITE, android.permission.READ_EXTERNAL_STORAGE
Version: 17.9.0.0 Application Size: 43.4 MB Data Size: 0 B Cache Size: 0 B

VpnDialogs

com.android.vpndialogs
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 160.7 KB Data Size: 0 B Cache Size: 0 B

Vzw OMA Trigger

com.android.vzwomatrigger
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 16.4 KB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8569
Case Label: K3 Case Evidence Number: 007 Device Label:

WeChat
com.tencent.mm
User Application
First Installed: 2022-04-27 14:55:06 (UTC+2)
Last Updated: 2022-07-08 14:07:53 (UTC+2)
Last Active: 2022-05-19 10:33:14 (UTC+2)
Last Year Use Time: 00:17:43
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.CHANGE_WIFI_MULTICAST_STATE, com.tencent.mm.plugin.permission.READ,
com.tencent.mm.plugin.permission.WRITE, com.tencent.mm.permission.MM_MESSAGE,
com.huawei.authentication.HW_ACCESS_AUTH_SERVICE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
android.permission.CHANGE_NETWORK_STATE, android.permission.ACCESS_NETWORK_STATE,
android.permission.ACCESS_COARSE_LOCATION, android.permission.ACCESS_FINE_LOCATION,
android.permission.CAMERA, android.permission.GET_TASKS, android.permission.INTERNET,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.RECEIVE_BOOT_COMPLETED,
android.permission.RECORD_AUDIO, android.permission.READ_CONTACTS, android.permission.VIBRATE,
android.permission.WAKE_LOCK, android.permission.WRITE_EXTERNAL_STORAGE,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT,
com.android.launcher.permission.READ_SETTINGS, com.tencent.mm.location.permission.SEND_VIEW,
android.permission.BLUETOOTH, android.permission.BLUETOOTH_ADMIN,
android.permission.BROADCAST_STICKY, android.permission.SYSTEM_ALERT_WINDOW,
android.permission.CHANGE_WIFI_STATE, android.permission.GET_PACKAGE_SIZE,
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION, android.permission.NFC,
com.miui.easygo.permission.READ_PERMISSION,
com.huawei.android.launcher.permission.CHANGE_BADGE, android.permission.WRITE_APP_BADGE,
cn.cyberidentity.certification.AUTH, android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS,
android.permission.READ_EXTERNAL_STORAGE, com.tencent.mm.ext.permission.READ,
com.tencent.mm.ext.permission.WRITE, android.permission.ACTIVITY_RECOGNITION,
com.tencent.mm.wear.message, com.bbk.launcher2.permission.READ_SETTINGS,
android.permission.ACCESS_WIFI_STATE, android.permission.USE_FULL_SCREEN_INTENT,
android.permission.FOREGROUND_SERVICE, miui.permission.READ_STEPS, com.android.vending.BILLING,
com.open.gallery.smart.Read, com.open.gallery.smart.Write, com.open.gallery.smart.Provider,
com.tencent.mm.WAID_PROVIDER_WRITE, android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.USE_FINGERPRINT, android.permission.USE_BIOMETRIC,
com.android.vending.CHECK_LICENSE, com.tencent.mm.matrix.strategynotify,
android.permission.ACCESS_NOTIFICATION_POLICY, com.tencent.mm.manual.dump,
com.tencent.mm.backtrace.warmed_up, com.tencent.mm.vfs.broadcast,
com.tencent.mm.matrix.permission.PROCESS_SUPERVISOR,
com.huawei.easygo.permission.READ_PERMISSION, com.oplus.permission.safe.FANTASYWINDOW,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
com.google.android.c2dm.permission.RECEIVE, com.tencent.mm.permission.C2D_MESSAGE,
com.soter.permission.ACCESS_SOTER_KEYSTORE, android.permission.USE_FACERECOGNITION
Version: 8.0.21 Application Size: 99.7 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8570
Case Label: K3 Case Evidence Number: 007 Device Label:

WhatsApp
com.whatsapp
User Application
First Installed: 2022-07-14 13:59:13 (UTC+2)
Last Updated: 2022-07-14 13:59:13 (UTC+2)
Last Active: 2022-07-14 14:09:08 (UTC+2)
Last Month Use Time: 02:56:56
Last Year Use Time: 03:03:03
APK File Extracted: Yes
APK Verification Successful: Yes
Android Permissions: android.permission.ACCESS_NETWORK_STATE, android.permission.VIBRATE,
android.permission.READ_PHONE_STATE, android.permission.READ_PHONE_NUMBERS,
android.permission.RECEIVE_SMS, android.permission.USE_BIOMETRIC,
android.permission.USE_FINGERPRINT, android.permission.AUTHENTICATE_ACCOUNTS,
android.permission.GET_ACCOUNTS, android.permission.ACCESS_COARSE_LOCATION,
android.permission.ACCESS_FINE_LOCATION, android.permission.ACCESS_WIFI_STATE,
android.permission.BLUETOOTH, android.permission.BROADCAST_STICKY, android.permission.CAMERA,
android.permission.CHANGE_NETWORK_STATE, android.permission.CHANGE_WIFI_STATE,
android.permission.GET_TASKS, android.permission.INSTALL_SHORTCUT, android.permission.INTERNET,
android.permission.MANAGE_ACCOUNTS, android.permission.MANAGE_OWN_CALLS,
android.permission.MODIFY_AUDIO_SETTINGS, android.permission.NFC,
android.permission.READ_CONTACTS, android.permission.READ_PROFILE,
android.permission.READ_SYNC_SETTINGS, android.permission.READ_SYNC_STATS,
android.permission.RECEIVE_BOOT_COMPLETED, android.permission.RECORD_AUDIO,
android.permission.SCHEDULE_EXACT_ALARM, android.permission.SEND_SMS,
android.permission.USE_CREDENTIALS, android.permission.WAKE_LOCK,
android.permission.WRITE_CONTACTS, android.permission.WRITE_EXTERNAL_STORAGE,
android.permission.WRITE_SYNC_SETTINGS, android.permission.REQUEST_INSTALL_PACKAGES,
android.permission.FOREGROUND_SERVICE, android.permission.USE_FULL_SCREEN_INTENT,
com.android.launcher.permission.INSTALL_SHORTCUT,
com.android.launcher.permission.UNINSTALL_SHORTCUT, com.google.android.c2dm.permission.RECEIVE,
com.google.android.providers.gsf.permission.READ_GSERVICES,
com.sec.android.provider.badge.permission.READ, com.sec.android.provider.badge.permission.WRITE,
com.htc.launcher.permission.READ_SETTINGS, com.htc.launcher.permission.UPDATE_SHORTCUT,
com.sonyericsson.home.permission.BROADCAST_BADGE,
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE,
com.huawei.android.launcher.permission.READ_SETTINGS,
com.huawei.android.launcher.permission.WRITE_SETTINGS,
com.huawei.android.launcher.permission.CHANGE_BADGE, com.whatsapp.permission.BROADCAST,
com.whatsapp.permission.MAPS_RECEIVE, com.whatsapp.permission.REGISTRATION,
com.whatsapp.sticker.READ, com.facebook.services.identity.FEO2,
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE,
android.permission.READ_EXTERNAL_STORAGE
Version: 2.22.14.74 Application Size: 39.0 MB Data Size: 0 B Cache Size: 0 B

Work Setup
com.android.managedprovisioning
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-02-02 09:58:18 (UTC+1)
Version: 10 Application Size: 7.6 MB Data Size: 0 B Cache Size: 0 B

X Google enrollment
com.android.hotwordenrollment.xgoogle
System Application
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2009-01-01 01:00:00 (UTC+1)
Last Active: 2022-03-29 14:12:21 (UTC+2)
Version: 10 Application Size: 438.2 KB Data Size: 0 B Cache Size: 0 B

YouTube
com.google.android.youtube
System Application Update
First Installed: 2009-01-01 01:00:00 (UTC+1)
Last Updated: 2022-07-13 12:35:52 (UTC+2)
Last Active: 2022-06-30 11:07:23 (UTC+2)
Last Month Use Time: 00:01:58
Last Year Use Time: 00:02:16
Version: 17.26.34 Application Size: 20.0 MB Data Size: 0 B Cache Size: 0 B

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8571
Case Label: K3 Case Evidence Number: 007 Device Label:

Photo Recognizer

Recognized Images of Currency (43)


All recognized images of currency, sorted by time in ascending order

1 5951425139216857990.png

 Filename 5951425139216857990.png
Path phone/raw0/data/data/com.google.android.inputmethod.latin/files/share_content/
contentsuggestion/sticker/5951425139216857990.png
Size 7.98 KB
 Modified 2022-04-12 14:49:24 (UTC+2)
 Accessed 2022-04-12 14:49:24 (UTC+2)
Width 520 px
Height 377 px
Format png
Image Classification Currency - Banknotes

2 -2147483648_-210000.jpg 

 Filename -2147483648_-210000.jpg
Path phone/raw3/Android/data/org.telegram.messenger/cache/-2147483648_-210000.jpg

Size 1.01 KB

 Modified 2021-02-11 14:07:00 (UTC+1)


 Accessed 2021-02-11 14:07:00 (UTC+1)
 Width 50 px
 Height 90 px
Format jpeg

Image Classification Currency - Coins

 Camera Ballistics
 Fingerprint C:\finger\finger.fnp
Match  No match
Correlation -0.00122448

Status Fingerprint not matched

3 retry_img.png

 Filename retry_img.png
Path phone/raw0/data/data/jp.naver.line.android/theme-dark/load/images/retry_img.png
Size 1.02 KB
 Modified 2022-05-19 09:31:00 (UTC+2)
 Accessed 2022-05-19 09:31:00 (UTC+2)
Width 560 px
Height 376 px
Format png
Image Classification Currency - Banknotes

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8572
Case Label: K3 Case Evidence Number: 007 Device Label:

Recognized Images of Documents (31)


All recognized images of documents, sorted by time in ascending order

1 original-0e4d500f-e22a-4b14-9527-7b2e9595a0e1.jpeg

 Filename original-0e4d500f-e22a-4b14-9527-7b2e9595a0e1.jpeg
Path phone/raw0/data/data/com.microsoft.skydrive/files/scan/LensSessions/LensSDKSession-
f15551e9-5c97-4256-b2eb-dec059074048/original-0e4d500f-
e22a-4b14-9527-7b2e9595a0e1.jpeg
Size 5.27 MB
 Modified 2022-05-03 08:16:35 (UTC+2)
 Accessed 2022-05-03 08:16:35 (UTC+2)
Exposure Time 1 / 100 s
Focal Length 4.44 mm
F-Number 1.8
Width 3264 px
Height 2448 px
Camera Manufacturer Google
Camera Model Pixel 3a
Format jpeg
Rotation 270°
 Date of Generation 2022-05-03 08:16:35 (UTC+2)
 Date of Digitization 2022-05-03 08:16:35 (UTC+2)
Image Classification Documents

2 8.png

 Filename 8.png
Path phone/raw0/data/data/com.tencent.mm/files/public/fts/feature/fts_feature/8.png
Size 2.57 KB
 Modified 2022-05-05 12:35:42 (UTC+2)
 Accessed 2022-05-05 12:35:42 (UTC+2)
Width 156 px
Height 156 px
Format png
Image Classification Documents

3 256x256_fit_one_bestfit.jpg

 Filename 256x256_fit_one_bestfit.jpg
Path phone/raw0/data/data/com.dropbox.android/cache/u209811457/thumbs/pozvanka-
msz-24.08.2017.pdf/256x256_fit_one_bestfit.jpg
Size 14.6 KB
 Modified 2022-05-13 10:35:11 (UTC+2)
 Accessed 2022-05-13 10:35:10 (UTC+2)
Width 256 px
Height 362 px
Format jpeg
Image Classification Documents

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8573
Case Label: K3 Case Evidence Number: 007 Device Label:

Recognized Images of Drugs (249)


All recognized images of drugs, sorted by time in ascending order

1 short_touch.ac76c1b0.png

 Filename short_touch.ac76c1b0.png
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_ecommerce_ug_short_touch/109820090/
res/resource/images/short_touch.ac76c1b0.png
Size 166 KB
 Modified 2022-04-27 15:37:48 (UTC+2)
 Accessed 2022-04-27 15:37:48 (UTC+2)
Width 1920 px
Height 1280 px
Format png
Image Classification Drugs - Alcohol

2 loading.b4f2e10d.gif

 Filename loading.b4f2e10d.gif
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/discovery_favorite_music_collection/122997284/res/
resource/images/loading.b4f2e10d.gif
Size 19.8 KB
 Modified 2022-04-27 15:37:53 (UTC+2)
 Accessed 2022-04-27 15:37:53 (UTC+2)
Width 96 px
Height 96 px
Format gif
Matched Face Path Error: Unable to decode file
Image Classification Drugs - Medication

3 en-MY.236265a2.png

 Filename bannerDefault-Old-en-MY.236265a2.png
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/2022_01_travel/121088942/res/imgs/en-
MY.236265a2.png
Size 33.1 KB
 Modified 2022-04-27 15:37:54 (UTC+2)
 Accessed 2022-04-27 15:37:54 (UTC+2)
Width 448 px
Height 288 px
Format png
Image Classification Drugs - Drugs

4 TR.7d872a06.png

 Filename bannerDefault-Old-tr-TR.7d872a06.png
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/2022_01_travel/121088942/res/imgs/TR.7d872a06.png

Size 33.9 KB
 Modified 2022-04-27 15:37:54 (UTC+2)
 Accessed 2022-04-27 15:37:54 (UTC+2)
Width 448 px
Height 288 px
Format png
Image Classification Drugs - Drugs

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8574
Case Label: K3 Case Evidence Number: 007 Device Label:

249 default_avatar.c4155e2f.png

 Filename default_avatar.c4155e2f.png
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_ecommerce_ttmall/136653131/res/
resource/images/default_avatar.c4155e2f.png
Size 4.19 KB
 Modified 2022-08-16 05:02:46 (UTC+2)
 Accessed 2022-08-16 05:02:46 (UTC+2)
Width 112 px
Height 112 px
Format png
Image Classification Drugs - Medication

Recognized Images of Extremist symbols (51)


All recognized images of extremist symbols, sorted by time in ascending order

1 3722928428087656610.png

 Filename 3722928428087656610.png
Path phone/raw0/data/data/com.google.android.inputmethod.latin/files/share_content/
contentsuggestion/sticker/3722928428087656610.png
Size 12.4 KB
 Modified 2022-04-12 14:49:24 (UTC+2)
 Accessed 2022-04-12 14:49:24 (UTC+2)
Width 534 px
Height 534 px
Format png
Image Classification Extremist symbols - ISIL

2 ic-close.643bf4ae.png

 Filename ic-close.643bf4ae.png
Path phone/raw0/data/data/com.zhiliaoapp.musically/files/offlineX/
365b20e8f6c343df1eff65214a0e3e74/tiktok_live_ecommerce_ug_traffic_popup/108822945/
res/resource/images/ic-close.643bf4ae.png
Size 2.78 KB
 Modified 2022-04-27 15:37:48 (UTC+2)
 Accessed 2022-04-27 15:37:48 (UTC+2)
Width 94 px
Height 94 px
Format png
Image Classification Extremist symbols - Nazism

3 ic_event_bike-1.png

 Filename ic_event_bike-1.png
Path phone/raw0/data/data/com.microsoft.office.outlook/files/iconic/icons/ic_event_bike-1.png

Size 262 KB

 Modified 2021-03-11 16:31:41 (UTC+1)


 Accessed 2021-03-11 16:31:32 (UTC+1)
Width 1200 px
Height 1200 px

Format png

Image Classification Extremist symbols - ISIL

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8575
Case Label: K3 Case Evidence Number: 007 Device Label:

Recognized Images of Nudity (5)


All recognized images of nudity, sorted by time in ascending order

1 b64cfb62e66e4f8637828cc0c2e4497d

 Filename b64cfb62e66e4f8637828cc0c2e4497d
Path phone/applications0/com.zhiliaoapp.musically/live_data/files/offlineX/
cca47107bfcbdb211d88f3385aeede40/
feed_third_d424afb8f12d8b3326f6633ff106f320/125790590/res/
b64cfb62e66e4f8637828cc0c2e4497d
Size 25.6 KB
 Modified 2022-05-19 10:15:24 (UTC+2)
 Accessed 2022-05-19 10:15:24 (UTC+2)
Width 450 px
Height 300 px
Format jpeg
Image Classification Nudity

2 SKINY_201_PureNudity_1142x935px.jpg

 Filename SKINY_201_PureNudity_1142x935px.jpg
Path phone/raw0/data/data/com.android.providers.downloads/cache/
SKINY_201_PureNudity_1142x935px.jpg
Size 107 KB

 Modified 2022-05-04 14:52:02 (UTC+2)


 Accessed 2022-05-04 14:52:02 (UTC+2)
Width 1142 px
Height 935 px
Format jpeg

Image Classification Nudity

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8576
Case Label: K3 Case Evidence Number: 007 Device Label:

Recognized Images of Upskirt (8)


All recognized images of upskirt, sorted by time in ascending order

1 37.jpg

 Filename 37.jpg
Path phone/raw0/data/media/0/Movies/.thumbnails/37.jpg
Size 5.42 KB
 Modified 2022-05-19 10:14:38 (UTC+2)
 Accessed 2022-05-19 10:14:38 (UTC+2)
Width 283 px
Height 196 px
Format jpeg
Image Classification Upskirt

2 16DA302D0CE26B2FEF823ABDAB59FE3F.0

 Filename 16DA302D0CE26B2FEF823ABDAB59FE3F.0
Path phone/applications0/com.viber.voip/live_external/cache/ImageFetcherThumb/
16DA302D0CE26B2FEF823ABDAB59FE3F.0
Size 5.23 KB
 Modified 2022-05-19 10:29:40 (UTC+2)
 Accessed 2022-05-19 10:29:40 (UTC+2)
Width 283 px
Height 196 px
Format jpeg
Image Classification Upskirt

3 cd2bc5f8f4eb6d8c9813e1aaf22e38740532ee2c24621dbd212ef4ab75140b21

 Filename cd2bc5f8f4eb6d8c9813e1aaf22e38740532ee2c24621dbd212ef4ab75140b21
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
cd2bc5f8f4eb6d8c9813e1aaf22e38740532ee2c24621dbd212ef4ab75140b21
Size 19.8 KB
 Modified 2022-06-06 13:12:38 (UTC+2)
 Accessed 2022-06-06 13:12:38 (UTC+2)
Width 320 px
Height 320 px
Format jpeg
Image Classification Upskirt

4 cf62b291787011e290361a222329268e3d505d212eb029cf51bdc4bd288a0949

 Filename cf62b291787011e290361a222329268e3d505d212eb029cf51bdc4bd288a0949
Path phone/applications0/com.google.android.apps.photos/live_data/cache/glide_cache/
cf62b291787011e290361a222329268e3d505d212eb029cf51bdc4bd288a0949
Size 19.9 KB
 Modified 2022-06-06 13:12:38 (UTC+2)
 Accessed 2022-06-06 13:12:38 (UTC+2)
Width 313 px
Height 417 px
Format jpeg
Image Classification Upskirt

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8577
Case Label: K3 Case Evidence Number: 007 Device Label:

Recognized Images of Weapons (41)


All recognized images of weapons, sorted by time in ascending order

1 icon_referee_preview.png

 Filename icon_referee_preview.png
Path phone/raw0/data/data/com.google.vr.apps.ornament/app_preview_temp/shared/
com.google.vr.apps.ornament.content.stickers.sportmoji/icon_referee_preview.png
Size 11.7 KB
 Modified 2022-04-28 09:41:54 (UTC+2)
 Accessed 2022-04-28 09:41:54 (UTC+2)
Width 128 px
Height 128 px
Format png
Image Classification Weapons - Handguns

2 icon_van_preview.png

 Filename icon_van_preview.png
Path phone/raw0/data/data/com.google.vr.apps.ornament/app_preview_temp/shared/
com.google.vr.apps.ornament.content.stickers.locomoji/icon_van_preview.png
Size 15.6 KB
 Modified 2022-04-28 09:41:55 (UTC+2)
 Accessed 2022-04-28 09:41:55 (UTC+2)
Width 612 px
Height 408 px
Format png
Image Classification Weapons - Handguns

3 icon_train_preview.png

 Filename icon_train_preview.png
Path phone/raw0/data/data/com.google.vr.apps.ornament/app_preview_temp/shared/
com.google.vr.apps.ornament.content.stickers.locomoji/icon_train_preview.png
Size 211 KB
 Modified 2022-04-28 09:41:55 (UTC+2)
 Accessed 2022-04-28 09:41:55 (UTC+2)
Width 1080 px
Height 1080 px
Format png
Image Classification Weapons - Long guns

4 finder_avatar_b4a120b1fb40a87abf2026cf2a3ed5b4

 Filename finder_avatar_b4a120b1fb40a87abf2026cf2a3ed5b4
Path phone/applications0/com.tencent.mm/live_external/cache/
e4f82bbee917c8ebfb23dba443f79bf2/finder/avatar/
finder_avatar_b4a120b1fb40a87abf2026cf2a3ed5b4
Size 5.31 KB
 Modified 2022-05-09 17:47:22 (UTC+2)
 Accessed 2022-05-09 17:47:22 (UTC+2)
Width 612 px
Height 344 px
Format jpeg
Image Classification Weapons - Ammunition

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8578
Case Label: K3 Case Evidence Number: 007 Device Label:

Photos (3)
A subset of phone and application photos filtered by criteria: path not indicating a redundant image, sorted by time in ascending order

1 IMG_20220603_160500.jpg

 Filename IMG_20220603_160500.jpg
Path phone/raw0/data/media/0/DCIM/Camera/IMG_20220603_160500.jpg
Size 3.52 MB
 Modified 2022-06-03 16:05:03 (UTC+2)
 Accessed 2022-06-03 16:05:03 (UTC+2)
Exposure Time 1 / 50 s
Focal Length 4.44 mm
F-Number 1.8
 Width 4032 px
 Height 3024 px
Camera Manufacturer Google
Camera Model Pixel 3a
Format jpeg
 Rotation 270°
 Date of Generation 2022-06-03 16:05:00 (UTC+2)
 Date of Digitization 2022-06-03 16:05:00 (UTC+2)

2 IMG_20220603_160505.jpg

 Filename IMG_20220603_160505.jpg
Path phone/raw0/data/media/0/DCIM/Camera/IMG_20220603_160505.jpg
Size 2.05 MB
 Modified 2022-06-03 16:05:07 (UTC+2)
 Accessed 2022-06-03 16:05:07 (UTC+2)
Exposure Time 1 / 1565 s
Focal Length 4.44 mm
F-Number 1.8
 Width 4032 px
 Height 3024 px
Camera Manufacturer Google
Camera Model Pixel 3a
Format jpeg
 Rotation 270°
 Date of Generation 2022-06-03 16:05:05 (UTC+2)
 Date of Digitization 2022-06-03 16:05:05 (UTC+2)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8579
Case Label: K3 Case Evidence Number: 007 Device Label:

Image Files (10530)


A subset of phone and application image files filtered by criteria: path not indicating a redundant image, sorted by time in ascending order

1 battery_scale.png

 Filename battery_scale.png
Path phone/raw0/res/images/charger/battery_scale.png
Size 463 B
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Width 120 px
 Height 1116 px
Format png

2 battery_fail.png

 Filename battery_fail.png
Path phone/raw0/res/images/charger/battery_fail.png
Size 1.34 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Width 120 px
 Height 186 px
Format png

3 main_font.png

 Filename main_font.png
Path phone/raw0/product/etc/res/images/charger/main_font.png
Size 10.1 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Width 4032 px
 Height 156 px
Format png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8580
Case Label: K3 Case Evidence Number: 007 Device Label:

16 1d9143525c64121bf4bc6780443bbc8d5f78ddff

 Filename 1d9143525c64121bf4bc6780443bbc8d5f78ddff
Path phone/raw0/data/data/com.google.android.apps.tips/files/download/asset/
1d9143525c64121bf4bc6780443bbc8d5f78ddff
Size 1.08 MB
 Modified 2022-03-29 14:07:10 (UTC+2)
 Accessed 2022-03-29 14:07:10 (UTC+2)
 Width 2040 px
 Height 1920 px
Format webp

17 492e34794fae352a50e997836a82949158a3ab3a

 Filename 492e34794fae352a50e997836a82949158a3ab3a
Path phone/raw0/data/data/com.google.android.apps.tips/files/download/asset/
492e34794fae352a50e997836a82949158a3ab3a
Size 45.4 KB
 Modified 2022-03-29 14:07:12 (UTC+2)
 Accessed 2022-03-29 14:07:12 (UTC+2)
 Width 360 px
 Height 480 px
Format webp

18 916bc7edcf2e21dfceb2ad4b6db5c34978177da0

 Filename 916bc7edcf2e21dfceb2ad4b6db5c34978177da0
Path phone/raw0/data/data/com.google.android.apps.tips/files/download/asset/
916bc7edcf2e21dfceb2ad4b6db5c34978177da0
Size 313 KB
 Modified 2022-03-29 14:07:12 (UTC+2)
 Accessed 2022-03-29 14:07:12 (UTC+2)
 Width 691 px
 Height 480 px
Format webp

19 b0f5db38d9903898b6cb37e3684ba22ed0439e52

 Filename b0f5db38d9903898b6cb37e3684ba22ed0439e52
Path phone/raw0/data/data/com.google.android.apps.tips/files/download/asset/
b0f5db38d9903898b6cb37e3684ba22ed0439e52
Size 6.99 KB
 Modified 2022-03-29 14:07:17 (UTC+2)
 Accessed 2022-03-29 14:07:17 (UTC+2)
 Width 268 px
 Height 356 px
Format webp

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 8581
Case Label: K3 Case Evidence Number: 007 Device Label:

Audio Files (605)


All phone and application audio files, sorted by time in ascending order

1 Effect_Tick.ogg

Path phone/raw0/product/media/audio/ui/Effect_Tick.ogg


Size 6.35 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Duration 00:00:01

2 VideoRecord.ogg

Path phone/raw0/product/media/audio/ui/VideoRecord.ogg


Size 12.1 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Name 87_r80_gcam_o_video_start
 Duration 00:00:01

3 VideoStop.ogg

Path phone/raw0/product/media/audio/ui/VideoStop.ogg


Size 12.2 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Name 83_r80_gcam_n_video_stop
 Duration 00:00:01

4 WirelessChargingStarted.ogg

Path phone/raw0/product/media/audio/ui/WirelessChargingStarted.ogg


Size 35.2 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Duration 00:00:02

5 audio_end.ogg

Path phone/raw0/product/media/audio/ui/audio_end.ogg


Size 10.2 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Duration 00:00:01

6 audio_initiate.ogg

Path phone/raw0/product/media/audio/ui/audio_initiate.ogg


Size 11.0 KB
 Modified 2009-01-01 01:00:00 (UTC+1)
 Accessed 2009-01-01 01:00:00 (UTC+1)
 Duration 00:00:01

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 10876
Case Label: K3 Case Evidence Number: 007 Device Label:

Video Files (846)


All phone and application video files, sorted by time in ascending order

1 2.0.1654513999851.v3.exo

 Filename 2.0.1654513999851.v3.exo


Path phone/raw0/data/data/com.google.android.apps.photos/cache/exoplayer/
2/2.0.1654513999851.v3.exo
Size 592 B
 Modified 2022-06-06 13:13:19 (UTC+2)
 Accessed 2022-06-06 13:13:15 (UTC+2)
 Encoded (UTC) 2018-08-17 10:55:53 (UTC+2)
 Tagged (UTC) 2018-08-17 10:55:53 (UTC+2)
 Duration 00:00:13
Framerate 43.066 fps

2 2.0.1654513999851.v3.exo

 Filename 2.0.1654513999851.v3.exo


Path phone/applications0/com.google.android.apps.photos/live_data/cache/exoplayer/
2/2.0.1654513999851.v3.exo
Size 592 B
 Modified 2022-06-06 13:13:19 (UTC+2)
 Accessed 2022-06-06 13:13:15 (UTC+2)
 Encoded (UTC) 2018-08-17 10:55:53 (UTC+2)
 Tagged (UTC) 2018-08-17 10:55:53 (UTC+2)
 Duration 00:00:13
Framerate 43.066 fps

3 5.0.1651064605057.v3.exo

 Filename 5.0.1651064605057.v3.exo


Path phone/applications0/com.pinterest/live_data/cache/video/media_cache/
4/5.0.1651064605057.v3.exo
Size 885 B
 Modified 2022-04-27 15:03:25 (UTC+2)
 Accessed 2022-04-27 15:03:25 (UTC+2)
 Encoded (UTC) 2020-08-25 04:49:13 (UTC+2)
 Tagged (UTC) 2020-08-25 04:49:13 (UTC+2)
 Duration 00:00:07
 Width 480 px
 Height 852 px
Framerate 30 fps

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 10980
Case Label: K3 Case Evidence Number: 007 Device Label:

Documents (1690)
All phone and application documents, sorted by time in ascending order

1 hash.txt

 Filename hash.txt


Path phone/raw0/apex/com.android.apex.cts.shim@1/etc/hash.txt
Size 774 B
Mime Type text/plain
 Modified 1970-01-01 01:00:00 (UTC+1)
 Accessed 1970-01-01 01:00:00 (UTC+1)
SHA-256 hash 1FD54FABC81279CDD91D1FDAA16DDFF0B35A7D7B598496C328DBDA32E1143251
MD5 hash 258B1D9A2BED00CBD580874E48402132
Document Preview
ddc55cbbdbe8b0f9e57bde70efd6239615c3663deeac43036ce1ac2899c9c29d2f5606cfcd0cca581ac02c7d728adc436014b29329d40e72bbf6c4e26e5432f6
3b2467501ed23eee74b05f86ab8d8837a8c9f7cb23a13ba717ed628abb37f8f00182fc481ebfb90ba693b1b65657c4064d7d9e7d640b0540707d41aa474457
84
d7170eb3d36cb438eaf37e92a277e88e583134908cefd85d2aa251719f2d27768b6b5ec2204bde0ea6f96420a568c3f37fb90e760d1d092d7c9b9863ee0959
04
bf859ce12c7608e5a5da6767991b3c9f07a972df28257656c0b435a1d7b9e8e17d1bf5d309b271fb748ad4f8e7c7e2a77efd54dfdcebcfbca85b79e73ffdc422
1d59ff542bcc2afa2b1c7a7837ee659d4d5a49b535f128e3ba232e1d648da88a7f15f4bc7039c54ac598a30f

2 ld.config.txt

 Filename ld.config.txt


Path phone/raw0/apex/com.android.conscrypt@310911000/etc/ld.config.txt
Size 2.38 KB
Mime Type text/plain
 Modified 1970-01-01 01:00:00 (UTC+1)
 Accessed 1970-01-01 01:00:00 (UTC+1)
SHA-256 hash BB523848BE5C34D30984C33DBD288BDF6815D906EA34C0109149C1484C603E2B
MD5 hash BA7504F445A790C32C54EFB9141E4036
Document Preview
# Copyright (C) 2019 The Android Open Source Project
#
# Bionic loader config file for the Conscrypt APEX.
dir.conscrypt = /apex/com.android.conscrypt/bin/

3 ld.config.txt

 Filename ld.config.txt


Path phone/raw0/apex/com.android.media.swcodec@311811000/etc/ld.config.txt
Size 8.04 KB
Mime Type text/plain
 Modified 1970-01-01 01:00:00 (UTC+1)
 Accessed 1970-01-01 01:00:00 (UTC+1)
SHA-256 hash 4F3603A3A3BDA52D8372595243F1D3DC7EF61B3F90215A3768CCE8D505740914
MD5 hash 820942D033D42662A1F6112AB5969BD6
Document Preview
# Copyright (C) 2019 The Android Open Source Project
#
# Bionic loader config file for the media swcodec APEX.
#
# There are no versioned APEX paths here - this APEX module does not support

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 11229
Case Label: K3 Case Evidence Number: 007 Device Label:

Face Matcher

Images with identified person "face" (4)


All phone and application Images with identified person "face" reference photo path S:\face matcher\face.jpg, sorted by time in ascending order
Reference photo:

1 soubor.jpg 

 Filename soubor.jpg
Path phone/raw3/Download/soubor.jpg

Size 7.55 KB

 Modified 2022-01-05 09:58:19 (UTC+1)


 Accessed 2022-01-05 09:58:19 (UTC+1)
 Width 192 px
 Height 262 px
Format jpeg

Matched Face Path S:\face matcher\face.jpg


Image Classification Other

 Camera Ballistics
 Fingerprint C:\finger\finger.fnp
Match  No match
Status Unknown error

2 soubor-1.jpg 

 Filename soubor-1.jpg
Path phone/raw3/Download/soubor-1.jpg

Size 5.84 KB

 Modified 2022-01-05 09:58:27 (UTC+1)


 Accessed 2022-01-05 09:58:26 (UTC+1)
 Width 225 px
 Height 225 px
Format jpeg

Matched Face Path S:\face matcher\face.jpg

Image Classification Other

 Camera Ballistics
 Fingerprint C:\finger\finger.fnp
Match  No match
Status Fingerprint not matched

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 11711
Case Label: K3 Case Evidence Number: 007 Device Label:

Files

Misc Files (832 files)


Filename Size Created Modified Accessed
 /
 /account_icons/
 _39.png 10.1 KB
SHA-256 hash: DE6B7FB19F556A195A0D4AA6E6F2705786EE09C0F2C1A2F3E0211C6F8DCA0E31
MD5 hash: C94FB7F4CCEA52CBAFE850F37E04156F

 _41.png 9.17 KB
SHA-256 hash: EA9BFFE68D5359590190E95EF604B56D56FB9B45343078C0622804445899811B
MD5 hash: F2B101F6E8BB7502098EC0BDF367CD54

 _43.png 10.3 KB
SHA-256 hash: B09E499AC9B448822D7E3D1B7719D64A45B42B3CCF5F0DC759B2F10A0D162B88
MD5 hash: D2C1DE44D0DBC213D13B7EAD42AE2E57

 _45.png 10.8 KB
SHA-256 hash: FF72A705476078308247AD37A00693215C348A6B1DE808D9C4713EF6E87C8136
MD5 hash: B927A3CD45E6F1E5EA38022384466E2C

 _47.png 20.1 KB
SHA-256 hash: 8E357478FC9DCF15DFD6BC96F15BB4AE8A55E1EEFC92B38804C3B0593D45230B
MD5 hash: 795A83E27B59909B517E2ED63D74F017

 /contact_pictures/
 _124489.jpeg 2.38 KB
SHA-256 hash: 12E01B0BC8B9BC496A25A33194B8FF2C7C638FEC03AEBCCA78D658578721F922
MD5 hash: DC8C33BE9761AAD5D9B54E53509920B5

 _124492.jpeg 4.01 KB
SHA-256 hash: 877888F287FEC20A5F8E6EDD10D2B0F95A2097758E1DC177E2E787AE5ADB9E05
MD5 hash: 29AF9E33FFC7700579315F2D8E542B31

 _125116.jpeg 5.74 KB
SHA-256 hash: 9615017D043635BBD23D4DBAD4E7ED73385328610E31FE4139D400672C3F24FB
MD5 hash: A979502E3C189604B4818C4FA0C71CD4

 _125118.jpeg 5.64 KB
SHA-256 hash: A3CA4FACB11FBB26F6D76E2F59BBFB31034E89CD9BFC0724CA716856EC904080
MD5 hash: 89CA1187880B53EE23708285BE6413A9

 _125119.jpeg 6.00 KB
SHA-256 hash: D72B0C3FDC70E3EA3B0B444B40734518406BBC2D6FDF5BA12CCC148CB6A0C372
MD5 hash: 74EBA7C22E48DE67AC1369B9C4E52768

 _125121.jpeg 3.44 KB
SHA-256 hash: 9E13A15B1951E514715EA3B35855F26853698E0C9EA060FE6D2F1708D3FA83DF
MD5 hash: 99667A1FB6BE81C60210B6CA063AD1D0

 _125122.jpeg 3.38 KB
SHA-256 hash: C1C1B560478C71AC5EA686977DAD0B3B64812541B914231309C882DCB875FC9D
MD5 hash: 8C244077DD47E9E7F4C205318275C7BB

 _125124.jpeg 3.62 KB
SHA-256 hash: 21CAEF17AF1107F91F860DC2CC6103B975B2C12064B54F1C742C08E1352114D7
MD5 hash: 814F9E5DA491112019B66D204DC439CF

 _125126.jpeg 6.07 KB
SHA-256 hash: 12624C2234362E1FEBEFAF3620FE077D997E7EC01B5ED51C6883F57F446CB911
MD5 hash: C159FEAF0E482DF25AEE4505CF1B2B02

 _125127.jpeg 6.26 KB
SHA-256 hash: D6DE180EC4E452C75884EB2C245E0611FC36BAF5C261F207BEFA84BC56F46620
MD5 hash: 3A03931F51F93263BCD94C54E3991D27

 _125129.jpeg 4.62 KB
SHA-256 hash: 14EC88ABC89A77088AA6AB0783733406027D877C4624BADD4F6BDE958D437C14
MD5 hash: C8844F6EF7B1FC909FA9D6190AF306C1

 _125131.jpeg 2.78 KB
SHA-256 hash: 3CDC3CC067A5DF6D65883EC8BC6FF133657C907367B1035296FE0D358D3D623B
MD5 hash: 133FDC436322BDE617DFCB6202C8F556

 _125133.jpeg 3.65 KB
SHA-256 hash: 6C41582A7DA098AA1B6C3E9F764B2126B461A74989FE789AF551F0BC0F597171
MD5 hash: 377438B21EF21A3529B775B62B540980

 _125135.jpeg 4.59 KB
SHA-256 hash: 532241E5FA6104E3EEA3C23F2C4B923A960CC3E6F1D1B52CA250F92861898C3D
MD5 hash: 05D335C84EABF4CC67616AD3E55CA4C1

 _125136.jpeg 4.84 KB
SHA-256 hash: CA3F1CF8580E38EA6160213686D1AD559C95C26F880B3F57D3839FE148BAD984
MD5 hash: 2F138BC11D1EAE3F7776FD31D5816619

 _125138.jpeg 5.00 KB
SHA-256 hash: 0FBB614F931559B4893F328AB76688295F1B97578B49D6C10560C52D2480626E
MD5 hash: 06621582D86955CD65D4AA3A7D757F80

 _125140.jpeg 5.16 KB
SHA-256 hash: 7966B976E0FE3E062F625CB31D63A286B97ED7E946B4C6E56EC0AC50CDE38EFD
MD5 hash: 76664C69427C06A0E0E775A84DD0938D

 _125142.jpeg 3.41 KB
SHA-256 hash: 6FBE90E802558D0DA8E953BAAC75D43ED13F9666DCF895071D0565B1F1FA6FCA
MD5 hash: EF8204667B91C91075A8EEE666F166B7

 _125143.jpeg 3.32 KB
SHA-256 hash: 0AF624E3D2C10E2CEA8A478763370ACACE54626CE0BE8FC3E5D9084965B04D9A
MD5 hash: 4A35159F02421527124FBF15541794B3

 _125145.jpeg 5.44 KB
SHA-256 hash: 7F985CEACF6C9606E2CC9900DBED1A8F41D8D15112CB934052094629731AB7D3
MD5 hash: CAF4D91342F89C4828B896263679A304

 _125147.jpeg 5.44 KB
SHA-256 hash: 7F985CEACF6C9606E2CC9900DBED1A8F41D8D15112CB934052094629731AB7D3
MD5 hash: CAF4D91342F89C4828B896263679A304

 _125149.jpeg 5.14 KB
SHA-256 hash: A7D7030E7A3FB2C12E84599DA9BE9C2A312D5B5FF0F41AA6A481941F1CE8B00D
MD5 hash: BCBDE67C39E262829F5DD2AE7E445D65

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 11726
Case Label: K3 Case Evidence Number: 007 Device Label:

Internal Files (54264 files)


Filename Size Created Modified Accessed
 /
 bin 17 B 2009-01-01 01:00:00 2009-01-01 01:00:00
SHA-256 hash: C7CF7B880DD1C266A37C631C421544C453C08D9512F98A787AD92EA06EF459E5
MD5 hash: 795A55F1ED2A16F557EB450D1F0BB3B3

 bugreports 56 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: A112C7242F45D95F7E564FD62819702E794F374AA15054F98EAE925B9EC4158F
MD5 hash: 401A60BA45715FC1DF2BDBEA346EAEDE

 cache 17 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: F913BDEC6DE040457571ACB84C9D9ABA92FA5EB23C97E705D531E82A0F5FF50F
MD5 hash: A9B2562B071961E4101B418CEFD0713D

 charger 25 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 810F7DEB78270B36AE03866354F6BE7E96EBDC98B04D77767076BD67812C8976
MD5 hash: B181AC807C05A59674EA39F880226BD0

 d 23 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 3EA2F0DFBE463717365B699617D525321186FCB59B0D7A7E878CB508DE3E25A2
MD5 hash: 9E5EAA4116E0F8BE39333D0F2CAAB545

 default.prop 29 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 6D44B1A69FC9F9D78DBD25E16D62B54058436494EEE66BC086362EFD8C824E7D
MD5 hash: 5902B6A7D3E822E211E4D88600882697

 dsp 17 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 10F2BBD53B509F98C8A1D7D11E56B76A9C995B48A1415F194010A5F22F0FEC77
MD5 hash: 9C7357C143DD53F75A0030481B962093

 etc 17 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: CDE5046ACA2FA0CD390EB5C4B89529DD5FF05400DF7826369976D4E4AA467CF0
MD5 hash: DBFCF3F2902621CEE723BD15C6817190

 init 22 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 5A03FE155D765946D56BB343DC76F2F1A577DBB1766B48208F5812585469539E
MD5 hash: 2D2D7C6B43F41E9C6D2F876780491798

 init.environ.rc 1.62 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 356D6B56947D805A51FE981E1ADDB79A6FC907575248A19B284FE7A4F389F802
MD5 hash: 67B1F3C5E7F0A73322E057E1DDC8C3FB

 init.rc 32.7 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: D77EB26137A0B6880EC0032619B3BCE0923C451EF1B5D67DA0AD2EE40BCF079A
MD5 hash: 9B3E23A29B7C37D3C1EA1BA2C793C86C

 init.usb.configfs.rc 7.51 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 1384154DB54FE5A8B3FB62F9C8E9C6732C379066C941364C25D853AC55AA994B
MD5 hash: A5A31FCBE58F0D79C9E04BC360D2A683

 init.usb.rc 5.52 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 4DDE3AA1F087C79ABDC960AF50897A60AE794E742C6F1086E1C7A3D252EEE2C6
MD5 hash: 8FE053CFEB32F86B3148B198AF2A0834

 init.zygote32.rc 563 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 99B41AE737CFC340D672F0BBD2C9DEA3ED1ED73A3187CD61AB2C3FEF0F3F90E3
MD5 hash: 426066DB1BD176ACE6A3C5DAA1C2E38E

 init.zygote64_32.rc 981 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: DFFAF27B5859FC37D2623BBD65CC7D5B7A7FC81EEFC9FFEADE1E784BD92CFCC0
MD5 hash: 700664F545CBCD98BF9DDC847859FD58

 persist 25 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 3392A7C8240043780E3AD38BD3D23C84EAAD6EA3EF80D531AD5258A5D0484184
MD5 hash: 9F2815F608397F2260B24EA8BF2BA212

 product_services 30 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 76C816C4D100BE0E85FC4F91FE480DE1F8E723A30AC4E0858A2A3A5687EE06BB
MD5 hash: 0FBEA63CD5CFA41FB20D690FA017D7B1

 sdcard 27 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 0DD0FAB3AD128BFADFEDFB5F4A4BF2599DDF4D0133133755B1A3BDCC01B2517C
MD5 hash: AA9724B888FAD69CCDE702FAE2CFFD1D

 ueventd.rc 2.55 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: FA500E62A3601815B5416E63D946B1F25FEA53630E4D14C3C982070D4590CD5F
MD5 hash: 7E0E6391EE9142C4A6B417E4B4F9327F

 /apex/
 /apex/com.android.apex.cts.shim@1/ 1970-01-01 01:00:00 1970-01-01 01:00:00 1970-01-01 01:00:00
 apex_manifest.json 58 B 1970-01-01 01:00:00 1970-01-01 01:00:00
SHA-256 hash: 4D575CBE483ACBBBF5BF5328BF98B1F13FD744E08405FD8E29414A7FB7F2A232
MD5 hash: 6893C2DB61FB3700DA89F69E9446BBBF

 /apex/com.android.apex.cts.shim@1/etc/ 1970-01-01 01:00:00 1970-01-01 01:00:00 1970-01-01 01:00:00


 hash.txt 774 B 1970-01-01 01:00:00 1970-01-01 01:00:00
SHA-256 hash: 1FD54FABC81279CDD91D1FDAA16DDFF0B35A7D7B598496C328DBDA32E1143251
MD5 hash: 258B1D9A2BED00CBD580874E48402132

 /apex/com.android.conscrypt@310911000/ 1970-01-01 01:00:00 1970-01-01 01:00:00 1970-01-01 01:00:00


 apex_manifest.json 62 B 1970-01-01 01:00:00 1970-01-01 01:00:00
SHA-256 hash: 79633806E89F1A9A5CDA4F383868EB8BBF29241DC1CFD620D529745FE57BEE49
MD5 hash: F56A6F98E2E5189BA5E2D0088CCC0E94

 apex_manifest.pb 103 B 1970-01-01 01:00:00 1970-01-01 01:00:00


SHA-256 hash: AC68D256F2015FF21819BD62C244D1C9FE7D0F77019435D4C7C0C9BC4EC0F8A3
MD5 hash: D18C7923299A77ACC6CB303A19AC1A86

 /apex/com.android.conscrypt@310911000/bin/ 1970-01-01 01:00:00 1970-01-01 01:00:00 1970-01-01 01:00:00


 boringssl_self_test32 2.70 KB 1970-01-01 01:00:00 1970-01-01 01:00:00
SHA-256 hash: 5FA865461D63E1349FC0BC34DD8C66DECB3B2F461309ED0A4AB7C8E918E8314A
MD5 hash: 28EC4C59F88CAB7A410834E71AB81E9D

 boringssl_self_test64 10.6 KB 1970-01-01 01:00:00 1970-01-01 01:00:00


SHA-256 hash: 85361614F0E64CE6CFFE732937AE7A9FB6F8836F1948E31321E79F32DD5B4795
MD5 hash: 1888F86525F3AF8B10ED9240151AD837

 /apex/com.android.conscrypt@310911000/etc/ 1970-01-01 01:00:00 1970-01-01 01:00:00 1970-01-01 01:00:00


 ld.config.txt 2.38 KB 1970-01-01 01:00:00 1970-01-01 01:00:00
SHA-256 hash: BB523848BE5C34D30984C33DBD288BDF6815D906EA34C0109149C1484C603E2B
MD5 hash: BA7504F445A790C32C54EFB9141E4036

 sdkinfo.pb 2B 1970-01-01 01:00:00 1970-01-01 01:00:00


SHA-256 hash: FB8DA7EB5B1B399E7321179DAC9E9F65773D7331E1E30554E3911E4325E1EF19
MD5 hash: F7C57F06A1D3CE117749FC98E2111668

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 11753
Case Label: K3 Case Evidence Number: 007 Device Label:

Filename Size Created Modified Accessed


 hmm_symbols 179 KB 2009-01-01 01:00:00 2009-01-01 01:00:00
SHA-256 hash: E2ACCA589ACCD465B0F2650C8D63B9F5C28A0B881FC0215EBA49A1ADF3BA6D40
MD5 hash: B1F0B37724CD0204A035D08CE66949AB

 hmmlist 110 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: F4B50C78A838A6BD4B70CDF344850FC91B531E4C4FC63403476526B9D29A1FEB
MD5 hash: 798967B0814C55C7260F2FCC5CA9548E

 input_mean_std_dev 1.89 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: D7F6FFF6AC4B5AC1826478B4BDC787A03A7C2690B99B01FC21D0426644BA1078
MD5 hash: 006BA112079115F45BD263D4C1AEF937

 lexicon.U.fst 1.32 MB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 661FF125A7424AC75AC2F654612F61EF8A65E286BEE51BF6C0714A8122D10F9E
MD5 hash: 46DD1E64E8778E3D703FE5CE1B250BB7

 lstm_model.uint8.data 4.43 MB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 94404B82DAC705E76FD9A16106A1457E4D90ABA9076739596212478CD154BDA3
MD5 hash: A09B957F6C619E56E8693DA8A2AB4D22

 magic_mic.config 1022 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 18E1BA404D27D5B46514B08755600273022A552F170F816ADE62FF833474D58B
MD5 hash: 07859B6CCC0D003B0FE7762E48D35CAB

 metadata 4.06 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 0C1DD964F1DE741EA0BA90E22D0EE0A10283D1650A303DC1C0BA7336792F2F5C
MD5 hash: 7FC62643B278FF16D830E9317BE3B80E

 monastery_config.pumpkin 959 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 217F4A1075C1CD550D12BA96C3D86E8EB0EE863546B1F0CA99BB742FC22A5180
MD5 hash: 4CA838A58C90C6E37BAD2AC96797EB6E

 norm_fst 862 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 27616FA4C7CF20CD5477FF41E12E967840E5DBA35709E5B88A33337E3BC42A3B
MD5 hash: 801C39261C14EE794B046F834C18AEB2

 offensive_word_normalizer.mfar 535 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 140FEBB4CC181AD64F09DFA0248B8A3378371970F568D5F95541CDA79D0061DE
MD5 hash: 2BE464249C201F65241E296833A37209

 offline_action_data.pb 4.50 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 29E77738A5DDAA459D0E1E779EA59E122E33645EBA23158125DD37C7DD686F85
MD5 hash: CA381A258095F854D6E529493C6D12AA

 phonelist 244 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: BBAD78C07CF86A0012EDEA3AD9E968534CC8149E32E03020E3118DB77F59930A
MD5 hash: 2A3F21848402442385351CC4E8CF665D

 portable_lstm 489 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: A6154026F09715CAF05F1A6247FA15144FDFADFD58E9D06E62E448EE4BB38777
MD5 hash: AEB587EA1A5CA1C2D2CDE9B3AF1653CE

 portable_meanstddev 326 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 9F95EA03464749281E694413B55A81A50B537640DF38FBFFE69369785AD1A598
MD5 hash: 970AD8317EC3D60BA1800F892D2C4E02

 prons_exception_dictionary_file.txt 113 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: E37254C80CC7835A97A7DA4DE9D93C15E1574A02DC6CC3A497B3469DECD87D8B
MD5 hash: 9CC0A3ACBACC975B8DFBFAEDEED639BD

 pumpkin.mmap 13.0 MB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 9F4FD240FE5BE5A6D9E7D504FDA7E215B96AB05F8832411BBBD231870DED15CB
MD5 hash: DC724268FE4F975876E63A734EF8F237

 rescoring.fst.compact 5.15 MB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 808E1A691DBA73C1BD129B4566A08E0A70BBF94EB5BBF2D6D9234668EFDBE1EC
MD5 hash: 8E9F5F7E673DB2982555F14AA3A504E8

 semantics.pumpkin 383 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 71CF10139598DACC2A508BFA467F2A548EE22CF42615E6A3C13146EC63100D98
MD5 hash: E012DCE958980BF0073E5D14ECC8E927

 verbalizer_terse.mfar 964 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: CAE868804F45BB2CE09B4B81D03F51AC04048975BF7D64AECF1C9AEE5881604A
MD5 hash: A826F85ABD16291978CA7F64DE1CB62C

 voice_actions.config 20.1 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 2014FD1BDC317CE257A88D2E9773ED25BA7CD9D3D2E2823CD6193C308A0941E5
MD5 hash: BFAFD632DD48FCB528791C9DD1D4A7D0

 voice_actions_compiler.config 15.0 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 5C7F6D7DA7BE82BDE0A9ECE2CC77F2E5CCFA19A85DD4C954B432AFCB979728B4
MD5 hash: 92AE6E8D9E09AA4D57777F33CA5544B8

 word_confidence_classifier 1.08 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 9579485E15D00CBE50376E4F6FB6103E37BE7EAE15290D20DF294D9B0D6580CB
MD5 hash: 635426B9AA92478A2A9325AE5A6FF087

 wordlist.syms 854 KB 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 84D468B4FD93FA6ACA76FB41C2325BC21AF8B2E43131EEED5159DA76A79AC041
MD5 hash: 5DC5EDD78B886121E0C617F209168F1D

 /res/
 /res/images/
 /res/images/charger/ 2009-01-01 01:00:00 2009-01-01 01:00:00 2009-01-01 01:00:00
 battery_fail.png 1.34 KB 2009-01-01 01:00:00 2009-01-01 01:00:00
SHA-256 hash: A6ADC7AAEEE6BB1DB8AD1DC3D6C2185B166FA106286092D300BFBB0AEFAE00A2
MD5 hash: 6F3F1537D01CD947763D7244A50F349D

 battery_scale.png 463 B 2009-01-01 01:00:00 2009-01-01 01:00:00


SHA-256 hash: 7C95E165F9696D9AA61CF5ABCB5CBBAFD6A00E3EBB50AC20E1FBC533834A8CFE
MD5 hash: FD0728AB7D6E7ABBFD9DEAC51E5926AA

External Files (2734 files)


Filename Size Created Modified Accessed
 /
 .profig.os 36 B 2022-06-03 09:46:02 2022-06-03 09:46:02
SHA-256 hash: 14FA8E7EA1E9A7546C78B8F57EE14B6662E4CE2E5C8FCDB0A8B47F41AD94F65A
MD5 hash: CBCED062A7A0B5691FAA535A0A37BEC0

 /.FilesByGoogleTrash/
 /.FilesByGoogleTrash/.index.db/ 2022-07-15 17:00:01 2022-07-15 17:00:01 2022-05-20 17:04:57
 trash_database 24.0 KB 2022-05-20 17:04:57 2022-05-20 17:04:57
SHA-256 hash: 93B8A8C7F1EEF6DDE105D37DDDC177DCBE88BB80B27E85F80B548645FDEA1AC5
MD5 hash: E82D050E9A055611C9F6A8BBEB6F6933

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 13861
Case Label: K3 Case Evidence Number: 007 Device Label:

Filename Size Created Modified Accessed


 /tencent/MicroMsg/
 /tencent/MicroMsg/browser/ 2022-05-06 13:12:34 2022-05-06 13:12:34 2022-05-06 13:12:34
 version_id.dat 36 B 2022-05-06 13:12:34 2022-05-06 13:12:34
SHA-256 hash: 4AC01DECEFF6498985F0C5CB28DC2031D290F1BF1E4F0978A34A821DCCAA337C
MD5 hash: 860579CB49DB0DAC44A0AAE3485FF6A2

 /tencent/ams/
 /tencent/ams/cache/ 2022-05-09 09:39:29 2022-05-09 09:39:29 2022-05-09 09:39:29
 meta.dat 0B 2022-05-09 09:39:29 2022-05-09 09:39:29
SHA-256 hash: E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
MD5 hash: D41D8CD98F00B204E9800998ECF8427E

 /tencent/tmp/ 2022-07-08 14:22:07 2022-07-08 14:22:07 2022-07-08 14:22:07


 vodPcdnMSdkPeerId.log 8B 2022-07-18 08:39:25 2022-07-08 14:22:07
SHA-256 hash: 334B231023DDA88AA405508F81E8E06AD73A8545FED0B8DFE9DACA4843F62F76
MD5 hash: 5415F1A9CBEFF9D65321407D7F51756C

Applications Files (50014 files)


Filename Size Created Modified Accessed
 /
 /android/
 description.info 245 B
SHA-256 hash: DE9E3A1D65659A76F6F1253A39C786EA6CD6BAE919694C49819CB73CEC396CE9
MD5 hash: 717059A1A4058EDC36FC84F8D2F9971D

 description.info.xml 3.64 KB
SHA-256 hash: 5079825A80BABC306272BDE006A7FFCF4C5E3F58364361B9FC88A20C7EA5074E
MD5 hash: 4FB0866B5A989E7136BD11A293DEAC33

 icon.png 9.60 KB
SHA-256 hash: CC95F70ABA00C7C8E97632B43F146E4392E3C2135E625045E80FBAF00F69E328
MD5 hash: 816710709ADA5CC76887406D7D0D0B09

 /android.auto_generated_rro_product__/
 description.info 326 B
SHA-256 hash: A58AB9DF5302E46E5145B17DA58DCC39239C1BEE8A506A0A7A37EFF9980E27BB
MD5 hash: F0E6435246D0450FF2AFEF8B99B5EA6C

 description.info.xml 3.75 KB
SHA-256 hash: 102B85D70B55F59A1BE54C4FFF8A492AD595509742733478907A3DF3CC6E8A19
MD5 hash: 2198B6630BD9EC7F9533F172276AE25C

 /android.auto_generated_rro_product__/backup/
 _manifest 1.95 KB 1970-01-01 01:00:00
SHA-256 hash: F517783697AAA36138E68FF4CF164ADB4C58D53B4FF0C9EB4186CDEF7DA32E80
MD5 hash: 6283F31395F375AB67E20F0A39F0784B

 /android.auto_generated_rro_vendor__/
 description.info 321 B
SHA-256 hash: 1B587672EC85C4CF04724BCBFE1EBFCA38AB89A3DC4B1B78D65F932D7531ECE2
MD5 hash: 9731743F494F1B5429352C19AB2FABC2

 description.info.xml 3.74 KB
SHA-256 hash: E117365725A4268FF7121B348B9200FE1F336314C190CAABFDF37F61B86A05C5
MD5 hash: 46AB92A38D212F4B36663369ED0C1DF2

 /android.auto_generated_rro_vendor__/backup/
 _manifest 1.95 KB 1970-01-01 01:00:00
SHA-256 hash: 9D2DAFE7CC5BD302E0FB48CAA0FAA78E2275D6650F9C2A2CB34BAAECFDA8E579
MD5 hash: 856631A36B3CB921F41ADB5925E30C96

 /android.autoinstalls.config.google.nexus/
 description.info 314 B
SHA-256 hash: FDD3AAA7D0755D2F3E1F21F920491AEEC40540D25FC4B33D5A349098368B85C2
MD5 hash: 07C474739ECFF1FCD71BCDBE8FE95875

 description.info.xml 3.79 KB
SHA-256 hash: 6FF95DFC7090B054DF18ECE1AEA3034955600B4DB29BE7F9787747EF51BA2C06
MD5 hash: 17CE5D6ECD4D358FB872529D9C1DA2D6

 /android.telephony.overlay.cmcc/
 description.info 304 B
SHA-256 hash: 2D4DE29F67189B7EDA0F862DB7F914B6B873F0118BE01646FF91E6D117526DEA
MD5 hash: 074FD77EA543D53CC6FA2D8C78AE9016

 description.info.xml 3.73 KB
SHA-256 hash: E45C57B3D93712F18EB6C1131E77A4F33948F665A15D724E004E5093F65A3ED2
MD5 hash: 1BE2BEA53350CC1269DA6E2AB201A5CB

 /android.telephony.overlay.cmcc/backup/
 _manifest 1.94 KB 1970-01-01 01:00:00
SHA-256 hash: 935C3A4D25ADFF3CBD84FB791061E6CB31E191B6962E61822BA7A6843A08363C
MD5 hash: A5C2C9E5BE8CA7A2B1549BC279B6118E

 /com.Slack/
 com.Slack.apk 48.8 MB
SHA-256 hash: 4CFD18FBEBD172F6879FF606BF806E027FB8E11F1D01B5093486F8178FCCE124
MD5 hash: C5D2C134D01A2A2C9CF819090037C3F0

 description.info 268 B
SHA-256 hash: 9D369C66B379FE9D1C3A6DB3852FF979274C8F310B8A73D81954BE2067BE6C2F
MD5 hash: 21D402179A41513BE5F8B801120D58D0

 description.info.xml 4.88 KB
SHA-256 hash: B4B456C454789ED5775F26D7BA584A21AE8051FE77938105495E34721AC1CD2D
MD5 hash: 6BCF4AA9BCBA62480E0ED38874B4C5EA

 icon.png 9.86 KB
SHA-256 hash: 36D9D58A779E0CD36B8754F3653FB1D0306F2FB9690C958CA090C020BF015465
MD5 hash: 205DAC2763A3B63B1A5DCA1F4F9B05F3

 /com.Slack/live_data/
 /com.Slack/live_data/app_com_birbit_jobqueue_jobs/
 /com.Slack/live_data/app_com_birbit_jobqueue_jobs/ 2022-07-18 08:38:35 2022-07-18 08:38:35 2022-05-10 11:57:29
files_jobs_default_job_manager/

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 13959
Case Label: K3 Case Evidence Number: 007 Device Label:

Filename Size Created Modified Accessed


 FirebaseAppHeartBeat.xml 239 B 2022-07-11 11:27:56 2022-07-11 11:27:56
SHA-256 hash: FD2C62DB60582AE1D31A6C7DAB1349E5962EF38256B9BB92E3559427A5470685
MD5 hash: 532E026EA31A7CF6C4CD4BDC54ACB386

 SecureSMS-Preferences.xml 750 B 2022-07-11 11:27:31 2022-07-11 11:27:31


SHA-256 hash: F4871B11B99211A272D7C772CE0ECF1C46817FD97F592C56E72B81182342D786
MD5 hash: 2FAF5A6140FE88FEC667E1E904F6DC6E

 com.google.android.gms.appid.xml 390 B 2022-07-11 11:27:56 2022-07-11 11:27:56


SHA-256 hash: 68CEB4A1EF6DBC0EE4ED13B8ADF6512429029D5293825A1697035DFC9760A56D
MD5 hash: F7B72C6B0FC1685F3D333EFC66C47FEB

 org.thoughtcrime.securesms_preferences.xml 2.06 KB 2022-07-18 08:39:06 2022-07-18 08:39:06


SHA-256 hash: B76207DE0295CD77ABCA0A3A70F8791DCC613CBBE67BABAC7B30C7B5CD62E9EF
MD5 hash: 102BB2561BF17C7003FAD4E3BE4A3CBB

 /org.thoughtcrime.securesms/live_user_data/
 /org.thoughtcrime.securesms/live_user_data/code_cache/ 2022-07-11 11:29:56 2022-07-11 11:29:56 2022-07-11 11:27:23
 com.android.opengl.shaders_cache 213 KB 2022-07-11 11:29:56 2022-07-11 11:29:56
SHA-256 hash: 863914C164422E1940AC2330132885546EF9669327DCA61533FE08D24DD81E64
MD5 hash: 0FD63687B79BC6D7C1EE9205E9811428

 com.android.skia.shaders_cache 99.6 KB 2022-07-11 11:29:56 2022-07-11 11:29:56


SHA-256 hash: 70DEF59C2377F7B9746DCD882E8F64331CF021FDF6B38BB04891AE3FC22D535F
MD5 hash: 41BCFBE4BFDB37CE4A562FFBBAF258A7

 /org.thunderdog.challegram/
 description.info 316 B
SHA-256 hash: 08D48444562620A359153D1087401ACBF17502781FC69E3AD6A1D1293495011D
MD5 hash: 79EDD9138DD016C4CC8B0CBE9C018C6C

 description.info.xml 2.37 KB
SHA-256 hash: 42B2169D232FCB611C914672E2D4ED481DB555BFB3AA1DA904D1BD1C9C9A797B
MD5 hash: CAD4B896813F92BC8A2A55D11B230AC6

 icon.png 26.0 KB
SHA-256 hash: 4E810564706C746EAD62F5037515BB61585FDF1F2F165D9EF08A5CFEC27BDF6B
MD5 hash: C9A539F2D25D4094949078CC8D957918

 org.thunderdog.challegram.apk 22.9 MB
SHA-256 hash: E843E249A102608254B714518A3730E521462291B84F63705C792C9AF23906B2
MD5 hash: 57A7E3A6D0ABDA55781C93227637E79B

Extra Files (216 files)


Filename Size Created Modified Accessed
 /
 getprop.txt 31.9 KB
SHA-256 hash: 39C3ABD07037D82814A79338B3DE8F975CBF2F6BD1C1B0523C7D605901CE8E40
MD5 hash: D484F1EFFF210F98D32CFABBFD8E58F7

 packagelist.txt 10.5 KB
SHA-256 hash: E26C17BF1BFDDEFF1B500014F5CF0F41C0B5A21F57D1DB19B1E02A7CAFB1902C
MD5 hash: D840ED581117CDED965723C2767B7658

 userlist.txt 37 B
SHA-256 hash: 541C688004C6726BB4A6747EF11A9B1FA4D3A65FE727AABEECB8BCF0B05B3459
MD5 hash: F60584CA4223CBA8D58459E5E1DCB60D

 /Content Providers/
 ContactsGroups.xml 5.70 KB 2022-07-18 16:41:22
SHA-256 hash: 5CFBFEDA6875654BDC323671B159112152E62FA83D3340592DD9BCD7E920704B
MD5 hash: 971A47D7DF0F1BC491D04D22C8B1EB22

 ContactsRaw.xml 4.40 MB 2022-07-18 16:41:46


SHA-256 hash: 3E6B525FA63B99E4A2E91538CFB819EB3D67168F18302B3E18EE2AE425FF8197
MD5 hash: F6AF404E030A54AC9EEAB599CA60C922

 ContactsSettings.xml 304 B 2022-07-18 16:41:46


SHA-256 hash: 2F91812E3ACCBCD9C42EBBF7B3B66C2CF133CA3E9D0CC32D48A220935C4D14E6
MD5 hash: 0F2B04E0FAF757A25ECBAAF152358224

 ContactsSim.xml 1.13 KB 2022-07-18 16:41:46


SHA-256 hash: 3B4613D3B2B15A29BB5BABB93117A1E8A282E3CE0CE4241A4FB573366ADF6CD7
MD5 hash: CF8A21DF902BF504A8C959E4C9BDB434

 ContactsSimFixed.xml 589 B 2022-07-18 16:41:46


SHA-256 hash: 31CF764D5C6A97C8DA7752B5493A7E30E560AB74BD53ED346B24EFA35E409C8A
MD5 hash: AE167B24F1F072DE7E6BBFB804F7F3A6

 ExternalAudio.xml 2.49 KB 2022-07-18 16:41:46


SHA-256 hash: 8D6D7AB8512A15DF5996141F4278F8EB20AE6F093157379DE820767B15161355
MD5 hash: 78AA47A1036B146BAFA0B6E174ADE396

 ExternalImages.xml 10.2 KB 2022-07-18 16:41:46


SHA-256 hash: 4888BE5917B3A28FECD10F8DD19F55D25E4ED6E361826EA453115B876C70413A
MD5 hash: 2A77FC57858DCCB9B2363B7DAB2B90CD

 ExternalImagesThumbnails.xml 246 B 2022-07-18 16:41:46


SHA-256 hash: 3EDD3D17E321397D39F4B3F83BDFECA584E3D6FE043A25FF443EEDA9039E68CF
MD5 hash: AFB1B0466C2F219A3C88B8F9D68819D3

 ExternalVideo.xml 5.25 KB 2022-07-18 16:41:46


SHA-256 hash: D1E6C794574C257097F2971B97E9B71EF000A4F8DED5F10839AF80EDA91BB416
MD5 hash: 89F7161CC565B79F16AD011133D52DFF

 ExternalVideoThumbnails.xml 226 B 2022-07-18 16:41:46


SHA-256 hash: 984D487BC3FC212209DDFB4C62CFF2D166E3D9DF21B79D03FCC7429CBC60DAF6
MD5 hash: DBE5BF5B08F2F46284BE59EC1E622A6F

 InternalAudio.xml 46.0 KB 2022-07-18 16:41:46


SHA-256 hash: A6C3E5CF2564A20F1088CCBE5AEB956C81A0853DC58DFF2D6F51A096C21BBD1A
MD5 hash: E86DC1B24E346602594CF8B7A80EE3C2

 InternalImages.xml 815 B 2022-07-18 16:41:46


SHA-256 hash: 42AACB31EB543806EF8B0AC02B47AE37800FDFCA27818226CB4828ABBC004FE7
MD5 hash: 7D4F9F8C964AF82CF486F4939AAF62E4

 InternalVideo.xml 974 B 2022-07-18 16:41:46


SHA-256 hash: 9936BBB0054650B53E9551ECB15CE8DA66F2D1BE2005EEDC3D22B15DDECF31D0
MD5 hash: C26537BC07BD74E1F05834C5F6EB66BC

 MediaFiles.xml 37.2 KB 2022-07-18 16:41:47


SHA-256 hash: 68F335BD22E50520161B000628E050072FB2202A570E372F7D153CA167904D8E
MD5 hash: 1A382AE176DAFCC7C0A20AD0E6F70605

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 15898
Case Label: K3 Case Evidence Number: 007 Device Label:

Filename Size Created Modified Accessed


 vold.log 25 B 2022-07-18 16:42:08
SHA-256 hash: D97D597DB7F5442C29B398BABFA8213DF61CEBAB74209981AE61A71FDFE58973
MD5 hash: 2067FB40D0F547D7A0EC2466C8C5CECD

 wallpaper.log 963 B 2022-07-18 16:42:08


SHA-256 hash: 9F8FF55B2A45CAFE17256D77DB55364C9AFBDA34C1F2930F57F817E81E20BA20
MD5 hash: 600084FF77B1ADAB396A25196C755048

 webviewupdate.log 913 B 2022-07-18 16:42:08


SHA-256 hash: B505BCE95585F99EAD8969C2446C1D4F0B95A8F2C95CD0574925A0DAA9E58DDC
MD5 hash: 260A2170605038C1A3344D30718A29BA

 wifi.log 194 KB 2022-07-18 16:42:08


SHA-256 hash: DECAF2B8D8DE66434CE6EB4105BB45226FEF008C9B1467B0BE80AB22847DFD0D
MD5 hash: 49D2D69F803C1E5F3A2681081084A109

 wifiaware.log 9.58 KB 2022-07-18 16:42:09


SHA-256 hash: 7066F5EB79FFB9AA4AA54B488EC801FBA1FED2BE192073291E5187D62319F1CE
MD5 hash: BDE174348D02CE7BC7528C8B7E2FDF7D

 wificond.log 940 B 2022-07-18 16:42:09


SHA-256 hash: E66E16F72902B4668B362E8938B9EC73FB55F8EA62A6F1260825BA6599CE8EA6
MD5 hash: 2530468258FF6C07911E2A0C0A2268C9

 wifip2p.log 629 B 2022-07-18 16:42:09


SHA-256 hash: D9804A9034792C30105789AA73ADDD629CE7F2F0FDEFFF868A5BD64F4DA04460
MD5 hash: CF303A12EBB76C1FC62BFD76AB311BA1

 wifirtt.log 944 B 2022-07-18 16:42:09


SHA-256 hash: 81AC666BB379576D1E75BC329014162AC2ECB75AA1381FF15C0AB4A575CB6F29
MD5 hash: 36C701BA17B3EE78EA327A88F4A34E53

 wifiscanner.log 29.9 KB 2022-07-18 16:42:09


SHA-256 hash: C048750C009A70DC88B88E09A04C6E281637D5A12EB4410C3C0A4CB157BC13F7
MD5 hash: 34052EBB66B3B453625DED090DFA791D

 window.log 28.0 KB 2022-07-18 16:42:09


SHA-256 hash: 7F03144CB270A1AD4A9E9191B3A7511047507F92C086739C8AE68D6A2CAC7F41
MD5 hash: 6D02CB0B62CE9C92DB9122AF2CC21173

 /Logs/
 Events.log 286 KB 2022-07-18 16:42:09
SHA-256 hash: 18DA074D08048D5B427AC7345EF09C43D065DE4A2CA05427D614DC25E749D8A9
MD5 hash: C56F37B6CA41E79A1306E92E62903B6B

 Main.log 766 KB 2022-07-18 16:42:09


SHA-256 hash: AD8CE3A88911D60131CDEB9C80E63B3DC06FFB6FF647FEF51B31EEF4C7A0860C
MD5 hash: CEECCCEF791E6C6F594609768CD9B261

 Radio.log 326 KB 2022-07-18 16:42:09


SHA-256 hash: 902D64E1C8CDE10C6521181E091D05D1ED698DF275E44287479E92073FA00F13
MD5 hash: 110F44DA3CB657B591C6930BC2DE9B06

System Logs (131 files)


Filename Size Created Modified Accessed
 /
 /System Logs/
 Events.log 286 KB 2022-07-18 16:42:09
 Main.log 766 KB 2022-07-18 16:42:09
 Radio.log 326 KB 2022-07-18 16:42:09
 /DumpSys/
 DockObserver.log 95 B 2022-07-18 16:41:48
 SurfaceFlinger.log 57.9 KB 2022-07-18 16:41:48
 accessibility.log 369 B 2022-07-18 16:41:48
 account.log 7.20 KB 2022-07-18 16:41:48
 activity.log 182 KB 2022-07-18 16:41:48
 adb.log 159 B 2022-07-18 16:41:48
 alarm.log 71.9 KB 2022-07-18 16:41:48
 android.service.gatekeeper.IGateKeeperService.log 66 B 2022-07-18 16:41:49
 apexservice.log 32 B 2022-07-18 16:41:49
 app_binding.log 533 B 2022-07-18 16:41:49
 appops.log 136 KB 2022-07-18 16:41:49
 appwidget.log 12.5 KB 2022-07-18 16:41:49
 audio.log 13.8 KB 2022-07-18 16:41:49
 autofill.log 3.47 KB 2022-07-18 16:41:49
 backup.log 10.5 KB 2022-07-18 16:41:49
 battery.log 307 B 2022-07-18 16:41:49
 batterystats.log 2.78 MB 2022-07-18 16:41:50
 binder_calls_stats.log 7.32 KB 2022-07-18 16:41:50
 bluetooth_manager.log 42.6 KB 2022-07-18 16:41:50
 carrier_config.log 19.3 KB 2022-07-18 16:41:50
 cneservice.log 34 B 2022-07-18 16:41:50
 color_display.log 1.25 KB 2022-07-18 16:41:50
 connectivity.log 17.2 KB 2022-07-18 16:41:50
 connmetrics.log 12.8 KB 2022-07-18 16:41:50
 content.log 138 KB 2022-07-18 16:41:51
 content_capture.log 1.60 KB 2022-07-18 16:41:51
 contexthub.log 817 B 2022-07-18 16:41:51
 cpuinfo.log 5.16 KB 2022-07-18 16:41:51
 dbinfo.log 1.04 MB 2022-07-18 16:41:53
 device_policy.log 684 B 2022-07-18 16:41:53

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 15905
Case Label: K3 Case Evidence Number: 007 Device Label:

Cloud Credentials (15)


All cloud credentials

1 box

 Refresh Token DALvihqFfn2UYSLeaQDP3fhJcY0xCDHhw/4leGjOGmCDMsGb75Q0VwFsdihBHk5Wd6adtw+MWEJ9


NWa43ozkaPGd0htGlJTzMmo+rvt93MkMiW/QovZwsF4Bl7VN0hfZa35rq5IDbTEkiJojaxlp6m0P
0uoh/n80CiHiIVAa5f+oC2IGXcSQMrba0VF6EkcwXKx32r7zWmxdGSh7/w7+i7szCngm/gpkMC9H
SwwLEoyWifKqkWS4Fw3Ho5MrBkzFlGPTsdqHp1jvr3LhVz34cNNeOMaHLPwcsLC1jS11aTW9tvVA
+Pw4yn6nVepBBhd7b2QCiwn86cZsKYj1I/xW2A==
 Token CIVLavQNw0FvWq6WK0NxNTV5QCb/KK9PAG9tUZmDn4eyAvNGTNMrPW7pq8P957KPm8sKNILculfQ
eyGPVWqpW0oVDeOFdOKgUOExYlrdGQ1FVk63n61I8BVoTDU9X/Iqo9qf1zTCDKzYcOdE89lxuXRd
O13nhax1cRnNSCyaZGOKzYBRh2J+Y64xd185XJETRJ0Itmp+Y0F1WkrKrNvP8O1QSuQ4bs3Dx4qf
C0Fb7dEJzvMkkkqZuy4kgEIrJ1u/VYyGfthqmHU2CgpUPHBzzIspO4X3tiPO8XCzMPvSUbesmksn
fbk2iq0yxeHP27PJ4Hcp5dXitq2YPJsLA7XNRg==

2 dropbox

 Token oauth1.hizqkiq3952astb.50t7r3sy5ye19z1.56qb68duz55c2do7.de8r5ifsmsbauh9

3 facebook

 Token EAADo1TDZCuu8BACdFbrolNbesHHICjLZChmgAs1J3mkdhL18y9ZAldrMUhW8qYPGbO1ZCh7d55YEyqjnIi1Fx3qL05F1
pegLuEOJG3E7MBBoj3z2Kab5fPFYb9ptIZAdNfBwZAeWMZBVHKQSR7ZCuGy6It4tTiYZCT0G0BWvFuQdtVUuuphnOKG
wK

4 facebook

 Token EAAAAUaZA8jlABAFQVy02hCY5u1YTwtC5bK69ZCrDXeTXbgYruNxUaohXbIDQs7f7420A0dFuxpYRFqIJzWYcqN1lj6hYtz
eZAuQDjXODRItouZCFm6Qb7X1oFLYZBRy8wy3MAHxusfObPojlK6ArzOMr9wy4uwdGA1qAljRcwe9W1P8ubxCtrvxWo
5OTHzMAZD

5 facebookmessenger

 Token EAADo1TDZCuu8BACdFbrolNbesHHICjLZChmgAs1J3mkdhL18y9ZAldrMUhW8qYPGbO1ZCh7d55YEyqjnIi1Fx3qL05F1
pegLuEOJG3E7MBBoj3z2Kab5fPFYb9ptIZAdNfBwZAeWMZBVHKQSR7ZCuGy6It4tTiYZCT0G0BWvFuQdtVUuuphnOKG
wK

6 facebookmessenger

 Token EAAAAUaZA8jlABAFQVy02hCY5u1YTwtC5bK69ZCrDXeTXbgYruNxUaohXbIDQs7f7420A0dFuxpYRFqIJzWYcqN1lj6hYtz
eZAuQDjXODRItouZCFm6Qb7X1oFLYZBRy8wy3MAHxusfObPojlK6ArzOMr9wy4uwdGA1qAljRcwe9W1P8ubxCtrvxWo
5OTHzMAZD

7 google

 Token aas_et/AKppINbvrg0Dqos_rztj7YxUzPIsJVAjLonRjZFAPHGr_WXgVwG4lMzhN16edKQ4VSylpFW2XLlm6qfh4mI3S00x1-
Fzug_nfIcZwiIFRs21x7kRjgQW6oDyh4A9xciINMWjj95CQ8ha6CQXVaOcor6HNkMwKLs2nbHuYc9_kpg2TBhTfNb-
yYxeMiEtAxP5VihTMwMZiqmXUrLIYG9foo8=
 User Name [email protected]

8 instagram

Cloud User ID 6103158457


 Token Bearer IGT:
2:eyJkc191c2VyX2lkIjoiNjEwMzE1ODQ1NyIsInNlc3Npb25pZCI6IjYxMDMxNTg0NTclM0F5OUpoRWRVald6ZHdNZSUzQ
TE5JTNBQVllYmVkX1V3RWN1LTRqdk9kQW4yMUtfY0VRYzFNVElUVTVhZTY0R1RRIn0=

9 linkedin

Cookies JSESSIONID,ajax%3A4180747616249421953,1689428076,.www.linkedin.com,%2F,true,
0,,,,bcookie,v%3D2%26b3234247-ac8e-47b2-86ef-e17982241bde,1716648440,.linkedin.com,%2F,true,
0,,,,bscookie,v%3D1%26202205101005503f9bd996-b58d-4908-87d4-364fe4ad5e3cAQH1s5u41UN6D8jQ-
n47YsVr1m8KYkLO,1716648440,.www.linkedin.com,%2F,true,0,,,,lang,v%3D2%26lang%3Den_US,
1658126321,.www.linkedin.com,%2F,false,
0,,,,li_at,AQEDARpQ1mAE7W5OAAABgK1u7E8AAAGCITzC804ATMXMHYfxzKyf3whXJBBzM-4wbtv60B17ps7SRk6mncc
SZic3c0XZjjPHpVcFLXS4IwHf6VUXS9LUego8TCP7hlImVLge3Iqhqqr9dEn3XUtwI070,1689428077,.www.linkedin.com,
%2F,true,0,,,,li_gc,MTswOzE2NTIxNzcxNTA7MjswMjGpm3z3Ffh4D3pENI1hjKXoHUlt7Nn6Xch9FCtGr50uiQ%3D%3D,
1715944205,.linkedin.com,%2F,true,
0,,,,li_mc,MTsyMTsxNjU4MDAyMTUwOzI7MDIxahrFCSFuqa3u040%2FvWXGPJubzH%2FibjQF5r9KEvpPv6E%3D,
1721034664,.linkedin.com,%2F,true,0,,,,liap,true,1689428076,.linkedin.com,%2F,true,0,,,

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 15910
Case Label: K3 Case Evidence Number: 007 Device Label:

Contact Analysis (335 total, 6 deleted)


A subset of phone and SIM contacts filtered by criteria: a minimum of 1 associated events, sorted by the number of associated events in descending order
Contact Origin Total Messages Calls Other
1 Gabie Case Messenger 229 Total: 208 Total: 0 21
Received: 88 Received: 0
Sent: 107 Missed: 0
Other: 13 Dialed: 0
Word Count: 774 Other: 0
Total Call Time: 00:00:00
2 +420 111 222 333 Messages 59 Total: 59 Total: 0 0
Received: 49 Received: 0
Sent: 10 Missed: 0
Other: 0 Dialed: 0
Word Count: 433 Other: 0
Total Call Time: 00:00:00
3
+420 111 222 333 WhatsApp 26 Total: 23 Total: 2 1
Received: 8 Received: 0
Sent: 14 Missed: 1
Other: 1 Dialed: 1
Word Count: 85 Other: 0
Total Call Time: 00:00:01
4 Facebook Messages 25 Total: 24 Total: 0 1
Received: 24 Received: 0
Sent: 0 Missed: 0
Other: 0 Dialed: 0
Word Count: 206 Other: 0
Total Call Time: 00:00:00
5 ČT24 Twitter 24 Total: 0 Total: 0 24
Received: 0 Received: 0
Sent: 0 Missed: 0
Other: 0 Dialed: 0
Word Count: 0 Other: 0
Total Call Time: 00:00:00
6 Kateřina Veselá Messenger 21 Total: 20 Total: 0 1
Received: 11 Received: 0
Sent: 8 Missed: 0
Other: 1 Dialed: 0
Word Count: 51 Other: 0
Total Call Time: 00:00:00
7 Josefine Comel Messenger 21 Total: 20 Total: 0 1
Received: 6 Received: 0
Sent: 14 Missed: 0
Other: 0 Dialed: 0
Word Count: 47 Other: 0
Total Call Time: 00:00:00
8 Timotejko Dušička Messenger 21 Total: 20 Total: 0 1
Received: 14 Received: 0
Sent: 6 Missed: 0
Other: 0 Dialed: 0
Word Count: 76 Other: 0
Total Call Time: 00:00:00
9 Jose Cels LinkedIn 21 Total: 21 Total: 0 0
Received: 0 Received: 0
Sent: 21 Missed: 0
Other: 0 Dialed: 0
Word Count: 72 Other: 0
Total Call Time: 00:00:00
10 LINE FRIENDS LINE 21 Total: 18 Total: 0 3
Received: 0 Received: 0
Sent: 18 Missed: 0
Other: 0 Dialed: 0
Word Count: 302 Other: 0
Total Call Time: 00:00:00
11 Marek Blahuta Messenger 21 Total: 20 Total: 0 1
Received: 13 Received: 0
Sent: 7 Missed: 0
Other: 0 Dialed: 0
Word Count: 77 Other: 0
Total Call Time: 00:00:00

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 15913
Case Label: K3 Case Evidence Number: 007 Device Label:

Cookies (954)
All cookies
Name Domain Source Created Accessed Expires
Value
2022-06-29 01:39:04 2022-06-29 01:39:04 2022-06-30 01:39:02
platformid_asm /
(UTC+2) (UTC+2) (UTC+2)
1419
Source File phone/raw0/data/data/com.skype.raider/app_webview/Default/Cookies : 0x7708 (Table: cookies)
2022-06-29 01:39:04 2022-06-29 01:39:04 2022-06-30 01:39:02
platformid_asm / com.skype.raider
(UTC+2) (UTC+2) (UTC+2)
1419
Source File phone/applications0/com.skype.raider/live_data/app_webview/Default/Cookies : 0x7708 (Table: cookies)
2022-06-29 01:39:04 2022-06-29 01:39:04 2022-06-30 01:39:02
skypetoken_asm / com.skype.raider
(UTC+2) (UTC+2) (UTC+2)
eyJhbGciOiJSUzI1NiIsImtpZCI6IjEwNiIsIng1dCI6Im9QMWFxQnlfR3hZU3pSaXhuQ25zdE5PU2p2cyIsInR5cCI6IkpXVCJ9.eyJpYXQiOjE2NTY0NTk1NDMsImV4cCI6M
TY1NjU0NTk0Miwic2t5cGVpZCI6ImNvbXBlbHNvbi50ZXN0Iiwic2NwIjo5NTYsImNzaSI6IjE2NTY0NTk1NDIiLCJjaWQiOiI2OWMzZTQ2NGU3NmI5YTg1IiwiYWF0Ijo
xNjUxMDY0NjkwfQ.PkEiNZPb0FbLEwYMv_-
mQsnD4486PnYdZW3fOM7Q2A3ZX5AfDXqlsLjhnRmDFrnMFaYsI3jpRZTxIL9tCycj_q7UBo6EByc4HC3lqxAapTiXZSB0vcmU0RysbK-VSgCA9kS3-
IqaTaEdGbafqDeuHI2CuciC2rTXBzXvWOdqg4rUDUChYOgKdG7gE79s7TRSQjQvswFgX1ZZKLtqbHinjV-RwDZbTWoVVlJPkjDK0dtr-
q_QEcXBVcCB15pyrRj_99E0oScYCITOkz28zV6cSN_J01pm0c0r9A4K1axFC6bMKQPVFH8wawij1mXEExRbesNOXJUKWIiwQ1C5BJw5tA
Source File phone/applications0/com.skype.raider/live_data/app_webview/Default/Cookies : 0x7441 (Table: cookies)
2022-06-29 01:39:04 2022-06-29 01:39:04 2022-06-30 01:39:02
skypetoken_asm /
(UTC+2) (UTC+2) (UTC+2)
eyJhbGciOiJSUzI1NiIsImtpZCI6IjEwNiIsIng1dCI6Im9QMWFxQnlfR3hZU3pSaXhuQ25zdE5PU2p2cyIsInR5cCI6IkpXVCJ9.eyJpYXQiOjE2NTY0NTk1NDMsImV4cCI6M
TY1NjU0NTk0Miwic2t5cGVpZCI6ImNvbXBlbHNvbi50ZXN0Iiwic2NwIjo5NTYsImNzaSI6IjE2NTY0NTk1NDIiLCJjaWQiOiI2OWMzZTQ2NGU3NmI5YTg1IiwiYWF0Ijo
xNjUxMDY0NjkwfQ.PkEiNZPb0FbLEwYMv_-
mQsnD4486PnYdZW3fOM7Q2A3ZX5AfDXqlsLjhnRmDFrnMFaYsI3jpRZTxIL9tCycj_q7UBo6EByc4HC3lqxAapTiXZSB0vcmU0RysbK-VSgCA9kS3-
IqaTaEdGbafqDeuHI2CuciC2rTXBzXvWOdqg4rUDUChYOgKdG7gE79s7TRSQjQvswFgX1ZZKLtqbHinjV-RwDZbTWoVVlJPkjDK0dtr-
q_QEcXBVcCB15pyrRj_99E0oScYCITOkz28zV6cSN_J01pm0c0r9A4K1axFC6bMKQPVFH8wawij1mXEExRbesNOXJUKWIiwQ1C5BJw5tA
Source File phone/raw0/data/data/com.skype.raider/app_webview/Default/Cookies : 0x7441 (Table: cookies)
2022-04-27 15:07:35 2022-04-27 15:07:35 2023-04-27 15:07:35
d_ticket /
(UTC+2) (UTC+2) (UTC+2)
b6b27b800c55155f8642952183f5622f5e4c8
Source File phone/raw0/data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies : 0x95ac (Table: cookies)
2022-04-27 15:07:35 2022-04-27 15:07:35 2023-04-27 15:07:35
d_ticket / com.zhiliaoapp.musically
(UTC+2) (UTC+2) (UTC+2)
b6b27b800c55155f8642952183f5622f5e4c8
Source File phone/applications0/com.zhiliaoapp.musically/live_data/app_webview/Default/Cookies : 0x95ac (Table: cookies)
2022-07-05 13:37:43 2022-07-18 08:37:05 2027-07-17 08:37:05
install_id / com.zhiliaoapp.musically
(UTC+2) (UTC+2) (UTC+2)
7116851090276353797
Source File phone/applications0/com.zhiliaoapp.musically/live_data/app_webview/Default/Cookies : 0xb0e4 (Table: cookies)
2022-07-05 13:37:43 2022-07-18 08:37:05 2027-07-17 08:37:05
install_id /
(UTC+2) (UTC+2) (UTC+2)
7116851090276353797
Source File phone/raw0/data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies : 0xb0e4 (Table: cookies)
2022-07-16 23:06:49 2022-07-16 23:06:49 2022-07-26 23:06:49
msToken / com.zhiliaoapp.musically
(UTC+2) (UTC+2) (UTC+2)
KGtTKCcodafiOQF-acx8LDM8d1ruXrRhpdhGIVlTRrc-fYSZdq6twUFv3CZ_WvI0MipHGOyZRNhewdie4Z0cfjemEK4l3yHZLavIknApkYsQJoOGTNS10cJ60NdvBw==
Source File phone/applications0/com.zhiliaoapp.musically/live_data/app_webview/Default/Cookies : 0xa4d2 (Table: cookies)
2022-07-16 23:06:49 2022-07-16 23:06:49 2022-07-26 23:06:49
msToken /
(UTC+2) (UTC+2) (UTC+2)
KGtTKCcodafiOQF-acx8LDM8d1ruXrRhpdhGIVlTRrc-fYSZdq6twUFv3CZ_WvI0MipHGOyZRNhewdie4Z0cfjemEK4l3yHZLavIknApkYsQJoOGTNS10cJ60NdvBw==
Source File phone/raw0/data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies : 0xa4d2 (Table: cookies)
2022-06-22 12:32:34 2022-06-22 12:32:34 2023-06-22 12:32:34
odin_tt /
(UTC+2) (UTC+2) (UTC+2)
ed673657d752df3022225a6ce39af585f936c5918bbbd6a820878b2c2bda5901982cafd7c219a62dd50c8d807f65dad6e5ed3dbffb0f7f4dcafcf69137e0aae76d
9188dacddba0a0f743f0f8f51c1864
Source File phone/raw0/data/data/com.zhiliaoapp.musically/app_webview/Default/Cookies : 0x66fe (Table: cookies)
2022-06-22 12:32:34 2022-06-22 12:32:34 2023-06-22 12:32:34
odin_tt / com.zhiliaoapp.musically
(UTC+2) (UTC+2) (UTC+2)
ed673657d752df3022225a6ce39af585f936c5918bbbd6a820878b2c2bda5901982cafd7c219a62dd50c8d807f65dad6e5ed3dbffb0f7f4dcafcf69137e0aae76d
9188dacddba0a0f743f0f8f51c1864
Source File phone/applications0/com.zhiliaoapp.musically/live_data/app_webview/Default/Cookies : 0x66fe (Table: cookies)
2022-04-27 15:07:35 2022-06-16 14:58:49 2022-12-13 13:58:49
sessionid / com.zhiliaoapp.musically
(UTC+2) (UTC+2) (UTC+1)
f94e9e38156b13690a61dffd71e83164
Source File phone/applications0/com.zhiliaoapp.musically/live_data/app_webview/Default/Cookies : 0xcf94 (Table: cookies)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 15941
Case Label: K3 Case Evidence Number: 007 Device Label:

Locations

GPS Locations (88)


All GPS locations, sorted by time in ascending order

Click here to view GPS locations in interactive map


Latitude 50.11044 ° 1 home
Longitude 14.50845 °
 Position Latitude 50.11044 °
 Time 2016-01-05 18:37:14 (Google Maps)
Longitude 14.50845 °
(UTC+1)
 Created 2016-01-05 18:37:14 (UTC+1)
Event Origin Maps Favorite Places
 Address Street Kolbenova 610/26, 190 00 Praha
Event Type Place
(Google Maps)
 URL http://maps.google.com/?q=Kolbenova+610/26,
+190+00+Praha&ftid=0x470becc8cab81821:0x7a118fb9919094b4
Source File phone/applications0/com.google.android.apps.maps/live_data/databases/
gmm_myplaces.db : 0x3f13 (Table: sync_item)

Latitude 50.10473 ° 2 work


Longitude 14.4777 °
 Position Latitude 50.10473 °
 Time 2019-06-25 16:11:26 (Google Maps)
Longitude 14.4777 °
(UTC+2)
 Created 2019-06-25 16:11:26 (UTC+2)
Event Origin Maps Favorite Places
 Address Street Na Žertvách 2196/34, 180 00 Praha 8-Libeň
Event Type Place
(Google Maps)
 URL http://maps.google.com/?q=Na+%C5%BDertv%C3%A1ch+2196/34,
+180+00+Praha+8-
Libe%C5%88&ftid=0x470b935348754f47:0x5a9d05e552f78327
Source File phone/applications0/com.google.android.apps.maps/live_data/databases/
gmm_myplaces.db : 0x3dfe (Table: sync_item)

Latitude 50.10284 ° 3 event


Longitude 14.457 °
 Time and Date 2022-05-05 11:48:53 (UTC+2)
 Time 2022-05-05 11:48:53
 Position Latitude 50.10284 °
(UTC+2)
(Google Maps) Longitude 14.457 °
Event Origin Mapy.cz Locations
Source File phone/applications0/cz.seznam.mapy/live_data/databases/
Event Type Place
SznStatsWADatabase : 0x6ba4 (Table: WARequest)

Latitude 50.10284 ° 4 event


Longitude 14.457 °
 Time and Date 2022-05-05 11:48:56 (UTC+2)
 Time 2022-05-05 11:48:56
 Position Latitude 50.10284 °
(UTC+2)
(Google Maps)
Longitude 14.457 °
Event Origin Mapy.cz Locations
Source File phone/applications0/cz.seznam.mapy/live_data/databases/
Event Type Place
SznStatsWADatabase : 0x68d0 (Table: WARequest)

Latitude 50.10284 ° 5 impress


Longitude 14.457 °
 Time and Date 2022-05-05 11:48:56 (UTC+2)
 Time 2022-05-05 11:48:56
 Position Latitude 50.10284 °
(UTC+2)
(Google Maps)
Longitude 14.457 °
Event Origin Mapy.cz Locations
Source File phone/applications0/cz.seznam.mapy/live_data/databases/
Event Type Place
SznStatsWADatabase : 0x6686 (Table: WARequest)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16003
Case Label: K3 Case Evidence Number: 007 Device Label:

Latitude 50.1046 ° 87

Longitude 14.47779 °
 Width 3000 px


Event Origin Photos Remote media
 Height 4000 px
Event Type Image
 Picture URL https://lh3.googleusercontent.com/
XjurrRIdDcekWxe1CyaJv3SbME1LD__34UpCBLMQqkhrIE6vWjE
skjFooCUDt5gz8HjHAqQjFV5gZf4jGg=s0-d
 Position Latitude 50.1046 °
(Google Maps)
Longitude 14.47779 °

Latitude 50.1035 ° 88 Last Centered Position


Longitude 14.456 °
 Position Latitude 50.1035 °
Event Origin Mapy.cz Configuration (Google Maps)
Longitude 14.456 °
Event Type Place
Source File phone/applications0/cz.seznam.mapy/live_data/shared_prefs/
MAP_PREFERENCES.xml

Activity Routes (0)

No entries

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16016
Case Label: K3 Case Evidence Number: 007 Device Label:

Notifications (35)
All notifications

1 String

Source android
 Body String
 Seen Yes
 Created 2022-07-18 08:36:43 (UTC+2)
 Updated 2022-07-18 08:36:43 (UTC+2)
 Visible Since 2022-07-18 08:37:12 (UTC+2)
 Ranking Time 2022-07-18 08:36:43 (UTC+2)
Source File phone/applications1/Dumpsys/notification.log

Source com.pinterest
 Seen Yes
 Created 2022-07-18 08:37:07 (UTC+2)
 Updated 2022-07-18 08:37:07 (UTC+2)
 Visible Since 2022-07-18 08:37:09 (UTC+2)
 Ranking Time 2022-07-18 08:37:06 (UTC+2)
Source File phone/applications1/Dumpsys/notification.log

3 String

Source com.pinterest
 Body String
 Seen Yes
 Created 2022-07-18 08:37:08 (UTC+2)
 Updated 2022-07-18 08:37:08 (UTC+2)
 Visible Since 2022-07-18 14:46:12 (UTC+2)
 Ranking Time 2022-07-18 08:37:08 (UTC+2)
Source File phone/applications1/Dumpsys/notification.log

Source com.google.android.youtube
 Seen Yes
 Created 2022-07-18 08:37:10 (UTC+2)
 Updated 2022-07-18 08:37:11 (UTC+2)
 Visible Since 2022-07-18 08:37:12 (UTC+2)
 Ranking Time 2022-07-18 08:37:10 (UTC+2)
Source File phone/applications1/Dumpsys/notification.log

5 SpannableString

Source com.google.android.googlequicksearchbox
 Body SpannableString
 Seen No
 Created 2022-07-18 08:37:22 (UTC+2)
 Updated 2022-07-18 08:37:22 (UTC+2)
 Ranking Time 2022-07-18 07:02:29 (UTC+2)
Source File phone/applications1/Dumpsys/notification.log

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16017
Case Label: K3 Case Evidence Number: 007 Device Label:

Passwords

Passwords from Chrome (Saved Passwords) (33)


All passwords

1 android://
C6Vx_rw13CBGL0qxoZu1DOx0dEFyJvqfmsc6_QwmtksRVSV0clCBs8HVtAdBMnWQbzDZSlcDWNrWxWDUZl6BGw==@de.shapeservices.impluslite/

 Host android://
C6Vx_rw13CBGL0qxoZu1DOx0dEFyJvqfmsc6_QwmtksRVSV0clCBs8HVtAdBMnWQbzDZSlcDWNrWxWDUZl6BGw==@de
.shapeservices.impluslite/
 User Name [email protected]
 Password v10����#C�%��CZ3v*d
 Created 2018-08-08 15:58:30 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0x1104d (Table: logins)

2 android://K5kUsCN3p4W0qlE-ORdhGUu0IkV3YF49-
qqZTCd4k4H9gZmg4s21ZwRwCw6-2VGReoYsFjB85AYk9c1PNYLQVQ==@com.rememberthemilk.MobileRTM/

 Host android://K5kUsCN3p4W0qlE-ORdhGUu0IkV3YF49-
qqZTCd4k4H9gZmg4s21ZwRwCw6-2VGReoYsFjB85AYk9c1PNYLQVQ==@com.rememberthemilk.MobileRTM/
 User Name [email protected]
 Password v10�8�C�N�z���r���@
 Created 2017-04-21 10:49:27 (UTC+2)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0xcc1c (Table: logins)

3 android://kruaZwYGsiu76TbANLX52LLaQiATTg7QsVJEW6cz1vgYnZX_EOz197ZA6gI2AyAJ50pyP5QXnYDIY-Ct9TvhJw==@com.booking/

 Host android://kruaZwYGsiu76TbANLX52LLaQiATTg7QsVJEW6cz1vgYnZX_EOz197ZA6gI2AyAJ50pyP5QXnYDIY-
[email protected]/
 User Name [email protected]
 Password v10�8�C�N�z���r���@
 Created 2017-01-13 10:24:36 (UTC+1)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0x10e95 (Table: logins)

4 android://pBowWSLvFMHp-Qulwesr2bSrcr9vsiPPhGed3xcXj5ZNJccRGvbP7pPFSqeoQ8NHooDFe29iIWzU_fETWE2UpQ==@com.linkedin.android/

 Host android://pBowWSLvFMHp-
Qulwesr2bSrcr9vsiPPhGed3xcXj5ZNJccRGvbP7pPFSqeoQ8NHooDFe29iIWzU_fETWE2UpQ==@com.linkedin.android/
 User Name [email protected]
 Password v10�8�C�N�z���r���@
 Created 2015-12-10 18:02:37 (UTC+1)
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0xc971 (Table: logins)

5 android://qbMQCZh-
CU_SBn04UFat_bLMSicoFKWYI0MzXmOdBklD5gJcvH42kD8GXA5lvZmtq1ON0Dd8FAT6SLUIlwNUqA==@com.instagram.android/

 Host android://qbMQCZh-
CU_SBn04UFat_bLMSicoFKWYI0MzXmOdBklD5gJcvH42kD8GXA5lvZmtq1ON0Dd8FAT6SLUIlwNUqA==@com.instagra
m.android/
 User Name jsfn1991
 Password v10r����{�\;z�3H���
Sign Count 0
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Login Data : 0x10aab (Table: logins)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16023
Case Label: K3 Case Evidence Number: 007 Device Label:

SIM Card
All sim card data

IMSI 230022901722427
SIM Card Country Czech Rep.
ICCID 8942020622314398282
Owner Phone Number +420112355777
Operator O2-CZ, MCC: 230, MNC: 2

Contacts (15)

1 Datova linka

 Phone Number 14141 (twitter)


Source File phone/applications1/Content Providers/SimPb.xml

2 Emergency

 Phone Number 112 (twitter)


Source File phone/applications1/Content Providers/SimPb.xml

3 Lin. bezpeci

 Phone Number 116111 (twitter)


Source File phone/applications1/Content Providers/SimPb.xml

4 Lin. senioru

 Phone Number 800200007 (twitter)


Source File phone/applications1/Content Providers/SimPb.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16030
Case Label: K3 Case Evidence Number: 007 Device Label:

15 Whatsapp#sim

 Phone Number 333333 (twitter)


Source File phone/applications1/Content Providers/SimPb.xml

Fixed Phonebook (7)

1 Emergency

 Phone Number 112 (twitter)


Source File phone/applications1/Content Providers/SimPbFixed.xml

2 Hasici

 Phone Number 150 (twitter)


Source File phone/applications1/Content Providers/SimPbFixed.xml

3 Lin. bezpeci

 Phone Number 116111 (twitter)


Source File phone/applications1/Content Providers/SimPbFixed.xml

4 Lin. senioru

 Phone Number 800200007 (twitter)


Source File phone/applications1/Content Providers/SimPbFixed.xml

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16033
Case Label: K3 Case Evidence Number: 007 Device Label:

Wi-Fi Networks (1)


All networks

1 Cels

SSID Cels
BSSID FC:EC:DA:FF:40:AA
 Connected Time 2022-07-18 08:00:00 (UTC+2)
Source Google Pixel 3a
Source File phone/applications1/Dumpsys/netstats.log
phone/applications1/Dumpsys/wifi.log

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16037
Case Label: K3 Case Evidence Number: 007 Device Label:

Web

Web Browsing History (57)


All application web history, sorted by the time of creation in ascending order

1 Google Terms of Service – Privacy & Terms – Google

 URL https://policies.google.com/terms/embedded
 Last Visit 2022-05-12 13:50:43 (UTC+2)
 Visit Count 1
 Visit 2022-05-12 13:50:43 (UTC+2)
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24f8e (Table: urls)

2 Ako používame súbory cookie? - Info - Pravda.sk

 URL https://www.pravda.sk/info/8693-ako-pouzivame-subory-cookie/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24b2e (Table: urls)

3 ALCATEL onetouch

 URL http://www.alcatelonetouch.com/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24d8f (Table: urls)

4 Amazon.com. Spend less. Smile more.

 URL https://www.amazon.com/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x2495b (Table: urls)

5 Azet.sk - portál, kde je vždy najviac ľudí

 URL https://m.azet.sk/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24a84 (Table: urls)

6 Compelson

 URL http://mobiledit.cz/
 Last Visit 2022-05-19 09:17:00 (UTC+2)
 Visit Count 0
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0x24dd0 (Table: urls)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16038
Case Label: K3 Case Evidence Number: 007 Device Label:

Web Search History (36)


All application web searches, sorted by the time of creation in ascending order

1 tiktok

 Searched Query tiktok


 Time 2022-04-27 14:52:44 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3fa5 (Table: suggestions)

2 snapchat

 Searched Query snapchat


 Time 2022-04-27 14:53:03 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f86 (Table: suggestions)

3 viber

 Searched Query viber


 Time 2022-04-27 14:53:41 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f6d (Table: suggestions)

4 wechat

 Searched Query wechat


 Time 2022-04-27 14:54:22 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3f39 (Table: suggestions)

5 imstagram

 Searched Query imstagram


 Time 2022-05-03 08:12:29 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e64 (Table: suggestions)

6 mapy.cz - cycling & hiking offline maps

 Searched Query mapy.cz - cycling & hiking offline maps


 Time 2022-05-05 11:48:25 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e07 (Table: suggestions)

7 box

 Searched Query box


 Time 2022-05-10 11:54:21 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3e85 (Table: suggestions)

8 dropbox

 Searched Query dropbox


 Time 2022-05-10 11:54:29 (UTC+2)
Source Google Play Store
Source File phone/applications0/com.android.vending/live_data/databases/suggestions.db : 0x3dea (Table: suggestions)

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16049
Case Label: K3 Case Evidence Number: 007 Device Label:

35 outlook

 Searched Query outlook


 Associated URL outlook - Google Search
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfce (Table:
keyword_search_terms)

36 wikipedie

 Searched Query wikipedie


 Associated URL wikipedie - Hledat Googlem
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/History : 0xbfe5 (Table:
keyword_search_terms)

Bookmarks (27)
All application bookmarks, sorted by the time of creation in ascending order

1 ALCATEL onetouch

 Name ALCATEL onetouch


 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.alcatelonetouch.com/
 Folder Mobile bookmarks
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

2 eBay

 Name eBay
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.ebay.com/
 Folder Mobile bookmarks
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

3 Facebook

 Name Facebook
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.facebook.com/
 Folder Mobile bookmarks
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

4 Google

 Name Google
 Created 2009-01-02 14:03:05 (UTC+1)
 URL http://www.google.com/m?client=ms-android-alcatel
 Folder Mobile bookmarks
Source Chrome
Source File phone/applications0/com.android.chrome/live_data/app_chrome/Default/Bookmarks

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16053
Case Label: K3 Case Evidence Number: 007 Device Label:

Data Extraction Log


2022-07-18 14:55:24 Data extraction started - MOBILedit Forensic, version 9.0.0.23279 (x64)
2022-07-18 15:11:22 All 10473 phonebook contacts were successfully extracted
2022-07-18 15:11:22 Failed to extract SIM phonebook contacts
2022-07-18 15:11:22 Failed to extract SIM fixed phonebook contacts
2022-07-18 15:11:22 All 66 messages were successfully extracted
2022-07-18 15:11:22 Extracted 0 out of 1494 organizer events, 1494 failed
2022-07-18 15:11:22 Extracted 0 out of 8 calls, 8 failed
2022-07-18 17:27:59 All 575 archive files were successfully extracted
2022-07-18 17:27:59 All 1829 documents were successfully extracted
2022-07-18 17:27:59 All 14 certificates were successfully extracted
2022-07-18 17:27:59 All 554 audio files were successfully extracted
2022-07-18 17:27:59 Extracted 15640 out of 15750 image files, 110 failed
2022-07-18 16:22:24 [read failure] /data/system_ce/0/shortcut_service/bitmaps/com.microsoft.office.outlook/1658141579641.png
2022-07-18 16:26:41 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/color_icon.png
2022-07-18 16:26:43 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040100_orig.png
2022-07-18 16:26:47 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040100_scaled_thumb_113x113.png
2022-07-18 16:26:49 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040101_orig.png
2022-07-18 16:26:53 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040101_scaled_thumb_51x113.png
2022-07-18 16:26:55 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040102_orig.png
2022-07-18 16:26:59 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040102_scaled_thumb_113x51.png
2022-07-18 16:27:01 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040103_orig.png
2022-07-18 16:27:05 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040103_scaled_thumb_113x51.png
2022-07-18 16:27:08 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040104_orig.png
2022-07-18 16:27:12 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040104_scaled_thumb_51x51.png
2022-07-18 16:27:14 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040105_orig.png
2022-07-18 16:27:18 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040105_scaled_thumb_113x113.png
2022-07-18 16:27:20 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040106_orig.png
2022-07-18 16:27:24 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040106_scaled_thumb_113x113.png
2022-07-18 16:27:26 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040107_orig.png
2022-07-18 16:27:30 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040107_scaled_thumb_51x51.png
2022-07-18 16:27:32 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040108_orig.png
2022-07-18 16:27:36 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040108_scaled_thumb_113x113.png
2022-07-18 16:27:38 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040109_orig.png
2022-07-18 16:27:42 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040109_scaled_thumb_175x113.png
2022-07-18 16:27:44 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040110_orig.png
2022-07-18 16:27:48 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040110_scaled_thumb_175x113.png
2022-07-18 16:27:50 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040111_orig.png
2022-07-18 16:27:54 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040111_scaled_thumb_113x113.png
2022-07-18 16:27:56 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040112_orig.png
2022-07-18 16:28:00 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040112_scaled_thumb_113x51.png
2022-07-18 16:28:02 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040113_orig.png
2022-07-18 16:28:06 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040113_scaled_thumb_175x113.png
2022-07-18 16:28:08 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040114_orig.png
2022-07-18 16:28:12 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040114_scaled_thumb_51x51.png
2022-07-18 16:28:14 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040115_orig.png
2022-07-18 16:28:18 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040115_scaled_thumb_51x51.png
2022-07-18 16:28:20 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040116_orig.png
2022-07-18 16:28:24 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040116_scaled_thumb_175x113.png
2022-07-18 16:28:26 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040117_orig.png
2022-07-18 16:28:30 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040117_scaled_thumb_113x113.png
2022-07-18 16:28:32 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040118_orig.png
2022-07-18 16:28:36 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040118_scaled_thumb_113x113.png
2022-07-18 16:28:38 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040119_orig.png
2022-07-18 16:28:42 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040119_scaled_thumb_175x113.png
2022-07-18 16:28:44 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040120_orig.png
2022-07-18 16:28:48 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040120_scaled_thumb_113x51.png
2022-07-18 16:28:50 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040121_orig.png
2022-07-18 16:28:54 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040121_scaled_thumb_113x113.png
2022-07-18 16:28:56 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040122_orig.png
2022-07-18 16:29:00 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040122_scaled_thumb_51x113.png
2022-07-18 16:29:02 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040123_orig.png
2022-07-18 16:29:06 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040123_scaled_thumb_113x51.png
2022-07-18 16:29:08 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040124_orig.png
2022-07-18 16:29:12 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040124_scaled_thumb_51x51.png
2022-07-18 16:29:14 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040125_orig.png
2022-07-18 16:29:18 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040125_scaled_thumb_113x51.png
2022-07-18 16:29:20 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040126_orig.png
2022-07-18 16:29:24 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040126_scaled_thumb_113x113.png
2022-07-18 16:29:26 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040127_orig.png
2022-07-18 16:29:31 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040127_scaled_thumb_175x51.png
2022-07-18 16:29:33 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040128_orig.png
2022-07-18 16:29:37 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040128_scaled_thumb_113x113.png
2022-07-18 16:29:39 [read failure] /Android/data/com.viber.voip/files/.stickers/40100/r144_00040129_orig.png

2022-07-18 17:51:08 (UTC+2) Generated by Compelson MOBILedit Forensic PRO 9.0.0.23279 16058

You might also like