From fb516f8a812592a1dc9b82cec6052d67d14bbc67 Mon Sep 17 00:00:00 2001 From: Jan Vales Date: Fri, 20 Jun 2014 21:32:55 +0200 Subject: [PATCH] android complete. --- report4/content.tex | 57 ++++++++++++++++++++++++++------------------- 1 file changed, 33 insertions(+), 24 deletions(-) diff --git a/report4/content.tex b/report4/content.tex index 182d7c5..99b6248 100644 --- a/report4/content.tex +++ b/report4/content.tex @@ -56,7 +56,8 @@ The contacts-db was extracted from \emph{\textbf{IPBA::Home Domain:Library/Addre \textbf{size}: 87040 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +450e49183cc8781577f0c57a91a8a40f604ac2d3621037467f80745850b5613b\\ +8c0492724930e90552c671a5f81e20b7f88e5cfd175fe6718eab350b2f3dbc90} \end{quote} The content was: @@ -74,10 +75,11 @@ The content was: \subsection{Call-Log} The call-log was extracted from \emph{\textbf{IPBA::Wireless Domain:Library/Callhistory/call\_history.db}} \begin{quote} -\textbf{size}: byte\\ +\textbf{size}: 12288 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +4cf477e649e9fc868183667489222e3e48cba5e2925423bc8dcdb51783c9b9b6\\ +47fc184518b06e8a2b44f7c1e0fc746058eaf0b23a462870b380ea6f7354b6e1} \end{quote} The content was: @@ -105,10 +107,11 @@ The content was: \subsection{SMS/iMessage} The SMS-Database was extracted from \emph{\textbf{IPBA::Home Domain:Library/SMS/sms.db}} \begin{quote} -\textbf{size}: byte\\ +\textbf{size}: 41984 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +6fa73f676ca04eed70f10b8286c884ebcc5c01073bbdd8128ba26f676c7a6212\\ +793f944999a9331fb990ef8e5dd5420b9d758b8456cb7b6f9f577bb8098cfafa} \end{quote} @@ -129,10 +132,11 @@ The content was: \subsection{Calendar} The Calendar-Database was extracted from \emph{\textbf{IPBA::Home Domain:Library/Calendar/Calendar.sqlitedb}} \begin{quote} -\textbf{size}: byte\\ +\textbf{size}: 126976 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +bcb14cbb2df068bf6905f3383c0bade056a0f1188aa9606dbe639e4d11f32a5d\\ +79dee3f3fdf4ac6eb7581c6a4c6c46f0620cf6e49f46567a40870e13926cc3af} \end{quote} The content was: @@ -189,38 +193,42 @@ The plist \emph{\textbf{IPBA::SystemPreferencesDomain:SystemConfiguration/com.ap \subsection{Media} Images were extracted from \emph{\textbf{IPBA::CameraRollDomain:Media/DCIM/100APPLE}}\\ -Screenshot of Facebook-App showING a photograph of a woman. Laura Markovic (\url{https://www.facebook.com/laura.markovic.129}) seems to be tagged in that photograph. +IMG\_0002.PNG: Screenshot of Facebook-App showING a photograph of a woman. Laura Markovic (\url{https://www.facebook.com/laura.markovic.129}) seems to be tagged in that photograph. \begin{quote} -\textbf{size}: byte\\ -\textbf{''file''-output}: SQLite 3.x database\\ +\textbf{size}: 844814 byte\\ +\textbf{''file''-output}: PNG image data640 960 8-bit/color RGB, non-interlaced\\ \textbf{sha512}\\\ttfamily{ -} +986ae5d4272e003d2b8de8a9851d02721c908a43b3eb824331447c309ac92bc3\\ +426d99ec2a749462372778feacaedcbd23823cc34dd53d07ab5e7524e4276a0f} \end{quote} -Screenshot from Maps-App showing directions within Paris. +IMG\_0003.PNG: Screenshot from Maps-App showing directions within Paris. \begin{quote} -\textbf{size}: byte\\ -\textbf{''file''-output}: SQLite 3.x database\\ +\textbf{size}: 939169 byte\\ +\textbf{''file''-output}: PNG image data640 960 8-bit/color RGB, non-interlaced\\ \textbf{sha512}\\\ttfamily{ -} +4238d1a52b41c7f0991dcce42ca347863244af381f34ff59efa33ab9cc85b241\\ +849d7087cf42ce426936fc83b3a72ae991a3fc220d4716d874590222237edacf} \end{quote} -Showing some statistics about company shares. +IMG\_0005.JPG: Showing some statistics about company shares. \begin{quote} -\textbf{size}: byte\\ -\textbf{''file''-output}: SQLite 3.x database\\ +\textbf{size}: 62763 byte\\ +\textbf{''file''-output}: JPEG image data, EXIF standard\\ \textbf{sha512}\\\ttfamily{ -} +6201ddb71d24c5b662284ef091f758db5d4144643909eb29dc2522a91fc75bf0\\ +e54995f6115f66c96cbd51ec7c052294e8a587eedc156aaa085214fee0619293} \end{quote} \subsection{Viber-App} The Viber-Database was extracted from \emph{\textbf{IPBA::AppDomain:com.viber/Documents/Contacts.data}} \begin{quote} -\textbf{size}: byte\\ +\textbf{size}: 41984 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +89eae3d5fa62a3ea1b499a539f71ee8fc7c8adb147c12d5bb90868384b93206c\\ +21f2ce84f493d6c6601851844d14cf4dbdd1523ebe98bdc9deb5db380533df77} \end{quote} The content was: @@ -233,12 +241,13 @@ The content was: \subsection{Skype-App} -The Skype-Database was extracted from \emph{\textbf{IPBA::AppDomain:com.viber/Documents/Contacts.data}} +The Skype-Database was extracted from \emph{\textbf{IPBA::AppDomain:com.skype.skype/Library/Application Support/Skype/allegro.mayer/main.db}} \begin{quote} -\textbf{size}: byte\\ +\textbf{size}: 128000 byte\\ \textbf{''file''-output}: SQLite 3.x database\\ \textbf{sha512}\\\ttfamily{ -} +29da4b939b6f3f2def0296ca2087355e57321ecb0a5d0e10264c16c69359a748\\ +593fd29b8eef03407be07d386e6a980f2b6d25d29a5d3740bd566531a03c79a1} \end{quote} The content was: -- 2.43.0