Google Maps analysis

Maps is a map/navigation application provided by Google.

Package name: com.google.android.apps.maps

Version: 9.2.0 (#902013124)

Files of interest:

  • /cache/http/
  • /databases/
    • gmm_myplaces.db
    • gmm_storage.db

The /cache/http folder contains many files, with .0 and .1 file extensions. The .0 files are web requests for the corresponding .1 file. The .1 files are predominantly images and can be viewed by changing their extension appropriately. On our test device, they were either .jpg or .png files. These files were predominantly locations near the user, not necessarily locations the user specifically searched for.

Note

This is the fourth data storage method: misnamed file extensions.

Always verify the header of a file that can't be opened, ...

Get Learning Android Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial