Tango analysis

Tango is a voice-/text-/video-messaging application. It has over 100,000,000 downloads in the Play Store.

Package name: com.sgiggle.production

Note

This package name is seemingly innocuous and could be overlooked by an examiner thinking it was a game. This is an example of why every application should be analyzed.

Version: 3.13.128111

Files of interest:

  • /sdcard/Android/data/com.sgiggle.production/files/storage/appdata/
    • TCStorageManagerMediaCache_v2/
    • conv_msg_tab_snapshots/
  • /files/
    • tc.db
    • userinfo.xml.db

The /TCStorageManagerMediaCache_v2 path on the SD card contains images that were sent and received with the application as well as profile pictures of contacts. However, it also contains many images that were never seen or used in the application. ...

Get Learning Android Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial