Practical Mobile Forensics - Fourth Edition

Google Chrome Android app analysis

Google Chrome is the default web browser on Google Pixel and many other devices, and it is used widely to browse the internet. The application data is present under the /data/data folder, with the package name, com.android.chrome. The following are the important artifacts that can be extracted by analyzing the Gmail app:

• Profile picture: The profile picture of the user is stored with the Google Profile Picture.png filename in the following location:
  • Path: /data/data/com.android.chrome/app_chrome/Default/ Google Profile Picture.png

• Bookmarks: The Bookmarks file contains information about all the bookmarks synced with the account. Details such as the site name, URL, and the time when it was bookmarked ...