Investigating Android Tinder
29/08/2024 Friday
Launched in 2012, Tinder is a widely used online dating and geosocial networking app. Users create profiles featuring photos, a short bio, and shared interests. The app presents users with other profiles, allowing them to select those they like or pass on. Through this matching mechanism, both users must express mutual interest before they can start chatting via Tinder's instant messaging feature.
Digital Forensics Value of Android Tinder
Android Tinder holds significant value in digital forensics, providing a wealth of artifacts that reveal user interactions. These artifacts include user profiles, swipe actions, matches, and chat histories, offering key insights into user behaviour. The data captured within Android Tinder—such as messages, match details, and user comments—makes it a valuable resource for forensic experts, potentially serving as crucial evidence in investigations.
Location of Android Tinder Artifacts
Android Tinder artifacts can be found at the following location:
data/com.tinder/databases/tinder-3.db
Analyzing Android Tinder Artifacts with ArtiFast
This section will discuss how to use ArtiFast to extract Android Tinder artifact from Android devices' files and what kind of digital forensics insights we can gain from the artifact.
After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android Tinder artifact parsers:
×
Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Tinder artifact in ArtiFast.
Android Tinder Messages
- ID: The ID of the message.
- To ID: The ID of the receiver.
- Receiver Name: The name of the receiver.
- From ID: The ID of the sender.
- Sender Name: The name of the sender.
- Text: The body of the message.
- Sent Date: The date and time the message was sent.
- Is Seen: Indicates whether the message was viewed or not.
Android Tinder Matched Persons
- Name: The name of the user of the person.
- Time: The date and time when the file was last modified.
- Bio: The user bio.
- ID: The user ID.
- City: The city address.
- Photo Blob Data: The user profile photo BLOB.
- Schools: The schools of the matched person.
- Jobs: The jobs of the matched person.
Android Tinder Matches
- Name: The name of the user of the person.
- Time: The date and time when the file was last modified.
- Bio: The user bio.
- ID: The user ID.
- City: The city address.
- Photo Blob Data: The user profile photo BLOB.
- Match Date: The date and time of the match.
- Last Activity Date: The date and time when the person was last active.
- Last Message ID: The last message ID.
- Last Message Sent Date: The date and time the last message was sent.
For more information or suggestions please contact: ekrma.elnour@forensafe.com
