Blog >> Android IMO

Investigating Android IMO

17/11/2023 Friday

The Android IMO app, developed by PageBites Inc, is a free messaging application known for its user-friendly interface and strong focus on security. With features such as text messaging, voice and video calls, media sharing, and group chats, IMO offers comprehensive messaging experience. It employs end-to-end encryption for message privacy and allows users to set self-destruct timers for added security.

Digital Forensics Value of Android IMO


IMO as most of instant messaging application; holds significant value in digital forensics. With its widespread use and diverse features, analyzing the artifacts left behind by IMO can provide valuable insights for forensic investigations. As an integral mode of communication, IMO's messages, media files, and call records can offer crucial evidence in tracking and uncovering illicit activities.

Location and Structure of Android IMO Artifacts


Android IMO artifacts records are in database in the SQLite format which can be found at the following location:
\data\data\com.imo.android.imoim\

Analyzing Android IMO Artifacts with ArtiFast


This section will discuss how to use ArtiFast to extract Android IMO artifact from Android device's files and what kind of digital forensics insights we can gain from the artifact.

After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android IMO artifact:






Once ArtiFast parser plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android IMO artifact in ArtiFast.


Android IMO Account Information

Android IMO Friends Information

Android IMO File Transfer History

Android IMO Calls

Android IMO Messages

Android IMO User Channels

Android IMO Secret Messages

Android IMO Stories




For more information or suggestions please contact: [email protected]