Investigating Android Google Voice
27/06/2025 Friday
The Google Voice app is a cross-platform communication tool, offering
dedicated apps for Android and iOS as well as compatibility with popular
desktop operating systems. It can also be used directly through a web
browser on any device without requiring installation. While primarily
designed for U.S. users, Google Voice has limited functionality for
international users, mainly those with a U.S. number or a Google
Workspace subscription. For U.S. customers, it provides a free phone
number for calls, texts, and voicemail, all accessible via Wi-Fi or
mobile data.
Digital Forensics Values of Android Google Voice
Similar to other applications that provide instant messaging features,
Google Voice can be a crucial source of corroborative communication
data, as the artifacts it leaves behind may contain valuable evidence.
The extracted data can help investigators gather information about a
user's suspicious communication activities, identity details. These
artifacts can be evidence of suspicious activities carried out by the
user or communication with other investigation-related entities.
Location of Android Google Voice
Android Google Voice artifacts can be found at the following
locations:
data/data/com.google.android.apps.googlevoice
data/data/com.google.android.apps.googlevoice/files/accounts/1/LegacyMsgDbInstance.db
Analyzing Android Google Voice Artifacts with ArtiFast
This section will discuss how to use ArtiFast to extract Android Google
Voice artifacts from Android machines’ files and what kind of digital
forensics insights we can gain from the artifacts.
After you have created your case and added evidence for the
investigation, at the Artifact Selection phase, you can select Android
Google Voice artifact parsers:
×
Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Google Voice artifacts in ArtiFast.
Android Google Voice Messages
- Message Sent Date/Time: Message Sending Date/Time.
- Message Direction: Indicates whether this is an outgoing or incoming message.
- Message Content: The text content of the message.
- Message ID: The message’s unique identifier.
- Receiver Number: The number of the receiver of this message.
- Sender Number: The number of the sender of this message.
Android Google Voice Pending Messages
- Message Sending Date/Time: Message Sending Date/Time.
- Pending Message ID: The pending message’s unique identifier.
- Message Content: The text content of the message.
- Conversation ID: The conversation's unique identifier.
- Message ID: The message’s unique identifier.
Android Google Voice Calls
- Caller Number: The number of the user who made the call.
- Call Direction: The direction of this call.
- Call Date/Time: The call Date/Time.
- Recipient Number: The call recipient phone number.
- Call ID: The call event unique identifier.
- Call Duration: The call duration in seconds.
Android Google Voice Account Information
- Phone Number: The phone number associated with this account.
- First Name: The user’s first name.
- Last Name: The user’s last name.
- Full Name: The user’s full name.
- Email Address: The linked email address.
- User ID: The Linked VOIP Devices ID.
- Profile Picture URL: The profile picture’s URL.
For more information or suggestions please contact: ekrma.elnour@forensafe.com
