Type Viber Messages

<< Details >>

Defined Constant	Type_Viber_Messages
File Type Value	956
Parent Type	SQLite
Carve	Yes
Format Details	Yes
MIME Type	application/vnd.sqlite3
Filename Extension	sqlite

Viber Messages

Description

Viber Messages

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Items Produced

Truxton will extract the following from this file type:

• Type_Contact_List
• Type_File_Details
• Type_SQLite_Sample
• ENTITY_TYPE_PERSON
• ENTITY_TYPE_PHONE_NUMBER
• EVENT_TYPE_MADE_A_CALL
• EVENT_TYPE_RECEIVED_A_CALL
• LOCATION_TYPE_VIBER

Queries

Here's the queries Truxton uses to exploit the Viber messages databases.

Contacts

SELECT
  [participants_info].[_id], 
  [participants_info].[participant_type], 
  [participants_info].[number], 
  [participants_info].[encrypted_number], 
  [participants_info].[display_name], 
  [participants_info].[contact_name], 
  [participants_info].[viber_name], 
  [participants_info].[viber_id], 
  [participants_info].[member_id] 
FROM [participants_info] 
ORDER BY [participants_info].[_id]