Type Icing MMS SMS

From truxwiki.com
Revision as of 16:22, 18 May 2020 by Admin (talk | contribs) (Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Icing_MMS_SMS</code> |- | File Type Value | 975 |- | Parent Type | Type_SQLite_Datab...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
Details
Defined Constant Type_Icing_MMS_SMS
File Type Value 975
Parent Type SQLite
Carve Yes
Format Details Yes
MIME Type application/x-sqlite3
Filename Extension db

Icing MMS SMS

Description

Android Icing MMS data

Details

We have seen several versions of this database.

Queries

Here's the queries Truxton uses to exploit the Icing MMS/SMS databases.

SMS

Sometimes the [sms] table doesn't exist in the database.

SELECT [address],[date],[body],[type] FROM [sms]

Other times you must pull the SMS messages from the [mmssms] table. We do this when the [mmssms] tables does not contain a column named [attachment_data].

SELECT [_id],[msg_type],[address],[date],[body] FROM [mmssms] WHERE [msg_type] = 'sms'

Or

SELECT [address],[date],[date_sent],[body],[attachment_data],[_id] FROM [mmssms]