Where would an examiner expect to find these artifacts?

An Android device user is known to use Facebook to communicate with other parties under examination. There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?Reference: https://www.ctsforensics.com/assets/news/35550_Web-update.pdf

Question:

Where would an examiner expect to find these artifacts?

Options:

com.android.chrome/app_chrome/Default/Local Storage

dmappmgr.db

/data/system/packages.xml

AndroidManifest.xml

Correct Answer

The Correct Answer for this Question is

dmappmgr.db