## 4 Experiment, Results and Discussion
### Forensics Analysis: Chrome Application as a Case
#### 4.2.4 Reporting
\begin{table}
\begin{tabular}{c c c c} \hline \hline \multicolumn{1}{c}{**No**} & \multicolumn{1}{c}{**SQLite File**} & \multicolumn{1}{c}{**Path**} & \multicolumn{1}{c}{**No. of**} \\ \hline \multirow{3}{*}{1} & 480855723014605.null.4.1-1.315251619\_ & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)AutofillRegoux\(\backslash\)20218.17.1300\(\backslash\)} & \multirow{3}{*}{2} \\  & 4916574217246.2610689529923799. & & & \\  & nmp141781318.162702215353.v2. exo & & & \\ \hline \multirow{3}{*}{2} & 4808572301465.null 2.1-2.108237097 & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default\(\backslash\)databases\(\backslash\)00005.ldb} & \multirow{3}{*}{4} \\  & 4239776882741420.3881221114952873430 & & & \\  & n.688823.1624790219145.v2. exo & & & \\ \hline \multirow{3}{*}{3} & 70670139-0 adf-431c-826\&848n954 bc677 & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default\(\backslash\)Download} & \multirow{3}{*}{10} \\  & 4 & Heavy\_ad\_intervention\_opt\_out\_db & & \\ \hline \multirow{3}{*}{5} & Lite\_video\_opt\_out\_db & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{2} \\  & 4 & Databases.db & \\ \hline \multirow{3}{*}{6} & 7 & OfflinePages.db & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default\(\backslash\)offline Pages\(\backslash\)metadata} & \multirow{3}{*}{3} \\  & 4 & & \\ \hline \multirow{3}{*}{8} & RequestQueue.db & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default\(\backslash\)offline} & \multirow{3}{*}{1} \\  & 4 & Pages\(\backslash\)request\_queue & \\ \hline \multirow{3}{*}{9} & 000007.dbtmp & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)Default\(\backslash\)databases} & \multirow{3}{*}{4} \\  & 4 & 1635830744675.NONE & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)optimizationHints\(\backslash\)318\_metadata} & \multirow{3}{*}{3} \\ \hline \multirow{3}{*}{11} & Account Web Data & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{23} \\  & 4 & & \\ \hline \multirow{3}{*}{12} & Cookies & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{2} \\  & 4 & & \\ \hline \multirow{3}{*}{13} & Favicons & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{4} \\  & 4 & History & \\ \hline \multirow{3}{*}{15} & Login Data & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{7} \\  & 4 & & \\ \hline \multirow{3}{*}{16} & Network Action Predictor & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{4} \\  & 4 & QuotaManager & \\ \hline \multirow{3}{*}{18} & Reporting and NEL & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{4} \\  & 4 & & \\ \hline \multirow{3}{*}{19} & Shortcuts & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{2} \\  & 4 & Top Sites & \\ \hline \multirow{3}{*}{21} & Trust Tokens & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{3} \\  & 4 & & \\ \hline \multirow{3}{*}{22} & Web Data & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default} & \multirow{3}{*}{24} \\  & 4 & & \\ \hline \multirow{3}{*}{23} & https\_mail\_google\_com\_0/1 & \multirow{3}{*}{\(\backslash\)app\_chrome\(\backslash\)default\(\backslash\)databases} & \multirow{3}{*}{10} \\  & 4 & & \\ \hline \hline \end{tabular}
\end{table} 
Table 4: SQLite files of the Chrome application. Figure 24: Comparison of artifacts retrieved by mobile forensics tool. Mobile merely discerned the files' locations, both MAGNET AXZIOM and Belkasoft were unable to locate either the files or their paths. The FORC tool's capabilities extend beyond mere file recovery. It autonomously unearthed (see Figures 25 and 26) a trove of additional data previously inaccessible to the Belkasoft, MAGNET AXZIOM, and FINALMobileForensic tools. These data were stored within the SQLite database file named \"Reporting and NEL\", specifically, within the \"nel_policies\" table.