Preprint Article Version 1 Preserved in Portico This version is not peer-reviewed

Pokémon GO Forensics: An Android Application Analysis

Version 1 : Received: 26 May 2017 / Approved: 29 May 2017 / Online: 29 May 2017 (11:21:56 CEST)

A peer-reviewed article of this Preprint also exists.

Sablatura, J.; Karabiyik, U. Pokémon GO Forensics: An Android Application Analysis. Information 2017, 8, 71. Sablatura, J.; Karabiyik, U. Pokémon GO Forensics: An Android Application Analysis. Information 2017, 8, 71.


As the geolocation capabilities of smartphones continue to improve, developers have continued to create more innovative applications that rely on this location information for their primary function. This can be seen with Niantic's release of Pokémon GO, which is a massively multiplayer online role playing and augmented reality game. This game became immensely popular within just a few days of its release. However, it also had the propensity to be a distraction to drivers resulting in numerous accidents, and was used to as a tool by armed robbers to lure unsuspecting users into secluded areas. This facilitates a need for forensic investigators to be able to analyze the data within the application in order to determine if it may have been involved in these incidents. Because this application is new, limited research has been conducted regarding the artifacts that can be recovered from the application. In this paper, we aim to fill the gaps within the current research by assessing what forensically relevant information may be recovered from the application, and understanding the circumstances behind the creation of this information. Our research focuses primarily on the artifacts generated by the Upsight analytics platform, those contained within the bundles directory, and the Pokémon Go Plus accessory. Moreover, we present our new application specific analysis tool that is capable of extracting forensic artifacts from a backup of the Android application, and presenting them to an investigator in an easily readable format. This analysis tool exceeds the capabilities of UFED Physical Analyzer in processing Pokémon GO application data.


digital forensic tool, mobile application forensics, geolocation, Upsight, Pokémon GO, Pokémon GO Plus


Computer Science and Mathematics, Information Systems

Comments (0)

We encourage comments and feedback from a broad range of readers. See criteria for comments and our Diversity statement.

Leave a public comment
Send a private comment to the author(s)
* All users must log in before leaving a comment
Views 0
Downloads 0
Comments 0
Metrics 0

Notify me about updates to this article or when a peer-reviewed version is published.
We use cookies on our website to ensure you get the best experience.
Read more about our cookies here.