DFIR-HBG/ParseSnapchat_Android

Not working with older versions of Snapchat

Opened this issue · 0 comments

Hello,

I am running the script on Snapchat content from Sapchat version 10.70.5.0 installed and used on an Android device back around November 2019. The script starts, but generates the following output and errors. Any suggestions on how resolve the issue(s)?

python ParseSnapchatAndroid.py com.snapchat.android
Parsing friends
Getting cached files
Getting cached files
Parsing messages from: com.snapchat.android/databases/arroyo.db
Traceback (most recent call last):
File "C:\Users<redacted>\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\pandas\io\sql.py", line 2202, in execute
cur.execute(sql, *args)
sqlite3.OperationalError: no such column: content_type

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "F:<redacted>\ParseSnapchatAndroid.py", line 225, in
main()
File "F:<redacted>\ParseSnapchatAndroid.py", line 199, in main
df_chats = getChats(snapchatFolder+"/databases/arroyo.db")
File "F:<redacted>\ParseSnapchatAndroid.py", line 59, in getChats
df_arroyo = pd.read_sql_query(query_arroyo, con_arroyo)
File "C:\Users<redacted>\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\pandas\io\sql.py", line 469, in read_sql_query
return pandas_sql.read_query(
File "C:\Users<redacted>\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\pandas\io\sql.py", line 2266, in read_query
cursor = self.execute(sql, params)
File "C:\Users<redacted>\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\pandas\io\sql.py", line 2214, in execute
raise ex from exc
pandas.errors.DatabaseError: Execution failed on sql 'select
client_conversation_id as 'Client Conversation ID',
server_message_id,
message_content,
datetime(creation_timestamp/1000, 'unixepoch') as 'Creation Timestamp',
datetime(read_timestamp/1000, 'unixepoch') as 'Read Timestamp',
content_type,
sender_id as userId
from conversation_message
order by client_conversation_id, creation_timestamp
': no such column: content_type