| Field | Value |
|---|---|
| App Name | Bitchat Mesh |
| Bundle ID | chat.bitchat / group.chat.bitchat |
| Developer | permissionless tech, inc |
| Category | Communication |
| Initial Release | July 28, 2025 |
| Analyzed Version | 1.5.1 |
| Platform | iOS |
| Date Performed | 03/2026 |
| Verified? | True |
| Source | Physical device |
| Horizon Added? | True |
Base Path
/private/var/mobile/Containers/Data/Application/.*
/private/var/mobile/Containers/Shared/AppGroup/.*
File paths of interest with short notes of type of data:
Data:
| Artifact Type | Path | Notes | New Artifact | Tags |
|---|---|---|---|---|
| plist | /private/var/mobile/Containers/Data/Application/.*/.com.apple.mobile_container_manager.metadata.plist | Persona unique string UUID | ||
| Data | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/bitchat/arti/cache/dir_blobs/con_microdesc_sha3-256-.* | Tor Network Consensus file, shows app includes tor client and has successfully synced with tor network. | Network, PoL | |
| Sqlite | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/bitchat/arti/cache/dir.sqlite3.* | Handles Tor data: AuthCerts, BridgeDescs, etc | PoL | |
| Data | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/bitchat/arti/state/state/circuit_timeouts.json | Indicates successful build of multiple circuits | ||
| Data | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/bitchat/arti/state/state/guards.json | List specific Tor nodes by IP and fingerprint that the phone first connected to. | Network, PoL | |
| Data | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/bitchat/georelays_cache.csv | Suggests app is attempting geo-ip lookups, attempting to find Tor relays close to user. | Network, PoL | |
| Media | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/files/images/incoming/img_.*.jpg | Incoming image files from messages. | ||
| Media | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/files/images/outgoing/img_.*.jpg | Outgoing image files from messages. | ||
| Media | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/files/voicenotes/incoming/voice_.*.m4a | Incoming voice message files from messages. | ||
| Media | /private/var/mobile/Containers/Data/Application/.*/Library/Application Support/files/voicenotes/outgoing/voice_.*.m4a | Outgoing voice message files from messages. | ||
| plist | /private/var/mobile/Containers/Data/Application/.*/Library/Preferences/chat.bitchat.plist | File contains user nickname (can be changed), can show latest used channels either from mesh or Tor with lastfetch timestamp. | PoL | |
| Media | /private/var/mobile/Containers/Data/Application/.*/Library/SplashBoard/Snapshots/sceneID/chat.bitchat-default/.*.ktx | Can have random snapshot images of app. | ||
| Media | /private/var/mobile/Containers/Data/Application/.*/tmp/.*.(jpeg|jpg) | Tmp files ex: image files. | ||
| plist | /private/var/mobile/Containers/Shared/AppGroup/.*/.com.apple.mobile_container_manager.metadata.plist | Persona unique string UUID |