The extraction of the deleted mobile phone files can be used for criminal evidence in the primary work of the mobile forensics investigation. tag - mobile forensics,