The rapid growth in usage and Instant Messenger Applications (IMAs) has made them a potential target by cyber criminals to conduct malicious activities such as identity theft, illegal trading, etc. For example, WeChat is extending its services to mobile platforms, making it an important source of evidence in cyber investigation cases. Therefore, understanding the types of potential evidence of users activities available on mobile devices is crucial for forensic investigations and research. In this article, we examined WeChat, the most popular application on the Android platform. We created various artifacts (e.g., texts messages, images, audio, and document) that are of forensic interest to perform targeted spoofing tampering with WeChat data. This helps in analyzing the authenticity of WeChat data during forensics, thereby proving the innocence of people or the existence of certain criminal activities.