Oxygen Forensic - D...
 
Notifications
Clear all

Oxygen Forensic - Decrypt WhatsApp Backups

9 Posts
3 Users
0 Likes
1,827 Views
(@john000)
Posts: 45
Eminent Member
Topic starter
 

Hi,

According to Oxygen Forensic latest release, they announced support for WhatsApp backup decryption.
https://blog.oxygen-forensic.com/oxygen-forensic-detective-10-4-is-here-examine-more-data-from-more-sources-than-ever-before/?utm_source=Facebook&utm_medium=OFIFacebook&utm_campaign=ProductUpdate

n some cases, you may have a WhatsApp backup file extracted from an SD card or the internal "memory of an Android device, but you do not have a key file to decrypt it."

Anyone know where or how I can get the backup file? iOS/Android?

Thanks

 
Posted : 09/08/2018 11:02 am
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

There can be cases when a forensic expert has a WhatsApp backup from an SD card of an Android device but has no key file to decrypt it. So for such cases we've introduced this alternative method of WhatsApp backup decryption via phone number or a special WhatsApp Cloud token that can be extracted in our software. If you need more details on this method please contact our support directly via email or call from our website.

 
Posted : 09/08/2018 1:01 pm
(@edigama25)
Posts: 15
Active Member
 

if the phone number\sim is active you can recreate the key file on any android device. preferably one with easier access to files or rooted.

 
Posted : 09/08/2018 1:32 pm
(@john000)
Posts: 45
Eminent Member
Topic starter
 

There can be cases when a forensic expert has a WhatsApp backup from an SD card of an Android device but has no key file to decrypt it. So for such cases we've introduced this alternative method of WhatsApp backup decryption via phone number or a special WhatsApp Cloud token that can be extracted in our software. If you need more details on this method please contact our support directly via email or call from our website.

This is great, Thanks!
But where do I find the backup on the SD card? it there any specific location?

 
Posted : 09/08/2018 1:36 pm
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

Usually, you can find it in sdcard\WhatsApp\Databases folder.

 
Posted : 09/08/2018 2:05 pm
(@john000)
Posts: 45
Eminent Member
Topic starter
 

Will test it soon.
Thanks for your help.

BR,
John

 
Posted : 09/08/2018 2:13 pm
(@john000)
Posts: 45
Eminent Member
Topic starter
 

Usually, you can find it in sdcard\WhatsApp\Databases folder.

Hi,

I wanted to examine it but couldn't find any record for Whatsapp Backup on a few devices with SD card.
All of the backups automatically uploaded to Google Drive.

1. Is there any way to download the backup from Google Drive?
2. If not, do you know on which Android version it's possible to backup to the SD card?

Thanks.

 
Posted : 12/08/2018 7:00 am
(@john000)
Posts: 45
Eminent Member
Topic starter
 

Usually, you can find it in sdcard\WhatsApp\Databases folder.

Hi,

I wanted to examine it but couldn't find any record for Whatsapp Backup on a few devices with SD card.
All of the backups automatically uploaded to Google Drive.

1. Is there any way to download the backup from Google Drive?
2. If not, do you know on which Android version it's possible to backup to the SD card?

Thanks.

Please advise..

 
Posted : 14/08/2018 6:50 am
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

1. Sure, you can use Oxygen Forensic Cloud Extractor to download and decrypt WhatsApp backups from Google Drive. Our Cloud Extractor is available in Oxygen Forensic Detective software at no additional charge.
2. The user can select WhatsApp backup options in Settings/Chats/Backup chat in WhatsApp app.
Once this option is enabled WhatsApp messages will be saved both to Google Drive and to the internal or external memory of the device (depends on the device settings).For more detailed information you can always contact our support team directly.

 
Posted : 14/08/2018 8:14 am
Share: