Re: Download Free Whatsapp Application For Android
Srikanth Fonseca
This is extraordinary. Most of my communicants use Whatsapp. I haven't asked them if they use ipad, but I think some/lots of them use iphone. Does iphone support whatsapp? Certainly my android tablet has whatsapp. Being peremptorily told by apple forums to 'google whatsapp' diminishes my confidence in ios. This is the first ios device I've had. I'm getting the vibe that I'm too stupid to use ipad.
Without knowing any technical details, my opinion is that WhatsApp missing on the iPad is just an Apple decision for now. As the MacBook Pro cannot handle SMS either... Too bad.. really looking forward to have in on my iPad Pro.
My android tablet doesn't have SMS but it has a Whatsapp app. I prefer an app, because using a browser seems to cause probs when I switch back & forth between devices, but hey-ho, I guess there's company politics involved between Apple and Meta.
WhatsApp emerged in 2009, rapidly becoming the go-to communication app for iOS users. When its Android version was launched a year later, the app was already popular enough to quickly grow a large Android user base that has substantially increased over time. Today's global popularity of WhatsApp and the wide usage of Android mobile devices make Android WhatsApp one of the foremost sources of evidence in criminal and cybersecurity investigations.
For obtaining and navigating Android WhatsApp data, we will use Belkasoft X, a DFIR tool that streamlines mobile forensics tasks, enabling you to acquire and analyze a wide range of digital artifacts from mobile devices, computers, and clouds.
On Android devices, WhatsApp houses its resources in the Application Sandbox. The resource folder within the device file system contains chat databases in an unencrypted form, but you can only access this folder on rooted devices.
Android WhatsApp creates daily backups of chat databases within the device, encrypting them with a key stored in the Application Sandbox. WhatsApp backup files are accessible through the Media Transfer Protocol (MTP) when connecting a device to a computer via USB. Depending on how the device is set up to store application data, you can find backups either within its internal memory or on the SD card in it.
Users can opt to upload WhatsApp backups to their Google Account cloud storage. Like on devices, media files in these backups are stored as-is, and databases are by default encrypted in the CRYPT14 format.
The WhatsApp end-to-end backup encryption option offers additional protection for backups. It involves securing access to backup files with a password or 64-digit encryption key and encrypting the database file in CRYPT15 format. If a user activates this protection, the application chats can only be restored from a backup with the additional password or key. Note that this setting affects both the files uploaded to the cloud and those stored on the device.
On Android devices, WhatsApp stores account data in several SQLite databases and their transactional files. They are located in the application resource folder ..\data\data\com.WhatsApp\databases. The following are the key databases that contain forensically relevant information:
In ..\data\data\com.WhatsApp\shared_prefs, you can find the com.whatsapp_preferences_light.xml file with account settings and timestamps of various application events enclosed in XML tags. For example, here are some tags that may provide insights for your investigation:
WhatsApp encrypts and decrypts database backups with a key that is generated when the user authenticates in the application using their phone number. You can find this key in ..\data\data\com.WhatsApp\files.
Note that this key only works to decrypt files with the .crypt14 extension. When end-to-end backup encryption is on (files have the .crypt15 extension), the second key or password required to decrypt the backup is only known to the user and it is not stored in the application folders
WhatsApp saves exchanged media files into the backup folders it creates on the device. You can find them in ..\Android\media\com.whatsapp\WhatsApp\Media. Other media files, such as contact avatars, are part of the application resource folders.
The way Android WhatsApp stores data and creates backups allows for several approaches to data acquisition. In this section, we will explore these approaches and look into the files they let you extract.
Due to security measures, not all acquisition methods can provide you with access to messaging data. Obtaining the complete WhatsApp data set requires a specialized tool that can acquire unencrypted WhatsApp data. For this purpose, we will use Belkasoft X that includes advanced Android device acquisition and cloud acquisition methods.
Connect the device to your workstation and unlock it. Navigate to ..\Android\media and copy the com.whatsapp folder to your machine. WhatsApp backups can reside either within the device internal memory or on the SD card, so you may need to check both of these storages to locate the files.
The Android WhatsApp backup comprises two folders with database backups and a structure of media file folders. The Databases folder includes msgstore.db.crypt14, the latest backup of the main WhatsApp database. It may also contain a few versions of this backup created earlier, named similar to msgstore-yyyy-mm-dd.db.crypt14. These earlier files may be of use for recovering messages that were deleted after these backups were made (if you manage to get hold of the decryption key).
All database backups are encrypted with the same key tied to the WhatsApp account phone number. You can acquire this key from the device using the APK downgrade and Android file system copy methods that we will discuss later.
Note that if a WhatsApp account has end-to-end backup encryption activated, the application uses a more advanced cryptography format, CRYPT15. It applies this format to backup files on the device as well.
The Android WhatsApp backup is stored in a folder named after the phone number registered with the account. The files you can obtain from a Google Account are typically the same as those stored on the device but with only one version of the encrypted msgstore.db.crypt14.
WhatsApp QR is a cloud acquisition method. It emulates linking a device to a WhatsApp account to download application data. This method is useful for obtaining recent conversations and media files. The extent of information you can acquire is limited due to the specifics of the mechanism governing data transfer to connected clients.
Before you begin the acquisition, you should verify that the device camera is working. You will need it to scan the authentication QR code. The device must also be online for the linking functionality to work.
If you are dealing with a non-rooted device, you can acquire an unencrypted backup copy of WhatsApp data using the APK downgrade method. It relies on the ADB backup mechanism through which, in the past, many applications allowed users to create backup copies of their data. Since security was not such a concern in those times, most applications did not encrypt their ADB backups.
When running APK downgrade, Belkasoft X replaces the current WhatsApp application package on the device with its older version that was set up to back up its data through ADB. Then, it runs the backup command that copies the application files. Importantly, the tool does not launch the downgraded application, ensuring that the databases on the device remain unaffected.
The resulting image is an ADB backup (.ab) archive that includes a copy of WhatsApp files from the application resource folder under ..\apps\com.whatsapp. The ADB backup folder structure differs from the one stored on the device but contains essentially the same files:
To acquire Android WhatsApp, you can use both cloud and device acquisition methods. Each method has its opportunities and limitations. It is best to use them in combination to acquire the most comprehensive data set.
Belkasoft X is equipped with a comprehensive set of acquisition methods that empower you to acquire Android WhatsApp data from a digital device or a cloud. It can further decrypt the acquired data (given that the key is accessible) and prepare it for the following steps of your forensic investigation.
WhatsApp (officially WhatsApp Messenger) is an instant messaging (IM) and voice-over-IP (VoIP) service owned by technology conglomerate Meta.[14] It allows users to send text, voice messages and video messages,[15] make voice and video calls, and share images, documents, user locations, and other content.[16][17] WhatsApp's client application runs on mobile devices, and can be accessed from computers.[18] The service requires a cellular mobile telephone number to sign up.[19] In January 2018, WhatsApp released a standalone business app called WhatsApp Business which can communicate with the standard WhatsApp client.[20][21]
The service was created by WhatsApp Inc. of Mountain View, California, which was acquired by Facebook in February 2014 for approximately US$19.3 billion.[22][23] It became the world's most popular messaging application by 2015,[24][25] and had more than 2 billion users worldwide by February 2020,[26] confirmed four years later by new 200M registrations per month.[27] By 2016, it had become the primary means of Internet communication in regions including Latin America, the Indian subcontinent, and large parts of Europe and Africa.[24]
WhatsApp was founded in February 2009 by Brian Acton and Jan Koum, former employees of Yahoo! A month earlier, after Koum purchased an iPhone, he and Acton decided to create an app for the App Store. The idea started off as an app that would display statuses in a phone's Contacts menu, showing if a person was at work or on a call.[63]
7fc3f7cf58