Elcomsoft Explorer for WhatsApp
The Ultimate WhatsApp Acquisition Tool
Elcomsoft Explorer for WhatsApp (EXWA) is a Windows tool to acquire, decrypt and display WhatsApp communication histories. The tool provides multiple acquisition options to extract and decrypt WhatsApp data from local and cloud iOS backups (iTunes and iCloud), and supports the extraction of WhatsApp proprietary cloud backups from iCloud Drive. Encrypted backups can be automatically decrypted providing that the correct password is supplied. Downloading cloud backups from Apple iCloud and iCloud Drive requires entering the user’s Apple ID and password or using a binary authentication token extracted from the user’s computer.
The built-in viewer offers convenient view of messages, calls and pictures stored in multiple WhatsApp databases obtained from the different sources. Instant filtering and ultra-fast searching allow finding records of interest in a matter of seconds.
Elcomsoft Explorer for WhatsApp is an all-in-one standalone acquisition, extraction and viewing tool for WhatsApp backups.
Elcomsoft Explorer for WhatsApp supports all of the following acquisition methods of WhatsApp databases:
WhatsApp Acquisition: Not an Easy Target
WhatsApp Messenger is one of the most popular instant messaging tools, if not the most popular one. WhatsApp clients are available for all mobile platforms including Android, Apple iOS, Blackberry, and Microsoft Windows Phone 8.x and Windows 10 Mobile.
WhatsApp is a popular target for spammers, hoaxers and cyber criminals. On at least one occasion, intercepted WhatsApp communications helped uncover a terrorist organization.
Since WhatsApp employs secure end-to-end messaging, it is not possible for law enforcement to request communication histories from Facebook who currently owns WhatsApp. As a result, acquisition is only possible from end-user devices or data backups produced by such devices and saved either locally or stored in a cloud.
Downloading Proprietary WhatsApp Backups
WhatsApp has the ability to create cloud backups of its database, saving them in Apple iCloud Drive. Unlike iOS devices that are unique per Apple device, WhatsApp backups are unique per phone number. This means that regardless of how many Apple devices the user has registered under their Apple account, the number of available WhatsApp backups in the user’s iCloud Drive will depend on how many different phone numbers are used within the Apple account.
WhatsApp can be configured to create backups in iCloud Drive even if the device does not have iCloud backups enabled. At this time, Elcomsoft Explorer for WhatsApp is the only tool that can extract proprietary WhatsApp backups from iCloud Drive.
Information Available in WhatsApp Databases
WhatsApp is an instant messaging application. Its databases contain information about peer-to-peer communications between users, including the following records:
WhatsApp Database Content
Elcomsoft Explorer for WhatsApp is equipped with a built-in viewer supporting multiple WhatsApp databases extracted from various sources. The viewer includes instant filtering and quick search functionality. Finding a certain contact, message or conversation is easy by specifying a date range or typing a partial key word into the search box.
Decrypting WhatsApp Databases
While WhatsApp databases are not encrypted, system backups that contain WhatsApp communication histories are frequently protected with a password. If this is the case (e.g. if you are attempting to extract WhatsApp communication history from an encrypted local iTunes backup) you will need to specify the correct password in order for Elcomsoft Explorer for WhatsApp to decrypt the backup and extract the database.
Requirements to Download WhatsApp Databases from the Cloud
The Standard edition of Elcomsoft Explorer for WhatsApp can download information from Apple iCloud and iCloud Drive. In order to be able to download information from Apple iCloud/iCloud Drive, the correct Apple ID and password are required. In addition, one can use a binary authentication token extracted from the user’s PC or Mac. For extracting binary authentication tokens, we recommend using a tool from Elcomsoft Phone Breaker (if you don’t own a license, the evaluation version will work just fine).
Features and Benefits
订购某版的全部许可EXWA 下载免费 测试版 .的版本EXWA Current version: 1.31.15718 (9 Nov, 2016)
The product can be uninstalled through Control Panel ‘Programs and features’, or using ‘Unistall’ program in Start menu. Standard Windows Installer service is being used.