Recovering Raw data files from Whatsapp

GabrielCupim

Estimable
Apr 2, 2014
3
0
4,510
Hi there guys!

I'd like to know if there is any way to recover raw data files from a whatsapp .crypt file.
I used the site "RECOVER MESSAGES" to recover most of a talk in this file, but some of the texts were lost in the process, the website generated a section in which it lists all the messages that it could not recover.

They're mostly show in binary language or something, like this one:



Cell Free Space Recovered Data
Page: 8 Offset: 7178 Size: 399
7178 02 B6 03 37 03 CD 03 CD 00 00 00 00 00 00 00 00 ___7____________
7194 00 00 00 00 00 00 00 00 00 00 00 00 00 02 3F 17 ______________?_
7210 1D 1D 01 88 4B 74 61 62 6C 65 6D 65 73 73 61 67 ____Ktablemessag
7226 65 73 6D 65 73 73 61 67 65 73 03 43 52 45 41 54 esmessages_CREAT
7242 45 20 54 41 42 4C 45 20 6D 65 73 73 61 67 65 73 E TABLE messages
7258 20 28 5F 69 64 20 49 4E 54 45 47 45 52 20 50 52 (_id INTEGER PR
7274 49 4D 41 52 59 20 4B 45 59 20 41 55 54 4F 49 4E IMARY KEY AUTOIN
7290 43 52 45 4D 45 4E 54 2C 20 6B 65 79 5F 72 65 6D CREMENT, key_rem
7306 6F 74 65 5F 6A 69 64 20 54 45 58 54 20 4E 4F 54 ote_jid TEXT NOT
7322 20 4E 55 4C 4C 2C 20 6B 65 79 5F 66 72 6F 6D 5F NULL, key_from_
7338 6D 65 20 49 4E 54 45 47 45 52 2C 20 6B 65 79 5F me INTEGER, key_
7354 69 64 20 54 45 58 54 20 4E 4F 54 20 4E 55 4C 4C id TEXT NOT NULL
7370 2C 20 73 74 61 74 75 73 20 49 4E 54 45 47 45 52 , status INTEGER
7386 2C 20 6E 65 65 64 73 5F 70 75 73 68 20 49 4E 54 , needs_push INT
7402 45 47 45 52 2C 20 64 61 74 61 20 54 45 58 54 2C EGER, data TEXT,
7418 20 74 69 6D 65 73 74 61 6D 70 20 49 4E 54 45 47 timestamp INTEG
7434 45 52 2C 20 6D 65 64 69 61 5F 75 72 6C 20 54 45 ER, media_url TE
7450 58 54 2C 20 6D 65 64 69 61 5F 6D 69 6D 65 5F 74 XT, media_mime_t
7466 79 70 65 20 54 45 58 54 2C 20 6D 65 64 69 61 5F ype TEXT, media_
7482 77 61 5F 74 79 70 65 20 54 45 58 54 2C 20 6D 65 wa_type TEXT, me
7498 64 69 61 5F 73 69 7A 65 20 49 4E 54 45 47 45 52 dia_size INTEGER
7514 2C 20 6D 65 64 69 61 5F 6E 61 6D 65 20 54 45 58 , media_name TEX
7530 54 2C 20 6C 61 74 69 74 75 64 65 20 52 45 41 4C T, latitude REAL
7546 2C 20 6C 6F 6E 67 69 74 75 64 65 20 52 45 41 4C , longitude REAL
7562 2C 20 74 68 75 6D 62 5F 69 6D 61 67 65 20 54 , thumb_image T




Is there any way I can recover the messages with this??
Thanks everyone!
 

GabrielCupim

Estimable
Apr 2, 2014
3
0
4,510



You're right, it's encrypted, and it's only supposed to be restored by the owner's phone as a backup.
If you get this files on a PC and try to open them, they won't open.

It took me a few hours to find a solution to open those files, the website "recover messages" was the best of them.

It decrypted the file, so that I could see most of it, but I still cant' see some, as it says it was lost during the process.

When you mean "program support people", you mean here on this board, right?
'Cause whatsapp people probably won't help me at all, since I'm not supposed to do what I'm doing anyway lol : )

 


I meant the Watsapp support.