How to decrypt whatsapp database in unroot device?

  • Replies:1
  • OpenNot stickiedUnanswered
  • Forum posts: 1

Feb 11, 2017 7:42:45 AM via Website

I have followed the instructions using WhatsAppKeyExtract in order to get the whatsapp.key and msgstore.db files. However, after I go to the step for back up, errors pop up:

Found legacy WhatsApp 2.11.431 in local folder

Backing up WhatsApp 2.17.24
3611 KB/s (27902483 bytes in 7.544s)
Backup complete

Installing legacy WhatsApp 2.11.431
3327 KB/s (8388608 bytes in 2.461s)
pkg: /data/local/tmp/LegacyWhatsApp.apk
Failure [INSTALL_FAILED_INVALID_APK]
Install complete

Now unlock your device and confirm the backup operation.

Please enter your backup password (leave blank for none) and press Enter:

C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Record size = 2 blocks
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: apps/com.whatsapp/f/key: Not found in archive
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Error exit delayed from previous errors
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Record size = 2 blocks
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: apps/com.whatsapp/db/msgstore.db: Not found in archive
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Error exit delayed from previous errors
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Record size = 2 blocks
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: apps/com.whatsapp/db/wa.db: Not found in archive
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Error exit delayed from previous errors
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Record size = 2 blocks
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: apps/com.whatsapp/db/axolotl.db: Not found in archive
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Error exit delayed from previous errors
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Record size = 2 blocks
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: apps/com.whatsapp/db/chatsettings.db: Not found in archive
C:\Users\??\Desktop\WhatsApp-Key-DB-Extractor-master\bin\tar.exe: Error exit delayed from previous errors

Cleaning up temporary files ...
Done

Restoring WhatsApp 2.17.24
3239 KB/s (27902483 bytes in 8.411s)
pkg: /data/local/tmp/base.apk
Success
Restore complete

Removing WhatsApp 2.17.24 temporary apk

Could anyone help solving this problem?

  • Forum posts: 7

Feb 11, 2017 8:04:36 AM via Website

I just decrypted one whatsapp db from an unrooted android device, the process is simple...these are the tools I used:

  1. sch3m4.github.io/wforensic/ -> used for decryption and merging db files
  2. blog.digital-forensics...nsics.html -> used for printing those decrypted db into printable form, so you won't need to look it using sqldb viewer or stuff like that.

good luck.