ืืืื ืืืจ ืืืืื ืฆื ืืืืกื ืืืึธืก ืืืืคึผืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืคืึธืจืขื ืกืืง ืึทืจืืึทืคืึทืงืฅ ืขืงืกืืกืืืจื ืืืืฃ ืคืึทืจืฉืืืขื ืข ืึธืคึผืขืจืืืืื ื ืกืืกืืขืืขื ืืื ืืื ืคึผืื ืงื ืืื ืงืขื ืขื ืืืื ืืขืคึฟืื ืขื, ืืึธืก ืืื ืืขืจ ืึธืจื ืคึฟืึทืจ ืืืจ. ืืขืจ ืึทืจืืืงื ืืื ืคึฟืื ืึท ืืืืืข ืืื ืื ืืจืืคืข-ืื ืงืึธืืคึผืืืืขืจ ืคืึธืจืขื ืกืืงืก ืืึทืืึธืจืึทืืึธืจืืข ืืืึธืจ ืืืืึทืืืึธืื ืืืืื ืึท ืกืขืจืืข ืคืื โโโโืืืืขืืช ืืืขืื ืืืืึทืฆืึทืคึผืคึผ ืคืึธืจืขื ืกืืงืก ืืื ืืืึธืก ืืื ืคึฟืึธืจืืึทืฆืืข ืงืขื ืขื ืืืื ืืืงืืืขื ืคืื ืึทื ืึทืืืืืื ื ืื ืืืื.
ืืึธืืืจ ืืืืื ืืึธื ืึทื ืคืึทืจืฉืืืขื ืข ืึธืคึผืขืจืืืืื ื ืกืืกืืขืืขื ืงืจืึธื ืคืึทืจืฉืืืขื ืข ืืืืคึผืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ, ืืื ืืืื ืึท ืคืึธืจืฉืขืจ ืงืขื ืขื ืขืงืกืืจืึทืงื ืืืืขืจ ืืืืคึผืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืืึทืื ืคืื ืืืื ืืืื, ืืึธืก ืืื ื ืืฉื ืืืื ืขื ืึทื ืขื ืืขื ืืืืคึผืก ืคืื ืืึทืื ืงืขื ืขื ืืืื ืืงืกืืจืึทืงืืื ืคืื ืื ืื ืืขืจ ืืืื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืื ืึท ืกืืกืืขื ืึทืคึผืึทืจืึทื ืืื Windows ืึทืก ืืื ืึทืืืขืงืืขื ืืืขื, ืืืืึทืฆืึทืคึผืคึผ ืืฉืึทืฅ ืืืขื ืืืกืืึธืืข ื ืืฉื ืืืื ืืขืคึฟืื ืขื ืืืืฃ ืืืื ืืืกืงืก (ืืื ืื ืืืกื ืขื ืคืื ืืึทืงืึทืคึผ ืงืืคืืขืก ืคืื ืืึธืก ืืขืืืืกืขืก, ืืืึธืก ืงืขื ืขื ืืืื ืืขืคึฟืื ืขื ืืืืฃ ืื ืืขืืืข ืืจืืืืื). ืื ืคืึทืจืืึทืคึผืื ื ืคืื ืืึทืคึผืืึทืคึผืก ืืื ืจืืจืขืืืืืง ืืขืืืืกืขืก ืืืขื ืืึธืื ืืืึทื ืืืืืขื ืข ืงืขืจืึทืงืืขืจืืกืืืงืก. ืืื ืก ืจืขืื ืืืขืื ืืขื ืืื ืืขืจ ืืขืืึทื.
ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืื ืึทื ืืจืืื ืืืื
ืืื ืกืืจ ืฆื ืขืงืกืืจืึทืงื ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืคืื ืึทื ืึทื ืืจืืื ืืืื, ืืขืจ ืคืึธืจืฉืขืจ ืืืื ืืึธืื ืกืืคึผืขืจืืกืขืจ ืจืขืื ('ืืืึธืจืฆื') ืืืืฃ ืื ืืืื ืืื ืืขืจ ืืืกืคืึธืจืฉืื ื ืึธืืขืจ ืงืขื ืขื ืึทื ืืขืจืฉ ืขืงืกืืจืึทืงื ืึท ืืฉืืืืช ืืืงืึธืจื ืืึทืืคึผ ืคืื ืื ืืืื, ืึธืืขืจ ืืืื ืืขืงืข ืกืืกืืขื (ืืืฉื, ื ืืฆื ืืืืืืืืืจื ืืืึทืื ืขืจืึทืืืืืืื ืคืื ืึท ืกืคึผืขืฆืืคืืฉ ืจืืจืขืืืืืง ืืืื).
ืึทืคึผืคึผืืืงืึทืืืึธื ืืขืงืขืก ืืขื ืขื ืืืื ืืื ืื ืืขืืขืคืึธื ืืืงืึธืจื ืืื ืืขืจ ืึธืคึผืืืืืื ื ืืื ืืืึธืก ืืึทื ืืฆืขืจ ืืึทืื ืืขื ืขื ืืขืจืืืขืืืขื. ืืื ืึท ืืขืจืฉื, ืืขื ืึธืคึผืืืืืื ื ืืื ืืขืืืืกื 'ืืึทื ืืฆืขืจ ืืึทืื'. ืกืืืืืจืขืงืืึธืจืืขืก ืืื ืคึผืจืึธืืจืึทื ืืขืงืขืก ืืขื ืขื ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/'.
ืื ืืืืคึผื ืืขืงืขืก ืืืึธืก ืึทื ืืืึทืืื ืืืืึทืฆืึทืคึผืคึผ ืคืึธืจืขื ืกืืง ืึทืจืืึทืคืึทืงืฅ ืืื ืื ืึทื ืืจืืื ืึทืก ืืขื ืขื ืืึทืืึทืืืืกืื 'wa.db' ะธ 'msgstore.db'.
ืืื ืื ืืึทืืึทืืืืก 'wa.db' ืึผืืื ืื ืืึทื ืฅ ืงืึธื ืืึทืงื ืจืฉืืื ืคืื ืึท ืืืืึทืฆืึทืคึผืคึผ ืืึทื ืืฆืขืจ, ืึทืจืืึทื ืืขืจืขืื ื ืืขืืขืคืึธื ื ืืืขืจ, ืึทืจืืืกืืืืึทืื ื ืึธืืขื, ืฆืืื ืกืืึทืืคึผืก ืืื ืงืืื ืื ืืขืจืข ืืื ืคึฟืึธืจืืึทืฆืืข ืฆืืืขืฉืืขืื ืืฉืขืช ืจืขืืืฉืืกืืขืจืื ื ืคึฟืึทืจ ืืืืึทืฆืึทืคึผืคึผ. ืืขืงืข 'wa.db' ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/databases/' ืืื ืืื ืื ืคืืืืขื ืืข ืกืืจืืงืืืจ:
ืื ืืขืจืกื ืืฉืืงืึทืืืข ืืืฉื ืืื ืื ืืึทืืึทืืืืก 'wa.db' ืคึฟืึทืจ ืื ืคืึธืจืฉืขืจ ืืขื ืขื:
- 'ืืืึท_ืงืึธื ืืึทืงืื'
ืืขืจ ืืืฉ ืึผืืื ืงืึธื ืืึทืงื ืืื ืคึฟืึธืจืืึทืฆืืข: ืืืืึทืฆืึทืคึผืคึผ ืงืึธื ืืึทืงื ืฉืืึทื, ืกืืึทืืืก ืืื ืคึฟืึธืจืืึทืฆืืข, ืืึทื ืืฆืขืจ ืึทืจืืืกืืืืึทืื ื ืึธืืขื, ืฆืืื ืกืืึทืืคึผืก, ืขืืง.ืืืฉ ืืืืกืืขื:
ืืืฉ ืกืืจืืงืืืจืคืขืื ื ืึธืืขื ืืืขืจื _ืื ืจืขืงืึธืจื ืกืืงืืืึทื ืก ื ืืืขืจ (ืืื SQL ืืืฉ) jid ืืืืึทืฆืึทืคึผืคึผ ืงืึธื ืืึทืงื ืฉืืึทื, ืืขืฉืจืืื ืืื ืืขื ืคึฟืึธืจืืึทื <ืืขืืขืคืึธื ื ืืืขืจ>@s.whatsapp.net is_whatsapp_user ืึผืืื '1' ืืืื ืืขืจ ืงืึธื ืืึทืงื ืงืึธืจืึทืกืคึผืึทื ืื ืฆื ืึท ืคืึทืงืืืฉ ืืืืึทืฆืึทืคึผืคึผ ืืึทื ืืฆืขืจ, '0' ืึทื ืืขืจืฉ ืืึทืฆืขืื ืึผืืื ืื ืืขืงืกื ืืขืืืืื ืืื ืื ืงืึธื ืืึทืงื ืกืืึทืืืก status_timestamp ืึผืืื ืึท ืืืืขืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื ื ืืืขืจ ืืขืืขืคืึธื ื ืืืขืจ ืคึฟืึทืจืืื ืื ืืื ืืขื ืงืึธื ืืึทืงื raw_contact_id ืงืึธื ืืึทืงื ืกืืจืืึทื ื ืืืขืจ display_name ืงืึธื ืืึทืงื ืึทืจืืืกืืืืึทืื ื ืึธืืขื ืืขืืขืคืึธื ืืจื_ืืืคึผ ืืขืืขืคืึธื ืืืคึผ ืืขืืขืคืึธื ืืจื_ืืึทืืขื ืคืืจืืข ืคึฟืึทืจืืื ืื ืืื ืื ืงืึธื ืืึทืงื ื ืืืขืจ unseen_msg_count ื ืืืขืจ ืคืื ืึทืจืืืงืืขื ืืืึธืก ืืขื ืขื ืืขืฉืืงื ืืืจื ืึท ืงืึธื ืืึทืงื ืึธืืขืจ ืืขื ืขื ื ืืฉื ืืืืขื ืขื ืืืจื ืื ืืึทืงืืืขืจ ืคืึธืืึธ_ืฅ ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time ืคึฟืึธืจืืึทื thumb_ts ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time ืคึฟืึธืจืืึทื photo_id_timestamp ืึผืืื ืึท ืืืืขืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื ืืขืืขืืขื ืข ื ืืืขื ืคืขืื ืืืขืจื ืืืืึทืื 'display_name' ืคึฟืึทืจ ืืขืืขืจ ืงืึธื ืืึทืงื ืืืึท_ื ืึธืืขื ืืืืึทืฆืึทืคึผืคึผ ืงืึธื ืืึทืงื ื ืึธืืขื (ืืขืจ ื ืึธืืขื ืกืคึผืขืกืืคืืขื ืืื ืื ืงืึธื ืืึทืงื ืคึผืจืึธืคืื ืืื ืืขืืืืื) ืกืึธืจื_ื ืึธืืขื ืงืึธื ืืึทืงื ื ืึธืืขื ืืขื ืืฆื ืืื ืกืึธืจื ืึทืคึผืขืจืืืฉืึทื ื ืฆืื ืขืืขื ืืฉ ืงืึธื ืืึทืงื ืก ื ืืงืงื ืึทืืข ืืื ืืืืึทืฆืึทืคึผืคึผ (ืื ื ืืงืงื ืึทืืข ืกืคึผืขืกืืคืืขื ืืื ืืขื ืงืึธื ืืึทืงื ืก ืคึผืจืึธืคืื ืืื ืืขืืืืื) ืืขืืขืืฉืึทืคื ืคืืจืืข (ืื ืคืืจืืข ืกืคึผืขืกืืคืืขื ืืื ืื ืงืึธื ืืึทืงื ืคึผืจืึธืคืื ืืื ืืขืืืืื) ืืืื ืืืื (ืืื / ืืจ; ืืืื ืงืึทื ืคืืืืขืจื ืืื ืื ืงืึธื ืืึทืงื ืคึผืจืึธืคืื ืืื ืืขืืืืื) ืคืึธืืึธ ืคืึธืจืืจืืืื - 'ืกืงืืื_ืกืขืงืืืึทื ืก'
ืืขืจ ืืืฉ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ื ืืืขืจ ืคืื ืงืึธื ืืึทืงืื; - 'android_metadata'
ืืขืจ ืืืฉ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืึธืืงืึทืืึทืืืืฉืึทื ืคืื WhatsApp ืฉืคึผืจืึทื.
ืืื ืื ืืึทืืึทืืืืก 'msgstore.db' ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืขืฉืืงื ืึทืจืืืงืืขื, ืึทืืึท ืืื ืงืึธื ืืึทืงื ื ืืืขืจ, ืึธื ืืึธื ืืขืงืกื, ืึธื ืืึธื ืกืืึทืืืก, ืืืืขืกืืึทืืคึผืก, ืืขืืึทืืืก ืคืื ืืจืึทื ืกืคืขืจื ืืขืงืขืก ืึทืจืืึทื ืืขืจืขืื ื ืืื ืึทืจืืืงืืขื, ืขืืง. ืืขืงืข 'msgstore.db' ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/databases/' ืืื ืืื ืื ืคืืืืขื ืืข ืกืืจืืงืืืจ:
ืื ืืขืจืกื ืืฉืืงืึทืืืข ืืืฉื ืืื ืืขืจ ืืขืงืข 'msgstore.db' ืคึฟืึทืจ ืื ืคืึธืจืฉืขืจ ืืขื ืขื:
- 'ืกืงืืื_ืกืขืงืืืึทื ืก'
ืืขืจ ืืืฉ ืึผืืื ืืขื ืขืจืึทื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืขื ืืึทืืึทืืืืก, ืึทืืึท ืืื ืื ืืึทื ืฅ ื ืืืขืจ ืคืื ืึทืจืืืงืืขื ืกืืึธืจื, ืื ืืึทื ืฅ ื ืืืขืจ ืคืื ืืฉืึทืฅ, ืืื"ื ื.ืืืฉ ืืืืกืืขื:
- 'message_fts_content'
ืึผืืื ืื ืืขืงืกื ืคืื ืืขืฉืืงื ืึทืจืืืงืืขื.ืืืฉ ืืืืกืืขื:
- 'ืืืืขืืช'
ืืขืจ ืืืฉ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืึทืืึท ืืื ืงืึธื ืืึทืงื ื ืืืขืจ, ืึธื ืืึธื ืืขืงืกื, ืึธื ืืึธื ืกืืึทืืืก, ืืืืขืกืืึทืืคึผืก, ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืจืึทื ืกืคืขืจื ืืขืงืขืก ืึทืจืืึทื ืืขืจืขืื ื ืืื ืึทืจืืืงืืขื.ืืืฉ ืืืืกืืขื:
ืืืฉ ืกืืจืืงืืืจืคืขืื ื ืึธืืขื ืืืขืจื _ืื ืจืขืงืึธืจื ืกืืงืืืึทื ืก ื ืืืขืจ (ืืื SQL ืืืฉ) key_remote_jid ืืืืึทืฆืึทืคึผืคึผ ืฉืืึทื ืคืื ืงืึธืืื ืืงืึทืฆืืข ืฉืืืขืฃ key_from_me ืึธื ืืึธื ืจืืืืื ื: '0' - ืื ืงืึทืืื ื, '1' - ืึทืืืืึธืืื ื key_id ืืื ืฆืืง ืึธื ืืึธื ืืืขื ืืืคืืขืจ ืืึทืฆืขืื ืึธื ืืึธื ืกืืึทืืืก: '0' - ืืืืขืจืืขืืขืื, '4' - ืืืืจืื ืืืืฃ ืื ืกืขืจืืืขืจ, '5' - ืืืงืืืขื ืืื ืืขืกืืื ืืืฉืึทื, '6' - ืงืึธื ืืจืึธื ืึธื ืืึธื, '13' - ืึธื ืืึธื ืืขืขืคื ื ืืืจื ืื ืืึทืงืืืขืจ (ืืืืขื ืขื) need_push ืืื ืื ืืืขืจื '2' ืืืื ืขืก ืืื ืึท ืืจืึธืืงืึทืกื ืึธื ืืึธื, ืึทื ืืขืจืฉ ืึผืืื '0' ืืึทืืข ืึธื ืืึธื ืืขืงืกื (ืืืขื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '0') ืืืืขืกืืึทืืคึผ ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ media_url ืึผืืื ืื URL ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข (ืืืขื ืื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '2', '3') media_mime_type MIME ืืืคึผ ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข (ืืืขื ืื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื ืืืืึทื ืฆื '1', '2', '3') media_wa_type ืึธื ืืึธื ืืืคึผ: '0' - ืืขืงืกื, '1' - ืืจืึทืคืืง ืืขืงืข, '2' - ืึทืืืืึธ ืืขืงืข, '3' - ืืืืืขื ืืขืงืข, '4' - ืงืึธื ืืึทืงื ืงืึธืจื, '5' - ืืขืึธืืึทืืึท ืืขืืืข_ืืจืืืก ืืจืืืก ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข (ืืืขื ืื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '2', '3') ืืขืืืข_ื ืึทืืข ื ืึธืืขื ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข (ืืืขื ืื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '2', '3') media_caption ืึผืืื ืื ืืืขืจืืขืจ 'ืึทืืืืึธ', 'ืืืืืขื' ืคึฟืึทืจ ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืืืึทืืืขืก ืคืื ืื ืคึผืึทืจืึทืืขืืขืจ 'media_wa_type' (ืืืขื ืืขืจ 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '3') media_hash base64 ืขื ืงืึธืืืื ืืึทืฉ ืคืื ืื ืืจืึทื ืกืืืืืขื ืืขืงืข, ืงืึทืืงืืึทืืืืืื ืืื ืื HAS-256 ืึทืืืขืจืืืึทื (ืืืขื ืื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื ืืืืึทื ืฆื '1', '2', '3') media_duration ืืขืืืืขืจ ืืื ืกืขืงืื ืืขืก ืคึฟืึทืจ ืื ืืืืืึท ืืขืงืข (ืืืขื 'media_wa_type' ืืื '1', '2', '3') ืึธื ืืืื ืืื ืื ืืืขืจื '2' ืืืื ืขืก ืืื ืึท ืืจืึธืืงืึทืกื ืึธื ืืึธื, ืึทื ืืขืจืฉ ืึผืืื '0' ืืจืืื ืืขืึธืืึทืืึท: ืืจืืื (ืืืขื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '5') ืืึทื ืืืฉืึทืืื ืืขืึธืืึทืืึท: ืืึทื ืืืฉืึทืืื (ืืืขื 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '5') thumb_image ืืื ืกื ืืื ืคึฟืึธืจืืึทืฆืืข remote_resource ืกืขื ืืขืจ ืฉืืึทื (ืืืืื ืคึฟืึทืจ ืืจืืคึผืข ืืฉืึทืฅ) receive_timestamp ืฆืืื ืคืื ืงืึทืืึธืืข, ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ (ืืืขื ืื 'key_from_me' ืคึผืึทืจืึทืืขืืขืจ ืืื '0', '-1' ืึธืืขืจ ืื ืืขืจืข ืืืขืจื) send_timestamp ื ืื ืืขืืืืื ื, ืืืืฉืึทืืืึทืื ืืื ืื ืืืขืจื '-1' receipt_server_timestamp ืฆืืื ืืืงืืืขื ืืืจื ืื ืืืืคื ืกืขืจืืืขืจ, ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ (ืืืขื ืื 'key_from_me' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '-1' ืึธืืขืจ ืื ืืขืจืข ืืืขืจื receipt_device_timestamp ืืืขื ืืขืจ ืึธื ืืึธื ืืื ืืืงืืืขื ืืืจื ืื ืื ืืขืจ ืึทืืึธื ืขื ื, ืึผืืื ืึท ืฆืืื ืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ (ืืืขื ืื 'key_from_me' ืคึผืึทืจืึทืืขืืขืจ ืืื '1', '-1' ืึธืืขืจ ืื ืื ืืขืจ ืืืขืจื read_device_timestamp ืฆืืื ืคืื ืขืคื (ืืืืขื ืขื) ืืขื ืึธื ืืึธื, ืึผืืื ืึท ืฆืืื ืฉืืขืืคึผื ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ ืคึผืืืึทืขื_ืืืืืืืก_ืืืืขืกืืึทืืคึผ ืึธื ืืึธื ืคึผืืืืืึทืง ืฆืืื, ืึผืืื ืึท ืืืืขืกืืึทืืคึผ ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื, ืื ืืืขืจื ืืื ืืขื ืืืขื ืคืื ืื ืืืื ืืืืืขืจ ืจืืืข ืืืื ืืึทืื ืืื ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข (ืืืขื ืืขืจ 'media_wa_type' ืคึผืึทืจืึทืืขืืขืจ ืืื '1' ืึธืืขืจ '3') recipient_count ื ืืืขืจ ืคืื ืจืืกืืคึผืืึทื ืฅ (ืคึฟืึทืจ ืืจืึธืืงืึทืกื ืึทืจืืืงืืขื) participant_hash ืืขืืืืื ื ืืืขื ืืจืึทื ืกืืืืื ื ืึทืจืืืงืืขื ืืื ืืขืึธืืึทืืึท ืฉืืืืฅ ื ืืฉื ืืขื ืืฆื quoted_row_id ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '0' ืืขืจืืื ื_ืืืฉืืืก ื ืืฉื ืืขื ืืฆื multicast_id ื ืืฉื ืืขื ืืฆื ืคืึธืืึธ ืคืึธืจืืจืืืื ืื ืจืฉืืื ืคืื ืคืขืืืขืจ ืืื ื ืืฉื ืืึทื ืฅ. ืคึฟืึทืจ ืคืึทืจืฉืืืขื ืข ืืืขืจืกืืขืก ืคืื ืืืืึทืฆืึทืคึผืคึผ, ืขืืืขืืข ืคืขืืืขืจ ืงืขื ืืืื ืคืึธืจืฉืืขืื ืึธืืขืจ ื ืืืึธ. ืืื ืืขืจืฆื, ืคืขืืืขืจ ืงืขื ืืืื ืคืึธืจืฉืืขืื 'media_enc_hash', 'ืจืขืืึทืืืจื_ืืืขืจืกืืข', 'ืคึผืืึทืืขื ื_ืืจืึทื ืกืึทืงืืืึธื_ืื' ืืื"ื ื
- 'ืืืืขืืช_ืืืืืื ืึทืืืก'
ืืขืจ ืืืฉ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืจืึทื ืกืคืขืจื ืืืืืขืจ ืืื ืืืืขืกืืึทืืคึผืก. ืืื ืื 'ืืืืขืกืืึทืืคึผ' ืืืึทื, ืื ืฆืืื ืืื ืื ืืขืืืืื ืืื Unix Epoch Time (ms) ืคึฟืึธืจืืึทื. - 'ืืฉืึทื_ืืืกื'
ืืขืจ ืืืฉ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืฉืึทืฅ.ืืืฉ ืืืืกืืขื:
ืืืื, ืืืขื ืืืืึทืืื ืื ื ืืืืึทืฆืึทืคึผืคึผ ืืืืฃ ืึท ืจืืจืขืืืืืง ืืืื ืืื ืึทื ืืจืืื, ืืืจ ืืึธื ืืึทืฆืึธืื ืืคืืขืจืงืืึทืืงืืื ืฆื ืื ืคืืืืขื ืืข ืืขืงืขืก:
- ืืขืงืข 'msgstore.db.cryptXX' (ืืื ืงืกืงืก ืืื ืืืื ืึธืืขืจ ืฆืืืื ืืืืืฉืึทืฅ ืคืื 0 ืฆื 12, ืคึฟืึทืจ ืืืึทืฉืคึผืื, msgstore.db.crypt12). ืึผืืื ืึท ืื ืงืจืืคึผืืื ืืึทืงืึทืคึผ ืคืื ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืืงืืขื (ืืึทืงืงืืคึผ ืืขืงืข msgstore.db). ืืขืงืข(ืก) 'msgstore.db.cryptXX' ืืืื ืืืืฃ ืืขื ืืจื: '/data/media/0/WhatsApp/Databases/' (ืืืืจืืืขื ืกื ืงืึธืจื), '/mnt/sdcard/WhatsApp/Databases/ (ืืฉืืืืช ืกื ืงืึธืจื)'.
- ืืขืงืข 'ืฉืืืกื'. ืึผืืื ืึท ืงืจืืคึผืืึธืืจืึทืคืืง ืฉืืืกื. ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/files/'. ืืขืืืืื ื ืฆื ืืขืงืจืืคึผื ืื ืงืจืืคึผืืื ืืืืึทืฆืึทืคึผืคึผ ืืึทืงืึทืคึผืก.
- ืืขืงืข 'com.whatsapp_preferences.xml'. ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื ืคึผืจืึธืคืื. ืืขืจ ืืขืงืข ืืื ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/shared_prefs/'.
ืืขืงืข ืืื ืืึทืื ืคืจืึทืืืขื ื
<?xml version="1.0" encoding="ISO-8859-1"?> โฆ <string name="ph">9123456789</string> (ะฝะพะผะตั ัะตะปะตัะพะฝะฐ, ะฐััะพัะธะธัะพะฒะฐะฝะฝัะน ั ะฐะบะบะฐัะฝัะพะผ WhatsApp) โฆ <string name="version">2.17.395</string> (ะฒะตััะธั WhatsApp) โฆ <string name="my_current_status">Hey there! I am using WhatsApp.</string> (ัะพะพะฑัะตะฝะธะต, ะพัะพะฑัะฐะถะฐะตะผะพะต ะฒ ััะฐัััะต ะฐะบะบะฐัะฝัะฐ) โฆ <string name="push_name">Alex</string> (ะธะผั ะฒะปะฐะดะตะปััะฐ ะฐะบะบะฐัะฝัะฐ) โฆ - ืืขืงืข 'ืจืขืืืกืืจืึทืฆืืข.ืจืขืืืกืืจืคืึธื ืข.ืงืกืื'. ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืืขืืขืคืึธื ื ืืืขืจ ืคึฟืึทืจืืื ืื ืืื ืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื. ืืขืจ ืืขืงืข ืืื ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/shared_prefs/'.
ืืขืงืข ืืื ืืึทืื
<?xml version="1.0" encoding="ISO-8859-1"?> <map> <string name="com.whatsapp.registration.RegisterPhone.phone_number">9123456789</string> <int name="com.whatsapp.registration.RegisterPhone.verification_state" value="0"/> <int name="com.whatsapp.registration.RegisterPhone.country_code_position" value="-1"/> <string name="com.whatsapp.registration.RegisterPhone.input_phone_number">912 345-67-89</string> <int name="com.whatsapp.registration.RegisterPhone.phone_number_position" value="10"/> <string name="com.whatsapp.registration.RegisterPhone.input_country_code">7</string> <string name="com.whatsapp.registration.RegisterPhone.country_code">7</string> </map> - ืืขืงืข 'axolotl.db'. ืึผืืื ืงืจืืคึผืืึธืืจืึทืคืืง ืฉืืืกืืขื ืืื ืื ืืขืจืข ืืึทืื ืืืึธืก ืืขื ืขื ื ืืืืืง ืฆื ืืืขื ืืืคืืฆืืจื ืื ืืฉืืื ืืึทืืืฆืขืจ. ืืืื ืืืืฃ ืืขื ืืจื: '/data/data/com.whatsapp/databases/'.
- ืืขืงืข 'chatsettings.db'. ืึผืืื ืึทืคึผืืึทืงืืืฉืึทื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืคึฟืึธืจืืึทืฆืืข.
- ืืขืงืข 'wa.db'. ืึผืืื ืงืึธื ืืึทืงื ืืขืืึทืืืก. ื ืืืืขืจ ืืฉืืงืึทืืืข (ืคึฟืื ืึท ืคืึธืจืขื ืกืืง ืึทืกืคึผืขืงื) ืืื ืื ืคืึธืจืืึทืืืื ืืึทืืึทืืืืก. ืขืก ืงืขื ืขื ืึทื ืืืึทืืื ืืืืืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืืืกืืขืืขืงื ืงืึธื ืืึทืงืื.
ืืืจ ืืืื ืืึทืจืคึฟื ืฆื ืืึทืฆืึธืื ืืคืืขืจืงืืึทืืงืืื ืฆื ืื ืคืืืืขื ืืข ืืืจืขืงืืขืจืื:
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp ืืืืืขืจ/'. ืึผืืื ืืจืึทื ืกืคืขืจื ืืจืึทืคืืง ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Voice Notes/'. ืึผืืื ืงืื ืึทืจืืืงืืขื ืืื .ืึธืคึผืืก ืคึฟืึธืจืืึทื ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/data/com.whatsapp/cache/Profile Pictures/'. ืึผืืื ืืจืึทืคืืง ืืขืงืขืก - ืืืืืขืจ ืคืื ืงืึธื ืืึทืงืื.
- ืืืจืขืงืืืจื '/data/data/com.whatsapp/files/Avatars/'. ืึผืืื ืืจืึทืคืืง ืืขืงืขืก - ืืึทืื ืืื ืืืืืขืจ ืคืื ืงืึธื ืืึทืงืื. ืื ืืขืงืขืก ืืึธืื ืึท '.j' ืคืึทืจืืขื ืืขืจืื ื ืึธืืขืจ ืืขื ืขื ืคืื ืืขืกืืืืขืื JPEG (JPG) ืืืื ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/data/com.whatsapp/files/Avatars/'. ืึผืืื ืืจืึทืคืืง ืืขืงืขืก - ืึท ืืืื ืืื ืึท ืืึทืื ืืื ืคืื ืื ืืืื ืืขืฉืืขืื ืืื ืึท ืึทืืืึทืืึทืจ ืืืจื ืื ืืฉืืื ืืึทืืืฆืขืจ.
- ืืืจืขืงืืืจื '/data/data/com.whatsapp/files/Logs/'. ืึผืืื ืื ืคึผืจืึธืืจืึทื ืึธืคึผืขืจืึทืฆืืข ืงืืึธืฅ (ืืขืงืข 'whatsapp.log') ืืื ืืึทืงืึทืคึผ ืงืืคืืขืก ืคืื ืคึผืจืึธืืจืึทื ืึธืคึผืขืจืึทืฆืืข ืืึธืืก (ืคืืืขืก ืืื ื ืขืืขื ืืื ืื ืคึฟืึธืจืืึทื ืืืืึทืฆืึทืคึผืคึผ-ืืืื-ืื-ืื.1.ืืึธื.ืื).
ืืืืึทืฆืึทืคึผืคึผ ืืึธื ืืขืงืขืก:
ืืฉืืจื ืึทื ืคืจืึทืืืขื ื2017-01-10 09:37:09.757 LL_I D [524: ืืืืึทืฆืึทืคึผืคึผ ืืืึธืจืงืขืจ #1] ืืืกื ืจืืคื ื ืึธืืืคืืงืึทืืืึธื/ืืื ื ืฆืืืื:0 ืฆืืื ืฉืืขืืคึผื:0
2017-01-10 09:37:09.758 LL_I D [524: ืืืืึทืฆืึทืคึผืคึผ ืืืึธืจืงืขืจ #1] ืืืกื ืจืืคื ื ืึธืืืคืืงืึทืืืึธื / ืืขืจืืืึทื ืืืงื ืืึธืื ืืึทืื ืืืช
2017-01-10 09:37:09.768 LL_I D [1:main] app-init/load-me
2017-01-10 09:37:09.772 LL_I D [1:main] ืคึผืึทืจืึธื ืืขืงืข ืคืขืื ืืืง ืึธืืขืจ ืึทื ืจืืืึทืืึทื
2017-01-10 09:37:09.782 LL_I D [1:main] ืกืืึทืืืกืืืง ืืขืงืกื ืึทืจืืืงืืขื: 59 ืืขืฉืืงื, 82 ืืืงืืืขื / ืืขืืืข ืึทืจืืืงืืขื: 1 ืืขืฉืืงื (0 ืืืืขืก), 0 ืืืงืืืขื (9850158 ืืืืขืก) / ืึธืคืคืืื ืข ืึทืจืืืงืืขื: 81 ืืืงืืืขื ( 19522 ืืกืขืง ืืืจืืฉื ืืืืขื ืคืึทืจืืึทืืื) / ืึธื ืืึธื ืกืขืจืืืืก: 116075 ืืืืขืก ืืขืฉืืงื, 211729 ืืืืขืก ืืืงืืืขื / ืืืึธืืคึผ ืงืึทืืืก: 1 ืึทืืืืึธืืื ื ืงืึทืืืก, 0 ืื ืงืึทืืื ื ืงืึทืืืก, 2492 ืืืืขืก ืืขืฉืืงื, 1530 ืืืืขืก ืืืงืืืขื / Google ืืจืืืื: 0 ืืืืขืก ืืขืฉืืงื, 0 ืืืืขืก 1524 ืืืงืืืขื / 1826: ืืืืขืก ืืขืฉืืงื, 118567 ืืืืขืก ืืืงืืืขื / ืืึทื ืฅ ืืึทืื: 10063417 ืืืืขืก ืืขืฉืืงื, XNUMX ืืืืขืก ืืืงืืืขื
2017-01-10 09:37:09.785 LL_I D [1:main] ืืขืืืข-ืฉืืึทื-ืคืึทืจืืืึทืืืขืจ / ืจืขืคืจืขืฉ-ืืขืืืข-ืฉืืึทื / ืฉืจืืืืืึทืืืข-ืืขืืืข
2017-01-10 09:37:09.806 LL_I D [1:main] app-init/initialize/timer/stop: 24
2017-01-10 09:37:09.811 LL_I D [1:main] msgstore/checkhealth
2017-01-10 09:37:09.817 LL_I D [1:main] msgstore/checkhealth/journal/delete false
2017-01-10 09:37:09.818 LL_I D [1:main] msgstore/checkhealth/back/delete false
2017-01-10 09:37:09.818 LL_I D [1:main] msgstore/checkdb/data/data/com.whatsapp/databases/msgstore.db
2017-01-10 09:37:09.819 LL_I D [1:main] msgstore/checkdb/list _jobqueue-WhatsAppJobManager 16384 drw=011
2017-01-10 09:37:09.820 LL_I D [1:main] msgstore/checkdb/list _jobqueue-WhatsAppJobManager-journal 21032 drw=011
2017-01-10 09:37:09.820 LL_I D [1:main] msgstore/checkdb/list axolotl.db 184320 drw=011
2017-01-10 09:37:09.821 LL_I D [1:main] msgstore/checkdb/list axolotl.db-wal 436752 drw=011
2017-01-10 09:37:09.821 LL_I D [1:main] msgstore/checkdb/list axolotl.db-shm 32768 drw=011
2017-01-10 09:37:09.822 LL_I D [1:main] msgstore/checkdb/list msgstore.db 540672 drw=011
2017-01-10 09:37:09.823 LL_I D [1:main] msgstore/checkdb/list msgstore.db-wal 0 drw=011
2017-01-10 09:37:09.823 LL_I D [1:main] msgstore/checkdb/list msgstore.db-shm 32768 drw=011
2017-01-10 09:37:09.824 LL_I D [1:main] msgstore/checkdb/list wa.db 69632 drw=011
2017-01-10 09:37:09.825 LL_I D [1:main] msgstore/checkdb/list wa.db-wal 428512 drw=011
2017-01-10 09:37:09.825 LL_I D [1:main] msgstore/checkdb/list wa.db-shm 32768 drw=011
2017-01-10 09:37:09.826 LL_I D [1:main] msgstore/checkdb/list chatsettings.db 4096 drw=011
2017-01-10 09:37:09.826 LL_I D [1:main] msgstore/checkdb/list chatsettings.db-wal 70072 drw=011
2017-01-10 09:37:09.827 LL_I D [1:main] msgstore/checkdb/list chatsettings.db-shm 32768 drw=011
2017-01-10 09:37:09.838 LL_I D [1:main] msgstore/checkdb/version 1
2017-01-10 09:37:09.839 LL_I D [1:main] msgstore/canquery
2017-01-10 09:37:09.846 LL_I D [1:main] msgstore/canquery/count 1
2017-01-10 09:37:09.847 LL_I D [1:main] msgstore/canquery/timer/stop: 8
2017-01-10 09:37:09.847 LL_I D [1:main] msgstore/canquery 517 | ืฆืืื ืคืืจืืจืืื: 8
2017-01-10 09:37:09.848 LL_I D [529: ืืืืึทืฆืึทืคึผืคึผ ืืืึธืจืงืขืจ #3] ืืขืืืข-ืฉืืึทื-ืคืึทืจืืืึทืืืขืจ / ืจืขืคืจืขืฉ-ืืขืืืข-ืฉืืึทื / ืืื ืขืจืืขืืขืจ ืกืืึธืจืืืืฉ ืื ืืืฆื: 1,345,622,016 ืืึทื ืฅ: 5,687,922,688
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Audio/'. ืึผืืื ืื ืืืงืืืขื ืึทืืืืึธ ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Audio/Sent/'. ืึผืืื ืืขืฉืืงื ืึทืืืืึธ ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp ืืืืืขืจ/'. ืึผืืื ืื ืจืืืึทืืืื ื ืืจืึทืคืืง ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Images/Sent/'. ืึผืืื ืืขืฉืืงื ืืจืึทืคืืง ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Video/'. ืึผืืื ืืืงืืืขื ืืืืืขื ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp Video/Sent/'. ืึผืืื ืืขืฉืืงื ืืืืืขื ืืขืงืขืก.
- ืืืจืขืงืืืจื '/data/media/0/WhatsApp/Media/WhatsApp ืคึผืจืึธืคืื ืคืึธืืึธืก/'. ืึผืืื ืืจืึทืคืืง ืืขืงืขืก ืคึฟืึทืจืืื ืื ืืื ืื ืืึทืืืฆืขืจ ืคืื ืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื.
- ืฆื ืฉืคึผืึธืจื ืืืงืึธืจื ืคึผืืึทืฅ ืืืืฃ ืืืื ืึทื ืืจืืื ืกืืึทืจืืคืึธื ืข, ืขืืืขืืข ืืืืึทืฆืึทืคึผืคึผ ืืึทืื ืงืขื ืขื ืืืื ืกืืึธืจื ืืืืฃ ืึท ืกื ืงืึธืจื. ืืืืฃ ืื ืกื ืงืึธืจื, ืืื ืืขืจ ืืืึธืจืฆื ืืืขืืืืืึทืืขืจ, ืขืก ืืื ืึท ืืืขืืืืืึทืืขืจ 'ืืืืึทืฆืึทืคึผืคึผ', ืืื ืื ืคืืืืขื ืืข ืึทืจืืึทืคืึทืงืฅ ืคืื ืืขื ืคึผืจืึธืืจืึทื ืงืขื ืขื ืืืื ืืขืคึฟืื ืขื:
- ืืืจืขืงืืืจื '.ืืึทื ืืืืื' ('/mnt/sdcard/WhatsApp/.Share/'). ืึผืืื ืงืืคืืขืก ืคืื ืืขืงืขืก ืืืึธืก ืืขื ืขื ืฉืขืจื ืืื ืื ืืขืจืข ืืืืึทืฆืึทืคึผืคึผ ืืืืขืจื.
- ืืืจืขืงืืืจื '.ืืจืืฉ' ('/mnt/sdcard/WhatsApp/.trash/'). ืึผืืื ืืืืกืืขืืขืงื ืืขืงืขืก.
- ืืืจืขืงืืืจื 'ืืึทืืึทืืืืกืื' ('/mnt/sdcard/WhatsApp/Databases/'). ืึผืืื ืื ืงืจืืคึผืืื ืืึทืงืึทืคึผืก. ืืื ืงืขื ืขื ืืืื ืืขืงืจืืคึผืืื ืืืื ืื ืืขืงืข ืืื ืคืึธืจืฉืืขืื 'ืฉืืืกื', ืืงืกืืจืึทืงืืื ืคืื ืืขืจ ืืึผืจืื ืคืื ืื ืึทื ืึทืืืืื ืืืื.
ืืขืงืขืก ืืืื ืืื ืึท ืกืืืืืจืขืงืืึธืจื 'ืืึทืืึทืืืืกืื':
- ืืืจืขืงืืืจื 'ืืืื' ('/mnt/sdcard/WhatsApp/Media/'). ืึผืืื ืกืืืืืจืขืงืืึธืจืืขืก 'ืืืึธืืคึผืึทืคึผืขืจ', 'ืืืืึทืฆืึทืคึผืคึผ ืึทืืืืึธ', 'ืืืืึทืฆืึทืคึผืคึผ ืืืืืขืจ', 'ืืืืึทืฆืึทืคึผืคึผ ืคึผืจืึธืคืื ืคืึธืืึธืก', 'ืืืืึทืฆืึทืคึผืคึผ ืืืืืขื', 'ืืืืึทืฆืึทืคึผืคึผ ืงืื ื ืึธืืขืก', ืืืึธืก ืึทื ืืืึทืืื ืืืงืืืขื ืืื ืืจืึทื ืกืืืืืขื ืืืืืืืขืืืึท ืืขืงืขืก (ืืจืึทืคืืง ืืขืงืขืก, ืืืืืขื ืืขืงืขืก, ืงืื ืึทืจืืืงืืขื, ืคืึธืืึธืก ืคึฟืึทืจืืื ืื ืืื ืื ืคึผืจืึธืคืื ืคืื ืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื ืืึทืืืฆืขืจ, ืืืึธืืคึผืืืคึผืขืจื).
- ืืืจืขืงืืืจื 'ืคึผืจืึธืคืื ืืืืืขืจ' ('/mnt/sdcard/WhatsApp/Profile Pictures/'). ืึผืืื ืืจืึทืคืืง ืืขืงืขืก ืคึฟืึทืจืืื ืื ืืื ืื ืคึผืจืึธืคืื ืคืื ืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื ืืึทืืืฆืขืจ.
- ืืื ืขืก ืงืขื ืืืื ืึท ืืืขืืืืืึทืืขืจ ืืืืฃ ืื ืกื ืงืึธืจื 'ืคืืืืก' ('/mnt/sdcard/WhatsApp/Files/'). ืืขืจ ืืืขืืืืืึทืืขืจ ืึผืืื ืืขืงืขืก ืืืึธืก ืงืจืึธื ืคึผืจืึธืืจืึทื ืกืขืืืื ืืก ืืื ืืึทื ืืฆืขืจ ืคึผืจืขืคึฟืขืจืขื ืฆื.
ืคึฟืขืึดืงืืืื ืคืื ืืึทืื ืกืืึธืจืืืืฉ ืืื ืขืืืขืืข ืืึธืืขืืก ืคืื ืจืืจืขืืืืืง ืืขืืืืกืขืก
ืขืืืขืืข ืืึธืืขืืก ืคืื ืจืืจืขืืืืืง ืืขืืืืกืขืก ืืื ืึทื ืืจืืื ืึทืก ืงืขื ืงืจืึธื ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืื ืึท ืึทื ืืขืจืฉ ืึธืจื. ืืึธืก ืืื ืจืขืื ืฆื ืขื ืืขืจืื ืืขื ืืื ืื ืกืืึธืจืืืืฉ ืคึผืืึทืฅ ืคืื ืึทืคึผืืึทืงืืืฉืึทื ืืึทืื ืืืจื ืื ืกืืกืืขื ืืืืืืืืืจื ืคืื ืื ืจืืจืขืืืืืง ืืืื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, Xiaomi ืจืืจืขืืืืืง ืืขืืืืกืขืก ืืึธืื ืึท ืคืื ืงืฆืืข ืคึฟืึทืจ ืงืจืืืืืื ื ืึท ืฆืืืืื ืืืึธืจืงืกืคึผืึทืกืข ("SecondSpace"). ืืืขื ืืขื ืคึฟืื ืงืฆืืข ืืื ืึทืงืืืืืืืืื, ืื ืึธืจื ืคืื ืื ืืึทืื ืขื ืืขืจืื ืืขื. ืึทืืื, ืืืื ืืื ืึท ืจืขืืืืขืจ ืจืืจืขืืืืืง ืืืื ืคืืืกื ืืืง ืึทื ืืจืืื ืึทืก ืืึทื ืืฆืขืจ ืืึทืื ืืขื ืขื ืกืืึธืจื ืืื ืื ืืืขืืืืืึทืืขืจ '/ืืึทืื/ืืึทื ืืฆืขืจ/0/' (ืืืึธืก ืืื ืึท ืจืขืคึฟืขืจืขื ืฅ ืฆื ืื ืืขืืืืื ืืืขื '/ืืึทืื/ืืึทืื/'), ืืื ืืื ืื ืจืืข ืืืึธืจืงืกืคึผืึทืกืข ืึทืคึผืืึทืงืืืฉืึทื ืืึทืื ืืขื ืขื ืกืืึธืจื ืืื ืื ืืืขืืืืืึทืืขืจ '/ืืึทืื/ืืึทื ืืฆืขืจ/10/'. ืึทื ืืื, ื ืืฆื ืืขื ืืืึทืฉืคึผืื ืคืื ืื ืืขืงืข ืึธืจื 'wa.db':
- ืืื ืึท ืจืขืืืืขืจ ืกืืึทืจืืคืึธื ืข ืืื ืึทื ืืจืืื ืึทืก: /data/user/0/com.whatsapp/databases/wa.db' (ืืืึธืก ืืื ืขืงืืืืืืึทืืขื ื '/data/data/com.whatsapp/databases/wa.db');
- ืืื ืื ืจืืข ืืืึธืจืงืกืคึผืึทืกืข ืคืื โโืื Xiaomi ืกืืึทืจืืคืึธื ืข: '/data/user/10/com.whatsapp/databases/wa.db'.
ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืื ืืึธืก ืืืื
ื ืื ืขื ืืขื ืึทื ืืจืืื ืึทืก, ืืื ืืึธืก ืืืืึทืฆืึทืคึผืคึผ ืึทืคึผืืึทืงืืืฉืึทื ืืึทืื ืืขื ืขื ืืจืึทื ืกืคืขืจื ืฆื ืึท ืืึทืงืึทืคึผ ืงืึธืคึผืืข (ืืืื ืขืก ืืึทืงืึทืคึผ). ืืขืจืืืขืจ, ืืงืกืืจืึทืงืืื ื ืืึทืื ืคืื ืืขื ืึทืคึผืืึทืงืืืฉืึทื ืืื ื ืืฉื ืืึทืจืคื ืืงืกืืจืึทืงืืื ื ืื ืืขืงืข ืกืืกืืขื ืึธืืขืจ ืฉืึทืคึฟื ืึท ืืฉืืืืช ืืืงืึธืจื ืืึทืืคึผ ืคืื ืื ืืืื ืืื ืืขืจ ืืืกืคืึธืจืฉืื ื. ืจืืึฟ ืคืื ืื ืืึทืืืึทืืืง ืืื ืคึฟืึธืจืืึทืฆืืข ืืื ืงืึทื ืืืื ื ืืื ืื ืืึทืืึทืืืืก 'ChatStorage.sqlite', ืืืึธืก ืืื ืืืื ืฆืืืืืขื ืืขื ืืจื: '/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/' (ืืื ืขืืืขืืข ืืืืื ืืขืจ ืืจื ืืื ืืื 'AppDomainGroup-group.net.whatsapp.WhatsApp.shared').
ืืื ืืขื 'ChatStorage.sqlite':
ืื ืืขืจืกื ืื ืคืึธืจืืึทืืืื ืืืฉื ืืื ืื 'ChatStorage.sqlite' ืืึทืืึทืืืืก ืืขื ืขื 'ZWAMESSAGE' ะธ 'ZWAMEDIAITEM'.
ืืืฉ ืืืืกืืขื 'ZWAMESSAGE':
ืกืืจืืงืืืจ ืคืื ืืืฉ 'ZWAMESSAGE'
| ืคืขืื ื ืึธืืขื | ืืืขืจื |
|---|---|
| Z_PK | ืจืขืงืึธืจื ืกืืงืืืึทื ืก ื ืืืขืจ (ืืื SQL ืืืฉ) |
| ื_ืขื ื | ืืืฉ ืืืืขื ืืืคืืฆืืจื, ืืื ืื ืืืขืจื '9' |
| Z_OPT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืืืึทืืืขืก ืคืื '1' ืฆื '6' |
| ZCHILDMESSAGESDELIVEREDCOUNT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '0' |
| ZCHILDMESSAGESPLAYEDCOUNT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '0' |
| ZCHILDMESSAGESREADCOUNT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '0' |
| ZDATAITEMVERSION | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '3', ืืืกืืึธืืข ืึท ืืขืงืกื ืึธื ืืึธื ืืจืืื |
| ZDOCID | ืืื ืืืืืึทืงืึทื ื |
| ZENCRETRYCOUNT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืขืจื '0' |
| ZFILTEREDRECIPIENTCOUNT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืื ืืืึทืืืขืก '0', '2', '256' |
| ZISFROMME | ืึธื ืืึธื ืจืืืืื ื: '0' - ืื ืงืึทืืื ื, '1' - ืึทืืืืึธืืื ื |
| ZMESSAGEERRORSTATUS | ืึธื ืืึธื ืืจืึทื ืกืืืกืืข ืกืืึทืืืก. ืืืื ืืขืจ ืึธื ืืึธื ืืื ืืขืฉืืงื / ืืืงืืืขื, ืขืก ืืื ืื ืืืขืจื '0' |
| ZMESSAGETYPE | ืืืคึผ ืคืื ืึธื ืืึธื ืืืึธืก ืืื ืืจืึทื ืกืืืืืขื |
| ZSORT | ืืื ืืืืืึทืงืึทื ื |
| ZSPOTLIGHSTATUS | ืืื ืืืืืึทืงืึทื ื |
| ZSTARRED | ืืืืืึทืงืึทื ื, ื ืื ืืขืืืืื ื |
| ZCHATSESSION | ืืื ืืืืืึทืงืึทื ื |
| ZGROUPMEMBER | ืืืืืึทืงืึทื ื, ื ืื ืืขืืืืื ื |
| ZLASTSESSION | ืืื ืืืืืึทืงืึทื ื |
| ZMEDIAITEM | ืืื ืืืืืึทืงืึทื ื |
| ZMESSAGEINFO | ืืื ืืืืืึทืงืึทื ื |
| ZPARENTMESSAGE | ืืืืืึทืงืึทื ื, ื ืื ืืขืืืืื ื |
| ZMESSAGEDATE | ืฆืืื ืกืืึทืืคึผ ืืื OS X Epoch Time ืคึฟืึธืจืืึทื |
| ZSENTDATE | ืฆืืื ืืืขื ืืขืจ ืึธื ืืึธื ืืื ืืขืฉืืงื ืืื OS X Epoch Time ืคึฟืึธืจืืึทื |
| ZFROMJID | ืืืืึทืฆืึทืคึผืคึผ ืกืขื ืืขืจ ืฉืืึทื |
| ZMEDIASECTIONID | ืึผืืื ืื ืืึธืจ ืืื ืืืืฉ ืื ืืืืืึท ืืขืงืข ืืื ืืขืฉืืงื |
| ืืคืืึทืฉ | ืืืืืึทืงืึทื ื, ื ืื ืืขืืืืื ื |
| ZPUSHPAME | ื ืึธืืขื ืคืื ืืขื ืงืึธื ืืึทืงื ืืืึธืก ืืขืฉืืงื ืื ืืืืืึท ืืขืงืข ืืื UTF-8 ืคึฟืึธืจืืึทื |
| ZSTANZID | ืืื ืฆืืง ืึธื ืืึธื ืืืขื ืืืคืืขืจ |
| ืืืขืงืกื | ืึธื ืืึธื ืืขืงืกื |
| ZTOJID | ืืึทืงืืืขืจ ืก ืืืืึทืฆืึทืคึผืคึผ ืฉืืึทื |
| ืคืึธืืึธ | ืคืึธืจืืจืืืื |
ืืืฉ ืืืืกืืขื 'ZWAMEDIAITEM':
ืกืืจืืงืืืจ ืคืื ืืืฉ 'ZWAMEDIAITEM'
| ืคืขืื ื ืึธืืขื | ืืืขืจื |
|---|---|
| Z_PK | ืจืขืงืึธืจื ืกืืงืืืึทื ืก ื ืืืขืจ (ืืื SQL ืืืฉ) |
| ื_ืขื ื | ืืืฉ ืืืืขื ืืืคืืฆืืจื, ืืื ืื ืืืขืจื '8' |
| Z_OPT | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืึผืืื ืืืึทืืืขืก ืคืื '1' ืฆื '3'. |
| ZCLOUDSTATUS | ืึผืืื ืื ืืืขืจื '4' ืืืื ืื ืืขืงืข ืืื ืืึธืืืื. |
| ZFILESIZE | ืึผืืื ืื ืืขืงืข ืืขื ื (ืืื ืืืืขืก) ืคึฟืึทืจ ืืึทืื ืืึธืืืื ืืขืงืขืก |
| ZMEDIAORIGIN | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืืื ืื ืืืขืจื '0' |
| ืืืึธืืืืขืืืจืึทืืืึธื | ืืขืืืืขืจ ืคืื ืื ืืืืืึท ืืขืงืข, ืคึฟืึทืจ ืคึผืืฃ ืืขืงืขืก ืงืขื ืึทื ืืืึทืืื ืื ื ืืืขืจ ืคืื ืืืขืืขืจ ืคืื ืืขื ืืึธืงืืืขื ื |
| ZMESSAGE | ืึผืืื ืึท ืกืืจืืึทื ื ืืืขืจ (ืื ื ืืืขืจ ืืื ืึทื ืืขืจืฉ ืคืื ืื ืืืึธืก ืืื ืืขืืืืื ืืื ืื 'Z_PK' ืืืึทื) |
| ZASPECTRATIO | ืึทืกืคึผืขืงื ืคืึทืจืืขืืืขื ืืฉ, ื ืื ืืขืืืืื ื, ืืืืฉืึทืืืึทืื ืฉืืขืื ืฆื '0' |
| ืืฉืึทืงืงืืจืึทืกื | ืืืืืึทืงืึทื ื, ืืืืฉืึทืืืึทืื ืืื ืื ืืืขืจื '0' |
| ZLATTITUDE | ืืจืืื ืืื ืืืืืฆืขืื |
| ZLONGTITUDE | ืืืื ืืื ืืืืืฆืขืื |
| ZMEDIAURLDATE | ืฆืืื ืกืืึทืืคึผ ืืื OS X Epoch Time ืคึฟืึธืจืืึทื |
| ZAUTHORNAME | ืืืืจ (ืคึฟืึทืจ ืืึธืงืืืขื ืื, ืงืขื ืึทื ืืืึทืืื ืืขื ืืขืงืข ื ืึธืืขื) |
| ZCOLLECTIONNAME | ื ืืฉื ืืขื ืืฆื |
| ZMEDIALOCALPATH | ืืขืงืข ื ืึธืืขื (ืึทืจืืึทื ืืขืจืขืื ื ืืจื) ืืื ืื ืืืื ืืขืงืข ืกืืกืืขื |
| ZMEDIAURL | ืื URL ืืื ืื ืืืืืึท ืืขืงืข ืืื ืืืื. ืืืื ืึท ืืขืงืข ืืื ืืจืึทื ืกืคืขืจื ืคืื ืืืื ืึทืืึธื ืขื ื ืฆื ืื ืืขืจื, ืขืก ืืื ืื ืงืจืืคึผืืื ืืื ืืืื ืคืึทืจืืขื ืืขืจืื ื ืืืขื ืืืื ืืขืืืืื ืืื ืื ืคืึทืจืืขื ืืขืจืื ื ืคืื ืื ืืจืึทื ืกืคืขืจื ืืขืงืข - .enc |
| ZTHUMBNAILLOCALPATH | ืืืขื ืฆื ืืขืจ ืืขืงืข ืืึทืื ืืื ืืื ืื ืืืื ืืขืงืข ืกืืกืืขื |
| ZTITLE | ืืขืงืข ืืขืืขืจ |
| ZVARDNAME | ืืึทืฉ ืคืื ืื ืืืืืึท ืืขืงืข; ืืืขื ืืจืึทื ืกืคืขืจืื ื ืื ืืขืงืข ืฆื ืึท ืืจืืคึผืข, ืขืก ืงืขื ืึทื ืืืึทืืื ืื ืกืขื ืืขืจ ืืืืขื ืึทืคืืื |
| ZVARDSTRING | ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืขื ืืืคึผ ืคืื ืืขืงืข ืืืึธืก ืืื ืืจืึทื ืกืคืขืจื (ืืืฉื ืืืื / ืืืฉืคึผืขื); ืืืขื ืืจืึทื ืกืคืขืจืื ื ืึท ืืขืงืข ืฆื ืึท ืืจืืคึผืข, ืขืก ืงืขื ืึทื ืืืึทืืื ืื ืืึทืงืืืขืจ ืก ืืืืขื ืืืืขื |
| ZXMPPTHUMBPATH | ืืืขื ืฆื ืืขืจ ืืขืงืข ืืึทืื ืืื ืืื ืื ืืืื ืืขืงืข ืกืืกืืขื |
| ZMEDIAKEY | ืืืืืึทืงืึทื ื, ืืืกืืึธืืข ืึผืืื ืื ืฉืืืกื ืฆื ืืขืงืจืืคึผื ืื ืื ืงืจืืคึผืืื ืืขืงืข. |
| ZMETADATA | ืืขืืึทืืึทืืึท ืคืื ืื ืืจืึทื ืกืืืืืขื ืึธื ืืึธื |
| ืคืึธืืึธ | ืคืึธืจืืจืืืื |
ืื ืืขืจืข ืืฉืืงืึทืืืข ืืึทืืึทืืืืก ืืืฉื 'ChatStorage.sqlite' ืืขื ืขื:
- 'ZWAPROFILEPUSHNAME'. ืฉืืืขืืขืืขื ืืืืึทืฆืึทืคึผืคึผ ืฉืืึทื ืืื ืงืึธื ืืึทืงื ื ืึธืืขื;
- 'ZWAPROFILEPICTUREITEM'. ืฉืืืขืืขืืขื ืืืืึทืฆืึทืคึผืคึผ ืฉืืึทื ืืื ืงืึธื ืืึทืงื ืึทืืืึทืืึทืจ;
- 'Z_PRIMARYKEY'. ืืขืจ ืืืฉ ืึผืืื ืืขื ืขืจืึทื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืขื ืืึทืืึทืืืืก, ืึทืืึท ืืื ืื ืืึทื ืฅ ื ืืืขืจ ืคืื ืึทืจืืืงืืขื ืกืืึธืจื, ืื ืืึทื ืฅ ื ืืืขืจ ืคืื ืืฉืึทืฅ, ืืื"ื ื.
ืืืื, ืืืขื ืืืืึทืืื ืื ื ืืืืึทืฆืึทืคึผืคึผ ืืืืฃ ืึท ืจืืจืขืืืืืง ืืืื ืืื ืืึธืก, ืืืจ ืืึธื ืืึทืฆืึธืื ืืคืืขืจืงืืึทืืงืืื ืฆื ืื ืคืืืืขื ืืข ืืขืงืขืก:
- ืืขืงืข 'BackedUpKeyValue.sqlite'. ืึผืืื ืงืจืืคึผืืึธืืจืึทืคืืง ืฉืืืกืืขื ืืื ืื ืืขืจืข ืืึทืื ืืืึธืก ืืขื ืขื ื ืืืืืง ืฆื ืืืขื ืืืคืืฆืืจื ืื ืืฉืืื ืืึทืืืฆืขืจ. ืืืื ืืืืฃ ืืขื ืืจื: /private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/.
- ืืขืงืข 'ContactsV2.sqlite'. ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืงืึธื ืืึทืงืื ืคืื ืื ืืึทื ืืฆืขืจ, ืึทืืึท ืืื ืคืื ื ืึธืืขื, ืืขืืขืคืึธื ื ืืืขืจ, ืงืึธื ืืึทืงื ืกืืึทืืืก (ืืื ืืขืงืกื ืคืึธืจืขื), ืืืืึทืฆืึทืคึผืคึผ ืฉืืึทื, ืขืืง. ืืืื ืืืืฃ ืืขื ืืจื: /private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/.
- ืืขืงืข 'ืงืึทื ืกืืืขืจ_ืืืขืจืกืืข'. ืึผืืื ืื ืืืขืจืกืืข ื ืืืขืจ ืคืื ืื ืืื ืกืืึทืืืจื ืืืืึทืฆืึทืคึผืคึผ ืึทืคึผืืึทืงืืืฉืึทื. ืืืื ืืืืฃ ืืขื ืืจื: /private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/.
- ืืขืงืข 'current_wallpaper.jpg'. ืึผืืื ืื ืงืจืึทื ื ืืืืึทืฆืึทืคึผืคึผ ืืื ืืขืจืืจืื ื ืืึทืคึผืขืื. ืืืื ืืืืฃ ืืขื ืืจื: /private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/. ืขืืืขืจืข ืืืขืจืกืืขืก ืคืื ืื ืึทืคึผืืึทืงืืืฉืึทื ื ืืฆื ืื ืืขืงืข 'ืืืึธืืคึผืืืคึผืขืจ', ืืืึธืก ืืื ืืืื ืฆืืืืืขื ืืขื ืืจื: '/private/var/mobile/Applications/net.whatsapp.WhatsApp/Documents/'.
- ืืขืงืข 'blockedcontacts.dat'. ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืคืืขืฉืืขืื ืงืึธื ืืึทืงืื. ืืืื ืืืืฃ ืืขื ืืจื: /private/var/mobile/Applications/net.whatsapp.WhatsApp/Documents/.
- ืืขืงืข 'pw.dat'. ืึผืืื ืึท ืื ืงืจืืคึผืืื ืคึผืึทืจืึธื. ืืืื ืืืืฃ ืืขื ืืจื: '/private/var/mobile/Applications/net.whatsapp.WhatsApp/Library/'.
- ืืขืงืข 'ื ืขื.ืืืืึทืฆืึทืคึผืคึผ.ืืืืึทืฆืึทืคึผืคึผ.ืคึผืืืกื' (ืึธืืขืจ ืืขืงืข 'ืืจืืคึผืข.ื ืขื.ืืืืึทืฆืึทืคึผืคึผ.ืืืืึทืฆืึทืคึผืคึผ.ืฉืึทืจืขื.ืคึผืืืกื'). ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื ืคึผืจืึธืคืื. ืืขืจ ืืขืงืข ืืื ืืืื ืืืืฃ ืืขื ืืจื: '/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/Library/Preferences/'.
ืืื ืืึทืื ืคืื ืืขืจ ืืขืงืข 'group.net.whatsapp.WhatsApp.shared.plist'
ืืืจ ืืืื ืืึทืจืคึฟื ืฆื ืืึทืฆืึธืื ืืคืืขืจืงืืึทืืงืืื ืฆื ืื ืคืืืืขื ืืข ืืืจืขืงืืขืจืื:
- ืืืจืขืงืืืจื '/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/Media/Profile/'. ืึผืืื ืืืืืื ืึทืืืก ืคืื ืงืึธื ืืึทืงืื, ืืจืืคึผืขืก (ืืขืงืข ืืื ืื ืคืึทืจืืขื ืืขืจืื ื ืืจืึธืืขืจ ืคืื ืืขืจ), ืงืึธื ืืึทืงื ืึทืืืึทืืึทืจืก, ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื ืืึทืืืฆืขืจ ืึทืืืึทืืึทืจ (ืืขืงืข 'Photo.jpg').
- ืืืจืขืงืืืจื '/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/Message/Media/'. ืึผืืื ืืืืืืืขืืืึท ืืขืงืขืก ืืื ืืืืขืจ ืืืืืื ืึทืืืก
- ืืืจืขืงืืืจื '/private/var/mobile/Applications/net.whatsapp.WhatsApp/Documents/'. ืึผืืื ืื ืคึผืจืึธืืจืึทื ืึธืคึผืขืจืึทืฆืืข ืงืืึธืฅ (ืืขืงืข 'ืงืึทืืืก.ืืึธื') ืืื ืืึทืงืึทืคึผ ืงืืคืืขืก ืคืื ืคึผืจืึธืืจืึทื ืึธืคึผืขืจืึทืฆืืข ืืึธืืก (ืืขืงืข 'calls.backup.log').
- ืืืจืขืงืืืจื '/private/var/mobile/Applications/group.net.whatsapp.WhatsApp.shared/stickers/'. ืึผืืื ืกืืืงืขืจื (ืืขืงืข ืืื ืืขื ืคึฟืึธืจืืึทื '.ืืืขื').
- ืืืจืขืงืืืจื '/private/var/mobile/Applications/net.whatsapp.WhatsApp/Library/Logs/'. ืึผืืื ืคึผืจืึธืืจืึทื ืึธืคึผืขืจืึทืฆืืข ืืึธืืก.
ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืืืฃ ืืืื ืืึธืื
ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืืืฃ Windows ืงืขื ืขื ืืืื ืืขืคึฟืื ืขื ืืื ืขืืืขืืข ืขืจืืขืจ. ืขืจืฉืืขืจ ืคืื ืึทืืข, ืืึธืก ืืขื ืขื ืืืืจืขืงืืขืจืื ืืื ืขืงืกืขืงืืืึทืืืข ืืื ืึทืืืืืืขืจื ืคึผืจืึธืืจืึทื ืืขืงืขืก (ืคึฟืึทืจ Windows 8/10):
- 'C: ืคึผืจืึธืืจืึทื ืืขืงืขืก (ืงืก86) ืืืืึทืฆืึทืคึผืคึผ'
- 'C:Users%User Profil% AppDataLocalWhatsApp'
- 'C:Users%User Profile% AppDataLocalVirtualStore ืคึผืจืึธืืจืึทื ืืขืงืขืก (ืงืก86) ืืืืึทืฆืึทืคึผืคึผ'
ืืื ืืขื ืงืึทืืึทืืึธื 'C:Users%User Profil% AppDataLocalWhatsApp' ืื ืงืืึธืฅ ืืขืงืข ืืื ืืืื 'SquirrelSetup.log', ืืืึธืก ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืฉืขืง ืคึฟืึทืจ ืืขืจืืืึทื ืืืงืื ืืขื ืืื ืื ืกืืึธืืื ื ืื ืคึผืจืึธืืจืึทื.
ืืื ืืขื ืงืึทืืึทืืึธื 'C:Users%User Profil% AppDataRoamingWhatsApp' ืขืก ืืขื ืขื ืขืืืขืืข ืกืืืืืจืขืงืืึธืจืืขืก:
ืืขืงืข 'main-process.log' ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืื ืืืืึทืฆืึทืคึผืคึผ ืคึผืจืึธืืจืึทื.
ืกืืืืืจืขืงืืึธืจื 'ืืึทืืึทืืืืกืื' ืึผืืื ืึท ืืขืงืข 'Databases.db', ืึธืืขืจ ืื ืืขืงืข ืึผืืื ืงืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืฉืึทืฅ ืึธืืขืจ ืงืึธื ืืึทืงืื.
ืื ืืขืจืกื ืืฉืืงืึทืืืข ืคึฟืื ืึท ืคืึธืจืขื ืกืืง ืคืื ื ืคืื ืืืื ืื ื ืืขื ืขื ืื ืืขืงืขืก ืืื ืื ืืืขืืืืืึทืืขืจ 'ืงืึทืฉ'. ืื ืืืกื ืืืืกืืงืื ืืขืงืขืก ืืขืืืืกื 'ืค*******' (ืืืื * ืืื ืึท ื ืืืขืจ ืคืื 0 ืฆื 9) ืืื ืื ืงืจืืคึผืืื ืืืืืืืขืืืึท ืืขืงืขืก ืืื ืืึธืงืืืขื ืื, ืึธืืขืจ ืขืก ืืขื ืขื ืืืื ืึทื ืขื ืงืจืืคึผืืื ืืขืงืขืก ืฆืืืืฉื ืืื. ืคืื ืืึทืืื ืืขืจ ืืื ืืขืจืขืก ืืขื ืขื ืื ืืขืงืขืก 'ืืึทืื_0', 'ืืึทืื_1', 'ืืึทืื_2', 'ืืึทืื_3', ืืืื ืืื ืืขืจ ืืขืืืืงืขืจ ืกืืืืืจืขืงืืึธืจื. ืืขืงืขืก 'ืืึทืื_0', 'ืืึทืื_1', 'ืืึทืื_3' ืึทื ืืืึทืืื ืคืื ืืจืืืกื ืืืง ืคึฟืึทืจืืื ืืื ืืขื ืฆื ืืจืึทื ืกืืืืืขื ืื ืงืจืืคึผืืื ืืืืืืืขืืืึท ืืขืงืขืก ืืื ืืึธืงืืืขื ืื.
ืืืึทืฉืคึผืื ืคืื ืืื ืคึฟืึธืจืืึทืฆืืข ืงืึทื ืืืื ื ืืื ืืขืงืข 'ืืึทืืึท_1'
ืืืื ืืขืงืข 'ืืึทืื_3' ืงืขื ืึทื ืืืึทืืื ืืจืึทืคืืง ืืขืงืขืก.
ืืขืงืข 'ืืึทืื_2' ืึผืืื ืงืึธื ืืึทืงื ืึทืืืึทืืึทืจืก (ืงืขื ืขื ืืืื ืืขืืื ื ืืืจื ืืืื ืืืจื ืืขืงืข ืืขืืขืจื).
ืึทืืืึทืืึทืจืก ืงืึทื ืืืื ื ืืื ืืขืจ ืืขืงืข 'ืืึทืื_2':
ืืืื, ืื ืืฉืึทืฅ ืืื ืงืขื ืขื ื ืื ืืืื ืืขืคึฟืื ืขื ืืื ืื ืืึผืจืื ืคืื ืื ืงืึธืืคึผืืืืขืจ, ืึธืืขืจ ืืืจ ืงืขื ืขื ืืขืคึฟืื ืขื:
- ืืืืืืืขืืืึท ืืขืงืขืก;
- ืืึธืงืืืขื ืื ืืจืึทื ืกืืืืืขื ืืืจื ืืืืึทืฆืึทืคึผืคึผ;
- ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืงืึธื ืืึทืงืื ืคืื ืื ืืฉืืื ืืึทืืืฆืขืจ.
ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืืืืฃ ืืึทืงืึธืก
ืืื MacOS ืืืจ ืงืขื ืขื ืืขืคึฟืื ืขื ืืืืคึผืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืึทืจืืึทืคืึทืงืฅ ืขื ืืขื ืฆื ืื ืืขืคึฟืื ืขื ืืื Windows OS.
ืื ืคึผืจืึธืืจืึทื ืืขืงืขืก ืืขื ืขื ืืืื ืืื ืื ืคืืืืขื ืืข ืืืจืขืงืืขืจืื:
- 'C:ApplicationsWhatsApp.app'
- 'C:Applications._WhatsApp.app'
- 'C:Users%User Profil%LibraryPreferences'
- 'C:Users%User Profil%LibraryLogsWhatsApp'
- 'C:Users%User Profile%LibrarySaved Application StateWhatsApp.savedState'
- 'C:Users%User Profile%LibraryApplication Scripts'
- 'C:Users%User Profile%LibraryApplication SupportCloudDocs'
- 'C:Users%User Profile%LibraryApplication SupportWhatsApp.ShipIt'
- 'C:Users%User Profil%LibraryContainerscom.rockysandstudio.app-for-whatsapp'
- 'C: ืืืืขืจื% ืืึทื ืืฆืขืจ ืคึผืจืึธืคืื% ืืืืืืึธืืขืง ืืึธืืื ืืึธืงืืืขื ืื <ืืขืงืกื ืืืึทืืขืืืืืง> ืืืืึทืฆืึทืคึผืคึผ ืึทืงืึทืื ืฅ'
ืืขืจ ืืืขืืืืืึทืืขืจ ืึผืืื ืกืืืืืจืขืงืืึธืจืืขืก ืืืขืืขื ืก ื ืขืืขื ืืขื ืขื ืืขืืขืคืึธื ื ืืืขืจื ืคึฟืึทืจืืื ืื ืืื ืื ืืึทืืืฆืขืจ ืคืื ืื ืืืืึทืฆืึทืคึผืคึผ ืืฉืืื. - 'C:Users%User profile%LibraryCachesWhatsApp.ShipIt'
ืืขืจ ืืืขืืืืืึทืืขืจ ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืกืืึธืืื ื ืื ืคึผืจืึธืืจืึทื. - 'C:Users%User ืคึผืจืึธืคืื%PicturesiPhoto Library.photolibraryMasters', 'C:Users%User ืคึผืจืึธืคืื%PicturesiPhoto Library.photolibraryThumbnails'
ืื ืืืจืขืงืืขืจืื ืึทื ืืืึทืืื ืกืขืจืืืืก ืืขืงืขืก ืคืื ืื ืคึผืจืึธืืจืึทื, ืึทืจืืึทื ืืขืจืขืื ื ืคืึธืืึธืก ืืื ืืืืืื ืึทืืืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืงืึธื ืืึทืงืื. - 'C:Users%User Profil%LibraryCachesWhatsApp'
ืืขืจ ืืืขืืืืืึทืืขืจ ืึผืืื ืขืืืขืืข SQLite ืืึทืืึทืืืืกืื ืืืึธืก ืืขื ืขื ืืขื ืืฆื ืคึฟืึทืจ ืืึทืื ืงืึทืืฉืื ื. - 'C: ืืืืขืจื% ืืึทื ืืฆืขืจ ืคึผืจืึธืคืื% ืืืืืืึธืืขืง ืึทืคึผืคึผืืืงืึทืืืึธื ืฉืืืฆื ืืืืึทืฆืึทืคึผืคึผ'
ืืขืจ ืืืขืืืืืึทืืขืจ ืึผืืื ืขืืืขืืข ืกืืืืืจืขืงืืึธืจืืขืก:
ืืื ืืขื ืงืึทืืึทืืึธื 'C:Users%User Profile%LibraryApplication SupportWhatsAppCache' ืขืก ืืขื ืขื ืืขืงืขืก 'ืืึทืื_0', 'ืืึทืื_1', 'ืืึทืื_2', 'ืืึทืื_3' ืืื ืืขืงืขืก ืืื ื ืขืืขื 'ืค*******' (ืืืื * ืืื ืึท ื ืืืขืจ ืคืื 0 ืฆื 9). ืคึฟืึทืจ ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืืึธืก ืืื ืคึฟืึธืจืืึทืฆืืข ืื ืืขืงืขืก ืึทื ืืืึทืืื, ืืขื WhatsApp Artifacts ืืืืฃ Windows.ืืื ืืขื ืงืึทืืึทืืึธื 'C: ืืืืขืจื% ืืึทื ืืฆืขืจ ืคึผืจืึธืคืื% ืืืืืืึธืืขืง ืึทืคึผืคึผืืืงืึทืืืึธื ืฉืืืฆื ืืืืึทืฆืึทืคึผืคึผ ืื ืืขืงืกืขืืื' ืงืขื ืึทื ืืืึทืืื ืืืืืืืขืืืึท ืืขืงืขืก (ืืขืงืข ืืึธืื ืงืืื ืืงืกืืขื ืฉืึทื ื).
ืืขืงืข 'main-process.log' ืึผืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืื ืืืืึทืฆืึทืคึผืคึผ ืคึผืจืึธืืจืึทื.
ืงืืืืื
- ืคืึธืจืขื ืกืืง ืึทื ืึทืืืกืืก ืคืื ืืืืึทืฆืึทืคึผืคึผ ืืขืกืื ืืืฉืขืจ ืืืืฃ ืึทื ืืจืืื ืกืืึทืจืืคืึธื ืขืก, ืืืจื Cosimo Anglano, 2014.
- ืืืืึทืฆืึทืคึผืคึผ ืคืึธืจืขื ืกืืงืก: ืืืืกื ืฉืืคืืืขืืข ืกืืกืืขื ืืื ืืงืขืจ ืืึทืื ืคึฟืึทืจ ืึทื ืืจืืื ืืื ืืึธืก ืืืจื Ahmad Pratama, 2014.
ืืื ืื ืคืืืืขื ืืข ืึทืจืืืงืืขื ืืื ืืขื ืกืขืจืืข:
ืืขืงืจืืคึผืืืึธื ืคืื ืื ืงืจืืคึผืืื ืืืืึทืฆืึทืคึผืคึผ ืืึทืืึทืืืืกืืืึทื ืึทืจืืืงื ืืืึธืก ืืืขื ืฆืืฉืืขืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืขืื ืืื ืื WhatsApp ืขื ืงืจืืคึผืฉืึทื ืฉืืืกื ืืื ืืืฉืขื ืขืจืืืืึทื ืืื ืคึผืจืึทืงืืืฉ ืืืืฉืคืืื ืืืึธืก ืืืืึทืื ืืื ืฆื ืืขืงืจืืคึผื ืื ืื ืงืจืืคึผืืื ืืึทืืึทืืืืกืื ืคืื ืืขื ืึทืคึผืืึทืงืืืฉืึทื.
ืขืงืกืืจืึทืงืืื ื ืืืืึทืฆืึทืคึผืคึผ ืืึทืื ืคืื ืืืึธืืงื ืกืืึธืจืืืืฉืึทื ืึทืจืืืงื ืืื ืืืึธืก ืืืจ ืืืขืื ืืึธืื ืืืจ ืืืึธืก ืืืืึทืฆืึทืคึผืคึผ ืืึทืื ืืขื ืขื ืกืืึธืจื ืืื ืื ืืืืืงื ืก ืืื ืืึทืฉืจืืึทืื ืืขืืืึธืืก ืคึฟืึทืจ ืจืืืจืืืืื ื ืื ืืึทืื ืคึฟืื ืืืึธืืงื ืกืืึธืจืืืืฉ.
ืืืืึทืฆืึทืคึผืคึผ ืืึทืืึท ืืงืกืืจืึทืงืฉืึทื: ืคึผืจืึทืงืืืฉ ืืืืฉืคืืืืึทื ืึทืจืืืงื ืืืึธืก ืืืขื ืืึทืฉืจืืึทืื ืฉืจืื ืืืจื ืฉืจืื ืืืึธืก ืืืืื ืืื ืืื ืฆื ืขืงืกืืจืึทืงื ืืืืึทืฆืึทืคึผืคึผ ืืึทืื ืคืื ืคืึทืจืฉืืื ืืขืืืืกืขืก.
ืืงืืจ: www.habr.com