WhatsApp Desktop Cache
Overview
Section titled “Overview”Evidence: WhatsApp Desktop Cache
Description: Collect WhatsApp Desktop Cache
Category: Applications
Platform: windows
Short Name: whtc
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”WhatsApp Desktop stores cached images, media, and web content in cache directories. These files include profile pictures, shared images, videos, and other media exchanged in conversations.
Data Collected
Section titled “Data Collected”This collector gathers structured data about whatsapp desktop cache.
Collection Method
Section titled “Collection Method”This collector gathers WhatsApp cache directories from app packages and Roaming directories, collecting cached media and web content.
Forensic Value
Section titled “Forensic Value”WhatsApp cache contains visual evidence from conversations including shared images, profile pictures, and media files. This helps recover deleted content, identify participants, and understand the context of communications in investigations.