WechatExporter icon indicating copy to clipboard operation
WechatExporter copied to clipboard

个人微信名称在哪里找呢

Open Gsmlvdeshui opened this issue 4 years ago • 7 comments

你好,我最近也在做数据库聊天记录提取,wxid跟数据库都找到了,但是当前wxid的微信名称没找到,请问这个名称是在哪里呢?

Gsmlvdeshui avatar Feb 23 '22 01:02 Gsmlvdeshui

当前登录的微信名没有一个明确的地方,是从多个文件中搜集的,包括LoginInfo2.dat, mmsetting.archive.

好友的微信名是在Friend表中的


发件人: Gsmlvdeshui @.> 发送时间: 2022年2月23日 09:50 收件人: BlueMatthew/WechatExporter @.> 抄送: Subscribed @.***> 主题: [BlueMatthew/WechatExporter] 个人微信名称在哪里找呢 (Issue #72)

你好,我最近也在做数据库聊天记录提取,wxid跟数据库都找到了,但是当前wxid的微信名称没找到,请问这个名称是在哪里呢?

― Reply to this email directly, view it on GitHubhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FBlueMatthew%2FWechatExporter%2Fissues%2F72&data=04%7C01%7C%7C27b28e931692457b4d6908d9f66eedb9%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811778560924004%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=AQgnlNpFn0wsCZdiEYAujVVOibsalylLNL8JmwGcv9w%3D&reserved=0, or unsubscribehttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAI6VD2HMO6RP73UMX43X3J3U4Q4P3ANCNFSM5PDA4E3Q&data=04%7C01%7C%7C27b28e931692457b4d6908d9f66eedb9%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811778560924004%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=okGv5%2BsbPa0APzMXgq7k5nlQ%2F5SV1yknPCyYAGOSCHk%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7C%7C27b28e931692457b4d6908d9f66eedb9%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811778560924004%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2F7wg6M4hXeYy6hzxxu84nU4oIZb%2FhdYNOcWOcsia8Ao%3D&reserved=0 or Androidhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7C%7C27b28e931692457b4d6908d9f66eedb9%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811778560924004%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=zX%2BwVJ9ekukDj6ZLW7YomwAfL9%2BaXp%2F6akGN1SMkb%2F8%3D&reserved=0. You are receiving this because you are subscribed to this thread.Message ID: @.***>

BlueMatthew avatar Feb 23 '22 02:02 BlueMatthew

我这个提取出来的备份文件有4个微信,我想取出这4个微信的名称

Gsmlvdeshui avatar Feb 23 '22 02:02 Gsmlvdeshui

LoginInfo2.dat, mmsetting.archive. 这俩个文件我都看了,但是都没有找到微信对应的名称,请问名称数据是加密了吗还是明文

Gsmlvdeshui avatar Feb 23 '22 02:02 Gsmlvdeshui

都是二进制的数据,如果你知道名字的二进制(utf8),在文件中应该能找到。 当前的程序都有解析,程序运行了应该都能显示出来的呢。


发件人: Gsmlvdeshui @.> 发送时间: 2022年2月23日 10:50 收件人: BlueMatthew/WechatExporter @.> 抄送: Matthew @.>; Comment @.> 主题: Re: [BlueMatthew/WechatExporter] 个人微信名称在哪里找呢 (Issue #72)

LoginInfo2.dat, mmsetting.archive. 这俩个文件我都看了,但是都没有找到微信对应的名称,请问名称数据是加密了吗还是明文

― Reply to this email directly, view it on GitHubhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FBlueMatthew%2FWechatExporter%2Fissues%2F72%23issuecomment-1048403742&data=04%7C01%7C%7C1beeec95a97c437cd53608d9f67744d3%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811814385024915%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=KUaEyeFBdDwBw%2BbTVDtIY0oUAMpNITP86N0NqCcYkwk%3D&reserved=0, or unsubscribehttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAI6VD2EF6GILGPNWRLCAZLLU4RDPXANCNFSM5PDA4E3Q&data=04%7C01%7C%7C1beeec95a97c437cd53608d9f67744d3%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811814385024915%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=L1PRzF3q6rRVgAtx7XZlzrYXGVAeS8IB4%2FTwG6L2P3Y%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7C%7C1beeec95a97c437cd53608d9f67744d3%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811814385024915%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=VldySk3iDfP9YYm%2Fiu5VRVUxCCQ8mdXkr9TUj%2FyG1rQ%3D&reserved=0 or Androidhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7C%7C1beeec95a97c437cd53608d9f67744d3%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811814385024915%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=EUW5D1NhI0RpisHdZzDgrcUXr90fSQQMIjC0AHqvbf4%3D&reserved=0. You are receiving this because you commented.Message ID: @.***>

BlueMatthew avatar Feb 23 '22 03:02 BlueMatthew

我用winhex打开mmsetting.archive.wxid 这个文件 可以看到wxid 手机号 地区这些信息 但是就是没有找到名称~

Gsmlvdeshui avatar Feb 23 '22 03:02 Gsmlvdeshui

有的,名字前面好像有88两个字符,或者你尝试把名字中加几个英文字母,就能看出来了。


发件人: Gsmlvdeshui @.> 发送时间: 2022年2月23日 11:29 收件人: BlueMatthew/WechatExporter @.> 抄送: Matthew @.>; Comment @.> 主题: Re: [BlueMatthew/WechatExporter] 个人微信名称在哪里找呢 (Issue #72)

我用winhex打开mmsetting.archive.wxid 这个文件 可以看到wxid 手机号 地区这些信息 但是就是没有找到名称~

― Reply to this email directly, view it on GitHubhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FBlueMatthew%2FWechatExporter%2Fissues%2F72%23issuecomment-1048419038&data=04%7C01%7C%7C25ce92223dc940d5bd2808d9f67cbe15%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811837905764364%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=rb20EWEc%2FvBcxzWyGZC1o2tdEn92B5BLKm0jaIpiTuE%3D&reserved=0, or unsubscribehttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAI6VD2FTCASQ67QVRLVLFJTU4RICVANCNFSM5PDA4E3Q&data=04%7C01%7C%7C25ce92223dc940d5bd2808d9f67cbe15%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811837905764364%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=4rZqHCXBPVgzsr9GLc%2BDZyV7561F7o3yJUkN7vKh2sc%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7C%7C25ce92223dc940d5bd2808d9f67cbe15%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811837905764364%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=EAW12Zh4Tisw2igldsW8GiJAG1c6SH2CaU%2Fe8bE0K2M%3D&reserved=0 or Androidhttps://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7C%7C25ce92223dc940d5bd2808d9f67cbe15%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637811837905764364%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=TvLy0kAX54xu4yy0DYp4OEW2hNdtJkTfm%2F%2F%2BDURs7Ok%3D&reserved=0. You are receiving this because you commented.Message ID: @.***>

BlueMatthew avatar Feb 23 '22 03:02 BlueMatthew

对的,太感谢了,就是88后面这个utf8数据,拿出来编码一下就是名称!

Gsmlvdeshui avatar Feb 23 '22 03:02 Gsmlvdeshui