rogee
fb8c25c83c
- Add Windows 4.1.x Config.Cipher pointer-chain key extraction with cross-chunk
MemoryPatternScanner and bounded blob XOR decoding; keys still require per-DB
page-1 HMAC verification before caching.
- Cache keys by account fingerprint + database relative path; db scan --save
skips memory scanning entirely once all discovered databases are cached.
- Add DbMessage model (localId, serverId, type, timestamp, sender, display name,
avatar, isSelf) read read-only from Msg_{md5(chat)} via SQLCipher with hex/zstd
content decoding and contact.db name resolution.
- CLI: db messages / db contacts / db schema with masked defaults; include the
earlier chat send --session wiring. 97 Core tests pass; real-machine validated.
137 lines
4.5 KiB
JSON
137 lines
4.5 KiB
JSON
{
|
|
"scanned": false,
|
|
"processCount": 0,
|
|
"candidateCount": 0,
|
|
"verificationAttempts": 0,
|
|
"verifiedDatabaseCount": 20,
|
|
"savedTo": "C:\\Users\\Rogee\\AppData\\Local\\WxAgent\\database-keys.json",
|
|
"accounts": [
|
|
{
|
|
"AccountRootFingerprint": "a2e8a1eaab7fd5fbd3806525c0d9cce750c28f4efb8e7cfcabc9e3e8660e0277",
|
|
"WechatVersion": "4.1.13.63",
|
|
"databases": [
|
|
{
|
|
"RelativePath": "bizchat/bizchat.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9099054+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "chatbot/chatbot_message.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9094985+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "contact/contact.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9096969+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "contact/contact_fts.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9094345+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "emoticon/emoticon.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9095737+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "favorite/favorite.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9098057+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "favorite/favorite_fts.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9097808+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "general/general.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9096221+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "hardlink/hardlink.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9097495+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "head_image/head_image.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9093256+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/biz_message_0.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9098307+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/media_0.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9095265+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/message_0.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.909675+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/message_fts.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9095985+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/message_resource.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9095507+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "message/weclaw.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9098845+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "session/session.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9094761+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "sns/sns.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9097239+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "solitaire/solitaire.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.9098598+00:00"
|
|
},
|
|
{
|
|
"RelativePath": "third_app_icon/third_app_icon.db",
|
|
"SourceProcessId": 8912,
|
|
"Confidence": "PageHmacVerified",
|
|
"VerifiedAt": "2026-09-06T05:17:37.909648+00:00"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|