Clutch-2.0.4 脱壳weixin失败

mih30 · 2017 年8 月 21 日 09:00

mih30:/usr/bin root# clutch-2.0.4 -d com.tencent.xin
com.tencent.xin contains watchOS 2 compatible application. It’s not possible to dump watchOS 2 apps with Clutch 2.0.4 at this moment.
Zipping WeChat.app
Swapping architectures…
Swapping architectures…
Swapping architectures…
ASLR slide: 0x4c000
Dumping (armv7)
Patched cryptid (32bit segment)
Writing new checksum
ASLR slide: 0x100078000
Dumping (arm64)
Patched cryptid (64bit segment)
Writing new checksum
Swapping architectures…
Swapping architectures…
objc[719]: Class ZipArchive is implemented in both /var/tmp/clutch/4B300CC8-C616-4970-AC6D-7652AA65981F/clutch and /private/var/mobile/Containers/Bundle/Application/26B6356D-0C2A-4A75-BA67-66090051DA3A/WeChat.app/Frameworks/MMCommon.framework/MMCommon_armv7. One of the two will be used. Which one is undefined.
[WCDB]Code:2, Type:Abort, Msg:[NSString] should conform to WCTColumnCoding protocol, which is the class of [WCTSequence name]
2017-08-21 16:54:05.859 clutch[720:7443] +[NSString columnTypeForWCDB]: unrecognized selector sent to class 0x3af10e7c
2017-08-21 16:54:05.871 clutch[720:7443] *** Terminating app due to uncaught exception ‘NSInvalidArgumentException’, reason: ‘+[NSString columnTypeForWCDB]: unrecognized selector sent to class 0x3af10e7c’
*** First throw call stack:
(0x2610d86b 0x37b7adff 0x26112f51 0x26110c8f 0x260402b8 0x3fa363 0x3f9bf7 0x443461 0x442f19 0x442db7 0x4442fd 0x1fe7d665 0x1fe7d765 0x1fe7a703 0x1fe79833 0x1fe798b9 0x1fe70c65 0x1fe75a81 0x382a4b57 0x68181 0x7a959 0x6aeed 0x6a511 0x79523 0x382a5873)
libc++abi.dylib: terminating with uncaught exception of type NSException
Error: Failed to dump with arch armv7

2017-08-21 16:54:05.947 clutch-2.0.4[716:7430] failed operation
2017-08-21 16:54:05.967 clutch-2.0.4[716:7430] application <NSOperationQueue: 0x15e628b20>{name = ‘NSOperationQueue 0x15e628b20’}
Dumping armv7
Successfully dumped framework MMCommon_armv7!
Dumping armv7
objc[729]: Class ZipArchive is implemented in both /var/tmp/clutch/31C6C49E-3292-4202-8CB5-785C8E57782E/clutch and /private/var/mobile/Containers/Bundle/Application/26B6356D-0C2A-4A75-BA67-66090051DA3A/WeChat.app/Frameworks/MMCommon.framework/MMCommon. One of the two will be used. Which one is undefined.
[WCDB]Code:2, Type:Abort, Msg:[NSString] should conform to WCTColumnCoding protocol, which is the class of [WCTSequence name]
2017-08-21 16:54:08.049 clutch[724:7460] +[NSString columnTypeForWCDB]: unrecognized selector sent to class 0x1a172a798
2017-08-21 16:54:08.094 clutch[724:7460] *** Terminating app due to uncaught exception ‘NSInvalidArgumentException’, reason: ‘+[NSString columnTypeForWCDB]: unrecognized selector sent to class 0x1a172a798’
*** First throw call stack:
(0x18586cf5c 0x19a463f80 0x185873b64 0x185870c14 0x185774dcc 0x100336960 0x100376184 0x100375d80 0x100375c70 0x10037712c 0x12001c7c4 0x12001c964 0x1200187b8 0x120017960 0x120017a14 0x12000d0f4 0x120012668 0x19ac8d6b0 0x10007f41c 0x100094070 0x1000826dc 0x100081c84 0x100092db4 0x19ac8e8b8)
libc++abi.dylib: terminating with uncaught exception of type NSException
Child exited with status 6
Error: Failed to dump with arch arm64

2017-08-21 16:54:08.113 clutch-2.0.4[716:7430] failed operation
2017-08-21 16:54:08.113 clutch-2.0.4[716:7430] application <NSOperationQueue: 0x15e628b20>{name = ‘NSOperationQueue 0x15e628b20’}
Error: Failed to dump

2017-08-21 16:54:08.114 clutch-2.0.4[716:7430] failed operation
2017-08-21 16:54:08.114 clutch-2.0.4[716:7430] application <NSOperationQueue: 0x15e628b20>{name = ‘NSOperationQueue 0x15e628b20’}
Dumping armv7
Dumping arm64
Successfully dumped framework MMCommon!
Child exited with status 0
Successfully dumped framework mars_armv7!
Successfully dumped framework MultiMedia_armv7!
Dumping arm64
Dumping arm64
Successfully dumped framework mars!
Child exited with status 0
Swapping architectures…
Successfully dumped framework MultiMedia!
Child exited with status 0
ASLR slide: 0x3c000
Dumping (armv7)
Patched cryptid (32bit segment)
Zipping MMCommon.framework
Zipping MultiMedia.framework
Zipping WCDB.framework
Zipping mars.framework
Zipping WeChatShareExtensionNew.appex
Writing new checksum
ASLR slide: 0x1000bc000
Dumping (arm64)
Patched cryptid (64bit segment)
Writing new checksum
FAILED:
Finished dumping com.tencent.xin in 89.7 seconds
mih30:/usr/bin root#

AloneMonkey · 2017 年8 月 21 日 09:04

试试这个 https://github.com/AloneMonkey/dumpdecrypted

mih30 · 2017 年8 月 21 日 09:10

frameworks目录下的framework怎么脱壳呢？

AloneMonkey · 2017 年8 月 21 日 09:10

你为啥不看README呢？

mih30 · 2017 年8 月 21 日 09:18

plist里需要写两个bundle，格式怎么写？

AloneMonkey · 2017 年8 月 21 日 09:21

就写 com.tencent.xin 就行了

mih30 · 2017 年8 月 21 日 14:22

执行完之后，脱壳后的文件在哪个目录？？？

AloneMonkey · 2017 年8 月 21 日 14:36

看设备log里面有输出日志。

mih30 · 2017 年8 月 22 日 02:06

Aug 21 22:19:48 mih30 kernel[0] : xpcproxy[758] Container: /private/var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789 (sandbox)
Aug 21 22:19:48 mih30 WeChat[758] : MS:Notice: Injecting: com.tencent.xin [WeChat] (1240.10)
Aug 21 22:19:48 mih30 kernel[0] : AppleARMPMUCharger: limiting USB input current to 1900 mA (measured 475 mA)
Aug 21 22:19:49 mih30 WeChat[758] : MS:Notice: Loading: /Library/MobileSubstrate/DynamicLibraries/dumpdecrypted.dylib
Aug 21 22:19:49 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:49 mih30 WeChat[758] : [+] offset to cryptid found: @0x10002cca8(from 0x10002c000) = ca8
Aug 21 22:19:49 mih30 WeChat[758] : [+] Found encrypted data at address 00004000 of length 51200000 bytes - type 1.
Aug 21 22:19:49 mih30 WeChat[758] : [+] Opening /private/var/mobile/Containers/Bundle/Application/498110C9-F3F9-4086-9C88-E448C42DD70C/WeChat.app/WeChat for reading.
Aug 21 22:19:49 mih30 WeChat[758] : [+] Reading header
Aug 21 22:19:49 mih30 WeChat[758] : [+] Detecting header type
Aug 21 22:19:49 mih30 WeChat[758] : [+] Executable is a FAT image - searching for right architecture
Aug 21 22:19:49 mih30 WeChat[758] : [+] Correct arch is at offset 56360960 in the file
Aug 21 22:19:49 mih30 WeChat[758] : [+] Opening /var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/WeChat.decrypted for writing.
Aug 21 22:19:49 mih30 WeChat[758] : [+] Copying the not encrypted start of the file
Aug 21 22:19:49 mih30 kernel[0] : AppleARMPMUCharger: limiting USB input current to 1800 mA (measured 483 mA)
Aug 21 22:19:49 mih30 kernel[0] : AppleARMPMUCharger: limiting USB input current to 1700 mA (measured 553 mA)
Aug 21 22:19:50 mih30 WeChat[758] : [+] Dumping the decrypted data into the file
Aug 21 22:19:53 mih30 WeChat[758] : [+] Copying the not encrypted remainder of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset 35c0ca8
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing original file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing dump file
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [+] offset to cryptid found: @0x103ec4b70(from 0x103ec4000) = b70
Aug 21 22:19:54 mih30 WeChat[758] : [+] Found encrypted data at address 00004000 of length 1294336 bytes - type 1.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /private/var/mobile/Containers/Bundle/Application/498110C9-F3F9-4086-9C88-E448C42DD70C/WeChat.app/Frameworks/WCDB.framework/WCDB for reading.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Reading header
Aug 21 22:19:54 mih30 WeChat[758] : [+] Detecting header type
Aug 21 22:19:54 mih30 WeChat[758] : [+] Executable is a FAT image - searching for right architecture
Aug 21 22:19:54 mih30 WeChat[758] : [+] Correct arch is at offset 1703936 in the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/WCDB.decrypted for writing.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Copying the not encrypted start of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Dumping the decrypted data into the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Copying the not encrypted remainder of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset 1a0b70
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing original file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing dump file
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [+] offset to cryptid found: @0x1040acbc8(from 0x1040ac000) = bc8
Aug 21 22:19:54 mih30 WeChat[758] : [+] Found encrypted data at address 00004000 of length 540672 bytes - type 1.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /private/var/mobile/Containers/Bundle/Application/498110C9-F3F9-4086-9C88-E448C42DD70C/WeChat.app/Frameworks/MMCommon.framework/MMCommon for reading.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Reading header
Aug 21 22:19:54 mih30 WeChat[758] : [+] Detecting header type
Aug 21 22:19:54 mih30 WeChat[758] : [+] Executable is a FAT image - searching for right architecture
Aug 21 22:19:54 mih30 WeChat[758] : [+] Correct arch is at offset 786432 in the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/MMCommon.decrypted for writing.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Copying the not encrypted start of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Dumping the decrypted data into the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Copying the not encrypted remainder of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset c0bc8
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing original file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Closing dump file
Aug 21 22:19:54 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:54 mih30 WeChat[758] : [+] offset to cryptid found: @0x104198a88(from 0x104198000) = a88
Aug 21 22:19:54 mih30 WeChat[758] : [+] Found encrypted data at address 00004000 of length 4046848 bytes - type 1.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /private/var/mobile/Containers/Bundle/Application/498110C9-F3F9-4086-9C88-E448C42DD70C/WeChat.app/Frameworks/MultiMedia.framework/MultiMedia for reading.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Reading header
Aug 21 22:19:54 mih30 WeChat[758] : [+] Detecting header type
Aug 21 22:19:54 mih30 WeChat[758] : [+] Executable is a FAT image - searching for right architecture
Aug 21 22:19:54 mih30 WeChat[758] : [+] Correct arch is at offset 5046272 in the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Opening /var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/MultiMedia.decrypted for writing.
Aug 21 22:19:54 mih30 WeChat[758] : [+] Copying the not encrypted start of the file
Aug 21 22:19:54 mih30 WeChat[758] : [+] Dumping the decrypted data into the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Copying the not encrypted remainder of the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset 4d0a88
Aug 21 22:19:55 mih30 WeChat[758] : [+] Closing original file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Closing dump file
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [+] offset to cryptid found: @0x1048b8b20(from 0x1048b8000) = b20
Aug 21 22:19:55 mih30 WeChat[758] : [+] Found encrypted data at address 00004000 of length 4587520 bytes - type 1.
Aug 21 22:19:55 mih30 WeChat[758] : [+] Opening /private/var/mobile/Containers/Bundle/Application/498110C9-F3F9-4086-9C88-E448C42DD70C/WeChat.app/Frameworks/mars.framework/mars for reading.
Aug 21 22:19:55 mih30 WeChat[758] : [+] Reading header
Aug 21 22:19:55 mih30 WeChat[758] : [+] Detecting header type
Aug 21 22:19:55 mih30 WeChat[758] : [+] Executable is a FAT image - searching for right architecture
Aug 21 22:19:55 mih30 WeChat[758] : [+] Correct arch is at offset 6373376 in the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Opening /var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/mars.decrypted for writing.
Aug 21 22:19:55 mih30 WeChat[758] : [+] Copying the not encrypted start of the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Dumping the decrypted data into the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Copying the not encrypted remainder of the file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Setting the LC_ENCRYPTION_INFO->cryptid to 0 at offset 614b20
Aug 21 22:19:55 mih30 WeChat[758] : [+] Closing original file
Aug 21 22:19:55 mih30 WeChat[758] : [+] Closing dump file
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:55 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:55 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : [+] detected 64bit ARM binary in memory.
Aug 21 22:19:56 mih30 WeChat[758] : [-] This mach-o file is not encrypted. Nothing was decrypted.
Aug 21 22:19:56 mih30 WeChat[758] : CGContextSaveGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.
Aug 21 22:19:56 mih30 WeChat[758] : CGContextTranslateCTM: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.
Aug 21 22:19:56 mih30 WeChat[758] : CGContextRestoreGState: invalid context 0x0. If you want to see the backtrace, please set CG_CONTEXT_SHOW_BACKTRACE environmental variable.
Aug 21 22:19:56 mih30 WeChat[758] : *** -[NSKeyedUnarchiver initForReadingWithData:]: data is empty; did you forget to send -finishEncoding to the NSKeyedArchiver?
Aug 21 22:19:56 mih30 WeChat[758] : *** -[NSKeyedUnarchiver initForReadingWithData:]: data is empty; did you forget to send -finishEncoding to the NSKeyedArchiver?

AloneMonkey · 2017 年8 月 22 日 02:21

/var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/WeChat.decrypted

/var/mobile/Containers/Data/Application/81D7AEBD-4401-4B3F-AD06-3F45A6B19789/Documents/WCDB.decrypted

？？？

everettjf · 2017 年8 月 22 日 03:14

看来庆神需要再开发个更简单易用的。

AloneMonkey · 2017 年8 月 22 日 05:37

哈哈，我并不会逆向，只想去阿里

mih30 · 2017 年8 月 22 日 07:00

不想去腾讯吗？

AloneMonkey · 2017 年8 月 22 日 07:01

哈哈，我并不会逆向，只想去腾讯

mih30 · 2017 年8 月 22 日 07:02

如果是真的，简历给我

AloneMonkey · 2017 年8 月 22 日 07:16

萌新瑟瑟发抖

everettjf · 2017 年8 月 24 日 14:52

膜，腾讯大神的邀请

Ouroboros · 2017 年8 月 24 日 14:54

我也想去微信

a906335708 · 2018 年5 月 4 日 01:48

请问解决了么，我用Clutch砸壳也是失败，我这问题是：mac终端直接断开了与手机的连接
Failed to dump framework (null)
Failed to dump with arch armv7
…
Connection to 10.0.0.8 closed by remote host.
Connection to 10.0.0.8 closed.