.aud files wechat a...
 
Notifications
Clear all

.aud files wechat and whatsapp

10 Posts
7 Users
0 Reactions
2,337 Views
(@gnudun)
Posts: 3
New Member
Topic starter
 

Hi everybody! This is my first post.

Few months ago with few other guys, I started writing open source tools to extract and analyse mobile forensics artefacts for the linux distribution DEFT.
When developing the tools for wechat and whatsapp we came across .aud files. These files are used to record voice chat messages.

I've been googling a lot to find a way to open .aud files but I just came across pages discussing about Westwood's games audio files, audacity files and other "fake" free converters and players. In the end I couldn't find a solution.

Do you know how to open these files and which codec are they using? Any professional tool that can do that?

Thank you for your replies.

Ps.

If you need anymore information or a sample file, I can easily send it to you.

Thank you

 
Posted : 19/06/2013 5:16 am
(@cbforensics)
Posts: 2
New Member
 

Hi there.

I am having the same problem. I have noticed that XRY has pulled out some files from the WeChat application and the *.aud files are there - where you can play or export.

I cannot seem to find a player for that particular file type.

Can anybody please direct me to where I may find a solution.

Thanks

Colin

 
Posted : 11/09/2013 12:23 pm
(@gnudun)
Posts: 3
New Member
Topic starter
 

Hi man,

I forgot to reply to this topic.
The files are in the AMR format but they miss the header. That's why we cannot play them. So the only thing you have to do is adding the header to your files and optionally convert them to a better format.
Please find attached the AMR header. https://dl.dropboxusercontent.com/u/5160930/arm_header.bin

Hex ASCII

23 21 41 4D 52 0A #!AMR

I'm also writing a python script that extracts the wechat db and adds the header to the aud files and then convert them to wav + few other features. It is almost ready and if you want to try it, please send me a PM.

Ah,
I have to thank my friend Alessandro Musarra for finding the solution to this puzzle for me. Thanks Alessandro.

 
Posted : 11/09/2013 5:55 pm
(@cbforensics)
Posts: 2
New Member
 

PM Sent.

Happy to test the product and give feedback.

Thanks so much

Colin

 
Posted : 12/09/2013 3:07 am
(@gnudun)
Posts: 3
New Member
Topic starter
 

Hi Guys,

I finally managed to write a python tool to convert aud files to wav. This is not the tool to extract wechat databases. I'm still working on it.
Feel free to download a copy of the tool and tell me what you think.

http//sourceforge.net/projects/audfilesconverter/files/aud%20converter/aud%20converter_0.1.zip/download

Ciao

 
Posted : 10/11/2013 6:49 am
(@deamt)
Posts: 1
New Member
 

Hi Guys,

I finally managed to write a python tool to convert aud files to wav. This is not the tool to extract wechat databases. I'm still working on it.
Feel free to download a copy of the tool and tell me what you think.

http//sourceforge.net/projects/audfilesconverter/files/aud%20converter/aud%20converter_0.1.zip/download

Ciao

Hello Guys,
i found a little mistake on the conversion. The right sequence is this one

2321 414D 520A 9117

That is after the #!AMR you need to insert also the 9117 in hex format. If you have also additional chars, just add 0000 and that's it.
So basically, the procedure should be this one
1. Open the AUD file with an editor like PsPad (which shows you the hex code)
2. At the beginnin, just paste as unicode the #!AMR
3. Modify the hex as above and additional chars with 0000
4. Save the file and change extendion to amr
5. Convert the file in any format you prefer
6. Listen…

Ciao

 
Posted : 01/12/2013 8:41 pm
(@akin81)
Posts: 3
New Member
 

Another method to put back the header to your .aud files

Windows user
1. Create a header.txt file with just the content #!AMR2. Create a .bat batch files with the content for /f %%f in ('dir /b *.aud') do copy header.txt/b + %%f/b %%~nf.amr3. Put the txt file and batch files in the same directory with your .aud files
4. Open cmd, go to the directory and
5. Run the batch file…

You can even skip step 2. Just create the txt file in your .aud directory, and run the code in command line

 
Posted : 02/12/2013 3:13 pm
(@tj010970)
Posts: 1
New Member
 

Can you describe step by step how one can play .AUD WeChat files in Windows 7 environment? Greatly appreciate it.

TJ

 
Posted : 07/07/2014 3:56 am
(@michaelgraynz)
Posts: 1
New Member
 

It might be necessary to install the correct audio codecs before you can listen.
We have recently had an experience where we changed the header information but could still not listen to the audio files with VLC.

This article http//forensenellanebbia.blogspot.com.au/2015/12/wechat-script-to-convert-and-play-aud.html was greatly helpful in resolving our issues.

We were able to successfully install LIBAV and then successfully play/convert the audio files to WAV.

 
Posted : 02/02/2016 7:14 am
(@gorvq7222)
Posts: 230
Reputable Member
 

You guys could take a look at my blog to see how to do with WeChat .aud and .amr.
http//www.cnblogs.com/pieces0310/p/4470857.html

In brief, use silk player or delete the first byte of AUD file and use silk decoder
https://github.com/gaozehua/SILKCodec

 
Posted : 03/02/2016 6:08 am
Share: