Reading get_appleWalletPasses artifact had errors! - 'charmap' codec can't decode byte 0x90 in position 1943: character maps to <undefined> + problem segregating values in report

[BrianMer]

Hi,

I tried to parse an iTunes backup on Windows, and the appleWalletPasses.py module crashes with this error:

Reading get_appleWalletPasses artifact had errors!
Error was 'charmap' codec can't decode byte 0x90 in position 1943: character maps to <undefined>
Exception Traceback: Traceback (most recent call last):
  File "ileapp.py", line 426, in crunch_artifacts
  File "C:\Users\DFIR\AppData\Local\Temp\_MEI94322\scripts\artifacts\appleWalletPasses.py", line 37, in get_appleWalletPasses
    data = json.load(f)
           ^^^^^^^^^^^^
  File "json\__init__.py", line 293, in load
  File "encodings\cp1252.py", line 23, in decode
UnicodeDecodeError: 'charmap' codec can't decode byte 0x90 in position 1943: character maps to <undefined>

I think it is related with the open statement in line 36 where it is missing the encoding parameter (encoding="utf8" seems working).

Also, there is a problem with segregating values in the HTML report, because I found that values that come from a card related to airline are present in a card related to a sporting goods retailer.

I reviewed the code, and I think that we have a problem when multiple cards are present with the same description. Because instead of creating multiple entries in the left bar in the HTML report, it brings all the content to one entry, leading to a messy situation.

If you need anonymized sample values of anything, let me know!

Thanks!