WinHex 19.9 SR1 + Repack / 20.1 SR 1 - портативная версия

Справка А.Асябрика Winhex_rus.chm Ссылка Winhex_rus. Умерла

• Type: Install | Portable
• System: x86 | x64
• Languages: English
• Activation: Neviens
• Removed: Nothing
• Extras:
? x64 Addon Integrated
? Manual
? • Plugin: MPlayer 2018 x64
• Plugin: Outside In Viewer v8.5.4
• Manual
• Special Forensic Version of WinHex

* Fixed outdated category pop-up menu statistics in certain situations.

* Prevented instability caused by certain corrupted WofCompressed files.

* Fixed an error in zlib deflate conversion for larger amounts of data.

* Some more devices supported by BYOD.

* Several minor improvements.

Чтобы видеть скрытый текст, вам надо зарегистрироваться, набрать 5 комментариев, подробности в разделе ЧАВО-РЕЙТИНГ

Видите? incomplete list! В программе масса недоделок..

* Ability to open certain fragmented files in APFS that could not be opened previously (that were just presented with no contents available or lead to further errors).

* Some extended attributes in APFS are now shown as information in the Metadata column, if suitable, others not at all, depending on the same volume snapshot settings as previously just for HFS+.

* Prevented unnecessary output of messages and further fixed the new "Convert RTF e-mail bodies to plain UTF-8" option.

* Fixed an exception error that could occur when overriding the detected sector size of raw images.

* Fixed inability to correctly embed multiple attached e-mail messages with file attachments in certain single parent .eml files for the Recover/Copy command or the case report.

* Fixed incomplete HTML representation of $UsnJrnl:$J.

* Fixed extraction of e-mails from MBOX e-mail archives in v19.6 without .eml extension in the name.

* Fixed a rare error where certain attachment names in a original .eml files and a few other formats could be truncated if encoded in Quoted Printable.

* If a logical search was run in encrypted/protected PDF documents with the crash-safe decoding option without having checked for encryption prior to that, the search would have been unsuccessful even if the right password was provided. That was fixed.

Что-то архив не распаковывается, пишет ошибка. Прошлые версии распаковываются. Проверьте пожалуйста.

* Fixed a potential source of instability when populating the gallery with multiple threads in the x64 edition.
* Fixed inability to open files in certain GZ archives more than once while the evidence object is open.
* Fixed a rare exception error that could occur at the beginning the "examining files" phase of volume snapshot refinement in Ext* file systems.
* Fixed an error that could prevent storage of performance enhancing image metadata in some rare configurations.
* Fixed an error in carving of TIFF files.
* Fixed a problem with white text on white background in the directory browser that could occur when using conditional cell coloring.
* For some columns the FlexFilters never returned a result. That was fixed.
* When naming recovered/copied files after a selected column, the extension of the current filename in the volume snapshot is now no longer appended to the alternative name.
* Several minor improvements.

* No longer loads incompatible parts of .settings files from v19.5.

* No longer uses uncovered thumbnails with type status "not confirmed" as auxiliary thumbnails in the gallery.

* Automatically changes the "Store .e01 metadata for fast re-open" option from fully to half selected if it is detected that the storage device or volume containing the image is write-protected.

* Fixed a problem detecting the size of evidence objects that are files or directories.

* Ability to add multiple single files that are located in the same directory to the same case as evidence objects. Previous versions cannot open cases with single-file evidence objects that were saved by v19.6 SR-2.

* Ability to process certain Windows thumbcaches with an unusual signature variant.

* When viewing pictures with the internal graphics viewing library, the generated windows are now guaranteed to be in the foreground, even if the gallery has been decoupled from the data window.

* Securely wiping selected files failed with an error message on logical drive letters. That was fixed. (It worked fine when applied to the physical disk's partition instead.)

* Proper identification of SQLite database subtype in some rare cases where this did not happen previously.

* Fixed an exception error that could occur when saving the case with a new name if the case root window was open.

* Ability to decrypt files in certain file archives that could not be decrypted previously.

* Some minor improvements.

Ко подскажет как ее русифицировать? Где в настройках найти изменить язык?

"The whole words only option of the Simultaneous Search works with a user-defined alphabet of characters of which words are composed, in order to identify what a word is and where its boundaries are. In previous versions, only an alphabet of characters from the Latin 1 code page was supported (for all Western European languages). Now an additional alphabet can be defined for letters of certain other languages. If activated, it is used for searches in UTF-16 and searches in regional ANSI/OEM/IBM/ISO/Mac code pages with only 1 byte character such as for Cyrillic, Greek, Turkish, Arabic, Hebrew, Vietnamese, and various Central/Eastern/South Eastern European languages. The Cyrillic alphabet is predefined. "

* The case directory is the directory that has the same name as the .xfc case filename just without the extension. It is a subdirectory of the cases directory. There is now special support for the case directory as an image storage location. If images are moved to the case directory first and then added to the case or if the path of an existing image in the case is changed to that in the case directory with the "Replace with New Image" command, these images will be referenced internally without path, and thus the image can always be found instantly even if the case is moved to a different directory or if the drive letter changes. A case that has all images in its own directory can be considered fully self-contained. References to images in the case directory without path are understood by v19.0 SR-14, v19.1 SR-7, and v19.2.

* More metadata presented for JPEG files in Details mode.

* Changing the display time zone for an evidence object that is a partitioned, physical disk now automatically also changes the display time zone for all its partitions (dependent evidence objects).

* GPT partition names are now shown in the Name column as alternative names and should be helpful when examining Android phone images containing large numbers of partitions, revealing their respective functions.

* Indexing is now permitted as a sub-operation of a volume snapshot refinement run with multiple threads, though it is not further parallelized itself when multiple refinement threads are active.

* Updated file mask for uncovering embedded data.

* In replace mode for report table associations, the currently associated report tables are now automatically preselected, so that it's less work and less error-prone to remove or add one report table specifically.

* User manual and program help updated for v19.2.

Это не X-Ways WinHex, это X-Ways Forensics.

Не подскажете, где взять 18.4 x64?

В сообщении #190 ключ рабочий.
Спасиб

В сообщении #190 ключ рабочий.
Спасибо.

* Fixed an exception error that could occur in v18.8 when uncovering embedded data in P7M and VCF files.

* The file header signature search option "Output as child objects of existing files if suitable" did not work correctly. It did not check the surroundings of carved files thoroughly enough and occasionally made wrong decisions about whether to present newly added files as child objects. That was fixed.

* Fixed an error in Quoted Printed decoding.

* X-Tension API: In all releases from today, ProcessItem[Ex] is also called for virtual files such as "Free space" as part of volume snapshot refinement although these files are otherwise largely ignored by that operation.

Additional changes:

* Ext journal parsing has been optimized. The result now looks better if the option is half checked, and that is the new default. Rare problems with a full selection of this option should not longer occur.

* Quoted printable is now decoded in the alternative .eml preview/presentation.

* Fixed an exception error that could occur when extracting metadata from certain .eml files with malformed quoted printable encoding.

* Improved processing of certain corrupt file archives.

* Italian translation of the user interface updated.

* Program help and user manual updated for v18.8.

Ключ не рабочий.

* Fixed blank Owner column in v18.7 for NTFS file systems.

* Fixed inability of 18.7 to maximize the detached lower half of a data window in most modes.

* Edit box histories now accessible additionally by scrolling with the mouse wheel and by pressing the Down cursor key.

* Fixed bad quality carving of NTFS-compressed files in recent versions.

* Improved interaction with MPlayer.

* Some minor issues resolved.

Рабочий ключ

Additional changes:

* Prevents overlapping hits in directory browser cell text when searching with variable-size GREP expressions.

* Program help and user manual updated for v18.7.

Additional changes:

* Prevents overlapping hits in directory browser cell text when searching with variable-size GREP expressions.

* Program help and user manual updated for v18.7.