* Fixed an infinite loop that could occur when processing nested TAR archives within a corrupt parent archive.
* Prevented a very rare exception error that could occur when loading the file signature table.
* Fixed a display problem with GIF pictures in v19.9.
* Ability to create and fill evidence file containers with WinHex Lab Edition.
* Fixed an exception error that could occur when extracting metadata from certain PNG files.
* The device type filter now also works for PNG.
* New X-Tension API functions XWF_GetWindow() and XWF_GetProp(). New nPropType 50 for XWF_GetEvObjProp().
* Processes zip archives with certain non-standard headers.
* Several other improvements.
* The log-in password has changed for certain users. As always, you can retrieve the current log-in data from 369K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4S2Q4x3X3c8%4j5i4W2K6i4K6u0W2L8X3g2@1i4K6u0r3N6$3W2F1K9r3g2^5i4K6u0r3L8r3W2U0k6h3&6K6k6g2)9J5k6h3S2@1L8h3H3`. within seconds if needed (assuming you have access to updates).
SR-9: * Prevented a rare exception error that could occur when resolving symlinks. * Prevented a very rare exception error that could occur when parsing Zone.Identifier ADS. * A rare error that could occur when reading XFS directories has been fixed. * Ability to process certain MBOX files with unusual line break characters between e-mails. * Fixed inability to read from files in some GZ archives that occurred if these files were opened repeatedly and the evidence object was not closed in between. * Fixed RunCount interpretation of certain Windows 10 Prefetch files.
* Alternative extraction methods are now available for PST/OST/MBOX e-mail archives (still in a testing stage). These methods will be used if the main extraction method fails to extract e-mails or if preferred by the user. There is a new check box for that preference, not labelled but tooltipped. The alternative method for PST/OST does not work with password-protected e-mail archives and cannot find previously existing objects.
* When attaching a directory with external files to an e-mail archive (PST, OST or MBOX), the contents of that directory will be treated like the result of an e-mail extraction performed by the viewer component. That means for example that redundant empty top-level directories like "Top of Personal Folders", "Root - Mailbox", "IPM_SUBTREE" will be skipped and that the MSG files will automatically be split up into to EML files with e-mail headers and bodies plus separate attachment files. Such an extraction can be performed with the context menu commands "Extract Selected Files" and "Extract All Files" in the preview or view of those e-mail archives.
* Support for more code pages in e-mail extraction from MSG.
* The alternative TAR extraction method estimates the size of the MBOX e-mail archive in a Google Takeout TGZ file if the size was erroneously stored as 0, which can apparently happen in real life. Only that allows to extract the MBOX e-mail archive file at all, and once that has happened of course the e-mail messages and attachments can usually be extracted from it.
* Improved ability to extract attachments in PDF files, in particular in so-called PDF portfolios (user-compiled collections of arbitrary files), with the original names and internal paths of the attached/embedded files, where the Description column identifies these files as attachments.
* Recognition of more digital photo generating devices, for example the Samsung Galaxy M31.
* Output of Photoshop "Preserved file name" in the metadata.
* Same fix level as v19.9 SR-11.
* Some minor improvements.
SR-2:
* Can now reliably convert PDF documents with RC4 encryption to not password-protected PDF files with the "Convert to PDF format" option of Recover/Copy if you provide the password in the metadata cell, prepended with "Password: ".
* Improved clipboard format selection dialog when pasting external data.
* More reliable ability to copy text in UTF-16 Unicode from within windows of the viewer component (Preview mode or View command).
* The keyboard shortcuts / and ÷ (different keys, but same function) are now available in the directory browser and in the case tree. They toggle between recursive and normal exploration.
* Ability to extract data from certain GZ archives with a corrupt size field in the footer.
* Fixed: Extended timestamps from the extra field in zip records are now extracted and presented in the timestamp columns based on Apple specifications, which however is not always how these timestamps are meant. (For the more likely correct interpretation, especially in GrayKey collections, check the box for "Zip: alternative ext. timestamp interpretation" in Options | Volume Snapshot, which already worked in the original release of v20.0.)
* Fixed: The Technical Details Report now show details of MacOS X installations on HFS+ or APFS volumes. These details now also become part of the evidence object properties if the volume is added to the case only after a volume snapshot exists.
* Fixed an exception error that could occur under rare circumstances when starting up X-Ways Forensics.
* User manual and program help slightly revised.
* Some minor improvements and fixes.
SR-3:
* Fixed a crash that could occur with the 64-bit executable of SR-2 under certain circumstances when the viewer component was in use.
