WinHex full changelog

File System Support:
Ability to parse the data structures of many APFS volumes to provide a file overview.
Cloned files in APFS, of which only the differences to their originals are stored in their own clusters, are marked with a Greek delta as a capital letter in the Attr. Column.
Support for APFS timestamps in Data Interpreter and Templates ("APFSDateTime").
There is now a thorough file system data structure lookup for exFAT volumes as well.
Protection against a rare form of data corruption in NTFS where FILE records in the $ MFT are misplaced.
The option of processing only one hard link now has an effect even if only selected or marked files are processed.
File format support:
Encrypted documents with a known password can now also be synchronized with the FuzZyDoc hash database.
The "Scan" report table is no longer used to identify PDF documents with scanned content. Instead, for PDF documents identified as being generated by a scanner, "scanner" is now displayed in the device type column.
Extract the mdtacom.apple.quicktime.location.ISO6709 field from iPhone MOV files to the Metadata column.
Identification and file header signature search for MP4s files, a proprietary surveillance video format.
History for Google Chrome now shows the page transition for each webpage visited, making it easier to assess whether the visit was initiated by the user or by some other action, such as a visit to Google Chrome. a page redirect. The duration of each visit is also listed. Internet searches launched from the Chrome address bar are displayed in a separate table and also added to the event list.
Ability to evaluate Google Chrome SNSS session files (current / last session and current / last tabs) in metadata extraction. The resulting session overview shows all open tabs with their respective history.
The previous output in detail mode for .automaticdestinations-ms files will now be displayed in preview mode, as well as for the display command and

File System Support:
Ability to parse the data structures of many APFS volumes to provide a file overview.
Cloned files in APFS, of which only the differences to their originals are stored in their own clusters, are marked with a Greek delta as a capital letter in the Attr. Column.
Support for APFS timestamps in Data Interpreter and Templates ("APFSDateTime").
There is now a thorough file system data structure lookup for exFAT volumes as well.
Protection against a rare form of data corruption in NTFS where FILE records in the $ MFT are misplaced.
The option of processing only one hard link now has an effect even if only selected or marked files are processed.
File format support:
Encrypted documents with a known password can now also be synchronized with the FuzZyDoc hash database.
The "Scan" report table is no longer used to identify PDF documents with scanned content. Instead, for PDF documents identified as being generated by a scanner, "scanner" is now displayed in the device type column.
Extract the mdtacom.apple.quicktime.location.ISO6709 field from iPhone MOV files to the Metadata column.
Identification and file header signature search for MP4s files, a proprietary surveillance video format.
History for Google Chrome now shows the page transition for each webpage visited, making it easier to assess whether the visit was initiated by the user or by some other action, such as a visit to Google Chrome. a page redirect. The duration of each visit is also listed. Internet searches launched from the Chrome address bar are displayed in a separate table and also added to the event list.
Ability to evaluate Google Chrome SNSS session files (current / last session and current / last tabs) in metadata extraction. The resulting session overview shows all open tabs with their respective history.
The previous output in detail mode for .automaticdestinations-ms files will now be displayed in preview mode, as well as for the display command and

File System Support:
Ability to parse the data structures of many APFS volumes to provide a file overview.
Cloned files in APFS, of which only the differences to their originals are stored in their own clusters, are marked with a Greek delta as a capital letter in the Attr. Column.
Support for APFS timestamps in Data Interpreter and Templates ("APFSDateTime").
There is now a thorough file system data structure lookup for exFAT volumes as well.
Protection against a rare form of data corruption in NTFS where FILE records in the $ MFT are misplaced.
The option of processing only one hard link now has an effect even if only selected or marked files are processed.
File format support:
Encrypted documents with a known password can now also be synchronized with the FuzZyDoc hash database.
The "Scan" report table is no longer used to identify PDF documents with scanned content. Instead, for PDF documents identified as being generated by a scanner, "scanner" is now displayed in the device type column.
Extract the mdtacom.apple.quicktime.location.ISO6709 field from iPhone MOV files to the Metadata column.
Identification and file header signature search for MP4s files, a proprietary surveillance video format.
History for Google Chrome now shows the page transition for each webpage visited, making it easier to assess whether the visit was initiated by the user or by some other action, such as a visit to Google Chrome. a page redirect. The duration of each visit is also listed. Internet searches launched from the Chrome address bar are displayed in a separate table and also added to the event list.
Ability to evaluate Google Chrome SNSS session files (current / last session and current / last tabs) in metadata extraction. The resulting session overview shows all open tabs with their respective history.
The previous output in detail mode for .automaticdestinations-ms files will now be displayed in preview mode, as well as for the display command and