WinEDB_Browser

[Update]

• Small correction

MD5: 0F3FF5A4279F41EDF3B6155764193ADB
SHA256: 7BB39EC66E70B3B307AAFC25E72A2C5A24F53DAA4DFE168B6E7E93A4B7BE6AFE

WinEDB_Browser

[Update]

• If the selected dB file is corrupted (eg dirty shutdown), esentutl will be run in the background against the Temp Copy
  of the original source dB, as follows:
  • esentutl.exe /p e:\Temp\l5y55mv5.fyu /g /o (Runs integrity check before repairing)
    
    
  • esentutl.exe /d e:\Temp\l5y55mv5.fyu /o (defragments the dB)
  • Processing will resume if the temp copy of the original source dB was repaired successfully.

MD5: DB433DF672DA4542704A060752FAF3F8
SHA256: B93040DC8C9BFDD36B2957C473BD08B15E204B2351DCD74B72865700EA7E0D21

WinEDB_Browser

[Update]

• Minor changes

MD5: 522B7AD7398089DF12FADC1FCCD0E067
SHA256: 66AD9F6DDA753E1B740068C93FBA580CEA06D89E3CDDEA01C4987A5BCBC930D6

WinEDB_Browser

[Update]

• Added Conversion of the 'System_FileAttributes' column's UInt32 value to Attribute Flag Names, using the following table:

  Hex	Decimal	Description
  '0x00000001'	'1'	ReadOnly
  '0x00000002'	'2'	Hidden
  '0x00000004'	'4'	System
  '0x00000010'	'16'	Directory
  '0x00000020'	'32'	Archive
  '0x00000040'	'64'	Device
  '0x00000080'	'128'	Normal
  '0x00000100'	'256'	Temporary
  '0x00000200'	'512'	Sparse_File
  '0x00000400'	'1024'	Reparse_Point
  '0x00000800'	'2048'	Compressed
  '0x00001000'	'4096'	Offline
  '0x00002000'	'8192'	Not_Content_Indexed
  '0x00004000'	'16384'	Encrypted
  '0x00008000'	'32768'	Integrity Stream
  '0x00010000'	'65536'	Virtual
  '0x00020000'	'131072'	No_Scrub_Data
  '0x00040000'	'262144'	Recall_On_Open
  '0x00400000'	'4194304'	Recall_On_DataAccess

MD5: 15102519C1BE94CA0F39CCF61F0FFD15
SHA256: 807794F08F0F2EDB6FB034292959647D933194D67EA2CD0C135BDFD90EE123A9

WinEDB_Browser

[Update]

• Changed the CSV output of the 'SystemIndex_PropertyStore' table:
  • Split per 'System_Search_Store'
    • Split per 'System_ItemType'
• Corrected mapi16 CSV output

MD5: 044266C64CB4303AE2F3C747DB837974
SHA256: 8016DC1F029563A00E1CDAEB80E1514AEF1B3876695504D3890B430A878FE356

WinEDB_Browser

Happy 2023 🥳

[Update]

• Changed the CSV output of the 'SystemIndex_PropertyStore' table:
  • Split per 'System_Search_Store'
    • Split per 'System_ItemType'
• Since 'Export-CSV' is totally useless in adding mismatched data to CSVs, it now creates a blank CSV with all the headers before populating the Data by:

$Headers = [System.Collections.ArrayList]@{ }
$RowRecords.ForEach{ $_.psobject.properties.Name.foreach{ if (!$Headers.Contains($_)) { $null = $Headers.Add($_) } } }
$Headers.Sort()
# Create a blank CSV with only headers
$Headers -join '|' | Add-Content -Path $rPath

MD5: 1150BA5B73BFDA0F20623B15D6EB3F2A
SHA256: BF9FC1B3B86B07E8485D38C30F05AE0B394742688E48D6612C210E42FEF92F0F

WinEDB_Browser

Happy 2023 🥳

[Update]

• Changed the CSV output of the 'SystemIndex_PropertyStore' table:
  • Split per 'System_Search_Store'
    • Split per 'System_ItemType'
• and at the same time fixed a minor error (A 'break' out of place resulting in not all the columns being read in the table above)

MD5: 2A06204258868C201C4A028FE99D06F2
SHA256: F5673CFFD4FD3767BCF7547175523D5F6F868F073C9FEAE8860FEBF89760B301

WinEDB_Browser

[Update]

• Some small changes to speed up reading the records
• You may still have to wait if loading a huge EDB

MD5: F9A6A0304D15416289F448C624C26697
SHA256: 0A7E601183430B1CBEC20CDCBC92B08FA4FC926A7F67D412EEFD0F2127F304C8

WinEDB_Browser

[Update]

• faster execution by some loop management

MD5: 9F1EB29F7A41787C819AAF15F9F3A483
SHA256: ACEC75809EB63DB12FBB79CD65437E07A6AD22F12E405CEA412AE1146C93E714

WinEDB_Browser

[Updates]

• Added Search by ThumbnailCacheID:

  

• Added separate CSV output per search store type (file, iehistory, MAPI, winrt etc)

• Added ESE system tables to the CSV output:

  • MSysObjects
  • MSysObjectsShadow
  • MSysObjids
  • MSysLocales

• Added the dB Schema (tables, columns, indexes) from 'MSysObjects' to the Tree eg:
  

• Some minor bug fixes

• Code re-organization & enhancements

MD5: 46B412D3C4FBC201C99271736E6503FF
SHA256: 5518C4E22B4669259EE5476789D6A012F353569C03CE18BB6CCDD1D41A925FB8