| Author | Message | ||
     dev117 Username: dev117 Registered: N/A |
Hey guys, I'm trying to combine two .img files that were each a part of the same big partition (1.5 TB). Does WinHex /XWays have a feature for combining split images? Thanks in advance! | ||
| Alfons Kramer Username: admin3 Registered: 4-2004 |
The best way in this case is to make use of the raw image naming convention: base-name.nnn where nnn is the segment number. So if you have an RAW Image consisting of two segments you have two files test.001 and test.002. If you load test.001, the second segment will be loaded as well. After proper renaming you will be able to reimage it without segmentation. Note that this will only work for images in the raw format (1 to 1 sector copy). | ||
| dev117 Username: dev117 Registered: N/A |
I don't want to image the two to a new file, I just want to combine them and treat them as a virtual disk as I only need one file from this and it would waste a lot of time imaging them both. Is there a way to do this? | ||
| W. Spiegl Username: ws Registered: N/A |
the simplest solution will be the good old copy command in DOS / Windows console mode, see: http://www.computerhope.com/copyhlp.htm As it will not work at the first trial (and don't forget the file size restrictions of fat16/32!!!) you should test this with two small files first - and keep a backup for emergency cases. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
Of course WinHex and X-Ways Forensics support split raw images. Alfons Kramer gave you the correct instructions already. Rename the raw image segments as described and add the first segment to a case or open and interpret it. Then (provided that the image is an image of a partition that is formatted with a file system supported by WinHex/X-Ways Forensics) you can copy the one file you are looking for off the image. Simply ignore the sentence about reimaging if you don't need a single big image. |