Autopsy 64 bits package for Windows comes with 32 bits PhotoRec

[mfrade]

Problem: Autopsy 64 bits for Windows (at least in versions 4.9 and 4.10) comes bundled with the 32 bits version of PhotoRec:

• go to c:\Program Files\Autopsy-4.10.0\autopsy\photorec_exec\
• execute "photorec_win.exe"
• check the windows task manager and it shows that PhotoRec is running in 32 bits mode This means PhotoRec is limited to 4 GB of RAM and that can slow down its execution. The Linux version of Autopsy is not affected because PhotoRec will installed from the distribution repositories.

Temporary fix: after installation of Autopsy, on Windows, replace the PhotoRec the files in the photorec_exec dir by the latest 64 bits version of PhotoRec

Desired fix: in future Autopsy 64 bits packages, bundle the 64 bits version of PhotoRec

[Baricanac]

I have installed Autopsy 4.14.0 and have confirmed the following:

• photorec_win (PhotoRec 7.0 CMD, runs as 32-bit);
• qphotorec_win (PhotoRec 7.0 GUI, runs as 32-bit);
• testdisk_win (TestDisk 7.0 CMD, runs as 32-bit).

These executables can be found at; "C:\Program Files\Autopsy-4.14.0\autopsy\photorec_exec". How come this issue has still not been addressed properly?

[Baricanac]

I would also like to notify that TestDisk & PhotoRec 7.1 (July 7, 2019) has been released during last summer and that there is a Beta:TestDisk & PhotoRec 7.2-WIP.

[mfrade]

This issue is still present on Autopsy 4.14. I also would like to add that in my tests photorec 32 bits is about 40% slower than photorec 64 bits -- that's a huge difference!

[Baricanac]

I have installed Autopsy 4.15.0 and have confirmed the following:

• photorec_win (PhotoRec 7.0 CMD, runs as 32-bit);
• qphotorec_win (PhotoRec 7.0 GUI, runs as 32-bit);
• testdisk_win (TestDisk 7.0 CMD, runs as 32-bit).

These executables can be found at; "C:\Program Files\Autopsy-4.15.0\autopsy\photorec_exec".

[Baricanac]

According to the new changelog of Autopsy 4.16.0;

Ingest Modules:

• Updated PhotoRec 7.1 and included 64-bit version.

I haven't confirmed this though.

[markmckinnon]

64 bit photorec is shipped with the current release of Autopsy. Close as completed.