Hello trid users,
some days ago i run TrID on hundreds of Windows Error Reports (*.wer). Many
files are misidentified as "Unknown!" instead "Windows Error Report" by
wer.trid.xml ( See output/trid-old.txt).
So i refine trid definition file by running tridscan on undetected examples.
What has changed. Not Surprisingly on a non english Window system with
programs in non English languages in global string section sentences like
"CLOSE THE PROGRAM" vanish. And also often appearing words like "MICROSOFT",
".EXE" or "WINDOWS" do not occur in all report files.
On Wikipedia page there exist a page about Windows Error Reporting, but
unfortunately the information there gives no relations to generated WER text
files. Because normally user just want to know what is this file type used
for and can i delete such files. So i add link to nirsoft utility AppCrashView,
that is a nice viewer for Windows Error report files and has the opportunity
to delete such WER files by reference URL:
<RefURL>
https://www.nirsoft.net/utils/app_crash_view.html</RefURL>
With new trid definition all such Windows Error Report are now recognized (
see appended output/trid-new.txt). TrID definition and output are stored in
archive wer.zip. I hope that the updated XML file can be used in future
version of triddefs.
With best wishes
J?rg Jenderek
