WinHex 14.3 SR-6

Download Now

Version: SR-6, Size: 1.24 MB Report Broken
User Rating:, License: Shareware

WinHex 14.3 SR-6 description
A computer Forensics &. Data Recovery Software, Hex Editor &. Disk Editor

WinHexis in its core a universal hexadecimal editor, particularly helpful inthe realm of computer forensics, data recovery, low-level dataprocessing, and IT security. An advanced tool for everyday andemergency use: inspect and edit all kinds of files, recover deletedfiles or lost data from hard drives with corrupt file systems or fromdigital camera cards.

Here are some key features of "WinHex":

Drive cloning, drive imaging
to produce exact duplicates of disks/drives, e.g. to save the time fora full installation of the operating system and other software forseveral computers/disks of the same type, or to be able to restore arunning installation in case of data loss/screwed up Windows(restoration of a backup). Also for computer forensics specialists,since they need to work on a copy when searching for evidence on theobject disk. You can clone directly, or from an image file. Menu: Tools| Disk Tools | Clone Disk

RAM editor
e.g. for debugging purposes (programming), for examining/manipulatingany running program and in particular computer games (cheating). Tools| RAM Editor

Analyzing files
e.g. to determine the type of data recovered as lost cluster chains by ScanDisk or chkdsk. Examples. Tools | Analyze File

Wiping confidential files or disks
...so no one (not even computer forensics specialists) will be able toretrieve them. To securely erase a file, use File Manager | DeleteIrreversibly. For disk wiping, open the disk with the disk editor anduse Edit | Fill Disk Sectors. E.g. fill with zero bytes (hexadecimalvalue 00) or random bytes. WinHex works in accordance with the standardoutlined in DoD 5220.22-M (for details, please see this white paper).Also see X-Ways Security.

Wiping unused space and slack space
...either to close security leaks, to securely destroy previouslyexisting classified files that have been deleted in the traditional wayonly, or to minimize the size of your disk backups (like WinHex backupsor Norton Ghost backups), since initialized space can be compressed99%. On NTFS drives, WinHex will even offer to wipe all currentlyunused $Mft (Master File Table) file records, as they may still containnames and fragments of files previously stored in them. File slack canbe found in the unused end of the last cluster allocated to a file,which usually contains traces of previously existing files. Slack space- like everything else - is processed by WinHex very fast. Also seeX-Ways Security.

ASCII - EBCDIC conversion
Allows to exchange text between mainframe computers and the PC in bothdirections. You may even tailor the character translation table inWinHex (ebcdic.dat) for your own needs. Edit | Convert

Binary, Hex ASCII, Intel Hex, and Motorola S conversion
z. B. for (E)PROM programmers. Edit | Convert

Unifying and dividing odd and even bytes/words
for (E)PROM programmers. File Manager | Unify/Dissect

Conveniently editing data structure
using custom templates. Download a tutorial. View | Template Manager

Splitting files that do not fit on a disk
File Manager | Split/Concatenate

WinHex as a reconnaissance and learning tool
Are you sure Microsoft Word really discards previous states of yourdocument? You may be surprised to find text deleted long ago in your.doc files. Maybe text that you really do not wish to be seen by theperson you are going to pass the .doc file to? Discover what varioussoftware programs save in their files. Study unknown file formats andlearn how they work. Investigate e.g. how executable files arestructured and how they are loaded in RAM. The possibilities arepractically unlimited.

Finding interesting values (e.g. the number of lives, ammunition, etc.) in saved game files
using the Combined Search or using the File Comparison utility, for later manipulation

Manipulating saved game files
for any computer game, following existing instructions from cheat sites on the Internet or for developing your own cheats.

Upgrading MP3 jukeboxes and Microsoft Xbox with larger hard drive
To upgrade, the new hard disk must be prepared first. This is where youneed WinHex. Instructions for Creative s Nomad MP3 jukebox, DAP jukeboxand Microsoft Xbox. You can also change the name of your Xbox.

Manipulating text
...that one is not supposed to edit, e.g. in binary files. It is notconvenient, but possible to translate practically any software intoanother language by editing text in the executable files, e.g. if thesource code is not available (e.g. lost). Or you would like to edittext in files of a certain binary type that the native application doesnot let you modify. For instance, programmers may find their compilerautomatically creates a configuration file for their project whosefilename (application name + .cfg) conflicts with a file their ownsoftware uses. If your local laws and the license permit that, edit thecompiler s executable file such that it works without problems (e.g.with the filename extension “..cnf”.).

Viewing and manipulating files that usually cannot be edited
because they are protected by Windows (e.g. the swap file, temporaryfiles of the Internet Explorer), using the disk editor. Tools | DiskEditor

Viewing, editing, and repairing system areas
such as the Master Boot Record with its partition table and boot sectors. Tools | Disk Editor | Access button

Hiding data or discovering hidden data
...e.g. behind the supposed end of .jpg files (steganography), or inunused parts of logical drives or physical disks. WinHex specificallysupports access to surplus sectors that are not in use by the operatingsystem because they do not add to an entire cluster or cylinder.

Copy &. Paste
Use copy &. paste or copy &. write (=overwrite) with files,disks, and RAM. You may freely copy from a disk and write the clipboardcontents to a disk, without regard to sector boundaries!

Unlimited Undo
When editing, reverse any of your steps. Only restricted by available disk space. Edit | Undo

Jump back and forward
WinHex keeps a history of your offset jumps, and lets you go back andforward in the chain, like an Internet browser does. Position |Back/Forward

Scripting
Automated file editing using scripts, to accelerate recurring routinetasks or to carry out certain tasks on unattended remote computers. Theability to execute scripts other than the supplied sample scripts islimited to owners of a professional license. Scripts can be run fromthe Start Center or the command line. While a script is executed, youmay press Esc to abort. With its wider range of application, scriptingsupersedes the Routine feature known from previous WinHex versions.Find out more about scripts in the program help.

API (Application Programming Interface)
Professional users may also make good use of WinHex advancedcapabilities in their own programs written in Delphi, C/C++, or VisualBasic. The WinHex API provides a convenient interface for random accessto files and disks (at the sector level). The provided functions aresimilar to the scripting commands. Details

Data recovery
for erroneously deleted files or generally after an experienced loss ofdata. Can be done manually (see undeleting files) or automatically.There is an automatic recovery mode for FAT12, FAT16, FAT32, and NTFSdrives called “.File Recovery by Name”. that simply requires you tospecify one or more file masks (like *.gif, John*.doc, etc.). WinHexwill do the rest. Via the Access button menu, a recovery mechanism isavailable for FAT drives which re-creates entire nested directorystructures (details here). Another mechanism (“.File Recovery by Type”.,formerly “.file retrieval”.) can be used on any file system and recoversall files of a certain type at a time. Supported file types: jpg, png,gif, tif, bmp, dwg, psd, rtf, xml, html, eml, dbx, xls/doc, mdb, wpd,eps/ps, pdf, qdf, pwl, zip, rar, wav, avi, ram, rm, mpg, mpg, mov, asf,mid. In particular owners of digital cameras quite often encounterproblems with their media. WinHex is likely to help with this automatedfunction that makes good use of the existence of file headers(characteristic signatures at the beginning of a file). Tools | DiskTools | File Retrieval

Computer examination/forensics
WinHex is an invaluable tool in the hands of computer investigativespecialists in private enterprise and law enforcement. Details

Trusted download (a security issue)
When transferring unclassified material from a classified hard diskdrive to unclassified media, you need to be certain that a copied filewill have no extraneous information in any cluster or sector “.overhang”.spuriously copied along with the actual file, since this slack spacemay still contain classified data from a time when it was allocated toa different file. The command Tools | Specialist Tools | Copy exactlycopies the file in its current size, no entire sectors or clusters. Notone byte beyond the end of the file will be copied to the destinationdisk. Minimize your IT risks. Requires a specialist license.

128-bit encryption
to make files unreadable by others. Edit | Convert

Checksum/digest calculation
to make sure a file is not corrupt and was not manipulated, or to identify common known files. Tools | Calculate Hash.

Generating pseudo-random data
for various (e.g. scientific simulation) purposes. Edit | Fill File


Limitations:

doesn t save files larger than 200 KB
doesn t write disk sectors, edit virtual memory
evaluation version reminder