WinHex 13.5

WinHex is a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards. Features include template editing, drive cloning and imaging, encryption. It allows to concatenate, split, unify, analyze, convert, and compare files. Flexible search and replace functions are included, also a data interpreter and a sophisticated undo and backup mechanism. The disk editor supports FAT12, FAT16, FAT32, NTFS, CDFS, UDF, Ext2, Ext3, and Reiser volumes as well as physical disks. The RAM editor can prove particularly useful for debugging purposes.

Latest Changes:

  • When searching for keywords and you are not interested in each and every search hit, but merely in a list of files that contain at least one the specified keywords, the logical search now allows you to accelerate the process with the new "one hit per file
  • Performance improved for searches with hundreds of search terms at the same time
  • After creating a search index (unless distributed indexing is enabled), X-Ways Forensics now automatically starts an optional optimization step, which you can safely abort at any
  • Time if you wish to continue using the program (i.e. for an index search)
  • Adding files to an evidence file container with their complete path is now optional. That means, if you select the directory "Vacation2006" for inclusion in the container without
  • Its complete path, then the target path will be \Vacation2006, no matter whether it originally was \Vacation2006 or \Pictures \Vacation2006 or \My Files\Pictures\Vacation2006
  • Ability to conveniently select from a drop down box whether to add the slack of selected files to an evidence file container
  • The new dialog window that allows to add files to an evidence file container now confirms the indirect filling method if enabled
  • Newly created container files now get the extension .ctr, so that they can be better distinguished from conventional image files
  • The parity delay in HP/Compaq RAID 5 assembly is now variable
  • Compatibility with certain exotic NTFS volumes. (still testing)
  • When imaging media, a log about the operation is now created as a text file and automatically opened after completion so that it can be viewed and printed (forensic licenses only)
  • The gallery did not work correctly for pictures in evidence file containers in a recursive view in the global case root window - fixed
  • Error fixed that in v13.2 through v13.4 under certain circumstances caused the logical search not to turn up any search results at all
  • Error fixed that when deleting a report table may have caused X-Ways Forensics to lose unrelated report table associations


Опубликовал admin
31 Окт, Вторник 2006г.



Программирование для чайников.