|
| WinHex 12.8 SR-1 |
WinHex is a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards.
Features include:
- Disk editor for hard disks, floppy disks, CD-ROM & DVD, ZIP, Smart Media, Compact Flash, ...
- Powerful directory browser for FAT, NTFS, Ext2/3, ReiserFS, CDFS, UDF
- RAM editor, providing access to other processes" virtual memory
- Data interpreter, knowing 20 data types
- Editing data structures using templates (e.g. to repair partition table/boot sector)
- Concatenating and splitting files, unifying and dividing odd and even bytes/words
- Analyzing and comparing files
- Particularly flexible search and replace functions
- Disk cloning, with a specialist license also under DOS
- Drive images & backups (optionally compressed or split into 650 MB archives)
- Programming interface (API) and scripting (professional & specialist licenses only)
- 128-bit encryption, checksums, CRC32, hashes (MD5, SHA-1, ...)
- Erase (wipe) confidential files securely, hard drive cleansing to protect your privacy
- Import all clipboard formats, incl. ASCII hex values
- Convert between binary, hex ASCII, Intel Hex, and Motorola S
- Character sets: ANSI ASCII, IBM ASCII, EBCDIC, (Unicode)
- Instant window switching. Printing. Random-number generator.
- Supports files >4 GB. Very fast. Easy to use.
& more
All Features
What"s New in version v12.8:
* Support for the HFS file system.
* WinHex can now often display the context of search hits for which no physical offset is known (e.g. because the hit is in an NTFS-compressed file).
* The internal ID that files and directories have in the internal volume snapshot can now be seen in an optional column in the directory browser. Sorting by that internal ID can help you easily identifying those files that have been added last to a volume snapshot when you use Specialist | Refine Volume Snapshot.
* While it is not possible to remove files or directories from an evidence file container, you can now belatedly suppress items (e.g. if they were added accidentally). This is how: Open the container and interpret it like a regular image file, hide the items, and then deactivate them with the Specialist | Evidence File Container menu. Unlike hiding, this is a permanent change in the container. Again, this operation does not physically remove items from a container.
* The volume slack (an area on a partition that was formerly called logical surplus sectors in WinHex) is now easily viewable and searchable in newly created volume snapshots as another fictitious file in the root directory.
* On NTFS volumes, the MFT"s bitmap is now easily viewable in newly created volume snapshots as another system file stream in the root directory. In that bitmap you can see which FILE records are marked as in use and which ones are unused.
* Improvements in UFS file system support.
* Support for NTFS volumes with extreme $MFT fragmentation improved.
* The mouse wheel now generally scrolls in the window that the mouse cursor currently hovers over, not the window that is active (i.e. has the input focus). The mouse wheel now also works in templates.
* Statistics on total number of items and number of tagged and hidden items in a volume snapshot, available in the Refine Volume Snapshot dialog window. Ability to hide all tagged files on a volume with a single command in the directory browser context menu, in addition to "Hide all untagged items".
* Fictitious items are now counted as files or directories in the directory browser header line.
* Free space and slack space are now highlighted in two different colors.
* Several other minor improvements.
* The Create Drive Contents Table command has been removed from the menu, but before it will be fully removed, it is still available via the Shift+F10 keyboard shortcut. The Create Drive Contents Table command has been superseded by the volume snapshot concept in conjunction with dynamic filters.
: 1,08
|
|
| |
|
|
|