WinHex 15.1
Publisher's Description:
WinHex is a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards. Features include template editing, drive cloning and imaging, encryption. It allows to concatenate, split, unify, analyze, convert, and compare files. Flexible search and replace functions are included, also a data interpreter and a sophisticated undo and backup mechanism. The disk editor supports FAT12, FAT16, FAT32, NTFS, CDFS, UDF, Ext2, Ext3, and Reiser volumes as well as physical disks. The RAM editor can prove particularly useful for debugging purposes.
Latest Changes:
- Ability to detect simple attempts at masking any files of any type as executable files. Such files will not be confirmed as executable files any more. Forensic license only
- Allows to better focus on unusual executable files by assigning them to report tables when they contain unknown segments or an unexpected tail. Forensic license only
- Can better distinguish between various .exe file types including legacy formats, DLLs, fonts, VXDs, and other drivers (see Type column after file type verification). Forensic license only
- Special support for executable files when running the file header signature search. The file size and the precise file type will be detected. The exact file size helps to exclude known irrelevant files with the help of hash databases
- Size detection for very large zip archives during file header signature search. Size detection for 7zip file newly introduced
- It is now possible to automatically associate the parent file and child objects of a selected file with a report table as well
- Files that are child objects of a file (i.e. whose parent is not a directory) are now specially marked in the directory browser with 3 light blue dots in the upper left corner of the icon
- It is now much more convenient to supply lengthy filename lists for use as a filename filter. Multiple filenames or filename masks are no longer concatenated with semicolons, but entered (or pasted from the clipboard!) one per line
- When extracting thumbnails from JPEGs, they are now listed as child objects of the respective JPEG file. Such thumbnails and other generically named embedded pictures are now considered virtual files. Forensic license only
- Attached external files will now always be added as child objects of the selected object, even if you add a single file only, unless you hold the Shift key. It is now also possible to attach external files to a directory. Forensic license only
- Ability to add a selected block as a virtual file (Edit menu) now in File mode, too. In that case it will be added as a child object of the original file. Forensic license only
- Support for viewing the NTFS system file $UsnJrnl, another unique feature. Forensic license only
- Examination of $LogFile as part of thorough file system data structure search on NTFS volumes even more complete now. Forensic license only
- The Interpretation of $LogFile for View command/Preview mode now more complete. It also now shows you the date range coverered (see bottom of Preview/View), so that you can easily determine whether relevant dates are covered by $LogFile at all
- Ability to deal with FAT32 volumes whose main boot sector is corrupt if the backup boot sector is intact. Ability to automatically find lost FAT32 partitions when scanning for lost partitions even if the main boot sector is corrupt
- Ability to deal with extremely large directories in FAT volumes
- Copying files off an image to your own drive or into a container, these actions now internally work slightly differently
- The Recover/Copy command now also optionally allows to output files with overlong paths (more than 260, up to 510 characters, for output path + original path + original Filename)
- A new option labelled "recommendable data reduction" for the logical search and indexing allows to save time by excluding the logical portion of certain files automatically: File archives such as ZIP and RAR whose contents have been included in the volu
- There is now a "NOT" option in the Attributes filter
- There is now a progress indicator for the hashing process when creating a hash set
- Individual filenames for cloning logs based on start time
- Ability to reset selected files in the volume snapshot such that the options in Refine Volume Snapshot would touch them again even if they have been processed before
- Fixed scope inconsistency when running a search from the case root window
- Italian translation updated
- Fixed some errors in the new indexing algorithm of v15.0
- Several minor improvements
- The copy log option no longer noticeably slows down the Recover/Copy command when copying many files. (since v15.0 SR-3)
- Occasional unavailability of the Print command in the context menu fixed. (since v15.0 SR-3)
- Fixed an exception error that could occur when running a file header signature search when in search hit list mode. (since v15.0 SR-3)
- A minimized main window at the end of a search is no longer a problem. (since v15.0 SR-3)
- Fixed an exception error that could occur when imaging RAIDs reconstructed from images. (since v15.0 SR-3)
- Fixed an error in the directory browser that could occur after refining the volume snapshot or after returning from a search hit list. (since v15.0 SR-3)
- Intelligent size detection when carving .tar archives. (since v15.0 SR-4)
- Fixed an error that could interrupt the interpretation of an .e01 evidence file with many segments. (since v15.0 SR-4)
- Files that cause exception errors or crashes during the mass metadata extraction are now reported by the program so that they can be identified, hidden and/or forwarded to us more easily. (since v15.0 SR-5)
- Instability in IE cookie metadata extraction fixed. (since v15.0 SR-7)
- Fixed an exception error that could occur when clicking items in the Position Manager. (since v15.0 SR-5)
- Fixed an exception error that could occur when processing large AOL PFC files. (since v15.0 SR-7)
Screenshot:
Latest User Reviews:
| Reviewer: | agnostic7 | Sep 6, 2008 |
| Version: | 15.1 | |
| |
I don't even know how a customer's nationality has anything to do with a software review but maybe you should try selling your trashware through a nonEnglish-speaking website.
That people want cheaper software is a given.
Anyone wants cheap products.
The price for this buggy software is hefty and has lead to its doom. Plus with opensource everywhere the end of many such projects is inevitable.
Addressing your disdain for the US: good luck
selling your products in other countries.
Oh my bad, nations in the eastern hemisphere lead the world is software piracy so there goes your argument.
Moral: dont bite the hand that feeds you( dont badmouth honest customers ).
Oh, my bad again, you already have.
Hope you have a day job. OSS is the way to go.
|
| Rating: |  |
|
| Reviewer: | Undesired Username | Jul 12, 2008 |
| Version: | 15.0 SR-2 | |
| |
"I can't afford it; therefore, it sucks."
Suddenly I realize why the US is locked into an awful two-party system.
WinHex is very useful but it's a pain to use for data recovery. It's just nowhere near as convenient as utilities like Recuva. (Whether it works better or worse I cannot say.) And I despise selecting a menu item, only to be told that I'm not in the elite crowd who purchased a Specialist license (or higher). If it's not a function available to me, HIDE IT. Or am I still running a demo version, even after I've paid?
|
| Rating: |  |
|
| Reviewer: | Cooledit | Jul 4, 2008 |
| Version: | 15.0 | |
| |
i quite like this
you have good control over hidden entries
made to the hd sectors, that will not go away after i delete the partition, make a new
partition and then do a full format of the drive
entries made by 3dsmax and photoshop (in sector 32)
|
| Rating: |  |
|
| Reviewer: | geronimo13 | Jun 22, 2008 |
| Version: | 15.0 | |
| |
This crapware is overhyped. Stay away from it and
save your money.
|
| Rating: |  |
|
| Reviewer: | gehtnix | Apr 18, 2008 |
| Version: | 14.9 | |
| |
"Hi, please lower the price. it is too much for many of us."
errr...you got any idea what it means to code that
piece of software? if you need a free hexeditor
choose one of the many free tools of that kind.
for all the other features pay for a license, it is
one of the tools that are worth their price. what do
you expect from the author? selling it for 19.95 ยง ?
BTW: it's about 32.- Euri at the moment :-p
|
| Rating: |  |
|
|
| Released: | September 3, 2008 |
| Publisher: | X-Ways Software Technology AG |
| Homepage: | WinHex |
|---|
| Downloads: | 52,791 |
| License: | Shareware; $45.00 to buy |
| OS Support: | Windows 2000/2003/9x/XP |
| Rating: | 3.2/5 (372 votes)
|
|