X-Ways WinHex v17.5 » KinDzaDza
Home | Footage | Sound FX | Tutorials | Музыка | Фильмы | Контакт |
KinDzaDza - It's Other!  

Главная страница » Software » X-Ways WinHex v17.5
Забыли пароль?
Ещё не зарегистрированы?

X-Ways WinHex v17.5
Software | автор: SonyQ (17.02.14)
X-Ways WinHex v17.5

Program Name: WinHex v17.5
Program Type: Hexadecimal editor
Developer: X-Ways Software Technology AG
Homepage: www.winhex.com/winhex/index-m.html
Release Date: 17.02.2014
Interface Language: Multilingual (русский включительно)
Platform: Windows 2000/XP/2003/Vista/7
File Size: 3.6Mb

WinHex - это универсальный шестнадцатеричный редактор, особенно полезный в областях компьютерно-технической экспертизы, восстановления данных, низкоуровневой обработки данных и информационной безопасности. Усовершенствованный инструмент для повседневного использования или в случае аварии: изучение и редактирование всех видов файлов, восстановление удалённых файлов или утраченных данных с жёстких дисков с повреждённой файловой системой или с карт памяти цифровых камер.

Основные возможности:
- Редактор дисков для работы с жёсткими дисками, дискетами, CD/DVD, ZIP, SmartMedia, Compact Flash и прочими устройствами
- Поддержка файловых систем FAT12/16/32, exFAT, NTFS, Ext2/3/4, Next3, CDFS, UDF
- Встроенный интерпретатор для динамических дисков и RAID-систем
- Различные методы восстановления данных
- Редактор оперативной памяти, обеспечивающий доступ к физической памяти и виртуальной памяти других процессов
- Интерпретатор данных, знает 20 типов данных
- Редактирование структур данных, используя шаблоны (например, для восстановления таблицы разделов/загрузочного сектора)
- Соединение и разделение файлов, объединение и деление четных и нечетных байтов/слов
- Анализ и сравнение файлов
- Удобный гибкий поиск с функциями замены
- Клонирование дисков (под DOS с использованием X-Ways Replica)
- Создание снимка и резервной копии диска (при необходимости сжатие или разделение на архивы в 650 Мб)
- Программируемый интерфейс (API) и выполнение скриптов
- AES-шифрование с 256-битным ключом, контрольные суммы, CRC32, хэши (MD5, SHA 1...)
- Надёжное удаление (стирание) секретных файлов, очистка жёсткого диска
- Импорт всех форматов буфера обмена, включая шестнадцатеричные значения в кодировке ASCII
- Преобразование различных форматов: Двоичный, Hex ASCII, Intel Hex и Motorola S
- Наборы символов: ANSI ASCII, IBM ASCII, EBCDIC, (Unicode)
- Мгновенное переключение окна. Печать. Генератор случайных чисел
- Поддержка файлов размером более 4 Гб. Очень быстр. Прост в использовании. Подробная интерактивная справка


WinHex is a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards.

- Disk editor for hard disks, floppy disks, CD-ROM & DVD, ZIP, Smart Media, Compact Flash, ...
- Native support for FAT12/16/32, exFAT, NTFS, Ext2/3/4, Next3, CDFS, UDF
- Built-in interpretation of RAID systems and dynamic disks
- Various data recovery techniques
- RAM editor, providing access to physical RAM and other processes virtual memory
- Data interpreter, knowing 20 data types
- Editing data structures using templates (e.g. to repair partition table/boot sector)
- Concatenating and splitting files, unifying and dividing odd and even bytes/words
- Analyzing and comparing files
- Particularly flexible search and replace functions
- Disk cloning (under DOS with X-Ways Replica)
- Drive images & backups (optionally compressed or split into 650 MB archives)
- Programming interface (API) and scripting
- 256-bit AES encryption, checksums, CRC32, hashes (MD5, SHA-1, ...)
- Erase (wipe) confidential files securely, hard drive cleansing to protect your privacy
- Import all clipboard formats, incl. ASCII hex values
- Convert between binary, hex ASCII, Intel Hex, and Motorola S
- Character sets: ANSI ASCII, IBM ASCII, EBCDIC, (Unicode)
- Instant window switching. Printing. Random-number generator
- Supports files >4 GB. Very fast. Easy to use. Extensive online help

What's new in v17.5:
- Extended multi-user support for large cases. Useful when multiple examiners process the same case at different times or different evidence objects of the same case at the same time, and wish to tell apart their own results from their colleagues' results. Report table associations, comments and search terms/hits of different examiners can optionally be distinguished, by showing the creating examiner's initials (default) or other abbreviations of their names or (if no abbreviation is specified) their complete usernames. The same file can be associated with the same report table only by 1 examiner.
Examiners can choose whether or not they get to see report table associations of other users. All related options can be found by clicking the "..." button for the extended multi-user support. Extended multi-user support can only be enabled for new cases, in the case properties dialog window. Older versions cannot open cases with support enabled. Examiners are recognized internally by their Windows user accounts. A maximum of 255 examiners is supported per case.
- Ability to review the processing history of a case in its properties, which reveals which versions were used on it (recorded only by v17.3 SR-10 and later, v17.4 SR-4 and later and v17.5 and later) and by which users (recorded only by v17.5 and later, even without extended multi-user support).
- The existence of extended attributes for files in NTFS ($EA attributes) is now revealed in the Attr. column in newly taken volume snapshots, and you can filter for the presence of such attributes. Useful to detect certain malware as seen in recent high-profile cases.
- Considerably improved treatment of hard-linked files in HFS+. Resolving hard links is now much faster and thorough in current HFS+ volumes that heavily use hard links because of Time Machine. Hard links to directories and resource-only files are now also resolved. The hard link count is accurately represented. All hard links except for 1 are optionally omitted from logical searches, just as in NTFS, to avoid excessive duplication of data to be searched and duplication of search hits. Hard links that are ignored are identified by a grayed out hard-link count (no longer by an asterisk as in previous versions). Additionally, iNode files (indirect node files) that got connected with the hard links that reference them as so-called "related items" in the volume snapshot are omitted. Should the hard-link count of an iNode file be not grayed out, that indicates an orphaned iNode file (one that is not referenced by any hard-linked file, at least not in the volume snapshot). Comments are no longer used for hard-linked files in HFS+.
- The names of the authors of documents of various types (DOC, XLS, PPT, RTF, PDF, more in future releases) are now output in a new column named "Author" after metadata extraction.
- The page count is now extracted from PDF and some Office file types (more in future releases) as part of metadata extraction and shown in a new column.
- Extraction of pictures that are embedded as Base64 in VCF files (electronic business cards).
- Option to create report table associations for files that were successfully added to a skeleton image using the directory browser context menu command.
- Extraction of events from Unix/Linux/Macintosh system logs. These events are practically of significance especially for USB device history examinations.
- File type identification of MMAP, IDML, INCX, EDX, ENML, NBI.
- Sorting and filtering by comments and extracted metadata greatly accelerated for huge volume snapshots in which a huge number of files have comments or extracted metadata.
- Sorting by certain directory browser columns such as owner, author, sender, recipients, report tables, comments, extracted metadata, search terms, hash set is now more user-friendly, in that items with blanks (i.e. unknown owner, unknown author, no report table associations, no comments, ...) are listed last, not first. Also, the default sort order of the hash category column is now descending.
- Improved detection of non-standard LVM2 container partitions.
- Several minor improvements.
- Same fix level as v17.4 SR-4.

Limitations under Windows Vista/2008 Server/7
Physical RAM cannot be opened. Install WinHlp32.exe (for Vista >>/for 7 >>) to be able to use the program help. Unable to write sectors on the partitions that contain Windows and WinHex.


For VIP-members only (BETA)
Если вы здесь ничего не видите, то значит здесь ничего нет, либо вы не входите в группу VIP-members
If You do not see here anything, it means there here is nothing, or you are not VIP-member.

Внимание! Всегда проверяйте антивирусом файлы, которые Вы загружаете! / Attention! Always check files you download with your antivirus software!

Другие новости по теме / See also:
  • X-Ways WinHex v16.6
  • X-Ways WinHex v16.0 SR-5
  • X-Ways WinHex v16.7 SR-4
  • X-Ways WinHex v17.5 SR-9
  • X-Ways WinHex v17.6 SR-1
    Уважаемый посетитель, Вы зашли на сайт как незарегистрированный пользователь. Мы рекомендуем Вам зарегистрироваться либо зайти на сайт под своим именем.

    Комментарии / Comments


    Посетители, находящиеся в группе guests, не могут оставлять комментарии в данной новости.
    KinDzaDza.net ©2016 :)
    Designed by Pazak
    Home | Software | Footage | Sound FX | Tutorials | E-Books | Музыка | Фильмы | Контакт
    Все публикуемые материалы предоставлены здесь только для ознакомления, все права на них принадлежат их владельцам!
    Published materials are given here only for acquaintance, all rights to them belong to their owners!