Review Comments (0) Screenshots (11) Questions & Answers (0) Votes (16) Awards (18) Wiki  
(16)
X-Ways Software Technology AG
16.3
www.x-ways.net
Shareware
$50.88  Purchase
2 657 people
Download WinHex

Downloaded 5348 times

It is possible that the download link provided above does not refer to the intended version. If you are looking for WinHex, you may try searching for a download link using Google.

This software was checked for viruses Last month and was found to contain no viruses.
Click here to see antivirus report.
 
Video tutorial for WinHex 16.1
Frame

Review

This is official description applies to version 16.2

WinHex is a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. This app is an advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards.
 
The following review written by one of the Software Informer contributors applies to version 15.6

Today editors are more flexible compared to those in earlier days. Among them, WinHex has a unique place because of its versatile built-in features. The list of the features available will vary depending on the version you licensed.

WinHex comes with a bundle of tools which can save your time and work. On the one hand, WinHex is not a regular editor - it can edit executable files in hex mode showing you even those non-printable characters, such as carriage returns, tabs, and some other special characters. On the other hand, you can perform data analysis from pieces of data recovered via Scandisk or Chkdisk. You can easily perform file recovery and undelete tasks by using its File Recovery utility.

Memory editing is a great bonus for gamers, who can cheat by changing some of the values in order to level up, or by boosting up the energy to be used during the game. Besides, you can check your system’s physical memory searching for malicious activity. This is truly helpful when you are performing forensic works on the system.

If you get tired of making identical disks for a standard installation, try with the Disk Cloning feature inside WinHex. With this tool, you can clone any physical media connected to your system. Furthermore, it allows you to choose which sectors you wish to clone, and compare files or full disks. Its permanent deletion utility will give you extra privacy when sharing your system. WinHex supports deconstructing RAID 0-5 with a maximum of 16 components.

Take some time to read the manuals and the tips provided by experts before using this tool - inexperienced persons may easily make a mess of their computers when using this powerful tool.
  • Memory editing capabilities.
  • Supports disk cloning.
  • Forensic tools.
  • Helps to change the name of your Xbox.
  • None.

Reviewed by: Sundaram Ramanujam

Reviewer rating:

Reviewed: Last year

What's new in version 15.6

Matches with multiple hash sets for the same file are now supported by the hash set column, and therefore also by the hash set filter.
When importing a hash set, X-Ways Forensics automatically filters out duplicate hash values within that hash set. This has a big effect on the US NIST NSRL RDS database, for example, and reduces its size tremendously. If your hash database already contains hash sets with duplicates, those will be eliminated by v15.6 as well, next time when you import any other hash set. Hash databases used by v15.6 and later cannot be opened any more by v15.1 or earlier.
X-Ways Forensics can now usually recognize the true sector count according to ATA on ATA/SATA hard disks in situations where that failed (returned a question mark only) in previous versions. Useful to detect an attempt to limit the addressable capacity of a hard disk using an HPA (host-protected area) or
DCO (device configuration overlay).
Whenever X-Ways Forensics checks for an HPA/DCO (that is when imaging a hard disk, when adding it to a case, or when creating a Technical Details Report for it) and actually detects one, it now offers to either temporarily or permanently deactivate the HPA/DCO and make the full official disk capacity
accesssible, so that you can e.g. image the hard disk in its full size before it returns to its original state next time when it powers down.
The Technical Details Report can now retrieve the internal error count recorded by hard disks if available through the SMART interface.
Simple and quick plausibility check for internally reconstructed RAID 5 that warns you immediately after reconstruction if the parity does not match.

What's new in version 13.2

For information on changes of each version, go to http://www.x-ways.net/winhex/mailings/index-d.html
Report a wrong version Report a wrong program title Suggest a correction

Screenshots

Main Window Main Window Main window Main window Search a string in an EXE file Search a string in an EXE... Memory dump Memory dump
All 11 screenshots

Latest comments


There are no comments, be the first one!
Add new comment

E-mail Address:

Password:

Register now »

Forgot password?

Sign in with:
.whx WinHex Backup File
.xfc X-Ways Forensics Case File
.whs WinHex Script
Download Software Informer Client
Copyright © 2012, Informer Technologies, Inc. About| Privacy and terms| Help| Feedback & Support| Partners program