FlexHex

Last updated
FlexHex
Developer(s) Inv Softworks
Stable release
2.7 / October 12, 2018;6 years ago (2018-10-12)
Written in C++
Operating system Windows
Available in English
Type Hex editor
License Proprietary (free for non-commercial use)
Website www.heaventools.com/flexhex-hex-editor.htm [1]

FlexHex is a freeware hex editor for Microsoft Windows that can edit files, NTFS alternate streams and sparse data, OLE compound files, logical disks, and physical drives. [2] [1] [3] [4] [5] [6]

Contents

Technology

FlexHex uses the 'edit stack' model, representing the file being edited as the unchanged original stream and a stack of primitive editing operations. The original file is kept intact and gets modified only when the user selects the Save command. The advantages of this model are 1) the file does not need to be read into memory so there is no file size limit, and 2) an unlimited Undo/Redo list can be implemented simply by traversing the operation stack.

FlexHex is written on Visual C++ and MFC, which makes it very fast while keeping the size small enough.

Features

In addition to the standard features more or less typical for other hex editors, FlexHex offers a few unique ones. Specifically, FlexHex is the only hex editor that can create or edit NTFS alternate streams, sparse files, and OLE structured storage.

See also

References

  1. 1 2 "6 Hex Editors for Malware Analysis". SANS Digital Forensics and Incident Response Blog. Archived from the original on 2020-01-15. Retrieved 2018-06-30.
  2. "x86 Disassembly/Analysis Tools". wikibooks.org.
  3. Sikorski, Michael; Honig, Andrew (2012). Practical Malware Analysis: A Hands-On Guide to Dissecting Malicious Software. No Starch Press. ISBN   9781593272906.
  4. Marak, Victor (2015). Windows Malware Analysis Essentials. Packt Publishing. ISBN   1785281518.
  5. "Hex-редакторы vs. malware".
  6. "Malware Forensic Field Guides: Tool Box".