Main

Where Data meets the EyeHow you visualize Binary Data and instantly see what’s relevant

“Hex sucks.

A better mappingmust be possible.”

-Dan Kaminski

Some years ago Greg Conti gave an inspiring talk at Black Hat conference about Visual Forensic Analysis and Reverse Engineering of Binary Data. Based on his ideas and software prototype FileGlance was created.

FileGlance runs on Linux, Mac, and Windows.

“FileGlance reveals what matters in binary files.“

This is for you if…

arrow-circle-o-down

• bullseyeYou want to find relevant data quickly in large binary files
• bullseyeYou are challenged with reverse engineering and understanding of unknown data.
• bullseyeYou want to visualize file data in many meaningful ways.
• bullseyeFun should be part of your work

Views you’ll love!

A visual element for each feature, some text to explain the benefits plus the sheer number of features make this an effective selling point:

Entropy View

Visualize the randomness of a file to find instantly compressed or encrypted parts.

Image View

Find uncompressed images in different formats quickly hidden within files.

bar-chart

Histogram

Important file characteristics in one diagram. See for each byte value how often it occurs.

Digram View

Combinations of byte values graphically displayed – reveals certain file characteristics

Dot Plot

Repeating byte values presented visually. See what the hex editor hides in plain sight.

Byte Presence View

Which byte values are present in a file?

Hash Values

Let FileGlance compute the most important hash values and copy to clipboard with one click.

Entropy

The entropy value of the whole file data allows a quick assessment of the contents.

Hex Viewer

The raw bits and bytes connected to the graphical visualizations. All the details in the global context.

What’s the problem FileGlance is solving?

Hex editors have proven to be useful tools for decades. And they’ll probably always be the app to choose when the raw bits and bytes need to be inspected.

​

However, not only storage sizes grow larger but also file sizes. And while it is reasonable to inspect a 10 kb file on byte level it is almost impossible for 10 MB or 1 GB.

​

This is where applications like FileGlance come into play. It allows you to scan quickly through a file, identify different sections and look at the data from different angles.

Quick Assessments

Alphabet in use. Both histogram and Dot Plot view tell you effortlessly of what bytes the data consists of.Use of encryption. The entropy view shows you exactly where sections of encrypted or compressed data are located within a file. Also byte presence view and others show characteristic patterns.Images. By adjusting the line width pixels align and full pictures become visible. This works on bit or byte level and also for multiple bytes per pixel.

Fixed length structures. Not only pixels but also patterns of similar data in structures align visually when you modify the line width in the image view. This is a much faster approach than looking at the raw bytes.

File format exploration. All the views come in handy when you investigate files with unknown format. Entropy and byte presence view let you distinguish sections and what type of data you’re looking at.

arrow-circle-o-down

Dot Plot of an MP3 File

There are three sections of the file identifiable. The first one consists the MP3 header and meta data.

The second section is apparently compressed while the third section is filled with equal bytes (0xFF in this case).

Digram View of a Log File

This digram view shows a pattern typical for ASCII encoded files.

Easily identifiable are the byte values of uppercase and lowercase characters.

DotPlot of Repeated Values

Sequences of equal values show up as horizontal lines or squares.

DotPlot of Ascending Values

Ascending or descending values are represented by diagonal lines.

​

Notice how short it takes to get this information.

What is FileGlance?

FileGlance is an application that visualizes binary files. With a single license you can run it on up to three machines – be it Window, Linux or Mac. Even without license it serves as an incredibly fast hex editor and computes useful hash values.Download and test it for one week before you decide whether you buy or not.

Try all Features for 7 DAYS!

Download and use FileGlance for 7 days without limit. After the trial period you can still use hex editor, hash values and the other features of the main window for free.Only if you want to continue using the visual file representations you purchase FileGlance.

arrow-circle-o-down

FAQ

Here are answers to some frequently asked questions:

Is there also a 32 Bit Version?

FileGlance is only available as a 64 bit version because 32 bit platforms get less and less important.

Why is FileGlance not free (as in beer)?

Developing a software like FileGlance takes countless hours and we think it’s only fair to  give some $ in return for a application that can be an indispensable part of your toolbox.

Can I use one license on different OS?

You can run one license on up to three machines, not matter if they run on Mac, Linux or Windows.

What is the maximum file size FileGlance can open?

There is no built-in file size limitation. Or course it takes longer to compute hash values for large files however due to multi threading you can work instantly also with huge files.

Get your copy of FileGlance now!

Life is too short for finding patterns in a hex editor that can be revealed in seconds with a proper visualization.

© 2018 Synalysis. All rights Reserved  |  Disclaimer