Where Data meets the Eye
How you visualize Binary Data and instantly see what's relevant
Some years ago Greg Conti gave an inspiring talk at Black Hat conference about Visual Forensic Analysis and Reverse Engineering of Binary Data. Based on his ideas and software prototype FileGlance was created.
FileGlance runs on Linux, Mac, and Windows.
"FileGlance reveals what matters in binary files."
This is for you if...
Views you'll love!
A visual element for each feature, some text to explain the benefits plus the sheer number of features make this an effective selling point:
Visualize the randomness of a file to find instantly compressed or encrypted parts.
Find uncompressed images in different formats quickly hidden within files.
Important file characteristics in one diagram. See for each byte value how often it occurs.
Combinations of byte values graphically displayed - reveals certain file characteristics
Repeating byte values presented visually. See what the hex editor hides in plain sight.
Byte Presence View
Which byte values are present in a file?
Let FileGlance compute the most important hash values and copy to clipboard with one click.
The entropy value of the whole file data allows a quick assessment of the contents.
The raw bits and bytes connected to the graphical visualizations. All the details in the global context.
What's the problem FileGlance is solving?
Hex editors have proven to be useful tools for decades. And they'll probably always be the app to choose when the raw bits and bytes need to be inspected.
However, not only storage sizes grow larger but also file sizes. And while it is reasonable to inspect a 10 kb file on byte level it is almost impossible for 10 MB or 1 GB.
This is where applications like FileGlance come into play. It allows you to scan quickly through a file, identify different sections and look at the data from different angles.
Alphabet in use. Both histogram and Dot Plot view tell you effortlessly of what bytes the data consists of.
Use of encryption. The entropy view shows you exactly where sections of encrypted or compressed data are located within a file. Also byte presence view and others show characteristic patterns.
Images. By adjusting the line width pixels align and full pictures become visible. This works on bit or byte level and also for multiple bytes per pixel.
Fixed length structures. Not only pixels but also patterns of similar data in structures align visually when you modify the line width in the image view. This is a much faster approach than looking at the raw bytes.
File format exploration. All the views come in handy when you investigate files with unknown format. Entropy and byte presence view let you distinguish sections and what type of data you're looking at.
Dot Plot of an MP3 File
There are three sections of the file identifiable. The first one consists the MP3 header and meta data.
The second section is apparently compressed while the third section is filled with equal bytes (0xFF in this case).
Digram View of a Log File
This digram view shows a pattern typical for ASCII encoded files.
Easily identifiable are the byte values of uppercase and lowercase characters.
DotPlot of Repeated Values
Sequences of equal values show up as horizontal lines or squares.
DotPlot of Ascending Values
Ascending or descending values are represented by diagonal lines.
Notice how short it takes to get this information.
What is FileGlance?
FileGlance is an application that visualizes binary files. With a single license you can run it on up to three machines - be it Window, Linux or Mac. Even without license it serves as an incredibly fast hex editor and computes useful hash values.
Download and test it for one week before you decide whether you buy or not.
Try all Features for 7 DAYS!
Download and use FileGlance for 7 days without limit. After the trial period you can still use hex editor, hash values and the other features of the main window for free.
Only if you want to continue using the visual file representations you purchase FileGlance.
Here are answers to some frequently asked questions:
Is there also a 32 Bit Version?
FileGlance is only available as a 64 bit version because 32 bit platforms get less and less important.
Why is FileGlance not free (as in beer)?
Developing a software like FileGlance takes countless hours and we think it's only fair to give some $ in return for a application that can be an indispensable part of your toolbox.
Can I use one license on different OS?
You can run one license on up to three machines, not matter if they run on Mac, Linux or Windows.
What is the maximum file size FileGlance can open?
There is no built-in file size limitation. Or course it takes longer to compute hash values for large files however due to multi threading you can work instantly also with huge files.
Get your copy of FileGlance now!
Life is too short for finding patterns in a hex editor that can be revealed in seconds with a proper visualization.
© 2018 Synalysis. All rights Reserved | Disclaimer