Huge files, read-only
Only the visible part is read and shown, even on files of many gigabytes. The evidence is never modified: at most a range is saved to a new file, never over the original.
Inspection
Hex
The Hex module opens any file byte by byte, even several gigabytes, loading only the visible portion. Search for sequences, inspect values and jump to a precise offset.
What it does
What the Hex module does
Selection
Copy in five formats (hex, text, base64, C array…), “Save as file” with the hash of the bytes written, MD5/SHA-1/SHA-256 hashes and entropy of the range.
Inspector
8- to 64-bit signed and unsigned integers and floats, little and big endian; Unix, FILETIME, DOS, HFS+ and Mac dates; GUID; UTF-8 and UTF-16.
File map and structures
Colour-coded entropy, known signatures of about 35 formats (including files hidden inside others), matches and bookmarks along the whole file; coloured structures in the dump for PE, ELF, Mach-O, ZIP, JPEG, PNG and PDF.
183 formats with Kaitai Struct
The tree of every field of the format, with name, value and byte position: a click on a field selects it in the dump. Only descriptions with compatible licences, licence shown for each format.
Search, bookmarks and report
Hex, text and regex search with the list of every occurrence, “Go to offset” also relative, back and forward history, bookmarks with notes and a bookmark PDF report.
Step by step
How it works
- Load the file (drag&drop or dialog).
- Probatio reads a window of the file (seek+read) and shows it; scrolling loads more.
- Search in streaming (hex/text/regex) or go to offset; inspect the selected byte.
FAQ
Frequently asked questions
Can I open multi-gigabyte files?
Yes: the viewer loads only the visible window (virtual scroll), so file size is not a limit.
What kind of search is supported?
Search for hex sequences, text and regular expressions, with previous/next and a match count.
What does the data inspector show?
From the selected byte it shows 8/16/32/64-bit integers (little and big-endian) and 32/64-bit floating-point numbers.
Related modules