Lab Task
1.
Log in to Windows 10 virtual machine.
2. Navigate to HxDSetup.
3. Double-click HxDSetup.exe to launch the setup, select the language (here, English) and follow
the wizard-driven installation steps to install the application.
Note: If an Open File - Security Warning pop-up appears, click Run.
Note: If a User Account Control pop-up appears, click Yes.
Note: If a Windows Security dialog box appears, enter the credentials of the Windows Server 2016
virtual machine and then click OK.
4. On completing the installation, ensure that Launch HxD Hex Editor option is checked and click
Finish
5. The HxD Hex Editor GUI will appear
6. To open a new file on HxD Hex Editor
7. Select a JPG file from File Explorer →This PC → Pictures then click Open
8. HxD Hex Editor will process the image file and display the following window
9. Now we have to look for the starting file signature of jpg file Search → Find → Hex – Values
10. To copy recover the file, first we have to copy the offset of the starting signature Right Click on
offset “000000” → Select Block → Copy Start off-set “0”
11. Now we have to look for the ending file signature of jpg file Search → Find → Hex – Values