Memory scanner for Windows analysis and debugging
Locate data in process memory with JoHex memory scanning, then examine the results in their program context.
- Choose the analysis target
- Scan for candidate data
- Inspect matches in context
Workflow
- Choose the analysis target
- Scan for candidate data
- Inspect matches in context
Choose the process and the scanning conditions supported by JoHex. Run the scan, examine candidate locations and review the nearby data before drawing a conclusion.
Memory scanning
Use memory scanning to locate data for program analysis and debugging, then inspect the results in context.
Process memory analysis
Read, write and analyze process memory for analysis and debugging, subject to access permissions.
Before changing data
A matching value is a candidate, not proof of its meaning. Running programs can change their memory. Access permissions and the process state affect the data available for analysis.
Common questions
Does a scan result explain what the data means?
No. A match locates data that meets the scan condition. Interpret it using surrounding bytes and the program's behavior, and check the finding in the process memory view.
Use JoHex for your next binary analysis task.
Review the available edition and download options before installing.