4

Trying hex-editing to fix the date-time data in file which was generated while the computer system clock was wrong. Some tutorial will be helpful appreciated after my attempts so far.

[screen shot attached-- WRONG DATE-- surrounded in bold-red box]

Screenshot of incorrect dates in Hex Editor

My attempts:

  • Changing the text by typing in the right characters:-- doesn't work, date turns into "not available" when file is opened with the OEM software.

  • Deleting all boxed text and typing in the right date:-- file won't open at all using the OEM software.

Improve this question
3
  • NOTE: for the editing by simply typing in new characters (replacing the old), the applied edits correctly shows in the OEM software only if the new date-time is at a future point relative to the existing "Dec 30, 2015 03:23:10"
    – qrst
    Commented Jan 4, 2016 at 5:08
  • 3
    I see this is from the program Sciex Analyst. What does the function call-stack look like when FMWIFFCompDocNTDriver.dll!GetFieldC_csChecksumTimeStamp is called?
    – Jason Geffner
    Commented Jan 4, 2016 at 15:30
  • is there some sort of CRC in the file that makes the file invalid when opened with the OEM software?
    – grepNstepN
    Commented May 20, 2016 at 16:18

1 Answer 1

Reset to default
1

Surfing the net about WIFF file formats, I found two software that convert WIFF file to others formats:

You can check if there are bytes used to check the data in addition to the chunk that you have already tried to patch (d5a0 -> d640).

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.