Images for evidence and start of hexdump analysis