HstEx® Version 5.8

HstEx® Version 5.8 - Advanced SQLite Record Recovery

We're delighted to introduce HstEx® version 5.8, another milestone in our relentless pursuit of excellence in digital forensic solutions. This release is meticulously crafted to enhance your investigative capabilities, ensuring you extract crucial digital evidence with unparalleled precision and efficiency. Here are the key highlights of this release:

  • Cutting-Edge Browser Support: HstEx® v5.8 features comprehensive support for the latest browsers, enabling you to dissect digital artifacts across a multitude of browsing platforms with utmost accuracy.

  • Advanced SQLite Record Recovery: We have expanded our support for the recovery of essential SQLite records through advanced carving techniques, empowering you to unearth critical insights from even the most intricate digital landscapes.

  • Expanded Browser Version Coverage: With the addition of 24 new browser versions spanning both mobile and desktop platforms, HstEx® v5.8 offers an extensive arsenal for forensic investigation, ensuring no digital trail goes unnoticed.

  • Enhanced Mozilla Firefox Cookie Recovery: Our efforts to refine the recovery of Mozilla Firefox Cookies have borne fruit in this release, providing you with enhanced capabilities to extract valuable data from this crucial artefact.

  • Refined Search Capability: We have fine-tuned our search capability for improved detection and recovery, enhancing the identification of pertinent digital evidence.

  • Optimised SQLite Record Recovery: Building upon our commitment to excellence, we have further improved our SQLite record recovery mechanism, enhancing the precision and reliability of data extraction.

Change Log

The full list of changes can be found here: HstEx® v5.8 Change Log.

Release Notes for NetAnalysis® Version 3.8

Don't forget to review the new features and updates in NetAnalysis®. Release notes and change log can be found here: NetAnalysis v3.8.

HstEx® Version 5.7

HstEx® v5.7: Deep Dive into Unstructured Data

Get ready to delve deeper into the digital landscape with HstEx® v5.7! This powerful update expands your forensic reach and refines data recovery capabilities, working seamlessly alongside NetAnalysis® for a comprehensive view of user activity. This latest iteration elevates your investigative prowess, extending data recovery capabilities and seamlessly integrating with NetAnalysis® for a comprehensive browser forensic toolkit. With enhanced browser coverage across various platforms, HstEx® ensures you stay ahead of evolving digital landscapes.

Enhanced Browser Coverage:

Stay ahead of the curve with support for an additional 125 browser versions, encompassing all the latest changes to popular browsers. No matter what platform or browser your investigation encounters, HstEx® v5.7 has you covered.

Recovery Refinements:

  • Improved SQLite Record Recovery: Our latest update boasts a revolutionary enhancement to our unique recovery engine, allowing NetAnalysis® v3.7 and HstEx® v5.7 to effortlessly extract SQLite records from unstructured data like never before. Experience the unparalleled precision and depth of analysis that sets our forensic tools leagues ahead of the competition.
  • Expanded Support for Apple Safari Tab Entries: Explore deeper insights into Safari on iOS and macOS with our latest update, now featuring enhanced recovery capabilities for Apple Safari Tab entries.
  • Enhanced Compatibility with Dolphin Browser: Unveiling expanded support for Dolphin Browser on both Android and iOS platforms.
  • Opera v106 Cookies: Extract more valuable evidence with improved recovery of cookies from Opera v106, providing deeper insights into browsing history and preferences.
  • Samsung Internet Browser v23 (Android) Logins: Uncover hidden credentials with improved recovery of login data from Samsung Internet Browser v23 on Android devices, revealing potential access points and user accounts.
  • Naver Whale v3.24 Downloads: Gain clearer visibility into downloaded files with enhanced recovery from Naver Whale v3.24, streamlining your analysis of downloaded content.
  • Cốc Cốc v126 Downloads: Efficiently recover downloaded files from Cốc Cốc v126, providing a comprehensive understanding of user activity within this popular Vietnamese browser.



HstEx® works hand-in-hand with NetAnalysis®, offering a combined solution for in-depth browser forensics. Recover individual records and files from unstructured data across various platforms, including Android, iOS, Windows, macOS, Linux, portable, and stand-alone browsers. HstEx® v5.7: More than just data recovery, it's a gateway to deeper understanding.

Change Log

The full list of changes can be found here: HstEx® v5.7 Change Log.

Release Notes for NetAnalysis® Version 3.7

Don't forget to review the new features and updates in NetAnalysis®. Release notes and change log can be found here: NetAnalysis v3.7.

HstEx® Version 5.6

Release Notes for HstEx® Version 5.6

We are pleased to announce the release of HstEx® Version 5.6. This update brings you new features and support, ensuring that you have the latest tools at your disposal for effective digital forensic analysis and browser data recovery.

New Features

In this release, we have introduced significant new features and support to enhance your forensic analysis capabilities:

  • Support for Latest Browser Changes: HstEx® now includes support for all the changes present in the latest browsers, keeping you up-to-date with the ever-evolving digital landscape.

  • Maxthon Browser v7 Support: We're excited to introduce support for Maxthon Browser v7 on Android, iOS, Windows and macOS, broadening your ability to recover browsing data on mobile and desktop platforms.


We have also implemented important improvements to make your forensic analysis more efficient and effective:

  • Enhanced Mobile Support: Enjoy a more effective forensic recovery experience on Android and iOS with numerous improvements tailored to these platforms.

  • Improved Yandex on Android Chromium-based Simple Cache Recovery: Our enhancements in this area make it easier to recover valuable data from Yandex on Android Chromium-based Simple Cache.

Change Log

The full list of changes can be found here: HstEx® v5.6 Change Log.

Release Notes for NetAnalysis® Version 3.6

Don't forget to review the new features in NetAnalysis®. Release notes and change log can be found here: NetAnalysis v3.6.

HstEx® Version 5.5

Release Notes for HstEx® Version 5.5

We are pleased to announce the release of HstEx® Version 5.5, which includes improved handling of Expert Witness image files as well as improved carving of SQLite database entries. We have also added support for the changes in the latest browsers and made a number of changes to improve the performance of our unique search and recovery routines. You will be pleased with the results as HstEx® is the most comprehensive carver for recovering browser evidence available today.

The following screen shows a sample of some of the artefacts that are available for recovery.

New Features

  • Support for 87 new browser builds and associated data.


  • Improved recovery of carved SQLite cell records
  • Improved recovery of Naver Whale on Android downloads entries
  • Improved recovery of Chromium based keyword search term entries
  • Improved recovery of Firefox on Linux history entries
  • Improved recovery of Yandex on Linux cookie entries
  • Improved recovery of Apple Safari cloud tab device entries

Change Log

The full list of changes can be found here: HstEx® v5.5 Change Log.

Release Notes for NetAnalysis® Version 3.5

Don't forget to review the new features in NetAnalysis®. Release notes and change log can be found here: NetAnalysis v3.5.

HstEx® Version 5.4

Release Notes for HstEx® Version 5.4

We are pleased to announce the release of HstEx® Version 5.4, which includes significant updates and improvements to our browser artefact recovery tool.

New Artefacts Recovered

HstEx® Version 5.4 now includes support for the recovery of 96 new artefacts, expanding our capabilities to recover data from a wider range of sources.

Improved Data Verification and Recovery Accuracy

We have implemented improvements to our data verification and recovery accuracy on carved artefacts, ensuring that recovered data is more reliable and accurate than ever before. Our unique Intelli-Carve® engine has been revised and improved.

Improved Recovery of Specific Browser Data Entries

HstEx® Version 5.4 includes improvements to the recovery of Yandex Login Data entries, Firefox on iOS Login entries, Microsoft Edge Collections entries, and Firefox History entries across all platforms. This means that users can now recover these types of data more easily and effectively.

New Browser Support

HstEx® Version 5.4 now supports the recovery of Brave on iOS History entries, Opera on iOS History entries, Opera Crypto Browser on iOS History entries, and Opera GX on iOS History entries, providing our users with more comprehensive coverage of browser artefact recovery. We have also included support for recovering Microsoft Edge Navigation History entries.

UI Improvements

We have improved the Recovery Job user interface by adding a toggle switch on the toolbar to allow selected recovery profiles to be displayed; this makes it much easier to identify which recovery profiles have been selected.

Overall, HstEx® Version 5.4 represents a significant step forward in our efforts to provide the most comprehensive and effective browser artefact recovery tool on the market. We hope that our users will find these updates and improvements useful and we look forward to continuing to evolve and improve HstEx® in future releases.

Change Log

The full list of changes can be found here: HstEx® v5.4 Change Log.

Release Notes for NetAnalysis® Version 3.4

Don't forget to review the new features in NetAnalysis®. Release notes and change log can be found here: NetAnalysis v3.4.

HstEx® Version 5.3

Introduction to HstEx® v5.3

HstEx® version 5.3 adds support for 223 new artefacts. We have improved the recovery of entries from Chromium based Keyword Search Terms and Quota Manager.

Change Log

The full list of changes can be found here: HstEx® v5.3 Change Log.

HstEx® Version 5.2

New Browser Support

HstEx® version 5.2 adds further support for mobile and desktop browsers. We have added new support for:

New Features

  • Mozilla Firefox Logins on Android and iOS

Change Log

The full list of changes can be found here: HstEx® v5.2 Change Log.

HstEx® Version 5.1

Introduction to HstEx® v5.1

HstEx® version 5.1 continues our quest to add further support for mobile browsers. This release adds four new browsers, namely 7 Star Browser, Naver Whale, Opera Mini and Opera Touch. We have also added additional support for existing browsers and added 53 new recovery profiles. For a full list of the changes for this release, see: HstEx® v5.1 Change Log.

New Recovery Profiles

This release has added support for a number of new artefacts. Here are some of the highlights:

  • Safari on iOS State Tab Entries
  • Safari Cloud Tabs Entries
  • Safari Cloud Tab Device
  • Firefox on iOS History
  • Firefox on iOS Bookmarks
  • Firefox on Android History
  • Firefox on Android Bookmarks
  • UC Browser on Android - Encrypted Login Entries

Recovering Zone.Identifier Alternate Data Streams

With this release of HstEx®, we have added the ability to search and recover MFT entries containing resident Zone.Identifier Alternate Data Streams. The Zone.Identifier stream, associated with a download, contains a rich store of properties that may be relevant to an investigation. NetAnalysis® provides an easy way to examine, and perform analysis on these streams. HstEx® allows an easy way to process an entire forensic image (or other source) recovering Zone.Identifier streams contained within live and deleted MFT entries. HstEx® can also recover this data even if the file has been deleted, the volume has been formatted, or the partition deleted.

HstEx Recovering Zone Identifier Data

Change Log

The full list of changes can be found here: HstEx® v5.1 Change Log.

HstEx® Version 5


Version 5 is a major release of HstEx® and adds new support for mobile and portable browsers. We have added 124 new recovery profiles in this release and added support for browsers such as Mozilla Firefox on Android, SalamWeb and Samsung Internet browser on Android. The user interface has been completely re-written and adds major improvements and new features in a number of key areas. We have improved the layout of the user interface, with the goal of improving productivity, and added support for light and dark themes.

In combination with NetAnalysis®, both applications represent the most powerful, comprehensive browser forensic analysis suite available. However, don't just take our word for it, take it for a spin and see the powerful features in action.

Adding/Editing Recovery Job

In this release, we have added 124 new data recovery modules. We have also added new toolbar buttons allowing the user to select recovery modules which are supported on the source operating system, or the type of device. This means you will only select the profiles you need for a quick, efficient and comprehensive recovery. You can select from Windows, macOS, Linux, iOS and Android along with Desktop, Mobile, Portable or Gaming devices as well as the most Common options. The Recovery Module grid now allows multiple levels of filtering, searching and sorting.

New Source: Multi-Volume ZIP Archives

We have added support for processing data contained within multi-volume ZIP archives. Anyone familiar with mobile phone analysis will immediately see the benefit of being able to select this file format. Multi-volume ZIP archives are often the output format used by Mobile Phone Forensic Extraction Tools.

Change Log

To review the full list of changes for this release, please see: Change Log v5.0.