Download WinHex 15.5

X-Ways Software Technology has released version 15.5 of WinHex. WinHex is not only a universal hex editor, but is also capable of low-level data processing through a simple interface. The program includes a ram editor, a data interpreter and a disk editor, and can be used, for example, to retrieve deleted information and to inspect files. WinHex works on all Windows versions from Windows 2000 onwards and is available in four different versions with prices from forty euros. The changelog of this release shows the following changes and improvements:

What’s new?

• New email extraction function for Outlook PST and OST email archives (still testing). Ability to recover deleted email messages if they can still be found. More information extracted from contact entries, calendar entries, and tasks stored in PST archives. Ability to process encrypted PST archives without the password. Faster processing than before. Outlook/MAPI installation not needed.
  Plain text email messages are presented as text files, HTML email messages as HTML files. They are all marked as extracted e-mail messages in the Attribute column. Email headers are presented as child objects. This new kind of representation may still change.
  Known problems: Non-English e-mails extracted with the new method at the moment might be displayed based on an incorrect code page. (For plaintext e-mail messages with this problem it should help to set the code page of the viewer component to UTF-8 to get non-English characters right.) Certain signed e-mail messages cannot be extracted.
  Comments about this new feature are welcome. The old PST processing via MAPI is still available optionally if you check the “MAPI” checkbox.
• The HTML registry report is now output completely in tabular form, for much better readability and import into other programs such as MS Excel for further processing (sorting, filtering). Comments about this new format are welcome. The name and key of each value is not output explicitly any more by the default, but can be seen in as a tooltip when moving the mouse cursor over a small white box. If you need to see the name and key explicitly for each and every reported value for some reason, you can include it optionally via the registry viewer’s context menu.
• The second part of the registry report now gives an overview of installed drivers, file systems, and services in addition to the very helpful tables “Attached devices by serial number” and “Partitions by disk signature”.
• The Details Panel has been renamed to Info Pane in the English user interface, to avoid confusion with Details mode.
• The index optimization now fully utilizes the memory space advantages 64-bit Windows environments.
• X-Ways Forensics has been found to run on Windows 7 just as well as under Windows Vista, ie the same limitations (but no additional limitations) apply.
• Ability to distinguish between DOCX, XLSC, PPTX, and other file types when running a file header signature search.
• Various minor improvements.