• Inno Unpacker updated to v2.64

• Detect Embarcadero Delphi / C++ VCL exe files and RAD v12 DevExpress as STD files

• added on x64 .gz section detector - x64 Microsoft Visual C++ v14.29 - 2019 - (exe 4883EC28-48) [ .GZ archive sec.6 ] ,

• Go compiler detector engine - detect tampared GO string

• mp4 Ripper fixed via "mp4" string

• NOT EXE - .gz archive - added "x" key press , unpack file on Main GUI

• fixed crash bug
  NOT Win EXE - .dylib - Mac OS X Universal Binary executable
  to :
  NOT EXE - .class - Java Bytecode object oriented programming language http://java.sun.com

• fixed
  5175. x64 - MinGW-w64 GCC: (GNU) compiler (exe) v11 [ ~ 14.x ] - http://mingw-w64.sourceforge.net ,
  to :
  5175. x64 - MinGW-w64 GCC: (GNU) compiler (exe) v11 [ (MinGW-W64 x86_64-ucrt-posix-seh ...]

• NOT EXE - .aac detector fixed

• changed .pdb function - support unicode string ,

• fixed detection : 5004. x64 DLL with : 00 Entry Point - RESOURCES Only : xx,x KB no CODE - CPU : AMD64

• MS VC++ linker 14.44 updated to 2025

• for Windows XP - added x86 7z v22.09 ( ZS/LIZ mode not supported only on Windows 10 )
  *fixed resources for XP

• added "x" on main GUI for unpacking .zip files

• Console mode for zip files :
  Zip unpacking ( .zip archives )
  exeinfope.exe FileName /un7zip - unpack .zip archive )
  for many files ( mask files ) :
  exeinfope.exe FileName* /un7zip - unpack .zip files

• updated : GEMPlayer v1.0 protected data - ThunderSoft DRM Protection / Gilisoft Free DRM Protection

• fixed updated 1136.DotFix NiceProtect v6.9 - 7x demo x86

• .NET added to signatures ( Meta nstd struct ) . 080 , 1129
  " - [ First Meta Data stream as Confuser/Xfuscator ] "

• update v34 x17 - not detected
  908.InstallAware for Windows Installer v34.0.6 X17 2025
  detect v2025.01
  x86./ x64 - Ahk2Exe for AutoHotkey [ v1.1.37.02 Ans/Uni 2025 ] - Script to EXE Converter - www.autohotkey.com

• NOT EXE - .bmp detector - fixed !

• changed :

5036. x64 - Embarcadero Technologies Inc. clang version 5.0.2 (f0862325.f3a671d2.38570) (based on LLVM 5.0.2) ( EXE )
      to :
5037. x64 - C++ Builder 10.x [ Embarcadero RAD Studio 29.1 - Copyright 2025 Embarcadero Technologies, Inc. ]

• Fixed .gz Ripper - now detect gzip with [Unknown System} on -> NOT EXE - .pak Chromium format v5 - Chrome

• added on Linux ELF
  NOT Win EXE - .o - ELF [ 64bit obj. - CPU : AMD x86-64 - OS/ABI: unspecified ]
  -> Compiler : Embarcadero Technologies Inc. clang version 5.0.2 (f0862325.f3a671d2.38570) (based on LLVM 5.0.2)

update
655.[ 7-zip SFX stub ] [ v25.01 GUI - GENUINE ] - stub : Microsoft Visual C++ v.6-9 - Name : 7z SFX.

68. x64 - 7z Sfx GUI 25.01 ZS v1.5.7 - 2025 Tino Reichardt- CPU : AMD x64 , if overlay added 7z

added x64 DLL Generic codec unpacker ( lz4/zl5/7z/7za/brotli/lizard/zstd/flzma2 )

x64 Microsoft Visual C++ v14.29 - 2019
[ GEN plugin unpacker LZ/Lizard/Lzma ] - Not packed
[ 7z* plugin by Igor Pavlov ]

( 7z unpacker update x64 only - no About GUI info , still 22.01 x86 ! )
x64 7za ZS v22.01 unpacker updated to v25.01

fixed get dimensions - movies from www.savevid.com
NOT EXE - .mp4/m4v ( MPEG-4 ) codec : avc1 - H.264 - [ 532x924 cmfciso6dsmsmsixdash ]

5063. fixed ver detection
      x64 - MinGW-w64 GCC: (GNU) compiler v.4 exe ( xx C7 ) - [ v4.?.? ] - http://mingw-w64.sourceforge.net ,
      to :
      x64 - MinGW-w64 GCC: (GNU) compiler v.4 exe ( xx C7 ) - (x86_64-posix-sjlj-rev0, Built by MinGW-W64 project) 4.8.4 - http://mingw-w64.sourceforge.net ,

fixed overlay detector offset for : ( save overlay and click on Overlay view ) only for this 657 sign.
657.Nullsoft SFX v2.46.2-5 Setup Unicode Installer
sign 630.Generic : Installer Nullsoft PiMP Stub [ v.3.02.1 ]

fixed 1123.[ Rust Compiler v1.89.0 - www.rust-lang.org ] - stub : MS Visual C++ v.14.44 - 2025 (E8)

sign
6000. x64 ( GENERIC ) MinGW-w64 GCC: (GNU) Cygwin Fedora compiler no TLS - http://gcc.gnu.org
fixed version info
6000. x64 ( GENERIC ) MinGW-w64 GCC: (GNU) Cygwin Fedora compiler no TLS - http://gcc.gnu.org - [ GNU compiler v.15.1.0 ] ,

fixed detector ( x64 unknown file ):
5144. x64 Microsoft VC++ 14.00 DLL [ CPU : AA64 ARMv8 ] - [Deb: 02] [ PE Header can be Rust/LLVM/GCC Mingw compiler ]

fixed NSTD + mingw detect
1204.Microsoft VC++ 14.00 [ dll - CPU : ARMv7 ] - [ Deb : 02 C++ CodeView ] - [ PE Header be Rust/LLVM/GCC Mingw compiler - 100% mingw ]

fixed ver. if C++ v4
595.GCC MINGW-64w compiler for 32/64 bit ( exe ) - http://mingw-w64.sourceforge.net
to
595.GCC MINGW-64w compiler for 32/64 bit ( exe ) - http://mingw-w64.sourceforge.net - [ GNU C++ 4.7.2 ]

and more

many updates

updated signatures

updated and include version for Windows XP

Added pack .lzma , .lzma Undetectable , .lzma unpacker

config : added [Internet Browset ] change to user path

Viewer : added [ Save to File - window log ]

fixed VMprotect v3.5+

added : Inno unpacker script view

Exe Rippers - save to created Directory : !Rip_exe_{file_name}

added overlay detector l + section ovl scan [ Python .Zlib Archive "PYZ"

added Function : Detect_BoxedApp_SDK32

Ripper .7z xor FF - fixed , detect crypted 7z v.0.4 in Advanced Installer [ v19.x ]

Set Buffer for exe file : 336 MB

Lzma packer ( now you can send malware file via gmail ) :
exeinfope.exe FileName /plzma - pack file with lzma packer ( 7z compatible )
for many files ( mask files ) :
console mode - exeinfope.exe FileName* /plzma - pack file with lzma packer

Lzma unpacker :
exeinfope.exe FileName /ulzma - unpack file with lzma packer ( 7z compatible )
for many files ( mask files ) :
console mode - exeinfope.exe FileName* /ulzma - unpack file with lzma packer

update Obsidium v1.5 - 1.8.2.2

added detector for DLL 32bit : [ plugin for : AutoPlay Media Studio ] v8.5 http://www.indigorose.com

added detector for DLL 64bit : [ .PYD Python C Extensions library ]

added console mode :
unpack all exe files and Inno script from InnoSetup installer
( work only if you don't have installed Inno Extractor - Exeinfo Pe internal unpacker )
parameter example : exeinfope.exe file_name /unp-inno-exe

added Skater v24.2.0.51 2024 ( protected DLL still not detected )

Delphi version resolver Added ( not 100% ) :
Delphi XE7 - v10.4 , Delphi v10.4 Sydney , Delphi v10.4 Rio , Delphi v11.0 Alexandria , Delphi v12 Yukon , Delphi v10.2 Tokyo , Delphi v10.1 Berlin

added Config GUI : Wow64 redirect
added [Internet Browset ] change to user path

added Inno extractor - view inno script

added to NOT EXE - .7z 7-ZIP Archive v.0.4
[ AES - detected - password required ]
[ Mode : DEFLATE ]
[ Mode : P7Z_BCJ ]
[ Mode : LZMA:21 BCJ ]

added detector for protected 7zip : Ripper don't ripp "protected .7z archives by CryptoNickSof"
but Exeinfo PE detect it !

and others ...