Merge pull request #1626 from mandiant/update-eztools-hashes

emtuls · web-flow · commit 4cfbe748f6c7 · 2026-05-22T23:23:49.000-04:00
fix EZ tools and memprocfs
diff --git a/packages/amcacheparser.vm/amcacheparser.vm.nuspec b/packages/amcacheparser.vm/amcacheparser.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>amcacheparser.vm</id>
-    <version>1.5.2.20260221</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Amcache.hve parser with lots of extra features. Handles locked files</description>
     <dependencies>
diff --git a/packages/amcacheparser.vm/tools/chocolateyinstall.ps1 b/packages/amcacheparser.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'AmcacheParser'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/AmcacheParser.zip'
-$zipSha256 = '334D03D26B1261646B06401BBB77E5FBE74BF0C4C636C2479B0F53CFB094EA81'
+$zipSha256 = '1C4391D52C36DD2B74981BBAB7F5A65FCBD41A57BDD5ADE67239A03A84953B17'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/appcompatcacheparser.vm/appcompatcacheparser.vm.nuspec b/packages/appcompatcacheparser.vm/appcompatcacheparser.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>appcompatcacheparser.vm</id>
-    <version>1.5.1.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>AppCompatCache aka ShimCache parser. Handles locked files</description>
     <dependencies>
diff --git a/packages/appcompatcacheparser.vm/tools/chocolateyinstall.ps1 b/packages/appcompatcacheparser.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'AppCompatCacheParser'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/AppCompatCacheParser.zip'
-$zipSha256 = '58b1a999c1f31e6d28ffcc722e49fadf0254a7ad04c48cde2537a61ccb6d1198'
+$zipSha256 = '67756841DBCD8CA3F47083BE2B016A22F61BDE0EA3450F0A776CF878BF66D42D'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/bstrings.vm/bstrings.vm.nuspec b/packages/bstrings.vm/bstrings.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>bstrings.vm</id>
-    <version>1.5.3.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Find them strings yo. Built in regex patterns. Handles locked files</description>
     <dependencies>
diff --git a/packages/bstrings.vm/tools/chocolateyinstall.ps1 b/packages/bstrings.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'bstrings'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/bstrings.zip'
-$zipSha256 = '32078f3881161e0fefe63b9004bdea1ed6877bc23ff8a444f7f42afe005593e6'
+$zipSha256 = '0630D2B3A527F285C8407ECE8DEDDCDDFE92531A25E16C2D5FFD2D60FB90D8C6'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/ezviewer.vm/ezviewer.vm.nuspec b/packages/ezviewer.vm/ezviewer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>ezviewer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
 <description>Ezviewer is a standalone, zero dependency document viewer and hex editor.</description>
     <dependencies>
diff --git a/packages/ezviewer.vm/tools/chocolateyinstall.ps1 b/packages/ezviewer.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'EZViewer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/EZViewer.zip'
-$zipSha256 = '35edaf1c2d7d344905d1fafb37f0b2c7742cd71f90600de99449d66776f3d9a0'
+$zipSha256 = 'EBE7074F907BE1A74F995530248332D03FD35BAB648F1204A59ADC1BDF126E9E'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/hasher.vm/hasher.vm.nuspec b/packages/hasher.vm/hasher.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>hasher.vm</id>
-    <version>2.1.0.20250505</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Hasher is a tool to calculate hashes.</description>
     <dependencies>
diff --git a/packages/hasher.vm/tools/chocolateyinstall.ps1 b/packages/hasher.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'Hasher'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.mikestammer.com/hasher.zip'
-$zipSha256 = '1fa5f2e91eed2c819a107a160a56d6cc3e12807355741db6dde4395cb6d527bf'
+$zipSha256 = 'A8A343013D6ED5B6988EBCE1B3A561DF51AB5928BC3A0F489A7E175F8F6F89D4'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/jlecmd.vm/jlecmd.vm.nuspec b/packages/jlecmd.vm/jlecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>jlecmd.vm</id>
-    <version>1.5.1.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Jump List parser</description>
     <dependencies>
diff --git a/packages/jlecmd.vm/tools/chocolateyinstall.ps1 b/packages/jlecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'JLECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/JLECmd.zip'
-$zipSha256 = '15c5aa37ea7d81e21183343396296ede7292f4e2151949c104e978dc68f832f3'
+$zipSha256 = '155EE54E6AC6B70BCE1AA636EC52D0B0165263933764D9A45C85AF97DF546892'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/jumplist_explorer.vm/jumplist_explorer.vm.nuspec b/packages/jumplist_explorer.vm/jumplist_explorer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>jumplist_explorer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>GUI based Jump List viewer</description>
     <dependencies>
diff --git a/packages/jumplist_explorer.vm/tools/chocolateyinstall.ps1 b/packages/jumplist_explorer.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'JumpListExplorer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/JumpListExplorer.zip'
-$zipSha256 = '7c01f2ab828e4a3da3c06f2f3ab904ea2e266f2efd82f7b83ba6c872e95b4f62'
+$zipSha256 = '953C2D91C948E48F1F0731817033BD89B877F8DD163720D8C1D686AC6214D737'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/lecmd.vm/lecmd.vm.nuspec b/packages/lecmd.vm/lecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>lecmd.vm</id>
-    <version>1.5.1.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Parse lnk files</description>
     <dependencies>
diff --git a/packages/lecmd.vm/tools/chocolateyinstall.ps1 b/packages/lecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'LECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/LECmd.zip'
-$zipSha256 = '60a1563049dca01ec88343b5c6eaf0f37e6a6b4016010db3c03f41fe19215bfa'
+$zipSha256 = 'F3E9C799EC7D3FA4CD5F553EC3F9D544C80C8E48AFD04EF43456DA3D48AD0760'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/memprocfs.vm/memprocfs.vm.nuspec b/packages/memprocfs.vm/memprocfs.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>memprocfs.vm</id>
-    <version>5.17.5.20260415</version>
+    <version>5.17.7.20260513</version>
     <authors>Ulf Frisk</authors>
     <description>MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system.</description>
     <dependencies>
diff --git a/packages/memprocfs.vm/tools/chocolateyinstall.ps1 b/packages/memprocfs.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'MemProcFS'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/ufrisk/MemProcFS/releases/download/v5.17/MemProcFS_files_and_binaries_v5.17.5-win_x64-20260415.zip'
-$zipSha256 = '9d964fc0c60bea4fdaa94eeff6e8a504dbd5d1589eb65e9d0f6b10e5c7f92e73'
+$zipUrl = 'https://github.com/ufrisk/MemProcFS/releases/download/v5.17/MemProcFS_files_and_binaries_v5.17.7-win_x64-20260514.zip'
+$zipSha256 = 'BC354FE023811AC6CD6DBFA8596ABFEE26FD7ED6AF82651129A16451CDB36FA7'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/mft_explorer.vm/mft_explorer.vm.nuspec b/packages/mft_explorer.vm/mft_explorer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>mft_explorer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Graphical $MFT viewer</description>
     <dependencies>
diff --git a/packages/mft_explorer.vm/tools/chocolateyinstall.ps1 b/packages/mft_explorer.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'MFTExplorer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/MFTExplorer.zip'
-$zipSha256 = '43fbcf955417acc200939935f9f691051f8a47eb662efdd1827c7ee5c97b89a8'
+$zipSha256 = '6266F057B3B8243931FF6533B0D72885F3D53976C44F2DB531372117CA54ADE9'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/mftecmd.vm/mftecmd.vm.nuspec b/packages/mftecmd.vm/mftecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>mftecmd.vm</id>
-    <version>1.3.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>$MFT, $Boot, $J, $SDS, $I30, and $LogFile (coming soon) parser. Handles locked files</description>
     <dependencies>
diff --git a/packages/mftecmd.vm/tools/chocolateyinstall.ps1 b/packages/mftecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'MFTECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/MFTECmd.zip'
-$zipSha256 = 'd8124cfe0344bdf4e01bb96cf46900c194ecd7df364d335a1bb3e883a1b34e44'
+$zipSha256 = '60AE857A554B830243E38E91FAFDFDF6066F31C703282C5C6F40DAF3B64D3160'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/rbcmd.vm/rbcmd.vm.nuspec b/packages/rbcmd.vm/rbcmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>rbcmd.vm</id>
-    <version>1.6.1.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Recycle Bin artifact (INFO2/$I) parser</description>
     <dependencies>
diff --git a/packages/rbcmd.vm/tools/chocolateyinstall.ps1 b/packages/rbcmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'RBCmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/RBCmd.zip'
-$zipSha256 = 'a380652659549bda82230543d3fe9db5d66af5efcbdcf09cf9ba10ecea97cfaa'
+$zipSha256 = 'E2B5C6BA8929A8731D861577C796763730E303EC2D4DD8D294EE0DE8D5CEB541'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/recaf.vm/recaf.vm.nuspec b/packages/recaf.vm/recaf.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>recaf.vm</id>
-    <version>4.0.0.20260402</version>
+    <version>5.0.0.20260509</version>
     <authors>Matt</authors>
     <description>java bytecode editor</description>
     <dependencies>
diff --git a/packages/recaf.vm/tools/chocolateyinstall.ps1 b/packages/recaf.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'recaf-4.0.0'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $exeUrl = 'https://github.com/Col-E/Recaf/releases/download/4.0.0-alpha/recaf-4x-alpha-win-86-x64.jar'
-$exeSha256 = 'a3e894306b118ef9a5e6aee4e2ba368c093320a284d933a9975c859243df81eb'
+$exeSha256 = '84F79549D37739BF4D6671FA9D4C6A84978A4D9883E8B6A54D0D4BCCC6A66624'
 
 VM-Install-Single-Exe $toolName $category $exeUrl -exeSha256 $exeSha256 -consoleApp $false
diff --git a/packages/recentfilecacheparser.vm/recentfilecacheparser.vm.nuspec b/packages/recentfilecacheparser.vm/recentfilecacheparser.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>recentfilecacheparser.vm</id>
-    <version>1.5.1.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>RecentFileCache parser</description>
     <dependencies>
diff --git a/packages/recentfilecacheparser.vm/tools/chocolateyinstall.ps1 b/packages/recentfilecacheparser.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'RecentFileCacheParser'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/RecentFileCacheParser.zip'
-$zipSha256 = 'caedc350c64dc5f14f5ae1e6c25d9adfabdfeb51411f176653d6b11281f06b17'
+$zipSha256 = '50731763D336940AE35D20575B058BDA09F3ABB96E4662BD61A5F2994017C46E'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/sbecmd.vm/sbecmd.vm.nuspec b/packages/sbecmd.vm/sbecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>sbecmd.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>ShellBags Explorer, command line edition, for exporting shellbag data</description>
     <dependencies>
diff --git a/packages/sbecmd.vm/tools/chocolateyinstall.ps1 b/packages/sbecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'SBECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/SBECmd.zip'
-$zipSha256 = '797e31d3641ede942da2c338766587b69dccd36d2faa5deeaa55c9d8174a1c4c'
+$zipSha256 = '88EDB98A32BAAF68114AA106F25F999E46D387D9D0003D3222A1168CC1B7EB9B'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/sdb_explorer.vm/sdb_explorer.vm.nuspec b/packages/sdb_explorer.vm/sdb_explorer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>sdb_explorer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Shim database GUI</description>
     <dependencies>
diff --git a/packages/sdb_explorer.vm/tools/chocolateyinstall.ps1 b/packages/sdb_explorer.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'SDBExplorer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/SDBExplorer.zip'
-$zipSha256 = '22d7f8ea565f3b29a701a9542094534e4ca190a0d6e7fd95caefaabeb0e04568'
+$zipSha256 = 'C3CA7453F659BB0981BF2A573672B74BFFFEE5985E752CEC35BDA3ABC20080DE'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/shellbags_explorer.vm/shellbags_explorer.vm.nuspec b/packages/shellbags_explorer.vm/shellbags_explorer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>shellbags_explorer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>GUI for browsing shellbags data. Handles locked files</description>
     <dependencies>
diff --git a/packages/shellbags_explorer.vm/tools/chocolateyinstall.ps1 b/packages/shellbags_explorer.vm/tools/chocolateyinstall.ps1
@@ -5,7 +5,7 @@ $toolName = 'ShellBagsExplorer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/ShellBagsExplorer.zip'
-$zipSha256 = '750c2b298945ec871f134804f39334bb764bbfb1bb7d0615e5f08a8ae2694a43'
+$zipSha256 = '56A5ADBCB7649CA4B3F8740EA285FE814AEA4CC8F185EAFBF6A0051ECE9B09CE'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
 $rawToolDir = Join-Path $Env:RAW_TOOLS_DIR "$toolName\$toolName"
diff --git a/packages/srumecmd.vm/srumecmd.vm.nuspec b/packages/srumecmd.vm/srumecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>srumecmd.vm</id>
-    <version>1.0.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Process SRUDB.dat and (optionally) SOFTWARE hive for network, process, and energy info!</description>
     <dependencies>
diff --git a/packages/srumecmd.vm/tools/chocolateyinstall.ps1 b/packages/srumecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'SrumECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/SrumECmd.zip'
-$zipSha256 = 'da320e2281687e11dab966cfcd60ae8ad579c59cb3488f842800e683315f99b6'
+$zipSha256 = '4D7035100F771A7EF5D75AC30E7EDB70761976F2C92476213D19ABB50D4C8489'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/sumecmd.vm/sumecmd.vm.nuspec b/packages/sumecmd.vm/sumecmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>sumecmd.vm</id>
-    <version>1.0.0.20260331</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Process Microsoft User Access Logs found under "C:\Windows\System32\LogFiles\SUM"</description>
     <dependencies>
diff --git a/packages/sumecmd.vm/tools/chocolateyinstall.ps1 b/packages/sumecmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'SumECmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/SumECmd.zip'
-$zipSha256 = '9f623f7490505f645ba11b238a97f63e5118efcf7be719aadc163c447ef52646'
+$zipSha256 = '15C6AAFC9084854824C8703CBF7AEC74B49EB7CD84B82407BF4D90E2BA6BDDF2'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/timeline_explorer.vm/timeline_explorer.vm.nuspec b/packages/timeline_explorer.vm/timeline_explorer.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>timeline_explorer.vm</id>
-    <version>2.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>View CSV and Excel files, filter, group, sort, etc. with ease</description>
     <dependencies>
diff --git a/packages/timeline_explorer.vm/tools/chocolateyinstall.ps1 b/packages/timeline_explorer.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'TimelineExplorer'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/TimelineExplorer.zip'
-$zipSha256 = 'e46799adacfe2a18c69faa1e85f084a56c1400832d5faaf7efc0a3bda39d8a9c'
+$zipSha256 = 'EFB9630E0A887E58EBB37A9BC3CB8D6D0C9D4E59B3ECEC7B8F771C8316223EC6'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true
diff --git a/packages/vscmount.vm/tools/chocolateyinstall.ps1 b/packages/vscmount.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'VSCMount'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/VSCMount.zip'
-$zipSha256 = '6b263ea122a8fe3404a7bff68c7ac316c69f9d9f5c093bf439e06bcea0ffc8b5'
+$zipSha256 = '33F375B78C2FBB27901A63CEED1C79FA1F23EE9ABDA80D9371ABE163C434B8E0'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/vscmount.vm/vscmount.vm.nuspec b/packages/vscmount.vm/vscmount.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>vscmount.vm</id>
-    <version>1.5.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Mount all VSCs on a drive letter to a given mount point</description>
     <dependencies>
diff --git a/packages/wxtcmd.vm/tools/chocolateyinstall.ps1 b/packages/wxtcmd.vm/tools/chocolateyinstall.ps1
@@ -5,6 +5,6 @@ $toolName = 'WxTCmd'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
 $zipUrl = 'https://download.ericzimmermanstools.com/net9/WxTCmd.zip'
-$zipSha256 = 'e5d1b50fad93bbe27ecb0aab9b5e791427ad08136741d71c61e7216f38a2f2d0'
+$zipSha256 = 'AA08A020CC9DAA22551EDBF07BCA336CB8249CE29830D67CF09BC3703DFFEC6D'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false
diff --git a/packages/wxtcmd.vm/wxtcmd.vm.nuspec b/packages/wxtcmd.vm/wxtcmd.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>wxtcmd.vm</id>
-    <version>1.1.0.20260316</version>
+    <version>5.0.0.20260509</version>
     <authors>Eric Zimmerman</authors>
     <description>Windows 10 Timeline database parser</description>
     <dependencies>
