MBot

This release is the first development build after the Windows Package Manager 1.2 release candidate build for Windows 10 (1809+) and Windows 11. Experimental features have been enabled in this release. This build will be released to Windows Insider Dev builds, and Windows Package Manager Insiders. What's Changed Add Package Dependencies to index. by @hackean-msft in #1667 Update windows-package-manager-release-roadmap.md by @opsetech in #1770 Bug fix: PackageTrackingCatalog and SQLiteIndexUpdate by @hackean-msft in #1780 Update TSG with more information about a known issue by @ashpatil-msft in #1785 Added argument to control whether to upgrade packages if they have "unknown" versions by @jedieaston in #1765 First drafted client cmdlets from Hackathon 221 by @denelon in #1760 Fix some build warnings by @lechacon in #1794 Fix Typo in upgrade.md by @floh96 in #1822 Add support for UnsupportedOSArchitectures manifest element by @lechacon in #1807 Added check for maximum size of downloaded file names by @jedieaston in #1842 Fix DLL load error in WinGetUtil by @lechacon in #1844 Update localization strings by @JohnMcPMS in #1845 Add comments for localization by @lechacon in #1847 Moved "Installing Dependencies" message to only print if there are dependencies to install. by @jedieaston in #1851 Adds experiment to know if PATH is common issue. by @Lewiscowles1986 in #1841 Check FS feature flags instead of checking for NTFS by @sredna in #1859 Add titles to 1.1 schema for ExpectedReturnCode and UnsupportedOSArchitecture by @ryfu-msft in #1862 Split pipeline build job into x86 and x64 by @lechacon in #1852 Allow upgrades in packages that register a different installer type by @lechacon in #1796 Add a default user agent to REST source calls by @JohnMcPMS in #1839 Add upgrade functionality in Com api by @yao-msft in #1853 Print the upgrade table during upgrade --all by @jedieaston in #1866 Add support for markets by @lechacon in #1806 [ImgBot] Optimize images by @vedantmgoyal2009 in #1871 Fix crash that can occur when failure pointers are null by @JohnMcPMS in #1880 Added extra check for valid arguments in upgrade. by @jedieaston in #1874 Add InstallerErrorCode to COM interface by @JohnMcPMS in #1926 Update gif animation for winget install wingetcreate by @ryfu-msft in #1931 Bump version to 1.3 by @JohnMcPMS in #1933 New Contributors @opsetech made their first contribution in #1770 @floh96 made their first contribution in #1822 @Lewiscowles1986 made their first contribution in #1841 @sredna made their first contribution in #1859 Full Changelog: v1.0.12576...v1.3.431 Download

No content.Download

Fixes #2623 Failed to start in zh-Hans Dirkster99/AvalonDock#324 Navigator window a11y fixes Download

[VERSION] 0.3.4 Download

[VERSION] 0.3.4 Download

See https://frida.re/news/ for details. Download

Official GNU Binutils 2.38 release Download

v1.13.10395.0 Download

v1.12.10393.0 Download

New Language Features C# 8.0: stackalloc in nested contexts Contributions Add TypeDefinitionDocuments to custom debug information data (by @davidwengier in #2578) Fix MainWindow.OpenLink for net6.0 (by @yyjdelete in #2585) Fix loading icons embedded as resources. (by @AustinWise in #2595) Updated Chinese translation. (by @Nyerst in #2606) Enhancements Updated AvalonEdit and other Nuget packages Added hyperlinks to metadata explorer tables Assembly resolver: GetReferenceAssemblyPath now picks closest available version Improved performance of LoadedAssembly.GetTargetFrameworkId, LoadedAssembly.GetRuntimePackAsync and others #2368: Dim namespaces containing only internal types Improved window menu #2608: Support for submenu items Added "Copy results" menu item to Analyzer Bug fixes #2579: Use "ILSpyInstance" mutex to wait until the first ILSpy instance is ready to receive WM_COPYDATA. #2615: Overflow check did not work reliably due to fp rounding error. #2612: Decompilation of newarr with int.MaxValue causes OOME. #2622: Fix crash in ExpressionBuilder when decompiling object initializer composed of readonly properties. And many other fixes, for a full list click here. Download

See https://frida.re/news/ for details. Download

v1.13.10336.0 Download

v1.12.10334.0 Download

Please see the file CHANGELOG for a detailed list of changes. Asset / File Description / Host OS die_sourcecode_3.04.tar.gz Source code tarball Detect_It_Easy-3.04-x86_64.AppImage Portable version for Linux How to run die_3.04_Debian_9.13_amd64.deb Install for Debian 9 die_3.04_Debian_10_amd64.deb Install for Debian 10 die_3.04_Debian_11_amd64.deb Install for Debian 11 die_3.04_Ubuntu_14.04_amd64.deb Install for Ubuntu 14.04 die_3.04_Ubuntu_16.04_amd64.deb Install for Ubuntu 16.04 die_3.04_Ubuntu_18.04_amd64.deb Install for Ubuntu 18.04 die_3.04_Ubuntu_20.04_amd64.deb Install for Ubuntu 20.04 die_3.04_Ubuntu_21.04_amd64.deb Install for Ubuntu 21.04 die_3.04_Ubuntu_21.10_amd64.deb Install for Ubuntu 21.10 die_3.04_portable_Ubuntu_20.04_amd64.tar.gz Portable version for Ubuntu 20.04 die_mac_3.04.pkg Install for macOS die_mac_portable_3.04.zip Portable version for macOS die_win32_portable_3.04.zip Portable version for x86 Win32 die_win64_portable_3.04.zip Portable version for x64 Win64 die_winxp_portable_3.04.zip Portable version for Windows XP die_win64_qt6_portable_3.04.zip Portable version for x64 Win64 Qt6 Download

This release represents our Windows Package Manager 1.2 release candidate build for Windows 10 (1809+), and Windows 11. Experimental features have been disabled in this release. We will follow this release with another Pre-release "developer" build at GitHub so users can continue with experimental features available. What's Changed Support for x64 on ARM64 by @JohnMcPMS in #1441 Add colons after agreement labels by @lechacon in #1440 Spelling by @JohnMcPMS in #1447 Update spelling.yml by @JohnMcPMS in #1448 Update winget trouble shooting steps by @ashpatil-msft in #1454 Show source identifier with source list by @lechacon in #1455 Fix crash when resource.pri is not present by @msftrubengu in #1443 Disable local manifest by default by @yao-msft in #1453 Update localization files by @JohnMcPMS in #1462 doc/Settings.md: Add missing "a" by @me-and in #1467 Add expected installer return codes by @lechacon in #1421 Remove cancel optimization for packageQuery caller by @sreadingMSFT in #1472 Update Docs by @vedantmgoyal2009 in #1471 Update Docs [suggestions] by @vedantmgoyal2009 in #1479 Minor tweaks to spelling to fix issues by @denelon in #1480 Fix Roadmap and Documentation by @vedantmgoyal2009 in #1468 Fix Installer return code max value in schema by bad merge by @yao-msft in #1482 Source resilience by @JohnMcPMS in #1470 Make list show correlated source even when no upgrade is available by @JohnMcPMS in #1481 Handle single unknown version from REST source by @JohnMcPMS in #1483 Fix debug build failure by @yao-msft in #1485 Fix logging of large REST response by @JohnMcPMS in #1489 Create machinery for disabling experimental features by @JohnMcPMS in #1490 Remove motw before calling IAttachmentExecute::Save by @yao-msft in #1491 Fix correlation issue by @JohnMcPMS in #1492 Add sample project for calling COM interface by @lechacon in #1449 Minor bug fixes by @JohnMcPMS in #1494 Update troubleshooting doc with recent error and findings by @ashpatil-msft in #1495 Localize the product name per recommendation by @JohnMcPMS in #1498 Update localization files by @JohnMcPMS in #1499 Make rename retry more frequently for longer, then try making a hardlink by @JohnMcPMS in #1497 Disable test hooks fixes by @JohnMcPMS in #1501 Exit the locale choice loop if the default localization is good enough by @JohnMcPMS in #1500 Ensure available packages match with a single installed package by @lechacon in #1473 Updating Readme by @denelon in #1507 Add option to check fields requiring verified publisher in manifest p… by @yao-msft in #1487 Use correct Subexecution id when working on multiple packages by @ashpatil-msft in #1504 Changes for sample COM caller project by @lechacon in #1514 Fixed bug where the package name wouldn't be written during upgrade. by @jedieaston in #1517 Fix nuget release pipeline by @yao-msft in #1522 Fix test task overrides by @lechacon in #1526 Fix unit tests in pipeline by @JohnMcPMS in #1529 Add missing resource string by @JohnMcPMS in #1532 Change format to long for installer success codes by @ryfu-msft in #1533 Settings streams exchange semantics by @JohnMcPMS in #1534 Added vsconfig file to automatically install required workloads. by @jedieaston in #1551 Color contamination fix by @hackean-msft in #1527 Added validation of count argument for search/list. by @jedieaston in #1564 closes #1569 by @exxmen in #1580 Split COM install command into download and install stages by @lechacon in #1528 Check enablement state for all output write operations by @hackean-msft in #1581 Move Issue Templates to Forms by @Trenly in #1596 The source column is no longer shown in the table if a source was specified (list/upgrade). by @jedieaston in #1598 Add projected winrt wrapper for server com interface and add tests by @sreadingMSFT in #1373 Add link to new discussion for questions by @Trenly in #1617 Package type dependency graph specs by @fzanollo in #1340 Rearrange choices for ARP changes by @JohnMcPMS in #1630 Introduce Managed Interop and merged manifest classes to WingetUtil nuget by @jamespik in #1621 Update doc with Machine-wide install information by @ashpatil-msft in #1642 Added progress indication to InstallMultiplePackages. by @jedieaston in #1613 Installed package tracking by @JohnMcPMS in #1614 Package type Dependency graph by @fzanollo in #1341 Refactor Source Interface to be more object oriented by @yao-msft in #1631 CurrentLocalization is now populated for dependency manifests. by @jedieaston in #1655 Fix yaml manifest schema and parsing for ExpectedReturnCodes by @yao-msft in #1646 Fix incorrect processing of PackageMatchFields in rest client by @yao-msft in #1659 Fix interface casting in client dll. by @sreadingMSFT in #1673 Prevent duplicate installations in winget upgrade all by @yao-msft in #1652 Use package tracking data to correlate in CompositeSource by @JohnMcPMS in #1671 Add product code and PFN to enable existing searches by @JohnMcPMS in #1677 Added an option to select architecture to install. by @jedieaston in #1666 Add preview concept to allow build time determination by @JohnMcPMS in #1679 Print message when install technology is different in upgrade scenarios by @msftrubengu in #1649 Prevent circular dependency in global telemetry logger creation by @yao-msft in #1674 Made all installer types lowercase during show. by @jedieaston in #1689 Use SFINAE to stop paths from logging without using u8string by @JohnMcPMS in #1697 Made the Installation Disclaimer for the Microsoft Store bold. by @jedieaston in #1698 remove plain by @MagnetarRocket in #1700 Make VT enablement/disablement work properly by @JohnMcPMS in #1699 Create shared DLL for winget.exe and COM server by @JohnMcPMS in #1687 Implement parallel downloads for COM scenarios by @lechacon in #1588 Updated Valijson to version 0.6. by @jedieaston in #1721 Change download file name to match the installer URL by @JohnMcPMS in #1722 Updated solution to build under Visual Studio 2022 by @jedieaston in #1720 Update component governance manifest with valijson v0.6 commit by @yao-msft in #1732 Update source agreement market message to be more clear by @yao-msft in #1731 Make telemetry logger per context and send summary event on destruction by @yao-msft in #1718 Update Notice from latest component governance output by @yao-msft in #1755 Added settings to select preferred/required architecture. by @jedieaston in #1727 Update README.md by @denelon in #1759 Reduce localized languages per localization team guidance by @yao-msft in #1761 New Contributors @exxmen made their first contribution in #1580 @MagnetarRocket made their first contribution in #1700 Full Changelog: v1.0.12576...v1.2.10271 Download

See https://frida.re/news/ for details. Download

Release 2022.01 - Irritating Cookie Download

Includes log4j 2.17.1 which addresses CVE-2021-44832 What's New Change History Installation Guide SHA-256: 64860a83d53aca19001d0026e5daf7db05218942dcbbf1ef0b1638242a09b8f6 Download

[VERSION] 0.3.3 Download

[VERSION] 0.3.3 Download

CHANGELOG.md. Download

GDB 11.2 Release. Download

This release improves the performance of capa while also adding 23 new rules and many code quality enhancements. We profiled capa's CPU usage and optimized the way that it matches rules, such as by short circuiting when appropriate. According to our testing, the matching phase is approximately 66% faster than v3.0.3! We also added support for Python 3.10, aarch64 builds, and additional MAEC metadata in the rule headers. This release adds 23 new rules, including nine by Jakub Jozwiak of Mandiant. @ryantxu1 and @dzbeck updated the ATT&CK and MBC mappings for many rules. Thank you! And as always, welcome first time contributors! @kn0wl3dge @jtothej @cl30 New Features engine: short circuit logic nodes for better performance #824 @williballenthin engine: add optimizer the order faster nodes first #829 @williballenthin engine: optimize rule evaluation by skipping rules that can't match #830 @williballenthin support python 3.10 #816 @williballenthin support aarch64 #683 @williballenthin rules: support maec/malware-family meta #841 @mr-tz engine: better type annotations/exhaustiveness checking #839 @cl30 Breaking Changes: None New Rules (23) nursery/delete-windows-backup-catalog michael.hunhoff@mandiant.com nursery/disable-automatic-windows-recovery-features michael.hunhoff@mandiant.com nursery/capture-webcam-video @johnk3r nursery/create-registry-key-via-stdregprov michael.hunhoff@mandiant.com nursery/delete-registry-key-via-stdregprov michael.hunhoff@mandiant.com nursery/delete-registry-value-via-stdregprov michael.hunhoff@mandiant.com nursery/query-or-enumerate-registry-key-via-stdregprov michael.hunhoff@mandiant.com nursery/query-or-enumerate-registry-value-via-stdregprov michael.hunhoff@mandiant.com nursery/set-registry-value-via-stdregprov michael.hunhoff@mandiant.com data-manipulation/compression/decompress-data-using-ucl jakub.jozwiak@mandiant.com linking/static/wolfcrypt/linked-against-wolfcrypt jakub.jozwiak@mandiant.com linking/static/wolfssl/linked-against-wolfssl jakub.jozwiak@mandiant.com anti-analysis/packer/pespin/packed-with-pespin jakub.jozwiak@mandiant.com load-code/shellcode/execute-shellcode-via-windows-fibers jakub.jozwiak@mandiant.com load-code/shellcode/execute-shellcode-via-enumuilanguages jakub.jozwiak@mandiant.com anti-analysis/packer/themida/packed-with-themida william.ballenthin@mandiant.com load-code/shellcode/execute-shellcode-via-createthreadpoolwait jakub.jozwiak@mandiant.com host-interaction/process/inject/inject-shellcode-using-a-file-mapping-object jakub.jozwiak@mandiant.com load-code/shellcode/execute-shellcode-via-copyfile2 jakub.jozwiak@mandiant.com malware-family/plugx/match-known-plugx-module still@teamt5.org Rule Changes update ATT&CK mappings by @ryantxu1 update ATT&CK and MBC mappings by @dzbeck aplib detection by @cdong1012 golang runtime detection by @stevemk14eber Bug Fixes fix circular import error #825 @williballenthin fix smda negative number extraction #430 @kn0wl3dge capa explorer IDA Pro plugin pin supported versions to >= 7.4 and < 8.0 #849 @mike-hunhoff Development add profiling infrastructure #828 @williballenthin linter: detect shellcode extension #820 @mr-tz show features script: add backend flag #430 @kn0wl3dge Raw diffs capa v3.0.3...v3.1.0 capa-rules v3.0.3...v3.1.0 Download

New syntax for counting string occurrences within a range of offsets. Example: #a in (0..100) (#1565). New syntax for checking if a set of strings are found within a range of offsets all of them in (0..100) (#1554). of operator now accepts sets of rules, Examples: 2 of (rule1, rule2, rule3), 2 of (rule*) (##1597) New syntactic sugar allows writing 0 of ($a) as none of ($a*) (#1559). New operator % for string sets. Example: 20% of them (#1434). New operator iequals (#1536). Added functions abs, count, percentage and mode to math module (#1483). Added new console module (#1594). Added support of delayed imports to pe module (#1523). Reduce memory pressure when scanning process memory in Linux (#1470). Improve performance while matching certain hex strings (#1526, #1552). Implement support for unicode file names in Windows (#1491). Add new API functions yr_get_configuration_uintXX and yr_set_configuration_uintXX (#1621). Add --max-process-memory-chunk option for controlling the size of the chunks while scanning a process memory (#1393). Add --skip-larger option for skipping files larger than a certain size while scanning directories. BUGFIX: fullword modifier not working properly under all locales (#1544). BUGFIX: Fix edge case when files have a numeric name that was interpreted as a PID number (#1541). BUGFIX: Fix memory leaks in magic module. Thanks to @wxsBSD, @secDre4mer, @regeciovad, @ladislav-zezula, @hillu, @xbabka01, @LearnToGetBetter Download

Release Notes Download