mandiant · vm-packages · Mar 19, 2025 · Mar 19, 2025 · Mar 19, 2025 · Mar 19, 2025
diff --git a/packages/apktool.vm/apktool.vm.nuspec b/packages/apktool.vm/apktool.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>apktool.vm</id>
-    <version>2.11.0.20250219</version>
+    <version>2.11.1</version>
     <authors>Connor Tumbleson, Ryszard Wisniewski</authors>
     <description>A tool for reverse engineering 3rd party, closed, binary Android apps.</description>
     <dependencies>

diff --git a/packages/apktool.vm/tools/chocolateyinstall.ps1 b/packages/apktool.vm/tools/chocolateyinstall.ps1
@@ -15,8 +15,8 @@ try {
 
   # Download apktool.jar
   $toolPath = Join-Path $rawToolPath "$toolName.jar"
-  $toolSource = 'https://github.com/iBotPeaches/Apktool/releases/download/v2.11.0/apktool_2.11.0.jar'
-  $toolChecksum = "8fdc17c6fe2e6d80d71b8718eb2a5d0379f1cc7139ae777f6a499ce397b26f54"
+  $toolSource = 'https://github.com/iBotPeaches/Apktool/releases/download/v2.11.1/apktool_2.11.1.jar'
+  $toolChecksum = "56d59c524fc764263ba8d345754d8daf55b1887818b15cd3b594f555d249e2db"
   Get-ChocolateyWebFile -PackageName $toolName -FileFullPath $toolPath -Url $toolSource -Checksum $toolChecksum -ChecksumType "sha256"
   VM-Assert-Path $toolPath
 

diff --git a/packages/autopsy.vm/autopsy.vm.nuspec b/packages/autopsy.vm/autopsy.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>autopsy.vm</id>
-    <version>4.21.0.20250219</version>
+    <version>4.21.0.20250319</version>
     <authors>The Sleuth Kit</authors>
     <description>Autopsy is a graphical interface to The Sleuth Kit and other open source digital forensics tools.</description>
     <dependencies>

diff --git a/packages/autopsy.vm/tools/chocolateyinstall.ps1 b/packages/autopsy.vm/tools/chocolateyinstall.ps1
@@ -4,8 +4,8 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'Autopsy'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$exeUrl = "https://github.com/sleuthkit/autopsy/releases/download/autopsy-4.21.0/autopsy-4.21.0-64bit.msi"
-$exeSha256 = '8401a11e0e276274f078eb613ce8494dd894617d436ba326be1cda0d2fd8ef0a'
+$exeUrl = "https://github.com/sleuthkit/autopsy/releases/download/autopsy-4.22.0/autopsy-4.22.0-64bit.msi"
+$exeSha256 = '3071d1f92402fba84329cee59680cf940bdbec0d5ad8470655dc8f9ae0b93610'
 
 $toolDir = Join-Path ${Env:ProgramFiles} $toolName
 $executablePath = Join-Path $toolDir "bin\autopsy64.exe"

diff --git a/packages/azurehound.vm/azurehound.vm.nuspec b/packages/azurehound.vm/azurehound.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>azurehound.vm</id>
-    <version>2.2.1.20250219</version>
+    <version>2.3.0</version>
     <authors>BloodHoundAD</authors>
     <description>AzureHound is the BloodHound data collector for Microsoft Azure.</description>
     <dependencies>

diff --git a/packages/azurehound.vm/tools/chocolateyinstall.ps1 b/packages/azurehound.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'AzureHound'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/BloodHoundAD/AzureHound/releases/download/v2.2.1/azurehound-windows-amd64.zip'
-$zipSha256 = '111ce3f5c15cdcce58d54c5d549b1e36eaa4b78a0a31531548cb9b0f71f78125'
+$zipUrl = 'https://github.com/BloodHoundAD/AzureHound/releases/download/v2.3.0/azurehound-windows-amd64.zip'
+$zipSha256 = 'b2bc506dddb2920c87b1cc9e37f8dd5e28e3f4daa95714a5e8992179f1a0ad58'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256
diff --git a/packages/capa.vm/capa.vm.nuspec b/packages/capa.vm/capa.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>capa.vm</id>
-    <version>9.0.0.20250219</version>
+    <version>9.1.0</version>
     <description>capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do.</description>
     <authors>@williballenthin, @mr-tz, @Ana06, @mike-hunhoff, @mwilliams31, @MalwareMechanic</authors>
     <dependencies>

diff --git a/packages/capa.vm/tools/chocolateyinstall.ps1 b/packages/capa.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'capa'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = "https://github.com/mandiant/capa/releases/download/v9.0.0/capa-v9.0.0-windows.zip"
-$zipSha256 = "139d20b415063152adfb6b8c566bf2bc0a37f2150c6420e6209704b6be20be20"
+$zipUrl = "https://github.com/mandiant/capa/releases/download/v9.1.0/capa-v9.1.0-windows.zip"
+$zipSha256 = "579194136730e9c6b31254abca12382534f4eef8b8b4bcf718cc4b31cfb96e05"
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -arguments "--help"
diff --git a/packages/cryptotester.vm/cryptotester.vm.nuspec b/packages/cryptotester.vm/cryptotester.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>cryptotester.vm</id>
-    <version>1.7.1.20250219</version>
+    <version>1.7.2</version>
     <authors>Michael Gillespie (@demonslay335)</authors>
     <description>Utility tool for performing cryptanalysis with a focus on ransomware cryptography</description>
     <dependencies>

diff --git a/packages/cryptotester.vm/tools/chocolateyinstall.ps1 b/packages/cryptotester.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'CryptoTester'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/Demonslay335/CryptoTester/releases/download/v1.7.1.0/CryptoTester.zip'
-$zipSha256 = '3d354ce4f66a023dfa3cfcb3beac06d5b7be331d6f247035ee7957e5af64fac3'
+$zipUrl = 'https://github.com/Demonslay335/CryptoTester/releases/download/v1.7.2.0/CryptoTester.zip'
+$zipSha256 = '3440ff6d2bb4f160709221fb3df8dae0c4a0f9c61414e4ea15c776b153431cca'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false
diff --git a/packages/cygwin.vm/cygwin.vm.nuspec b/packages/cygwin.vm/cygwin.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>cygwin.vm</id>
-    <version>3.5.7.20250219</version>
+    <version>3.6.0</version>
     <description>Wrapper for cygwin and useful cygwin packages</description>
     <authors>Red Hat Inc.</authors>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="cygwin" version="[3.5.7]" />
+      <dependency id="cygwin" version="[3.6.0]" />
     </dependencies>
     <tags>Productivity Tools</tags>
   </metadata>

diff --git a/packages/exiftool.vm/exiftool.vm.nuspec b/packages/exiftool.vm/exiftool.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>exiftool.vm</id>
-    <version>13.18.0.20250219</version>
+    <version>13.25.0</version>
     <authors>Phil Harvey</authors>
     <description>A tool for reeding and writing file metadata</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="exiftool" version="[13.18.0]" />
+      <dependency id="exiftool" version="[13.25.0]" />
     </dependencies>
     <tags>File Information</tags>
   </metadata>

diff --git a/packages/ghidra.vm/ghidra.vm.nuspec b/packages/ghidra.vm/ghidra.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>ghidra.vm</id>
-    <version>11.2.1.20250219</version>
+    <version>11.3.1</version>
     <authors>National Security Agency</authors>
     <description>A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="ghidra" version="[11.2.1]" />
+      <dependency id="ghidra" version="[11.3.1]" />
       <dependency id="openjdk.vm" />
     </dependencies>
     <tags>Disassemblers</tags>

diff --git a/packages/goresym.vm/goresym.vm.nuspec b/packages/goresym.vm/goresym.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>goresym.vm</id>
-    <version>3.0.1.20250219</version>
+    <version>3.0.2</version>
     <authors>stevemk14ebr</authors>
     <description>Go symbol recovery tool</description>
     <dependencies>

diff --git a/packages/goresym.vm/tools/chocolateyinstall.ps1 b/packages/goresym.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'GoReSym'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/mandiant/GoReSym/releases/download/v3.0.1/GoReSym-windows.zip'
-$zipSha256 = 'f8fdf6b597222cb8f6fcb92961b3a5b537d799cc152b909dd95cb09d4efe830e'
+$zipUrl = 'https://github.com/mandiant/GoReSym/releases/download/v3.0.2/GoReSym-windows.zip'
+$zipSha256 = '8bf91fe0104a7b15f97e665cc4f0055409b8bc824e762fd72d69d5f0ce6f8942'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -arguments "--help"
diff --git a/packages/group3r.vm/group3r.vm.nuspec b/packages/group3r.vm/group3r.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>group3r.vm</id>
-    <version>1.0.65.20250219</version>
+    <version>1.0.67</version>
     <authors>l0ss</authors>
     <description>Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Policy, and to identify exploitable misconfigurations.</description>
     <dependencies>

diff --git a/packages/group3r.vm/tools/chocolateyinstall.ps1 b/packages/group3r.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'Group3r'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$exeUrl = 'https://github.com/Group3r/Group3r/releases/download/1.0.65/Group3r.exe'
-$exeSha256 = '10accf5038dd9a3353d50e63d208c684ddfe8df4d06b33602fada0f44a739039'
+$exeUrl = 'https://github.com/Group3r/Group3r/releases/download/1.0.67/Group3r.exe'
+$exeSha256 = '4c3fa4168e5b406f8b4ad0d61e38b85388b04fcaed2abab4c5dc51462d1d515b'
 
 VM-Install-Single-Exe $toolName $category $exeUrl -exeSha256 $exeSha256 -consoleApp $true
diff --git a/packages/hayabusa.vm/hayabusa.vm.nuspec b/packages/hayabusa.vm/hayabusa.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>hayabusa.vm</id>
-    <version>3.0.1.20250219</version>
+    <version>3.1.1</version>
     <authors>Yamato Security</authors>
     <description>Windows event log fast forensics timeline generator and threat hunting tool</description>
     <dependencies>

diff --git a/packages/hayabusa.vm/tools/chocolateyinstall.ps1 b/packages/hayabusa.vm/tools/chocolateyinstall.ps1
@@ -4,9 +4,9 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'hayabusa'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = "https://github.com/Yamato-Security/hayabusa/releases/download/v3.0.1/hayabusa-3.0.1-win-x64.zip"
-$zipSha256 = 'e3d732dc0deb9c0ad623364b6fdea3dcd744123821bf1843ec2943f084a7fd19'
+$zipUrl = "https://github.com/Yamato-Security/hayabusa/releases/download/v3.1.1/hayabusa-3.1.1-win-x64.zip"
+$zipSha256 = '340f3846d86856d92f1e0d93fecccd81e020c10110f290603befc289607ce804'
 
-$executableName = $toolName.ToLower() + "-3.0.1-win-x64.exe"
+$executableName = $toolName.ToLower() + "-3.1.1-win-x64.exe"
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false -executableName $executableName
diff --git a/packages/hollowshunter.vm/hollowshunter.vm.nuspec b/packages/hollowshunter.vm/hollowshunter.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>hollowshunter.vm</id>
-    <version>0.4.0.20250219</version>
+    <version>0.4.1</version>
     <authors>hasherezade</authors>
     <description>Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).</description>
     <dependencies>

diff --git a/packages/hollowshunter.vm/tools/chocolateyinstall.ps1 b/packages/hollowshunter.vm/tools/chocolateyinstall.ps1
@@ -4,10 +4,10 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'hollows_hunter'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.4.0.2/hollows_hunter32.zip'
-$zipSha256 = '81f9e36d9aac860a8cb8e49715e9c70af6c9a52daa619cac86d71f473c959838'
-$zipUrl_64 = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.4.0.2/hollows_hunter64.zip'
-$zipSha256_64 = '1616812ac67ac3113d4fb065ec51f4bb50b8461ce41a969708c7d9ae17dfb49d'
+$zipUrl = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.4.1/hollows_hunter32.zip'
+$zipSha256 = '4312354f4b5c2665131c1db7cc4572b6c4ff09a0b9a8aec911e57a0dab400972'
+$zipUrl_64 = 'https://github.com/hasherezade/hollows_hunter/releases/download/v0.4.1/hollows_hunter64.zip'
+$zipSha256_64 = '59610f266b1b6cbe12c6bb7103c2c9f388b9b70ff5fa9b51d0d084de38dd963f'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -zipUrl_64 $zipUrl_64 -zipSha256_64 $zipSha256_64 -consoleApp $true
 
diff --git a/packages/ida.plugin.hrtng.vm/ida.plugin.hrtng.vm.nuspec b/packages/ida.plugin.hrtng.vm/ida.plugin.hrtng.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>ida.plugin.hrtng.vm</id>
-    <version>2.2.21.20250213</version>
+    <version>2.4.30</version>
     <authors>KasperskyLab</authors>
     <description>IDA Pro plugin with features such as decryption, automation, deobfuscation, patching, lib code recognition and pseudocode transformations.</description>
     <dependencies>

diff --git a/packages/ida.plugin.hrtng.vm/tools/chocolateyinstall.ps1 b/packages/ida.plugin.hrtng.vm/tools/chocolateyinstall.ps1
@@ -1,8 +1,8 @@
 $ErrorActionPreference = 'Stop'
 Import-Module vm.common -Force -DisableNameChecking
 
-$pluginUrl = "https://github.com/KasperskyLab/hrtng/releases/download/v2.2.21/hrtng-2.2.21.7z"
-$pluginSha256 = "0918639f3a27fe2d85556cd7a730fc588456302f2e95a23e9e3f62f4e17b0f1e"
+$pluginUrl = "https://github.com/KasperskyLab/hrtng/releases/download/v2.4.30/hrtng-2.4.30.7z"
+$pluginSha256 = "34ca57eb236cda6fc46983748e58a4dc3efcfb020107b923416e0d1549905f67"
 $tempDownloadDir = Join-Path ${Env:TEMP} "temp_$([guid]::NewGuid())"
 
 $packageArgs = @{

diff --git a/packages/notepadplusplus.vm/notepadplusplus.vm.nuspec b/packages/notepadplusplus.vm/notepadplusplus.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>notepadplusplus.vm</id>
-    <version>8.7.6.20250220</version>
+    <version>8.7.8</version>
     <description>Wrapper for Notepad++</description>
     <authors>Don Ho</authors>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="notepadplusplus" version="[8.7.6]" />
+      <dependency id="notepadplusplus" version="[8.7.8]" />
     </dependencies>
     <tags>Productivity Tools</tags>
   </metadata>

diff --git a/packages/npcap.vm/npcap.vm.nuspec b/packages/npcap.vm/npcap.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>npcap.vm</id>
-    <version>1.80.20250219</version>
+    <version>1.81</version>
     <authors>Nmap Project</authors>
     <description>Npcap is an architecture for packet capture and network analysis for Windows operating systems, consisting of a software library and a network driver.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="autohotkey" version="[1.1.37.1]" />
+      <dependency id="autohotkey" version="[2.0.19]" />
     </dependencies>
     <tags>Networking</tags>
   </metadata>

diff --git a/packages/npcap.vm/tools/chocolateyinstall.ps1 b/packages/npcap.vm/tools/chocolateyinstall.ps1
@@ -2,8 +2,8 @@ $ErrorActionPreference = 'Stop'
 Import-Module vm.common -Force -DisableNameChecking
 
 try {
-    $exeUrl = 'https://npcap.com/dist/npcap-1.80.exe'
-    $exeSha256 = 'ac4f26d7d9f994d6f04141b2266f02682def51af63c09c96a7268552c94a6535'
+    $exeUrl = 'https://npcap.com/dist/npcap-1.81.exe'
+    $exeSha256 = '69a7f8467d2d207fc9f188dda5fea42e13de71f126ebf42bcf4b4682d5b68bd0'
     $installerName = Split-Path -Path $exeUrl -Leaf
 
     $packageArgs = @{

diff --git a/packages/openvpn.vm/openvpn.vm.nuspec b/packages/openvpn.vm/openvpn.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>openvpn.vm</id>
-    <version>2.6.13.20250219</version>
+    <version>2.6.13.20250319</version>
     <authors>OpenVPN Technologies Inc</authors>
     <description>OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="openvpn" version="[2.6.13.1]" />
+      <dependency id="openvpn" version="[2.6.13.2]" />
     </dependencies>
     <tags>Networking</tags>
   </metadata>

diff --git a/packages/pesieve.vm/pesieve.vm.nuspec b/packages/pesieve.vm/pesieve.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>pesieve.vm</id>
-    <version>0.4.0.20250219</version>
+    <version>0.4.1</version>
     <authors>hasherezade</authors>
     <description>pe-sieve recognizes and dumps variety of implants within the scanned process.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="pesieve" version="[0.4.0.1]" />
+      <dependency id="pesieve" version="[0.4.1]" />
     </dependencies>
     <tags>Memory</tags>
   </metadata>

diff --git a/packages/putty.vm/putty.vm.nuspec b/packages/putty.vm/putty.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>putty.vm</id>
-    <version>0.82.0.20250219</version>
+    <version>0.83.0</version>
     <authors>Simon Tatham</authors>
     <description>PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms, along with an xterm terminal emulator.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="putty" version="[0.82.0]" />
+      <dependency id="putty" version="[0.83.0]" />
     </dependencies>
     <tags>Networking</tags>
   </metadata>

diff --git a/packages/resourcehacker.vm/resourcehacker.vm.nuspec b/packages/resourcehacker.vm/resourcehacker.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>resourcehacker.vm</id>
-    <version>0.0.0.20250219</version>
+    <version>0.0.0.20250319</version>
     <authors>Angus Johnson</authors>
     <description>Resource Hacker is a resource editor for 32bit and 64bit Windows applications.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="resourcehacker.portable" version="[5.2.7]" />
+      <dependency id="resourcehacker.portable" version="[5.2.8]" />
     </dependencies>
     <tags>Utilities</tags>
   </metadata>

diff --git a/packages/sharphound.vm/sharphound.vm.nuspec b/packages/sharphound.vm/sharphound.vm.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>sharphound.vm</id>
-    <version>2.5.13.20250219</version>
+    <version>2.6.0</version>
     <authors>specterops</authors>
     <description>SharpHound is an Active Directory ingester tool for BloodHound.</description>
     <dependencies>

diff --git a/packages/sharphound.vm/tools/chocolateyinstall.ps1 b/packages/sharphound.vm/tools/chocolateyinstall.ps1
@@ -4,7 +4,7 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'SharpHound'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = 'https://github.com/BloodHoundAD/SharpHound/releases/download/v2.5.13/SharpHound-v2.5.13.zip'
-$zipSha256 = '9df25d2a8a999c9871639c8e53bedf3bcdfc5c1c6250f77e8d416c38c167121f'
+$zipUrl = 'https://github.com/BloodHoundAD/SharpHound/releases/download/v2.6.0/SharpHound-v2.6.0.zip'
+$zipSha256 = '2c48703455ce3a217b7c1b768ac729c696cb6811bc3eb20fd60927b2ffc66b0e'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256
diff --git a/packages/tor-browser.vm/tor-browser.vm.nuspec b/packages/tor-browser.vm/tor-browser.vm.nuspec
@@ -2,12 +2,12 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
   <metadata>
     <id>tor-browser.vm</id>
-    <version>14.0.5.20250219</version>
+    <version>14.0.7</version>
     <authors>Tor Project</authors>
     <description>The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world.</description>
     <dependencies>
       <dependency id="common.vm"  version="0.0.0.20250206" />
-      <dependency id="tor-browser" version="[14.0.5]" />
+      <dependency id="tor-browser" version="[14.0.7]" />
     </dependencies>
     <tags>Productivity Tools</tags>
   </metadata>

diff --git a/packages/upx.vm/tools/chocolateyinstall.ps1 b/packages/upx.vm/tools/chocolateyinstall.ps1
@@ -4,9 +4,9 @@ Import-Module vm.common -Force -DisableNameChecking
 $toolName = 'upx'
 $category = VM-Get-Category($MyInvocation.MyCommand.Definition)
 
-$zipUrl = "https://github.com/upx/upx/releases/download/v4.2.4/upx-4.2.4-win32.zip"
-$zipSha256 = "2e90ebda45b29217126d8e8ee4d0863bd9705a13adcca3ce07b7d19df55ca355"
-$zipUrl_64 = 'https://github.com/upx/upx/releases/download/v4.2.4/upx-4.2.4-win64.zip'
-$zipSha256_64 = '22e9ef20e4c72aad85e32c71cbc9c086436c179456382aa75c0c24868456a671'
+$zipUrl = "https://github.com/upx/upx/releases/download/v5.0.0/upx-5.0.0-win32.zip"
+$zipSha256 = "8c34b9cec2c225bf71f43cf2b788043d0d203d23edb54f649fbec16f34938d80"
+$zipUrl_64 = 'https://github.com/upx/upx/releases/download/v5.0.0/upx-5.0.0-win64.zip'
+$zipSha256_64 = '1cc4ce7602f42350ea7a960718d4ca8b5c8949ab79b80e709286eff0107b04ea'
 
 VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -zipUrl_64 $zipUrl_64 -zipSha256_64 $zipSha256_64 -consoleApp $true -innerFolder $true