This is the current version. · Released:
Installer files 1.136.167
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | Portable | — | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
[1.136.167] - 2026-11-10
A restore point description with a curly apostrophe, the kind Word and phone keyboards type, no longer stops
Windows from making the point.
Fixed
- Restore Points wrote the description into the PowerShell script that makes the point, inside single quotes with each
' doubled. PowerShell also ends a single-quoted string at the typographic quotes ‘ ’ ‚ ‛, so a description such as
"Bob’s point" ended the string after "Bob", the script could not run, and no point was made. It has been that way
since the tab came in 1.23.0. The description is now the script's parameter and never part of its text, the way
SysManager's other scripts already take their values.
- Preinstalled Apps' removal script takes the package name the same way. The name was already checked to hold only
characters that cannot end a string, and it still is.
- ArchitectureTests.NoScriptTakesAValue_ByDoublingItsQuotes fails a build that puts a value into a script's text by
doubling its quotes.
Verify the download
Get-FileHash .\SysManager-v1.136.167.exe -Algorithm SHA256
Expected SHA256: 5F6EB01DB5729B3D8946A12FB4A18F6177FEA3DE063BCC782FF28F4B853FD87C
This build is not code-signed, so Windows will warn on first launch. That is
expected for a small independent app: see what the warning says and what to
click.
Code signing is planned through the SignPath Foundation,
which provides free certificates to open-source projects, with signing performed by
SignPath.io. Until then, the SHA256 above and the build
attestation below are what establish that a download is the genuine build.
Code signing policy
This release is not code-signed. The team roles, release-approval process and
privacy policy required by the SignPath Foundation programme
are documented in advance under Code signing
policy. That
documentation is a prerequisite for applying, not evidence of a certificate. The
attribution line naming SignPath as the signing provider will appear here once a
certificate is actually issued.
This program will not transfer any information to other networked systems unless
specifically requested by the user or the person installing or operating it. Two checks
run on their own when SysManager starts: the version check against the GitHub Releases
API, at most once a day, and the Dashboard's app-updates alert, which asks winget. The
About tab can switch off either. Everything else that uses the network runs only when you
use it. Full
privacy policy.
Verify where this binary came from
This exe was built by GitHub Actions from this public source, and the build is
recorded in the Sigstore public transparency log. With the
GitHub CLI:
gh attestation verify .\SysManager-v1.136.167.exe --repo laurentiu021/SystemManager
That proves which commit and workflow produced this exact binary, something the
SHA256 file cannot show, since it is published alongside the exe it describes.
Each release also ships SysManager-v1.136.167.sbom.json, a CycloneDX inventory of
every dependency resolved for this build, and THIRD-PARTY-NOTICES.txt, the
licenses and notices of the open-source components the exe carries, which About
also opens from the exe itself.https://github.com/laurentiu021/SystemManager/releases/tag/v1.136.167