Shkarko SysManager 1.42.10

[1.42.10] - 2026-06-27
Fixed
- The in-app updater is hardened against a local tampering window. When applying a downloaded update, SysManager writes a small batch script that swaps in the new executable after the app closes. That script was previously written into the same predictable, user-writable folder as the download and launched via the bare cmd.exe name. A malicious program running as the same user could, in theory, replace the script (or plant a fake cmd.exe on the search path) during the brief window before it ran, getting its own commands executed by the update step. The script is now written to a fresh, randomly-named private folder, launched via the full system path to cmd.exe, refuses any path containing an illegal character, and cleans up its own folder afterwards. Hash and Authenticode verification of the downloaded binary were already in place and are unchanged.
Verify the download
Get-FileHash .\SysManager-v1.42.10.exe -Algorithm SHA256
Expected SHA256: 2C5454CECFFA9868E46B43E6EDC3882EAA045769207087FB2F2F71F94921CCEA