[Info] Zircolite NOT found.
[Info] Latest Release: Zircolite vv3.6.3 (2026-04-06)
[Info] Dowloading Latest Release ...
Invoke-WebRequest : Invalid URI: The hostname could not be parsed.
At C:\Users\blah\Desktop\MemProcFS-Analyzer-main\Updater.ps1:1779 char:5
+ Invoke-WebRequest -Uri $Download -OutFile "$SCRIPT_DIR\Tools$7Zi ...
+ ~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Invoke-WebRequest], UriFormatException
+ FullyQualifiedErrorId : System.UriFormatException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand
[Error] zircolite.exe NOT found.
I recently received this error when using this awesome script ^^
The issue originates from here
|
$Download = ($Response.assets | Select-Object -ExpandProperty browser_download_url | Select-String -Pattern "zircolite_win_x64" | Out-String).Trim() |
and trips up here
|
Invoke-WebRequest -Uri $Download -OutFile "$SCRIPT_DIR\Tools\$7Zip" |
It appears the last time Zircolite published a browser_download_url was version 2.4.0
"assets": [
{
"url": "https://api.github.com/repos/wagga40/Zircolite/releases/assets/243961629",
"id": 243961629,
"node_id": "RA_kwDOFIAanM4Oio8d",
"name": "zircolite_win_x64_2.40.0.7z",
"label": null,
"uploader": {
"login": "wagga40",
"id": 6437862,
"node_id": "MDQ6VXNlcjY0Mzc4NjI=",
"avatar_url": "https://avatars.githubusercontent.com/u/6437862?v=4",
"gravatar_id": "",
"url": "https://api.github.com/users/wagga40",
"html_url": "https://github.com/wagga40",
"followers_url": "https://api.github.com/users/wagga40/followers",
"following_url": "https://api.github.com/users/wagga40/following{/other_user}",
"gists_url": "https://api.github.com/users/wagga40/gists{/gist_id}",
"starred_url": "https://api.github.com/users/wagga40/starred{/owner}{/repo}",
"subscriptions_url": "https://api.github.com/users/wagga40/subscriptions",
"organizations_url": "https://api.github.com/users/wagga40/orgs",
"repos_url": "https://api.github.com/users/wagga40/repos",
"events_url": "https://api.github.com/users/wagga40/events{/privacy}",
"received_events_url": "https://api.github.com/users/wagga40/received_events",
"type": "User",
"user_view_type": "public",
"site_admin": false
},
"content_type": "application/x-7z-compressed",
"state": "uploaded",
"size": 22804914,
"digest": null,
"download_count": 2558,
"created_at": "2025-04-06T08:57:58Z",
"updated_at": "2025-04-06T08:58:00Z",
"browser_download_url": "https://github.com/wagga40/Zircolite/releases/download/2.40.0/zircolite_win_x64_2.40.0.7z"
}
],
Nowadays, assets looks like this for the most recent release:
"assets": [
],
"tarball_url": "https://api.github.com/repos/wagga40/Zircolite/tarball/v3.6.3",
"zipball_url": "https://api.github.com/repos/wagga40/Zircolite/zipball/v3.6.3",
"body": "## What's Changed\r\n* patch streaming.py by @jkaspereit in https://github.com/wagga40/Zircolite/pull/130\r\n\r\n## New Contributors\r\n* @jkaspereit made their first contribution in https://github.com/wagga40/Zircolite/pull/130",
"mentions_count": 1
},
One suggestion would be to switch to either Chainsaw (which can handle MFTs and EVTX) or Hayabusa (paired with Takajo for additional wins). I am happy to provide some working commands for either, if so desired.
I recently received this error when using this awesome script ^^
The issue originates from here
MemProcFS-Analyzer/Updater.ps1
Line 1761 in 56e0080
and trips up here
MemProcFS-Analyzer/Updater.ps1
Line 1779 in 56e0080
It appears the last time Zircolite published a
browser_download_urlwas version 2.4.0Nowadays,
assetslooks like this for the most recent release:One suggestion would be to switch to either Chainsaw (which can handle MFTs and EVTX) or Hayabusa (paired with Takajo for additional wins). I am happy to provide some working commands for either, if so desired.