EasyHub 程序分析精简组件

供 EasyHub 的“设置 → 程序文件分析”自动安装。首次需要时下载，安装后可在本机分析程序文件。

首次安装总下载约 264 MiB，较原完整组件约 743 MiB 减少 64%。保留处理器、格式分析数据、函数识别数据库及反编译所需内容，已完成真实程序分析和取消验收。

组件版本：Ghidra 12.1.2、Java 21.0.12.1+1；扩展继续使用上游 Ghidra MCP 6.0.0 固定资产。

许可证和来源说明随精简包提供。Java 对应的完整源代码单独提供在附件中，不参与应用的自动组件安装下载。精简准备脚本和固定资产校验清单一并附上。

macOS ARM64 精简组件

新增 Mac ARM64 的 Ghidra 12.1.2 和 Java 21.0.12.1+1。应用首次安装下载约 264 MiB，包含仍使用上游固定版本的 Ghidra MCP 6.0.0。

保留所有 39 个处理器的数据、10 个函数识别数据库、136 个 Ghidra 运行时 JAR 和反编译工具；Java 保留 34 个模块、编译器、扩展字符集、中文区域和动态服务提供器。

Mach-O ARM64、ELF x86_64、PE x86_64 样本的函数、字符串、导入和反编译结果与完整组件一致，已验证取消和生产归档解压。完整数据保留不等同于每种格式均已执行测试。

原始许可证、NOTICE、BOM、GPL 工具对应源码和 Java 准备记录随包提供。完整 Java 源码沿用本发布已有的 OpenJDK21U-jdk-sources_21.0.12.1_1.tar.gz 附件，不参与应用运行时下载。

新增仓库脚本使用绝对输入路径，无本机用户目录依赖。已发布 Java 包内 embedded 脚本是原构建版本；同一 image 的压缩已验证可复现，未声称独立 jlink 构建字节相同。

此次仅新增 Mac 附件，原有 Windows 附件保持不变。

Android 按需审查组件

安卓组件与 Windows、macOS 组件放在本发布中，供支持组件下载的新版 Android 客户端在“设置 / 程序文件审查 / 管理审查组件”中选择安装。旧版 Android 1.0.0 尚不支持此下载入口。

• Java / Dalvik：JADX 1.5.6，APK、DEX、JAR、CLASS；下载 2,804,563 字节（2.67 MiB），需要 Android 8 或更新版本。
• 原生程序：radare2 / r2ghidra 6.2.2，EXE、DLL、SO、ELF、Mach-O；下载 26,357,764 字节（25.14 MiB），适用于 Android 7 或更新版本的 ARM64 设备。

两个组件可以分别下载，安装后在本机离线使用。客户端固定版本、体积和 SHA-256 校验值，核验后解压安装；原始被审查程序不会执行。许可证和来源信息随各组件提供。Android 校验清单与对应构建源码附件独立提供，不参与自动组件下载。

English

For automatic installation through EasyHub's "Settings → Program file review". Components are downloaded when first needed and then analyze program files locally.

The initial installation downloads approximately 264 MiB in total, 64% less than the approximately 743 MiB original full components. Processor data, format analysis data, function identification databases, and the files needed for decompilation are retained. Analysis of real programs and cancellation behavior have been validated.

Component versions: Ghidra 12.1.2 and Java 21.0.12.1+1. The extension continues to use the pinned upstream Ghidra MCP 6.0.0 release asset.

Licenses and source provenance are included in the slim packages. The full corresponding source code for Java is provided as a separate release asset and is excluded from the app's automatic component installation downloads. Scripts for preparing the slim packages and a checksum manifest for the pinned assets are also included.

Slim macOS ARM64 components

Added Ghidra 12.1.2 and Java 21.0.12.1+1 for Mac ARM64. The app's initial component installation downloads approximately 264 MiB, including the same pinned upstream Ghidra MCP 6.0.0 release asset.

Data for all 39 processors, 10 function identification databases, 136 Ghidra runtime JARs, and the decompiler tools are retained. Java retains 34 modules, the compiler, extended character sets, Chinese locales, and dynamic service providers.

Results for functions, strings, imports, and decompilation from Mach-O ARM64, ELF x86_64, and PE x86_64 samples match those from the full components. Cancellation and extraction of the production archives have been verified. Retaining all data does not mean every format has been tested.

The packages include the original licenses, NOTICE, BOM, corresponding source code for GPL tools, and Java preparation records. The full Java source continues to use the existing OpenJDK21U-jdk-sources_21.0.12.1_1.tar.gz release asset and is excluded from the app's runtime downloads.

New repository scripts use absolute input paths and do not depend on local user directories. The embedded scripts in the published Java package are from the original build. Compression of the same image has been verified as reproducible; no claim is made that independent jlink builds produce byte-identical output.

Only Mac assets are added in this update; existing Windows assets are unchanged.

Android on-demand review components

Android components are included in this release alongside Windows and macOS components. Newer Android clients that support component downloads can select and install them under "Settings / Program file review / Manage review components". Android 1.0.0 does not support this download entry.

• Java / Dalvik: JADX 1.5.6; APK, DEX, JAR, CLASS; download size 2,804,563 bytes (2.67 MiB); requires Android 8 or later.
• Native programs: radare2 / r2ghidra 6.2.2; EXE, DLL, SO, ELF, Mach-O; download size 26,357,764 bytes (25.14 MiB); for ARM64 devices running Android 7 or later.

Both components can be downloaded separately and used offline locally after installation. The client pins each component's version, size, and SHA-256 checksum, verifies the download, then extracts and installs it. The original programs being reviewed are never executed. Licenses and source provenance are included with each component. The Android checksum manifest and corresponding build source code are provided as separate release assets and are excluded from automatic component downloads.