New Update Defender Hardening Console Executable

Trident said:
Pretty sure it’s not a problem, can you try on a real system and see if it will load?
Click to expand...

In my system (Kaspersky Plus)

1767278227631.png
 
  • Like
  • +Reputation
Reactions: Brownie2019, simmerskool and Trident
Shadowra said:
In my system (Kaspersky Plus)

View attachment 294185
Click to expand...
That’s the expected behaviour with Kaspersky, all features will be disabled. For the scan, keep in mind that Kaspersky will probably restrict the app till I get digital signature (potentially EV).

We’ll find out why it fails on a VM.
 
  • Like
  • +Reputation
Reactions: simmerskool, Jonny Quest and Shadowra
Trident said:
That’s the expected behaviour with Kaspersky, all features will be disabled. For the scan, keep in mind that Kaspersky will probably restrict the app till I get digital signature (potentially EV).

We’ll find out why it fails on a VM.
Click to expand...

Found it! Missing Net Framework...
Everything's fine ;)

1767279807855.png


I'm going to play around with it a bit since I have time; his video is scheduled for mid-January ;)
 
  • Like
  • +Reputation
  • Thanks
Reactions: Brownie2019, simmerskool, Jonny Quest and 2 others
Shadowra said:
Found it! Missing Net Framework...
Everything's fine ;)

View attachment 294186

I'm going to play around with it a bit since I have time; his video is scheduled for mid-January ;)
Click to expand...
.net framework or Microsoft Visual C++ redistributable? Because my project is not using .net.

.net for me in my project is a no-no 🤪

The software is written in C++ 23 with loops optimised for Advanced Vector Extensions 512.

When you look at the raw byte representation in hex, there are loads of ÅùïÀ (VZEROUPPER), Åø (VMOVAPS) and so on. This is all vectorised assembly code (starting with Å).

But I am using PowerShell for some tasks so that may be using .net 🤔


Whichever one is missing, I will have to add paths for it to be downloaded and installed…
 
Last edited:
  • Like
  • +Reputation
Reactions: Brownie2019, simmerskool, Jonny Quest and 1 other person
Trident said:
.net framework or Microsoft Visual C++ redistributable? Because my project is not using .net.

.net for me in my project is a no-no 🤪

The software is written in C++ 23 with loops optimised for Advanced Vector Extensions 512.

When you look at the raw byte representation in hex, there are loads of ÅùïÀ (VZEROUPPER), Åø (VMOVAPS) and so on. This is all vectorised assembly code (starting with Å).

But I am using PowerShell for some tasks so that may be using .net 🤔


Whichever one is missing, I will have to add paths for it to be downloaded and installed…
Click to expand...

No idea, I updated both and it stopped crashing. :cry:
 
  • Like
Reactions: simmerskool, Jonny Quest and Trident
Shadowra said:
No idea, I updated both and it stopped crashing. :cry:
Click to expand...
It is probably the VS C++ redistributable, Trend Micro for example is written in Visual C++ and they install the redistributable with the product if you’ve noticed. I will need to do something similar.

Anyway, you’ve helped a lot 🙏
 
  • Hundred Points
  • Applause
  • Like
Reactions: simmerskool, Jonny Quest and Shadowra
New update published (you will notice that that the size of the executable has now increased to over a megabyte)

Added version info, click on the Help and Support button
1767287928743.png


Upgraded scan engine from 1.01 to 1.38. This by itself most likely fixes the issue @Kongo reported, plus it adds the following:

-Fileless malware command line scan
-Cloud check for suspicious services
-Botnet detection functionality
-Upgraded heuristics package

1767288063867.png


Minor UI improvements, including those that are required to accommodate the new engine

UI optimization to eliminate CPU and GPU usage on idle.

 
Last edited:
  • +Reputation
  • Like
Reactions: simmerskool, 1chaoticadult, Kongo and 2 others
Mops21 said:
Hi @Trident

Can I use your software on Windows 8.1

Any roadmap available

Any multilanguage support available

Mops21
Click to expand...
Hello @Mops21 ,

The software is not compatible with Windows 8.1.
This version of Windows is now long out of support and if I build the tool to be compatible, it will significantly hurt the performance for all users. As of 2025, the 8.1 market share is ~0.2%.

Multi-language support at this time is not planned.

This would require a significant refactoring (which is not impossible). I will have to remove all strings hardcoded from the UI, put them in JSON files (US_English.json, Deutsch.json and so on) and feed them to the UI.

It is doable but at this moment it is not really required because first:
The UI rapidly changes (this is not how the final product strings will sound, I like more witty, less formal language)—every time I change something, I will have to update a dozen of language files, and second, the audience is not large.
If the audience grows then I will go through the necessary refactoring to add more languages.

Roadmap-wise, most of the updates will be to the Helios UltraQuick and Deep Firewall Control.
If I think if any innovative feature I can add, it will be added.

Sometimes I would walk around the supermarket detergent isle and an idea or heuristic would hit me…
 
Last edited:
  • Like
  • +Reputation
Reactions: simmerskool, Gandalf_The_Grey and Jonny Quest
Trident said:
New update published (you will notice that that the size of the executable has now increased to over a megabyte)

Added version info, click on the Help and Support button
View attachment 294187

Upgraded scan engine from 1.01 to 1.38. This by itself most likely fixes the issue @Kongo reported, plus it adds the following:

-Fileless malware command line scan
-Cloud check for suspicious services
-Botnet detection functionality
-Upgraded heuristics package

View attachment 294188

Minor UI improvements, including those that are required to accommodate the new engine

UI optimization to eliminate CPU and GPU usage on idle.

Click to expand...
New release, looks and works great (y)
Thanks for adding the version info.
 
  • Like
  • +Reputation
Reactions: simmerskool, Trident and Jonny Quest
Jonny Quest said:
@Trident LOL, love it, you just never know when or where an idea will hit you 😅 :)
Click to expand...
Last time I was on my out when some network botnet detection heuristics hit me 😀
The software currently uses 40+ of which some are suitable to detect CobaltStrike and others.

Gandalf_The_Grey said:
New release, looks and works great (y)
Thanks for adding the version info.
Click to expand...
Previous version, the UI used 500 megs, here it has been reduced to 250.
The CPU usage on idle was spiking every now and then to 5, 10, 20%, now it is 0-%.

The rules processing is now also quicker.

Over the next few releases, some more performance improvements will be implemented.

Specially as ideas how to make everything quicker just occur to me 😆
 
Last edited:
  • +Reputation
  • Like
Reactions: simmerskool, Gandalf_The_Grey and Jonny Quest
Trident said:
New update published (you will notice that that the size of the executable has now increased to over a megabyte)

Added version info, click on the Help and Support button
View attachment 294187

Upgraded scan engine from 1.01 to 1.38. This by itself most likely fixes the issue @Kongo reported, plus it adds the following:

-Fileless malware command line scan
-Cloud check for suspicious services
-Botnet detection functionality
-Upgraded heuristics package

View attachment 294188

Minor UI improvements, including those that are required to accommodate the new engine

UI optimization to eliminate CPU and GPU usage on idle.

Click to expand...
Can confirm. It's fixed. Thank you! :)
 
  • Like
  • Thanks
Reactions: Jonny Quest, Gandalf_The_Grey and Trident
Trident said:
Hello @Mops21 ,

The software is not compatible with Windows 8.1.
This version of Windows is now long out of support and if I build the tool to be compatible, it will significantly hurt the performance for all users. As of 2025, the 8.1 market share is ~0.2%.

Multi-language support at this time is not planned.

This would require a significant refactoring (which is not impossible). I will have to remove all strings hardcoded from the UI, put them in JSON files (US_English.json, Deutsch.json and so on) and feed them to the UI.

It is doable but at this moment it is not really required because first:
The UI rapidly changes (this is not how the final product strings will sound, I like more witty, less formal language)—every time I change something, I will have to update a dozen of language files, and second, the audience is not large.
If the audience grows then I will go through the necessary refactoring to add more languages.

Roadmap-wise, most of the updates will be to the Helios UltraQuick and Deep Firewall Control.
If I think if any innovative feature I can add, it will be added.

Sometimes I would walk around the supermarket detergent isle and an idea or heuristic would hit me…
Click to expand...
Hi @Trident

Thank you very much for your infos

Mops21
 
  • Like
Reactions: simmerskool and Jonny Quest
kamiloxf said:
@Trident
The latest version still doesn't work with SentinelOne active, and I have one question: what is the purpose of using Base64 for antivirus solution detection in Powershell Cmdlet?
Click to expand...
Hello, I am working on it at the moment. There is a very high number of features and functions to add so it is impossible to add all of them overnight. The purpose of base64 is to add yet another layer that prevents snooping by malware.
 
  • Like
  • +Reputation
Reactions: simmerskool, SeriousHoax, Jonny Quest and 1 other person

You may also like...