App Review Huawei HiSec Endpoint Security revisited

[cruelsister]

Content source

https://www.youtube.com/watch?v=FX44U_6aNK0

 

[roger_m]

That for testing it again. I was not expecting it to do well, but thought it may have done better than it did.

 

[Fan-of-spyshelter]

@cruelsister

if this youtube video was made from you
you have my valuable consideration

so for having to confirm it from my side,
i was expected when you have time you do also the same operation with the real EDR app from Huawei : HiSec Endpoint 1.1.25.505 of the 10 april 2025
(tested for the last time the 31july by AV-TEST)

here is the documentation of this last real stable EDR to install it properly and be powerfull as Norton Power Eraser :

According to Huawei’s official installation guide:
Huawei Support – HiSec Endpoint Installation Guide (Windows only)

This second video will demonstrates the official Huawei HiSec Endpoint, as opposed to the questionable builds leak circulating on Dropbox or Reddit.

To verify authenticity, users can check the SHA-512 hash of the installation package provided directly by Huawei:

as it is describe : certutil -hashfile HiSec-Endpoint-windows-x64-Setup.zip SHA512 (into powershell as admin not cmd)

The partner published hash is static and reproducible.
If the hash of your package does not match, the file is not authentic and should not be trusted.

This ensures that the tested software is the real enterprise-grade EDR certified by Huawei and AV-Test, and not a tampered build.

 

[Miravi]

Thanks for sharing. I've found it surprising in some respects that a Chinese company hasn't promoted a more robust antivirus. The Australian Strategic Policy Institute determined China to be the global leader in 57 of 64 technologies between 2019 and 2023 (as per their Critical Technology Tracker). On the other hand, I suppose the mainland does dwell in its own version of the Internet.

 

[Fan-of-spyshelter]

Thanks for sharing. I've found it surprising in some respects that a Chinese company hasn't promoted a more robust antivirus. The Australian Strategic Policy Institute determined China to be the global leader in 57 of 64 technologies between 2019 and 2023 (as per their Critical Technology Tracker). On the other hand, I suppose the mainland does dwell in its own version of the Internet.

Wait for the comparison with the real AV, @Miravi. China is really strong in 2025 — especially when they can steal a private chaining key from a manufacturer like Microsoft ^^

 

[Allen Steve]

The biggest problem with this software is that the automatic update of the virus database is broken, and it has been broken many times, broken for a long time, no one cares, recent news, HUAWEI CLOUD has abolished and integrated multiple departments, I don't know what impact it will have on this software in the future.

 

[annaegorov]

CS thanks for the video, and where in the world have you been. Seems like it has been forever since you said hi, and posted anything. I was kinda worried about you. *I have been a fan for years, after you made the first Comodo videos, and shared your childhood story with me.

Lastly since Comodo seems to be in a state of disarray, what are you currently recommending for PC security these days.

Some that you used to favor have gone by the wayside in the last couple of years.

Thanks in advance.

 

[roger_m]

The biggest problem with this software is that the automatic update of the virus database is broken, and it has been broken many times, broken for a long time

Did it work originally? I've been using it since 2023 and it has never worked.

 

[Allen Steve]

Did it work originally? I've been using it since 2023 and it has never worked.

The automatic update started to break down in November 2024, and then improved for a while after a few months. I forgot how long it had been, and then it broke again. This time, the manual update also broke (only the first time it was updated after installation), which lasted for several months until the last version update (July 12th). The automatic update improved for a period of time, about a week, and then it broke again, until now...
Now we all suspect that Huawei is using office computers as servers because their computers shut down after work and we are unable to connect to the update server.
Since a few months ago, I have been unable to reach them even after posting on their forum...

 

[cruelsister]

I should be noted that the real failing with Huawei is something shared by many other products- that being the inability to detect many forms of non-PE32 malware. As an example in addition to the superb NPE 2nd opinion scan (which cleaned the system fine), I also scanned with HMP and MB, both giving a clean thumbs up for an infected system.

 

[EASTER]

Cruddy AV it seems. Thanks for the reminder to download NPE again though.

 

[danb]

I should be noted that the real failing with Huawei is something shared by many other products- that being the inability to detect many forms of non-PE32 malware. As an example in addition to the superb NPE 2nd opinion scan (which cleaned the system fine), I also scanned with HMP and MB, both giving a clean thumbs up for an infected system.

Great video, thank you CS! Given your fondness for and expertise in non-PE32 malware, what 3-5 real-time products would you say are most capable of handling this type of malware, and what 3-5 real-time products are least capable? Please feel free to test SiriusGPT (execution style) and include it on the appropriate list . Also, just curious, how does MD typically perform in your experience?

 

[Fan-of-spyshelter]

I should be noted that the real failing with Huawei is something shared by many other products- that being the inability to detect many forms of non-PE32 malware. As an example in addition to the superb NPE 2nd opinion scan (which cleaned the system fine), I also scanned with HMP and MB, both giving a clean thumbs up for an infected system.

That’s interesting, thanks for sharing — I didn’t know that, and AV-Test also didn’t mention it
Just one quick question to better understand your test: could you confirm which build you used and, if possible, share the SHA-512 hash of the installer?
That way, everyone here can be 100% sure the analysis was done on the authentic Huawei release, and not on one of the unofficial builds circulating on Dropbox or Reddit.

 

[Fan-of-spyshelter]

The biggest problem with this software is that the automatic update of the virus database is broken, and it has been broken many times, broken for a long time, no one cares, recent news, HUAWEI CLOUD has abolished and integrated multiple departments, I don't know what impact it will have on this software in the future.

Interesting, do you have any official source or facts confirming that? Because if the update mechanism is really broken for a long time, it’s a critical issue for an enterprise EDR.

 

[Fan-of-spyshelter]

 

[EASTER]

The automatic update started to break down in November 2024, and then improved for a while after a few months. I forgot how long it had been, and then it broke again. This time, the manual update also broke (only the first time it was updated after installation), which lasted for several months until the last version update (July 12th). The automatic update improved for a period of time, about a week, and then it broke again, until now...
Now we all suspect that Huawei is using office computers as servers because their computers shut down after work and we are unable to connect to the update server.
Since a few months ago, I have been unable to reach them even after posting on their forum...

You can see why - I would like to see a McAfee run like this since it usually comes Trial Version with many New Computers unlike Huawei

 

[minhgi]

@cruelsister Thanks you for reviewing Huawei EDR Personal. Reason why I ask for reviewing of Huawei EDR, since the last 2 years ago, was the benchmark from avtest. And was wondering if the latest version could be use on PC where user don't want to buy an antivirus software. Guess Not. Definitely not putting on a business computer.

Huawei HiSec Endpoint Recognized as "Top Product" by AV-TEST - Huawei

Recently, AV-TEST, a trusted third-party evaluation organization, released the corporate endpoint protection evaluation report for March and April 2025. The report shows that Huawei HiSec Endpoint scored 17.5 points out of 18 and was awarded the TOP PRODUCT certification. Its all-scenario threat...

e.huawei.com

 

[Fan-of-spyshelter]

@cruelsister Thanks you for reviewing Huawei EDR Personal. Reason why I ask for reviewing of Huawei EDR, since the last 2 years ago, was the benchmark from avtest. Definitely not putting on a business computer, but could be use on PC where user don't want to buy an antivirus software.

Huawei HiSec Endpoint Recognized as "Top Product" by AV-TEST - Huawei

Recently, AV-TEST, a trusted third-party evaluation organization, released the corporate endpoint protection evaluation report for March and April 2025. The report shows that Huawei HiSec Endpoint scored 17.5 points out of 18 and was awarded the TOP PRODUCT certification. Its all-scenario threat...

e.huawei.com

This is not the authentic Huawei EDR. The version installed here is a fake/repacked build, signed incorrectly (with an “M”) instead of Huawei’s official certificate.

you can also see that there last database is from the 10-03-2025 more older than the first AV-TEST

AV-Test worked with BLADE Labs on the genuine product, and that one is properly signed.

To be sure, a checksum/hash verification is absolutely required. Otherwise, you may just be running a tampered binary or even a trojan disguised as Huawei EDR.

PS : Trust Center

 

[minhgi]

Have you ever thought one version could be internal development build while one is public? Just my guess bc the build is almost the same and comes from the same domain. What up with the PS: Trust Center.

 

[roger_m]

Have you ever thought one version could be internal development build while one is public?

Don't worry he's just a clueless troll who thinks he's some kind of security expert.

This is not the authentic Huawei EDR. The version installed here is a fake/repacked build, signed incorrectly (with an “M”) instead of Huawei’s official certificate.

I didn't think your posts could get any more ridiculous, but I was wrong.
The M you see in bottom left in Cruelsister's video is the computer name. It's got nothing to do with the certificate. As you can see in the screenshots below from my install, it's showing the computer name, which matches what is shown in Windows settings.