App Review Huawei Qiankun Endpoint Security Quick Dance

[cruelsister]

Content source

https://www.youtube.com/watch?v=Fpfa03ez2JQ

Huawei is a telecommunication manufacturing Giant and they decided to release this anti-malware application (termed EDR as this is the sexy term way overused for what is essentially a Home product).

 

[Trident]

Is this why WiseVector disappeared? Because this looks awfully like re-UI-ed WV.

 

[roger_m]

Is this why WiseVector disappeared? Because this looks awfully like re-UI-ed WV.

I doubt that, based on the detection names. I think it's just because some different Chinese products have a similar UI.

 

[lvseqiji]

It was released in August, still in early development. But it seems that they are interested in developing a free personal version.

 

[ForgottenSeer 103564]

This is windows 10, correct? What all default windows securities are disabled to run this test? What are the file permissions set at in order to execute the script freely on the desktop? Don't mind my questions i just want to understand the methodology a little better as to how the script is able to proceed.

 

[[correlate]]

Guys, the GUI is very similar to that of WiseVector

 

[cruelsister]

This is windows 10, correct? What all default windows securities are disabled to run this test? What are the file permissions set at in order to execute the script freely on the desktop? Don't mind my questions i just want to understand the methodology a little better as to how the script is able to proceed.

No, it's Win11 with a StartAllBack desktop (which is a recoding of explorer.exe with all the Win11 thingies disabled and the Win10 interface enabled). As to permissions, all are stock Win11 although I do have WD disabled as this test is specific for Huawei.

The lack of Scriptor detection reminds me strongly of Malwarebytes which is also oblivious to a great many.

 

[Vitali Ortzi]

Guys, the GUI is very similar to that of WiseVector

They use these types of guis in all kinds of Chinese software

 

[ForgottenSeer 103564]

No, it's Win11 with a StartAllBack desktop (which is a recoding of explorer.exe with all the Win11 thingies disabled and the Win10 interface enabled). As to permissions, all are stock Win11 although I do have WD disabled as this test is specific for Huawei.

The lack of Scriptor detection remains mt strongly of Malwarebytes which is also oblivious to a great many.

Thank you, i was curious as to why windows did not react as well. So no changes were done to the script execution policy it is default, assuming the samples were coded to bypass?

I'm also assuming spell correct altered your being reminded of malwarebytes.

 

[ShenguiTurmi]

Is this why WiseVector disappeared? Because this looks awfully like re-UI-ed WV.

Yep Its Real!

Spoiler

This is who was previously responsible for building the ML model for WV.

 

[ShenguiTurmi]

They use these types of guis in all kinds of Chinese software

no this simple.
see #10.

 

[Vitali Ortzi]

O

Yep Its Real!

This is who was previously responsible for building the ML model for WV.

Oh wow !
Nice went fff on not sending data to China to acquired by government sponsored company banned by a few governments

Cool

 

[Kongo]

O

Oh wow !
Nice went fff on not sending data to China to acquired by government sponsored company banned by a few governments

Cool

Money rules the world. It was naive of us to expect something else.

 

[Trident]

Yep Its Real!

This is who was previously responsible for building the ML model for WV.

So once again I was right

 

[[correlate]]

Hello, I was able to find the download link. You can download the program and try it through the official website. I hope this will benefit you. Thank you.

让企业网络更简单更安全-华为乾坤云服务

 

[ShenguiTurmi]

让企业网络更简单更安全-华为乾坤云服务

成长地图_华为乾坤_华为云

华为乾坤云服务帮助中心，为用户提供产品介绍、购买指南、用户指南等技术文档，帮助您快速上手使用华为乾坤云服务。

support.huaweicloud.com

And the real EDR version (for business) is on huaweicloud.
But it seems that I can only find it on the Chinese website, and I cannot find this product on the international website (tried both English and traditional Chinese).

 

[Trident]

成长地图_华为乾坤_华为云

华为乾坤云服务帮助中心，为用户提供产品介绍、购买指南、用户指南等技术文档，帮助您快速上手使用华为乾坤云服务。

support.huaweicloud.com

And the real EDR version (for business) is on huaweicloud.
But it seems that I can only find it on the Chinese website, and I cannot find this product on the international website (tried both English and traditional Chinese).

It’s probably only for the Chinese market currently. It’s not like many non-Chinese companies will rush to subscribe to their services.

 

[[correlate]]

成长地图_华为乾坤_华为云

华为乾坤云服务帮助中心，为用户提供产品介绍、购买指南、用户指南等技术文档，帮助您快速上手使用华为乾坤云服务。

support.huaweicloud.com

And the real EDR version (for business) is on huaweicloud.
But it seems that I can only find it on the Chinese website, and I cannot find this product on the international website (tried both English and traditional Chinese).​

Yes, that's why I didn't put the direct link to Huawei

 

[Razza]

I was wondering when WiseVector was going to show up again.

 

[cruelsister]

His hiring by H doesn't by extension mean great changes will be made to the product. When Sophos bought SurfRight (HMP) a while ago and hired one of the Loman boys it was hoped that Sophos Scan and Clean would be an improvement on (the occasionally adequate) HitMan. Sadly this is not the case.