HitmanPro.Alert

[harlan4096]

HitmanPro.Alert 3.8.25 Build 975

We're slowly releasing this new build to our current 947 stable fleet, as there have been a significant number of changes this update won't be auto-update available all at once.

Monitoring telemetry & support will give us an indication of possible issues, and if all looks good we'll migrate more users, of course you are free to download the latest version via provided link if you don't want to wait for the update to show up via the auto-updating mechanism.

Changelog:

• Added HWBGuard (Silent), A technique heavily used by red-teams to bypass Syscall protections is to set a HardwareBreakPoint, we now detect these breakpoints
  
• Added New Process Protection panel for Risk Reduction
  
• Added RDPGuard Icon under Risk Reduction button
  
• Added SendKeyGuard
  
• Fixed BSOD in StickyKeys
  
• Fixed Driver BSOD under specific circumstances
  
• Fixed KernelTrap compatibility issues with Kaspersky and GenshinImpact
  
• Fixed Lockdown Bypass when loading files over UNC paths
  
• Improved AMSIGuard
  
• Improved APC Game detection
  
• Improved Bitdefender Compatibility
  
• Improved CiGuard
  
• Improved CookieGuard
  
• Improved CryptoGuard5
  
• Improved DrWeb Compatibility CallerCheck/SysCall
  
• Improved HeapHeapProtect Cobalt Strike detection
  
• Improved HeapHeapProtect prevents Powershell scripts from patching AMSI for bypass
  
• Improved HollowProcess
  
• Improved KeyboardGuard u.a. compatibility with ESET protected browsers, Windows search
  
• Improved Lockdown Now allows WMIC GET 'only' commands without interference
  
• Improved PrivGuard
  
• Improved StackPivot
  
• Removed ReflectiveDLL As it has become obsolete in it's current implementation
  
• Several other changes under the hood
  

Beware this build is signed with a new code-signing certificate by Sophos LTD, this might take some 3rd party vendors to have "trust" issues as it's a rather fresh certificate.

Download
https://dl.surfright.nl/hmpalert3b975.exe