12-14-2021 , 04:47 AM
https://www.wisevector.com/en/en-history/ WiseVector StopX V3.03
December 12, 2021
1. Fixed the issue that some Apps cannot start occasionally after installing WiseVector StopX.
2. Improved HIPS. https://www.wisevector.com/en/en-features/ Robust Features
Powerful Techniques Create Excellent Performance
Ransomware Detection
More than 95% of ransomware cannot escape from our first layer of protection-Static Detection. Based on AI, WiseVector StopX can easily detect both known and unknown ransomware.
Our Behavior Detection includes multiple ransomware detection modules that can terminate ransomware behavior instantly.
When Deception-based Ransomware Detection is enabled, WiseVector StopX will create folders with irregular names in each disk and all these folders are ransomware traps.
The Document Protection allows you to add files or folders which needs particular protection, after that only trusted programs can modify the files and folders being protected.
Ransomware Rollback can backup files modified by suspicious programs in real time and revert changes caused by ransomware. Working alongside other ransomware detection features, it provides almost 100% protection against ransomware!
Stealer Malware Detection
Info stealer malware is designed to harvest a variety of data (Browser Passwords, Cookies, FTP credentials, etc.,) on the computers. They usually minimize their behavior to decrease the chance of detection by AV. Most of them hide their presence on the system by using advanced malware stealth techniques such as injection, hollowing, etc. Based on their characteristics, we have added multiple modules to Memory Protection and Behavior Analysis to detect them.
Malicious Behavior Detection is improved to protect users from webcam and microphone spying.
When script files such as JavaScript, VBScript perform malicious behavior, our Script Behavior Analysis shows its power to prevent users’ most sensitive data from being stolen by malicious scripts.
Memory Protection
Since detecting malicious payload in memory, it can effectively detect obfuscated malicious scripts.
It detects advanced malware that uses the following techniques: Reflective DLL Injection，Process Hollowing，Manually PE loading(Exe and DLL)，DotnetToJS，Sharpshooter，Net code in PowerShell，Process Doppelgänging，Process Reimaging，Mimikatz as well as remote threads in system processes.
It detects malware abusing whitelist APPs, such as Powershell, msbuild.exe, installutil.exe, regasm.exe, etc.
It detects advanced threats based on tools such as PowerShell Empire, GreateSCT, nps_payload, ObfuscatedEmpire, unicorn, etc.
It detects RAT Trojan abuses legitimate processes to hide their malicious implants, such as Gh0st, Meterpreter and CobaltStrike.
Unique Instruction Tracer
This technique makes identifying the original source of the malicious behavior in applications. It can effectively detect hidden threats such as DLL Side-Loading, thread hijacking, etc. At the same time, it can also detect stealth attacks in post-injection phase.
There are lots of RAT Trojan utilizing DLL hijacking to avoid detection by AV. These Trojans abuse whitelist APPs like Avast & ESET as well as APPs which are released by Samsung, TeamViewer, Citrix to perform DLL Side-Loading. Instruction Tracer is improved to ensure these Trojan can be detected without needing signature updates.
According to the current trend of some APT attacks, it is improved to detect Trojan abusing DLL Side-Loading which manipulate the memory of whitelist program. It can effectively detect some advanced threats.
Download WiseVector StopX
©2018-2021 Beijing Zhi Liang Technology Co., WiseVector StopX Download: https://update2.wisevector.com/WiseVector_StopX.exe Digital Signature ( Beijing Zhi Liang Technology Co., Ltd) WiseVector StopX V3.03 New Was 100% Malware FREE & Clean Of Any Of These Malware Threats - No Backdoors, Virus, Spyware, Adware, Trojans, Worms, Ransomware, Keyloggers, Rootkits, PUPs, Scanned With Malwarebytes Premium 4.5.0 152 Build 1.0.1538 & https://www.virustotal.com/gui/file/ee22...c8256fe9dc 0
/ 63
No security vendors flagged this file as malicious
ee22005ab620707e8a1d00430782fa1b77b57a1f673dc9cf6a8c81c8256fe9dc
WiseVector.exe
46.62 MB
Size
2021-12-14 03:03:33 UTC
10 minutes ago Names
WiseVector.exe
WiseVector_StopX_V30.exe
Signature Info
Signature Verification
Signed file, valid signature
File Version Information
Copyright Copyright（c）2018-2028 Beijing Zhi Liang Technology Co., Ltd
Product WiseVector StopX
Description WiseVector StopX
Internal Name WiseVector.exe
File Version 3.0.3.0
Date signed 2021-12-12 17:23:00
Signers
Beijing Zhi Liang Technology Co., Ltd
Sectigo Public Code Signing CA EV R36
Sectigo Public Code Signing Root R46
Sectigo (AAA)
Counter Signers
DigiCert Timestamp 2021
DigiCert SHA2 Assured ID Timestamping CA
DigiCert
X509 Certificates
DigiCert Timestamp 2021
DigiCert SHA2 Assured ID Timestamping CA
Sectigo Public Code Signing Root R46
Sectigo Public Code Signing CA EV R36
Beijing Zhi Liang Technology Co., Ltd
Symantec SHA256 TimeStamping CA
Symantec SHA256 TimeStamping Signer - G3
December 12, 2021
1. Fixed the issue that some Apps cannot start occasionally after installing WiseVector StopX.
2. Improved HIPS. https://www.wisevector.com/en/en-features/ Robust Features
Powerful Techniques Create Excellent Performance
Ransomware Detection
More than 95% of ransomware cannot escape from our first layer of protection-Static Detection. Based on AI, WiseVector StopX can easily detect both known and unknown ransomware.
Our Behavior Detection includes multiple ransomware detection modules that can terminate ransomware behavior instantly.
When Deception-based Ransomware Detection is enabled, WiseVector StopX will create folders with irregular names in each disk and all these folders are ransomware traps.
The Document Protection allows you to add files or folders which needs particular protection, after that only trusted programs can modify the files and folders being protected.
Ransomware Rollback can backup files modified by suspicious programs in real time and revert changes caused by ransomware. Working alongside other ransomware detection features, it provides almost 100% protection against ransomware!
Stealer Malware Detection
Info stealer malware is designed to harvest a variety of data (Browser Passwords, Cookies, FTP credentials, etc.,) on the computers. They usually minimize their behavior to decrease the chance of detection by AV. Most of them hide their presence on the system by using advanced malware stealth techniques such as injection, hollowing, etc. Based on their characteristics, we have added multiple modules to Memory Protection and Behavior Analysis to detect them.
Malicious Behavior Detection is improved to protect users from webcam and microphone spying.
When script files such as JavaScript, VBScript perform malicious behavior, our Script Behavior Analysis shows its power to prevent users’ most sensitive data from being stolen by malicious scripts.
Memory Protection
Since detecting malicious payload in memory, it can effectively detect obfuscated malicious scripts.
It detects advanced malware that uses the following techniques: Reflective DLL Injection，Process Hollowing，Manually PE loading(Exe and DLL)，DotnetToJS，Sharpshooter，Net code in PowerShell，Process Doppelgänging，Process Reimaging，Mimikatz as well as remote threads in system processes.
It detects malware abusing whitelist APPs, such as Powershell, msbuild.exe, installutil.exe, regasm.exe, etc.
It detects advanced threats based on tools such as PowerShell Empire, GreateSCT, nps_payload, ObfuscatedEmpire, unicorn, etc.
It detects RAT Trojan abuses legitimate processes to hide their malicious implants, such as Gh0st, Meterpreter and CobaltStrike.
Unique Instruction Tracer
This technique makes identifying the original source of the malicious behavior in applications. It can effectively detect hidden threats such as DLL Side-Loading, thread hijacking, etc. At the same time, it can also detect stealth attacks in post-injection phase.
There are lots of RAT Trojan utilizing DLL hijacking to avoid detection by AV. These Trojans abuse whitelist APPs like Avast & ESET as well as APPs which are released by Samsung, TeamViewer, Citrix to perform DLL Side-Loading. Instruction Tracer is improved to ensure these Trojan can be detected without needing signature updates.
According to the current trend of some APT attacks, it is improved to detect Trojan abusing DLL Side-Loading which manipulate the memory of whitelist program. It can effectively detect some advanced threats.
Download WiseVector StopX
©2018-2021 Beijing Zhi Liang Technology Co., WiseVector StopX Download: https://update2.wisevector.com/WiseVector_StopX.exe Digital Signature ( Beijing Zhi Liang Technology Co., Ltd) WiseVector StopX V3.03 New Was 100% Malware FREE & Clean Of Any Of These Malware Threats - No Backdoors, Virus, Spyware, Adware, Trojans, Worms, Ransomware, Keyloggers, Rootkits, PUPs, Scanned With Malwarebytes Premium 4.5.0 152 Build 1.0.1538 & https://www.virustotal.com/gui/file/ee22...c8256fe9dc 0
/ 63
No security vendors flagged this file as malicious
ee22005ab620707e8a1d00430782fa1b77b57a1f673dc9cf6a8c81c8256fe9dc
WiseVector.exe
46.62 MB
Size
2021-12-14 03:03:33 UTC
10 minutes ago Names
WiseVector.exe
WiseVector_StopX_V30.exe
Signature Info
Signature Verification
Signed file, valid signature
File Version Information
Copyright Copyright（c）2018-2028 Beijing Zhi Liang Technology Co., Ltd
Product WiseVector StopX
Description WiseVector StopX
Internal Name WiseVector.exe
File Version 3.0.3.0
Date signed 2021-12-12 17:23:00
Signers
Beijing Zhi Liang Technology Co., Ltd
Sectigo Public Code Signing CA EV R36
Sectigo Public Code Signing Root R46
Sectigo (AAA)
Counter Signers
DigiCert Timestamp 2021
DigiCert SHA2 Assured ID Timestamping CA
DigiCert
X509 Certificates
DigiCert Timestamp 2021
DigiCert SHA2 Assured ID Timestamping CA
Sectigo Public Code Signing Root R46
Sectigo Public Code Signing CA EV R36
Beijing Zhi Liang Technology Co., Ltd
Symantec SHA256 TimeStamping CA
Symantec SHA256 TimeStamping Signer - G3