Interloper 2.3.0

• You can see an update happening. After Update now, an "Updating Interloper to x.y.z" window stays on screen while the app closes, the new version installs and it starts again. It cannot be closed halfway, and if something goes wrong it says what and where the log is, instead of the app just vanishing. Starting Interloper while an update is still running shows "Interloper is finishing an update and will open by itself" instead of breaking the update. Setup also closes any copy of the app still running from the install folder before it replaces files. (The window appears from the next update after 2.3.0, because the version you are updating from runs the update.)
• Idle-time checks (Watch). Some miners stop the moment you touch the mouse. With Also check while the PC sits idle on (Automatic scans), Interloper runs a 30-second check for miners when you have been away for 10+ minutes, at most once an hour and never on battery. A program without a valid signature using heavy CPU, or a non-Windows program using the GPU hard, while nobody is at the PC is raised to High, written to a report in Idle checks, put on the Desktop as an alert and sent to your dashboard.
• Known-malware fingerprints. Files the scan already finds suspicious (and unsigned files in hideout folders) are fingerprinted (SHA-256) and checked against a known-malware list that arrives with the detection updates. With Watch, the service also looks them up in a public malware database (MalwareBazaar, once the service has its key). A match is Critical, names the malware family, and offers quarantine. Only fingerprints are sent, never files or paths.
• Technician edition ($149/year): everything in Watch for up to 500 PCs, your shop name, contact line and logo on every report, each PC tagged with its customer (Account in the app), and the dashboard grouping and filtering PCs by customer. Branding is set on the dashboard's Account page.
• Safer updates. Downloaded updates wait in a folder only administrators can change (ProgramData) instead of your user profile, so nothing running as you can swap the verified file in the seconds before it runs elevated; PowerShell is always started by its full Windows path; a silent install that fails reports back instead of waiting on a hidden message; and if the update helper cannot start, the app stays open and says so.
• Interloper no longer mistakes its own files, scheduled tasks and command lines for something to report, wherever it is installed or run from.
• Service: /api/reputation (MalwareBazaar lookups with a 30-day cache; off until MALWAREBAZAAR_AUTH_KEY is set), /api/brand, customer per device, Technician prices (STRIPE_PRICE_TECH_YEARLY / STRIPE_PRICE_TECH_MONTHLY), health shows whether lookups are on; website: Technician plan and FAQ, privacy policy covers fingerprints and branding.