+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Malware and Viruses (https://hackforums.net/forumdisplay.php?fid=287)
+---- Thread: in need of help making .exe file bypass win defender (/showthread.php?tid=6326619)
in need of help making .exe file bypass win defender - kbizz420 - Jun 5, 2026
hello, i am a beginner looking for some help, i have a .exe file that is embeded with xmrig, how can i get the .exe file to bypass windows defender because if it gets run then defender blocks it instantly. i have tested it in my VM on windows 10 but it just gets flagged by defender,
RE: in need of help making .exe file bypass win defender - DramaKing - Jun 5, 2026
(Jun 5, 2026 11:52 AM)kbizz420 Wrote: hello, i am a beginner looking for some help, i have a .exe file that is embeded with xmrig, how can i get the .exe file to bypass windows defender because if it gets run then defender blocks it instantly. i have tested it in my VM on windows 10 but it just gets flagged by defender,
Huh, thought WD didn't flag straight XMRig.
RE: in need of help making .exe file bypass win defender - kbizz420 - Jun 5, 2026
(Jun 5, 2026 12:22 PM)DramaKing Wrote: Huh, thought WD didn't flag straight XMRig.
yeah i dont really know, the rest of the system thats also binded with the .exe doesnt get flagged, its just the xmrig
RE: in need of help making .exe file bypass win defender - MadScientist - Jun 5, 2026
(Jun 5, 2026 12:22 PM)DramaKing Wrote: Huh, thought WD didn't flag straight XMRig.
Surprised it doesnt if so, so much malware drops it and WD even removed my damn official Monero Wallet
RE: in need of help making .exe file bypass win defender - DramaKing - Jun 5, 2026
(Jun 5, 2026 12:33 PM)kbizz420 Wrote: yeah i dont really know, the rest of the system thats also binded with the .exe doesnt get flagged, its just the xmrig
WD does not, in fact, flag the official signed XMRig binary even now, either because the signature makes it appear less malicious to heuristics or because Microsoft whitelisted it. You also mention that it's bonded. Binders themselves can have AV signatures. Or it's because there's no valid code signature. It's been shown that a self-compiled binary does get flagged.
https://hackforums.net/showthread.php?tid=6323122&pid=62941158#pid62941158