Feb 14, 2026 11:09 AM
(This post was last modified: Feb 14, 2026 11:21 AM by Charlie Sheen.)
Greetings to all forum members!
We are still engaged in hidden mining.
Our first post is closed: Content deleted to prevent possible harm to our members. -Staff
Almost 2 years have passed. There has been a lot of work, a lot has been done, we went through burnout and returns.
We used and continue to use the most well-known miner — SilentCryptoMiner (commonly referred to as Unam).
The repository was here: https://github.com/UnamSanctam (but the author has been banned for a long time).
The point is that we learned how to make its miner completely FUD.
By itself it is good, but there was one problem that killed us all and took away the desire to continue working:
Inside Xmr.rig it was impossible to change the built-in hidden percentage (donation).
That is understandable — the miner is open source, but the whole issue was exactly this: the author embedded a donation and the ability to manage our hashrate in a very elegant and neat way. In this regard, he really did a great job.
For almost half a year we were reversing and rewriting the SilentCryptoMiner code.
As a result, we completed the work and were able to replace everything inside and rebuild Xmr.rig.
At the moment we have a fully custom SilentCryptoMiner clone with new features.
We are also already operating stably at around ≈ 4 MH/s.
This is a short story of our path. Maybe it will be interesting to someone.
And maybe someone has a large volume of traffic and does not know how to monetize it.
Write to us — perhaps we can work on mutually beneficial terms where both you and we will be comfortable.
At the moment, our main issue is traffic.
⸻
About the miner:
The miner is fully FUD:
• ScanTime and RunTime — 0/0 (or close to it)
• Delivered in .msi format — this is a dropper
• The .msi dropper has not been detected for half a year
• Can be bundled with any clean file — the .msi itself does not trigger Chrome alerts when downloaded (only SmartScreen, which can be removed by signing the .msi with an EV certificate)
• The miner itself has been without detections for a year
• The miner build is packaged inside a legitimate file with a valid digital signature
• I can inject the payload into almost any legitimate file without breaking the signature — the signature remains valid
The miner has a reworked kill-target: even if a user from the list renames the file, installation will still be blocked.
It also blocks antivirus installers and other security software.
Additional features added:
• Blocking restore points
• Blocking Windows backups
The miner works using RunPE technology.
Fully compatible with Windows 11 25H2.
The modified miner has been tested in real conditions — 15k installs were poured, and it showed excellent results and good survivability.
Content deleted to prevent possible harm to our members. -Staff
We are still engaged in hidden mining.
Our first post is closed: Content deleted to prevent possible harm to our members. -Staff
Almost 2 years have passed. There has been a lot of work, a lot has been done, we went through burnout and returns.
We used and continue to use the most well-known miner — SilentCryptoMiner (commonly referred to as Unam).
The repository was here: https://github.com/UnamSanctam (but the author has been banned for a long time).
The point is that we learned how to make its miner completely FUD.
By itself it is good, but there was one problem that killed us all and took away the desire to continue working:
Inside Xmr.rig it was impossible to change the built-in hidden percentage (donation).
That is understandable — the miner is open source, but the whole issue was exactly this: the author embedded a donation and the ability to manage our hashrate in a very elegant and neat way. In this regard, he really did a great job.
For almost half a year we were reversing and rewriting the SilentCryptoMiner code.
As a result, we completed the work and were able to replace everything inside and rebuild Xmr.rig.
At the moment we have a fully custom SilentCryptoMiner clone with new features.
We are also already operating stably at around ≈ 4 MH/s.
This is a short story of our path. Maybe it will be interesting to someone.
And maybe someone has a large volume of traffic and does not know how to monetize it.
Write to us — perhaps we can work on mutually beneficial terms where both you and we will be comfortable.
At the moment, our main issue is traffic.
⸻
About the miner:
The miner is fully FUD:
• ScanTime and RunTime — 0/0 (or close to it)
• Delivered in .msi format — this is a dropper
• The .msi dropper has not been detected for half a year
• Can be bundled with any clean file — the .msi itself does not trigger Chrome alerts when downloaded (only SmartScreen, which can be removed by signing the .msi with an EV certificate)
• The miner itself has been without detections for a year
• The miner build is packaged inside a legitimate file with a valid digital signature
• I can inject the payload into almost any legitimate file without breaking the signature — the signature remains valid
The miner has a reworked kill-target: even if a user from the list renames the file, installation will still be blocked.
It also blocks antivirus installers and other security software.
Additional features added:
• Blocking restore points
• Blocking Windows backups
The miner works using RunPE technology.
Fully compatible with Windows 11 25H2.
The modified miner has been tested in real conditions — 15k installs were poured, and it showed excellent results and good survivability.
Content deleted to prevent possible harm to our members. -Staff
The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.
Please familiarize yourself by reading our Help Documents.