MalwareBazaar Database
This page shows some basic information the YARA rule Disable_Defender including corresponding malware samples.
Database Entry
| YARA Rule: | Disable_Defender |
|---|---|
| Author: | iam-py-test |
| Description: | Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen |
| Firstseen: | 2022-11-17 13:12:24 UTC |
| Lastseen: | 2025-09-18 15:00:15 UTC |
| Sightings: | 6'143 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|