MalwareBazaar Database

This page shows some basic information the YARA rule Tool_CombinedWindowsDefKiller including corresponding malware samples.

Database Entry


YARA Rule:Tool_CombinedWindowsDefKiller
Author:Nikos 'n0t' Totosis
Description:An EDR/AV process/services killer component utilizing code from WinDefenderKiller open-source project.
Firstseen:2026-06-23 10:28:06 UTC
Lastseen:2026-07-04 07:33:43 UTC
Sightings:2

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter