shadowcoerce
Utility for bypassing the Windows Defender antivirus by hiding a process within a legitimate process.
Platforms: Linux · Last verified September 7, 2026
Utility for bypassing the Windows Defender antivirus by hiding a process within a legitimate process.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
See the official site linked above for details.