Sorry, I think I was not clear. If the antivirus (Defender, ASR etc) does not whitelist designated executables (e.g. myApp.exe) or folders, then the application will be prevented to run (e.g. "access denied" error). We have had a lot of problems with this in the past. Therefore they must whitelist designated executables or folders to prevent these errors. My question was just specific to the executable running for web apps (for our set up, definitely IIS w3wp.exe, and even for .Net Core were also using IIS).