Detection of Chrome Remote Desktop and MSIEXEC Execution

Shadows VMB@Vemorian_Mort

•updated Aug 30, 2026•8•0•14

Detects the presence of Chrome Remote Desktop processes or execution of Windows Installer (msiexec.exe) and GoogleUpdate.exe, which are often used by adversaries for remote access or as a proxy for malicious payload execution.