CmdID

CmdID / Commands

chrome

This command is an alias of chromium. tldr-pages

On Windows 10 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

What detects it

Sigma process creation rules that name chrome
highChromeLoader Malware Execution@kostastsale
highChromium Browser Headless Execution To Mockbin Like SiteX__Junior (Nextron Systems)
highFile Download with Headless BrowserSreeman, Florian Roth (Nextron Systems)
highSuspicious Chromium Browser Instance Executed With Custom ExtensionAedan Russell, frack113, X__Junior (Nextron Systems)
mediumChromium Browser Instance Executed With Custom ExtensionAedan Russell, frack113, X__Junior (Nextron Systems)
mediumFile Download From Browser Process Via Inline URLFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems)
mediumPotential Suspicious Browser Launch From Document Reader ProcessJoseph Kamau
mediumPotentially Suspicious Electron Application CommandLinefrack113, Nasreddine Bencherchali (Nextron Systems)
lowBrowser Execution In Headless ModeNasreddine Bencherchali (Nextron Systems)
lowHTML File Opened From Download FolderJoseph Kamau