SilentRunLoader Chrome Data Theft via Python Payload

Duo Tech@duotech

•updated Jun 5, 2026•2•0•9

Detects the execution of `cg.exe`, a secondary Python executable dropped by SilentRunLoader specifically to pack and steal Chrome browser data. This behavior is indicative of TA4922 activity.