PowerShell Payload Unpacked

Name: PowerShell Payload Unpacked
Uploaded: 2026-10-05T17:19:53.000Z
Description: PowerShell fires and starts pulling together several different pieces, including a fake Cloudflare page, browser processes with their sandbox disabled, and activity involving timeout.exe. I follow the different processes the payload kicks off and try to figure out what is happening along the way.

John HammondOctober 5, 2026

MentionsCloudflare

Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.

PowerShell fires and starts pulling together several different pieces, including a fake Cloudflare page, browser processes with their sandbox disabled, and activity involving timeout.exe. I follow the different processes the payload kicks off and try to figure out what is happening along the way. Watch the full video: https://youtu.be/oJHOlNTH7lY?si=8LruOkxZlfvFLII-

Description from John Hammond.

Watch on YouTube