Technical Information
- <LS_APPDATA>\google\chrome\user data\default\login data
- <LS_APPDATA>\chromium\user data\default\web data
- %APPDATA%\opera software\opera stable\login data
- %TEMP%\produkey.exe
- C:\documents
- %TEMP%\webbrowserpassview.exe
- '%TEMP%\produkey.exe' /stext %TEMP%\\pass5.txt
- '%TEMP%\webbrowserpassview.exe' /stext %TEMP%\\pass6.txt
- '%TEMP%\produkey.exe' /stext %TEMP%\\pass5.txt' (with hidden window)
- '%TEMP%\webbrowserpassview.exe' /stext %TEMP%\\pass6.txt' (with hidden window)