Trojan.Siggen20.6942

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\Software\Classes\ChromiumHTM.R3NNR2H653NWJWZRGMUHAZFFGI\shell\open\command] '' = '"%LOCALAPPDATA%\Fast Browser\Application\chrome.exe" -- "%1"'
[<HKLM>\Software\Wow6432Node\Clients\StartMenuInternet\Fast Browser.R3NNR2H653NWJWZRGMUHAZFFGI\shell\open\command] '' = '"%LOCALAPPDATA%\Fast Browser\Application\chrome.exe"'

Malicious functions

Injects code into

the following user processes:

chrome.exe

Reads files which store third party applications passwords

%LOCALAPPDATA%\fast browser\user data\default\web data
%APPDATA%\mozilla\firefox\profiles.ini
%LOCALAPPDATA%\fast browser\user data\default\login data
%LOCALAPPDATA%\fast browser\user data\default\cookies

Modifies file system

Creates the following files

%TEMP%\cr_7bab1.tmp\chrome.packed.7z
%LOCALAPPDATA%\fast browser\user data\default\cache\index
%LOCALAPPDATA%\fast browser\user data\default\cache\data_0
%LOCALAPPDATA%\fast browser\user data\default\cache\data_1
%LOCALAPPDATA%\fast browser\user data\default\cache\data_2
%LOCALAPPDATA%\fast browser\user data\default\cache\data_3
%LOCALAPPDATA%\fast browser\application\debug.log
%LOCALAPPDATA%\fast browser\user data\default\shortcuts-journal
%LOCALAPPDATA%\fast browser\user data\default\shortcuts
%LOCALAPPDATA%\fast browser\user data\default\network action predictor
%LOCALAPPDATA%\fast browser\user data\default\2c8f.tmp
%LOCALAPPDATA%\fast browser\user data\default\login data-journal
%TEMP%\etilqs_d2pglnc4iuqemgo
%LOCALAPPDATA%\fast browser\user data\default\login data
%LOCALAPPDATA%\fast browser\user data\default\258b.tmp
%LOCALAPPDATA%\fast browser\user data\default\current session
%LOCALAPPDATA%\fast browser\user data\default\extension state\manifest-000001
%LOCALAPPDATA%\fast browser\user data\default\extension state\000001.dbtmp
%LOCALAPPDATA%\fast browser\user data\2c7e.tmp
%LOCALAPPDATA%\fast browser\user data\default\top sites
%LOCALAPPDATA%\fast browser\user data\default\network action predictor-journal
%LOCALAPPDATA%\fast browser\user data\default\visited links
%LOCALAPPDATA%\fast browser\user data\default\data_reduction_proxy_leveldb\manifest-000001
%APPDATA%\microsoft\internet explorer\quick launch\fast browser.lnk
%APPDATA%\microsoft\windows\start menu\programs\fast browser\fast browser.lnk
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\fast browser.lnk
%LOCALAPPDATA%\fast browser\user data\default\readme
%LOCALAPPDATA%\fast browser\user data\default\web data-journal
%TEMP%\etilqs_bnxmwat8kzy0inv
%LOCALAPPDATA%\fast browser\user data\default\history-journal
%TEMP%\etilqs_9varebefkw2aoyx
%LOCALAPPDATA%\fast browser\user data\default\history
%LOCALAPPDATA%\fast browser\user data\default\top sites-journal
%LOCALAPPDATA%\fast browser\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
%LOCALAPPDATA%\fast browser\user data\default\web data
%LOCALAPPDATA%\fast browser\user data\default\data_reduction_proxy_leveldb\log
%LOCALAPPDATA%\fast browser\user data\default\favicons-journal
%TEMP%\etilqs_cxj0yuqvrz2ouyf
%LOCALAPPDATA%\fast browser\user data\default\favicons
%LOCALAPPDATA%\fast browser\user data\first run
%LOCALAPPDATA%\fast browser\user data\default\9fe.tmp
%TEMP%\etilqs_wod01na5230ipgl
%LOCALAPPDATA%\fast browser\user data\default\cookies
%LOCALAPPDATA%\fast browser\user data\d295.tmp
%LOCALAPPDATA%\fast browser\user data\default\extension state\000003.log
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000009
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000a
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000b
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000c
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000d
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000e
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000f
%LOCALAPPDATA%\fast browser\user data\52b8.tmp
%LOCALAPPDATA%\fast browser\user data\default\5de2.tmp
%LOCALAPPDATA%\fast browser\user data\default\extension state\log
%LOCALAPPDATA%\fast browser\user data\default\chromedwritefontcache
%LOCALAPPDATA%\fast browser\user data\default\810c.tmp
%LOCALAPPDATA%\fast browser\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\fast browser\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\fast browser\user data\default\session storage\log
%LOCALAPPDATA%\fast browser\user data\default\session storage\000003.log
%LOCALAPPDATA%\fast browser\user data\default\local storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal
%LOCALAPPDATA%\fast browser\user data\default\local storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000008
%HOMEPATH%\desktop\fast browser.lnk
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000007
%TEMP%\etilqs_accn2cewifud12x
%LOCALAPPDATA%\fast browser\user data\safe browsing cookies-journal
%TEMP%\etilqs_5aiakzw3dzm55mz
%LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\manifest-000001
%LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000001.dbtmp
%LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\log
%LOCALAPPDATA%\fast browser\user data\safe browsing cookies
%LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000003.log
%LOCALAPPDATA%\fast browser\user data\default\cookies-journal
%LOCALAPPDATA%\fast browser\user data\default\2caf.tmp
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000005
%LOCALAPPDATA%\fast browser\user data\default\origin bound certs-journal
%TEMP%\etilqs_ayrybq5iwig1jab
%LOCALAPPDATA%\fast browser\user data\default\origin bound certs
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000001
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000002
%TEMP%\etilqs_k1jmi5wmh17kazj
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000003
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000004
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000006
%LOCALAPPDATA%\fast browser\user data\default\cache\f_000010
%LOCALAPPDATA%\fast browser\application\46.0.2465.0\installer\setup.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\th.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\nacl_irt_x86_32.nexe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\nacl_irt_x86_64.nexe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\am.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ar.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\bg.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\bn.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ca.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome_100_percent.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\cs.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\fa.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\da.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\de.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\el.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\en-gb.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\en-us.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\es-419.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\es.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\et.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\46.0.2465.0.manifest
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome_200_percent.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\extensions\external_extensions.json
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome_child.dll
%TEMP%\cr_7bab1.tmp\setup.ex_
%TEMP%\cr_7bab1.tmp\setup.exe
%TEMP%\chrome_installer.log
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome.7z
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\natives_blob.bin
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\snapshot_blob.bin
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\icudtl.dat
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome_elf.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\nacl64.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\chrome_watcher.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\d3dcompiler_47.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\libegl.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\libexif.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\libglesv2.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\metro_driver.dll
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\chrome.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\delegate_execute.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\wow_helper.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ko.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\visualelementsmanifest.xml
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\fr.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ru.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\sk.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\sl.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\sr.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\sv.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\sw.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ta.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\te.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\tr.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\fil.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\uk.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\vi.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\zh-cn.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\zh-tw.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\visualelements\logo.png
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\secondarytile.png
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\visualelements\smalllogo.png
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\visualelements\splash-620x300.png
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ro.pak
%LOCALAPPDATA%\fast browser\application\chrome.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\resources.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\kn.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\gu.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\he.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\hi.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\hr.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\hu.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\id.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\it.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ja.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\fi.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\pt-br.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\lt.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\lv.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ml.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\mr.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\ms.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\nb.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\nl.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\pl.pak
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\46.0.2465.0\locales\pt-pt.pak
%LOCALAPPDATA%\fast browser\user data\60c.tmp

Deletes the following files

%TEMP%\cr_7bab1.tmp\setup.ex_
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\chrome.exe
%LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\wow_helper.exe
%TEMP%\cr_7bab1.tmp\chrome.packed.7z
%TEMP%\cr_7bab1.tmp\setup.exe
%LOCALAPPDATA%\fast browser\user data\default\258b.tmp
%LOCALAPPDATA%\fast browser\user data\default\cache\f_00000f
%LOCALAPPDATA%\fast browser\user data\local state~rf1152f0.tmp
%LOCALAPPDATA%\fast browser\user data\default\secure preferences~rf118111.tmp
%LOCALAPPDATA%\fast browser\user data\local state~rf11d2c9.tmp
%LOCALAPPDATA%\fast browser\user data\local state~rf1205e9.tmp
%LOCALAPPDATA%\fast browser\user data\local state~rf1240d6.tmp
%LOCALAPPDATA%\fast browser\user data\default\preferences~rf1258f8.tmp

Moves the following files

from %LOCALAPPDATA%\fast browser\temp\source568_22480\chrome-bin\visualelementsmanifest.xml to %LOCALAPPDATA%\fast browser\application\visualelementsmanifest.xml
from %LOCALAPPDATA%\fast browser\user data\local state to %LOCALAPPDATA%\fast browser\user data\local state~rf1205e9.tmp
from %LOCALAPPDATA%\fast browser\user data\60c.tmp to %LOCALAPPDATA%\fast browser\user data\local state
from %LOCALAPPDATA%\fast browser\user data\local state to %LOCALAPPDATA%\fast browser\user data\local state~rf11d2c9.tmp
from %LOCALAPPDATA%\fast browser\user data\d295.tmp to %LOCALAPPDATA%\fast browser\user data\local state
from %LOCALAPPDATA%\fast browser\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\fast browser\user data\default\session storage\current
from %LOCALAPPDATA%\fast browser\user data\default\secure preferences to %LOCALAPPDATA%\fast browser\user data\default\secure preferences~rf118111.tmp
from %LOCALAPPDATA%\fast browser\user data\default\810c.tmp to %LOCALAPPDATA%\fast browser\user data\default\secure preferences
from %LOCALAPPDATA%\fast browser\user data\default\5de2.tmp to %LOCALAPPDATA%\fast browser\user data\default\transportsecurity
from %LOCALAPPDATA%\fast browser\user data\local state to %LOCALAPPDATA%\fast browser\user data\local state~rf1240d6.tmp
from %LOCALAPPDATA%\fast browser\user data\local state to %LOCALAPPDATA%\fast browser\user data\local state~rf1152f0.tmp
from %LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000001.dbtmp to %LOCALAPPDATA%\fast browser\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\current
from %LOCALAPPDATA%\fast browser\user data\default\2caf.tmp to %LOCALAPPDATA%\fast browser\user data\default\preferences
from %LOCALAPPDATA%\fast browser\user data\default\2c8f.tmp to %LOCALAPPDATA%\fast browser\user data\default\secure preferences
from %LOCALAPPDATA%\fast browser\user data\2c7e.tmp to %LOCALAPPDATA%\fast browser\user data\local state
from %LOCALAPPDATA%\fast browser\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\fast browser\user data\default\extension state\current
from %LOCALAPPDATA%\fast browser\user data\default\9fe.tmp to %LOCALAPPDATA%\fast browser\user data\default\google profile.ico
from %LOCALAPPDATA%\fast browser\user data\default\data_reduction_proxy_leveldb\000001.dbtmp to %LOCALAPPDATA%\fast browser\user data\default\data_reduction_proxy_leveldb\current
from %LOCALAPPDATA%\fast browser\temp\source568_22480\chrome.7z to %LOCALAPPDATA%\fast browser\application\46.0.2465.0\installer\chrome.7z
from %LOCALAPPDATA%\fast browser\user data\52b8.tmp to %LOCALAPPDATA%\fast browser\user data\local state
from %LOCALAPPDATA%\fast browser\user data\default\preferences to %LOCALAPPDATA%\fast browser\user data\default\preferences~rf1258f8.tmp

Substitutes the following files

%LOCALAPPDATA%\fast browser\user data\local state
%LOCALAPPDATA%\fast browser\user data\default\secure preferences

Network activity

Connects to

'clients2.google.com':443
'sa##sear.ch':80
'tools.google.com':80
'sa##sear.ch':443
'go#####agmanager.com':443
'fo###.#oogleapis.com':443
'gs##tic.com':443
'go#####analytics.com':443
'tr######e.googleapis.com':443
'st###.#.doubleclick.net':443
'go##le.ru':443
'x.##2.us':80
'microsoft.com':80
'fo###.gstatic.com':80

TCP

HTTP GET requests

http://www.sa##sear.ch/tab/?ty########
http://tools.google.com/chrome/intl/en/welcome.html
http://x.##2.us/x.cer
http://www.gs##tic.com/generate_204

Other

'clients2.google.com':443
'sa##sear.ch':443
'google.com':443
'go#####agmanager.com':443
'fo###.#oogleapis.com':443
'gs##tic.com':443
'go#####analytics.com':443
'tr######e.googleapis.com':443
'ss#.#static.com':443
'st###.#.doubleclick.net':443
'go##le.ru':443
'tools.google.com':443

UDP

DNS ASK google.com
DNS ASK x.##2.us
DNS ASK go##le.ru
DNS ASK st###.#.doubleclick.net
DNS ASK fo###.gstatic.com
DNS ASK ss#.#static.com
DNS ASK tr######e.googleapis.com
DNS ASK microsoft.com
DNS ASK clients3.google.com
DNS ASK fo###.#oogleapis.com
DNS ASK gs##tic.com
DNS ASK go#####agmanager.com
DNS ASK tools.google.com
DNS ASK sa##sear.ch
DNS ASK clients2.google.com
DNS ASK go#####analytics.com
DNS ASK clients4.google.com

Miscellaneous

Searches for the following windows

ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Fast Browser\User Data'

Creates and executes the following

'%TEMP%\cr_7bab1.tmp\setup.exe' --install-archive="%TEMP%\CR_7BAB1.tmp\CHROME.PACKED.7Z"
'%LOCALAPPDATA%\fast browser\application\chrome.exe'
'%LOCALAPPDATA%\fast browser\application\chrome.exe' --type=renderer --lang=en-US --force-fieldtrials=BrowserBlacklist/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/EnableSessionCrashedBubbleUI/Enabled/*ExtensionContentVerificati...
'%LOCALAPPDATA%\fast browser\application\chrome.exe' --type=utility --channel="172.2.2075207645\413476425" --lang=en-US --no-sandbox /prefetch:-645351001
'%LOCALAPPDATA%\fast browser\application\chrome.exe' --type=utility --channel="172.6.328138204\449122838" --lang=en-US --ignored=" --type=renderer " /prefetch:-645351001
'%LOCALAPPDATA%\fast browser\application\chrome.exe' --type=utility --channel="172.7.830401392\1689799187" --lang=en-US --no-sandbox /prefetch:-645351001
'%LOCALAPPDATA%\fast browser\application\chrome.exe' --type=utility --channel="172.8.2019335945\952216318" --lang=en-US --ignored=" --type=renderer " /prefetch:-645351001

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial