Registry query of Chrome App Paths key for browser discovery

Emiliano Mema@Nosalva

•updated Aug 20, 2026•4•0•5

Detects activity (opens, reads, or writes) involving the Windows Registry key associated with Chrome's App Paths. Modifying this key is a common method for achieving persistence or hijacking the execution path of the Chrome browser.