rnpkeys.exe Executed from ProgramData\keyroll Staging Directory

Ibrahim Saud@tektrix

•updated 10 days ago•1•0•1

Detects the execution of the 'rnpkeys.exe' file from the 'C:\ProgramData\keyroll\' directory. The location and filename are highly atypical and could indicate unauthorized tool usage, potential persistence, or malicious activity.