Skip to content

Home Posts Engagements Recaps IOCs Detections About

Search posts and IOCs

Loading…

© 2026 cyfar.cav0.2.8DFIR · deception · detection

RSS detections tags about contact support privacy terms

Admin Debug Console Database Backup Archive

indicatorregistry_key

HKCU\SOFTWARE\Valve\Steam

First seen: 2026-07-01
Last seen: 2026-07-01
Sightings: 1

Posts referencing this indicator

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
Microsoft
StealC retrieves the Steam installation path from this registry key to collect session and configuration files for Steam account theft.
2026-07-01

HKCU\SOFTWARE\Valve\Steam · registry key · cyfar.ca