How ajayrandhawa/keylogger works
This is a Windows keylogging and monitoring tool. Its documented workflow runs background processes that capture keystrokes, mouse activity, and screenshots, store activity in local files, then upload logs and images to an FTP server. The README also describes copying the executable into the user profile and configuring startup persistence. The repository contains one C++ source file, but its contents were not sampled; the graph therefore reflects README-documented capabilities and relationships only.
Main entry points: Sourcecode.cpp Keylogger process
Components 10
Activity collection
- Keylogger process
Sourcecode.cpp - Input capture
Sourcecode.cpp - Screenshot process
Sourcecode.cpp - Screenshot capture
Sourcecode.cpp - Local activity files
Sourcecode.cpp
Startup persistence
- Executable copy
Sourcecode.cpp - Startup configuration
Sourcecode.cpp
Data transfer
- FTP upload
Sourcecode.cpp - FTP server
Other components
- Operator
Connections 10
- Operator → Keylogger process: runs
README.md - Keylogger process → Input capture: captures input
README.md - Keylogger process → Local activity files: records activity
README.md - Operator → Screenshot process: runs
README.md - Screenshot process → Screenshot capture: captures desktop
README.md - Screenshot process → FTP upload: uploads images
README.md - Keylogger process → FTP upload: uploads logs
README.md - Keylogger process → Executable copy: copies executable
README.md - Keylogger process → Startup configuration: configures startup
README.md - FTP upload → FTP server: sends files
README.md