Resubmissions

25/04/2026, 19:44

260425-yfveeagy717

25/04/2026, 19:26

260425-x5ybxsgw7y7

Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    25/04/2026, 19:44

General

  • Target
    RK_Keyboard_Software_Setup_V4.6 20260303.exe
  • Size 81.4MB
  • Sample260425-yfveeagy71
  • SHA256 298fecd825e81315b478e1a2857ab686f04c6a61c0d95428503e226a2197d311
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20260303.exe
    "C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20260303.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4652
    • C:\Users\Admin\AppData\Local\Temp\is-0AP53.tmp\RK_Keyboard_Software_Setup_V4.6 20260303.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-0AP53.tmp\RK_Keyboard_Software_Setup_V4.6 20260303.tmp" /SL5="$80278,84835811,275456,C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20260303.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:748
      • C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe
        "C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:3660

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-H5I78.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0079\is-H5I78.tmp
        • Size 3KB
        • SHA256 8a098eae278f7b6b797f958bc609c63e55289d9c019c4e640d2e4dbbd266a642
        • MD5 SHA1 SHA512 TLSH

        is-NEEF1.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00B5\is-NEEF1.tmp
        • Size 3KB
        • SHA256 25127c757c973488ce4f817cf16545e5540722cfbcfb563977fdb0da51597172
        • MD5 SHA1 SHA512 TLSH

        is-TC8IN.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00DE\is-TC8IN.tmp
        • Size 4KB
        • SHA256 dd70e8155538a82639dd870b719ddcfe50da5ec1c5053227a7608ad523beccce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9CS0F.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00E1\is-9CS0F.tmp
        • Size 3KB
        • SHA256 b4b62ba37ce4ea911ff71157e84d5449eb3fa002d5a8322272333db1b28ecbfb
        • MD5 SHA1 SHA512 TLSH

        is-54QA9.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00F9\is-54QA9.tmp
        • Size 4KB
        • SHA256 66cd5f77442be06ae7b6f3814de10fcb5c131793e63479ef762e791fc1f4c5a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GPBHL.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\014D\ET\is-GPBHL.tmp
        • Size 320B
        • SHA256 de6f110052f09f5ed6b171f8a96dd631955a002fcf13acf0ccae89be35d65f24
        • MD5 SHA1 SHA512 TLSH

        is-VE7MT.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D9\ET\is-VE7MT.tmp
        • Size 368B
        • SHA256 372738f14d58604c473000def4baab7c9e015cf24aaa2104a6b84f64111dea63
        • MD5 SHA1 SHA512 TLSH

        is-SUP4H.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FF\is-SUP4H.tmp
        • Size 4KB
        • SHA256 2ec607a245fa3848c1a029cc8a0fed479b47b513716759be2e4074f98e815bcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0208\KB.ini
        • Size 2KB
        • SHA256 14a19e6e5374d91336130c102e216ec1dda4d815b06511915473a92c55022273
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0211\KB.ini
        • Size 6KB
        • SHA256 ee8142abc6ccd6ef57ddab76f643be803c999c580cf7ee8376d299692178d301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-1NUA8.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0215\ET\is-1NUA8.tmp
        • Size 358B
        • SHA256 4334e218f804d083d73ebb434b233c7d5aa38658c8f3ec644e5cdc9c21105b3a
        • MD5 SHA1 SHA512 TLSH

        is-RIB8V.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0215\ET\is-RIB8V.tmp
        • Size 359B
        • SHA256 d41b92412277c86cc5cb6277db807bbc2d9a0f563b3553ab12fffa3fcf33dc9e
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0216\KB.ini
        • Size 11KB
        • SHA256 b717aecc64ddcddd990aa313bb741795857f90b800e94a003974c6c2bb28b851
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\021F\KB.ini
        • Size 6KB
        • SHA256 b6a569bdd5b483b0f8769f81833387e6ec48fe2dc797e05e8866a844a1c8f614
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-6V1BA.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\Cartoon\is-6V1BA.tmp
        • Size 325B
        • SHA256 6102e8acf3d79f2a803208b2057226c2298bc079d00770b0a3266239933b392e
        • MD5 SHA1 SHA512 TLSH

        is-0BNFH.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\ET\is-0BNFH.tmp
        • Size 387B
        • SHA256 84f9edc5d83432096e576a2829e49190848cc761622ef779e3d138954b2b201e
        • MD5 SHA1 SHA512 TLSH

        is-CA5SO.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\ET\is-CA5SO.tmp
        • Size 338B
        • SHA256 6abb26e11df39487cada04f6e5d32f3ede8da58ef197d2842d2af1d9d0bd79de
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0223\KB.ini
        • Size 6KB
        • SHA256 40a4479b358a68f974a7d4dd8a24d4ffdf92febf4df61aee8544a15e2fd19532
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-V82OQ.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0224\ET\is-V82OQ.tmp
        • Size 426B
        • SHA256 8197930a85e423ad108e52eea15de8d4a8996fceb06055404d3b8579e4e2df1f
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0225\KB.ini
        • Size 7KB
        • SHA256 238a60e27944c1e8b7467e067ec3967e1a93c415aea8b9851e340d9e446ca3d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-7QLT0.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-7QLT0.tmp
        • Size 497B
        • SHA256 579ca19323d44523b6cac89a49e9018a82a38b0f7e8a79d996fd89a2c630a82d
        • MD5 SHA1 SHA512 TLSH

        is-DM5PT.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-DM5PT.tmp
        • Size 420B
        • SHA256 519fc9b463e4d52dc9d60c5a78f4c017aecf83d4ba20a2beb4e2ff20768efe45
        • MD5 SHA1 SHA512 TLSH

        is-NBQMN.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-NBQMN.tmp
        • Size 409B
        • SHA256 9a1e9b2d166b4474924b58c3d74012fbc54b8f88adbf150b804847c6394554b7
        • MD5 SHA1 SHA512 TLSH

        is-R963V.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-R963V.tmp
        • Size 405B
        • SHA256 4f94eca769c60d621c5cb2bac40a86e3d9d4e7507ccc92ccbfe0251ba5c029fd
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\KB.ini
        • Size 6KB
        • SHA256 26d5dde16d756c654a8d139d62a57ebe749d884098d839cf96ee8803bbc4d449
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022C\KB.ini
        • Size 6KB
        • SHA256 0cb732dfb0ce86339f6200a85c8a43747d6e86b6f877926dc555ce8565a5662f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-IDAVB.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022D\Cartoon\is-IDAVB.tmp
        • Size 270B
        • SHA256 441e709bb5645e556e7a56930f730215efb4cd10341bef1ebc339a00436f0f50
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022D\KB.ini
        • Size 6KB
        • SHA256 2370b052a0bf2e8f998ef3e05357b5b2d651f0c2fd15565ed6defa309fede68c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022E\KB.ini
        • Size 6KB
        • SHA256 87ff69df9fa57c6d87ff2139c3bcbb35a096cbaff30db01f821effcd8c5d2099
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022F\KB.ini
        • Size 7KB
        • SHA256 c0d2d796abbc46d35ed61e9010af839175d9a6b33f314274afabf6ee5f06e7b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-SD497.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\Cartoon\is-SD497.tmp
        • Size 372B
        • SHA256 011cea089aeacaa0bef1d80677c2b833842933fc5fe16f20a89d081b4d421d01
        • MD5 SHA1 SHA512 TLSH

        is-92BOC.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-92BOC.tmp
        • Size 421B
        • SHA256 8ed7911294dff873a0b821184cdca513151d803ce9551b033b1adbead739e1fd
        • MD5 SHA1 SHA512 TLSH

        is-MUM83.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-MUM83.tmp
        • Size 493B
        • SHA256 a227700cb46f0f77783bae19a4da3a8160906f986d6eefad19c2ac6bc87a407e
        • MD5 SHA1 SHA512 TLSH

        is-R4NIJ.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-R4NIJ.tmp
        • Size 416B
        • SHA256 cf46ea4c8f293539e6c749b85bd6902c352977d7905afa6fc3e666504be3c031
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\KB.ini
        • Size 6KB
        • SHA256 9bbce12d3a849694cbe27ed7136a21319e7fff169cb8d32ce59d879414428565
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JR091.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023B\ET\is-JR091.tmp
        • Size 288B
        • SHA256 0e22b31863c0d1d03f76f31f8b82a3847d4c978d3a9e77bf26c931d0894eda59
        • MD5 SHA1 SHA512 TLSH

        is-SFK6A.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023B\ET\is-SFK6A.tmp
        • Size 361B
        • SHA256 38f4a45137ff1a00942c71ffe358b8e8504c7ec1e74d42cfb8648be99d0799af
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023B\KB.ini
        • Size 6KB
        • SHA256 c1f352b5589cccaa81417640bcdeafd9c255098cd75d90bd31c5cc9a8725688c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\KB.ini
        • Size 5KB
        • SHA256 0b34b43861ec79b9e47ae36eb2c59a16761656a29fadd3678ecac84c35f5c349
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HBUEM.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\en\is-HBUEM.tmp
        • Size 1KB
        • SHA256 946ef3b1677b2174c4e006f04c15bc3a88fb65e3d2e6d49747f8e06595b96166
        • MD5 SHA1 SHA512 TLSH

        is-7MVVK.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\sc\is-7MVVK.tmp
        • Size 872B
        • SHA256 b304e6e77b0e0909cfdc75b947051bac2cba3642370965a049816cf5967286b2
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023E\KB.ini
        • Size 5KB
        • SHA256 efe1482338c4691a9ec83d4c527c26b3899804aab8ec11eefb565e5d0413b771
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023F\KB.ini
        • Size 6KB
        • SHA256 40e50272f929f1661ee9716de2e0310d7a4dcc2fc8fd456267605ae5c4571b98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0240\KB.ini
        • Size 6KB
        • SHA256 4a0bb2e261a774e2e331c60a439a868d196ec83764040a639a37842a1b298509
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0241\KB.ini
        • Size 6KB
        • SHA256 4525eeb6565e10488edbcdb09d7c537c731d71343f1e7446215293e31ade1c45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0242\KB.ini
        • Size 6KB
        • SHA256 24c1341ff94ccfe1fae3e510576e067552b262154295ec325faedcf569ccc7a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0245\KB.ini
        • Size 6KB
        • SHA256 476b78cb36a9ca71799b499cf2fce85682804b7efbd15210b61e424309edc1ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-FSPOT.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\Cartoon\is-FSPOT.tmp
        • Size 298B
        • SHA256 2fd616935a19e10edbcf3138c50e1f391507dffdf08d11ae9894402dd6871888
        • MD5 SHA1 SHA512 TLSH

        is-NU2F9.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\Cartoon\is-NU2F9.tmp
        • Size 350B
        • SHA256 0d91b6710aa6aad100e52e6522a5a08236990733bf43224b4c014baae4c1d093
        • MD5 SHA1 SHA512 TLSH

        is-B22OE.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-B22OE.tmp
        • Size 281B
        • SHA256 3dd50039a29fc0c22b59514eb5e1564218c0c9f9d1f22fd47cc15e4ceaad0ee3
        • MD5 SHA1 SHA512 TLSH

        is-BCO37.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-BCO37.tmp
        • Size 284B
        • SHA256 fd1e8501484a0808cd8e9e4f8768457b84a0c505efd4b0dd9090a7a36ca63baa
        • MD5 SHA1 SHA512 TLSH

        is-OQ1S6.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-OQ1S6.tmp
        • Size 211B
        • SHA256 a9b1ac12163778ea38251993052478f5f13c66d8653f6b0d7eda60f29cc979ee
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\KB.ini
        • Size 6KB
        • SHA256 b9fb7a8fe8a8b3500f0dbfc444d71fb9ef42a4906cf5ac9bc5405c17082e9ecf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-2FKCD.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\Cartoon\is-2FKCD.tmp
        • Size 259B
        • SHA256 5c356dcfd7f47a866d166b6d045d1213c1c56b252dc1970fd137af986b8873a1
        • MD5 SHA1 SHA512 TLSH

        is-HIFFJ.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\ET\is-HIFFJ.tmp
        • Size 263B
        • SHA256 67ecccb165b484da5568896c4f8329122db1c49d46de5465484934a1276965df
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\KB.ini
        • Size 6KB
        • SHA256 a07a364ddd4be1778f452dbebc6e314ba683519fd1acbde8f2ef87042cab6df3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024B\KB.ini
        • Size 6KB
        • SHA256 88e0bd9fb4266558b428c9afa29a87864f288fb1d0b5d073fcd7e799fa440f3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0251\KB.ini
        • Size 5KB
        • SHA256 56fa5055fdadc87b8b44b17524a44d634c42a6386f4003caf06a62c7b78a9777
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0256\KB.ini
        • Size 6KB
        • SHA256 edaaa7e8cc10fd3abe15ab8a59850343154487c8969a93becf0fc10fc88bd7ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0257\KB.ini
        • Size 6KB
        • SHA256 727e426ad2955d186b2049a5305bb96800bdb93bf50f16b813a329261469c92f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0258\KB.ini
        • Size 7KB
        • SHA256 07bb1eb520d3a540d782ead5862655920615140b992247b56457d007a7413dda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025A\KB.ini
        • Size 6KB
        • SHA256 3a65c9d0acef793c6c8920a066051f1192d40f35eebe898ad6b06ddf1ae22c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025E\KB.ini
        • Size 6KB
        • SHA256 b13026312be88152f1c926ae5d891bce7aa82435dc07df4ba3dfc28f99651a6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9FC4K.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\Cartoon\is-9FC4K.tmp
        • Size 370B
        • SHA256 00da73c996ff1311b73e7de835767b97ced47990cf7cccc80243ba6a7a7ad281
        • MD5 SHA1 SHA512 TLSH

        is-8Q9CL.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\ET\is-8Q9CL.tmp
        • Size 377B
        • SHA256 038dfb653bc214a81475c2018abce77526a701468bb2861a5bef5de54a3f96ab
        • MD5 SHA1 SHA512 TLSH

        is-OPDH3.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\ET\is-OPDH3.tmp
        • Size 360B
        • SHA256 3b29db3c13b41a77fc6e4cef64f609fe88cbd03aa75ed9b43a8b416842b44ac2
        • MD5 SHA1 SHA512 TLSH

        is-OV02R.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\ET\is-OV02R.tmp
        • Size 493B
        • SHA256 270c9e97b4a3da5204335e157747d3a71b53ecab1cc543753c6b0dc8614af883
        • MD5 SHA1 SHA512 TLSH

        is-UANRM.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\ET\is-UANRM.tmp
        • Size 368B
        • SHA256 830c45493579e9807b84f909a550dc902b515cf59d9fd49dda8161be30aa8d1c
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\025F\KB.ini
        • Size 6KB
        • SHA256 4517f4d840f1ae062ae84010d7104a43fc67742e1e9033810a5634ad82892ede
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0263\KB.ini
        • Size 6KB
        • SHA256 1388d14868ad0ad67c33df3a9b9debd455b5e8318261e089db5799016895a856
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0264\KB.ini
        • Size 6KB
        • SHA256 20f7dec844de9de440dc84e8d71e69b0500df08d019675bdbeb18db62ee73d6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0265\KB.ini
        • Size 6KB
        • SHA256 dbdb1d835a873e22f90f15495842b77b2be3466e8bbc7fae6d17112c7d4a195f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0266\KB.ini
        • Size 6KB
        • SHA256 4ebe1f7ecfa3e0e24650b673d14ff84e4cd092eeaab8a6b5bd97501a28d2d201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0267\KB.ini
        • Size 5KB
        • SHA256 4279448064306da4f108f6c5ee88b28d3446d0d6e110060c15c68501236622f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\026B\KB.ini
        • Size 6KB
        • SHA256 2105ecc02d92abb40dceb04bf88837b994b514299527c4994c11907441db16d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0272\KB.ini
        • Size 6KB
        • SHA256 8bb5db809dcdc77520e148d9cccae5c815bca939b3d301c1f62389bb812dd6b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0273\KB.ini
        • Size 6KB
        • SHA256 95e20d2cab368e77f4a06d0be526b581cfc766c0fad5477c57c84d87ae896799
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0274\KB.ini
        • Size 6KB
        • SHA256 38ffeebc9fba7752b75ae1504b5a18fba8b73319dcc951b88da5065701e78343
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-JKA1K.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\Cartoon\is-JKA1K.tmp
        • Size 317B
        • SHA256 bc33710ba1dc952815eabf5f2ff3fac0f4c60d2a559fe86787148752ee18541d
        • MD5 SHA1 SHA512 TLSH

        is-3H2BS.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\ET\is-3H2BS.tmp
        • Size 288B
        • SHA256 74ba4f760239d8edc01ed72263320630656d5b3fb42d1d0ed58f5085dc790073
        • MD5 SHA1 SHA512 TLSH

        is-5QTNK.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\ET\is-5QTNK.tmp
        • Size 293B
        • SHA256 88e25b1dde9246d88bf9894b73b95a2674af43401f566228f85e2893125b22ad
        • MD5 SHA1 SHA512 TLSH

        is-HNCGB.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\ET\is-HNCGB.tmp
        • Size 225B
        • SHA256 3360cb4db0b0a82d63bc2b46548864fb6bec01ff1286765e18afe9b14eaa5220
        • MD5 SHA1 SHA512 TLSH

        is-VK62S.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\ET\is-VK62S.tmp
        • Size 395B
        • SHA256 52ffd4d4fa5900beb4fc84ffbde6be437e6b68ae1ad02cbd453d6f43f993b392
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0275\KB.ini
        • Size 6KB
        • SHA256 3c0a63fc7403d2a8ef86585414ada77b6883212f951a8217ce26a2a1dd3886e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0276\KB.ini
        • Size 6KB
        • SHA256 32e922d05733b5a8ffd3eccbb2caf6f3f8134f7e90d1182fee783e85afe4ec25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\027A\KB.ini
        • Size 4KB
        • SHA256 44e74bbdad09eb2ae28b9781cffee84a434f463c20b22fb4a928c3d7897543a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UU530.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\027C\Cartoon\is-UU530.tmp
        • Size 383B
        • SHA256 f0c5aaeafaf12fd8eaed29daaf25767b07acea5907bd2ecb97bb72821e0151d7
        • MD5 SHA1 SHA512 TLSH

        is-QIPCL.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\027C\ET\is-QIPCL.tmp
        • Size 292B
        • SHA256 0bab6d0d200d876aab1c9b80f47dabcbba1696c5ea6143dbf7204c6ab8cb2b42
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\027C\KB.ini
        • Size 6KB
        • SHA256 3f750f35ab0842e260207a5e18b7ca161b45d1e6a58d98fc2308b8c4faf68b0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\028D\KB.ini
        • Size 5KB
        • SHA256 7d68660eaafed2cd492a06b6fe51ffe10793a315cc8abf0c86ea541d62484503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0298\KB.ini
        • Size 7KB
        • SHA256 2a1f20092a685efc6a95b974b7387b671f4355e1f71903f6dd5b1f5fe0ad538f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9VJHD.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\029A\ET\is-9VJHD.tmp
        • Size 298B
        • SHA256 31fd21f0983aaf12663f1729c26565a6f22b2f900f5136eedcccfc83bf83dc92
        • MD5 SHA1 SHA512 TLSH

        is-FQ9S6.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\029A\ET\is-FQ9S6.tmp
        • Size 216B
        • SHA256 a74e7bd1aabc4cb752831fd1d38818fa544d6ada7b6f4db9f7ffb47a0418b37b
        • MD5 SHA1 SHA512 TLSH

        is-JELIJ.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\029A\ET\is-JELIJ.tmp
        • Size 279B
        • SHA256 37020a91a6f21031b84a76e729effe04bf49ebd64ec38463d79f9f63aa5c0ef5
        • MD5 SHA1 SHA512 TLSH

        is-NAC7U.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\029A\ET\is-NAC7U.tmp
        • Size 292B
        • SHA256 547bf4e1f45a96fde5478ff6bfd0e32201a2ff504b21224b877989d24dc06f49
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\029A\KB.ini
        • Size 12KB
        • SHA256 cc1b5f2b2a28d652addbe17117eba89d364a906aec650b80cdcafd0ede906c80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02A0\KB.ini
        • Size 7KB
        • SHA256 58c556ccd169e407ab5a115f9bd151648f3bd128202db56a2ce0294934d61c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02A6\KB.ini
        • Size 5KB
        • SHA256 0cfdb7072767b3a8dba1116feb6374d3b0bf8af3ab496e807ffd91fb3b534701
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02A7\KB.ini
        • Size 3KB
        • SHA256 39e13d6e718ce1eb6e3b19b43dee0b24d0bd483079144deb7870837018c13917
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02A8\KB.ini
        • Size 3KB
        • SHA256 139fdeb4238c05a05b1d8a9a3a2b4920916330837da545683190d900d43151cb
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02A9\KB.ini
        • Size 5KB
        • SHA256 f28c42ce4daf381774c5d7e996cace3fea60b28baf4f341ec118a9fb4b00cfd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02AA\KB.ini
        • Size 5KB
        • SHA256 7ed5c598dcf986521d30e42915e112e3de5e0c985b87d82589f61a78addb5783
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NTDGI.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02AB\ET\is-NTDGI.tmp
        • Size 274B
        • SHA256 0c2963bc462fa31189544a6b1b73613f98701179cfda3a129c831a41313671a8
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02AB\KB.ini
        • Size 5KB
        • SHA256 de3b2b0f12aabeab387669465c66217f3a8e2b4a0c1222fd34e0226da165fb3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02AC\KB.ini
        • Size 6KB
        • SHA256 d889cf7f32f27020119a1aeac63116a747b5de56ffd3f3308279763df93388f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-T3AR7.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02B0\Cartoon\is-T3AR7.tmp
        • Size 379B
        • SHA256 2bd1aee9260b99e0262f0f1921917cae333cfb98480e0f3ade53ecd03efc24b8
        • MD5 SHA1 SHA512 TLSH

        is-4O6U7.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02B0\ET\is-4O6U7.tmp
        • Size 357B
        • SHA256 8e7baf00e975d6157aeb9a69e5cbd3fb760609f623548b80ec194fbfd04f3370
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\02B0\KB.ini
        • Size 13KB
        • SHA256 fa9d4e326a4b29e544b026c5ae812bd6df6a3c58d99b89e94837517c1ece6aea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DeviceDriver.exe

        • Path C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe
        • Size 2.2MB
        • SHA256 b0763957b7e2d6466b4b60efc4f5f6e0af49b80bcf2c302b323f0f1bc48bff4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        text.xml

        • Path C:\Program Files (x86)\RK Keyboard Software\Text\en\text.xml
        • Size 22KB
        • SHA256 2ea68bb042f219f1e4212f2503711b9e58383936ba8edfb3694d31250a23e007
        • MD5 SHA1 SHA512 SSDEEP TLSH

        appico.ico

        • Path C:\Program Files (x86)\RK Keyboard Software\appico.ico
        • Size 135KB
        • SHA256 bf3318da82be92607cd0135135c38de80dbe5a5a9ba609996b20fefeaa6c8562
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cfg.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\cfg.ini
        • Size 19KB
        • SHA256 c2b1af8fc0b5af25f9be7ce66853a71ab18b6884338decd78ea42a2191cccbfd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lang.ini

        • Path C:\Users\Admin\AppData\Local\RKKB\lang.ini
        • Size 20B
        • SHA256 d0a01b887fd86e8892ee940de755480fcc888b5e7d48a6941d1ad3b4f043ef07
        • MD5 SHA1 SHA512

        update_version.xml

        • Path C:\Users\Admin\AppData\Local\RKKB\update_version.xml
        • Size 12KB
        • SHA256 8b3efd728abd9b12cfa7bbf43abc4eabb21a98f62743125dcd85502d7f3eefdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RK_Keyboard_Software_Setup_V4.6 20260303.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-0AP53.tmp\RK_Keyboard_Software_Setup_V4.6 20260303.tmp
        • Size 1.2MB
        • SHA256 5dc8bf409f56e97eadf45db2b3013ee33123e078462ef47e8dd1300fcf388b6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        InitSetup.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-9I7FB.tmp\InitSetup.dll
        • Size 67KB
        • SHA256 59db7bfd9a92cc9a0998260807f17c536ec71159b727df10d08b998bc94de301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/748-2211-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-7-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-8-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-13-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-16-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-19-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-21-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/748-1397-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/3660-2277-0x00000000036F0000-0x00000000037EE000-memory.dmp

        memory/4652-0-0x000000000041E000-0x000000000041F000-memory.dmp

        memory/4652-1-0x0000000000400000-0x000000000044F000-memory.dmp

        memory/4652-14-0x0000000000400000-0x000000000044F000-memory.dmp

        memory/4652-2212-0x0000000000400000-0x000000000044F000-memory.dmp