Analysis

  • user interaction
    yes
  • max time kernel
    48s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    09/05/2026, 04:49

General

  • Target
    Genesis Thor 303 TKL Black software/Genesis Thor 303 TKL Black setup.exe
  • Size 3.2MB
  • Sample260509-ff2jlsd15r
  • SHA256 4cf5110b106eb43ab772e73fa525f1efbbe2ef78ad944b593f600a1e152a9b86
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:332
    • C:\Users\Admin\AppData\Local\Temp\is-4P48I.tmp\Genesis Thor 303 TKL Black setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-4P48I.tmp\Genesis Thor 303 TKL Black setup.tmp" /SL5="$3017C,2556277,861184,C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4952
      • C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe
        "C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:2376
  • C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe
    "C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1940
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:5000

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Config.exe

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe
        • Size 3.4MB
        • SHA256 70315ee5717900ef4e24586a9066f02bbe598183f44b2a951aa68fb923e7aa6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Strings.xml

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\EN\Strings.xml
        • Size 8KB
        • SHA256 7046b5555f24754cbeaded22f847f8dc3bb8e3b04751c269cb02a8a3ede845be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Public.xml

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\Public.xml
        • Size 8KB
        • SHA256 fb83daaa3f2b63188627efa464c1da20ec85c66d95f37d0639bae3139b5ec5ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KBHook.dll

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\KBHook.dll
        • Size 53KB
        • SHA256 4b2b300aa82064bc594d9db03e0b3658760687d56f196298d7971b878d2fee5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Buttons.xml

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Buttons.xml
        • Size 10KB
        • SHA256 9ed5936002a088f03d663a6b37414d54fed52dac5cedf1931ac0aa3575af32be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lighting_mask.bmp

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\Lighting_mask.bmp
        • Size 1.8MB
        • SHA256 ec9528a8bff2cef2a2f795e00945ca0425c624703a861fd06d513ebabc5f1794
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.jpg

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\bg.jpg
        • Size 398KB
        • SHA256 d12803210026857315428b2d39fe0df153f5e3ecc222f15b78eb722c3fcda435
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg_Keyassignment.jpg

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\bg_Keyassignment.jpg
        • Size 57KB
        • SHA256 4981f4f8a35cf67f3892a52e62d0ed65ff8429b682293e9a99d24d149c50701e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_1_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_1_down.png
        • Size 1KB
        • SHA256 ae0d4184fc6676f80636b975722e0a5beb98306b6c731113c1c52f007b96e7da
        • MD5 SHA1 SHA512 TLSH

        ColorBtn_1_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_1_normal.png
        • Size 1KB
        • SHA256 5ac91ec04bb5720f32b3bedb890d434b49bb4c5a6ced0b7c56f2d19308e0f9e0
        • MD5 SHA1 SHA512 TLSH

        ColorBtn_2_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_2_down.png
        • Size 247KB
        • SHA256 7ca443a1deeb5f462b243328873423ca8e520a4a84b67e9fc46f8659106198b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_2_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_2_normal.png
        • Size 247KB
        • SHA256 e325a7030b047e513635a9938b15dff72b7e39a95d7de8e34e872b0a5217d9e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_3_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_3_down.png
        • Size 247KB
        • SHA256 a6e07e6eb638ded0518e0f19849e29fb3dbd3145616207d53c330e01da18eb4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_3_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_3_normal.png
        • Size 247KB
        • SHA256 e0be68e7f0d0e9742419bc0f601c6d75accc187a97bdea05cd212fdfff7316c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_4_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_4_down.png
        • Size 247KB
        • SHA256 7da6a040a9a998054c240595c74ebc5359d4e8e1468e05adcbceec97c85b49ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_4_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_4_normal.png
        • Size 247KB
        • SHA256 37b38b99177f6d6e860947d21ce0bc8d101b260e920898176f623bd72665adac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_5_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_5_down.png
        • Size 247KB
        • SHA256 4158c79979b67341185422ee6c05620422b08b8d493d6cb5da8e81b96b559d52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_5_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_5_normal.png
        • Size 247KB
        • SHA256 4747243995813e664c6292d9b9c509e7db1f5bbf5b34d1993925ffd9f7a96550
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_6_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_6_down.png
        • Size 247KB
        • SHA256 4b1802476fcf4e9c0c21c19968836987a89810ff0ef0ca6a7fd7555df65f369a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_6_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_6_normal.png
        • Size 247KB
        • SHA256 052cf32bf20aab36ca9ed3590a99524bd81e6ab7e95f37c57bd831c7aa4e6dad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_7_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_7_down.png
        • Size 247KB
        • SHA256 0ae1851a3c19f94b7beb8ddf968344c360020f68d75b570c9f1180b8e790a695
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_7_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_7_normal.png
        • Size 247KB
        • SHA256 93a0d39824c0cb762ce590272183726ddb06389b414572420b1bb04095b98bd1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_8_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_8_down.png
        • Size 247KB
        • SHA256 f257464b68ff817ab3b4684cda2701d520d470ee580286f099229b00dcfb392a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ColorBtn_8_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_8_normal.png
        • Size 248KB
        • SHA256 aecf221487c8821a07d6286b4420fb2431ae5fe3f53d3a95767e676d17a155b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MacroMenuBtn_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\MacroMenuBtn_normal.png
        • Size 209KB
        • SHA256 b15b9f270473bab84508330eace0c43227de316dd7ee445f09e46bbaddc7cb58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Keyboard.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\Keyboard.png
        • Size 150KB
        • SHA256 9492552895949fa7cac64591b94426a2a19e6c570266883cb1c1473b6a30dd5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogoBottom.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\LogoBottom.png
        • Size 7KB
        • SHA256 42e28e9058524cd6d915c3836ffe22f6c5384219627d5668ea29eabb14348a4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogoMiddle.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\LogoMiddle.png
        • Size 10KB
        • SHA256 4ea245772aa11f0b4983e6bb118d0093978c90801424227128e6471464518a6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WebSide.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\WebSide.png
        • Size 6KB
        • SHA256 ac53d331dee24f90a92a4f1b2e38a3255de0fb63f221e9fac4f1182ad6b6e1f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        blank_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\blank_normal.png
        • Size 207KB
        • SHA256 1ed2912870b35c9814f56719ef681ea4029c36775094fce04e8d91d911e12b14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnColor_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnColor_normal.png
        • Size 17KB
        • SHA256 6ae3f7b701d7ba5a83f428a72aad564443b67ab1512f63a90193c2d5d42d3213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnEffectMenu_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnEffectMenu_normal.png
        • Size 2KB
        • SHA256 3e566ea76cb8c2ff3029d2ae4943813cea63e1713c53fd4e4d5a2d1ef681d74e
        • MD5 SHA1 SHA512 TLSH

        btnFunction_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_down.png
        • Size 2KB
        • SHA256 0a768f867607cad1b93effa6a0dddb12ff188120ffc2149e7746bfc3902e768a
        • MD5 SHA1 SHA512 TLSH

        btnFunction_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_normal.png
        • Size 2KB
        • SHA256 86e880a70b8597fe5d2e6a3d48cf038c844af53e1fa4c55cccd86eba45865117
        • MD5 SHA1 SHA512 TLSH

        btnFunction_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_over.png
        • Size 2KB
        • SHA256 ac8049495b13a8bb41192a1f9b25bae4a19790d8649d7cecdfc26c882c7b9d2f
        • MD5 SHA1 SHA512 TLSH

        btnLaunch_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnLaunch_normal.png
        • Size 208KB
        • SHA256 a3be253435b74842bbc9f8ecf7176efda6e873b6ade2e9afe701ff24d99472bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnLaunch_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnLaunch_over.png
        • Size 3KB
        • SHA256 7041932f55156a4afa6782e245ccca1003deb9ef2b01c2f116664a4799c7b80f
        • MD5 SHA1 SHA512 TLSH

        btnReset_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_down.png
        • Size 2KB
        • SHA256 ec18a856ef7f4c4af373cb60ec07ec831eef7daf5304085aadbd020001654428
        • MD5 SHA1 SHA512 TLSH

        btnReset_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_normal.png
        • Size 2KB
        • SHA256 cd6654522786c341c1b6ddf1652bd4e84a96aa271d4e01997f511a5aa9c87c9d
        • MD5 SHA1 SHA512 TLSH

        btnReset_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_over.png
        • Size 3KB
        • SHA256 5a9b18f742f9a08bc45cc1f8f70a05855580e6812cdf1fcc11c2b727228e5f69
        • MD5 SHA1 SHA512 TLSH

        btnSingleKey_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnSingleKey_normal.png
        • Size 2KB
        • SHA256 1397131989e741be6e78bc73e8cb54335903e18a629dce656c62d790558b254b
        • MD5 SHA1 SHA512 TLSH

        btn_exit_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_exit_normal.png
        • Size 208KB
        • SHA256 66075cfcaad78d11beacf289f0ff35ca36a0d0705798c071108688c720c0b2b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btn_light_disable.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_disable.png
        • Size 207KB
        • SHA256 8ae5454ae1daef1e669fe49071847abaf7cbf9c387f2c9a7cad833552ce4beaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btn_light_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_down.png
        • Size 208KB
        • SHA256 89ee11048c28a9647d521af568d4530f25e564fd1b08449eab97f00db22ee367
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btn_light_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_normal.png
        • Size 208KB
        • SHA256 b994dc58abaefae3c3e464c5bce5d8dd24003930d130b62645ce4fc16037b20c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btn_min_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_min_normal.png
        • Size 207KB
        • SHA256 f3cb61f1d4a739bb34901e31f8b4deadc5947edb2c8aa4dc1a7cb20eb25d92c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btn_setting_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_setting_normal.png
        • Size 207KB
        • SHA256 841530ce7ce5745edd14ef7fbcff1dbfe9b0435f6212cd092fc97240b3a6baf3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnkb1_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_down.png
        • Size 207KB
        • SHA256 5b4eee91adb87d08f33988855c10ccaedc296eb317ae0cf468f5c3c89ed609cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnkb1_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_normal.png
        • Size 207KB
        • SHA256 08b4ac5c08c190f76cddc55328a891e05892183d0e42e64bdf883a7ac6c211bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnkb1_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_over.png
        • Size 207KB
        • SHA256 7dda20e1de7c95fa73710f0f5828b2c6b344dfc97842fdea2f0b51c6801b4ab5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnok_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_down.png
        • Size 208KB
        • SHA256 2e5d31679a5b99478b83e23492f1a6763dac0c6ab62f82f0a322cd15f62d92ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnok_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_normal.png
        • Size 208KB
        • SHA256 f33fc3652663218ea54a71b351624c1f6c3750e88367ddb5598581b3d0ebb18a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnok_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_over.png
        • Size 208KB
        • SHA256 85e4bc89fb58ae03ae5244ea2e1947d1336126a61a20e9f8e9c35f044bdb8421
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnprofile_down.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_down.png
        • Size 208KB
        • SHA256 252d63519921c74e929d3d3793e16b1954111649f1d8ed9b6e14d35f01e6c494
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnprofile_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_normal.png
        • Size 208KB
        • SHA256 5e11b15c2040f986678d06889b674c90819f73ba4c985ddf5ea8273f4dbcfcd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        btnprofile_over.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_over.png
        • Size 208KB
        • SHA256 a6c9e6bc15ccc2572545a370cccaca34bb865c7ddda97e6f72cea53ccfc47103
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sliderSpeed_bar_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\sliderSpeed_bar_normal.png
        • Size 18KB
        • SHA256 af0756ecb3a09a7203280dc79fb5016526347a07608cfea3cfbdc51afcb23133
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sliderSpeed_normal.png

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\sliderSpeed_normal.png
        • Size 1KB
        • SHA256 c3c5d32c640816d69c20616b8d0c5a9062194e06a0972815d3c9ce11abcb0f8e
        • MD5 SHA1 SHA512 TLSH

        KeyboardButtons.xml

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\KeyboardButtons.xml
        • Size 13KB
        • SHA256 f718b9088e0e2d5c735e14425d43b32c48a0807c10fdf808c1e0ada55496825f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Skins.xml

        • Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Skins.xml
        • Size 1KB
        • SHA256 5ef5685dc264d503f3d56180aa3e7ea4879c942b06274e1b62bd84f0bea4ac8b
        • MD5 SHA1 SHA512 TLSH

        SearchHoverUnifiedTileModelCache.dat

        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
        • Size 22KB
        • SHA256 817ab3b32ccebe44050a2b433019acc469f8bd8c584ef98c2e7121033840bf13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Genesis Thor 303 TKL Black setup.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-4P48I.tmp\Genesis Thor 303 TKL Black setup.tmp
        • Size 3.0MB
        • SHA256 2a018e5dcfb5b82b1174b2e4725492643d48cdd7e3de74ce18be2b104de1754e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Profile 1.profile

        • Path C:\Users\Admin\AppData\Roaming\Genesis Thor 303 TKL Black\Profiles\Profile 1.profile
        • Size 37KB
        • SHA256 d24a1a087f4a70922fedcee86d3dec4370d153fcec978fffee017eb7bbd947f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/332-0-0x0000000000400000-0x00000000004E0000-memory.dmp

        memory/332-250-0x0000000000400000-0x00000000004E0000-memory.dmp

        memory/332-8-0x0000000000A60000-0x0000000000ADB000-memory.dmp

        memory/332-7-0x0000000000400000-0x00000000004E0000-memory.dmp

        memory/332-251-0x0000000000A60000-0x0000000000ADB000-memory.dmp

        memory/1940-292-0x0000000000D00000-0x0000000000D7B000-memory.dmp

        memory/2376-290-0x0000000000E30000-0x0000000000EAB000-memory.dmp

        memory/4952-9-0x0000000000400000-0x0000000000719000-memory.dmp

        memory/4952-10-0x0000000002570000-0x0000000002571000-memory.dmp

        memory/4952-5-0x0000000002570000-0x0000000002571000-memory.dmp

        memory/4952-249-0x0000000000400000-0x0000000000719000-memory.dmp