Analysis
- user interaction
yes - max time kernel
210s - max time network
210s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 05:03
General
- Target Genesis Thor 303 TKL Black software/Genesis Thor 303 TKL Black setup.exe
- Size 3.2MB
- Sample260509-fpndcaes4k
- SHA256 4cf5110b106eb43ab772e73fa525f1efbbe2ef78ad944b593f600a1e152a9b86
- MD5 9e447bf6ea8ef3644019e0ccaca106f8
- SHA1 45884a34708528f1400cf403b0e952fda203f3dc
- SHA512 4b43ef83c32d17ad03e72f72c75a9b542510bb2c9977cf99f3d4a41896400f592a19fa65f8685043781131001df7495ce7577e0f5c83b0e684c0cf4e1a2dac7a
- SSDEEP 49152:Mqe3f6NmYpBqgx6VVr1E+kPgBTI0v6icaBibqHfe9rPO1+yvQwc/bbc5x:ZSiLoS6TOzPgZCUNHfe9rG8y5cPcT
- TLSH T148F5F13BB268653EC46B473255B39263597BFAB0A81B8C1F5BF0081DCF264603E3A755
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 772 Genesis Thor 303 TKL Black setup.tmp 4048 Config.exe - Loads dropped DLL 1 IoCs
pid Process 4048 Config.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\is-3SVEL.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-00DPG.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-5L5N7.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-DBF48.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-KCE62.tmp Genesis Thor 303 TKL Black setup.tmp File opened for modification C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\KBHook.dll Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-2U0ED.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-N70IV.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-OODKL.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-IKAO5.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-91IU1.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-E07V8.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-GN01L.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-VPKEL.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-T43C1.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-T5IQP.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-AF4T4.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-60EG6.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Menu\is-NTMNM.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Png\is-539RG.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-FD7MN.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-0B3RR.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-S792D.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-D0S0Q.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-S1AAR.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\is-6K7AD.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\PL\is-1U9QJ.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-MFBM0.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-NUV81.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-HQ7G9.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-AOPEK.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\is-7I2C9.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\is-1LQ27.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-FQHQV.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-BQ6EQ.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Background\is-PDG0I.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Png\is-HJPJG.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Progress\is-7TJRT.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-R675I.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-LHNOA.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-05D9Q.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-12P6R.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-VUBAN.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Menu\is-KRA8E.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Png\is-UPNTH.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Progress\is-ERU5D.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\is-3QVN7.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\is-RJ8U2.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-5VQ15.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-GC3TE.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Background\is-CDDTL.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Png\is-05BRF.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-P49FB.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-8EBE3.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-HRS5H.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-AHCRK.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-F5I84.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Background\is-RI6JH.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\is-EJTQN.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-70C4F.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-GEULE.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-6FUDV.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\Progress\is-AEOOL.tmp Genesis Thor 303 TKL Black setup.tmp File created C:\Program Files (x86)\Genesis Thor 303 TKL Black\Skins\Images\is-R1PFD.tmp Genesis Thor 303 TKL Black setup.tmp - Drops file in Windows directory 4 IoCs
description ioc Process File created C:\Windows\is-Q33OD.tmp Genesis Thor 303 TKL Black setup.tmp File opened for modification C:\Windows\unins000.dat Genesis Thor 303 TKL Black setup.tmp File opened for modification C:\Windows\SystemTemp chrome.exe File created C:\Windows\unins000.dat Genesis Thor 303 TKL Black setup.tmp - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Genesis Thor 303 TKL Black setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Genesis Thor 303 TKL Black setup.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Config.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1420 chrome.exe - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/2912-0-0x0000000000400000-0x00000000004E0000-memory.dmp innosetup behavioral1/memory/2912-7-0x0000000000400000-0x00000000004E0000-memory.dmp innosetup behavioral1/memory/2912-286-0x0000000000400000-0x00000000004E0000-memory.dmp innosetup - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134227766376069654" chrome.exe - Modifies registry class 5 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428 chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children chrome.exe Key created \REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 772 Genesis Thor 303 TKL Black setup.tmp 772 Genesis Thor 303 TKL Black setup.tmp 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5448 chrome.exe 5448 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe Token: SeShutdownPrivilege 5288 chrome.exe Token: SeCreatePagefilePrivilege 5288 chrome.exe - Suspicious use of FindShellTrayWindow 55 IoCs
pid Process 772 Genesis Thor 303 TKL Black setup.tmp 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe - Suspicious use of SendNotifyMessage 36 IoCs
pid Process 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe 5288 chrome.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4048 Config.exe 4048 Config.exe 4048 Config.exe - Suspicious use of WriteProcessMemory 31 IoCs
description pid Process procid_target PID 2912 wrote to memory of 772 2912 Genesis Thor 303 TKL Black setup.exe 79 PID 772 wrote to memory of 4048 772 Genesis Thor 303 TKL Black setup.tmp 81 PID 5288 wrote to memory of 2052 5288 chrome.exe 83 PID 5288 wrote to memory of 1420 5288 chrome.exe 84 PID 5288 wrote to memory of 1160 5288 chrome.exe 85 PID 5288 wrote to memory of 1160 5288 chrome.exe 85 PID 5288 wrote to memory of 5284 5288 chrome.exe 86 PID 5288 wrote to memory of 5284 5288 chrome.exe 86 PID 5288 wrote to memory of 6008 5288 chrome.exe 88 PID 5288 wrote to memory of 5480 5288 chrome.exe 89 PID 5288 wrote to memory of 6008 5288 chrome.exe 88 PID 5288 wrote to memory of 5480 5288 chrome.exe 89 PID 5288 wrote to memory of 6032 5288 chrome.exe 90 PID 5288 wrote to memory of 6032 5288 chrome.exe 90 PID 5288 wrote to memory of 1184 5288 chrome.exe 92 PID 5288 wrote to memory of 1184 5288 chrome.exe 92 PID 5288 wrote to memory of 5772 5288 chrome.exe 93 PID 5288 wrote to memory of 1172 5288 chrome.exe 95 PID 5288 wrote to memory of 1172 5288 chrome.exe 95 PID 5288 wrote to memory of 5268 5288 chrome.exe 96 PID 5288 wrote to memory of 5268 5288 chrome.exe 96 PID 5288 wrote to memory of 396 5288 chrome.exe 97 PID 5288 wrote to memory of 396 5288 chrome.exe 97 PID 5288 wrote to memory of 5888 5288 chrome.exe 98 PID 5288 wrote to memory of 5888 5288 chrome.exe 98 PID 5288 wrote to memory of 3560 5288 chrome.exe 100 PID 5288 wrote to memory of 4980 5288 chrome.exe 101 PID 5288 wrote to memory of 5260 5288 chrome.exe 102 PID 5288 wrote to memory of 5448 5288 chrome.exe 110 PID 5288 wrote to memory of 1456 5288 chrome.exe 117 PID 5288 wrote to memory of 1456 5288 chrome.exe 117
Processes
-
C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe"C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2912 -
C:\Users\Admin\AppData\Local\Temp\is-DJG9B.tmp\Genesis Thor 303 TKL Black setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-DJG9B.tmp\Genesis Thor 303 TKL Black setup.tmp" /SL5="$5021E,2556277,861184,C:\Users\Admin\AppData\Local\Temp\Genesis Thor 303 TKL Black software\Genesis Thor 303 TKL Black setup.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:772 -
C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe"C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4048
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5288 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb5cc6c728,0x7ffb5cc6c734,0x7ffb5cc6c7402⤵PID:2052
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1508,i,740928600687652471,9840368222880631188,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2076 /prefetch:112⤵
- System Time Discovery
PID:1420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,13391255467205787116,7174820516017922493,262144 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2040 /prefetch:22⤵PID:1160
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,15032110000559044341,18275033297952571748,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1844 /prefetch:132⤵PID:5284
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,15517906766669950710,4460984904647634543,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:6008
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,7624377374569136249,18257827276723947306,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3532 /prefetch:12⤵PID:5480
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4248,i,12093579947433657100,16500789906754674099,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4268 /prefetch:92⤵PID:6032
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,10004967228035292614,14363305732273917010,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4680 /prefetch:12⤵PID:1184
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,15088194980559618003,18023018606309206923,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5420 /prefetch:142⤵PID:5772
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5880,i,3745406364945623378,17389680778291052611,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5872 /prefetch:12⤵PID:1172
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3284,i,10231766274056124840,8980079657725420594,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5916 /prefetch:12⤵PID:5268
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3620,i,4631592447982760036,15294360001859837131,2097152 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3628 /prefetch:12⤵PID:396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3716,i,18259075158812297947,1245750035225488539,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3868 /prefetch:142⤵PID:5888
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6100,i,5911257745668186948,16082673516528898220,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=212 /prefetch:142⤵PID:3560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,6449960670267941093,17869529338039379995,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3236 /prefetch:142⤵PID:4980
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6120,i,8488838064837991126,12967110378768916978,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6124 /prefetch:142⤵PID:5260
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5708,i,2365635364996711938,11336327033073316652,262144 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5968 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:5448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4312,i,8706655755154642016,12471277002200744555,524288 --field-trial-handle=2044,i,9148639583641871032,4013124162005233616,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5416 /prefetch:142⤵PID:1456
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2004
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:972
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1060
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}1⤵
- System Location Discovery: System Language Discovery
PID:476
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,Control_RunDLL C:\Windows\System32\srchadmin.dll ,1⤵PID:2224
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Config.exe
- Size 3.4MB
- SHA256 70315ee5717900ef4e24586a9066f02bbe598183f44b2a951aa68fb923e7aa6b
- MD5 796ae79b29b3583ea7ef54d875e82231
- SHA1 aed715686a916d26891ef6ab7561725309041d43
- SHA512 c919b097a2549c44ada03e9763ae69b72e0fb3d15bcda2acdd07409ebd0ccd489b79a130535b4464d621e0093548c0da3664dceabdba471ac86e4c8b637ec40b
- SSDEEP 98304:dDFHYCprS23BqwkgdVfXLYvvs4kcbRrlkik:dx4qkkd7iRrlk
- TLSH T19CF57D127BF1627EC22312314938F636A59CE5F00B3641DB7A9E7B1D2F710C26A27967
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\EN\Strings.xml
- Size 8KB
- SHA256 7046b5555f24754cbeaded22f847f8dc3bb8e3b04751c269cb02a8a3ede845be
- MD5 142e39f5fe78a0e35c05712415a5c79b
- SHA1 7d0f905e9696dd74f7cbd3a20586022e81899c3f
- SHA512 d344897e549fcab6604249748d55076ab735f5f01e1f466ed500ec0e51df143aa4ddbae2090c8ff72f8fb17168acbaa9844a58f3e12532af3e1f2be087f24159
- SSDEEP 192:kUJXwdO6JOvm4l/gJqeX0ysB25sWD81ZmCrpy/DigF:NvuqyW25XCo3
- TLSH T1F102ED0B2BF521247A72F7C59FF1C0A45326B9E54A2ECC6F10A46006C5E2923B953BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\Languages\Public.xml
- Size 8KB
- SHA256 fb83daaa3f2b63188627efa464c1da20ec85c66d95f37d0639bae3139b5ec5ba
- MD5 e5033b444f1ed09313a3de00f2bed34b
- SHA1 5f34cbf06ca9e9038267feadcc1c2085a8fdb560
- SHA512 698c5c29f093324753366d563a579b8a5bddfe6326d3d680e28acd2eb438fb1767a12a50c4cbbcc0ce676d289946c3f83653bf50148c643cd3f80378fc2d7555
- SSDEEP 48:y+rIggvNWffAY5By9KBe5C3si4WVHt8f8ZEQW/rJXzyKt0wtrmGfBJURvZP50qlV:XCs3baeXd
- TLSH T1E802915B6EB620343E63F7C4DEA5C0956321A9E80A39C92F11D9B509C1D3513AD43BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Buttons.xml
- Size 10KB
- SHA256 9ed5936002a088f03d663a6b37414d54fed52dac5cedf1931ac0aa3575af32be
- MD5 bce12295f2959d4a55d70310e4c25d73
- SHA1 cb4d3e461a021304233f180675af699a8955aa19
- SHA512 a306720e506504d5a4b65cc1234e8f99c0fd0871aa701f824c8029c7d2001e3b9fcdd19c3ac0152586118a4f441b71ed8acf6e4c38a41cc811288db03c577687
- SSDEEP 192:NcFKEqnGnSse/eXysSkIIq64FV2ONeYW/LUtU4EG1cEGX5EGRdEG3dEG1CEGXOEZ:dEznSReXyzkIIq64FV2ONeytpQPdrWUO
- TLSH T14C328F27D2FD7118A112F1A84FEED97ACB079599113E9D2E00A9528BC7C3823560277F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\Lighting_mask.bmp
- Size 1.8MB
- SHA256 ec9528a8bff2cef2a2f795e00945ca0425c624703a861fd06d513ebabc5f1794
- MD5 fbba7f2f95f46b7c21ef1cc0736e4c8f
- SHA1 5fbc84b084c927185d6c2afaced3f5082937a01a
- SHA512 10529503087dd5577e525b749904a4d6bf776d64571d70489b4bdbc1d4a00d344bb5b40f31ea9013af0f97275fc2bf735356a73ed2374b598fc46336a5d3a66d
- SSDEEP 96:Q6P2RTByojaqOObVRQ+S/p3jMNynQAw5pOuileY2QCC6bvM9XdGCrc4BhoSI/yR7:z2RN7lOORRni3jMNtilj2Xkb/hRRYo
- TLSH T15C95C0B33A51E514D248D9366F64EA8CFA927E918E414AA7B1DCF3AF847C3633408717
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\bg.jpg
- Size 398KB
- SHA256 d12803210026857315428b2d39fe0df153f5e3ecc222f15b78eb722c3fcda435
- MD5 2f097fe6959901b7a1c13d82bd16f1eb
- SHA1 4f4c7f4d3d9eac6603e4a64e25a46d71f705f681
- SHA512 484cc5dffc9f29a986ab8460c9f6672af2b56788d3c3c822c9c5a298a7ccee9f613d3f2cdddd8f50dedc6883672697f39b138e04f278a838361992a5a792c909
- SSDEEP 6144:NfkxYE2dXmd66UZW2tvJ/yexoRpYBDL5R3:N8xYEcWd66URth/vAY5R3
- TLSH T1FA84E7857C94A901A80CB55CE2FC9885D7F72EE50D30002EAFE9CD961F42DDC9DE989B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Background\bg_Keyassignment.jpg
- Size 57KB
- SHA256 4981f4f8a35cf67f3892a52e62d0ed65ff8429b682293e9a99d24d149c50701e
- MD5 a1f775ee2ed9edba9d955091d225d934
- SHA1 b6fead77e5e1c32eea5071ca6eaf7c59450cbee1
- SHA512 1503730c4cf395a582e638c40ab3be90bdab570c644d9575b3b1b8d349cf06bc507e78b094de827781eb7554109cbcb201dcbb99a53562a7e4e3eb4c1982e01a
- SSDEEP 1536:Sm1lmxGkidBqeglMS4tvQ9D0aF7y0PZbcLu1isB3S:SMlDPgdaYzy6bz9BC
- TLSH T12D438DA1D671FF13FA602D3863A09F5742290A7F47E7064CB86EDAC177421A9706F5C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_1_down.png
- Size 1KB
- SHA256 ae0d4184fc6676f80636b975722e0a5beb98306b6c731113c1c52f007b96e7da
- MD5 5fc467baf6fce1c63d8844d0ccc74e5b
- SHA1 95c1b59678b1f9a263c413f292ff35d61bbab52f
- SHA512 5a3558a727926d73e2b8aaca1569a6579c4d96c4b091596a5bc53ea059d2b86c1c7d6c32ed8a154a232c9ed0d7555f02f4cd058b54af0a3e88879c229bc30fbc
- TLSH T170415108F9316C415589EB08BCEE625B1F336BD49B81E445FDCE8A4329621FECD099D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_1_normal.png
- Size 1KB
- SHA256 5ac91ec04bb5720f32b3bedb890d434b49bb4c5a6ced0b7c56f2d19308e0f9e0
- MD5 d726a287f49c35d300bef559ad108353
- SHA1 b5b40647625b99d876aa3c99dd63d3fe87cfb9e7
- SHA512 cb1cc67c02c1b96c10b6e3e962c40f9248f057e00619b1ea3462f59467a73283b87bc2d39ebbc67c3476d5a560d71237256a8dae1aea9531e226acfd067f2a64
- TLSH T173311205F6209D115349FA45BDE5714F2A2347C09BC1A505FEED895769700FBCE1C6D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_2_down.png
- Size 247KB
- SHA256 7ca443a1deeb5f462b243328873423ca8e520a4a84b67e9fc46f8659106198b1
- MD5 972ef0f91800c330c07f0c74ac695ff1
- SHA1 b2fe1bb9c954711cafa1dd503a6f7b413c066c8f
- SHA512 0d5a4cf5313e01c1ca1fc246cabfd7edfe492469ad6b5d6584339135b50daba57078d284203b2bb9d39c9014773583e29688a5df178e7a798f67985657a734b9
- SSDEEP 3072:5OZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6F:5O8I/E2dvy+56F
- TLSH T1E5441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_2_normal.png
- Size 247KB
- SHA256 e325a7030b047e513635a9938b15dff72b7e39a95d7de8e34e872b0a5217d9e8
- MD5 21f991cba6b437a5db3ca984d6b019a8
- SHA1 3d7d641e9257c3f475093e9fff82bf9131fa4fee
- SHA512 1045719d5d14c67edb6f7f603dd25caeaf2e98f444527ad88a71fe1d52ad8e6a8012081fe2d1b5b954c663c41b762b82be32768655641f7bd1efbf607e84e19b
- SSDEEP 3072:rOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/60:rOUI/E2dvy+560
- TLSH T146441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_3_down.png
- Size 247KB
- SHA256 a6e07e6eb638ded0518e0f19849e29fb3dbd3145616207d53c330e01da18eb4c
- MD5 b534f5a0a2e56823b23d48f52eb220bd
- SHA1 1fd60481521c41d9a9e98963d4960cd51896108d
- SHA512 82f5a73454781afa6d68768210d21f37cc179e3cc5e861aa9aa829c62d5c63d98534ec3819f9b2bdebf0fd4f616c2c3093f2eb8d139af6f66fdeccde517ba9cf
- SSDEEP 3072:4OZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6b:4O8I/E2dvy+56b
- TLSH T179441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_3_normal.png
- Size 247KB
- SHA256 e0be68e7f0d0e9742419bc0f601c6d75accc187a97bdea05cd212fdfff7316c3
- MD5 5a91612ba6354afd249bf6ae6c36f62f
- SHA1 2d52249e6d6753e8149caf6e83b32a7aea2176e6
- SHA512 007d4d2a3951db421ce1fc871952dc7a9a4feed0928445690af40a1e3280d08c32efab6cc6695154762cfda79efb8796ba3cfce9d93b5dd1b1ffc5e25609330e
- SSDEEP 3072:fOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/6b:fOUI/E2dvy+56b
- TLSH T171441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_4_down.png
- Size 247KB
- SHA256 7da6a040a9a998054c240595c74ebc5359d4e8e1468e05adcbceec97c85b49ad
- MD5 68285efdbf1daa0961068910be77eebe
- SHA1 9d7662a6281d872ad9df7a79af2457aaeb998ebb
- SHA512 d02fd8a574368e2c3e0376780cefe07050639b37fcbdcfac4bc87595a7a10c1c22138a697c624cfd4e7820dee10ddd4cd6a3f2c140d9b45141b39ec642b9af61
- SSDEEP 3072:/OZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6E:/O8I/E2dvy+56E
- TLSH T1E4441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_4_normal.png
- Size 247KB
- SHA256 37b38b99177f6d6e860947d21ce0bc8d101b260e920898176f623bd72665adac
- MD5 79a137e228b1db0b079ad05ddbaeb6d0
- SHA1 c9d6469341ba9781cc63c58a32e880e35952912a
- SHA512 5b2067b9f6526add69f91e4e1529dc4466808d8c9bfed94812e7aeddc695ba67bfc03a40fa3a96af88a7d42b633f29926d30def09547786599b6613b4683da3a
- SSDEEP 3072:qOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/6o:qOUI/E2dvy+56o
- TLSH T16E441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_5_down.png
- Size 247KB
- SHA256 4158c79979b67341185422ee6c05620422b08b8d493d6cb5da8e81b96b559d52
- MD5 d064f37c2c5a6cf072eddd69d5d6ce0b
- SHA1 6c61deaed71c62bb40d90ddcd44b6e303ceffe4d
- SHA512 01566b37d57f1ff7c5b827c515ac60b9ce8a35c344944f9fdc045161ce0753e5539dc614ab216a571accc2b43544c30e07b9ff08758bb472de198120e9312987
- SSDEEP 3072:AOZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6Y:AO8I/E2dvy+56Y
- TLSH T160441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_5_normal.png
- Size 247KB
- SHA256 4747243995813e664c6292d9b9c509e7db1f5bbf5b34d1993925ffd9f7a96550
- MD5 8a51d03cf3cab4bb2b80972f0545f4cf
- SHA1 ce22d9340f2652cf8c512d1126d582c018d070f4
- SHA512 51b1979149a1408bb3cee634e531534a073615d3c9e32497d1989858ca2edef45954882d97774adf0f2aea3338dfa967144412dc5659970394a37d8aa15b088a
- SSDEEP 3072:YOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/6T:YOUI/E2dvy+56T
- TLSH T173441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_6_down.png
- Size 247KB
- SHA256 4b1802476fcf4e9c0c21c19968836987a89810ff0ef0ca6a7fd7555df65f369a
- MD5 ba5c590a3d1886c445b6fa5fa4afa36d
- SHA1 066f7ac752387e782746d44c074ab4810d7c90df
- SHA512 b30adcc90c969b7e89d6f27d9fe8eed38a771e5d4d0f9ada32782bfd2393f4bb84492e01e6a5eb5169fb95d7b6be0d597b962971f29fa6b6e77c6fbc530d20af
- SSDEEP 3072:iOZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6Z:iO8I/E2dvy+56Z
- TLSH T145441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_6_normal.png
- Size 247KB
- SHA256 052cf32bf20aab36ca9ed3590a99524bd81e6ab7e95f37c57bd831c7aa4e6dad
- MD5 7ef2cc433ac34c36cfbaab328f034333
- SHA1 0c3d2fd80f8e4d2b6a84d0dcf53cb21d9866abe4
- SHA512 803a66adda7ed8c43ba9c091dec886977b2a97216a856704f9382bfbd9565da4978adc9f11a7d32dd00610df96404fce26b4afd91175473ed251fc981926f55d
- SSDEEP 3072:POZDGlsdyIFNEA9dv2cMr3LUBhzWFst/6e:POUI/E2dvy+56e
- TLSH T163441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_7_down.png
- Size 247KB
- SHA256 0ae1851a3c19f94b7beb8ddf968344c360020f68d75b570c9f1180b8e790a695
- MD5 911a93a5dbcb1bd88b41f94daf9f64be
- SHA1 7f84f22aa4709d8ee98ef705e25d78fa1b71917d
- SHA512 257da24b7ca5e0ae4ff329999522628f495a956b2c0296356aa7daf709b9d2f5fe9f6db8579ef52ab6a4e2e88796c5c0617418bc83aac59c0875721d7dff506d
- SSDEEP 3072:NOZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6v:NO8I/E2dvy+56v
- TLSH T14A441A867C94A841680CB69CE5FCA481DBF72EC11C30442E9FEACD960E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_7_normal.png
- Size 247KB
- SHA256 93a0d39824c0cb762ce590272183726ddb06389b414572420b1bb04095b98bd1
- MD5 79f98bcf40c39f146aef0da4b0ca47fd
- SHA1 4dbde29439a4abf3de0ba06e6a9de7fa310e9501
- SHA512 67722c94dab316e646ed82d669f72d48657ce80bfc7e2ba0f9ae848c20688d1f6735527b09abc4bcaf62b3d340313939f1f689fd30d4ba5ba5aa9f5c20a1a269
- SSDEEP 3072:ZOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/6n:ZOUI/E2dvy+56n
- TLSH T15C441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_8_down.png
- Size 247KB
- SHA256 f257464b68ff817ab3b4684cda2701d520d470ee580286f099229b00dcfb392a
- MD5 d3e0b8ff9d3792a0a89b3ebf782cc6c2
- SHA1 1cfef89fd7b94ec31d2e5b8355c2bf7062d37b04
- SHA512 1dc719d20b6bb6eb2458c7d478e5d6e84a1e6da3113c0cf827d6780dedd44bc903b79a452d9d955cbaedf35ea0da4c478828ee85e520def5674cb243d1389a62
- SSDEEP 3072:ZOZDG9sdyIFNEA9dv2cMr3LUBhzWFst/6V:ZO8I/E2dvy+56V
- TLSH T11F441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\ColorBtn_8_normal.png
- Size 248KB
- SHA256 aecf221487c8821a07d6286b4420fb2431ae5fe3f53d3a95767e676d17a155b2
- MD5 b96d12875831269612aebf6bb7173e5b
- SHA1 46350979ae4bf6d70e5bf8bb39e2aaa39496c54b
- SHA512 34ba0cb56963751ded8ae189218aaa0eaf584f21bf8da7556b626c47387e91ca5abe696811702acd2dc02cd60838c026491cc4bebcc599ef5721450604cf2594
- SSDEEP 3072:TOZDGlsdyIFNEA9dv2cMr3LUBhzWFst/66:TOUI/E2dvy+566
- TLSH T1EC441A867C94A841680CB69CE5FCA441DBF72EC11C30442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\MacroMenuBtn_normal.png
- Size 209KB
- SHA256 b15b9f270473bab84508330eace0c43227de316dd7ee445f09e46bbaddc7cb58
- MD5 1a42277b1ff7b068ad6e2d169786aa73
- SHA1 e0a6b844ff7f62861ee61b9aa954884585543714
- SHA512 906b83f3dc408c8ab930f457606c6a1f4e982babafce490d85bd849641adfd75332de9743abe41994b62e38e9328b8491920faa58b521b8d409c01a4a8dcea1e
- SSDEEP 1536:vodbRpEVKlg5oEONXwZD7IH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7VaqZLG:OnEVXOdwg7AdHK2cMrKKE8lWgXh3W2+
- TLSH T1322408857C94A841680CB698E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\Keyboard.png
- Size 150KB
- SHA256 9492552895949fa7cac64591b94426a2a19e6c570266883cb1c1473b6a30dd5a
- MD5 a614349283bf79fd7e6a0b12da218516
- SHA1 cf7237d3777bc79ccb8a5499de5bb54d4f37ddf4
- SHA512 a02909043f0a59a90a153022a5053585ead2aa84bfdb8945ef91122705f847371349ae6c5ffe76cdd6f0fc090409627a3535e27c69824f86ab7f0854ee3ca168
- SSDEEP 3072:ReTz+CYHUG0jurRaw35OcYsD+ru/ihycB8LPYn1OuwHelS0j:nCBGp37DW6MPBuPYELa
- TLSH T1F9E3125BFA501D218039BA2BF8AFC07C1D221136F0A68DB6DD8566CD74B6CF0FC86995
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\LogoBottom.png
- Size 7KB
- SHA256 42e28e9058524cd6d915c3836ffe22f6c5384219627d5668ea29eabb14348a4c
- MD5 32c7a0b1f6bcda5d055fdeaf2c004b8a
- SHA1 0bafc1a7b0fb66f89637e221cab0fbcbeb96dac0
- SHA512 30ef6d8435f28d4b764dd11564ac042f215ca70f957d91e26cfb1ed468e2fd5c7faf3b912848e92811a5052fe7640def442397fa5f0b3eaa9df90181e5e71536
- SSDEEP 96:lYYm+VSXvknmWpr03/S4HCKHV0as4BBpm7EDvGBOQjavIJDiUppcVEJdxkozOypk:5SXvkn0iKTsypmeGgqvp+EJvkwf4Ku
- TLSH T194F16D8EE3009C4217D9AB45DDE1944B3B43ABE6D142A441F9CAB4872DE00BFDC94AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\LogoMiddle.png
- Size 10KB
- SHA256 4ea245772aa11f0b4983e6bb118d0093978c90801424227128e6471464518a6c
- MD5 5e488a7afb131ad8e8cae83b2f89c7ab
- SHA1 2a4eab53754ef1dd6ace557da7d82b515c988279
- SHA512 7373bab21dc8f1a5cd0d6f9fe43bc91a51448e8c90a68a824e8e768173c9bf5b2fee121f692194dcc337da365288067fef3bf77f040867cd21662f95a1036384
- SSDEEP 192:USEvknQ8iIpf9lNP3OatkF+PXaTfWliIi7F7HPqQE+kRmtHdSZdUW18bSSzL:TEcnQ8Hpf9lReszXaTuliBdHWJRusf7C
- TLSH T113229ED5E050EDD0491E762299EC331A4F7B97D44341F180BCE34D82ECA21BDCE5AAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\Png\WebSide.png
- Size 6KB
- SHA256 ac53d331dee24f90a92a4f1b2e38a3255de0fb63f221e9fac4f1182ad6b6e1f2
- MD5 d2975485cc9802ca897df1417bc6de80
- SHA1 e270e8fb15e3f9daafa0291cd2e0f2c3b1f1944e
- SHA512 b4b40cca6dd971691af9ec2b0c571ac6171fcd7f3fab2cb5ec1df955f66595bf7d51312489ffb6cb1478c15dbfd2854cea1a9c9ad72c23d4006a21269eaf63f8
- SSDEEP 192:kSXvknui4WkpWh6iyfPMSCC6hOzhfO34Wc:jXcnuX3pWhVwMSHAOzh2oWc
- TLSH T156E18ECDFA221C556C567958B13B4A062B23A7D6EB53D005FC9B64222CA43B4C249DE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\blank_normal.png
- Size 207KB
- SHA256 1ed2912870b35c9814f56719ef681ea4029c36775094fce04e8d91d911e12b14
- MD5 50c02295cfa4acbe5856957f14afdb53
- SHA1 39d0a9dd06988c41bddecc7c2dfaaf9318228884
- SHA512 d128b41adc84d8e1294c4d0b99808f6587b0b0e6bc10f4dd977ddea1e36921757fba54b6585874a5cf920e5fd23d965d569e960cbbcf9532ab5632f88acfcad1
- SSDEEP 1536:rnbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGT:DnEV8O+wi7AdHK2cMrKK084WgXh3W2b
- TLSH T14B2408857C94A841680DB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE58DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnColor_normal.png
- Size 17KB
- SHA256 6ae3f7b701d7ba5a83f428a72aad564443b67ab1512f63a90193c2d5d42d3213
- MD5 2f191d7d4252a01969789012ad3e2057
- SHA1 05c446003f1a548732e10729d542aa73f99dbd8d
- SHA512 939ed4150aa6abfd253193da12c932c1d9451b7916dc7165faa79b553848f398462d4e5216c6961f22e207949c91eeec7931a073014bdc4a1e60cfdc23051924
- SSDEEP 96:NllcHitlIxv9vk7C1+I4wWHLihk/xTSOkEWmaHn4gxNXrNXNCcXnq8:GIIHUCD4waUOk6aH4u5b
- TLSH T1EA820828FCF27569644DA2363DD674064D334B83C680BD04BACECA1B6F10F999C5FA86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnEffectMenu_normal.png
- Size 2KB
- SHA256 3e566ea76cb8c2ff3029d2ae4943813cea63e1713c53fd4e4d5a2d1ef681d74e
- MD5 12c2a51ddc26cb08ef82c946ab976bc7
- SHA1 c0ffd19574210bece011dd0257208fee6c895003
- SHA512 590503e9109a6416af5305cd994c4c2f7d1e6023d0faaf77b37680b322145dac4c15aff25f7fa40f6816911cbbcf87bfdfdb564a022eb0eca7c2f8da0efa15da
- TLSH T1E641A008F6616C019489FE08ADE8226B3B370BD4C341F865BCDA8F075C702BEC94D9C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_down.png
- Size 2KB
- SHA256 0a768f867607cad1b93effa6a0dddb12ff188120ffc2149e7746bfc3902e768a
- MD5 7130c12de06ed4456d17fd118a2b91ed
- SHA1 939928d7884cef01301b47155024a95f2ac414b0
- SHA512 e479fe26f02e093be4109e47c6810c43dd4dbeb10f1c0b2fb45bcbdac670175c36b25c48d3b2d854207ccddc72342e08d175af649e3f5100162bd1ac86f884f5
- TLSH T14451200AEC51DC11088EB94CBAFD9142A3B71FD49F41A10A6DEEC9071E615FACDC95C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_normal.png
- Size 2KB
- SHA256 86e880a70b8597fe5d2e6a3d48cf038c844af53e1fa4c55cccd86eba45865117
- MD5 eb94897b97d258c5e56b302ee623abdb
- SHA1 79f2e81db1a6487ddd06a377f3ac8570c91d901c
- SHA512 53085539a6bb86044f99265b930fde96569b11e4e676c8b867cd9b13cbc0ee50733cec12a5b69c915906182d709450168428296c5ccf11aa15ccab6a127bf5ef
- TLSH T16D517309ED10AC51489EBE0869FEA25257771FC48E01E10ABDEDCA071E209FACCCA1C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnFunction_over.png
- Size 2KB
- SHA256 ac8049495b13a8bb41192a1f9b25bae4a19790d8649d7cecdfc26c882c7b9d2f
- MD5 188ebab93f4816e3c06d0e19b97a3003
- SHA1 0a8225068f431e5a5c2f375f48c937cf6690c8f7
- SHA512 a39e5e632fc301ba97b1ebc3aed2355a2f7941c3d8fe6c3923e130256caef8afb5591e2c846118088795a0869c879b690f617cff050265d0f7e6c2846e11e1f5
- TLSH T1E451420ABD50EC40088EBA0C66FE9142A3B71FD49E51A04A7DDEC9171E616FACDC95C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnLaunch_normal.png
- Size 208KB
- SHA256 a3be253435b74842bbc9f8ecf7176efda6e873b6ade2e9afe701ff24d99472bb
- MD5 3a46bd0cd990a72a4b0e1dfc044ac67c
- SHA1 5461110c67419805642f9cfb2a6b8a8aa8f7e0f0
- SHA512 2dfcd9a3f09a724aff875a78e5be3e8346a4354c1df084feded163a2943b53ea37241b5b1c20516dd2a44e5ed93d5d7327d377eb10a056d7930b6e23bcec78bb
- SSDEEP 1536:TIbRpEVKlgTohO3NEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7waqZLq:cnEV8O3+wi7AdHK2cMrKK384WgXh3W29
- TLSH T1F02408857CA4A841680CB658E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnLaunch_over.png
- Size 3KB
- SHA256 7041932f55156a4afa6782e245ccca1003deb9ef2b01c2f116664a4799c7b80f
- MD5 cc1d044e96cec7f881f178b6e5034b03
- SHA1 2424294443557d24128ea8083d807ce5d7074500
- SHA512 548ddcb732eb18f85396b53dcf03c83fde1845243db71c2ce65cc7cf5b2e8848f9601743c89bb3e00957ec5ee6f06970116aefb28fac624d6b77f4ceda4ecf3b
- TLSH T13A61410ABD61EC40488CBA4C6AED9056A7B70FD49E50914ABCEECD031E616FDCDC99C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_down.png
- Size 2KB
- SHA256 ec18a856ef7f4c4af373cb60ec07ec831eef7daf5304085aadbd020001654428
- MD5 6faac356f70de396088146b31be9484a
- SHA1 6414816c9e31bc43cfe37f4dd36fc7baeaf2257d
- SHA512 7e682bac9e34a81143406900def789d009caf8c0f8d3ae845f5a448cede9cb13370fa8723c8354e2c57eb3a542148b24c52bdd0ee986a6503ed634d795370fad
- TLSH T1EF51A309ED11EC10688DB64CAEED90139F770BC0AF50A4487DEACA125E606FDCC895D7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_normal.png
- Size 2KB
- SHA256 cd6654522786c341c1b6ddf1652bd4e84a96aa271d4e01997f511a5aa9c87c9d
- MD5 22587ffacc053f5e27c046155139be70
- SHA1 0193178be323f14950984185f964fa3b817de7a3
- SHA512 1dc5de9c854428b701e5c55dee495ccd7c69376519a1c97ee3f629f8117151f0657da6acb77c2a31a3266396fa1d9880f4980eb76bff54f1045457782ac4d040
- TLSH T14D510A0AEE71FD415C98F60D78E952679E3716C45181F941BCEECA234AA01F9CC481C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnReset_over.png
- Size 3KB
- SHA256 5a9b18f742f9a08bc45cc1f8f70a05855580e6812cdf1fcc11c2b727228e5f69
- MD5 35e831acc22d45adcae16bc512d8d29c
- SHA1 7f6303a1adc5fa71394ca53da06483728abc2373
- SHA512 db1e63d8be7ab774cce82ee5ab9e8fed20d121280e3565b74f0c4dbde2b036eba8e637a01bf9cb4d470e7bcd91b94a3686959b2d9fc8be1f52cc44cfe4984f59
- TLSH T1F6615F0AFD92ED114488BA0C6AFD9052A7A71FC04E01A50ABCFEC9131E915FDCDC94CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnSingleKey_normal.png
- Size 2KB
- SHA256 1397131989e741be6e78bc73e8cb54335903e18a629dce656c62d790558b254b
- MD5 5fcba7b48eac1ec97bb32240a8700458
- SHA1 8e6ffd3c990c726ac685258e24d9fd78cd05b942
- SHA512 2e4e8d3791e2d8b0bf248e36dac3a3fda248d650a7f012a2ecea8b3690b100fd69d69555fdc316fb238a01ad1c436db024f84dad1eac4638284228c54a9a46d7
- TLSH T15A41B785F931BD955945FD9DA8DE819717330BC15681A4427CCE830329292FBCE899C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_exit_normal.png
- Size 208KB
- SHA256 66075cfcaad78d11beacf289f0ff35ca36a0d0705798c071108688c720c0b2b3
- MD5 1117d4e3eae94fcb890657c94f18b2af
- SHA1 944786ff2eb9d157b33356ce11958a6523903d6c
- SHA512 dd29b47204252363091da936b7f597f3e8043d3cf9ac52896c4784da856bc2fc36083834f5da4e2d5d33c6cf7a0f76eb4cfb129e1b65194fcec3b28acb8fca2f
- SSDEEP 1536:Z/bRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGE:NnEV8O+wi7AdHK2cMrKK084WgXh3W2s
- TLSH T14B2408857C94A841680DB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE58DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_disable.png
- Size 207KB
- SHA256 8ae5454ae1daef1e669fe49071847abaf7cbf9c387f2c9a7cad833552ce4beaa
- MD5 552b36ea9eddb88cf0952afb137da1f7
- SHA1 b621e5ed90b5f9ccbd5d036d1bbb73de6127a391
- SHA512 434d1433660e72ecb104fe1f224bae598a77f88ce95f5585aea520834fc59f3b7e7b9b2df631b30eaaae20ce1c971a0b123c4b9911beab17ff12935ffa3e393f
- SSDEEP 1536:sCbRpEVKlgTohO3NEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLe:7nEV8O3+wi7AdHK2cMrKK084WgXh3W2p
- TLSH T1592408857CA4A841680CB698E1FCE841DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_down.png
- Size 208KB
- SHA256 89ee11048c28a9647d521af568d4530f25e564fd1b08449eab97f00db22ee367
- MD5 6b9408b9a5ab7c6454df4697d6f9c46c
- SHA1 bd449f3ce298037f7039f59841edaca675f22df9
- SHA512 feac6387083744f2df47c3d0b43cb499286ad5cc2767fe971d29eb904d0d81782971738f9ae9143d1b0b9cb1e285fb7b878e1d535ca31852280f9f180a8c9e73
- SSDEEP 1536:WabRpEVKlETohO3NEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZL0:XnEVUO3+wi7AdHK2cMrKK084WgXh3W2/
- TLSH T1E02408857CA4A841680CB658E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_light_normal.png
- Size 208KB
- SHA256 b994dc58abaefae3c3e464c5bce5d8dd24003930d130b62645ce4fc16037b20c
- MD5 a5f7e615dc882cbd69f59b2f90c2630a
- SHA1 7e29255d628495ef5e62bad9c4f312724e619175
- SHA512 a8c070833b585bc418daaafa5eaa9816e1dfb0e76a1cf2c486467c51ca4ccb177890088f55ccd27a5e6db912ce504e6e0a39dcb05937fa79402865ff3ae71828
- SSDEEP 1536:s3bRpEVKlgTohO3NEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLZ:enEV8O3+wi7AdHK2cMrKK084WgXh3W2s
- TLSH T1252408857C94A841680CB658E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_min_normal.png
- Size 207KB
- SHA256 f3cb61f1d4a739bb34901e31f8b4deadc5947edb2c8aa4dc1a7cb20eb25d92c5
- MD5 072bcd13d838b4e6010a6a1481aa6dab
- SHA1 abb201fb61c44288b5b2b7f0f6658c73961d6f2d
- SHA512 b952db927ee4da2b26d8100368c0f77594857c90581ae1850e9008a645fc81870328fee6df665ea2d3542b7779aeea8fea31e3292deb9dedc5edd759147119f6
- SSDEEP 1536:ZAbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGb:ynEV8O+wi7AdHK2cMrKK084WgXh3W2T
- TLSH T1292408857C94A841680CB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btn_setting_normal.png
- Size 207KB
- SHA256 841530ce7ce5745edd14ef7fbcff1dbfe9b0435f6212cd092fc97240b3a6baf3
- MD5 856439993953297dad0a82f24aec04bc
- SHA1 985965a6af1d42cdbeef2128d8ede8edfff0dbbf
- SHA512 ffa50673d408f6c2d9c360504009a85235c96b69059ced8843e736ae121ee30edbbe4094b763143d1259376f8d429dc1197f65731702c933db0b59ab7a1743fe
- SSDEEP 1536:XIbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGb:YnEV8O+wi7AdHK2cMrKK084WgXh3W2D
- TLSH T1C32408857C94A841680CB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_down.png
- Size 207KB
- SHA256 5b4eee91adb87d08f33988855c10ccaedc296eb317ae0cf468f5c3c89ed609cd
- MD5 c583ab3145d735ee19de51e3fd2408f5
- SHA1 1bbc8f4f173a2e85f01043e5be686f8f1e81409c
- SHA512 169adfc086a47693301c635b39644472afda94f64ed13dfd131f5683153afc37b934e84d5bd88e637611dbc40afdfcf8834aa8a108b19bea0ff831b91bad15b6
- SSDEEP 1536:5rbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGR:9nEV8O+wi7AdHK2cMrKK084WgXh3W2Z
- TLSH T14F2408857C94A841680CB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_normal.png
- Size 207KB
- SHA256 08b4ac5c08c190f76cddc55328a891e05892183d0e42e64bdf883a7ac6c211bd
- MD5 eff2e6b8c3c7100e3f4605e182d58341
- SHA1 26ba528da7001b83892a212eb4d93715492e19f4
- SHA512 d1868c6711af8d53d789b27ec7dee0e1576f0163a1d8601bc764eee5225fbec588d7c9b37cd76722ca370f72c377bc351ad3d3a5ae206076e7b38af1fb2cea95
- SSDEEP 1536:XIbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGQ:YnEV8O+wi7AdHK2cMrKK084WgXh3W2o
- TLSH T1DA2408857C94A841680CB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnkb1_over.png
- Size 207KB
- SHA256 7dda20e1de7c95fa73710f0f5828b2c6b344dfc97842fdea2f0b51c6801b4ab5
- MD5 7c3a45581a70770539b264d81ce30f9c
- SHA1 7c4d6c349cff4c801f925ca71291bb18011d3078
- SHA512 cd97d8d693e933cdcbd523c7bed2c9ceae279759a846d2ab1545d541d2f686cc14e45efae865402920a46ddde4938006f49b9805d3cfa5ec7a1d8f567f5144ad
- SSDEEP 1536:55bRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGa:fnEV8O+wi7AdHK2cMrKK084WgXh3W2S
- TLSH T1C02408857C94A841680CB698E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_down.png
- Size 208KB
- SHA256 2e5d31679a5b99478b83e23492f1a6763dac0c6ab62f82f0a322cd15f62d92ea
- MD5 10c0fc6caf10a57c3951c983beaa9987
- SHA1 0f022855afb576fee2063d6bb86bd6662962affb
- SHA512 7c8d4339ec10be36bc480976e83dca9b3ba40644964247b2a76ba4f547477d717c2d01c62a4c0262ae8ee525333806e0f92aec2d09e35a44e064ab235583854d
- SSDEEP 1536:QpbRpEVKlgTohONEwZD7IH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7waqZLGx:gnEV8O+wg7AdHK2cMrKK38lWgXh3W2I
- TLSH T1922408857CA4A841680CB658E1FCE881DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_normal.png
- Size 208KB
- SHA256 f33fc3652663218ea54a71b351624c1f6c3750e88367ddb5598581b3d0ebb18a
- MD5 94d59ac52461437b71b970d65c362d86
- SHA1 89c700ced4178bc08bf442dd26271539d87af6ed
- SHA512 49ccdb9888be40fd3fc14bee0da9e0c39eaebdfe8ac26f99d26fb755ea1508e9ff5cd500a06921bad727009b3e99212c9c46aa3b65597062ac275dda4db312a1
- SSDEEP 1536:0FbRpEVKlgTohONEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLGr:YnEV8O+wi7AdHK2cMrKK084WgXh3W2io
- TLSH T1BA2408857C94A841680CB698E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnok_over.png
- Size 208KB
- SHA256 85e4bc89fb58ae03ae5244ea2e1947d1336126a61a20e9f8e9c35f044bdb8421
- MD5 7e0fbaf8f43eb14dee3132d0b9989d07
- SHA1 59bdb3cb56a3a982837433ec1afa1aef991758c7
- SHA512 e242879c6e09698d6e7ecf1512c06c5253763de9f083041b9ad74e958111918c87d0867701a7fd9f3c987016c1a8c22487681305108a6f2b16162e27608f7fde
- SSDEEP 1536:Y/bRpEVKlg5oEONXwZD7IH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7VaqZLGF:KnEVXOdwg7AdHK2cMrKKE8lWgXh3W2Y
- TLSH T1522408857CA4A841680CB658E1FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_down.png
- Size 208KB
- SHA256 252d63519921c74e929d3d3793e16b1954111649f1d8ed9b6e14d35f01e6c494
- MD5 9e614a3a82609be3459637a084495a54
- SHA1 897d3c2dfcc30bf34f4a560aff8e801ed40a0d5d
- SHA512 4f7e9eaf1bc4d6ec8051cd3686635156be710c5cb6d0285a12778a2d98b1b2d3914520ca0bcfbeb4e4bb07f97fc72c9d09c5d29c118f085b53195f3cba5e1149
- SSDEEP 1536:yCbRpEVKlETohO3NEOZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7waqZL1:lnEVUO3+Oi7AdHK2cMrKK384WgXh3W2y
- TLSH T15F2408857C94A841680CB698E5FCE841DBF72ED10C34442E9FEACDA60E52DDC8DE58DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_normal.png
- Size 208KB
- SHA256 5e11b15c2040f986678d06889b674c90819f73ba4c985ddf5ea8273f4dbcfcd0
- MD5 75c172547e44dfdfdb67303a1c7cce36
- SHA1 0921b86faf5f9d04b2cbd7530e0caeb362f6dea0
- SHA512 1fb849888c4ba733a8eed2502bb7d8c07686be1961785b350224ec417c0b179b027b11180d55c612a1336725d22c7a672309a02efa047360a24a6e67df6a6509
- SSDEEP 1536:hWbRpEVKlgTohO3NEwZDNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0BEwaqZLg:UnEV8O3+wi7AdHK2cMrKK084WgXh3W2H
- TLSH T14D2408857CA4A841680CB698E1FCE841DBF72ED10C34442E9FEACDA50E52DDC8DE59DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\btnprofile_over.png
- Size 208KB
- SHA256 a6c9e6bc15ccc2572545a370cccaca34bb865c7ddda97e6f72cea53ccfc47103
- MD5 982fba758ebb16406cf64654affe7081
- SHA1 6f373b81b7a53f12c5c62bd72b2575ccca49b6a9
- SHA512 e937ec4b1de537a6f8de15c81fe05f3bfafa3139ff3a0667276b1b93dad2cadff9fda216cdf1f5590bb548fd96a7d99eb83cc7029f6d547b8fcb9489e7eb2e05
- SSDEEP 1536:yIbRpEVKlgTchO3NEwZrNIH7S5eBeNgOBAdhz2cMr/DmXL4tlEDL1jN0B7waqZLL:bnEVwO3+w67AdHK2cMrKK384WgXh3W2S
- TLSH T1282408857C94A841680CB658E5FCE841DBF72ED10C34442E9FEACDA50E52DDC8DE58DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\sliderSpeed_bar_normal.png
- Size 18KB
- SHA256 af0756ecb3a09a7203280dc79fb5016526347a07608cfea3cfbdc51afcb23133
- MD5 8e9393c0ec47f51b31602946a8699a09
- SHA1 accf7897dad6adeb2d27f44f4f6be92e9af38ce2
- SHA512 636649a4edfedbc9575e491005d6548f2c6474540d3fa8419d06a8070fdf25b5ca9b006bb238018030f75197cb5515a19a8792c3fbe32805f6576cf3af88e798
- SSDEEP 96:MSMllcHitlIxv9vk7C1+I4wWHLihk/xFS5kEWRexNXrNXysc5q+26MN3:MSHIIHUCD4waG5ktk5tJ
- TLSH T129822954BCF07125504E92323DC279068D738B83E6805C49BEEE8A0F9F11FD96C2F69A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Images\sliderSpeed_normal.png
- Size 1KB
- SHA256 c3c5d32c640816d69c20616b8d0c5a9062194e06a0972815d3c9ce11abcb0f8e
- MD5 80bd7156e051dadea9c9e964737450fd
- SHA1 e183b8d4eb2512e543f8c7bdd66fd84eaea5175a
- SHA512 92ca4c52bacf17b022600d500151107c88afed06efbc2ed4e73665df658d58efc37ad7b46b0d08b0d6c46ae3c88c57aa967bb2dd355af28e24d89acbc913726e
- TLSH T159413F49F910AD61865EBF58BCF892579B374BC09780D400BCCACE036E722B9CC086D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\KBHook.dll
- Size 53KB
- SHA256 4b2b300aa82064bc594d9db03e0b3658760687d56f196298d7971b878d2fee5f
- MD5 f3d833a9d02e029297adab394f1471a1
- SHA1 0e7a540d622aaec85174fac5d308705a2506eb73
- SHA512 b82f75eb4fb62d868939b0176d70281ee622218ca6b7822117758c42062e5cd2801a1b613cf316372f0897c9ced1375e2a09a120942595077d07678e844a1a40
- SSDEEP 768:6serB1JRFSowfMjtJ7sdR31+wm2ccaYYmcrRMqdu1cPHj5NETSS:s1bVyYg319m2ccaYvcabcb52S
- TLSH T17C335C247610C073D14A63346426C7B16EBFB8316AF5D483BF9A176E4F212D0B73A356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\KeyboardButtons.xml
- Size 13KB
- SHA256 f718b9088e0e2d5c735e14425d43b32c48a0807c10fdf808c1e0ada55496825f
- MD5 fe358712f87989c6f0eb84275efd9a66
- SHA1 1ef6f76162214be756ace401c96ab1be9108ebf3
- SHA512 0bf2b1b7555fbf23864da362ee4b3e1d12cc34a0070081702d5084ea006318f183afd8b700f0e186c3d42e5899c9fca70a3490d11acf0861f9ed2b0be5c5c7e8
- SSDEEP 384:ROataLqH/oqpM1eUzfE+bJCoBzPiKn1mw7Z:ROataLqH/oqpM1eUzfE+bJCoBzPiKn1p
- TLSH T1D4521A2BC6BD590E6535F11C49FD5EBD93040E8A602EDD3548F1B20BCBC65827B81BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Genesis Thor 303 TKL Black\skins\Skins.xml
- Size 1KB
- SHA256 5ef5685dc264d503f3d56180aa3e7ea4879c942b06274e1b62bd84f0bea4ac8b
- MD5 49cdd3b4f9fafe694798226ed72d9305
- SHA1 bb3f89875573cce637d1ce6117ad176781b9ee76
- SHA512 1620da61c51b8b1ce70c26ebf90931fd408967fd9e19b76bb63046821f8cb697c18f82c5f3a3ef427c950ea50180282a6b3d73dbba52c43b02f83c9b7f0bd942
- TLSH T15B31C113B3EA211C7273678D4BF685749B57FD16463E892E20E4214ECAE3D2249513B7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 92748c996839ccd7e395de8b4a4a9aabcaf3e6b40d4e974137025c37e1ba6bd3
- MD5 136afbf8618d12a77208ccb6f13df56c
- SHA1 2d5d4439fc73fdeeafcd5c830708fccbd4666fa4
- SHA512 9e3d846b18d55509b0fedf4fd1b06570082d0d40c28355c41169bb40458c5d1f54f9c7558cd0f1f2b005fdc10dc676f86abd1d6c8b593a5e91733ff934465b04
- TLSH T11EE02BA6C835EC371DFE071850904B42EB4413672B40852F7A3D920C8FB063E5586C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
- Size 363KB
- SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
- MD5 b889c4491374b48bd54967089c47b24f
- SHA1 a4a0dc062539561c1cf4db1f4eeead5182d86e6b
- SHA512 daaf9a7078b7ee13a69823aac7ad50c7dc417d5287bd53b838b11ee99c290a9d8f7cad868703041478e1acd000c7a2e2a97b8d742acce7ba3d933cfae4fba1ab
- SSDEEP 6144:Md5+VYpEzQqG1X55Ay0K4P1ucWp6qD//wwgVfDhyeGHBdmtPWVkjOQV3u3:c+VfQq8DITWpNwxdhjGHBUZWCjOQto
- TLSH T1FF84233119E1CC63AC01838B0E0DB54FDA677D697BAC153E1042A8E7D1726BE5CB25B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
- Size 50KB
- SHA256 41bf4332484156746dd9bea82fdd907d70a605934458383be3d5aabb0721ba47
- MD5 655df4724b0e84cac305dce980820c89
- SHA1 54f579d2973361d3cbcd54c831f6e67922c40326
- SHA512 cc59087e0bf212875bbb14f2185d47bca0b1ae8feb7d356be03dc1ae1891ebca6cd8563205d46f848e100daf19c775f6876897c6f32ea4d2f784397284470ee0
- SSDEEP 768:0qjCFhHLFOkGSHMI9MppzhDHoye9icTMO41TChf0kfmK9enBkh0N90xwUv7qX:/jYhrUozCD+0cDaGV0lK9SX0xwUveX
- TLSH T1F233024C3E7C47E9B462D812DD638D71A90BCAE0E344F18442EE63CFF5A1A5215AE835
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
- Size 26KB
- SHA256 443294d3f0bc0bec0655818b05cb8f70d8f1afbed000829524c5d359997bdb04
- MD5 cf69a88ea64af18a16fcdc3f05fa0021
- SHA1 90d8fd946a04fccb9c17c84edcdfbd4b46724605
- SHA512 3659043480a61fa1815164e90cd710bd5db81fcbf754edb34fde50def6a08619f5266c6ecd751b74536b917d7f904e81d78439c90c4162ca778787e52df4ea0c
- SSDEEP 768:P5QWHxuA22qRNlcGuC3SOSovJx5Nin5svTKwevp:PPHwAtq/+G7PPBx5NinuveLvp
- TLSH T145C2E1062468DCB18687AF8B339AB57B635B1C79F8CB3D6219946D72327B031205E03F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 6130e9dabf22f6032acafc03f46483732821b76582eba1ec01cbb817981d238b
- MD5 9c9f12a4d3d570f8753ef802a39f4561
- SHA1 d29b72c3f8c42e232af629e91b4790b7a7632826
- SHA512 35ec46c8752ad87d62821d08d3e898aa3fd9ba6f70bdf8788784837a5549f46196986c6cdaafe6832e77388b4d5f164b12e1c07db4315f0c672fe696e5d505e8
- TLSH T14531A85598D52597DB680971DDC03987F3320976474B2E0E1C09197C32623F668F1BB5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 9KB
- SHA256 3f78dfb8d087241436488bb13b28a2c2c3eb5247dcc645ed8e0dc35b54203b61
- MD5 75e27af59f7cedd56736cf44db494afe
- SHA1 2872681003c32021dcdee43779c310b6c1e52420
- SHA512 81b5c301fb579dfdb923c2c83fda4b2fecf83be3ec1e0caf21aa8d5ca02e3a23b208c08389d9d3df8b3013440d9cd1ccaea9b5b5f571f219a4b6f237cfcc008c
- SSDEEP 192:DWUmqliKYXQiJgDraIaPAaRVuJI2dC2fPRSebg3XxRzOx4:DWUmqliKYXQiJgDraIaPAaRVuJI2dCAA
- TLSH T1B412B2B3C3D4C66DC91162F4AB247E1FCD29096453683D2AC9E4EF4BA3E14B2E25064E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 2c8ae5a065f933ac6ae076a71e9902778d09502e981213e5c464b5067d31092d
- MD5 6eda15cccd5d6b4bfbdae7593984ab03
- SHA1 3cdfec364753d7b1b459ae3c14e9eb1d1b797315
- SHA512 e2b44eccc60768152e0a730cf6b21f740543f213e3f34d62e439f2bded69f5b08d9149cf4905f647ef61376c0d37334bfe3bc53efa91320d6a901d7799123f56
- SSDEEP 192:KRDcBzon4Q2YLNnmv7+FpQPRpWRgTfx9hHsb+WNf2HV44Y100q2VZikwHz0bVyI6:KRDmzo4Q2YBS6F0XVbwAmu2Piae
- TLSH T14A62C76BF954293B8CDAD22AF911BB1BE7F6102161941D8CEAFC8E1C15EB5CD3227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 0421b39dfd0746f372ebe7cb317b9e09a2198d52c6d58d88e8fc9a72083cd500
- MD5 109c28d33b14528f1516726618e2e499
- SHA1 309ab08c99babdff720ee5d2bf48eb49a280b2f7
- SHA512 42ec9e4459c98c7b032c3260935ba9c627ece11413dc313df3b3796b981fc54b9f2710d988192582e6bcdec192e4a8b3cd51f600fecb860da70fc05cc3d57426
- SSDEEP 192:KRjcBzon4Q2YLNnmv7+FpAPRp2kTZ9hHsb+WNnHV44Y12wZikwHz03VyIsnAUgtK:KRjmzo4Q2YBS6FUXrbw1m2ki48
- TLSH T16252D76BF954653B4CDBD22AFD11BB1BE7F6102161841D88EAFC8E1C15EB5CD222701B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 34ec2d4e2cc7a7a18fdd4afd2a74fcc76a784701f981bc10d3f3a10810b7dba7
- MD5 9ce94ce63199ff2e5f614edf06b5b57a
- SHA1 5359292e17c6ae060f6f62cb8d313c4f85967184
- SHA512 b67abb670d115f961f0e5cee4222c35bb9433af398dc9bf4d4fd0ce0d8f9ac305559a1e2220336de9da3c28cb8360eb839bf97b32a29df355feab50b91d46a53
- SSDEEP 192:KRVcBzon4Q2YLNnmv7+FpAPRp2RgTfx9hHsb+WNf2HV44Y12wZikwHz03VyIsnA4:KRVmzo4Q2YBS6FUX1bwAm2ki48
- TLSH T15852B76BF958293B8CDAD22AFD11B71BE7F6102161841D88EAFC8E1C15EB5CD3227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 c280a81f60d99e09f57fb2de6406dc93f239669fb07c89b979e336d372f6836b
- MD5 7b88d8122de2d9e3100c208ff3d722ff
- SHA1 816ebb987370ef780aed0ba633f4fe2ac4c5df9a
- SHA512 2596fc17fe9ffda2976c0263ef1f67298eb1d902f2f4ee159c792e0eac5602a31487990605d849291ed7de292fd30540a1e0a338b886c51f287aaa83c9a0ff60
- SSDEEP 192:KRDcBzon4Q2YLNnov7+FpQPRpWRgTfx9hHsb+WNf2HV44Y100q2VZikwHz0bVyI6:KRDmzo4Q2YB06F0XVbwAmu2Piae
- TLSH T14262C76BF954293B8CDAD22AF911BB1BE7F6102161941D8CEAFC8E1C15EB5CD3227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
- MD5 80e775e497e26256725722f158c1a7e7
- SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
- SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
- SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
- TLSH T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
- Size 168KB
- SHA256 6f17a5c96a48966dfac7b08a9108f653e84256fc55fd7a7a7175de8379f77216
- MD5 c74a9e4e90af9cffc2f97d8571ba8bde
- SHA1 a5b531517ec4f5a4db1acd639025a5b8aa152c78
- SHA512 3e231a5211c768c04f40ff7b200be12df387825200274f18080138604332b71d1f09b5cb971c4bfdb60438e50268b5baaa5ca2d74e8316e6d4d5d3d2c5fdb913
- SSDEEP 3072:+Qe+sswSjnxPCA1jOTuDK5NvawiHvwRUt7m1KULC1TT8:+csswT5MwCvwRUbTF8
- TLSH T129F37346D1F8D863AF7B0053E8967E82F32C3147E619DAA0F587BFE1501E62A70B5835
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
- Size 241KB
- SHA256 a90af121385436716b96d34c055853bd391ef4836d9372db9626d3ce71d9ff79
- MD5 39585205da34f2b8201afe55b2997a9b
- SHA1 57818dfeb4d360cc1b6b4bdc99793f5824fe6850
- SHA512 e2a1a0d07e2b15c2764cd9820fd333df00ce8020335f64ed78dd65eacc33dd70c02831a979c903de2b185f1af5c3b09addc113da0cac3959f40a135d3bfb9479
- SSDEEP 3072:C9nJybL9Wm4dzD9reo7VxJMZ0jH+gpJpT6BsrIeFWbAG1PkHhLEDYGjRnsU:jbL98hpeoxxJOOJpusceFWb/1D1hsU
- TLSH T14D342E8A6326137FDF3943B95103BE5123214140AED3C1C6334A5796682EAD7B6BEE3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 144B
- SHA256 af619ae18b4b7aa3945c6263d9331f1713d697691d2c3664aa9e2ef069a39cf6
- MD5 2cacf41ce886fd8c1f72ebc6a3fc9d38
- SHA1 07c210ef2c74f7f214a2f34e36148dc5979dd698
- SHA512 72f1ac294b2253ce59f85aaa72b1f238e7c6d62b9ee2117b70d80d79ad2abbaca4a2e5428eb58c7163fc3e35969fed31b6609ac39a0fb2197e38e1dc579dff5f
- TLSH T146C01251C502A161C41703F45CE7889C7B98DF34DF16134863E4BD76D83DA324028152
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ffa8.TMP
- Size 96B
- SHA256 f761186c4a6e500de00802a14b6ac772fec26993cee8833fcbb5542a61999148
- MD5 d8846c09fa40eafcb8ab3ba0bf84672c
- SHA1 98207ccb93945bdecdd5fce67863529a99d695dc
- SHA512 1e0cb6ccac344968bdd4d6864edfd5137890ea261541b136aff96aa021b44aba00a4a976bae7c6939c79b60eb6ad170dadf6692008303044722bef0ee463b148
- TLSH T107B022C0C0022323C00303B02282C0C8B0B0CF30CB03020283E00F22CC2333002220A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 72B
- SHA256 d26d990b8ad8da8fbf7a605b0a5874d41d6e5746c68eb8be139d28185a3f2eea
- MD5 5d26865952d8911be8666fdc35b62d6b
- SHA1 36d368d078a8bbc011720480589580ae68aee949
- SHA512 83ba74649d4b67080eb21b7d49700bfcd3b24caab579eaed93698a370182193a42d357309e2f6117e142ee66fb547970f053c2ba6d5c14f81f76f668e85ade90
- TLSH T1BCA00264C34D5415C016B3B2958703CC7330CE544352425769905258B855345CEE1891
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 201KB
- SHA256 5b75a86c116fb95525a07cbf169252883fc9c4ea4911856a14850389e33cc64f
- MD5 e46e3f59e5e9861d44f5da5a9a06adf0
- SHA1 d88c2eaeaf4bf10783e9812f9393b53d95ddc162
- SHA512 10bfb5890cda47e101013f84599cadf5167c2889dfb7d5be5ddbda307e491aa7f20c5b498e94f048c3aafd746d317acba1d96c9d54df8a7b6db14f1e3b065a03
- SSDEEP 3072:z28Scf3e1lcXCSJdh2mXkoD866zAtmRfdK1FEJt5m2++J3qUQm08KMWF0bFTcVHI:z2I/+SCpoA6aAcGE355++JjcMW2VcVL8
- TLSH T1C414127CBA2BBE31A3CFDA93A02B5D7D48D2DC4C9205527C63A2178D12EA7D1524B660
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 201KB
- SHA256 6fec274c58dc03b974c8bab72cef569a8fb206edce8f6ccedffca2fc8888ff73
- MD5 f8c99d8b999cbfd15f7e2df2e2087954
- SHA1 434d8999e78f7bcb412da2722e0e50616b67bf19
- SHA512 dda1b96d9742cfdee2f83dea2f3e6a881f64eb0e36eed85ff712364d5af3a004866555141c9e237e80c660abc9239faa99a046d9baf56c2b71e0d8b799a2f833
- SSDEEP 3072:228Scf3e1lcXCSJdh2mXkoD866zAtmRfdK1FEJt5m2++J3qUQm08KMWF0bFTcVHI:22I/+SCpoA6aAcGE355++JjcMW2VcVL8
- TLSH T16714127CBA2BBE31A3CFDAD3A02B5D7D48D2DC4C9205527C63A2178D12EA7D1524F660
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 dca1a702b0cdd3f2a513aff686c658846155a2b47d34272e557288b2d59eedad
- MD5 0446a2edea5a0692594d2e8437d819c7
- SHA1 7f63deb6794c7e8aa96092001efe303b79b31f55
- SHA512 34201605ecb58283c68dbb9e146e5ebf4505035446e974a526d6bda37ba484bd08022f72163f8bef1ccdbfd78e35e78c27ca33548a824551692f76053c927b68
- SSDEEP 1536:eGYw/P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:nH++J3qUQm08KMWF0bFTcVHr6zD
- TLSH T1789302B9991E7D75636AC6D690079CAC88E3DCCE1514117C30C7AF1E28BE393A31B8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 202KB
- SHA256 1d421c6c21de2fcff635acdc5296f008d56270198e1eb3e523cea139c7cf9282
- MD5 6fc2065b654d6ed0ecb4b69f0e0038ed
- SHA1 72d4e7e11aa3a394c80e4f1c8c89d244779bcf70
- SHA512 d93947ce92c94b41e83308dbe29c8abc11783193fe77a6a0866a089b636ea0121c6bc2921f9aa41bc3c6f60c33723af3673e0a532a83dde79c6591aee3e1056e
- SSDEEP 6144:FTUI/+SCpoA6aAcGE355++JjcMW2VcVL8:F7+SCxJ7OMWy
- TLSH T160141279BE2ABD31A7CFDAC3A01B5D394CD1DC8E9708627C63A2178D01EE7D1524B660
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-DJG9B.tmp\Genesis Thor 303 TKL Black setup.tmp
- Size 3.0MB
- SHA256 2a018e5dcfb5b82b1174b2e4725492643d48cdd7e3de74ce18be2b104de1754e
- MD5 341041b2d94a1ea6347336bb3158eebb
- SHA1 fa942e10967b0570f08da81e0ed505194bc5bad3
- SHA512 04afe4a8acd5a87f655ab4acb9f639fada0b95366b07bae507fbf03b9405fa273e04b80cae5c30ff67d2e052682f807eb5924219f3312028222bd5f91228c2a5
- SSDEEP 49152:yEA9P+bz2cHPcUb6HSb4SOEMkBeH7nQckO6bAGx7jXTVP3338i:y92bz2Eb6pd7B6bAGx7R3339
- TLSH T12DE52917F688723EC06B5A32473386D99837F67169138C17ABF8384C8E355943A3E676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Genesis Thor 303 TKL Black\Profiles\Profile 1.profile
- Size 37KB
- SHA256 d24a1a087f4a70922fedcee86d3dec4370d153fcec978fffee017eb7bbd947f8
- MD5 a377520974e72f87ae194e087a2900bc
- SHA1 e5862fcf83bd66c4dcd9f0bc71b45a3b0ba3e9e0
- SHA512 a8de6ff4bb4b71b8dd796e602b6e9c6d52bac1e593ff129592492bd1b0546be67991369804b8d61ceb80dd69ca8a744d061913329b7a0c458433f4579327c0a3
- SSDEEP 384:3RjRHRjRPxIJDZ3pj5fGQ72BbRPh7xnRQZTpH5zJvpeRrhfxL+Q4Ihgpj5XJDZ/X:g
- TLSH T18C03EC135BFC140C72F9A73D26F06CB92B6A7806A19BD5AD40E4728FD9F8D110B146BB
- MD5 SHA1 SHA512 SSDEEP TLSH