Analysis

  • user interaction
    yes
  • max time kernel
    32s
  • max time network
    36s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/09/2026, 16:27

General

  • Target
    RK_Keyboard_Software_Setup_V4.6 20250617.exe
  • Size 70.6MB
  • Sample260908-tx3pwstyb1
  • SHA256 d0640f292318b79c167a0328724e78483c8d591aa875ef4c5e6f4a0192aaefa6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20250617.exe
    "C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20250617.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:608
    • C:\Users\Admin\AppData\Local\Temp\is-1II3V.tmp\RK_Keyboard_Software_Setup_V4.6 20250617.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-1II3V.tmp\RK_Keyboard_Software_Setup_V4.6 20250617.tmp" /SL5="$90276,73602488,275456,C:\Users\Admin\AppData\Local\Temp\RK_Keyboard_Software_Setup_V4.6 20250617.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1712
      • C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe
        "C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:3568

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        is-D1NGN.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0079\is-D1NGN.tmp
        • Size 3KB
        • SHA256 8a098eae278f7b6b797f958bc609c63e55289d9c019c4e640d2e4dbbd266a642
        • MD5 SHA1 SHA512 TLSH

        is-TPSG7.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00B5\is-TPSG7.tmp
        • Size 3KB
        • SHA256 25127c757c973488ce4f817cf16545e5540722cfbcfb563977fdb0da51597172
        • MD5 SHA1 SHA512 TLSH

        is-P6OS2.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00DE\is-P6OS2.tmp
        • Size 4KB
        • SHA256 dd70e8155538a82639dd870b719ddcfe50da5ec1c5053227a7608ad523beccce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-98HK3.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00E1\is-98HK3.tmp
        • Size 3KB
        • SHA256 b4b62ba37ce4ea911ff71157e84d5449eb3fa002d5a8322272333db1b28ecbfb
        • MD5 SHA1 SHA512 TLSH

        is-JRU1K.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\00F9\is-JRU1K.tmp
        • Size 4KB
        • SHA256 66cd5f77442be06ae7b6f3814de10fcb5c131793e63479ef762e791fc1f4c5a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-3F2BQ.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\014D\ET\is-3F2BQ.tmp
        • Size 320B
        • SHA256 de6f110052f09f5ed6b171f8a96dd631955a002fcf13acf0ccae89be35d65f24
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0176\KB.ini
        • Size 4KB
        • SHA256 c7d3c4e156ffa7906edda12031703d5c0fa184b08288e08117133a421fc958be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01AB\KB.ini
        • Size 3KB
        • SHA256 77ff37821399650544515e0c14f95c9435b102340140e55a04e0f522111f0b49
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01B8\KB.ini
        • Size 6KB
        • SHA256 952760df8753c7e57d47c54d25b7dbdbd27bfb326e180021197cc376486b5664
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01C6\KB.ini
        • Size 5KB
        • SHA256 50dd9dc5b3a399bca801eb7088087966e35d1642f17183e4f0744a2eb5c8a046
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01CB\KB.ini
        • Size 12KB
        • SHA256 fd5380020fc8689246b9b208fcad73581c2b90557e4a9bce4eeed07259673378
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D0\KB.ini
        • Size 5KB
        • SHA256 6af07ff7696df0fa68a93638197d40a61f58187a6d935501cac620f4c4bfa612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D2\KB.ini
        • Size 5KB
        • SHA256 e8274d1475805d9eb1c3a7c7694256efef15faeb6014ed59037165276e8f82cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D6\KB.ini
        • Size 6KB
        • SHA256 3f6daf1aa6f425b93e79f893007a45c72a54c78749cfd256b9efa3d5abed1674
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-M0CMC.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D9\ET\is-M0CMC.tmp
        • Size 368B
        • SHA256 372738f14d58604c473000def4baab7c9e015cf24aaa2104a6b84f64111dea63
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01D9\KB.ini
        • Size 4KB
        • SHA256 6e51034d6b720a66261ed2640d15f846de25d307bcc041719fbe664e9805998f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01DC\KB.ini
        • Size 4KB
        • SHA256 d3fee407ab55c487fa4cf53ae478459e610453df84d3b0ccc609dce0071d617a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01DE\KB.ini
        • Size 5KB
        • SHA256 bc85edbad51f8d4dc27970848bd2854a73668d17d4c25c9d82967c228be9aa5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01E3\KB.ini
        • Size 4KB
        • SHA256 c9d38aea2056ee9c858e7f55e9d0f801f365efdd6d559961cb38ebed8f079e2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01E5\KB.ini
        • Size 6KB
        • SHA256 62d90a4ad8fb9376ed64914c59bcd632dd8df545c6f1a50393938df9cde5fc9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01F4\KB.ini
        • Size 11KB
        • SHA256 7e850bea77401e9b062363085c2c3c4539af49ebd2bf4bc12c03027b7a2887c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01F5\KB.ini
        • Size 6KB
        • SHA256 b44da26f1d57b114b98f1dcdf3a9f03cdc455d3b7e51169147f0d26f37e86f18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01F7\KB.ini
        • Size 6KB
        • SHA256 05a7ce40860eec8427955a2a4d09277c4c9f86414e654afeeea1511af569cc72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FA\KB.ini
        • Size 6KB
        • SHA256 3380b809e3b15ba8f05c9b1e7ffd353730a4b1dfda23756cea9a9511b4838f69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FB\KB.ini
        • Size 6KB
        • SHA256 bc059554122a9b37718351111d295279d39dcee8ee78ed6a06e70133ad01e674
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FC\KB.ini
        • Size 5KB
        • SHA256 aed02f111d3c9e05e746d4a15537213646d6631475cd7e1b78895ecba4eaaeed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FD\KB.ini
        • Size 6KB
        • SHA256 957c7b1e1412f3c035382a6f7b431fb23b3395f0573aa49c6752b332c76ad503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FE\KB.ini
        • Size 6KB
        • SHA256 4581c09f683243ea03b405a2813091b1c3868f519bb4e6e25164b322a7d46faf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-HKAET.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\01FF\is-HKAET.tmp
        • Size 4KB
        • SHA256 2ec607a245fa3848c1a029cc8a0fed479b47b513716759be2e4074f98e815bcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0200\KB.ini
        • Size 6KB
        • SHA256 5421b8207851a970d3be6f6ca76cad981f28cdcc047b0a718519c0af707f7c19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0201\KB.ini
        • Size 6KB
        • SHA256 e4554decc7c34bfa96a962846828b78a50e726d4cb37e1515fb09064a02aad78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0202\KB.ini
        • Size 6KB
        • SHA256 dfc2397ee48a3e1f7d3f2415e90fb24e804cb2893e9611b8dae74e605197f1e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0203\KB.ini
        • Size 6KB
        • SHA256 45da5441e5891de8fa2b11ee25c7c6e3a7fa9456100d1d910398d21a7f41e779
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0207\KB.ini
        • Size 12KB
        • SHA256 61751fd5840261b8f2712b1f1c751843a7e13f07b23cb5e83a6416ca22fc1b15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\020B\KB.ini
        • Size 4KB
        • SHA256 13bb92fa990afd62887324c0bb87139cf0f792b6dd0380dc8bd0798b2467e337
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\020C\KB.ini
        • Size 13KB
        • SHA256 788b7ee1917c092255787c84094951b8cbce6a909720ee39bd1af66c6911b73a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\020F\KB.ini
        • Size 6KB
        • SHA256 8d62898d35388343f84bd8d747965468300a15f08f889decb5fed9f3a051fffa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0210\KB.ini
        • Size 13KB
        • SHA256 bcfe7497a74ceabc09afb0e6a9503b03ac47608c252b5d655ff46627c16c2d4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0211\KB.ini
        • Size 6KB
        • SHA256 ee8142abc6ccd6ef57ddab76f643be803c999c580cf7ee8376d299692178d301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0214\KB.ini
        • Size 5KB
        • SHA256 d665995440f64cf17c7d056ae60d693ee8d98834b323cbe738da2b0431e56815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-4TURO.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0215\ET\is-4TURO.tmp
        • Size 358B
        • SHA256 4334e218f804d083d73ebb434b233c7d5aa38658c8f3ec644e5cdc9c21105b3a
        • MD5 SHA1 SHA512 TLSH

        is-D2LB4.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0215\ET\is-D2LB4.tmp
        • Size 359B
        • SHA256 d41b92412277c86cc5cb6277db807bbc2d9a0f563b3553ab12fffa3fcf33dc9e
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0215\KB.ini
        • Size 6KB
        • SHA256 cf0c24c220642189526b0b6c3c30044edd8f0c16f3db40ef7e0e2bd6c8b42bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0216\KB.ini
        • Size 11KB
        • SHA256 a959097fab2912b44febd0e867f817c69850ffc89a8ce258898de5c3f22c4109
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0218\KB.ini
        • Size 6KB
        • SHA256 6e41f4b731f3c9ac61a65939dfdaa3358f8f77ca09a9bfd5448e79888409473f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-9UU2C.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\Cartoon\is-9UU2C.tmp
        • Size 325B
        • SHA256 6102e8acf3d79f2a803208b2057226c2298bc079d00770b0a3266239933b392e
        • MD5 SHA1 SHA512 TLSH

        is-EVBHI.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\ET\is-EVBHI.tmp
        • Size 387B
        • SHA256 84f9edc5d83432096e576a2829e49190848cc761622ef779e3d138954b2b201e
        • MD5 SHA1 SHA512 TLSH

        is-J92GL.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\ET\is-J92GL.tmp
        • Size 338B
        • SHA256 6abb26e11df39487cada04f6e5d32f3ede8da58ef197d2842d2af1d9d0bd79de
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0220\KB.ini
        • Size 4KB
        • SHA256 e136662a4273ddcf2432eb9bc25644fccf9409cec3989c4e0ad21da8dd385a75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0222\KB.ini
        • Size 6KB
        • SHA256 89a8674401971dc83ee90e893a91be74ad9f4f4d763e9eb30ec35201ca5fb891
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0223\KB.ini
        • Size 6KB
        • SHA256 40a4479b358a68f974a7d4dd8a24d4ffdf92febf4df61aee8544a15e2fd19532
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-4I0GN.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0224\ET\is-4I0GN.tmp
        • Size 426B
        • SHA256 8197930a85e423ad108e52eea15de8d4a8996fceb06055404d3b8579e4e2df1f
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0224\KB.ini
        • Size 6KB
        • SHA256 829825de9a6b00e0d84adcb757df71e487b8fd137180cdece4134388d7e07919
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0225\KB.ini
        • Size 7KB
        • SHA256 993398fc08a9c879fc12b19f98e2ef93b7eee25c985972415289378d14f963ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0227\KB.ini
        • Size 6KB
        • SHA256 e007b4b2fe31c694e51ad3373b57e1edbf5956418ac718438b57c6a808d71384
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0228\KB.ini
        • Size 6KB
        • SHA256 d6a46c24ac9b210e33f5f65668bcd301ade1f753781cd70c388cdfb98e16244a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0229\KB.ini
        • Size 4KB
        • SHA256 da207c16f76bee9c11a6d5b2b980f8e791836f37808b2f173036cad74ec78e3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-5S2HV.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-5S2HV.tmp
        • Size 405B
        • SHA256 4f94eca769c60d621c5cb2bac40a86e3d9d4e7507ccc92ccbfe0251ba5c029fd
        • MD5 SHA1 SHA512 TLSH

        is-DN0NO.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-DN0NO.tmp
        • Size 409B
        • SHA256 9a1e9b2d166b4474924b58c3d74012fbc54b8f88adbf150b804847c6394554b7
        • MD5 SHA1 SHA512 TLSH

        is-SBE9M.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-SBE9M.tmp
        • Size 497B
        • SHA256 579ca19323d44523b6cac89a49e9018a82a38b0f7e8a79d996fd89a2c630a82d
        • MD5 SHA1 SHA512 TLSH

        is-VKH05.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\ET\is-VKH05.tmp
        • Size 420B
        • SHA256 519fc9b463e4d52dc9d60c5a78f4c017aecf83d4ba20a2beb4e2ff20768efe45
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022B\KB.ini
        • Size 6KB
        • SHA256 26d5dde16d756c654a8d139d62a57ebe749d884098d839cf96ee8803bbc4d449
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022C\KB.ini
        • Size 6KB
        • SHA256 0cb732dfb0ce86339f6200a85c8a43747d6e86b6f877926dc555ce8565a5662f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-PJDI3.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022D\Cartoon\is-PJDI3.tmp
        • Size 270B
        • SHA256 441e709bb5645e556e7a56930f730215efb4cd10341bef1ebc339a00436f0f50
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022D\KB.ini
        • Size 6KB
        • SHA256 2370b052a0bf2e8f998ef3e05357b5b2d651f0c2fd15565ed6defa309fede68c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\022F\KB.ini
        • Size 7KB
        • SHA256 c0d2d796abbc46d35ed61e9010af839175d9a6b33f314274afabf6ee5f06e7b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-NQHJ7.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\Cartoon\is-NQHJ7.tmp
        • Size 372B
        • SHA256 011cea089aeacaa0bef1d80677c2b833842933fc5fe16f20a89d081b4d421d01
        • MD5 SHA1 SHA512 TLSH

        is-J6VH1.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-J6VH1.tmp
        • Size 493B
        • SHA256 a227700cb46f0f77783bae19a4da3a8160906f986d6eefad19c2ac6bc87a407e
        • MD5 SHA1 SHA512 TLSH

        is-LV7IC.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-LV7IC.tmp
        • Size 416B
        • SHA256 cf46ea4c8f293539e6c749b85bd6902c352977d7905afa6fc3e666504be3c031
        • MD5 SHA1 SHA512 TLSH

        is-NF3M9.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\ET\is-NF3M9.tmp
        • Size 421B
        • SHA256 8ed7911294dff873a0b821184cdca513151d803ce9551b033b1adbead739e1fd
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0230\KB.ini
        • Size 6KB
        • SHA256 9bbce12d3a849694cbe27ed7136a21319e7fff169cb8d32ce59d879414428565
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\KB.ini
        • Size 5KB
        • SHA256 0b34b43861ec79b9e47ae36eb2c59a16761656a29fadd3678ecac84c35f5c349
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DVN11.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\en\is-DVN11.tmp
        • Size 1KB
        • SHA256 946ef3b1677b2174c4e006f04c15bc3a88fb65e3d2e6d49747f8e06595b96166
        • MD5 SHA1 SHA512 TLSH

        is-A7IK3.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023D\sc\is-A7IK3.tmp
        • Size 872B
        • SHA256 b304e6e77b0e0909cfdc75b947051bac2cba3642370965a049816cf5967286b2
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023E\KB.ini
        • Size 5KB
        • SHA256 efe1482338c4691a9ec83d4c527c26b3899804aab8ec11eefb565e5d0413b771
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\023F\KB.ini
        • Size 6KB
        • SHA256 40e50272f929f1661ee9716de2e0310d7a4dcc2fc8fd456267605ae5c4571b98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0240\KB.ini
        • Size 6KB
        • SHA256 4a0bb2e261a774e2e331c60a439a868d196ec83764040a639a37842a1b298509
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0241\KB.ini
        • Size 6KB
        • SHA256 4525eeb6565e10488edbcdb09d7c537c731d71343f1e7446215293e31ade1c45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-UJC00.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\Cartoon\is-UJC00.tmp
        • Size 298B
        • SHA256 2fd616935a19e10edbcf3138c50e1f391507dffdf08d11ae9894402dd6871888
        • MD5 SHA1 SHA512 TLSH

        is-V8L6A.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\Cartoon\is-V8L6A.tmp
        • Size 350B
        • SHA256 0d91b6710aa6aad100e52e6522a5a08236990733bf43224b4c014baae4c1d093
        • MD5 SHA1 SHA512 TLSH

        is-DVTVD.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-DVTVD.tmp
        • Size 211B
        • SHA256 a9b1ac12163778ea38251993052478f5f13c66d8653f6b0d7eda60f29cc979ee
        • MD5 SHA1 SHA512 TLSH

        is-FPQAM.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-FPQAM.tmp
        • Size 284B
        • SHA256 fd1e8501484a0808cd8e9e4f8768457b84a0c505efd4b0dd9090a7a36ca63baa
        • MD5 SHA1 SHA512 TLSH

        is-NJ9SF.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\ET\is-NJ9SF.tmp
        • Size 281B
        • SHA256 3dd50039a29fc0c22b59514eb5e1564218c0c9f9d1f22fd47cc15e4ceaad0ee3
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\0249\KB.ini
        • Size 6KB
        • SHA256 b9fb7a8fe8a8b3500f0dbfc444d71fb9ef42a4906cf5ac9bc5405c17082e9ecf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-TFSMC.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\Cartoon\is-TFSMC.tmp
        • Size 259B
        • SHA256 5c356dcfd7f47a866d166b6d045d1213c1c56b252dc1970fd137af986b8873a1
        • MD5 SHA1 SHA512 TLSH

        is-9PKOG.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\ET\is-9PKOG.tmp
        • Size 263B
        • SHA256 67ecccb165b484da5568896c4f8329122db1c49d46de5465484934a1276965df
        • MD5 SHA1 SHA512 TLSH

        KB.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\Dev\024A\KB.ini
        • Size 6KB
        • SHA256 a07a364ddd4be1778f452dbebc6e314ba683519fd1acbde8f2ef87042cab6df3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DeviceDriver.exe

        • Path C:\Program Files (x86)\RK Keyboard Software\DeviceDriver.exe
        • Size 2.2MB
        • SHA256 b9d137a8c5549f6e4a44f68d11fc507b3f63ebc3a5edfff5d4f59eb71f74ff3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-5FNBD.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\ET\18\is-5FNBD.tmp
        • Size 225B
        • SHA256 3360cb4db0b0a82d63bc2b46548864fb6bec01ff1286765e18afe9b14eaa5220
        • MD5 SHA1 SHA512 TLSH

        is-H42AM.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\ET\18\is-H42AM.tmp
        • Size 288B
        • SHA256 74ba4f760239d8edc01ed72263320630656d5b3fb42d1d0ed58f5085dc790073
        • MD5 SHA1 SHA512 TLSH

        is-9F5VF.tmp

        • Path C:\Program Files (x86)\RK Keyboard Software\ET\4\is-9F5VF.tmp
        • Size 455B
        • SHA256 bff434c18fcb95fded25e264bd3ba1297c243f3183d3151df78b46369d0a0dc6
        • MD5 SHA1 SHA512 TLSH

        text.xml

        • Path C:\Program Files (x86)\RK Keyboard Software\Text\en\text.xml
        • Size 22KB
        • SHA256 85b26e0c7cd8317adeb136d37b6877601b0c3e7f6fb072867f937aa46c73de8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        appico.ico

        • Path C:\Program Files (x86)\RK Keyboard Software\appico.ico
        • Size 135KB
        • SHA256 bf3318da82be92607cd0135135c38de80dbe5a5a9ba609996b20fefeaa6c8562
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cfg.ini

        • Path C:\Program Files (x86)\RK Keyboard Software\cfg.ini
        • Size 16KB
        • SHA256 f8cac165ab4a2187f735c3155452f0b8cddcda865334de5794b7fc00e0178ed5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lang.ini

        • Path C:\Users\Admin\AppData\Local\RKKB\lang.ini
        • Size 20B
        • SHA256 d0a01b887fd86e8892ee940de755480fcc888b5e7d48a6941d1ad3b4f043ef07
        • MD5 SHA1 SHA512

        update_version.xml

        • Path C:\Users\Admin\AppData\Local\RKKB\update_version.xml
        • Size 12KB
        • SHA256 8b3efd728abd9b12cfa7bbf43abc4eabb21a98f62743125dcd85502d7f3eefdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RK_Keyboard_Software_Setup_V4.6 20250617.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-1II3V.tmp\RK_Keyboard_Software_Setup_V4.6 20250617.tmp
        • Size 1.2MB
        • SHA256 5dc8bf409f56e97eadf45db2b3013ee33123e078462ef47e8dd1300fcf388b6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        InitSetup.dll

        • Path C:\Users\Admin\AppData\Local\Temp\is-L35SL.tmp\InitSetup.dll
        • Size 67KB
        • SHA256 59db7bfd9a92cc9a0998260807f17c536ec71159b727df10d08b998bc94de301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/608-1768-0x0000000000400000-0x000000000044F000-memory.dmp

        memory/608-0-0x0000000000400000-0x000000000044F000-memory.dmp

        memory/608-61-0x0000000000400000-0x000000000044F000-memory.dmp

        memory/608-2-0x000000000041E000-0x000000000041F000-memory.dmp

        memory/1712-1762-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-14-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-8-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-7-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-71-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-62-0x0000000000400000-0x0000000000557000-memory.dmp

        memory/1712-1767-0x0000000000400000-0x0000000000557000-memory.dmp