1. When Thor is installed your local DNS is changed to 127.7.7.x and your DNS server is saved by Thor in the registries. Read more here: How Does DarkLayer Guard Work?
2. Four new services will be activated: Heimdal Antivirus, Heimdal Client Host, Heimdal DarkLayer Guard and Heimdal Uptime Checker, all of them set to Automatic
3. Two new folders will be created, one in Program Files or Program File (x86), depending on the OS architecture and one in ProgramData.
4. One icon in the Taskbar
5. One certificate in the Trusted People folder.