Did you check the staff action logs at yourForum/admin/logs/staff_action_logs?
There should be logs related to the change theme action, and you can see the code of that theme when you check the details after clicking the “show” button on the right.
