Files with thor suffix may be since October 2016 encountered as renamed and encrypted files affected by the Locky ransomware.
There is one other file type using
the THOR file extension!
.thor - Thor source code
THOR file extension - Locky ransomware affected file
What is thor file? How to open thor files?
File type specification:
File extension thor is since October 2016 used as a new suffix for the Locky ransomware that previously used zepto,locky and odin extensions.
Much like previous variants of Locky, also this version is distributed through WS, JS, etc email attachments attached to emails (spams).
Should the user execute the scripts from the attachment, an encrypted DLL installer will be downloaded and launched through Windows' Rundl32.exe.