Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/10/2026, 20:04

General

  • Target
    winstall-Alex313031_Thorium_AVX2.exe
  • Size 893KB
  • Sample261022-ythyjatxd1
  • SHA256 962fab77a44b6af845dad1a13f349d9c8b37248add87b2663268e1edd092834d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 47 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\winstall-Alex313031_Thorium_AVX2.exe
    "C:\Users\Admin\AppData\Local\Temp\winstall-Alex313031_Thorium_AVX2.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Users\Admin\AppData\Local\Temp\winstall_2268_240668343\winstall-Alex313031_Thorium_AVX2.exe
      "C:\Users\Admin\AppData\Local\Temp\winstall_2268_240668343\winstall-Alex313031_Thorium_AVX2.exe"
      2⤵
      • Executes dropped EXE
      PID:4964
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240668578.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240668578.exe --com-activation-helper WinstallComHelper{C28118F7-E1E6-4488-8E2F-55F1157E49A5} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:2192
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240668578.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240668578.exe
    1⤵
    • Executes dropped EXE
    PID:5044
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240677390.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240677390.exe --com-activation-helper WinstallComHelper{6CF4E674-885E-46EF-9AD3-6FC340E78BF9} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1916
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240677390.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240677390.exe
    1⤵
    • Executes dropped EXE
    PID:3468
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240683968.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240683968.exe --com-activation-helper WinstallComHelper{AEB9A13F-4F77-41B5-8FFE-A72ECFA84625} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:3004
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240683968.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240683968.exe
    1⤵
    • Executes dropped EXE
    PID:1084
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240690500.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240690500.exe --com-activation-helper WinstallComHelper{DC1F2F1C-ED6A-4245-9424-7822C57418E4} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:4376
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240690500.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240690500.exe
    1⤵
    • Executes dropped EXE
    PID:3116
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240697031.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240697031.exe --com-activation-helper WinstallComHelper{E8435579-1EA9-40DC-AA1E-8C95614A9769} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:2060
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240697031.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240697031.exe
    1⤵
    • Executes dropped EXE
    PID:2880
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240703625.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240703625.exe --com-activation-helper WinstallComHelper{3C821F2C-207D-4DC1-9EC2-4CDC5DB543B1} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:4900
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240703625.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240703625.exe
    1⤵
    • Executes dropped EXE
    PID:2392
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240710187.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240710187.exe --com-activation-helper WinstallComHelper{5E3F71C1-5B20-4078-A382-EBDD87B8FFEA} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1068
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240710187.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240710187.exe
    1⤵
    • Executes dropped EXE
    PID:4148
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240716703.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240716703.exe --com-activation-helper WinstallComHelper{3BE4AD77-96C1-4ACD-9AB6-5155927E63B1} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1148
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240716703.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240716703.exe
    1⤵
    • Executes dropped EXE
    PID:2748
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240723250.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240723250.exe --com-activation-helper WinstallComHelper{0848EFF9-F53C-4D5B-94ED-F11EECD3B467} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:4916
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240723250.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240723250.exe
    1⤵
    • Executes dropped EXE
    PID:2332
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240729796.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240729796.exe --com-activation-helper WinstallComHelper{BFB9A467-5062-4A31-B835-903313998811} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1220
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240729796.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240729796.exe
    1⤵
    • Executes dropped EXE
    PID:848
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240736328.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240736328.exe --com-activation-helper WinstallComHelper{8984640B-1415-4CF8-9AE2-32252C3AE459} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:2156
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240736328.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240736328.exe
    1⤵
    • Executes dropped EXE
    PID:1504
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240742875.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240742875.exe --com-activation-helper WinstallComHelper{78961D2A-71C0-4252-A24B-82C4FACD6260} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:4832
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240742875.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240742875.exe
    1⤵
    • Executes dropped EXE
    PID:3044
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240749421.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240749421.exe --com-activation-helper WinstallComHelper{6984B39C-1EC1-4780-98B4-8C50E09EB061} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:660
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240749421.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240749421.exe
    1⤵
    • Executes dropped EXE
    PID:3720
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240755968.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240755968.exe --com-activation-helper WinstallComHelper{BAE50CFD-A644-4C73-BB6F-E79A4ED5ECCF} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:5008
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240755968.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240755968.exe
    1⤵
    • Executes dropped EXE
    PID:2312
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240762500.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240762500.exe --com-activation-helper WinstallComHelper{1A2DDDEC-09CA-4454-834D-CF3031CC79A1} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:2300
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240762500.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240762500.exe
    1⤵
    • Executes dropped EXE
    PID:2640
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240769046.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240769046.exe --com-activation-helper WinstallComHelper{E7E597F0-7B0A-4BD7-92DB-F210D2F64994} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:3704
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240769046.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240769046.exe
    1⤵
    • Executes dropped EXE
    PID:3416
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240775593.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240775593.exe --com-activation-helper WinstallComHelper{C0F1F4AC-3202-471D-A623-2D60451B0780} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1500
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240775593.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240775593.exe
    1⤵
    • Executes dropped EXE
    PID:1596
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240782140.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240782140.exe --com-activation-helper WinstallComHelper{9D7AFFAD-F4E4-443F-B71F-64A31E42CE0A} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:4420
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240782140.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240782140.exe
    1⤵
    • Executes dropped EXE
    PID:4536
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240788671.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240788671.exe --com-activation-helper WinstallComHelper{341F415D-9531-49D0-B6AF-683EDFC36FC4} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:556
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240788671.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240788671.exe
    1⤵
    • Executes dropped EXE
    PID:3060
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240795218.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240795218.exe --com-activation-helper WinstallComHelper{2445BF16-0708-4038-A241-4FCA800B8E39} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:3432
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240795218.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240795218.exe
    1⤵
    • Executes dropped EXE
    PID:2096
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240801750.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240801750.exe --com-activation-helper WinstallComHelper{727B4DC9-A271-4269-97CB-D50D7A6967FA} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:1796
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240801750.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240801750.exe
    1⤵
    • Executes dropped EXE
    PID:768
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240808281.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240808281.exe --com-activation-helper WinstallComHelper{14909D0C-2C11-445D-9EA5-EF33BB09D59A} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:3764
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240808281.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240808281.exe
    1⤵
    • Executes dropped EXE
    PID:2912
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240814828.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240814828.exe --com-activation-helper WinstallComHelper{57135A2C-C88A-456C-A9C0-0FCD806192F7} {C53A4F16-787E-42A4-B304-29EFFB4BF597} {AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    1⤵
    • Executes dropped EXE
    PID:2556
  • C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240814828.exe
    C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240814828.exe
    1⤵
    • Executes dropped EXE
    PID:788

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        winstall-Alex313031_Thorium_AVX2.exe

        • Path C:\Users\Admin\AppData\Local\Temp\winstall_2268_240668343\winstall-Alex313031_Thorium_AVX2.exe
        • Size 893KB
        • SHA256 962fab77a44b6af845dad1a13f349d9c8b37248add87b2663268e1edd092834d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winstall_helper_4964_240668578.exe

        • Path C:\Users\Admin\AppData\Local\Temp\winstall_helper_4964_240668578.exe
        • Size 177KB
        • SHA256 deb9e3ba67d6676f3238a1c863e771177addb67c50439eac53e1cf091a5c991e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210452.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210452.log
        • Size 607B
        • SHA256 b67a5e1d2cd038b94ee7ece749f06ffd76334445789f5c6779dcbf6254cef27c
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210458.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210458.log
        • Size 667B
        • SHA256 8d94baf324861861a48af2a669991de3792d53c2d11e5695118219288e430ca3
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210505.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210505.log
        • Size 667B
        • SHA256 a8a184a0e66ccce4a298c51b4b7447505b22b865e8c56c48a783dffdeec2955e
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210518.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210518.log
        • Size 791B
        • SHA256 f563b568bb14ce869cd82b5016103b5eef0a5f69b6caffb5176739e7602c3b23
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210525.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210525.log
        • Size 667B
        • SHA256 3daed31db44a78e67a177e6be4a5e1ed5551577b81287a868a338299c47faa1e
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210525.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210525.log
        • Size 840B
        • SHA256 b7e451da47b0a6b64de0c74442fd938abbdd866252a2e583e1cde0b027647ae7
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210531.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210531.log
        • Size 667B
        • SHA256 6aceb646b0059ce1704999a2850937a695666295e1d76e044a06d14244d0c9cc
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210551.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210551.log
        • Size 791B
        • SHA256 aaef12d323f99e2276360a67b9f4f734fa3199d3c616a1dfd3da607c6a2ccc40
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210557.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210557.log
        • Size 791B
        • SHA256 cad904ebb32d9d64e84cb9862137ee88764e001a25753231f8143e78d261f042
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210610.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210610.log
        • Size 667B
        • SHA256 c415319549b237967a5b5497c654013248a4c196e4ff52808c9196e38abd1f01
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210617.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210617.log
        • Size 667B
        • SHA256 f2cd35e4d9367c673e1edb62cdfeed364bac64369fa4b5157343cc5a281fa4ac
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210623.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210623.log
        • Size 667B
        • SHA256 d99cad405c3ec7decdc7e30444f12841f7303834126c62990dffe016b69243fe
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210630.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210630.log
        • Size 667B
        • SHA256 3f4ad366fcb8dc71a534c51221076a963b92b3c2930c733bbf8b684dd4831f26
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210656.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210656.log
        • Size 667B
        • SHA256 c7fcd7fc210cc922d4989f30a0283a03e7d0886aad2af79b1965bd3ad62c711d
        • MD5 SHA1 SHA512 TLSH

        winstall-Alex313031_Thorium_AVX2_20261022_210709.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall-Alex313031_Thorium_AVX2_20261022_210709.log
        • Size 840B
        • SHA256 e83efd33202b6ab1d0133ec032a0c203cdf8e205602f03357a70c3b3c4825168
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 1KB
        • SHA256 5bc8f632b4cf714fb4b955e16fdbf7db9f61561cf3cbd219f542a720764c9223
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 1KB
        • SHA256 58b24856bd4d8cbf450e9429e99cc417153035b7f0d30179d3268256595e7de9
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 2KB
        • SHA256 6c82f39e1b1039ef12875468fb9dc606783f530704758f3a311e5c93189777c9
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 2KB
        • SHA256 d34af943c60bb5c96dbb67d84d1ab2ec6584e4ae5fce4fc45dbf39b4f1ab43bb
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 2KB
        • SHA256 b9949411cfc3a93a8e56a89b42734c54bd84a1005083096f9293bd5ee1bebcbf
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 2KB
        • SHA256 c86a585c753afb5ef0e0ec8f120ea6e1dd630e97fd2fafe6256bd700739c814c
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 3KB
        • SHA256 24ab8ab72a84c3b73f6309af2ec60927d40585df224a951a096a8541cdeeca30
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 3KB
        • SHA256 4100b875cdcc2a05877dcf18de1130f9d7c4849454e5b3ad221a11f035b49d08
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 3KB
        • SHA256 07b7e68a81b91b5b85ce3150df7246e8a4cbd68a1ee3894e7aa304b44d86150c
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 3KB
        • SHA256 a482f7aab1c2408bc7f250780759f690a44608fab70d4ab84272b35ee58f0bfa
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 4KB
        • SHA256 955c758ee3152226f7b834be054a762e98d62a2795f5b2930d2879c42d9d81e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 518B
        • SHA256 952eef359d6e0215fb57d7e42f94d3246d4d1d335b55f634ed8bce1d67fe85e5
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 4KB
        • SHA256 f68f6e359696e9d5a8e6aa88e992cd46048bd0ff152158df42a0026cae0f25ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 777B
        • SHA256 d2ec9c50f7296441578359595d8ec6f4f9ec52d1c37db31375f285d3536d31fc
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 1KB
        • SHA256 a33df57f8a118931fb061131dbc183069a91ff3134f6a388b586ef860eee09fc
        • MD5 SHA1 SHA512 TLSH

        winstall.log

        • Path C:\Users\Admin\AppData\Roaming\winstall\winstall.log
        • Size 1KB
        • SHA256 eb925964a31de92330f3895a84ad3ad1f32708120a5ce79837c1ed44e168c27f
        • MD5 SHA1 SHA512 TLSH