View the active process and network communication report which shows the file's execution flow and "Malicious" verdict.
Info-stealer (often categorized as Lumma Stealer or similar variants). These programs are designed to exfiltrate browser data, passwords, cryptocurrency wallet information, and session tokens.
Primarily Windows environments where the .rar is decompressed and the internal .js (JavaScript) or executable file is launched. Behavior:
If you have already executed it: Disconnect the machine from the internet immediately. Scan the system using a trusted offline antivirus tool.
