Execute the file in a sandbox and monitor for:
Before opening the file, obtain its unique identifiers (hashes) to see if it has been analyzed by others: 9675.rar
Malicious, Suspicious, or Clean based on vendor detections. Execute the file in a sandbox and monitor
Creation of new files (e.g., in C:\Users\Public\Documents ) or changes to the Windows Registry for persistence. 9675.rar
