Svchost.rar -

: Check for related malicious processes or scheduled tasks that may have been established after the archive was extracted.

: Immediately disconnect any machine where this file was detected from the network. svchost.rar

: The actor uses the command tar -xvf svchost.rar to extract post-compromise tools. : Check for related malicious processes or scheduled