To help narrow down what you need, please share a bit more context:
file is extracted, the executable performs several staging actions: Self-Copying: It copies itself to persistent locations such as C:\ProgramData\PassatHook.exe Secondary Payload: passathook 1rar high quality