Execution of dropped Setup_File_92.118.3096.exe from Temp/RarSFX path with untrusted certificate

Duo Tech@duotech

•updated Aug 14, 2026•1•0•3

Detects execution of the dropped Setup_File_92.118.3096.exe installer from a Temp\RarSFX extraction path where the binary carries an untrusted or invalid Authenticode certificate.