Potential Fake Instance Of Hxtsr.EXE Executed (4e762605-34a8-406d-b72e-c1a089313320)
HxTsr.exe is a Microsoft compressed executable file called Microsoft Outlook Communications. HxTsr.exe is part of Outlook apps, because it resides in a hidden "WindowsApps" subfolder of "C:\Program Files". Any instances of hxtsr.exe not in this folder may be malware camouflaging itself as HxTsr.exe
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Potential Fake Instance Of Hxtsr.EXE Executed (4e762605-34a8-406d-b72e-c1a089313320) | Sigma-Rules | Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) | Attack Pattern | 1 |