Winrar Execution in Non-Standard Folder (4ede543c-e098-43d9-a28f-dd784a13132f)

Detects a suspicious winrar execution in a folder which is not the default installation folder

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Archive via Utility - T1560.001 (00f90846-cbd1-4fc5-9233-df5c2bf2a662)	Attack Pattern	Winrar Execution in Non-Standard Folder (4ede543c-e098-43d9-a28f-dd784a13132f)	Sigma-Rules	1
Archive Collected Data - T1560 (53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a)	Attack Pattern	Archive via Utility - T1560.001 (00f90846-cbd1-4fc5-9233-df5c2bf2a662)	Attack Pattern	2