Potential Fake Instance Of Hxtsr.EXE Executed
This rule detects the execution of 'hxtsr.exe' from an unexpected file path. HxTsr.exe is a legitimate Microsoft Outlook Communications component typically found within a hidden 'WindowsApps' subfolder of 'C:\Program Files'. If 'hxtsr.exe' is executed from any other location, it could indicate malware attempting to masquerade as a legitimate process to evade detection.
Sigma
