Detects the execution of msiexec.exe from an uncommon directory
Read the full analysis on IntelFusions