Windows Binaries Write Suspicious Extensions — Detection Rule

Detects Windows executables that write files with suspicious extensions

Read the full analysis on IntelFusions