Used by Windows to extract and create archives.
tar -xf \\host1\archive.tar
Extracts archive.tar from the remote (internal) host (host1) to the current host.
Copy files
C:\Windows\System32\tar.exe
IOC: tar.exe extracting files from a remote host within the environment
Brian Lucero (@Cyber_Sorcery)