The app will be run from a randomised path until the user manually move it: https://krypted.com/mac-security/app-translocation-services-os-x-10-12/ (I don't know the URL of the current documentation).
Topic:
App & System Services
SubTopic:
Core OS
Tags: