file_path

C:\ProgramData\Windows.Microsoft.Photos\current\Microsoft.exe

discovered 2026-07-08

Electron/Squirrel masquerade launcher (reported signed 'Exodus Movement, Inc.') launched hidden from a Photos-app masquerade directory.