Phishing originating from this site

This seems to be relavent. That executable is part of windows and might have gotten hijacked.

https://forums.malwarebytes.com/topic/321918-trojan-detected-with-msedgewebview2exe/