Based on the location of these, can you make any connection to legitimate software that you are actively using? That would explain why it keeps "coming back" even though you are deleting the files.
On the flipside, based on the detection you shared, it's highly likely that this is indeed a form...