Command and Scripting Interpreter: Windows Command Shell

worker.js execution fallback chain includes cmd.exe /d /s /c start "" /min, plus curl.exe and bitsadmin invoked for download.