Техническая информация
- <SYSTEM32>\tasks\performancemonitor_{y6f7a6l1q3v2w4s7}
- %APPDATA%\microsoft\perfmon\perfwatson2.exe
- %APPDATA%\microsoft\perfmon\1201824912038.xml
- %APPDATA%\microsoft\perfmon\1201824912038.xml
- %APPDATA%\microsoft\perfmon\1201824912038.xml
- '%WINDIR%\syswow64\schtasks.exe' /create /F /sc minute /mo 5 /tn "PerformanceMonitor_{Y6F7A6L1Q3V2W4S7}" /tr "%APPDATA%\Microsoft\PerfMon\PerfWatson2.exe"
- '%WINDIR%\syswow64\schtasks.exe' /Query /XML /TN "PerformanceMonitor_{Y6F7A6L1Q3V2W4S7}"