Technical Information
- %APPDATA%\Microsoft\NitroKey.exe
- %APPDATA%\Microsoft\Clear.bat
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %APPDATA%\Microsoft\Clear.bat
- %APPDATA%\Microsoft\NitroKey.exe
- %TEMP%\$inst\2.tmp
- %APPDATA%\Microsoft\NitroKey.exe
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'BUTTON' WindowName: ''
- '%APPDATA%\Microsoft\NitroKey.exe'
- '<SYSTEM32>\attrib.exe' -r -a -s -h "%APPDATA%\Microsoft\NitroKey.exe"
- '<SYSTEM32>\attrib.exe' -r -a -s -h "%APPDATA%\Microsoft\Clear.bat"
- '<SYSTEM32>\cmd.exe' /c ""%APPDATA%\Microsoft\Clear.bat" "
- '<SYSTEM32>\sc.exe' stop "PcaSvc"