Troj/Kedu-B exhibits the following characteristics:
File Information
- Size
- 48K
- SHA-1
- 886d8a79cda9e28fdd7cdfceb20d6793a503133b
- MD5
- 6336238c74f13edebd2135e033b74f0e
- CRC-32
- 836f82cf
- File type
- Windows executable
- First seen
- 2012-01-27
Runtime Analysis
Copies Itself To
- C:\WINDOWS\system32\checkdisku.exe
Registry Keys Created
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- autoscan
- C:\WINDOWS\system32\checkdisku.exe
Processes Created
- c:\windows\system32\checkdisku.exe
DNS Requests