home

internationaldays.exe

RokhdadExe

The executable internationaldays.exe has been detected as malware by 7 anti-virus scanners.
Product:
RokhdadExe

Version:
1.0.0.0

MD5:
1054ddf341aa17c8a2c2fe7f52bfe5ed

SHA-1:
6cbe051fe45dcde6a1dc2532ea42b9c2b31988f8

SHA-256:
64d2be5a62171ff8d8c0fb2a22bb815c47763fc11cc2c84a3f53d6cec8b4c97b

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
7/6/2025 1:40:04 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic31
2015.0.3496

Comodo Security
UnclassifiedMalware
18128

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.6.1.0

McAfee
Artemis!1054DDF341AA
5600.7152

Norman
Smalltroj.ABIWV
11.20140423

Trend Micro House Call
TROJ_GEN.F47V0413
7.2.113

VIPRE Antivirus
Trojan.Win32.Generic
28386

File size:
752 KB (770,048 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
RokhdadExe.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\psoft\suncalendar\updates\internationaldays\internationaldays.exe

File PE Metadata
Compilation timestamp:
12/16/2012 12:35:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:AgkM9xZaYJb9LdFIGXrXwpf1wqXh9epGTiCKK4cOyIDMyT2ynflzAZRix:AgkM95JbxgoCC0+pGTiC0RyIDmym7i

Entry address:
0xBA7DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 2E, E6, CC, 50, 00, 00, 00, 00, 02, 00, 00, 00, 1C, 01, 00, 00, 1C, C0, 0B, 00, 1C, 8C, 0B, 00, 52, 53, 44, 53, B7, 59, 05, 5A, EA, BA, CB, 45, 8A, 9B, 22, B9, 66, 1F, 57, 10, 01, 00, 00, 00, 44, 3A, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 54, 61, 67, 68, 76, 69, 6D, 2E, 4E, 45, 54, 5C, 53, 75, 6E, 43, 61, 6C, 65, 6E, 64, 61, 72, 57, 50, 46, 5C, 52, 6F, 6B...
 
[+]

Entropy:
6.1459

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
738 KB (755,712 bytes)

Remove internationaldays.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.