home

OIFIRSXDAT.dll

iRX

O Informador Fiscal

Publisher:
Ginocar Publicações, Lda  (signed by O Informador Fiscal)

Product:
iRX

Version:
2017.01.0017

MD5:
84b1c6f7534f21529c92291fcf26ba9f

SHA-1:
a422af6ff504b32e92b1638f3536ad655721593e

SHA-256:
cf67a098a1e37018b026ffc53189e4a2512d8c5472871210eb349e0ce778d205

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
2/26/2025 9:11:58 AM UTC  (today)

Scan engine
Detection
Engine version

Zillya! Antivirus
Trojan.LlacCRTD.Win32.8581
2.0.0.3212

File size:
19 MB (19,881,032 bytes)

Product version:
2017.01.0017

Copyright:
(c)2010-2016 Ginocar Produções

Original file name:
OIFIRSXDAT.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\irx\oifirsxdat.dll

Digital Signature
Signed by:
O Informador Fiscal

Authority:
GoDaddy.com, Inc.

Valid from:
11/27/2015 9:17:38 AM

Valid to:
11/25/2017 6:16:38 PM

Subject:
CN=O Informador Fiscal, O=O Informador Fiscal, L=Porto, C=PT

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DEDB9D09ED3B7297

Registration
CLSIDs:
{024ECAA4-F7D5-48C2-A3F5-1020B515765D}, {025561F3-A3BF-4714-A34F-A73E4E58FD52}, {05A62A6B-5D28-48A0-93BF-69416BFD15C0}, {0898C80D-3056-46EA-9FE8-D459BAFB201C}, {13A60E81-9195-4991-A8CC-59DDC8BC0935}, {158DE597-5403-4978-B37D-AFCC196323B4}

ProgIDs:
OIFIRSXDAT.clsDGCIxmlv2011, OIFIRSXDAT.clsDGCIPrePreenchimento, OIFIRSXDAT.cModelos2017, OIFIRSXDAT.IRSCamposDeCalculo, OIFIRSXDAT.clsRecibosVerdes, OIFIRSXDAT.uIRSCalc2016, OIFIRSXDAT.clsEFaturas, OIFIRSXDAT.cls_IRS_Retencoes, OIFIRSXDAT.clsDGCIxmlv2010

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/23/2017 9:43:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x31ECC

Entry point:
5A, 68, 10, 84, 16, 12, 68, 14, 84, 16, 12, 52, E9, E9, FF, FF, FF, 00, 00, 00, 80, 00, 00, 00, 30, 00, 00, 00, 78, 00, 00, 00, 40, 00, 00, 00, 5B, 1D, 77, 11, 31, 0E, 32, 43, 87, 61, 78, 39, 7C, 5D, 84, DC, 00, 00, 00, 00, 00, 00, 0C, 00, 04, 00, 00, 00, 00, 00, 00, 00, 4F, 49, 46, 49, 52, 53, 58, 44, 41, 54, 00, 00, 00, 00, 00, 00, 69, 52, 58, 20, 2D, 20, 43, 6F, 6D, 70, 6F, 6E, 65, 6E, 74, 65, 20, 64, 65, 20, 63, E1, 6C, 63, 75, 6C, 6F, 20, 65, 20, 64, 65, 20, 61, 72, 6D, 61, 7A, 65, 6E, 61, 6D, 65, 6E...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
17.4 MB (18,219,008 bytes)

Automation Object
CLSID:
{024ECAA4-F7D5-48C2-A3F5-1020B515765D}

CLSID name:
OIFIRSXDAT.clsDGCIxmlv2011


Scan OIFIRSXDAT.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.