home

IRXUpd.exe

IRXChecker

Ginocar Produções, Lda

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘IRX Updater’.
Publisher:
GinoInformações, Publicações Lda  (signed by Ginocar Produções, Lda)

Product:
IRXChecker

Version:
2014.02.0092

MD5:
8b2210c6390921721726bad5a342658e

SHA-1:
d317c0b9d8b2ebb06ec10cc2d9ec1b30c323c59a

SHA-256:
bd0038514e7ede9026f1ef1b7f1e4d1264f8e4d4d49c197822b4e0d9cc0be342

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/5/2024 12:42:08 PM UTC  (today)

File size:
193.3 KB (197,984 bytes)

Product version:
2014.02.0092

Original file name:
IRXUpd.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\irx\irxupd.exe

Digital Signature
Signed by:
Ginocar Produções, Lda

Authority:
GoDaddy.com, Inc.

Valid from:
11/8/2013 3:02:30 PM

Valid to:
11/16/2015 4:12:41 PM

Subject:
CN="Ginocar Produções, Lda", O="Ginocar Produções, Lda", L=Porto, S=Porto, C=PT

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4EC308BDB76CC0

File PE Metadata
Compilation timestamp:
5/15/2014 9:56:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:FB9/eZP5kwE7B39cg5Uuy1kQBQeCpFBQF:Dwc7tR5qkQBapFBY

Entry address:
0x23AC

Entry point:
68, 84, 25, 40, 00, E8, EE, FF, FF, FF, 00, 00, 70, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 40, 00, 00, 00, DB, 85, CB, 9C, 2F, 06, B9, 44, A7, 9E, 7F, C4, AB, 18, AE, 2E, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 42, 00, 02, 50, 83, 01, 49, 52, 58, 43, 68, 65, 63, 6B, 65, 72, 00, 00, 34, 46, 73, 02, 41, 63, 74, 75, 61, 6C, 69, 7A, 61, E7, E3, 6F, 20, 61, 75, 74, 6F, 6D, 61, 74, 69, 63, 61, 20, 64, 6F, 20, 70, 72, 6F, 6A, 65, 63, 74, 6F, 20, 49, 52, 58, 00, 00, 08, 00, 00, 8F, 07, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
148 KB (151,552 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
IRX Updater

Command:
"C:\Program Files\irx\irxupd.exe" \checkonly


Scan IRXUpd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.