home

firebird-2.1.1.17910-0_win32.exe

Firebird

Firebird Project

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from januszkulpinski.sd.prz.edu.pl and multiple other hosts.
Publisher:
Firebird Project

Product:
Firebird

Description:
Firebird Setup

MD5:
c7f4ef2de86dbccb65ddfc3a105c7c96

SHA-1:
95125d187b50369c0a03ba0d7d3eadba862319ba

SHA-256:
4d52a328ad8f75a2c63b37218add1c617746d2293cb2adfb130f68ea03bfd255

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 10:59:54 PM UTC  (today)

File size:
6.4 MB (6,659,927 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\_tsb.tmp\base\firebird-2.1.1.17910-0_win32.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:u7EfOxz2IPgsGUwzDiSNCK43eAqt0nwUkKr+x+pl5KAmqCFjrHGraRAIHY:9fQPWPiS7Hp6BkKrHlZZ0LAP

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file firebird-2.1.1.17910-0_win32.exe has been discovered within the following programs.

Orion NF-e 31-07-2012  by Fakstel Corporation Ltda.
www.fakstel.com.br
About 5% of users remove it
Pimero 2010 R1 Free Edition  by soft-evolution
Publisher's description - “Pimero is a convenient appointment calendar, contact list manager and email client - the ideal companion for small teams and individuals. With its automatic synchronization you need not give a second thought to how you maintain your appointments up-to-date.”
www.pimero.com
10% remove it
Pimero 2011 R3 Free Edition  by soft-evolution
Publisher's description - “Working as part of your team, Pimero is a convenient appointment calendar, contact list manager and email client - the ideal companion for small teams and individuals.”
About 7% of users remove it
Pimero 2012 R1  by soft-evolution
5% remove it
Pimero 2013 R1  by soft-evolution
About 1% of users remove it
Seismic Source iSeis Applications v2016 vol 5a  by Seismic Source iSeis
About 3% of users remove it
 
Powered by Should I Remove It?

The file firebird-2.1.1.17910-0_win32.exe has been seen being distributed by the following 18 URLs.

http://januszkulpinski.sd.prz.edu.pl/.../MjMsNjcsMTgyNCxmaXJlYmlyZC0yLjEuMS4xNzkxMC0wX3dpbjMyLmV4ZQ==

http://gsf-cf.softonic.com/951/25d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36206&instance=softonic_br&type=PROGRAM&Expires=1476852104&Signature=HcYYPnFLnA3Zxwvz4e57wYORWi7BtdwSqFj6FFAy9INuSTIFgZzNc7daOvhgiZYXuk~ihwFpZXOGHZzLlilHlajTBwKWfzqSE0hwIBWDI9~7SP1Rl9vA6cMCsBUd6BpXJ7cf0uydSQzcHdpUOjKA4Y3xJBesiDT2~NRa1zh2hp0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Firebird-2.1.1.17910-0_Win32.exe

https://firebird.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANjOycNfgbvJWaA/ BQa2qg/xl7jT2rIkKWXFSe8guczVAie5DHQwR3q/hEgr/QVEvhBpOcTYLdpIvamzOUWnoI 9LF9OgcDSPwmGCZLGx0IpRU/aMaQxZ7MryHo/oB sobj1zVS4QA1kEmoXxglFGn3yDFJOiXv EU8cdLqUR4RXWhI bl5 hDNWqY 2ef0DyxgfICGa4nPVJS4OS5WtUDLzlG/FCyzfqJLRk L6W47Ae110YqknqQyIIKE3QbQe4CraIPxSDnmraI1BYx4tzGNcjuzz5Q RZ2JplkKiIt4pw9bMZ7ZYmEkotqUJfZLHKkbCyf05QtY7FRy7nr78AvlUIPoejI6mxpOoILBwf7gBmy Oe5Xj7UXXa3nwv3Uydstd5Ju59Dgj44pe3NDNyz/pKKz0kS4INE8DpgFMXDqcqrFrBQKymg72OUAY63cT0DSAqRr/.../YxSeTcyHbfZ74JGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c1rkKr1s247DlH3Dnf8HyXKZKv7GM YYroNequinGrAVGx7eHYopEznqRooLldErQz3DPtBL3HZeqn73uJ8k4gs=

http://www.gamasoftware.com.br/Firebird-2.1.1.17910-0_Win32.exe

http://gsf-cf.softonic.com/951/25d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36206&instance=softonic_br&type=PROGRAM&Expires=1481181988&Signature=ERVM9j3XTxbVglO0~MAphrxsLY2tO26Gri8tVtRDCE95UNntNsN5B3JUsRugTy~fzZr1MUt1C~r2fgLO~rrMwGilyzKywnuItsXbt6f278ZChGTXXv8GFTNHRdIOjK~woOrjuwEJplwWkdxQJhbbJOW5x5qlfuePkvkgvW8v1ds_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Firebird-2.1.1.17910-0_Win32.exe

http://www.neosolutions.com.br/.../Firebird-2.1.1.17910-0_Win32.exe

http://gsf-cf.softonic.com/951/25d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36206&instance=softonic_br&type=PROGRAM&Expires=1478566190&Signature=MZph9C89q3dbRzQe8jWi128mn~1UIm4-i50lapx~4xRPbR4S2UcowuX3eZ6JjBP8qzRT3NH-mMvTAKksszqc7jyPT3ChGA0tq1WjTBkzUstI8MGLqNVbFNH2d~H2d49G1J~joQh6cFX~DMNEO36Ilv1Ep1TYmpgbakXX02Gx6Bs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Firebird-2.1.1.17910-0_Win32.exe

http://escridata.com.br/Firebird-2.1.1.17910-0_Win32.exe

http://dumpingowiec.pl/Serwer-Firebird-2.1.1.exe

http://dc384.4shared.com/download/.../FIREBIRD__21_.exe

http://s10544.chomikuj.pl/File.aspx?e=sQ00uogmSd1obvhaFTOtlOrW_bcrEUOeU7HNvG1lBgFdmjAWtEUgWYTh2iT4_2ijqdHGuAZtJd0ikDLI7KftvfD93SsHqcLWa_9UBTc27ZIqe-qefuEpdyy0XDrcH0dcf-CVF-6r6O0BooaqDbR04z4nI_JBnu42CSapMuXCZRQ&pv=2

http://www.logotech.com.pl/ftp.demo/ftp/.../Firebird_21.exe

http://hardsis.com.br/.../Firebird 2.1.1.exe

http://s10544.chomikuj.pl/File.aspx?e=sQ00uogmSd1obvhaFTOtlJpYXrWdXncs5FhOPqtFVCsTkWgkM1B4HRLRAYJRIyUloU0ZdMf3_urPRNUNiziFcjUkFWmPQmMuS2adY85pXMBfWPraKZ1kXGW76QfraqW9Pnu3e2pNnQSIZCpR1sPVnQrRk-BSSZrOJ9g0jJsXge0&pv=2

http://s10544.chomikuj.pl/File.aspx?e=sQ00uogmSd1obvhaFTOtlJpYXrWdXncs5FhOPqtFVCvZKyqCSD7Iwz5eUTzq73-3QVzHlfhWDH3vCGFv0NmlG77G_Ke00bS_sy3XqKOs_nTxSmjVaPBCG65Yh3fsSuDU977eWqRyZrblfEnMOb1NkInXnZRdHyiC_ylhpiXjDqc&pv=2

http://www.ptsoft.pl/licgen/.../Firebird21Win32.exe

https://drive.google.com/uc?id=0B5edUVJI-m0WMlVXMzUtRDQ0cUU&export=download

https://docs.google.com/uc?authuser=0&id=0B2KiyCQR0QA8V1dIdFlFYTBLTVU&export=download

Scan firebird-2.1.1.17910-0_win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.