home

bal1240000en.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from welcome.solutions.brother.com and multiple other hosts.
Publisher:
Macrovision Corporation

Product:
InstallShield

Description:
Setup.exe

Version:
12.0.58849

MD5:
8dc78f29e1f942d3ca804bafcddf7b34

SHA-1:
f3e80e23b328ee63d6eae062587c2a7760b56593

SHA-256:
2b7c6703a11f06c03ccd3159e88011c809c4669d4f45bfc2fde9cdab4b5ccc2d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:29:57 AM UTC  (today)

File size:
4.8 MB (5,009,608 bytes)

Product version:
12.0

Copyright:
Copyright (C) 2006 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\bal1240000en.exe

File PE Metadata
Compilation timestamp:
1/20/2007 12:07:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:IGuw1CGuw1XRGyVq3CeJ8KqTZH+BuqpchN688CgRVkDuMWGX8:IzvwqSoUZeBuIca8/g3kDumX8

Entry address:
0x22D69

Entry point:
55, 8B, EC, 6A, FF, 68, 88, 76, 44, 00, 68, C0, 66, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 40, 61, 44, 00, 33, D2, 8A, D4, 89, 15, 8C, 1D, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 88, 1D, 45, 00, C1, E1, 08, 03, CA, 89, 0D, 84, 1D, 45, 00, C1, E8, 10, A3, 80, 1D, 45, 00, 6A, 01, E8, 7F, 26, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 73, 23, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.7710

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
276 KB (282,624 bytes)

The file bal1240000en.exe has been seen being distributed by the following 19 URLs.

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=5711f7b6-ac12-48ea-b4ca-2f71cdfe1a46&osname=win_7_x64&prod=mfcj430w_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=777a2f03-0652-49dc-b101-31aece500f7c&osname=win_7_x64&prod=hl2280dw_us&c=us_ot&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=0fc3366e-fbf8-48bb-8012-0b4db45575f9&osname=win_7_x64&prod=mfcj870dw_us_eu_as&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=af376bee-e8a3-4144-a868-831ee6eea557&osname=win_xp&prod=mfcj470dw_us_eu_as&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=e9b0f4a2-0e62-4e1b-9b33-862846b4bee1&osname=win_81_x64&prod=mfc8480dn_us&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=6d107536-2933-42b7-ada2-c4277600de99&osname=win_81_x64&prod=mfc8810dw_us&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=61918685-8b9a-491d-a295-79c5a1c84fdb&osname=win_7_x64&prod=hl2270dw_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=acea28b8-5691-489b-80cb-e935e5aa37c6&osname=win_81_x64&prod=mfcj625dw_all&c=eu_ot&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=d4dd9170-c114-47bd-a66c-f84e8ecb1c52&osname=win_8_x64&prod=mfc5460cn_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=7a44545a-e235-47d2-8af2-54aa775d62a5&osname=win_7_x64&prod=mfc620cn_eu_as&c=eu_ot&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=043dd181-c343-4166-ab77-c6320de7f769&osname=win_7_x64&prod=mfc620cn_eu_as&c=eu_ot&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=a3560d8a-9800-4c79-bfa0-83ab48220f52&osname=win_7_x64&prod=mfc620cn_eu_as&c=eu_ot&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=026a352a-679c-40fb-be56-6944cd17478f&osname=win_7_x64&prod=mfcj430w_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=bfb3f841-446a-4a52-87a2-7a7dd3e2dbe9&osname=win_8&prod=hl2170w_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=6ccebcf2-7bbd-4e00-bce0-fa2cb6cdc82e&osname=win_8&prod=mfc665cw_us_as&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=00dffb72-3690-434a-bceb-bc87404336da&osname=win_8_x64&prod=mfc5460cn_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=e9f1c31d-48d7-45bd-bc2a-870f4aa7dffe&osname=win_8_x64&prod=mfc440cn_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

http://download.brother.com/welcome/.../bal1240000en.exe

http://welcome.solutions.brother.com/BSC/public/agreement_submit.aspx?serialno=&lang=English&dlfile=http://download.brother.com/welcome/.../bal1240000en.exe&guid=ca0ad032-62a5-4b09-94c5-f0d5520bd686&osname=win_7_x64&prod=hl2170w_all&c=us&viewmode=0&dlid=dlf005040&dept=IDC

Scan bal1240000en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.