home

driver-da-impressora-epson-stylus-c67-32-bits.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
12ee5a799a2a02f86541d7f8f1a54317

SHA-1:
dd674b35f9be5d43dfe78550cb9d9dfa8d07a976

SHA-256:
e6aad7519e8623a5f0a8ea5e0bef131e667f8bc82bbe8b2129b2e419166692e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:27:17 AM UTC  (today)

File size:
5.6 MB (5,904,662 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\nova pasta\driver-da-impressora-epson-stylus-c67-32-bits.exe

File PE Metadata
Compilation timestamp:
12/22/2025 6:23:28 AM

OS version:
17.0

OS bitness:
Win16

Linker version:
8.0

CTPH (ssdeep):
98304:N+/Su2yVllBSotgdele8v5I0mdk2YROsDH7iz216/2wsho1cvEjAMsInF0UVKjB2:N3cV/Nl6cRO+7izQwfcvEAN0dko

Entry address:
0xA0403

Entry point:
50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, 49, 69, 86, 33, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 08, 00, 00, 00, 45, 4E, 47, 4C, 49, 53, 48, 2F, 50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, 49, 69, 86, 33, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 11, 00, 00, 00, 45, 4E, 47, 4C, 49, 53, 48, 2F, 57, 49, 4E, 58, 50, 5F, 32, 4B, 2F, 50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, 41, 28, 79, 31, 05, 6C, A7, F7, 1D, 1D, 01, 00, 1B, 1D, 01, 00, 1B, 00, 00, 00, 45, 4E, 47, 4C, 49, 53, 48, 2F, 57, 49, 4E, 58, 50...
 
[+]

Code size:
1.2 GB (1,313,144,832 bytes)

The file driver-da-impressora-epson-stylus-c67-32-bits.exe has been seen being distributed by the following 9 URLs.

http://www.ranchsendgift.com/3FZw7KJTDua8BmxBjIcqo_hrPZmr1VdZThcO2_PwcxdB6VA3iITf_E3m4IFEagJb99xMISojkc3ui9DUBE82uFaOrfYDS2901mBpl8TIY5FaQOdCRYHubqn4Pzyg5_nmnXuO9zb_uuuAEdp1VBlA5ogAo0PQDEHEmbufSrZ20eEzh_5VNY6FDUbmy1cfWXCwKRzD_xIDHzyKDZI8u7O8vlFdf81lWQsTHqbEYQlf3HAhFXKLpAQ=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/rlQqxM5NxLo D6MJK_O ML28PfUd8oRHMMkaf3OTHNGzyaWN5aapAXOTq8 Y57gJBQS177PPpy3guHO4w IutXXIZas8RIRMHFA6iyCn4ejPYVEMDXc6yFs4hytk5Dgk 8PpzzzVbe6hNfkRQkIAm9mE3JsNJlXJHZsyWM9XzEe3 XMVjL3oMNmCH7qE1IZnKsofRTN_8LvIbQkWc0BrruYeUwsTf9 nmdFuGoWd6NoXTs0FutM=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/DHz1xBd45_oTRAa6dV3h85WRUdNo8dX4GoVsfX8AS uTG6KBJazm7wEZQC8MjvJQtudPJ3I8P3p4qWckAMA4o1SlMFpQ8Buhk8MJnesXL1q3OglI6fbV53f7g7hssjYKglu8xGpQSd5n8Xl8Zfz99B8IVVyln5omDSDNg0AM1epuVaPRJwd8NBo0dagwV2PQqRzDbWJWcGADNB8UHSs 3H_sPgqeLTmcdF3Grd8odnQoV6B 9H0=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/jTypRkCWNUvmczMaF06AJH1G_SSRuTHR0Ggbp9vsVazUPtgB Ty6_cYJHvEm DSU0QIbdFMvYCFlY5lpkQCPKRB_vb290OvsCPsKehPfWW2H8 i8uYJZ337_sLPXkUsv_CLSRgUbVdrKgEz7TmunM Q2M881FJMQL g9D6AMYAYezDonmaKXsQcKvavw5pPljnQkqMe94LXDmWeEsdVAfwCd9EmhJ6Ekit098cOVxgJpCvzd_A4=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/P_NhqoRbRV8KqT DwsAlr33RVJH5KIRNS086KCnVwlCQqq7atBOmaSePqduy6NZu3T98Gbq__qXXgGW9TuOcglMHnOCn7LbolA06iRcQWZ2G 30ti_FDVLTD0OVL0Zud_KAzGEfsBi NzbsXah PxQleMvYz5xk88mX_ye JHv0zuVy0JsYdVyPcpSOmDv7x3NzrS1Q_iyXTEdDMLj0sLRFLsawZ uE7OoY rpgX yj9iwnLBtI=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/SnojjBuKarU3zA4tDFYFR41sfKFXmXn5eW28n VX_phSe cSn575GR1gtC1ALqK2OO6dEXRwQ9a6TR tuXvPJDwTRbfo5CBZUVPgkL93F00Vnw_u9woUVdRkgo0w1HG2cchTHx8tjNX9_iUqz939Vw4lTkeiwpYfNZ3decDGAn4SVReVe9j_7uY7h9pK2fbeiI6FQLADjXu9L_6sMM8NIbOLC0tJOCllVjWwTRgC_v_d02k3GhY=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/htia6zdXIOf6E6Rg1GYvWB0mkPTy3gvtQI72_KHwdiLDr9nFyBADe9IIk_mA_dIRHcO0_t1gZkNedFWuOebs5tdYE6t9keMnG___0U7AB65mLWIub9Oz6FNcumHUSblTem0ipRHxROYUbtFYQYoHwjk3yOT85PlBBvSEEqXjkx_itQDOHS1fVrplzD7aBnnczWNjh2iSLdWB7GvjQjQVY6rgUrzoJaVzTYFjpF EZMcmtdTcNKQ=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://www.ranchsendgift.com/O4xQu37dQkFj05dPtZkV4oN cj5QpqP2ir_frjdrCAtcHnbOSUVWQm2iBskuAG35M7ChXn2wLodcfcnWFzBGeV_dtMlqwFQF POVH_m5eJkKlqfWTh Pcv7vpKo5S5OqyGzb_lt6kHqxFWZ3h0Rdrtx3XN4NZ4LHBBJM2REkGeLRY0D15tF2koSvq14zQ_Z wYvzj_74YBkJQ4t9zn56vh6vZnV 3YWAbKPvSHOE3Nw6RtZOJlY=-GzYAAMTaOW73pZ52mYwG45dIFr5uAxtw4FQm4UB2Yxp4osaCBsv57tEQuGW6XJSWY7IeqqmOQvzj

http://download.epson.com.sg/.../SC67_W2K_55bEs.zip

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.