home

1c_8x_unipatch.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0k-1k-docs.googleusercontent.com and multiple other hosts.
MD5:
c8660d633a97ca94facb3a2613b36d28

SHA-1:
81ca77cd0419af5e89dbd7998d958bd4078857d1

SHA-256:
8a32e3f2a17fb3cfc8f64c59f25c1b6d5f7f05342591becf47c5129e876fcdc5

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
2/25/2025 8:28:55 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
possible-Threat.Patch
t3scan.1.6.1.0

File size:
11.5 KB (11,776 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/11/2010 1:58:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
96:J6Ks86q/AeqT1wSwaqC2bzM+cLlcaRIuc2S8abROz/SpIQI1OYUEwY8ayModSuCc:Nw1qa5M9mIultqI1TJhc1CsWQN1uyn

Entry address:
0x1000

Entry point:
6A, 00, E8, 5D, 03, 00, 00, A3, 00, 30, 40, 00, 33, C9, C7, 05, 04, 30, 40, 00, 4C, 00, 00, 00, 89, 0D, 08, 30, 40, 00, A3, 0C, 30, 40, 00, C7, 05, 10, 30, 40, 00, 50, 30, 40, 00, C7, 05, 20, 30, 40, 00, 84, 30, 40, 00, C7, 05, 24, 30, 40, 00, 04, 01, 00, 00, C7, 05, 34, 30, 40, 00, 67, 30, 40, 00, C7, 05, 38, 30, 40, 00, 00, 10, 28, 00, 68, 04, 30, 40, 00, E8, 29, 03, 00, 00, 6A, 00, 68, 80, 00, 00, 00, 6A, 03, 6A, 00, 6A, 01, 68, 00, 00, 00, 80, 68, 84, 30, 40, 00, E8, D7, 02, 00, 00, A3, 8C, 31, 40, 00...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
1024 Bytes (1,024 bytes)

The file 1c_8x_unipatch.exe has been seen being distributed by the following 5 URLs.

https://doc-0k-1k-docs.googleusercontent.com/docs/securesc/uchpquav9mfh755ga7s9pjp8mvs2ce27/41a5hsg9cv815ghijlhspqa1dgsm0qk4/1443679200000/.../01757643165106887395/0B0jL7mb8bN79VnYzZnJ3SENUQTQ?e=download

https://e.mail.ru/cgi-bin/.../octet-stream&cn=1c_8x_UniPatch.exe&cte=binary&notype=1&file=1c_8x_UniPatch.exe&mode=attachment&channel

http://www.fayloobmennik.net/files/.../44528918.html?check=6ea82e407433591da69d5b700d786035&file=4339854

http://www.ex.ua/.../94717253

https://downloader.disk.yandex.ru/disk/b1d6b92911a46aee2d6bb1cd8066a4b5f31661983f8b5d1ecf5c585df2f26f19/55ad2f78/.../x-msdownload&fsize=11776&hid=ddd75c0dd84411b63584b2b16bd2ad24&media_type=executable&tknv=v2&etag=c8660d633a97ca94facb3a2613b36d28

Scan 1c_8x_unipatch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.