home

nfsu_europe_patch_4.exe

RTPatch

Pocket Soft, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Pocket Soft, Inc.

Product:
RTPatch

Description:
RTPatch Executable

Version:
6.50

MD5:
ad5b216bb65307aa82af98e65d3756fb

SHA-1:
ad2d2257e24884f9a573c12f4c51319738266398

SHA-256:
7d373f298fe566c9855d5eadcee194b4bdae87d3baec55b70fcd6ddd8a54a378

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 1:27:37 AM UTC  (today)

File size:
4.2 MB (4,358,521 bytes)

Product version:
6.50

Copyright:
(C) Copyright Pocket Soft, Inc., 2002. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\nfsu_europe_patch_4.exe

File PE Metadata
Compilation timestamp:
2/27/2002 6:06:01 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.55

CTPH (ssdeep):
49152:R82Efpo1PUypPowU5olpDYYRnJpti2VznUl57t9d16m6sTXpJ0JY1Dqnmd7vwt/s:qab/NJZVTNs7pzGna7Yt/ZAgc7

Entry address:
0x4823

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 00, A0, 40, 00, 68, B4, 5F, 40, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 08, D3, 40, 00, A3, D8, C1, 40, 00, 8A, C4, 25, FF, 00, 00, 00, A3, E4, C1, 40, 00, A1, D8, C1, 40, 00, C1, 2D, D8, C1, 40, 00, 10, 25, FF, 00, 00, 00, A3, E0, C1, 40, 00, C1, E0, 08, 03, 05, E4, C1, 40, 00, A3, DC, C1, 40, 00, E8, 81, 16, 00, 00, C7, 45, FC, 00, 00, 00, 00, E8, 87, 15, 00, 00, E8, 77, 15, 00, 00, FF, 15, 10, D3, 40, 00, A3, 6C, 9B...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
26 KB (26,624 bytes)

The file nfsu_europe_patch_4.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1439430787&Signature=NnAD8oq9n91Sv6uwOMSnEAcz5c5lhhLcgGUSNNt8TlBQ0y772lbn3ShbbJ6qnhsOfi3R~5DkaM3BpmNmvXMD1MEsEMEb~0-aGvS1oDjGO1F3NE45QFr5CTdWrjmlBqmKoF8ASAXLSoz3S0GIyayuJWxGqaZIYA8Trz8fdZ-t8Fw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://www.bitsfarmclean.com/uKsK1kt3co16HO82a3NseILWEOF9fZhlTEQ1e7RxXTo0UumG4bw8ri_glYO9CKDGr5prCPddylNuFNp7ZEcQEqGW_BJNGV0fCuNsbDRyGW_9VqIwy4h7jFt7JMKBFeNLjJ2lKEG16syRnMREt7GklIczWsAwfJ0rWIrRjlfku_sZ81 X_aiGJR_hnLrv9QRBpOjoWq9z4zp_EL4FWKoFaAtHvWaB3JCkRrLbngpvd8FQqAB6o2M=-G2cAAGRgnq2tSarSRQ 4 OBEOrEiUh3YGDtbg5pleT6vkyC ofV8vgxHolnm8HkcB3C63EG8QBNcCXwewC4_ofE7yo nuAfvt4v_TzuWXNtQw 3GQ5MZGEWUYDACwUkSBw==

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1482285913&Signature=LcjAOPTZSiSJXelUAJjpmeikaEz3vBRoXSWsXRIBGmNUDMNHG8RN0l6nAcAkyMzPtBOvnTdA9O-SfOkYXxH0D5Qo7mG1yH0odsXTyDaycKzAF~uuKJ-B0~dzApuc7qs0heE47yFnAeYNLkxptyWSXyuxBTrxcbx1gvru5gEWSHU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1486601063&Signature=U6nZyYS9SIliDeIBor7OV12fsVOwIvFaJr9HI0U~HXUP1BXdQQJsaWR-6fiGaHLQVS~4HRzKGEu0BzIh2LYLI2z3GpPcZtQWky61CC0d6ljzpIi3y5dwiky9e7jon~ccbhqYPUiads5izZn3fYTB9wdx-L1Vo-kKhq5VCiQ3NgI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_es&type=PROGRAM&Expires=1440555171&Signature=LIr-gokyHPyoMedqmHjxTEi6cV8mqqFzSrcE5Tr87MVcsjitiBKc6DYQY6reIBCagQhbrkG3QgFjOrWkL9kbhvO3-eheeZOAQAZM8YR-dh1RP1bIvy5owx~2U7n5traQEFQKZCLkDenIMHhSYImOsDmxIjM~jsxf-KWAIvh33u4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

about:internet

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1458278658&Signature=CI5OT8wjz7MEOQm1~zPaM1E7CqzOUbHSYfUUOZYmd4gW3i6fm-j5afd7wokT6mOmJDOEGtWhYh391XpXjAr5ZywqQJ53usWG6ArwHYfEQYrafIFsj4gIADZb2rqAp4tcNFL76uW~F~ZSE1u2WK33ZAkmryICfjcF1Qlm~Dmcl4I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1444098809&Signature=YARNv82jJ4DzR1np95qloM9C1g0Di3qB~hCKWpUvdpsTEbzqo-5XqI1EihM5HNEF-xomdMHOBj6-mM17kXOLIdtmgxo~OuD3ZqBG2ZXTDzuohIkIIfgNpoShphMkT2R14hy2WK7l3jtMh1vMXpfNESXWDP4vroE8KnOQGQGgC8I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

https://need-for-speed-underground-patch.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMkABB2hf9YnPFdy31woODEz/lbQBmA0H7l2JcjkmCKa/lMLXEqr9Y17VCIDmAKebrs6AFeZBWuqbk223swQTXQSOX8sdv82ubSctjO81YooU5X/fHl9ovXN9xmR9sXYwzIsSNn15RI3koUHLE0K/.../guuPvYbRU18vF9sng==

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1478035512&Signature=HUnCaAZgr8ceMdjXkAJNRN5GOffc9MwwEa2QZ59AtI~cVDu72nNwHJrlZPYVLgYK4kMIazTyRKYUyFOn1BCosUnP8VBhp7rR1id94G6ImOs8hAvhPeif8AkFwPBQuSMeWtjpstFVhQPvhbIN007gG33a9G60MYCVaGVV7YJOdVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1477349785&Signature=I3W9PA9AI~~wtW3FLu7~ilwxX5uLOhSVuiLgt6zXb0xmq9xNdk9-Tp22A0SaHvgF~RYmiAnRfVr4sXm7IUkGiCr11ApDDZzNat2u2ajrvtf3U9~04k3d3n~cAMybUyCjhjZO-F055tOJpTM6RqWbGLMF-XxTi-2G3VpNOkGcr7o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_es&type=PROGRAM&Expires=1441445447&Signature=XzqFy~MhBUxfB9Com3yOB5fonKoShXBvlGJ5Ed8zfn7rnVGaEYEkFJ2dEKsQtm5nM3aK~A2VUSNW43PCbLVrNgpczyiMB81YrnGfa-CI77qyHsmmuA4oiT4HAswwsoNrQ~aZv~mahGD9iRtzwMbgtL5n41Ogg2cArChflNr0e7A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1478129334&Signature=BFA9NPy5hGmDPtpDJd4Bw1r3yulisVNBQvdbdZ4gFflVrHE9~RBaLRDFhWunIPrwSdkPQgpl8LaSWJxl9FEz7ORnbLJWJFCFxPqokBnaMiLShpNxNFVhFiU7Z7xP1vPgc6NGDjVSv~UUFi9d-vl465w15PmFN9e4RBgTkVilrs4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1478393332&Signature=IP8AWUuOnQObsjSaxcJn4qtdtq1ZJHC-JDvSkzLuvhoxvfoiCb5orJSMLPCwWYYv4mrFcrqvffj8Osr~W42IN3-lR7w6nmcvDKnCPH4QLcnQ1cLMdvgcXT0XZC5dB6yXPDMeLYccw3roxxMZw9jdCPHLVm4~3DJHeibzlx3ZKrg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_pl&type=PROGRAM&Expires=1477163549&Signature=RgoE92z-yrYf~zymwYEwOv0IVe8gOfWAAyHwcaAvMSIt13QzZV2hbH2j3VTLsVH8C2DXIttsGm9X3hzy4GN2R5h-xC5tHrNCYaXl1pBG0TNick8rpqRQ6OQTiQJNZCybZ2g-eXJwk9D9psjX6KC-Iplvax9HC1Q87gRZgcuEqMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1481188889&Signature=S7tVEzG4CDoJ2UkhsGkAvasmmzjQtg7L05mi2jj7BLPev4l1iDYm8k6qEhYOmvjOEO5QKEFHJJMx6KJk9meUlRKbN~10DF0gcx6xMV2EI86NsYsrVZTJQh42DwDs6CbtORMqT5cWnjAAKh~WjHIKzmuykWt3qVIYfhCsgRjkmLs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1478897448&Signature=RYVqBDwm9zFjx1IXAEzmFWDj~lnOLT8p3jnExV8JHtukNRsWQybdjI8iu4sb0TA5DcKQuvPV-xexGIqv33fQ2G5HeTReYs0ItsnINUT9-o0NkiHskc9jybmhrHTyf7uSgnXwlGpFcYoui6q9j2NOGWnYwxi1JSDc4zJ910jLhOs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_es&type=PROGRAM&Expires=1476791130&Signature=Xpnhg33Ezcj81nRMWg5mkqj7Yf2i0T1mmtSn3mTSUKeKRa~EJ6wd4aiYJJVbCcNh~wqMkvS~XNs7zTRyZW2niAwU3mUOQpwDoiyuKmT9EHnte6yobjA6j9L9bLGGk0C3YvXfPWrMe6qwxhn1PytPPRc5cM7~198S8jy~jDn988A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://www.needforspeedsavegames.com/get-list-item.php

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1458290085&Signature=IOfBH3co-v9eUlIhk~akZJd-T9~e2wDYxOfvKivb04lnZfecgHfSHXEhL1-MAGR8GjdQmrA5dckgARtYNaVbDBfJXW0C1GG-ROrvwR5M~wGgMvNZiJneqd93luWDi4JVmKxBVJkI91CqBw97j~YnWGADALQ03vmu61aonkjhgak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1451453502&Signature=Jta0gKVTXvJM70EMRyjjBwMVulY1QcBNdCt8pnjfk2H6gDrOTxQefa293zrEcHKdNgYGAP6O2QfYnDMp4TbSwu9-5Mex14mCLANa9BAQw5aOJ~U3NGs5LkA--YHBrb1ym8Wfwo7MmHJHrLc2Sbry5EcYvkHtPid0d8U81DjbM9M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1446280886&Signature=YTh0j0MaRTT~hKAs9tjly8jVM-wwzoFOkbMNbVxjpcKJzZYg0WAKJHdX~hLsYvcbbN3d4tz3i~hWujloiXc7avnhq6bivedE0OiWGQhcEdgXeCGosBsDr2X2fAvlahJKxyfmeS7VaOHM64vOe5OphJoVAAogKPNLHfcwxr-Ozz4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1456272697&Signature=Z2E5tu~Z~D7KD8cjts3RQp8E0hZWbVo8GWfbTUIU1h5l9ujwOPQ~rI~iWZAX7FgzApzD-puTUU5mo4XH3jt5deMVwxeSM3sGQj3aBc260G0mJ9dnPFpJTOcbRAPGJtjZ6ZLYqK999x0g6GWdyiAdJVq4VewOl2OnjOG1Je0vJEg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_br&type=PROGRAM&Expires=1472905028&Signature=FrZFvGZXeNe~fYW4pMcHbK8VIKxuzAqQFURjnlNnKbUlLIy4UkI6KueoUzkOBaHaCYcqr7eFc-2nT-bfcjjtqk~P4FOaJRhY9x8H3j~XRQT-Tqic32IvjiY8-OJ9H-vNtByvz8uxA5P1HeVpRbTgQ8jW1O57eagLYaKMCUInXOE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1471370699&Signature=ivCZYODiwndSWHCZq5tnjEx6-ev9eer46goRbXG0U1Qr5ib5lF3oaaZkdk2SVcUG1SGGYQGOqApBpvOISnmptzfkaMQnySPf6stNundxOwf5ECyGwJbX2lnmMAfYyBGLuDKu2aNnZMVaUPffSfwEc37elw0aVHiuQgd3v8r5KzQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1467917428&Signature=Gp5B9XHVac4L6YUYEkU-bAm3b~9EFEKO9H4B1g6oSDCXODtpCOaLu09cdnMqPOI0J-0v5JBB67vDPv0Bb-uwTNSPjO828vMHWJdDwNZO2JhXIZyfnmAAp2KXUnQfOJwPUFJbs~ucpwLFEneliRegT0ZjOz9208TAzakkRgmKts0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1454877211&Signature=LEFz0Tz3ygrDdAH0vhOnH9F0aoMRTgwGTSjCA~qHgEn5IPsR4LHy8-2gCmC-SuCPGp76~-waOicOZNuFnU1mgzWgn11LIgbDF1-ElJQHChup1Okqj15zQ6UR6CMUJLaXnBat7fKSvsdehjGa3JJ55~huE4avKnXRfeDxifL-E~U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_es&type=PROGRAM&Expires=1465128213&Signature=ZR1sGCmLmQ-F1ZBPAU0NJeU~bv7fGk7oSYtmKvgvMWy3pZAGCZJksvGv~EYgc0XO2wB3mFYRRBXmXe0lgGDj1P76eZ48xrQ4X6EUjD~T24H8wkds5yQGvabTBZXxlMBIpc-4MtJAvz7oz8-OabsUsKXCuTnNsDqI7YwmXXfve8g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

http://gsf-cf.softonic.com/ad2/d22/.../file?SD_used=0&channel=WEB&fdh=no&id_file=31851&instance=softonic_en&type=PROGRAM&Expires=1465531873&Signature=NZbJ8-x1Xp8PhTUssMzFJcVswcEtAVUPEIE3rSY5r~0QEI1g9AS2E-gPuUjCTlxLrfPdi~wB977chc1wqC7yAXcCMamCeYto~027jSySkZEL~KP1lwlkhdSAJCfFneBOssyF2e5L9SYKlgwGHdX4RhovoAnwjEzepbH393tOvuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=NFSU_EUROPE_PATCH_4.exe

Latest 30 of 69 download URLs

Scan nfsu_europe_patch_4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.