home

shiftpcpatchv1.02_other.exe

RTPatch

Electronic Arts

This is a setup program which is used to install the application. This is installed with Need for Speed™ SHIFT. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Pocket Soft, Inc.  (signed by Electronic Arts)

Product:
RTPatch

Description:
RTPatch Executable

Version:
11.01

MD5:
1ddc5debd252e38d126332e3864bebd4

SHA-1:
ae66126a65e5c95b2fdb935b529f753b9a4e4cfd

SHA-256:
6fca16626682ff2956b390ba13df34e5e7f292a0414395329b7315f959298b38

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:55:26 PM UTC  (today)

File size:
135 MB (141,539,728 bytes)

Product version:
11.01

Copyright:
(C) Copyright Pocket Soft, Inc., 1991-2008. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\shiftpcpatchv1.02_other.exe

Digital Signature
Signed by:
Electronic Arts

Authority:
VeriSign, Inc.

Valid from:
9/5/2008 2:00:00 AM

Valid to:
10/5/2011 1:59:59 AM

Subject:
CN=Electronic Arts, OU=Synthetic, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Electronic Arts, L=Redwood City, S=Ca, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6E9B46A4FDC17828C3E7EA71C2BE85FB

File PE Metadata
Compilation timestamp:
7/1/2009 5:41:37 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.55

CTPH (ssdeep):
1572864:HxLDWF6ByritdvJHBwGZwci+t2Fa7n6alG/nwK6C+4kJopup:FxKitfhwoHi+tHJlgwlJ9p

Entry address:
0x53C5

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 00, C0, 40, 00, 68, A4, 6C, 40, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 2C, F3, 40, 00, A3, 24, E0, 40, 00, 8A, C4, 25, FF, 00, 00, 00, A3, 30, E0, 40, 00, A1, 24, E0, 40, 00, C1, 2D, 24, E0, 40, 00, 10, 25, FF, 00, 00, 00, A3, 2C, E0, 40, 00, C1, E0, 08, 03, 05, 30, E0, 40, 00, A3, 28, E0, 40, 00, E8, F5, 0B, 00, 00, C7, 45, FC, 00, 00, 00, 00, E8, 77, 17, 00, 00, E8, 67, 17, 00, 00, FF, 15, 24, F3, 40, 00, A3, 30, B5...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
28.5 KB (29,184 bytes)

The file shiftpcpatchv1.02_other.exe has been discovered within the following program.

Need for Speed™ SHIFT  by Electronic Arts
Need for Speed: Shift is the 13th installment of the long-running racing video game franchise Need for Speed; published by Electronic Arts. There are 60+ cars which are divided into 4 tiers.
www.electronicarts.cz
4% remove it
 
Powered by Should I Remove It?

The file shiftpcpatchv1.02_other.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/ae6/612/.../file?SD_used=0&channel=WEB&fdh=no&id_file=319855&instance=softonic_en&type=PROGRAM&Expires=1440035392&Signature=XOhGLMB9LNLI2HhHuJpYItN90RP4XELnmXiBXI4hnZbXOy0SI2TyAySvtkZbc-LyhrxauVLsjlGpziwJnf-3RZhbtPyCdeThT0asRKsQiPxmpq5pwThCv-nVq5FxWacpkfAr2eCMPME91v0IRRzUNaNj42bTIw0qVUbLC7b8DjU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SHIFTPCPATCHV1.02.exe

http://www.4players.de/services/.../download.php?action=start_now&DOWNLOADID=53818

http://www.playground.ru/.../?file=25460&mirror=18901&from=http&hash=jw6oix7f2gpij4np1753v6lm64jiidka

http://eacom.s3.amazonaws.com//Assets/Richmedia/.../SHIFTPCPATCHV1.02_OTHER.exe

http://akamai.cdn.ea.com/eadownloads/u/f/eagames/.../SHIFT_PC_DAY2-EU-DVD.exe

http://gsf-cf.softonic.com/ae6/612/.../file?SD_used=0&channel=WEB&fdh=no&id_file=319855&instance=softonic_en&type=PROGRAM&Expires=1445731540&Signature=OLkxcNj9z-CdYExYOLPcztgC2SPikB6i6d8Yf3WxCjRkeGjleJ9zLotXkgrFzR6XKXu5XPyXMLcrXJC0jtMbf0rWOd4BguJ9AkGhU1RivSZ2SPD6kG~C1T0vSfdtwO6Ddnnd2k8S3tXDwjpBiPtuYMDjkpBn3PhSAVJ9flCawxI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SHIFTPCPATCHV1.02.exe

http://dl1.nfsplanet.com/download/73530d7e334f1730d92baa6b5ce6f8aa/5256aeeb/nfsshift/.../SHIFTPCPATCHV1.02_OTHER.exe

Scan shiftpcpatchv1.02_other.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.