https://www.virustotal.com/gui/url/51acfb2159936a06bb31bdb9f...
https://www.virustotal.com/gui/file/038421636df34fbfc25cdb92...
it's got strings in the exe from RTPatch, it might be a generic match for that?
https://www.virustotal.com/gui/url/51acfb2159936a06bb31bdb9f...