home

sai russian pack v1.exe

Tohekat

SpeedyPrompt (New Media Holdings Ltd)

The application sai russian pack v1.exe, “Tohekat Setup ” by SpeedyPrompt (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.newtourshare.com and multiple other hosts.
Publisher:
Kup   (signed by SpeedyPrompt (New Media Holdings Ltd))

Product:
Tohekat

Description:
Tohekat Setup

Version:
4.8.4.0

MD5:
d3987de102c13183cf8dadd564b998ed

SHA-1:
be4a114db46af3b5f0df3c517f0a577a903dfeac

SHA-256:
456ea80b15d94e5e4844dc7af4feedba2e1f52bdee165051650eec462a87c413

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
5/19/2024 3:23:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.3.15.17

File size:
951.1 KB (973,912 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\sai russian pack v1.exe

Digital Signature
Signed by:
SpeedyPrompt (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 4:27:56 PM

Valid to:
6/1/2016 6:18:59 PM

Subject:
CN=SpeedyPrompt (New Media Holdings Ltd), O=SpeedyPrompt (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217859832E1C02CFE81458CC264243B14E

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:A7MtbV/r2oxmgWeLEYb2VxnJ+cCkCMm4xQuM:AwX/r2YmHIMxY34xQD

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file sai russian pack v1.exe has been seen being distributed by the following 23 URLs.

http://www.newtourshare.com/q5OYyRhAvI_5m_jQZFXBWUoV8biJwk4RHjB6xC4TjA R5njQ16kgh wm6qfYc4 Uf _yxDlIkifbltqrUuB1s1UKESPBdwT9l90mG CCVX2xyLOQXJCDIlEheclnC dd R7GoSYe1LX3cpRpbz251OwmEFomdrr9KmNevQ7jBTJj5 SqbPCfrVwE0pX9HQc4CLTqDYY9XDbYhX3IfYRK4ILGHdp3plKqvUuY17egAAu50sZNSopFz7M42vcAeHrF_PQHe1in2XHHnMobwr_mlll9d0T_WkXLvRi7A1xlskoXIVGt79Yn8FpnpANdXiF4f0NYyTw_K3C5kNntfyWBNKLcwgZ0GRiCStPcrliX0hsMUD_PkeA=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://www.newtourshare.com/F2WT3rHtJaTE F4XMbDa5OI33HyvW_6I5N7AoaAxekElNVp976EeALuIIPbAt98lmMuipHyvS6lLvq7gqmzSPmmZUEoL i3w4CWfuDIqF9rLIHz4kD_1rSMymYWtP pfXEjystIpS4_12N6eKUQ5l303oADbviYZdL90aHaikq35gU6j 2q3f223SU7rA859UCHSaWxE_zs58oL5CwZy1a4qGv238gWXYJws3aRCkQOO7bTBbuAaEbhGiAPXplxbelwZjio6QvA4TryMgcdahFJsuXexf6 yFo5dQAwqar6eVD5l xVNLjJ9S_Ehm7uH0ThZOQPf6TN1GkdoIQmvEGF38DW_DFuIBPc2GuVoPCpRwG hlNo=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://www.newtourshare.com/1WGH4JJp0Iqr8fKp3pRLG x3kWRaIiYBzMKTf RWbaYq2bNz9tpXFl04XWofsHPIdteMOrAnM7gZmjxoW06uW24ZJAk0NhZvcTRxD5XU1sp24jllgXnAydsWM2KsnduYW ITZRG6WNL09RK62pyLK95MqFZxtlnjgjFvJnI4H6BbcN0EIi Cno8V3fArBen45XFsHq3WWvc_B5_AfjsWfGaRv5azIQooqSKoBsc1FUgqoQHIJ1wsJvCAidKlYT86sKXSGVNO0dJ2cVxaVS1s05KmVrMiEqPV2 FVIIipiWeLV6mTNSbPIW6DWbDCcxrQwwIKi0 WUIYatbQge13OjUQJpoQkBtGqA PSwQu9h20wl8OfYk=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://www.newtourshare.com/WVl6OTRQV1Y0TkRCMlYzQmxVV3BRSlRKQ1FqUkJaRlp3VVZOR2RWQktiRWRQUVVsVE9GTm9kRWxETUcxblNuQkJXU1V6UkNaalBYaHJRVGxsVUZWUFpVMHpNMjQyYkc1aWJIcHljRmgwY210d1prMURWVmhvVG01QlJsY3lRVkV5VkdRM2EzWXlkVTlOVW5wck9XMUdTbUY0TmpOTFNEUlVVblZYTUNVeVJtRnBPSGxUVUdVMlZUUjBTSEJxWlhvNVZUWTJUV1JwUTNCS04wRnFTbFkwVTNoeVlsWnZNR05GWm1oQlJXSnFTVGRMWVZwR01WSlRhSFltWkc5M2JteHZZV1JCY3oxVFFVa3JVblZ6YzJsaGJpdFFZV05ySzNZeExtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGNtOXVjM0pqTG1OdmJTVXlSblJsYzNRdVpYaGw=

http://www.newtourshare.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

http://www.newtourshare.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

http://www.newtourshare.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

http://www.newtourshare.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

http://www.newtourshare.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

http://www.newtourshare.com/WVl6OTRQVFZhVDJabVJubHdiRGhLUVhveVZsQmtVbkkyU1RCcVJVdE1SRk5HYkZkbFFTVXlRakZ3Y1U0MFVXbFZTU1V6UkNaalBXNWxOWGROVkc1VFdsaGFWSGwyWVZVME9WSlJkRUZaU1ZnMWJXSnFWU1V5Um04MU9HWkphbVYyVkc5UVExTkhXVEUxU1VVemVXRlJiVEJYUVZOemJsaHlWVkpWUWsxRE1UUWxNa0pFYldFNVVUTllTVXRXYTFwa1dtUkpXVGg0Ym1vMFlrMTNPWGxEYkhoR2Rub3lOV05QU25odWFGZFhWMkk1YUU4bE1rWm9iRFphTjNSckptUnZkMjVzYjJGa1FYTTlVMEZKSzFKMWMzTnBZVzRyVUdGamF5dDJNUzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VhWEp2Ym5OeVl5NWpiMjBsTWtaMFpYTjBMbVY0WlE9PQ==

http://www.newtourshare.com/WVl6OTRQVUZUTjA5NVRtZDRVak5IWldVMlVtWXhZVW8yWWxCcFMyRnVSRVpxUVhoMFNVUnBjWEpRUWtjNVVIY2xNMFFtWXoxU2VXaEJhWGg2WW01TFJDVXlSakJNYzFWeGVuQmxUVXh2YUVSeVduSmlZWE5WVkZaUVJEUlZRbWR0T1hjd1ZtUnlOMkY0WmxCWE5URndPSEk0U0dkUFpXbEVlRXA1WVc5dVNVVlJTa041UWpscFpXcElVRzVyTWxnM2JHcFVkbTQxWlhKTFZHODFRbHB2VG1OVloxRmtiemQ2V21VbE1rWk9SRlExTUdsSWRUWTVkVFVtWkc5M2JteHZZV1JCY3oxVFFVa3JVblZ6YzJsaGJpdFFZV05ySzNZeExtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGNtOXVjM0pqTG1OdmJTVXlSblJsYzNRdVpYaGw=

http://www.bitsuniversepackage.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

http://www.bitsuniversepackage.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

http://www.bitsuniversepackage.com/WVl6OTRQVlpET1ZGMWJFRTJWRzVhY1dGWVIxaHBlV3RJVjBoRFFVdEpTamR3VkdWNFptcEVSbUpZZEhKRmNEZ2xNMFFtWXoxR2Rra3lZblJQYm5wUVNHTk9ZV3N6TXlVeVFtZzNOMnhSZEZodFpXVjVWa0o1U0dsbWJtMXFaR1JUUlV0c2FIWmFRM0IyZVhaeFpHVkpiVzA1ZFVnd1JVNDROMFpYWnpobVRDVXlRbVprTVZkcVpEaEtPVWhHWXpkSFNGTjNNMFIwV201YWNUVlBhWFJ1TUdWaVdVZDBRVUZMVlc1cU4xUmplbHB0WmxWeE1YTlhXR29tWkc5M2JteHZZV1JCY3oxVFFVa3JVblZ6YzJsaGJpdFFZV05ySzNZeExtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGNtOXVjM0pqTG1OdmJTVXlSblJsYzNRdVpYaGw=

http://www.bitsuniversepackage.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

http://www.bitsuniversepackage.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

http://www.bitsuniversepackage.com/WVl6OTRQWFZLWkdsUk9IVm5XbWhFZFZSSFFtaFJKVEpDYkZCd01XOU1Zbk5OUlZVeVkwZDZWRzVyUlVoc2QyUTBaeVV6UkNaalBVSjZTMDgxVnlVeVJtRjJia3hxVTFocllVOVZXbkZxZWxSTFZqWm9Rbkl3Tm0xeFFtTjRXbGc1UTI1SU1GRjBhMnBZYWpnbE1rSlpKVEpHU2xoWFRXNXZUamRPZWpremJXcGFUSE5OYTNSV1ducDFaVVZVUW5ZNVFuaDFNRVJaTjBrMVpDVXlSbkpqSlRKQ1VXNWFWMHN4TTJ4Rk5USm9lRXBHZUhNemNHeFpVbEJKZVVKc01sQktWeVprYjNkdWJHOWhaRUZ6UFZOQlNTdFNkWE56YVdGdUsxQmhZMnNyZGpFdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdkM2QzTG1seWIyNXpjbU11WTI5dEpUSkdkR1Z6ZEM1bGVHVT0=

http://cdn.zayatsdelivery.com/WVl6OTRQVVJxT1ZOVllUbENNa2xWSlRKR2RpVXlSbEJOVmpkTGNUVllkRms0TUhwTVFuaGpVVTVGVVhGSGJXbE9TWEZKSlRORUptTTlWM1Z0VTFObVdtYzBKVEpHWW1ac1FrNU5WVUZNYTBGQk9HWTVTMkpMTmpGc01tMWhabmRMVDFCdWREQXlXbWhtUzNOT1owb3hiaVV5UW5KdVNGTnNieVV5UW1sNmNrMVFSVk50UW5vMFYxUndjemRtUTBOMEpUSkNaVzgxYXpOT05GSmxXWEZvTVhaaWRYaFRUME54TWxSc2VFbHJTVGRVWXlVeVJtaFVjRVY0UkhwV05IcHBjV1ZLSm1SdmQyNXNiMkZrUVhNOVUwRkpLMUoxYzNOcFlXNHJVR0ZqYXl0Mk1TNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ozZDNjdWFYSnZibk55WXk1amIyMGxNa1owWlhOMExtVjRaUT09

http://www.bitsuniversepackage.com/WVl6OTRQV1V3SlRKQ1ozQmFhSGc0Y2tobldtdzVlbkJKUTNaYU56UmhTRXQzVFVkUWRrSk1WRkZsTm1kTVRFVXlTU1V6UkNaalBUWTVObXBNVkVkU2JFeFBWVGhJZFRkcllWbGtjV0o2ZVhkdVpFeEJKVEpDWjI1cU1XaHRjMk5pU3pkblZEUnBkMUZQU1VsSmEzQkpWaVV5Um5oaUpUSkdNVkIyZERVbE1rSnRiV0ZVWjNkTU9ISkdiR3hsTldjbE1rWjNjaVV5Um0wNE5HVjRlbVZGSlRKQ1JrcDFkV1F3TWpKc1dEaFhkVll5VldsUEpUSkNhVmxJWjBGTGVURllXR2RtZVVWNU55WmtiM2R1Ykc5aFpFRnpQVk5CU1N0U2RYTnphV0Z1SzFCaFkyc3JkakV1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbWx5YjI1emNtTXVZMjl0SlRKR2RHVnpkQzVsZUdVPQ==

http://www.bitsuniversepackage.com/WVl6OTRQV1ZxZHpBM09XZFFRVGRsUlhCcU1tVnhla3ByWjFOUllYWnlUVlJEVnpKS00wZDBlbFpJWm0xaFJqZ2xNMFFtWXowNVduVlRPVko0TlRGdFIyNTBUVU14YWtWTGNWTnZUVWMwVFd0S1NsUkVNV3BhTTJoWGFqQjZlRXA1UVVOUFVGQjJSR1prV1hWM1duZFZaM1puYkhSSWQyRmlKVEpDWkdaUmRtRnRSRXMyY1ZGMVZtMXljblY2VFdkSFpuZHNPRVJUVDFSU05qbEZja0pSYkV4MWNEVlhOVFZQUzNkdVJuVXpPSEZOYkVrMVRtdGFKbVJ2ZDI1c2IyRmtRWE05VTBGSksxSjFjM05wWVc0clVHRmpheXQyTVM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1YVhKdmJuTnlZeTVqYjIwbE1rWjBaWE4wTG1WNFpRPT0=

http://cdn.zayatsdelivery.com/WVl6OTRQVFpuV1UxemRUQkdZVWczTTI1aWEwSkRWa1oyVUVoUmVtODBjMlZXWkhWVWNrazBhRmRZU0hGTFRFVWxNMFFtWXoxclJtUktTbUpaV1d4a1RrcEZVR0UwYVdkdFRYWjJTemg2V1ZSbmRrbHNUVzgyUzJOS1dGbExNRnBrTWxWSGJWVnJXWE5IWjJGTU0wbHJUVVJVZFRsMmVtOVBWMGdsTWtaNFNESjJlVEk1TVVFelRGWlVZV1ozY1VkM05FdGtNMEY2V0ZJd1ZYVnFjMHBVTkhnbE1rSmFSbk5xTUROc1lYVkdSRk5qWm5ZNFFYY3pia2ttWkc5M2JteHZZV1JCY3oxVFFVa3JVblZ6YzJsaGJpdFFZV05ySzNZeExtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGNtOXVjM0pqTG1OdmJTVXlSblJsYzNRdVpYaGw=

http://www.bitsuniversepackage.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

http://cdn.zayatsdelivery.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

Remove sai russian pack v1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.