home

sai-rus-pack-1.1.0-f1.exe

Tohekat

SpeedyPrompt (New Media Holdings Ltd)

The application sai-rus-pack-1.1.0-f1.exe, “Tohekat Setup ” by SpeedyPrompt (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.newtourshare.com and multiple other hosts.
Publisher:
Kup   (signed by SpeedyPrompt (New Media Holdings Ltd))

Product:
Tohekat

Description:
Tohekat Setup

Version:
4.8.4.0

MD5:
2a5a5e354f9b0695fc2c9aa263744935

SHA-1:
8c96ee57ccd7e29e9a3c4c403f3f46b42b561cea

SHA-256:
261395f2b584316c1b4865aad4c4e8de7ed8faa4dcbe58857ef45093bad6ab3e

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/23/2024 2:28:38 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH (M)
16.10.20.12

File size:
951.1 KB (973,912 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\sai-rus-pack-1.1.0-f1.exe

Digital Signature
Signed by:
SpeedyPrompt (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:27:56 PM

Valid to:
6/1/2016 6:18:59 PM

Subject:
CN=SpeedyPrompt (New Media Holdings Ltd), O=SpeedyPrompt (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217859832E1C02CFE81458CC264243B14E

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:p7MtbV/r2oxmgWeLEYb2VxnJ+cCkCMm4xQuM:pwX/r2YmHIMxY34xQD

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file sai-rus-pack-1.1.0-f1.exe has been seen being distributed by the following 50 URLs.

http://www.newtourshare.com/EAlITxgqvFAYX_AfQkiihvZepTMTKYICiE_o8_PdqEuwwrudwVtHICqMgT50mxsVDzkrbhfhI6gQtsCAOzTabRVbHaVvl9eR1iTBAsl2JhIujz8NiVLexl2f31q1LDEY7WGYVuf22 p2W WoPjg6w94zXf32iGDHakIQYDGZZ61BhlRi40vaUE_8WTeAC2PgF4alN8ok8WjSYbXgResC3D 9laJ7A7l6839h8axGRuWpwug2VoL3n4Qmw_AZpAzZXS59pnyOomC62261kNKxisFFplwnrp YG0xZSHUd6QNFMybnFUTiMj6FpnXhCUolDk6LoxNQJySnVvNdy GJL1X8kodeAidG0bRSNL9u7_ADTMC_69I=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/KetJG8 xPZeKDQjqN6o9kvE4J93v7n_lFFODyuoxtrpEjkVj95Dtm5kYKdgo9sooT_1Bgwwj5oGke7woLgmQFuPYGZCelZq9fitYkDHPR JCr gIsj8QgHiTUmv35L8bUnCowed7eK8ph8Oj0EFkCmqrErsVvkovmXPP6TDcb8JcPDqQX7LV_ME9JgpDzbIDrd3BKXZXOKwAOn4FMMOaM naimgwLmGFp 68hKfDMoNIeyCA0Mdv5c jEjihNMcAH8e4sOJYKpThTN1FhdxgWzBPbNLzWV05pZOP_ksk9V4YbBDAhEeUEmYGwmJbfQ SWwmVh7dkPBgaSkje6odt6PqyYFXDPEUG2q2Cl38KDVtcmOJlSeU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/5MRMPM6PPeoKuVbx_7yOC_DPQtYxc49ZrKLFjcR yL4sxHR7mD6Yd1C1PCyl_ISmI9Z4RC1z9xRPGJOR8FTnHpTO0YaM E 5g BWJGlNN8co0YNea yMowJyFOE1EV9dZsp_f82yQELlaV9Bq23UwFiHviuzETbKQhJ5KLNUC1Wexs8xA1sIrSELr9FLAN7y6lyVviE65y8Xgs4dQQPFx6ATuUPo ubl1T60gVtvDfcQmuxyrp1DsjnaBR42WclpHDt5u a7US7WzBOMS7BWcm6CXxuAEjOLoYe46sz1dsqPS0SGKgUe qHWzvoB47VH4YY31c4QfKcFuUi4pIUIq2D7P ycMrGD5oFZvbfJ7dVJfSELB9k=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/4Oa9ujBRXQwmXg7CkF9qojgdznkwI9aNvvmcfumZSc x5vIZQDjJnJmIwgGXxEV7aSDnhvC1413 Qt8hAlH3HEqeK5HxLHTNATC ZYiG6rgMpy9 uuyL3FDw12gv7KpZrmo wiob5 Te9r5hh7drG3FMLy5RUye9kXAEOGw2jq8v0igXwzba rx5SGXPlKmXWbfqQrbb2a3Fkc5C5FUVEau8a3jcengr7xVX25wTCCoFs6S1s7 MyaMbeJG7MLOEyMBapih6OuXZOqM0DmsbQ1cvaHoRe 7Q2GrKwXlFj19m7cxYv7Tdkg EOEFkxlm7vxmHv14 i3UV5PwMsG_vbftGbVaooLH4YR8zHJ51ti4D1r kzF4=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/iXv_xrC2bNPXD4WPOXcs8Ju8hiGWG67EIjNtxd12MwJ97c5KGoBNfFjEWa3nwH7sFRo_ZmEOe K15R0a06fu_VQxasxp AyvMFq07qix8S XAHmnUOSWf5_zqytK5LSfdGhtp hGNrellyRD7KA800khUtbSueP1NytLZjcjTXghAQuy61iChEwczpNEd523hnsPHwW4Xi33Mf7tiTrRIA NtCdeAxLBBhZ1Ltamm4nPo0plQeK1h Jc7teg6X7AogkA_wB lCyQPqdVvVTgmRS179jt5K7plSJiq7_m24xGnLlZv4bsy2Yy4DlhpPWe5gres56HQTR3whGha7MiWU sfzcaRULGLKfIh8XnQjaEINPi3gE=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/68FbfyP2PfoYaFr1ht8A2WSufflCoolei1hVEloYzGt47G69vZMAqBGDGjt7aU4_f4XjBY7gG71r476YfdEjW8pzKrmMEt20 J3P4E47O2u6hpvIj6YXgdtbdzfZmAa4xUXvpl5S7hLocuUz6Q7vsHFK0rL l2O4PS5Y1kFs olKEME9pAYuBiyhrV_JdFR1BIvTTL5qjbFaHeUpRv6cgSuQLlEOCkEnnwBZzFwaKARUD3y DX_5QvBHBoqD0rLdiqrHUVH0Z14Zt6TRa_XfVp0LDwF_TbcjY_2NV MgJ3MOOU4pFMMErmOLZJfHttrBx7rP gjUqSUyzdyg8g33eeW67tx_8GknEKKZkNPNDu4jJHUpumU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/qMPR DO54hY9qwHLdQmXKAAWeUhBZ0tNtKO3kmD0wz10UMlg9zlePr osEQscRDqGh1NAilSN0d2kEHPY_xeTppVFuXK_Ef_mVw5 z0KV3JupYm9G9ooGU_AX6A3PxaYf7IFWYROql_esyN2NuVog3P7xTjwgiCttkPnUd0dwtPYbuBou2M8MXvnjSRz2p6pJ81XbTGqFXR3yoNyY6aFonwnuFvBl2Z5kwDH4EUFEVPoB2MX4N5TXtYvULNy06HyO_8_JU7gDUyFeOtjNg1pqMIe ocDdt9SQkOkDJkLkivzYPR6DQtYE84hSGCt9l12zVRp0wz0d6TPL5G XjBj3Ka47TjB89uDypX6epDxrEHTU5yEvDo=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/ B9EzMDxFpGzsnEzIb01G TRSYzKLiUccCHanU282JTja_RTqI2SsYODM76tWSaJZ4Y0TIBswq3LHrUErb7sK5mscoYYTST1GoykcJoGyZ8FvuLiFQMTDD7jgm45nZcJVP4eYn7h s2f 4S5tcayQdgWhOEvNENW2pZQG5wMdsre dwOtZXSHbqGYKCAIGiBYWK4zlfz7uSg6saqUSHrIFs91Xrchb7noS7WFV2kBMjPH8Su5xJS91IY3PfHkdaslwsIEu54MDMoIqLXPFIxJvnxpe3PHeFMdR3JSYmVisJQp9nrdocrj Eqc J ODlntCrlxp9N_qHockDcP5Thn42YUaEW7oTCY0cfR_UyjSzYcGFUkPg=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/GXwOXpfqJQ4KZ9Hyx5pusloM Azbt_ Rj4agVzisWmpeD48uRW_OvFSwES5in18Q5qI1vENK61F6mlgj 970bey9njIovy8o1Qb2pRPrjd66a8h6DRfwxO 2LJ7l81sgbrWKP3naqc2m3EZADnb0ufIcBDpe1c9lVs0lmzUP0jqKko9a7rVxEsijkAkzJildTLRvHXoj6M Fw9JWSVFr b_X9kqZ21YmF4GYFO14DgjoRyLIXuaAqny6KBzsh2rIR3WOOzHG4Q9Gs0f8yTF6ziU2KNCtDI8vNQhR2SOKCnxrze9CYTbLrG50nlqy 4RUcI1gZlqYrG0a8pUhSQmWU4smW6jt_pCSrzU0lv_VRg8j4NS2BE=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/0Zc_e7n4zkAU41bkqqqJDi3LvjC2hBfncKVHisdtDpbaOM9Y8vvBW wRXVP0linppP_GYrFVU3wkSTypHd602pNUdAeFGNA6ltG0Ra5PO07mQN2z0C53643Hb i_9ihRXFsirnNbF5LuiOjqWCCzoiGbM yau0_sfR3_ qZwoepJ0yWCW0zKYeDnIHll1iH8m6Eom_ZYZvEbDjnpRi4SI6_s9ir0m_EjWGICt__cp7YwB1Jwn2mZLA7wi9TkQaHU128_O5m1jUiqiH2ysAwt21MRpNhxOX5W8SOq63ZBf5_mvkMtcKQIXPdd eZCO Au06vEUAoykmRTGB_JrEzUPD1YGztRZFoeAsP7LwicYw 0Hs1QcyM=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/sz3obcL_XUYHkFed5NxnI1Ka6XfCZKuMQMyi4yRwZUKPDPei C_T BB9E_otDq4pau7uR2tztteNHQ IjkajwBe3e WzgGnJLaHOas1s8EcWcvF5hYbUhMVrL6kx7daprkMW3xs ocDK56_9tzjc51Ie4cqogj 2Ca5jcdIbcFKEA30tQIB27_iry2gQJj64jb_ArGJ7uAnxMsrFNwC8q0Y6cGWrJtUGvdzM4xwafcUPsCfsYA1HHXVnhVy20q5PbWvod0zZfMuq93Qj12AYrU_xW2Qm_ cb2wlABW6Ozu3BdQjpTHCwyvjJOdlc9waAvmArGH8tvwM4q5pm5HZOoHLAQ9IhtK MfxztVp03K8APL_DT0e8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/poVXjtYtgwq_juJwiMVTDU2IyzkM1YytP7 MY6mtifqGrSCc5Hmk2FjU0s54jlUP6C9ARcllMabaTOgKqVrKnCPElpYNNgUHYsMFH72R0OsVEcezOsd5d_yZsYKOwfbuY4A76qLjkcJNxn8fCdIoik7BGG9VqcyHt2s6JJ4o0BC6F Vwh1OsnMGoltOSq6gtDeD3dc6pJDd2PHyWgQwoHODSB a9Vy4VJ19pj1WWPZ C1lj26ckphiU1isI8xiGH R 0z _kAqYl3KQA_rqUCYL16gir1Yn mKQlDcvqC6qX5p276tl0PdLqIRRleKI0LqmXUMmoWGmCcHpHYzSzXpTBgKl62DsuZinF6Kct38tE3J6brX4=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/PO_PR1h3FI6DX6hTmuO_1CcEfFs50C9UqGO1qPePrCqXzsITMb4bPDq6EK1XC5 Ffyy5iR4ehEMCWCVVNgxFm2XbBk2Ga6htNyghs64QZambldXeYhKresttW83ljfDLeF59ZckVAM57_pdSbATbbV7hYDko3jm925C F LxxgSVMhd8sruwgfOG8bQXXQvEQBnywjzD7xwcSAlnBD4GAawLrTHGZZR1wqXAAh8wtl9IrYnzi7oCkxBI ghdXF5SLZY wZH OZuOR4sEoAUnOTDcmbsXDTqdiQ5lwzIl265dbWhubQm9XiPtz93YOHYUqQcUhXwsQIaITMZXYLU6_6VFr8Pw zIlJptdcV_lgCPamNaUh2M=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/mra5nCK88l6uirvUpvqZdUvKdplIWv8QdfPOB TvzTqjSbv7MoC96lNjGDhaVUqrKAsh6GqIizjbwZfFG95nqmPjMAsZOWlys6tsJxZTvqvPAjTElDRyaKJJkBdFnIzJ0iVEOMK3jnpyMKlLJmmxzroSRVPOaght8dIePltjfNgeTBVLMtFgDsTYKy8Epb9mCvdp ZjrOQ4 ap2mIcAHRcko9NZln4Bz4n8ybr9xvSNfK1a9xI xU9utyvyTwlAkPnB7OY5KHJ5JgP9yhPU1F08XjoJTwQ_aK1zOvhjFYChtOB_grEg6fhUMMjEf2QlbtSO2gDuwOwFzayLOvIj9XfNNBPVerwLbvSn3f3OMXMfOGe8y6Yk=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/bD30ZhDzdXL1vdptAjosHKUc_5pOPYI6jCfzp1p5tWu5nc22lBD3wooXRYTlf3ZXIdpR3UYsi0HfKiU2Duxlmj9Xomo0TPiYbJBbFffgksnWzceYQ_VU5PbqVEnYz lT7wkORODX qtGUCDYc2LJPxLl5qeUuEuL7NNZRSSGGdHACik6gjDInypm4HWQUOAc4A2BHpbapRQOIs6FIs4NG1GGpa1YpB4oURXdf_epwEKC1KYc5o1MiiniEayfRneQcgtB7QpU4h YtqynTA0tbQtGOZk3nDjce145k_myZ5awIrDfbqd8hdFpnQ7l5pzc3V84QZV rCOwVgmkadCz71USJMVvFDXr6LMwiKPJ2Cvu2unfRuo=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/SCgGnH9eehik6CL_YKJrH2ZnApKQ2JbasxhIQ8v8vmedxtJOcJCiquQSi k2 0Q48I9D32LQO6dL5o3baTfJHcG2PQM vojRcOK2YjNjXWCs35QNbxZ2jNnnYivFFxppcurCpO4eenH0VDzUh0DGiAQJUm3yhK7QpVfTzzf2mTGF3mFdm E0IJMeZe7RuWayhAbcaNdw9DaPhnCXr3DAweeOWF 8vIS6lWgz4v5MCQEbqyLPiXSRgLjaHNBtGGfHHWnvFurNVyft6VBsk28tBkW6Oro8hjuxWHtQ5eByvVgWhlPktPUgxoRII CHaSntjRe K D727_OUl6yIN9JBhsnYHXUGLzioncTBlrMvvOBM2ozPfo=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/s1iDKb3kN9jAA4Ud1sNJ8icyUKQqErro5TfWwZH1h9vTBJAiG9yhLKQhRDmMQ2rtxb9y5r7s6RaZOK4kv_jqyNiZLsODYpR3AMLr_0EmyVNHZwuMDrpHGYzROkUTsqd0asbvSwBt_bv0ar0odvc1WDtsko8WXYp_2BQ9D8xzwtLXQIKUeAudc01Q_RjheDekKTI5oZJc74Ms iHyb5QR9pu61tbSbpfk4mddrSUbGXf9EQyXfzLHrYserQiaM_8br3HAolf4QKYecknzwmkBCKOljBbvTqhleSMdDzHd9I199XEEVPMlXBY IeoHD4hq5KysbrnKJKdUO7eQUvzNy513KFM xAMSply3OuVOJIvbGytBJB0=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/w5hTEWE9dlIKwg7VuhNLtyRBIeXdavjilhviTjfvIko_J80ozA6Qs3ZlyfbPDzOzsat5PtUn5Gty6Iq91UC vX7RZodTX82MnkWIENqNoKhQ92oBAPi_cb1_b5Arn0Xg_Ew8hJj6zI4L2QOxI5fyTsEaKlCB2FpZrwHQnD9tUxcz7e4CjpUZduLDhIa12mHdVVaQCpY3IiZwYtI_RPreFJgZxAFR_G HJX5glfBuxkgABMykwUkM0wwrkk6eWmo1t9XKlx2_1bmgrFRRb6BoCReAEKA4YPO9vuSWAN0H52azehYxU0mmda1byR6yDjGxf_oWy8EAmPXp5n wHxy5BnH8YWLVyet_q4F5kvNMvmfsgsYv6sk=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/EU dV0jFe_uzkhMxAXqeeSI6aYdgK6JCtHl1kwHiDx4n UzAOr6q5SKCWBcJu7MivLlKsVm1js4dGtLf2wI9UP2Xr3PqLR Mry3VHvGP4wYUpp6m6BC5_fi4YBzJ4uT4Yq_WyMjzurqNA1psGpJ2xZh8DDep CtRVXuOOEjYHCzFP4mhqA koVKeAB puoaqKOiCY AXHaq4s2TdBpqOyHZTXhaKNahbfvBpAdGNqOg_dwExyPdNYwY1WFlDWiIUjb_61Wpk2u SSiNtaa8I3Owln2O8fOpM0QwzTyi mUL4DJXV nbEJ1UsxcdGpKCNUAeWZUTLCGzhe8UPBKQfb2frACpxsVY7BzkYJdXjIO_thjEyt8E=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/tUvpi_d2TbK3RUFg7ENUTDFH7FLiyZUb0GuWFKLhIGhRxQkaZ5M0ZdTyFxs 40bLaDlsEEgC3V54kT3y 9sytjx 4RdUnVFt3If8ztcmZhOBkkxQDOZTuRdggz0jqAb6j73vNrXFrtq_Gf0QfarbN1FmScytQUSp _0VnXBo6Ad6mP_IyR5D9wGcHecYo1MWZq6XvgK243OMK_1jnpq1TohEvq8zfFxAYYHOSmRxm56GHnTV_2k8Ko fL2pf6W29WcRuvxPk8uHKAEwUKs7ZIg8Gwc8ofZSeuX2L3uEUS44xDsqObTf8uBuloPsp036KGqy_rAeg0Vv9vWRZGMf_vwMxPUYtMxrwtdjc4lRs1uJ9 jweR5M=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/NPOVdMdfP01ywyUItZ F2CcICSWmEWCFRBtfgUnhuH8if2fBBRBwUIl6PF2DQ4xBWjIP7kc5NmyGbFlzQffGtgapT4GeWKAaxU4_NsBNnrOR0XJqLg2hNNN3dWR7nTSQSHQeET9l03rkQRVAudH1VjrmynH5cwFRYe8DZw50tYGpofEoilH6e5J6dNSSAJJch3qi cIVwz6hvMhYpcCl286pQGbPMXmtBKOMCxagrJMofQ 8Ps3vU 2hl4jj3Udbhw2pEydQhjFrOERXqliup3zcR8xZfZQJH9fg_nXR4Gg0csQWDiIguNwYkdd68 uShmmNftUAnoEapCtYpNsjTRF5oLWa514hzvhkXeAoYmOJEyoMm5k=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/ZiG88mFcaz0q5e6rH3tfTJAAyzuQpAVp1tD4hS6L9f8JgltfB7izdCHvUH7R9KrH7yvMkCTK74wTh5fM2GygQ8oFK30DycANWPwE6JpsZK1xtkTVAju6LCs1m9Pu68ES0wjRGxzwUnr2APkxgYY7g3 bjZlyVYtCGeL8FL2yJMaqmnYML86Yz0ftVXEqQkYIphzEdySwTpL1FJRU9RTWd3k ZEVaX7iESLgfO PiACIBIdDmXb2PZz0GvzsUOQHGs_KBKcPlzfVOMoTK9c4lYObYyHYXHC_59ChnXxl9ZUi4w3DPK8 a5_41WTXuIjmIU7hsuYYs EF8XBz8MiumApi4uE2l_9mG5OE4D_UalunBBfpoydc=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/VZQFX8gkLWdhqfPzwKTJjrmujr5k47iF4scE4mOsu6vm5cCxczMRhT02IwJMqUqCDlRdtrFrISOk73O9N8ss1untpBXir cSQ8a_zakvv9sxoPnXX0YyBXSEID6FbXIcGg8RmDFk sVleEdPUKZR_mwnfFKnPU7gmNpULbtryI0owOUEBIKreR5Gjmyvn4Lj2ohjlzyeLSXmJE6vs0c94IR6YbWNTbYGKaPZ6yAzWr79RTSn7QZh0v7Njc zu5cXOgbTZrSSFZAz1JMcBXNUWdjUEBgl4tGMR1vkqJq63tjs_42Oal44sSP36cBO4SlqQZ0cQsOVj5zy7NFdMqAlrD54x1dkNyl 6gy3GtDFRxNiuQpgld4=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/3J_6E65fCwtdwDKwUKPosFPseik3tAoxyZzZlq7_LkKh7LQIqrCseEiH2 ziX1sJN9MOtEhDvKTkruvqnxppUHsra7xaHxMFfMXYkXFcsKS2h7CwvRrQKuY8QdRLjmZ1pHsbNquy3ISnN6wehPk2puPDTCgF1JR3irdstQLbkbnEuWyTX6SzG1yWUqTSjsaIImd0DBRWh5R5iHn4xcRkfDqRvYNruVjv0JeD4NY88 tp4K4A3vHpx_qMhfHsT_WNPjtGfjyvL_5zdEvLXVlohOoCCQ_e25J8I68 skTo6MzjXBh1nptJBCBVjdVfi6HQ0PmO5L6GLDGC0aPIdSGVQm0WrlbOrTZK1dUfTY9fY7W07Z289A0=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/91sP2jqX51dwp10kI49zsdicVsYIKHyfV7xIy5fFTsOfnDdd5Wc6NBn qn7yhELvBD9C_gzwN_Wn1u5H3RiDkFrwr5ai_Lrl6IofCK jHN7KWB7iDXi4QweykLs9wxVxyvekSdC3PJVEzquD4QpjD54kxHF9bhzKebaunqUWYzCChi5Wj_Wzqo99ZwJ0b ss8tgJggBSwHu6FHB_uRgKcqHkxKxqNiiYxje1KSn4gnCiMX lQ33SyFl50F1f8FiBYd cgQr GoWfehLXTxNgMAO572oFU8Ig2g_DInJjrhhVoWSmy33ZQtpLYaiNWOSnsvs3HMRoG_vQZxb0sZOZfd75ZNwbvG0h6NK80FAWfo6gjML4lY=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/sIqftcjQZEH8g9iYg_lPZUx_5 LnXB9ARUVTR2nkeG7d2AO PV9iZz47Gsg2FuZfBDg8lI3gPqMXfBCtWIED6sWx0sDnD12FTtDK0DqlQ1xNlD8xjxXAtNhpINAZIiEyKfx1cWfyMajoMzYX 2bmfZyka1yHJHqdhcHlotcvMDm8Lvmcu _3C3RbnASp Wt_W5fAeZizTwasmMqlOYrFQ9G6h1a6DCNUNGBYWCHTh732 dwktAa_dbxQNvMM_5GFf9cqzE44ra0tnvAIV0EOIv3E80rWtEw7qssTlW_qq9qyPPvq3tU8xCSrr4wI BABDVU3TJlCU a36H E_PvoyC_BYj88mBKtSJc4E0epG4QxmHwQGP8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/ylDIcMh3Lp96EWQIzSo9nMS3W3UFCfpjnk2YunL9seW4XZnszDfVifC598rT3S2_jsr7dzmH5M9j3tDjQVoxfdPey0Rv83aNClXxdVa60Vd THi_Woq7kGAxtmo_6BwtoKa I_8AG5lluLBu251dcofV5 HAyROXQvFGBY4TOa8E8OENiF4vl0c_fmIUZqb3B105tCMfGC3boZhlWTvADS8ZIRweVO9iEenGA1qA2ON4hp2HTAS_vu3h kQzb6qb6Vnm1Qnh6ryEn7zn4GfjG55HfT8byInuPRm F0D4BbK6J2luyfThwcnKLryYsTiBVPKBIGfJu7IbO5lTrRA4YZV7e3pB_XrSYLXV8QXcdiX0YZDx20E=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/Dv1xWMe4M3XwYFSkOD4BrwN0Bf2zEuWdYbExhMSR_ojPhqCU QEamD_2JhTOAXQlsJZivhTr2FlyJzT1tiES8agOaO7CL9nko0gujhL8YXc9miHVhETQvHslGriUk5PELjmB1jB5MepkH9WJEUjdh4xOulEoPPILnFQfqoHIDKvdeZYIKnuXpwARnIkIm612nHTWwp_Y7YnVU_az 7zNIV51Kr4aLHjszUZRDTwONemv3 ulxF 5iA zajo74iuFkVlldBavRpgO NvEGqH 8q8zwapmg ZtOgxLFpcrmKNTR3OLcWlLswGBKDePayzCJKVONN8Eg6n_RvFMbKlk6HCpWLrd6 0RiXAVckpei_rY kR17go=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/3raujUjKxR0lfhVy_qd7qoI6M3OSTyTpJOoQzYLyTlUvIQTkNVrYLB8WFSbDjjrEFyXWTSoes9etgFPVLRMchRR5kGV2y3VWo9PU20Ex5SUeAWgrSKkKWp LX1KXyRkjYIZVIBN7ehE84oSdxZD1GwVIZ5yCAVuyV1KUIgXQlVmyCLc9anNlZKHt_TiEypaUHjNpgwdCzd5gqVyiVH A5JMj8Rlk8Ux1EuGMR6sGdd39g4XudJ0dSNuav3ykN1LOWf2cGaxqSFa0LeXGz17rQOay8APZM MEpR0U35wVw8KbQwaXY6UH9E1u_uj4tp nVUkTG23Q5XhrjFxFNtT_Gne qLxwkUGy1uRR MeeiWZPHoMPN Q=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/xyz7nak3HqFQ2ZR0Ao6AxKUm_VqNE6r96hBsnXJhRla2ged5340zecmWcO0XwQGXtJCFH3vny9LiMJGl_qJqPDOeWx9x5qxGyvYJq6WbHeUDfTM8YmYQxqIFutyYsFtHyL3w1DXv0e_r13itRxdIoSZ4IsC0o28BGFtRzHYz_ia2C6nUTm3g_6VNzbjXCTB0ZQYv3mtG1OXf26o8sEGdeMDDyg gczatXpFjSH4Rl7uZT_mbfQ3lqTHKhlmad 8LrbNCc7S7Jyd p3owOk_2Hy1L449799KpWpCh08h86Ec4lMteZ4YJarRLvXFsCRSq4h4umt SwkPANG o2mRe_rkNtQmegpiCTEGE2N7J36pnrR39dTs=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

Latest 30 of 624 download URLs

Remove sai-rus-pack-1.1.0-f1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.