home

sai-rus-pack-1.1.0-f1.exe

Tohekat

SpeedyPrompt (New Media Holdings Ltd)

The application sai-rus-pack-1.1.0-f1.exe, “Tohekat Setup ” by SpeedyPrompt (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.newtourshare.com and multiple other hosts.
Publisher:
Kup   (signed by SpeedyPrompt (New Media Holdings Ltd))

Product:
Tohekat

Description:
Tohekat Setup

Version:
4.8.4.0

MD5:
f9cc6ed4148b8ca4fdaf76b07483f96c

SHA-1:
b5fa54e254fbd5913010677dc2bdcb9de738e2da

SHA-256:
fc749d5910220ad482beb9861463e5eedfcf0911a6e749631ac4afb5dadbb4c4

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/23/2024 2:56:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH (M)
16.12.22.6

File size:
951.1 KB (973,912 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\sai-rus-pack-1.1.0-f1.exe

Digital Signature
Signed by:
SpeedyPrompt (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 3:27:56 PM

Valid to:
6/1/2016 6:18:59 PM

Subject:
CN=SpeedyPrompt (New Media Holdings Ltd), O=SpeedyPrompt (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217859832E1C02CFE81458CC264243B14E

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file sai-rus-pack-1.1.0-f1.exe has been seen being distributed by the following 50 URLs.

http://www.newtourshare.com/NyPRX1x72GbqVn7Jel9daJDDZt4XR8ZTYOWnNmVcWgG_8QRzGotucXUxY280EFaSSUmw1NOuD4Ya2i_LFtQDUSS5chcAqvTbjqOg06_xdYSrf_7l0jbQgkFN3uVo5G9L_7kFRNoGgPIhDS2Mgt9xu1maHhOc6qIhMdf7Evu oOth8tnu8W7ogHRvapm7Faw_ _u1 rK1tZb _acXpWXNOumeSVZTXkiV88dQysWhNvcXS8YgFUdx6 1MgDWKvxVcqxiWsJO06vzFKZdQByv2D12B35gOomuWZRukmL8dvuAYA22iSiWXCiAcR5lUAXQVnIurBMseD8hDLMYdRWjp1aUZoF4Whb5mbLu4bdyiKBxCF98ZJpo=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/xRxa6eEo3adlC38YgLiXr2PYoao3PUVojV69_VYXsZkrsSHvL5iWkN0Nk30VJ2f8rh5RfN0AQ 1A965b28HEdfCNU4tyeMjxzxRsGw2wliQ7llFrgUuzFV15AzzfKvdVgR0D8pHZUgIGL0oenDy Lnp8VH_6sc0bPzwoHNOHNVKdNvSJQ2evfoGci1UbZ_d0i2CeIjQgJurm4pRFSLsgtfeqMO AY0ipQd0f43mmOqNxZbb9jdrmAgZBQqUS3z00TQ1pHLMsGXHlb0QyP0B uTJBfWGO2qNRuzCWtWfTF4gfIIHETtBRe3On2U4cbsL01KZUV7ruYCVXhW5RMFbP4WSqsvpqkV4k2YUVCmdyCLM_CBE 8WI=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/ST92uwiRGjHisJ_pHofnrY0vlPWaX m2vA0eGVyBCwi9X YPQzzp ui Ll_opLTOTj24f4vP Fxsu8sXoJhk9o0YXeroBwio4Ok5LRXJJi4n4jrdLqQkiVydd07PO7DFNGPSI3WMcWXCh1fjBNfgW11JZc8cNKssPPENHMKK4cd8oFCPLa9ayS5e31wINHovPUyKrGczYCgdnNLgG0ka9y6saD9e1FvkWwL3QVFeV5W10DmHp19JbOJ_RVYc1A0yCczTANekm2dFWzCJSdXxoMJ UVavtgcoeB4kpow4Ow33YztfiTn mPNszMFLvGXYP9tUizFHuxjw3gbNK_VZiD b 9y4grNzFenFwOCyXSYEqigoWRQ=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/fNjkqhSAl_TBctyzb1HTvaIDt_IimDn uc7r8uOkrlbGhbA2yXo68lTBv1HVFmS2WFfjByNKvgn27BWPcmDlpOfT7X2vS4d_hnzS3b8xLOmPahvQb4zFby ZFJ3YXGoTVr2ekv_QVgfGgLRQz7ideYnqyCCkZbFk8 sLUtdw9w4NUkMTNs0wgTg0pGAruBRtn1ODJrtaFVZ8oPvXikxxPMK_yDDeAPy6_6AN2wvgxSLZ8KAE09kQTaEpxQ8AAru WN36Gmn57aAgCk99pEHehQJJmWs7OrnbNEg2E1kszDQMZkItudYtoynbOT6HIBayPSxcrgDZ9EZy FQkdQymB2kpDDGzy7znu8nD4E0we7JZQ34tvCU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/7TziH_CHms_I4bLjRCsI2ueIwe5 uLwpPYuZ_D_RJ1SaId5J8eoOTwIa1CHP8dczUr0bhK1qdrUBAX9_ibVrD3e04MlDpF4uozoqZNalTL0oVhdKXUVC yyxg2gnPteIFvef0rax2_ayjV4QDbskkQmbhMI02THntM61_TvSiebSyYQEP7rdCExL1rybaHkvOHrBCZ2 o3OAm59ZvGia8tLq3hJnMDc8lU_goldfYn42xtG8aPHXi7h4C A4emB4iqwvl7nbd6EJ2eqzWAgn9iJcxCgQlDpK_xh7flgX4zIIfHuys8y Mro50pe4bfR2FltpkXLulk1h2d4PlKHaDaS8PiTZItkMh DKhOEr75 4qcoRb o=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/rb8AmU6KRqNEf50Kc6sQhrPDZFgwCqYojyGRsSetgkHrwXIEW35oTAMyG30N7YNviyG4CX0fXR8mSgGcMwc4E1uNcmQcp9o 9o2bd4eNU8uRr0Ghc4NhL9PUGENYw5POCSKJb58iSToVk6PKNULFVBaN9TXEW5X5pQb4U1uAG GUBbWB2w0Uek5ggPu8KSISfd6T5lM82MYb aqcumeRD7KbYhBvhTicGubHvVyuWOAexCQrqEIJ J7BsRr2LybDh4h40f201zu SqI76fw0aVSs1Dzu3_x70MkPlHYfRmq4nkwIgNS4CvzuzhDGqtOtwQ0vvCtxTQSWJWdIMxy2M2HCfPWBUidcrGBJYEJ9Vg2rpjRjJ10=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/rDS7cQkZz_75pWGZHVukMsq0uPkq5qIJiaWHW5MV3uUaKMqW7brC5Gt0yJS1ePfGE4heBIlCaLpKNFBWTwtsiAcz0d_HkPrbmSQ4uK1_YQwac4epBhO7s16 22c1tIgzMQAaobtEnz0jradq_3T4XzoV2LdXpk uayALLOYMKyzZFxalLdyQy7OACOea9yAGghebyl_HZ2CkKKqjBTM69WPzc8B_dfKU7DhK24Q1BoT30Ba7HXrqV_Fl22skd72_OLwLdhqx4ObeIn scgDaYVL1Vns7xcoijTkQmobTB23OWjDps2IcrzzI6V59QSZEzlOdHuiYRbp0j4lF5TLOyq5idEKiWlpapUgnwZ_qu080xNernZc=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/3vH2uXodCwLjalZTKJjvblgMjho03kGhkNJlxZHkut_VBCLaASmafUPYJZUjHqm7l0AvrlJpPs2tWW67qnIshlG0zFvKVhD9N9ZKI0Wk jdMFVpeMsWUzar45eIl0pNC5QN2LEZZDFFezMD tS2fJ8NUQOrjbFBkzHTdSJzKUtT6qiHOtRQiOcBNSAMHHv3wowqbE k2 VFbpCFH0U3dRK4FvdZ_ZbAoXm4ljsPyt0fPi8SpoaAN565e6V6Hga0SrVGfGvJfOD7IMHD8zgkopK8Vtt5UiGCyD8MqmtikI4 c8z9rneitNHizWXtYS0hY5cRW3xhuqi2iIejzoiTsxQgCMJniRBde59p9m_mIrbFfDknKC_4=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/eRQksx_CZkdRQHt7bLOgpeUlkgUHiwRUOBA7qfsTQjdzmU9Gr7Ga1JaTGzcGjL8sdM8Yjelq Up1f5VMUG1 kOblsiNlz7uo7jFLg8pNvJwbGA7L4uiKI6zOS 9nNRZmftD3lmCphKMOkhj_RR3RO71xZ3ySWrYIwlpaIZSMC6L7uKbrA91QGmuekoXPhCaQiis6uVvmz1Fsfkauy4CHX50gDrKYCBeqcjDn89Su2nK_vERWnHBY ziSp2VmPkOap469XsPQr9iFZjXXb8uRR_OOdIW4l8dN5JA6IFsZ2VoheB4FtBs6TjgKpAgNBxY2C32gC4r2K_DQhnkVTNWs8JyY1LD_tA_Lf17WvWhxrtc7YnIBY5c=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/GmWc4MdDe5 1XoOMgknWOI_OfJNI6jJZSgOpw89V_ABaDbwXFMVUom1zLulpvtneLf5LhHPAHyWcYj6Rkgr uortm4c2y0ZKzx9keaXD8L9ksWH33ES0ew5 nbueNPtyUbtkCVsZJLKzAIRd9yLDPjPe0gnbluKlXyZWNcPjx1lpc8vkBuDYwOWNo LO4jVotf483H3 WRc1ESU9hEEjtzEwHVqDQU_xtVvYj6eq6uthhkNIs0df10Zy9KJdVVzb_Xb_R2Vhrzfis4kYvl1xMy0OMOi8UtpsTNausTV_cIleeSS2VNPSus4ppTAOHjvZcSoxIyxYDvzbW5wK9PMAqa fAHIXqwKznhyPtfcP5phJlrvjlNw=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/o_Vj2OhUn0ytUeed1tN5ty0K8bd8DIXyGgFJHzreIqEcqhCha_dPTxjI7OSduAT4lf7 gqTasvXouQHyXXzTJwDVq6izme5ygrGNJSwu6LA4LimYQ leTda_bEWLUyrRMFDzIGPsjktCLxqVJNEtSfJWeuE77Y5VQXu8O6iswJPjKp6GuzgFQUnUlaueo RdyH9EvaI OGyvoqa8hX4msZiE8CTUGDPnhKrnQ15Pthj2KWbYgcPkLVq9tccRLVEuDbS9tvfLRRgWrHV6ev3wJPApXN_hnFlDojePCaNo 4 fxTYSg EnUtQ6Zx7argDRFUCc4mthBhqcnhZjUY7aLfrdsKAaweXbofTH8fuToVxoEdSz8DA=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/hp0N7khpEY06JRqMtMzP6JFxyHt8HpgNpKO8lDrG1e4QrNAB1ocqGtOwyiw546Cxz7iQAtyYlaI_9DRJGfK1WtL06KuPUh3GLLdMDgkIMD9sK m7NvxfQL0mYBsD7wOCCxg5jfXUshpZpChrjBN N9YBn3Ju_tM3H643guOp LgfXm6lNe3oTizOfUUe3DbKwGoX7elma XTtFFfOhcUS5223Di7c0egprPPehhiIg_VW2lejsgdnUiLVNjTii UrHaVDTIISNfYccRyr8TAiD51vubFpZkf7GrgsE1KWcynXbIoWDqNKjT9yTTDKUx1qWKQMMeweMFXyF2WGqD0t1yFQv44ncydHsF5mhxtbdyajJMdgqk=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/tnPbTqci0s4fdEesybl2tP9CY49STK3GcEIbMChqg8SFqX24IcP_KVSdELnty_nvVVkQ5SGZZL5fTF4NjRsv PpnuZ71NRKeHk62Hi FOqFSg8_t58N29pZDJCUBun76tCR 35pa1iwzF4pCHPpxyu9RFryFGKEh7cQJ4sTSPSoduNmMYqQ4Va5 1s_RKRRqxxgRgZdCm7c5oR_hH FmtF HKzGXuZ8sEx8ST80g3ua7fhO9Bm5aNWRHhcjHs25qGRHQDjA8BLDIi2GvuXZNiuaY 8zdxBJPaWXn3W3pqnVcyPJEGxIT9tM04R7DkgZhQ1U0EiP7WZ7Ep9PuvqTHr 2p0nv1EI2G1hMmwHNaqwVyWZ4CHyQ=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/uSamF9hdInZF7dbUj6u1QjpSxvJh7c7mhOXGGaNTw2oll2n6qWWoSuUb9KrBovwWd7scXHnjyuNtQbWa8DYV7E8kU0SN 0Knc9ziz_gmLBoWKo41sLqqO5htD_0gokNuk ZwpUdfS6RRdTRrXWhQ1tJ9qU_ QVQv LQ C5wHE_yalujKVzSNq1hkZkTInv nhF7oWjgHdGoBwNe8OUJP9pv6eQpirJ0VGHuH7SVVgA9rF9oqkDqFbd Pp5vynBmhU1SQ5bbX3lsL89XEQby5SWGxpj2yRkBZJO6YXIiKCrCX2PtpMlhYOM43vIeNNbqDSZBO3yPD_3yd6_ha_vkjdCbw243UExJdtgxha2U6gs9e_ObzUSU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/v3frAVKT9eqHM9_9rXlaj Y6fVArcmE6y_Ef8aS4JCHiM3whh2WYNLcTRx1JSU68_FmPJV_d kxeDhDFz7BwKjHBJEmrVFTBWDN HtSN3pEoLCPz8wDFXKQg1nzLhQOfOYGzxqTdiqHhMc35lk289f47pH_330t0RRSynOvdQ7VAD3x27wzUFt8GqSF6m7buO2COrENz7 PlkPv3N9UbuFXzl76T qaf4FXy5e51ocOBxoMfFVUISPzXlPw trYGFTTmL2Ox7dYqe3opQH7vt2wYJuImwJ1FBzCz xpHji1RJVoOPpnwugPN8p PMWCEnJDeaQrlTKQkcRYF1Dr3y_snb4hiE3Ufo9n1pLrqyayZuCpAUnE=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/ZntlVBIh 078ruedh2UMGWIMMCi3z LoZ1d6iD648iVLizHbQ0ZWLRSxmJYzYiRIBD2AQoFqyahlPQc8habvH76t5j1faLI1FTvOpJAuT9ht2PvukwbcpQgCPVyyWkR7JDWBeepmZV7RUbDarKVwgAr1VRAqAGoUR3gnihrElmMVg1Czrza4mIpQFeDDjlW7YhNeOJikiMtXrpcXwqliBa3d P E3LiPzJmGpDgUy WzRHXXt9AM1d1ROvQkUZNTtBKwDXnptxsHPLPs2ouO_6cut1gvyO1rPiBgSqm3f8s0rFYHNrRmEdnTvyRsDDwWVeqrN5DenWvPROvt1cN2T2bz1HTT3QAOVKfI gIAIhGkhwhiv40=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/zxQFYXMfNnFZ4iP3QwT8yzYSkYYRbDMJDn VFz0qJknOIsN4 s OHveWZFmQH2QSMsClirL4Y37bEXvx7KSa1XAfv37dR77f3aDqi20u7R9hr5vbXpc8zhtPIWJPtjeSzo48zLXvUiFMqW01Rts9X_jxa9 o91EvI9n2ELUqDU5Ro7G_9gl4XTG66jTi wsnJh32 7nd8EhEp__pcMPf5J6okGahmuSeEpZP6ESODBHa8HY f39IcZhTapt gYdoNxkXofWsOW4RgIpKAsvXIAwzmhL1NEd6J66myMTad_xOjn5NdP1_gXE1xY9ZRe3fTDuIsnWxcv5C_ZdC6O X2rEeGb GrerziwitZjxq24nD8FIZIMI=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/nj5B3dpRtpWeYcRa2lSmiID27AqkGfYUUV0gfsQlWLwDXugXYDrahmpPYQjy0tVNI31pYGQgOY675w9Vycrlc61l1kUW6E0plJl x0cdVjc7sLsMLLVRrercSbfeY1Z1luGtbyWDxkFJ0EZa1UG2ePoA0l3npDyL5ycSEQM7MOi_cRP1ym4fOm3EZCzUqAynVf9KT9tDO_xs1QcLrKNwsHB4GOXov9MHyF9FzaPOX_hq6jnvErpJsx8fYOw7BsRQxagkTYpppMGqsSQw274myIpy5pmD2Qw2177Da2hPtHWRYb1S7fCkGLcyp0OJ QjEwImS82KLjhEWyjWaehSQfFgwtJENxEQDUpaGC4hzBlrUqTIOMCM=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/pIb4d5EmcSbg5l2W9c4skhZqwthB1FlKV4ospNgeK5CWnQt PcSj22j9oj1 DK0kybzmlMtWBeD_u_SnMuLJ149Kdb5ieUpdY0cpv6QPatD8 esgB5mIGXV0eP2vTQPJ5VnqR FRwxVJDlnnV1VkdFl1KxN6IwPTq7BpSo1Ju0ah9yjDIsCuhllfvZ4Ib_qgeYaP9y62uWtnEPg2fI_OLra_ZdtVdOFuAzrmjuD146g966Ok4osVc09VSenzJ1Q9HX o JN6ljCuah3PLnoDypWLE_4GgyQbOeAVycROO0LB4OEUyorpDbqx93nOP Ldz5t4GcgiMIjLuIWiUoOe_hoqWw7wuNry3Y FwD3Th QLOox0StA=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/pN0X1iYGqTLrjldJYw0I0ieQh4ifylj4gZSpzn4KGtXEcySV2H6wrJJdXJDyYbWpwxzqTLN9HGi7_V0bMhTEpnahSfPkVdGAFgYHa4i fuFM36ahm494gOkm1sraussGKph_QfAZcNKlAo0l4ulyQ1aiDp0JFA7v1l9tfd0SSm1bDbcZ52fxst14tUmnO_1zwdhHSmIpO0tHPLtLBQmbMTZ7cgRE3c6ACc6Ep59DuvIODRH2Y0HOlZ9zLKuU4etXaLROaW2qo8nEioyL Kpvgz__sz35blotE2mNUk2cQ8IhPcXlC5nVn3vExg33acTHPWu5e1S5UPh7kQZPhHVJT2VaAJkPtvSmY4Kw2ZksMFempGj26Nc=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/baAkZJSstHYSTNeKuVfIqZ6jbXEW6l6IeBICUsXxMlAgzuqFFggtsLwOdXFUbJLOr_qqHQ2UlF3lCDnkjPxzNFyJ33fxb0q1BGJpno7IjKUYMZs_i8lEVlHolPyyj2kTYGJOOktL1YTdoj8Fj9Ny6WBccGfxpnC1KgjI27aUH0cr2Ru2FskfpZbv0ckTEsawOITGgMHHPN7zacSZx1HF9ELAZkpQ 4M7dObL8QnlVFqvyIrHsG1kmuI88CsO7TnxWS7L8nKwywNK4kApHMjBVNpWmkUVHXrS_IRlvEl6rqAIx7BlwN_v7nOn1ArDMzS6AbNnFr7Thue7URg_ToTQOP Y0B3b2fYCCKV9rtdbqk6Q_Fz6SLM=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/4xq0d6zzcmFSa9M1gojhz5OoBxG4nWIyF6PTUeyzwyADxQkL8RSbBuPRiVrrD4pHYTAZpuNVR6rQYfv3UBN23Az2K7 Qojahv1wuwkjs8s05URFCz6an80aZpLIHc04iE8gT71fhepoB7pbwRm177AcJBGt2ssGUQHfTHd1N6ZZ1qcYOzQMMWqPdNfGsvFPdatrK5BvHrcYq1ijhK7Fi4w y3J4ghm_hbJMK u7NF4v1eW8vsDmUC7S7xmW8fjyvzjYB9n5AHCdoDtf3t8N3cl56hZfi nhM2o8IW_3iUH_sZU6fzi8VXHm2TolVzSOm_QJfdbcn3f6P QLmYIeOwYCwO7J nbEEPTYAUFwQ8jiUxrwuGks=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/B8oZHsnJ9vw_qcDaPhu Urkt9xrKgW8xxEb5qGJualZIrXDsIBweoXvUet7yK7OnLEoumMX84ABtEPtvuI9RtHkBuvTcNWs25fXcQOBPTAu 7NsynH_uvLPxJh29KG_pOmqa0yrZMaYidq_5kqYbMUVD5ArKoAgcOJk6EzqtJQQf9k eVJJFP61V19UjyWpgHe3 h39urEEGw9vcHcMnfKBygLTsjhZpXrvIZMJBwgCbU3GoFGO5y9el2OGuMMP4fD71OmWpV3I8C2 bC4WwvT6EDzBi0uQOBucX6HA3MjYoEPGR6SZn3gbTwPbofzCWCWfbHASqw ryl5XFMmrR9UXJ7WriKIdBKnvyTLc6XEOfrIt5sWc=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/AvOi9zVwJH Ly_TFM7iuEZNx0m 5fQerztDFxDplDLgFS7r5JlvJ7vooFQP6yht7Um BebTgcBt73893sOnbZr_FSmM0ja6eygUK8F0AuYyQLq31RJcoTE0B0OvSub5Ci 80O0CDejx6sKnGrfF_RQST1U4UM8seHEp7RaKe9rtp4c6uQeVxk_WB FAdZkcByQjWifBJIfC8iBfHRczOUzZ_0729Ijf3AHar79GmUeTyxkoDh9Ez3WV9PwZwfZHQPA3fIws2zkLtDnC0UzulUDnNlEN0JMIuwy6GkcIGBXMUJJSjE0T AqE2WhL5rZ0pNwgY8OLHZpAT0n_3fIHTHT 8AYhVGKgaGsqpwpxXO6By7qWq4e8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/yTbKooat1OBc9Qnme L7gIo0z0jbbxL69_qrIrKyZ4aWovkcV9hywd74UIuO1v2yxPNM5A QMFQWtiH1Ho3P1amrz787TwmfHKdhkSZZq tHzmgxcvBbmLC5wmFeome0__wiiexn2YOnxqapH5v2shKHOXjBzHR40QCUg3J5XZinw9lxfwGSqTFa8fCiaPcCnB f9QoH7OFgS5W_pSOM5OY9ryO5W8D748dQueL9WvDhar3jRJ8pdBjmU1f79zCLuTwRmcUCqsJADIdAmoNB5pu 6O3X 0qzPoRtlYpbiZCKku5 wx m7vQfW77Gv3h 4rEWQ7zI _bii5FbWgc3RO3ctYnOAB7GSnNjzOaHyZddK85WMs8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/C0YtA5RiPph_43BF0YTJ5Cezd3wsWiXGxg K4G_eGIKwStRM6 lEMSuB5T6RnkiDrwWf4hRjqLr4ZP7VhBaC3HdA9sPNWHzpiUYsirxZjme6gn6y54fPEt5GEZcAqPhX6wKtKmEfw1_JQvrsuQOsItgy5rmW_GsPGItAYijtM5cWDp_ Hn9zbFcMqTWHWE IP76SjTwrAnVQJ5QVeaX5ff7XbxglCRbXIoNQRgzpYLKQRWhh1c82nhTXxl3acJSz2cHIizydfP1e_8lTt7lNEj3I6d0s0zO4TcEiDmXhjl3TT8ZzPYIP9IHnWmMwNrk6 jnwx0K66jafaJ24tikKrd8o2bFd2ISqLnTQTYbOyJNCfzHs148=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/7AJUy6LSuTVzwidENXuCGCxbxzdRhOhjy3BGtxLcrLWaXW3P4bunP9fFLcXzMwnycXYtZrs3ZL57JiVLMuJMlWSqfZfmEl9ux18WEbJF0jjO0cQC0c49 JbgywjgxCg0y0uWAQZWUwkuxnpZyoInAAfcvEwKQ6mTrNaH9_VLV7rKTUBZTgzR 2VqDez5 ztC7uZijox8TcdD7xd_EknIbJxowqLOYoO5Cu9Ebhx_ygOmiLvNC wPb49clbJF2gcuTd73JKUOwG1GjD3LXdbh1N1DIRlXQPFIEkWmzQQ0nGucGcGDU1MkuTEvlpfujgBRAqxmfCCqgyeEv2xGU3Q2Qf8PIKAsDhgQWfSLgQpj2uve4Coliv8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/lgyZ IRIMow_Ql8w0 JHrQ_iVNnw0SB6xFx1eKfYJ3pPBCnHXrxHKyvYWDH92h 4eZryZ0lJWjPY0DXstX3dOAyhLh5yw1xhLTFI1PN2oV5D3UKEj7lJQluI3aSG7EdTj6EMPtVERqCfNQncXAHXr4enW54XNKQblEt9eXLTcojk_dvRlpcS7kCMT0C75epO8LhB4JVoppx68xwnXuWkXYuIfHTcZj 9 PaVFP9VRl83iJbc4vrxU8dgtQv5er15xBph_ZpjRQa6hb7hxs_EqdRIyJrPI5cpHsmMfDKr6Y5YReEg _PDdj9ryzlbAiXcB9NhHNW8vnjkpTkdscO5ujkaVesBTX0yq2T GdeTmAIsgR_gS_s=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/s96nvAOYHpMvH1yBpFlWinFqjMjyAbl5bHPnzLNJ5pjtbNhls5mZ3J1tv67eqmgk_a_ATB5zHYV3Wgl3xpH9ua3I7jyQcL1d_4KpNhuJhHF9vFY2r8FAdZEvNOj0iu8uzFA0oODSYIqymeXtQ8We7r2BNHXF5niwcLCqbQwfZMijI4ab69sH2TEqjxZYi4hKBfB8iY94S _1Hhoyt3 BZv6fm623Cub36 CSYs9eM4V7Wcjq1fc7dYMTJ_AdM3w4d AkA3Br8TBLVbn YEzJuTcSn89PuUFAzmG_uc1xfRkvMfOYnO7HMHs7snnAAF42xgZWo4HkCGoIBQBYjpqVEucD JXRgdn9AgWyIdCEWdRDKDFLuY=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/oQrmlRnPpu3wjvkJ2jfg1dXa8z9w 8cxzs97O4r36710lwh8egXDEsX35DRgzNlZJ_U4ebeCR31Pp Lyn OrzdTuI2D5EGo80Hy_5Rr5A8sXkRJYjVOES_CSdSVvLd OnOsQidUSZc_tMmt7eF9ALhd9HJnVCwNuMd4w7M6CMKFUZZTTQ_w9vOjx2fvRl7XCSklASXgwKiJVRrW_nuQi76aeXnZQsRCGdZ9fz6v1cv41TQTYOVpIP1p3YxF91NmD5Dcxn0bm kkPrnXEbi6 NySzC2RawcZXfLFMeooZlH4CdJ23HZqVWlrnDKEP5jf6hq_wBYv0FRF44LSkrRMW1b4iTF3_4SORL5YrlCxOuJnw0OlcZaA=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

Latest 30 of 265 download URLs

Remove sai-rus-pack-1.1.0-f1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.