home

sai russian pack v1.exe

Tohekat

SpeedyPrompt (New Media Holdings Ltd)

The application sai russian pack v1.exe, “Tohekat Setup ” by SpeedyPrompt (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.newtourshare.com and multiple other hosts.
Publisher:
Kup   (signed by SpeedyPrompt (New Media Holdings Ltd))

Product:
Tohekat

Description:
Tohekat Setup

Version:
4.8.4.0

MD5:
09d844b1b0747ad912598e3041e57840

SHA-1:
1bebe120e65247e7d7de8f1855c97ef63a0ad2ac

SHA-256:
e158a8b332b7ac071ecb2c09a84dbdf1f6d8df0f6a0448a915a3d1978cfb49ba

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
4/30/2024 12:12:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.3.15.17

File size:
951.1 KB (973,912 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\sai russian pack v1.exe

Digital Signature
Signed by:
SpeedyPrompt (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:27:56 PM

Valid to:
6/1/2016 8:18:59 PM

Subject:
CN=SpeedyPrompt (New Media Holdings Ltd), O=SpeedyPrompt (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217859832E1C02CFE81458CC264243B14E

File PE Metadata
Compilation timestamp:
6/20/1992 3:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:e7MtbV/r2oxmgWeLEYb2VxnJ+cCkCMm4xQuM:ewX/r2YmHIMxY34xQD

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file sai russian pack v1.exe has been seen being distributed by the following 50 URLs.

http://www.newtourshare.com/LH4AfLesF5t11P9Tc8w4aNiC3Sh9Z1lM9VrPz43aCOWYSPXAlDtkgtXHati6_T7_RdWPVXQrUaox1fOpa4786kNMmS2XuiA4ctS0Fnl1MtdclYHltfPDbamsovQIFcNcB3SC7zPflqPOw090FvBoso4cYiBf5UcYy5ojzHaKHhOP_mK VfKzc_Kgd0f4d1cbn0UsvaV1ApmTGl6dUy1LoXCdxWKLRDquE5bJZgPv1GqhSDokchMIZx2zCe3D Q jjxJWFZi0NTcEsBlZaXn6q0X3uUT609oTVdQg9_vpg kBcnuHAOU_xEOdpbjGIuc SDpvyPo4GgWQppX7aW_8pFbTgeGPphg6P72y5Qt XFu08gZvoSg=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/MPz2vDIyh2UJEaRn18Yt4mTQCwQbg7YVvrkPBS1N6vGNKK4JV6G4R5K_oSyZgv8KHcHobDLnj76YkcFJupXphdVAzUFSsCK0nYjkJEKYOiS6tLpgxHAJkMxqoUufEnDVUZ1CsxIog_zvMUGXdlQpoBOhf 76puw_dLeIEN_PTd0pe EFNpchcXbnqjvZxWePbDGqkuF9s7fX2mU93UA6E_EgTM4CPjdUEobhtnw45ZypnneHMbz90mFd4qUFC5fO3zsQAs1H dn4CdW_h2nv qvjuzb18KIqs0zyz3Wm8PW8AOEolUTGeOFaxOoHJ2 G1seTXCfLFn10l7ZSDRHYBAfebCVWQFLqWRU9U4U6Sp9QD2HA6gk=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/fdzBtPlIqKt6lXdwNpFyXGiFv2RcQSQlu2kYJZH59cfjZc94beEYCHOihNYQ71YxEsduYpRugZvgEYfpuJEnc6MgcLeMjtYi7B22TeqV_YGsTVa19iUs Qa3pAOeYOH8ztle1L8aKsqS3AOynu54ROa2PaKj02dEC01v4dtt dlzj2uvztbkzKbwhbwjxHykKaJVsjnQgWrk6xO0TCakR0lILC_Alp u9lWCRKRujvmcsKdfo0e9kiBrjIV1xPxAAuUlELd8mcvCbKtg7CFSuklZsKvjd9cEpn3VExSODzj5a klFGHIMvhOguqyypsLDEsS72Y3s89RAo5rAShRK5YzIfKYHGlHptWUFCxSG3VfSC3qNv8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.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

http://www.newtourshare.com/jpFR71kmpDb7u2lpGbnlwPZXJl0T_2Po0ZXlY6eaMcnL8UERAO34JypJEJWMgjCU7CfTEJUoWhQdavwk6EHAVGOf5TUdicSgCtNH5Q27GFi3yRsqeEfIR47Fdqs8o 7Cl7BOg_4IcRoVqLmxmJ3O2pN _GLHz9_AD8Ro_JGfDDE8KByhUL65KZq8Px_hICrdCAdrilpvS8Z USm9DFygvOzSaWXBT7Ivist9byQPLXAe5LAufkNbqYYxNkcFrnGRJn0QS3VuV0xg83RMVln5RPEYXifakLALJ8wMuMI9Z_Ox52YmVGL9ncGKVrrOQxafFXG v7p10SnoScOcZbQnTyIjKJh6Wh5SlKBLMTg_IVKx_I iowI=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/BBfEwqNg0NGRdYlJHb8MN5egeFsEkIs4y0mWNOVY2CjttQAIFZzkns9OIybvLOneKGeibJgfSXmXJEWsm9ln2rpgQKkl7W TPc7M5Wp1v2IAZQTkPyyraMhDxX7SshQA_Y58fgKD8cNw6_JnQVU8sENok2ZSwD1H_xbGEAWgjzlm285fNDsqhc0VGUFbs Hhd63fgwAbkRDmtQSaY8_bm2eJl_fWUrzL Bi_t3iLAZBMboi4uGBG8BcXxXrYQG2NcFJnO3lTOl PPl4Tt6ugXEv_2mvf5JgN7uH51vWMXOTUp_76W86H1HJ5nltIPWGYdMPGfXuI Ii_WfUFHh6S1H9pwSezYac3zM7JQlCtty0oTikgIwQ=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/WVl6OTRQVGhvVDJjeFFtMXZRVTVvT0ZSak9EQk5ZMUJSUVV0WFUwVmlUR0prYjFwek1qbGlNWEJsTXpkQlZqZ2xNMFFtWXoxRVFtNW1Va0puY210UVRqRTRObk5XVVZWM1Z6QlZjVXhrU2tFMFozRkROVGx4Y1dONGFEZE1iamRKSlRKR1YwTk5XRFZqYW1kalozWkJXR3A0T0hCc05FRkdRMEp3YmxKWGRVeFdVSFZwUkRod2VsSlVOM2RJUjJkSVVXOXRSbTA1Tm1waE1tWkJNWEJLWlRkVlRtSkRWSFZITUZwMGFXMWplbFJMYld0dFQxaFVKVEpDUVZwTVJsZG5kR2RWV1RSR00ycDZOakJqU25wUkpUTkVKVE5FSm1VOU1DWmtiM2R1Ykc5aFpFRnpQVk5CU1N0U2RYTnphV0Z1SzFCaFkyc3JkakV1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbWx5YjI1emNtTXVZMjl0SlRKR2RHVnpkQzVsZUdVPQ==

http://www.newtourshare.com/dgzl6OQC y1FpSLZ4htsVx37Bs7sKGcfVqgZjTMquOdMj8fVg jvy1M 30Ob5ibZcVmYpqnkkhCt3jUEiJfSDP ZJIspKGQydl7Nj2hGK7P32zm5hyG4R7rZBAFkAOGwIzElNKgKliDOaWDenEvB1O_70C800l7rDqaXC04lymDLb6IQO43HWdvgWv jozZwkcM K8QPbxlpl11VION8WVVvM68Mv7K9lq57kBY2YwXpD75T7WG_ZRNRFsDExj0ySUnFwvxl6uK5T4CNTzk3JvOBaAu06YuppzUD89k4FO7RMzXhdKNuifk185d1YJqBPDWSMckkoKVrs2lysJzPkLJDiWncSz72Obq49oiDhlwt1UOjeHM=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/lUvOMgAya1eqQ8xXCEFwCODoA9FbTA7bYuFbjtBcHvNELLKrquOxh8vClt98xySM41xdmd74hYzevETfez8OdifJPMJRnRwxb3 _9eJCctYExfPEp_7HcH7wljgX1pHnLzr787T723OQLn93yZt_OAa8fNC4ONJPj9OEMO1cj1PmTsbwMaVUeXRdlnDXwGFeNoN2liuABTK1pKZ4NCLce6wenGWqnhI37oW_ftCE 1js2fUsCS9EutKZvCZW2qofhtg4DfVAWVEz4c1Ql0ITDDPkgY9Axvp9RYPYSHFuKcxRaTexiU5VWq8UBgBDzohTk46SVNQA_enBY3HfYR3qVttztmqwQ65bMy Lxdt8JUwMyEGCVUA=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/nZ VADZU1QbuYwN1Dy6CxvmNmrVaRvTdJpqOcrr1SBwFXhSO5_0D_jxxSfsmX6NWmnHKJRlbeabNhl62ubtcGadz8eLo5zypaqZ8w5 JoEdJscySq11DGp7V1ioYltOD4vHYKK2y5RnfFR15qW1csursCMzvHUa 9wzF fc6zAQIIwg_YMv2WzHhWTZrLONR1VokFI1yYgHGzcPljANx7XJdUAH4TLAHpbDp5gTMq i _H7Uru 7X4fDX5arQHkyvol8Q dsKXQuBujiNnHq6qnfKcRLFu9NXjzPeX3Q5gNFs58NXk1HkalwSTpUABKTl8CmOV8EUNQMlyLLqUrSPaw68Ic25 CplKrnzgKe1tB12FGXqLI=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.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

http://www.newtourshare.com/0wnYIwkPUq8 wBt76bzNJF1AX80p6wWn034u9kfOCLkuLQ_4uaGTp3LAgvV8Ro9FrkTyyKT9loQ3aicfTLw9IiGf0R6 5VJcmPYDSx8F5pRGH7ox3OEyBbI7GNKMBLHIlhVs8TY0y39blBn_EV617gE2xVkDmGqDFneUFbET7BEtTGXaQ4g0ZNe4EJ5FjV5do8PN6sbfnzMS0gd9ISPnxv 7wgx7vVBsINboE8m iMUIvYYhsBH4kf4TNKQKoVlAA8DFyzVKdo4NWNSwBBzZhRgTpLVpg0rirAUVjgH1eQ0UBOpBLHnsmzLXiVItAyK8BvQfXnQrJ_FESRVcnxNX3zOYsjXwECk7xIV7L4j8ZNsv6J81nR8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/JrYfOXjCSWjS30mYmnn6EQMy8_WuYczfb4FCArAKxrAvJq1c1ZCBFIOr IIYoogqZfRhtAvjA5qiOTWn0NSpZeQD62soIfNEO 593Mj1Ya_93kbvP894n4qHzjwzGLqhIpLdi0wiJFoV1oNYUS85defwMwZZHNSBqcEjsfZZK1X1SjAF65nRzpjxoYsslyNM1W6fbpYuVcwGXFNw3ftr5n4JUz5ar5DRYYHdMeG0b3SsmN2mCzdL1qZb6wcsI60uCDDmqLNPdoJKT_dAYUevpVzwb7_K5QepYJLbI8F6LvrVwiz6LOYKvFMHs6V2WAgR 9TiEQPxfXQS HW9Bw03 duuyhhwJwEuZZGFkAHxb6c_xbPoVPY=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/L5bADIFqVKR2SDVBVwCrdaqi3mCyhNfXv2FPi_b52vOixwMyto gZul3X9zqNVNW6mPyZRIcuHagTrbTPh870N1ckOPLIsj9FE560GbHUbNDDKpdIifEoHusyu3YCwyM_DWQ_DIgiUbPOxbxHZCM5yNdfBAux5UGBwFRn3hZRRGRe6jYJk0jW9t2QIaQwkLEGi82JbBfQcrKU_zPtIZ7N7mkFvxaLlBe3MJ86Abod6tBDChAfh 0lzEGKcPYCRJ9Q9UET9YRU4EPgVIfXLt4iwji7Sb_RKNddDGzYkAVDWtAoEToTq80Dd sj_5hpSxCPlW4kX03_kZr DJsvQuYHXb8yynjy7T1bzjk5m1Au4cZBrdVIe8=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/BfNY KMTMF6rcrtBnABbGE4VXcZFSnIl0M685ruA_FI 5gu_ygEaXYgiP7n1gbZJbLylhXi_VPTuw_rG1L1laMfmbAeJOHPkxWD_Jh5e6mciNj9Ti1ZBZSUuRaS5U4AzOEQXz7rSPlle8TjIyweFk5ZDnGaLOlcovHewtTkWzTzRBTaZxkBakXuQSQvftEhx3bWY gnBolHPa8oTAhPDGe7oa4SnY2g0SshO6OxIcy4d7OFE0C_LurJuF JKyXKTQpM3sSOYu96SV6dn3St0Urn1GVnWC6P39B7XRrCkmGIJF6FtwFoAsH4JyUi85sdyJoSZXUVn2J7w3h1jSWnZsWRi5B0QLinOJzQOfjx8eyG6fksuNQY=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/CCXjJ7xHxS2s2Y fGKzy8F1WYBNY_BHvhqu3TfNVDW95VnkVPQ40HopIYUTxmghPdUmT_7_3SFIFPy7hF5O R 7oREs1V9LYt8N8lBSo6uIjjao4JyrzuyW3RLs0K0FOWv5RxPi 7Cy_HmPeusRPbph _I59ivv9pIIBHyMgNCQt_YdeBwtXbJWiuDquiXQcjCyFugmPyycrVnx6yFmPNvaJDSV1GDzxnGodAhkMNFC24hsAkRYJKw4krxX2HbXkN8NlBwPG3kaHlaU8O2zzi0GrVnrL3j2Kw1XZmqs4kZwCu5ikbFLJmXOeapUn7fhOSdAXBejwMAhA1h7RCCGLaXqqViQaUFRN8C07nKB9PsMHpMyejNI=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.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

http://www.newtourshare.com/L0eIKOUR8m6Zvjxy3hTDQSa3372uSHEuvPu0ho0d0PUfyzL6wm3xjRlPl1LfPjtRs44xTuRB5n5nDHOiuIv8jN6THZvKVmTNqnWQSEJAxP43g5tjJFzGMc3YPmGzkMymoSoJQ9VLMWYNuSB9jfDv2426d812FdM1j5wja0ljI2f2V2_5JnUR2jy11r55yXYtrqYOZmipm5XdVVJHV08XVv7v9hTOv8HeGs oMCqsjsmNmzktoIjQUWWpAy3luMBWLpxEiK32KhWiUx_jMu8eaMGZdcTfm8YShVU5zI8Zn982Lc3xGOqMFSStEP4b28zgjUddoCxJi36Cv2CHo3ZsxBUPVfpF7CrJwncMHuIaYFMCPXjWBAQ=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/c?x=g1zC13NiOR5x2vQ2Gnu3jdBjSnaCU1AUlcWiKV0Pboc=&c=AC2ipdQrkH9aHCCDYTdR9YxZQRubbIjDIMyZ4I31QMdyE5UKOyTMm9dLQuwHbi8aYB9rkvWPoR My8ta5dyi3g3JijfWmgO/3x019xjmX7GccuV5UM9X Q990f1qIjyBeqaptt3f4vLki0UIXiUHlg==&e=0&downloadAs=SAI Russian Pack v1.exe&fallback_url=http://.../test.exe

http://www.newtourshare.com/mzj4Un2Img5D5FSTyI0UjI1csDzFfRZV 0FiE4n18_ASHzDyMRQfULHY70iEPEMm1OD4JoKzjl5rOFjw458bUGo4OzhTe_wUponCMk4x7DlpWEntEAKWCVVbHkmFS II71c4HFdyd5lM01A2b97mrb0A9ITCO1U58IrSN7UaANLmthCmAs4nlt6tPniCT_CPL5G8SBSmz_GEOjtW5emi5S23MDJg5w==-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=

http://www.bitsuniversepackage.com/WVl6OTRQVUYwVjNZMk5YbEhWeVV5UWt0eVlXOXdObU1sTWtadmFHdFpjVFYzVWsxSlVFWXhSbGxvUkU4MVZTVXlSa05LUkdNbE0wUW1ZejFRU0dwcE1UaDJiMnRaVUVweFp6TXdVazh5TTNSVU0yZFdVakpaZW1sdE16UnJaWFZVWlRGTmMwaFNaRzF0Wkd3NWJHdEtKVEpHYkdOUU9YZ2xNa0p2V1dwelNEVXhOMjlTVkRKcVkyUkJhMHR3YUdwSGVsSlNORVE0VTNJemVsb3pZa1pJVm14RWEwMDNaR2hXZFd4NFJtaEVhMmhYV1d0R1FXUnBXazVyTWxWQmVWRlBNVzlEYkRGbE9UUllkV3hwY21aUmVTVXlRbGxSTWtFbE0wUWxNMFFtWlQwd0ptUnZkMjVzYjJGa1FYTTlVMEZKSzFKMWMzTnBZVzRyVUdGamF5dDJNUzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VhWEp2Ym5OeVl5NWpiMjBsTWtaMFpYTjBMbVY0WlE9PQ==

http://www.newtourshare.com/UEVL4JUfWmpbP66_qkIKatf5D33jpQ9HiYsrXFW83OFfybdqsUW3SqenZZhX3SLIlZZJgR_Us9VRSxKk1NwjmoucAdntp4NrOv RZRZlVOLR9OG6iK3uBr_jNdJ1xn2EdvN8uhttTEEzgN7qR7AbLIFCk7ch7TTqTHNa87LYmsw7R0rDx26BcvNPr3KYghTv8OVnYF7209Ue2j3ykBUzIStKNxDd3IBzaIH6zj BB0MHmOzafaKOkZqFRz6vUgq6iRKJNyDaWXrZvcRAuA_2eaFsxpkA4dKGyUJ9OvyRWCT4ALysf3ULIu 2_sgv8Hy3oKBHuAiO6C2 b _EI6 YdBYxahYUcyfXGTeUGca9PqJaLBbBpKM=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.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

http://cdn.zayatsdelivery.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

http://www.newtourshare.com/jzcGOqelX0nXyV6NLex0mRJxkfkUpHtgqRE1ydQrvQvh9GDgztJWcU6VSShZ9H1FOzDLv5WCDokoOIjQAG8SqWBVprj2HaB4uzIAbuxsWjT9m3Picg5CzE5h3Hx5Oy6w9Y1ithU12huh_j9 _HSo8Q7tJKRvamx4Wz2wUgJA4oDRbswXwzSDVaK3BV_8VMV_KsLFmudtwlIRz93 XkxL57a662Z2_SQTTtVkoK6rTCQxuZqp4H_q6MA V2oD3BpvnPh7vdxsdToya3EUrCpdzZqAwDVnYlb6h1Iel_bRN3gomsfaMhNNHuVakx2Igtmph1ruls9LfzNKwtcCjjo95_LWo6c5Sg2TIF7tw6OQyVqotiqDyEc=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.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

http://www.newtourshare.com/j1SLv4U 6fPPO1bEnfBUrsYwnNtuwVuPage2V75TampOAH44WdwRmOPCiMizsNwvTOsvvuUfx9oUt1djYLVYJUHTFsg0omCuZdbKJvUyzqjF0 ARUn33zG1YbRbBLZ 9hlCy7ywMw vjZB7c2V65tXoFaUecz8mDFtgrzKDuZSJ1zuQ_dGRIClwEZ1Nr1lT4bRVUKr0ipG1OkzpUoxt677eYVVpQK4Dec0 9B8s_d2CI96z32lhHrwoIEM9iV2ZOxqBIRTwvUz5oLkSJ8bWUnkmkFM30rWiX3MP0epwkCzKUYxODEg7A2HXIPSOVDNEc3jK_lT00wgfBZinQyNrvm7vwn4RZCw3 qnmrYbaE5o__siXkR8c=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/WVl6OTRQV0pGSlRKR0pUSkNZMEoyVURsaFUxRlZNbnBLYW1oNFVVd3hNR3hwYkhrMVUxVkNValpyYlhCa2IwbHphVWxOSlRORUptVTlNQ1pqUFdWa2VscGxSWEp1WVhaUVpGQkVXSEJEU0dWcmRGSm9SbmxFZVRGcU0yZDZObU5yTUdoek1HeGlUMnhtUmxZd1lYbHpaekZRZDI1TFpWTXdZMlJTVm5GVFdFTkZOeVV5UmtnNGQzRTNZbEUxYlZWM1NXSTVka1JrVTFwU2RVSlFXbmsyZEZsd1UzWkhWVUpPT1VoSlRrdzJWa05hV0dSSmRETnNTMlpPTlZkTVVITkhjRlZXUm5kMlRXaGhTakZXTWxsbVdHWnFSbFpSSlRORUpUTkVKbVJ2ZDI1c2IyRmtRWE05VTBGSksxSjFjM05wWVc0clVHRmpheXQyTVM1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1YVhKdmJuTnlZeTVqYjIwbE1rWjBaWE4wTG1WNFpRPT0=

http://www.newtourshare.com/E1lMz ojM4kHn TmZcCgREsXgUZSEnp8VKBsmVRE0fSE6x30ZGQj5cEy7YkFnXBfpc017mNS9WsWAb8pOOlB7r7IJ8g8kNizuZF5M 9YogDmdjE8zt0Xq1r1hgsf1u31Sx7OYqnuggiJKlWRPFQG0Z1efMnX5EB10zYxWt1eI8TLe4hySuW6MHah8W1n6JPGss3nlnJEPH9NF5nnRqQZ4MAIsI7n9nTI_x9nKGf31B__Kuy2ujoKgZN6Zsu9kgXPxQJaWZppvwJh1 9MEfkTiurjPPzA58G8fFAzkwi P1XZF4FSvMw_b9rCbh2KHEqPKwKxIWibEyQayoY1Q2UD4xAgl5walhBdwPybF8bGWwhEnDRbjFU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

http://www.newtourshare.com/xYnw0RCs7StJfkKJjpqoHwk_AfFN8ScyLvaBZD84SDd3PSqaofZ0TzoJsG7VOXyXYJEPHgE4alNLPReVnIrU761PX2hf_1MIyyYfK9klokUoS M1D9EQFzQ3RsmUgpLGFf_9r6kZENWtTZy0434DBx7kF_gsXTxMs2tD48BbJ1eme8GBF2YrZ3sFM9vBG2LyJ2lRRazZ2MS_G_Fdmwoi53I 3X_fWEdf0Spy7Y3A2Jo1qCeYUF2jbQd39rJVObbqXXbWCbqxfxt0_wKfcUWugsVMozYELG7BAUGS4B8QSGBj0gZN5QGcaFaZHYI8X0gh1jsz3tHtEYP43vkhdhnicmYosgn02hKpX0427MtlAkn995svqKU=-Gx4AAAQccmiptINUUAtSyCa66I3zQN4Y WRVY5yNThw=-e

Latest 30 of 783 download URLs

Remove sai russian pack v1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.