home

ta3044.exe

TextAloud3

NextUp Technologies, LLC

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
NextUp.com   (signed by NextUp Technologies, LLC)

Product:
TextAloud3

Description:
TextAloud

Version:
3.0

MD5:
bd2058bfb66c6a8f1cf77aa887893476

SHA-1:
04fde4bc89d60654f03e7b4274297266e5c17c8d

SHA-256:
ac8134a3c80648234f84bc5f686c18dd9bd1ed5a80e07aa2e71bf30554de9ab9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:38:55 PM UTC  (today)

File size:
18.1 MB (19,014,416 bytes)

Product version:
3.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\ta3044.exe

Digital Signature
Signed by:
NextUp Technologies, LLC

Authority:
VeriSign, Inc.

Valid from:
12/6/2011 3:00:00 AM

Valid to:
12/10/2012 2:59:59 AM

Subject:
CN="NextUp Technologies, LLC", OU=NextUp.com, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="NextUp Technologies, LLC", L=Clemmons, S=North Carolina, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
573FA7B8A8FFDDECC93BFDF2302EA612

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:bpPQTfms9Li6yDs5nuJ6+dWUSt7Mgui8hBCS7huxeLYjAYJnk:VTmJyDz3dWRtr8zjAwFYJnk

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file ta3044.exe has been seen being distributed by the following 13 URLs.

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1438157012&Signature=Rz08nWA891wpsgGNEuEvFXtBYIIliu7KQR6CGLmbaVbTFdv-gyPin4ig6o-RjmUqgK2-FKTQQJPXOpBgAYXlY11Lpa8SpE40gDJ6l3kVjtaLSx7iqOOCmc8rsV9AoPyRv4DiHS0v-wkpRIgZsSPn1S0AW14e752wdWPO-uqrNlE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1471348045&Signature=VoJyuvdyJbHK9rXs-tnJUge4fJmyG~B2vK7TnIkq7maFZwDRzYODaecjYUueS9RNba6LQQgbbfSfZw4w~4Lh98rLm8SvbDluGHkZSUAlp4Hp~xgpXRUlLfmi2PBdwVod7yMYuKvvmEXrPJeOLJyZcQjlGsT4~kbgYfntnjosA2I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1470677195&Signature=XV7nUim9z1uc0RkozpudpAAaziPJ2AJdXmgy08~TRbJ8skz~iy2Af9enQIEvXrEbKUJP9InoKXYuUTylb76xPtbWaNn-h-kJNEVOZgmuAAF9bRMhqIK3BjXEHYmP17bLYrKBrDJIpDrniLBpnDTMrimoAUb7Z4PdwheUe5KZQN0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1475843044&Signature=fGB0o3LsZCRa4~LwREcn1YYOwYELuyyzyWd51YHkf84twqTFvt0Kn0ch7Ep9JdbivVbn2Hc60jARvbzLlkKfWjk3qVvYwQsvYowDb3b3mhiMIia48hgh12y-OkepAkL9LQgt8u1Lc8ow6VbsqYUXnL-Khd~KSP2~ILMkr9~JFEk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1480047997&Signature=DqI5eEvgRNzYQk-m18w8YdBCgrJHVmC4guYglfTcv0wuTmOgXFrvJ6xPcCpvzmmzvayurnow6qlMZKV3V2IudsCVw-CuC0HSVMN6DRNpKVYKSGLiD-fqLOc3LqEfjGf0guUGbntJMuC86xHXe1uCKEht09nVSbQAHgIRlxDFekU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1452921005&Signature=TX8oq7usskLUlerd0jqaXvliQ8xwZmSvZPS1T5A0Uzl~3Dg24EJVvlqXRwWm~R82QdwEQtZKiWVaCfHxjKhM1DCVv0TUgscDQSnWFzSXZUffOv1qFQwsUNde8NnDOpC48oNEuSEi-e-KBCvh3sx8sckmK5oHwDstE8EAogLYadU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1436679227&Signature=ch6QQxdwf1640P0Yfoj0-4Tsu5JXsJ~GozczKD1TILYe9sdYElOoUUI~v0SE3PS0ILs0wOSnLgWNrWzMsVCnNZziVyUcq0mTHV2YWMKP4NjzixPSIuYzLvsFymwDwMkxy-iYSjjHkqF7-n9zwKcd-pmh3-hMl9sBr11IhnCNN3I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1463882472&Signature=g9da6Zq3xU~9mJoJjEySjJ7Si-i6is5mYr2tP59cVyObGqMsnN7w1~gKXxtceVyE0DDXGZZ9WopwbwyL7p3rWmtBGrBP4tcbM8D27AraPzCt~tfEMQXqzbNRcjiXOlAU8Ci7jsRzrtTyORWxLyIGYshJOOVQVaB8cxTN3peO7GE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1435068482&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FlnX8vO3OyCjlDuBP7Cq0DJEX2CLO79-SCnSJsVWAWJDeKtFofjLEkx6VCIsF6oZEy4xqnfbgKKtmC7HVhionk0cijnMIDVHspYC70GMtsKa-MGSLDnkpRyWUN46WcEBhFH0GtJxpBNuHiLW51denG~Z2CYRNFosglpz3u0BbTI_&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1451076074&Signature=Y2Ul5mrwJC76OMa9FVfDY5zVMOUkUvIXNTJ85MUuiFDnnp0lbvtbir3UWkXiXU10HF7RL110dl5-SZctNHbdxp2UhAV~688gsNrhrYgLSWJ1OctWothQIUO~vcIxzoM8IBOfaZjP~Pt6chAWWh4r31WPkST6siXmabCqmUS6hR0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1445039494&Signature=S3KZk3qlHlvYqbwqkI3A-NEI11-HDPxhUa-TB6mH9BbWh6x9VNwfnuimSe-~gaaV7hd4dAtJXPRpi6z0wibKymOBOrkRy9vTiZZj42QV9CAT5-eSoaEo4mH9keXDaq2ZOnMGroQnSac350FQxd-xX67akAl13cHnuF~5WOQRN6U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1434246525&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=HvXiP0T1pjp2fMH96pbXEbN1ZCu1PKCinwHCxmqI00TXCEpxLrXgwxQhxfOCr48aBcSfx9LpK-lxeaXh2Jt2Tlrrs8sU9~0e3vd-o1FLRR-9zh6ARX5L9CaE4GSLF1YnKkkmPTFU7Nd8ziB56cEtYnETxN9OXeTwI6iobP~XFVg_&filename=TA3044.exe

http://gsf-cf.softonic.com/04f/de4/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10209&instance=softonic_en&type=PROGRAM&Expires=1438027066&Signature=Gs9Tjoe4LITZThWFJA3tIpYX-ptlVlrX2j99EwTd4pH4DZYQ6FqbBDs7ea4GBa8n4GmQfQqkKvkOiLMoKTsEIoEodEu5BHuk40ZHzHs2hWuD6MJanYpc91tZBRODWObI~Ilo9tJmOjZ8pHd5WFfI-CqjXAJPVqXuXzFeyq5-a-k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=TA3044.exe

Scan ta3044.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.