home

ta3094.exe

TextAloud3

NEXTUP TECHNOLOGIES, LLC

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
NextUp.com   (signed by NEXTUP TECHNOLOGIES, LLC)

Product:
TextAloud3

Description:
TextAloud

Version:
3.0

MD5:
731c9d2e476bb284067652bcac449879

SHA-1:
f10dc50ab33b66b6cc3fc9dadd3d1dfac0304f17

SHA-256:
00241376003fc0db7d059f42ef345743e30a56c389835fc7a264b4c7edd6bd5d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:14:47 AM UTC  (today)

File size:
22 MB (23,078,184 bytes)

Product version:
3.0.94.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\ta3094.exe

Digital Signature
Signed by:
NEXTUP TECHNOLOGIES, LLC

Authority:
Starfield Technologies, Inc.

Valid from:
11/19/2015 6:21:38 PM

Valid to:
12/9/2016 9:33:39 PM

Subject:
CN="NEXTUP TECHNOLOGIES, LLC", O="NEXTUP TECHNOLOGIES, LLC", L=Clemmons, S=North Carolina, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DCB07D02E65A7843

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:IwMLfPXYUg5Au7fU3izXOTnxvrYurVtozTXjLHyB1IAgKGA6w6J34nYA41GNWWES:ST/Yn5OyTO9DYWV0LHq1IA2IuRAEGNW4

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file ta3094.exe has been seen being distributed by the following 17 URLs.

http://dw.uptodown.com/dwn/4F7AaeA68FtjDc531V0dDp6PnCJHDopOlNHEdoME40jl1pjFTfeAsJmKOz0htLlGSVKFdnirYLFbw7_S_Ewv6PwInUY5qVJCcwit_1JbpSCf8JqOzLcsC0xQ3tEjHWsz/xyZkHNF9qyN3cSeHuXV3MoaMHS52eHOZM28r71EhQ4l0jRY0TLPRzXTW-s4VnW5gelvannC9wrSuIqcDcKeQ210SyPzdlCNJv4PPp-d-9PoWhDwXEwU4kLXeAc0tK3DG/.../

http://dw.uptodown.com/dwn/VMf90mQks2_jVw3D82NhEh6MizaEQcLV99zkU-cYxiLpqE3ABKnZpyN6Wl2PhDlWM3H3tIa-nmCHi7bKen2GqRjB7kuQBvRRwIMRPGwU1xHwoPFwv-EFMl-YLA0Kor1V/X0_yTSwZ_4NGwx9m_A_Wc8iCB5LSnOfcMzinNg9uy3Hn7qNvU_pHC61B8rSBtPOp9zmL8JesbF7BszR6E_B9GwBqPTjVXxLChzCK20DIr5KlZV2dGW9GJgO3fHXT0ADp/.../

http://dw.uptodown.com/dwn/7-tK4XC6cp4yKdtzfJGZJdnchQDYCdUx-uvlUHMcdZLRL23JcAHe25hv_KRUTa5nDecDIFgua-h6sQU3BIZtZzMFH5Yuo9xEKf07sSnSlYYZFDQGLiUS3oB30gOy5k2q/6YXCdPBK8axZNz4pq8hNE_V6oFnrxDJa1A3XulvTisv3_9jIcyeC9OZO_f_ZOUTcHBdjp8Yrtdopy3Q3zyPl1SdBT1HM5TnkptS0k0awa6iIzWGKLhGVGsWHgw7x0kGY/.../

http://dw.uptodown.com/dwn/YVcX24PrEDqIiEHlAczPZ8mz_j2foqsHxRGObdKwtiEsItANtnqZtHtjU9BArsK9SdGdslkOTMo-RZtfqlzavvIo4hzv6OYVU22jxeVhhe9n0VywCm4AAUw-tjv27vPo/cotcFwOhL8R6YSv7VUMF3AfoFF-LkkmN6tXhP1O1s3qer3XItalLWDw3rD6eflZr_Janr_IEmO4WBii6UoIQFJpUR7ShB2tJImhnE73ivmSlb2nOu-ZnU7C-5KnIgobA/.../

http://dw.uptodown.com/dwn/kGEwo41mH6CochJpBISiqo6gj5DgYvZXfXpQo7cqchTUQdFDY8hdUW33pQiEs6lXYKkcwQ3-iLC2a2UgL_ECwYrHzZGEOuBjVZYyxS_5JSNERuiTC1ZQx5kUoX3crb9E/nIRCwoh2dU-rQVQ2R_wcrEQ0hgTzLIGqn8dyId9sYFkEnAmA5k14jI8v0VbtdmTTBdi4OIpuE129Z_n4Ka7zgug4BvCoshOil1vksZfqgez39DsuTJAiabun-uU1d-L2/.../

http://dw.uptodown.com/dwn/5NTbhcKaIdIQQzovdhBj71ZfEDDIIzL7FaUYNvMCtsg95WYTxdo3-HCbyu37_JFb1I9kap_2B5MapFICivdxr9SaLubPOaoBrHqRj4B_L23pDpGc5qdqRRN1yzr2YBcH/Gox9XnpQ9gKexRExgrFRcAsfj9d3XdmgsYVze32EFCFJhhGOUSlS0ud1YKz2_qR-YrFlRqZeR2C_SQt1dGuAmUXO78R6-tGpJML3xa9AdgdHCSsir2tk5M4Iv7vTmrn6/.../

http://www.nextup.com/.../textalouda.exe

http://dw.uptodown.com/dwn/vtUeaDFjiSHDGAUWn-rvKIfg_RL6oRoBFvwJMimRaIEzIav2o3sg1g_oNplc23Uk5K1NyiBsQeTTU-MXCwpPS6wHQkf2f3Z_z-SbZstIDMVmDE9e5O47oEJt6P2R8P3R/Uai39mE0PNypn65p3ikTtWZvST5Lpc7A18OTJ9bPItiea9UrLLbxd-Idnb0UFoKPVB_eJ18-pLonRzIj6kx2HCW_Z6axenuLp4CZj3g1f5jv6MOsZqrblkhyYudIqKA-/.../

http://dw.uptodown.com/dwn/lJvlahl2sWjdyvQ_hsb_k4sS7YSLdvsZmBThI5BAhpDPm__R6eBdlY_t30nI2M1UAPn_lAkiJ_-tsr5SkOCSTgtmFBQ-1PZCvcYDtSEcDTDycyNdNJpfYR1pZKKKVJxm/I-XG0jRpPYpce4V-elYJ-OZW0w4Y0o1qxdxNFvhfzcCLoOis_vMvClMOuEILbSDzXgwjCrXOem9f60eLbltdN46N6tPfPceeY1v2l99ETqMXj3LNiJlfVFLfY3J4v4Lx/.../

http://dw.uptodown.com/dwn/C2N7xvgN_JiBIHtbKNFRwTgeADKXTfcUvksk8qtJm6hVGk_3iwC3Oop6lagIIfP-VdpsCJCDKyTo_aMyyK_cTBqHTcgpU1ydghVGEkyjBz2AA4GrZV3KZd_tf-DD-ekw/73vPmKKkjaAw41JQoiScRrqxMPgGyPMG3XfguA4Hl6afrQPhuAJc_vQY_K5VG1FlRApVUsF2eyUAUOi7wHJrXuf1umCUL5LXVQLh5dzKcZz_zh1hbC6GXYZHG7Q7hRFL/.../

http://nextup.com/.../textaloudb.exe

http://dw.uptodown.com/dwn/tbLTqCBanOWUGAXCcMj5tGGIWfbYVH442Z_dbxcWLP2cgdN5mZ3j6Lo5INN-jcUtnM252u8l_FezFsS31vsjGYgeXs9LZfsHmkJpgC1oSrIwsh-n3paif0D27eIsnOH1/eZool4CArFIZ5m272zJThUCPOeEsTxhKR_86-2hnas5oCAEUaLWqW9TUefDXh0JCNuPNk8INRBRBjU00hF-81vnAaH7bQpgYx82wxP_LjMdWH37vQeriPnTsawLs3GE0/.../

http://dw.uptodown.com/dwn/9tt8E48mBXfViRPkpQqOcuSG_JFO9nUQyb_tRs_IfYcrwuXPnMHkcT_HnMTKx_oF8fP6zhSbDkeo060PklrAG1SQ8Nt5ph1wqxs1qLIQqLpfqDEr551kmHNGoJzStI90/4MWdqvo-YkPYHqFiIW3u4rcTnTzTkh8uXdWPBRJOpnZm5pHZ5H6Z2tCINLT6I2470lKFHSc272g_ccr6hVBynVAQYZDiNBD5iUG5QqfZt8dhsxWKw3AZThaEHH9TjPhL/.../

http://dw.uptodown.com/dwn/p9MUCQAQIubPcN6R_lZJrj8B9qroCjE63w_0pGoJtw7tWDr-Y6Te_S29HYosZsHLwOLXYJZcG3kAl-ZQAP2Ojfr470ORn7qhCdRcifak9xFYLOR0-QDlrRqESXTPtRdD/HvYtpF2rOonk09BmUHA4j3QU8RyZRKp6kY2EkWOFN7nKzYBpXlEzwmOOFT6S-GRqqF8E4uVdl_XjKhOCIvqe9yUUHQLhloLTTmyorGQCOgvaP8qG0CotaBWbJ93LOq4A/.../

https://dw.uptodown.com/dwn/rtI9HNy06uW2E14-dIDlfv75IiYUFyy_2sVM30f7d5Wo92U9G-0O2fEnJdfHryzFDRN5PcL8oMn9ANgDpZa5DHDhrzBq1l4-xRZfVcjlZcR4Yn42xAfwXBsxcShqtG7z/kACZFN1WrmUZ5rOEHLoTC1g35wbo-yeoxU7-wZV82r9po3QSoH5jMHzMWr66fjf-Z2qyPCXrcWJkNc9DeItC1C3TbMTard1JrzZHxJ8ipJfiSMYtCcaH0s_R8uh5C-0s/.../

http://nextup.com/.../textalouda.exe

https://s3.amazonaws.com/.../TA3094.exe

Scan ta3094.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.