td2free.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from train-dispatcher.software.informer.com and multiple other hosts.
MD5:
88a7bbcfc989a56b4c27a98108a051a3

SHA-1:
e2d61fd29e0466b78afe629d6b2dca534dee5029

SHA-256:
ca6fd35a31174396c563e2a2b35d7c13d788ace6e99ad64d8585f5c7bbc0c1c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:55:21 AM UTC  (today)

File size:
1.7 MB (1,819,748 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\td2free.exe

File PE Metadata
OS version:
126.4353

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
24576:AAD5SZLR0a1ppgMJXRSZvyRVmAXOifgi8bURrDZToEC5bxwXbxGUuyejWDB9HZhv:OGa1gvy/NJLrDZvCx2rWL+zfLK1g

Entry address:
0x120011A

Entry point:
4D, 5A, 90, 00, 02, 00, 00, 00, 22, 00, 11, 00, FF, FF, 07, 00, 00, 01, 65, 40, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
192 KB (196,611 bytes)

The file td2free.exe has been discovered within the following program.

Train Dispatcher 3  by Signal Computer Consultants
www.softrail.com
About 3% of users remove it
 
Powered by Should I Remove It?

The file td2free.exe has been seen being distributed by the following 3 URLs.

http://train-dispatcher.software.informer.com/.../

Scan td2free.exe - Powered by Reason Core Security