ticonnect_eng.exe

Texas Instruments

This is a setup program which is used to install the application. The file has been seen being downloaded from epsstore.ti.com and multiple other hosts.
Publisher:
Texas Instruments Inc  (signed by Texas Instruments)

Description:
TI Connect 1.6

Version:
1.6

MD5:
d75012195b30527c0c0c550d2a340ec2

SHA-1:
a0238cd1b5e1b271bedcf1147939caf505a055ab

SHA-256:
e383094d436e63eaa09687f031274a7667295312e245b875eb601d8a36212da4

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 1:17:04 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
BScope.P2P-Worm.Palevo
3.12.24.3

File size:
15.1 MB (15,858,856 bytes)

Copyright:
Texas Instruments Inc

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ti\ticonnect_eng.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
5/18/2009 7:00:00 PM

Valid to:
5/19/2010 6:59:59 PM

Subject:
CN=Texas Instruments, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=142331, O=Texas Instruments, L=dallas, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
74AB4C5C0478A511B04C20A23BAB5905

File PE Metadata
Compilation timestamp:
11/13/2006 12:32:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
393216:k9CFXZj3meRvEfUY0FV5sggih8ioxB8xIN8Pid2snXy18/q:k9U53Nu/0vqvKZ

Entry address:
0x4197

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 7C, 0F, 00, 00, 53, 56, 57, 33, FF, 68, 00, 01, 00, 00, 57, 89, 7D, 14, 89, 7D, FC, 89, 7D, F4, FF, 15, F8, 70, 40, 00, 6A, 04, 89, 45, 70, FF, 15, 24, 71, 40, 00, 89, 7D, 00, 89, 7D, F8, 89, 7D, 18, 89, 7D, F0, 89, 7D, 0C, 89, 7D, 04, 89, 7D, 08, 89, 7D, 40, 89, 7D, 1C, 89, 7D, 24, 89, 7D, 20, FF, 15, B8, 70, 40, 00, 8B, F0, 8A, 06, 3C, 22, 89, 75, 50, 75, 24, EB, 04, 3C, 22, 74, 0E, 46, 8A, 06, 84, C0, 89, 75, 50, 75, F2, 3C, 22, 75, 14, 46, 89, 75, 50, EB, 0E, 3C, 20, 74, 0F...
 
[+]

Entropy:
7.9475  (probably packed)

Code size:
24 KB (24,576 bytes)

The file ticonnect_eng.exe has been seen being distributed by the following 29 URLs.

https://epsstore.ti.com/.../cskatch.jsp;jsessionid=f68acf27e2f5255f571d66f1ef24c4e9e86b24f3af403999175de284a5bba275.e38Ka3yObNqSci0LbhaPb3mRch8Pe0?fileid=ZG1B0DDA05D452848F13BEA6C78B2CED8804849E06323A25CF&jfn=ZG6E49B5290F9920D8DDEEDE43DF61AAC8FF215528835AE8668C0B71397BBEFBE79957B80BB07C63621B198481A68B376918&lepopus=fdu64CPtrO8ucm8zjMWPPfQAFn&lepopus_pses=ZG932E89D3BBA4871ED40F1BB41DEA531AF4AEAC2BCFAC3040466A3E349997540F52E79BE04A3DF60EC1E4A47CF5E4C65A352EB00D1E7F51AA&oas=P7Z_647WyDWSJ7mVVPLY5w..

http://www.matematica.pt/docs/software/.../ticonnect_eng.exe

https://epsstore.ti.com/.../cskatch.jsp?fileid=ZGC1440D8DBA04EED2A89262A5447E1797A9AE5C9B1D2DEAA4&jttst0=6_23871,23871,-1,0,&jtfm0=&etfm1=&jfn=ZGDEDAB6DB5C9D348937A9629E40DEBF1B2FDF4C858D1859366C1F66824DED82865AC0B1205B1CD27B7A44C7EE2F737FD219&oas=XwPj-AlHRr5Ax2OVHYEjdQ..

https://epsstore.ti.com/.../cskatch.jsp;jsessionid=4425e8958162c1af5d07150315de285fbdec957ed22f71ab8a5117a46aee3e36.e38Ka3yObNqSci0LbhaPb3mSa3aKe0?fileid=ZGE4D50E5416EE58E604ABF26502318B7374E1ED2BDB795DCA&jfn=ZGBD4D515B301C45ADD9429B81FF4C646B3730A5B8CF4E1D06C20D69AD029ECD559DDABD3518578216D2FBCE8973F9720476&lepopus=j1dXkhXBkgdB8EjDCcoE4t4ZS7&lepopus_pses=ZG303D7983D131A312990D3590E3D76586DBA7C166AFC45BB66733CA95FF8B5252EB7A3B56DCA5CFDFF5897737D2896331D5637AA34988FD66&oas=UnLTCJ230oYGgeJ6lVFuDA..

https://epsstore.ti.com/.../cskatch.jsp?fileid=ZG1F03B11A7C0004516A499A39DF2BE6BC18DAB4E7CD9D43F8&jttst0=6_23871,23871,-1,0,&jtfm0=&etfm1=&jfn=ZGC449857308A3D8C860AC456B6AA7DF6AD31655898EEAEC957E1E8102DC5264790DAD98417F0284DFB1688829566E6215CA&oas=bpoAfglGEWCN4qfC-nhxnQ..

https://epsstore.ti.com/.../cskatch.jsp;jsessionid=fc544d14d05f9eae4ba421ec1058496b4dd90e2da455c4f27936bbb0d26adfbf.e34TbNuKax4RaO0Qbx50?fileid=ZG02C2ED1FB57F10393559BAE8C6B21372241EA7E7FA6595BB&jfn=ZG067F5FDB990F6012BE4AF8499988A98800155B2EC7826036843D2BCB351E13CAB4438BFEF91274394A8462232019A7FCCC&oas=-nNv80CUiWgWuX6o7cg2bA..

https://epsstore.ti.com/.../cskatch.jsp?fileid=ZG7E7C53916AAAF59985DC1F4D04B0C3923954C880801391E0&jfn=ZG0B4B2142D4784C8262D43CFADA4E52C398D0A32CDB45FD1CB0D6AAFC7F2957F094EA4C28BB99C9E637D07D7EA09D45EC7E&oas=sY6N1HxpaFNVJo7lmxu-lQ..

https://epsstore.ti.com/.../cskatch.jsp?fileid=ZG8EC4E8D2C252B3809DCE0355C2308F0AAB961D817F25E9D4&jttst0=6_23871,23871,-1,0,&jtfm0=&etfm1=&jfn=ZGC60A5C6A1BEC9434D65736E7A4B0AAF14015E0088873C6F610DD7C5A16FC75262BC7D5E351C70C2DFCD5A4BCFD6243F53A&oas=6Dn2T1W8eO3DaTkOUOoiPA..

http://www.softango.com/.../192752?bit=64

http://forum-fok.digidip.net/visit?url=http://education.ti.com/downloads/files/computer_software/ticonnect_eng.exe&ppref=http://forum.fok.nl/.../1154830

Scan ticonnect_eng.exe - Powered by Reason Core Security