tnsinstaller.exe

KNConnection

Voicefive Networks, Inc.

The component is part of the TMRG platform which will track various behaviors of web browsing habits including tracking sites and domains visited as well as ads clicked. The application tnsinstaller.exe by Voicefive Networks has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. It is also typically executed from an Internet Explorer cache folder.
Publisher:
Voicefive Networks, Inc.  (signed and verified)

Product:
KNConnection

Version:
1, 0, 0, 78

MD5:
caf5f267f6e984bdac18f1a67b6e9301

SHA-1:
ac7a6191048820b6095039d9134d5c860cd7ffca

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/22/2024 4:52:02 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TMRG.Voicefiv.Installer (M)
16.6.21.7

File size:
324.7 KB (332,448 bytes)

Product version:
1, 0, 0, 78

Copyright:
Copyright ?2007

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\tnsinstaller.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/4/2008 12:00:00 AM

Valid to:
3/4/2010 11:59:59 PM

Subject:
CN="Voicefive Networks, Inc.", OU=Secure Application Development, O="Voicefive Networks, Inc.", L=Chicago, S=Illinois, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
69D4A9838720D7B9A606CB8E1E25ADED

File PE Metadata
Compilation timestamp:
4/25/2008 6:50:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:7mzUb5umpTKTihmVcU8TnfNvrYK1/22RPG+vnu4w:7OU1umgihmmU8zNvrPJnGGPw

Entry address:
0x2E9B8

Entry point:
6A, 60, 68, E0, 25, 44, 00, E8, 84, 02, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, B0, E0, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, E8, F0, 43, 00, 8B, 4E, 10, 89, 0D, 24, 2F, 45, 00, 8B, 46, 04, A3, 30, 2F, 45, 00, 8B, 56, 08, 89, 15, 34, 2F, 45, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 28, 2F, 45, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 28, 2F, 45, 00, C1, E0, 08, 03, C2, A3, 2C, 2F, 45, 00, 33, F6, 56, 8B, 3D, 38, F1, 43, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
248 KB (253,952 bytes)

Remove tnsinstaller.exe - Powered by Reason Core Security