home

pmls.dll

PremierOpinion

VoiceFive Networks, Inc.

The component is part of the TMRG platform which will track various behaviors of web browsing habits including tracking sites and domains visited as well as ads clicked. The module pmls.dll by VoiceFive Networks has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program PremierOpinion by VoiceFive, Inc. which is a potentially unwanted software program.
Publisher:
VoiceFive, Inc.  (signed by VoiceFive Networks, Inc.)

Product:
PremierOpinion

Version:
4.0.20.35 (Build 20.35)

MD5:
2e0ec8fb9fcc7d7f3c4afdc1079fe574

SHA-1:
25387d1c5b55392213bb742351be752254c8668b

SHA-256:
ac390d7918005d39e62186559ec856e71cdb1ed308f71c4510b9e9e0386a3237

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/2/2024 11:19:17 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TMRG (M)
17.1.15.23

File size:
646.3 KB (661,816 bytes)

Product version:
4.0.20.35 (Build 20.35)

Copyright:
Copyright © 2001-2004

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\syswow64\pmls.dll

Digital Signature
Signed by:
VoiceFive Networks, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/12/2012 1:00:00 AM

Valid to:
10/9/2015 12:59:59 AM

Subject:
CN="VoiceFive Networks, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="VoiceFive Networks, Inc.", L=Reston, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7DF0080A576090E4868BAC6B0E459122

File PE Metadata
Compilation timestamp:
8/10/2014 5:28:22 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x5B8F3

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BC, E0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 10, 8B, C7, 83, E8, 00, 0F, 84, E5, 15, 00, 00, 48, 0F, 84, CD, 15, 00, 00, 48, 0F, 84, 98, 15, 00, 00, 48, 0F, 84, 49, 15, 00, 00, 48, 0F, 84, B9, 14, 00, 00, 8B, 4D, 0C, 8B, 45, 08, 53, 6A, 20, 5A, E9, 72, 04, 00, 00, 8B, 30, 3B, 31, 74, 7C, 0F, B6, 30, 0F, B6, 19, 2B, F3, 74, 15, 33, DB, 85, F6, 0F, 9F, C3, 8D, 5C, 1B, FF, 8B, F3...
 
[+]

Entropy:
6.6503

Code size:
476 KB (487,424 bytes)

The file pmls.dll has been discovered within the following program.

PremierOpinion  by VoiceFive, Inc.
Publisher's description - “VoiceFive, a comScore, Inc. company, is a leading global market research company that studies and reports on Internet trends and behavior.”
73% remove it
 
Powered by Should I Remove It?

Remove pmls.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.