home

pmropn.exe

PremierOpinion

VoiceFive Networks, Inc.

The component is part of the TMRG platform which will track various behaviors of web browsing habits including tracking sites and domains visited as well as ads clicked. The application pmropn.exe by VoiceFive Networks has been detected as adware by 2 anti-malware scanners.
Publisher:
VoiceFive, Inc.  (signed by VoiceFive Networks, Inc.)

Product:
PremierOpinion

Version:
1.3.337.392 (Build 337.392)

MD5:
0c1b12d1fb1355a4d6b5ea2ce398981d

SHA-1:
c261ce1a0eb2ac97615ef9ad7322c128183f38c0

SHA-256:
d83e642a0eaceb7ddd61ddaaeeaf27b393de74d6edc98dc99b31b2fe022d356c

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
11/22/2024 5:32:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TMRG (M)
17.3.12.5

File size:
3.6 MB (3,740,608 bytes)

Product version:
1.3.337.392 (Build 337.392)

Copyright:
Copyright © 2001-2004

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\premieropinion\pmropn.exe

Digital Signature
Signed by:
VoiceFive Networks, Inc.

Authority:
Symantec Corporation

Valid from:
10/4/2015 8:00:00 PM

Valid to:
11/3/2018 7:59:59 PM

Subject:
CN="VoiceFive Networks, Inc.", O="VoiceFive Networks, Inc.", L=Reston, S=Virginia, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3B4D69BCB4E43BCC60770FDD4CF2C36F

File PE Metadata
Compilation timestamp:
12/28/2016 3:24:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x245F0C

Entry point:
E8, DC, 53, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 58, 59, 87, 04, 24, FF, E0, 58, 59, 87, 04, 24, FF, E0, 8B, FF, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 88, 5F, 64, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 9C, 0D, 04, 00, 8B, 45, 0C, 8B...
 
[+]

Entropy:
6.6130

Code size:
2.7 MB (2,820,096 bytes)

Windows Firewall Allowed Program
Name:
pmropn.exe


Remove pmropn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.