pmropn64.exe

PremierOpinion

VoiceFive Networks, Inc.

The component is part of the TMRG platform which will track various behaviors of web browsing habits including tracking sites and domains visited as well as ads clicked. The application pmropn64.exe by VoiceFive Networks has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program PremierOpinion by VoiceFive, Inc. which is a potentially unwanted software program.
Publisher:
VoiceFive, Inc.  (signed by VoiceFive Networks, Inc.)

Product:
PremierOpinion

Version:
1.0.11.92 (Build 11.92)

MD5:
ab4af299a307deddfd431484c140e30f

SHA-1:
5b5540fa322582cce29ce600d4fa6d0eb5b14418

SHA-256:
8e109174ab61739e652ca8a45bb2210ec53366626f59cc5f04f8ce793662b44a

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/22/2024 5:54:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TMRG (M)
17.3.15.14

File size:
185.4 KB (189,888 bytes)

Product version:
1.0.11.92 (Build 11.92)

Copyright:
Copyright © 2001-2004

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\premieropinion\pmropn64.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
10/5/2015 2:00:00 AM

Valid to:
11/4/2018 12:59:59 AM

Subject:
CN="VoiceFive Networks, Inc.", O="VoiceFive Networks, Inc.", L=Reston, S=Virginia, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3B4D69BCB4E43BCC60770FDD4CF2C36F

File PE Metadata
Compilation timestamp:
12/28/2016 9:35:58 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xCAAC

Entry point:
48, 83, EC, 28, E8, 2F, 64, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 4D, 85, C0, 74, 0D, 38, 11, 74, 09, 48, FF, C1, 49, 83, E8, 01, 75, F3, 49, F7, D8, 48, 1B, C0, 48, 23, C1, C3, E9, 53, F6, FF, FF, CC, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, B8, F4, 01, 00, 33, D2, FF, 15, 28, 35, 01, 00, 85, C0, 75, 17, E8, 8B, 47, 00, 00, 48, 8B, D8, FF, 15, DE, 36, 01, 00, 8B, C8, E8, 33, 47, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 48, 89, 5C, 24, 10, 44, 89, 44...
 
[+]

Code size:
122.5 KB (125,440 bytes)

The file pmropn64.exe has been discovered within the following program.

PremierOpinion  by VoiceFive, Inc.
Publisher's description - “VoiceFive, a comScore, Inc. company, is a leading global market research company that studies and reports on Internet trends and behavior.”
73% remove it
 
Powered by Should I Remove It?

Remove pmropn64.exe - Powered by Reason Core Security