» 14datact.dll
Overview
Analysis
File Details

14datact.dll

Data Control

Mindspark Interactive Network

This library is part of the Mindspark toolbar which uses the Ask.com search property to install a web browser extension and modify the browser's search, home and new tab features in order to redirect web searches to the IAC property. The module 14datact.dll, “TotalRecipeSearch Data Control” by Mindspark Interactive Network has been detected as a potentially unwanted program by 10 anti-malware scanners.

File name:

14datact.dll

Publisher:

TotalRecipeSearch (signed by Mindspark Interactive Network)

Product:

Data Control

Description:

TotalRecipeSearch Data Control

Version:

1, 0, 0, 9

MD5:

342308c0e52e97549d4185a5af19a0f5

SHA-1:

ad5645fb7d17d1c848d878751a30c4a15d248902

Scanner detections:

10 / 68

Status:

Potentially unwanted

Explanation:

Part of the MyWebSearch/Mindspark/Ask web browser extension and toolbar.

Analysis date:

4/25/2024 1:49:47 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:FunWeb-F [PUP]

2014.9-140723

AVG

AdInstaller.FunWeb

2015.0.3404

Baidu Antivirus

Trojan.Win32.Agent

4.0.3.14723

Bkav FE

W32.Clod940.Trojan

1.3.0.4613

Dr.Web

Tool.InstallToolbar.5

9.0.1.0204

ESET NOD32

Win32/Toolbar.MyWebSearch (variant)

8.9055

K7 AntiVirus

Trojan

13.175.10837

NANO AntiVirus

Riskware.Win32.InstallToolbar.pdjzy

0.28.0.57029

Reason Heuristics

PUP.MindsparkInteractiveNetwork.I

14.8.8.2

VIPRE Antivirus

MyWebSearch.J

23398

File size:

92 KB (94,208 bytes)

Product version:

2, 3, 0, 0

Original file name:

14datact.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\totalrecipesearch_14\bar\1.bin\14datact.dll

Digital Signature

Signed by:

Mindspark Interactive Network

Authority:

VeriSign, Inc.

Valid from:

5/30/2010 8:00:00 PM

Valid to:

5/6/2012 7:59:59 PM

Subject:

CN=Mindspark Interactive Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mindspark Interactive Network, L=White Plains, S=NewYork, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

41730EB0E6D92A476E16628A0DBEFB36

Registration

CLSID:

{9e5c950c-93f2-46b4-a47e-8450fff4d841}

ProgID:

TotalRecipeSearch_14.DataControl.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

9/28/2010 7:22:01 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

1536:WYWG58WVMvbGwWB/K3EZtA0rGo++9PG7Gi7zCV4izC90r:JWGBVMvbqZN9e7Gi7+4F

Entry address:

0xB6BA

Entry point:

FF, 74, 24, 0C, FF, 74, 24, 0C, FF, 74, 24, 0C, E8, 3D, 97, FF, FF, C2, 0C, 00, FF, 15, 2C, F1, 00, 10, 33, C0, C3, A1, 48, 1F, 01, 10, 56, 85, C0, 75, 13, FF, 74, 24, 08, 50, FF, 35, E8, 1E, 01, 10, FF, 15, 4C, F1, 00, 10, 5E, C3, 8B, 0D, 4C, 1F, 01, 10, 8B, 15, 44, 1F, 01, 10, FF, 05, 4C, 1F, 01, 10, 23, D1, 8B, 34, 90, 8B, 44, 24, 08, 83, C0, 08, 50, 6A, 00, 56, FF, 15, 4C, F1, 00, 10, 85, C0, 74, 07, 89, 30, 83, C0, 08, 5E, C3, 33, C0, 5E, C3, 8B, 44, 24, 04, 0F, AF, 44, 24, 08, 50, E8, 9D, FF, FF, FF... 
[+]

Entropy:

6.1364

Code size:

56 KB (57,344 bytes)

Remove 14datact.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.