home

65brmon64.exe

VER_PRODUCT_NAME

Mindspark Interactive Network

This is the startup monitor for the Mindspark/MyWebSearch toolbar and will monitor the toolbar within the browser to make sure it loads and updates. The application 65brmon64.exe by Mindspark Interactive Network has been detected as a potentially unwanted program by 5 anti-malware scanners. Additionally, the file is typically installed by a number of programs including FromDocToPDF Internet Explorer Toolbar by Mindspark Interactive Network and TotalRecipeSearch Internet Explorer Toolbar by Mindspark Interactive Network, both potentially unwanted software. This version of the file will bundle a Mindspark/MyWebSearch Toolbar, a potentially unwanted web browser extension.
Publisher:
VER_COMPANY_NAME  (signed by Mindspark Interactive Network)

Product:
VER_PRODUCT_NAME

Description:
VER_DESCRIPTION

Version:
1,0,2,0

MD5:
7750fed30c4ffecdf3b777408d22f4ef

SHA-1:
9dbc3b1b7869ebdeb974b76be32654cbac976122

SHA-256:
d81e754840c74fee15da2e12c4f40a2a76efde13a890d700da93ab05c2cf3e8a

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
4/24/2024 1:57:55 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mindspark-A [PUP]
2014.9-140220

AVG
Zango
2015.0.3558

Reason Heuristics
PUP.MindsparkInteractiveNetwork.J
14.8.8.2

Trend Micro House Call
TROJ_GEN.F47V0107
7.2.51

VIPRE Antivirus
MyWebSearch.J
25650

File size:
70.1 KB (71,752 bytes)

Product version:
2,3,0,0

Copyright:
VER_COPYRIGHT

Original file name:
VER_EXE_FILENAME.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fromdoctopdf_65\bar\1.bin\65brmon64.exe

Digital Signature
Signed by:
Mindspark Interactive Network

Authority:
VeriSign, Inc.

Valid from:
4/10/2012 5:30:00 AM

Valid to:
5/7/2015 5:29:59 AM

Subject:
CN=Mindspark Interactive Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mindspark Interactive Network, L=White Plains, S=NewYork, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
098417F7EA6406EC7B320590E17A65B7

File PE Metadata
Compilation timestamp:
12/14/2013 12:41:09 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:QxLM97NTRGCc89aqPUlJ3qSrkNQciqHdu61dOgtQ:QxI97NTkv89hG3VAN5LHd51a

Entry address:
0x2950

Entry point:
48, 83, EC, 28, E8, C3, 1B, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 40, E3, 00, 00, 33, D2, FF, 15, 98, 77, 00, 00, 85, C0, 75, 17, E8, 8F, 1C, 00, 00, 48, 8B, D8, FF, 15, BE, 76, 00, 00, 8B, C8, E8, 37, 1C, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 89, D6, 00, 00, FF, 15, 9B, 77, 00, 00, 48, 8B, 05, 74, D7, 00, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24...
 
[+]

Entropy:
6.0598

Code size:
34.5 KB (35,328 bytes)

The file 65brmon64.exe has been discovered within the following programs.

FromDocToPDF Internet Explorer Toolbar  by Mindspark Interactive Network
FromDocToPDF Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers.
support.mindspark.com
62% remove it
FromDocToPDF Toolbar  by Mindspark Interactive Network
The FromDocToPDF Toolbar installs into your Internet browser and allows you to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.
search.mywebsearch.com/mywebsearch/default.jhtml
62% remove it
HowToSimplified Internet Explorer Toolbar  by Mindspark Interactive Network
Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® home page and new tab product.
74% remove it
TotalRecipeSearch Internet Explorer Toolbar  by Mindspark Interactive Network
Functionality of the toolbar includes: - Changing the web browser's default home page to MyWebSearch.com. - Changing the browser's search provider, built-in search box to MyWebSearch.com. - Ability to modify the 'new tab' functionality to launch the modified search portal page.
70% remove it
 
Powered by Should I Remove It?

Remove 65brmon64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.