home

ramblerbar.dll

Rambler-Assistant

Rambler Internet Holdings LLC

Publisher:
Rambler Internet Holding  (signed by Rambler Internet Holdings LLC)

Product:
Rambler-Assistant

Description:
Rambler-Assistant.IE Module.

Version:


MD5:
0fcf214e07e08e86c475c64732908d4a

SHA-1:
850b2a2f0d0bade10b6fb62e2962aee5dfb69414

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:00:46 PM UTC  (today)

File size:
2.4 MB (2,527,960 bytes)

Product version:


Copyright:
Rambler. All rights reserved.

Original file name:
RBard.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Documents and Settings\{user}\Application data\rambler\assist\ramblerbar.dll

Digital Signature
Signed by:
Rambler Internet Holdings LLC

Authority:
Thawte, Inc.

Valid from:
10/18/2012 4:00:00 AM

Valid to:
11/18/2014 3:59:59 AM

Subject:
CN=Rambler Internet Holdings LLC, OU=Secure Application Development, O=Rambler Internet Holdings LLC, L=Moscow, S=Russian Federation, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1F16C544CA274B10D7E261A60524E806

Registration
CLSIDs:
{468CD8A9-7C25-45FA-969E-3D925C689DC4}, {E1C8A72F-3027-48F7-A333-A5D01EBD4B7E}

ProgIDs:
RBard.RBandMain.1, RBard.RamblerBarBHO.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/6/2012 4:23:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:u+Mau62EVfaS3p3kPnNuBU6oaVzNsqFAWvp+V+oajWZsdf2W:s562EpaS3eExViqD4VE6Zsdf2W

Entry address:
0xB2360

Entry point:
E9, 6B, 56, 0F, 00, E9, 56, 8C, 06, 00, E9, 21, FD, 05, 00, E9, 0C, C9, 0E, 00, E9, D7, 30, 01, 00, E9, A2, 53, 06, 00, E9, BD, CB, 05, 00, E9, 38, 97, 0F, 00, E9, F3, 5A, 13, 00, E9, FE, 2B, 01, 00, E9, 29, 90, 0A, 00, E9, C4, 4E, 13, 00, E9, EF, D0, 13, 00, E9, 74, 77, 13, 00, E9, 25, 4F, 01, 00, E9, D0, CC, 0E, 00, E9, 0B, 75, 10, 00, E9, 46, FD, 0D, 00, E9, 41, D4, 02, 00, E9, 16, 78, 13, 00, E9, B7, 77, 13, 00, E9, 82, E2, 12, 00, E9, DD, 3D, 04, 00, E9, 48, 33, 03, 00, E9, D3, 64, 0A, 00, E9, 66, 9A...
 
[+]

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
1.5 MB (1,594,368 bytes)

Scan ramblerbar.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.