home

Rambler Internet Holdings LLC

Publisher Information

Rambler Internet Holdings LLC is a software developer located in Moscow, Russia*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
10/21/2010 3:00:00 AM

Valid to:
10/21/2012 2:59:59 AM

Subject:
CN=Rambler Internet Holdings LLC, OU=Secure Application Development, O=Rambler Internet Holdings LLC, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
76ab89c836a9184d21803cf346dd5182

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
25.00%

Emsisoft Anti-Malware
Win32.Almanahe
12.50%

Trend Micro House Call
TROJ_GEN.F47V0818
12.50%

nProtect
Trojan-Clicker/W32.Inffinity.505144
12.50%

avast!
Win32:Crypt-SKC [Trj]
12.50%

AVG
Win32/Neshta.A
12.50%

0 / 68
rupdate.exe (Holdem by Rambler)  (cea43a9cb9d62db86e67df0ebe73926d)

0 / 68
nichromesetup.exe  (fa413d604faa6ea25d6765e187d7280a)

0 / 68
contacts.msi  (237a009393a0702389175c2e2609c522)

0 / 68
rupdate.exe (Holdem by Rambler)  (e37cf4841466adc5a5cea0bdcf873c07)

0 / 68
comholdemps.dll  (67b6bea7a50940f7623e0975d39a9982)

0 / 68
ComHoldem.dll (Holdem by Rambler)  (14984a92145d51d50ce768a6d68b5744)

0 / 68
contactssetup.exe  (76c4c5ad63d3c8947672cf8bb17027c1)

0 / 68
contactssetup.exe  (b26d98b66e37a2f0e01d5ea05c85f321)

0 / 68
ie9-win7-64.msi  (6e5b5294f071dba88d219472f678c7b9)

0 / 68
rupdate.exe (Holdem by Rambler)  (75f77ac6fb5de17a5a9144174d754e9f)

0 / 68
a0013613.msi  (bc9f65f8fcabda7ef1886b24da702854)

0 / 68
a0011769.msi  (988e4c176c357584b3e69d4021631270)

0 / 68
rbardps.dll  (15e038685e61b525518a5d5aca38f5ab)

0 / 68
ramblerbarsyncps.dll  (02e4087ac3c14046773c5df0576e4850)

0 / 68
RamblerBarSync.exe (Rambler-Assistant)  (92b4c4f9edc9f039a95476c3218d4898)

0 / 68
ramblerbar.dll (Rambler-Assistant by Rambler Internet Holding)  (f99acfcdf64f4a50220a4bfb9bec033e)

0 / 68
nichrome.exe (Nichrome by The Chromium Authors)  (6a7e5bb5aa8fb45557b8faf4ee148dcd)

2 / 68      (inconclusive)
rupdate.exe (Holdem by Rambler)  (754c43ab0f842319a1c4145648967acf)

0 / 68
nichromsetup.exe  (574fb26f74e03d5bf4873e1879176dbc)

0 / 68
rupdate.exe (Holdem by Rambler)  (8542fbed92d920c4a8564001ee40eb1e)

0 / 68
ramblertoolbaru0.dll  (0b93b3f0d7fd6d1883c732e674b6ceee)

0 / 68
ie9-win7-32.msi  (72d29c010388381d7441fc69423ce37b)

0 / 68
contactssetup.exe  (c6c544afe6c72178d80c4d745785aa82)

1 / 68
nichromesetup.exe  (e1e5f3489089bb39ea2289b723b1f725)

0 / 68
ramblercontacts.exe (Rambler Contacts by Rambler Internet Holding)  (5a5edbaabcc48a3af18729b49684dbc0)

0 / 68
ramblercontacts.exe (Rambler Contacts by Rambler Internet Holding)  (def83acb8714815ab733195e83c4def6)

2 / 68
rupdate.exe (Holdem by Rambler)  (34f832679bc30423d01d77efdd0221d1)

0 / 68
ramblercontacts.exe (Rambler Contacts by Rambler Internet Holding)  (20342dbdec6b95e2aca9d9de24986416)

0 / 68
nichrome.msi  (8ec298b7e2c50dd47f6c01a4af574815)

0 / 68
contacts.msi  (0c3b2367808011f0468f814a4a628dcf)

 
Latest 30 of 64 files

Downloads URLs for files signed by Rambler Internet Holdings LLC.

0 / 68
http://update.rambler.ru/.../NichromeSetup.exe  (02b1319e13f499443bf5d3b7b6d7e1a3)

The following websites host and distribute files published by Rambler Internet Holdings LLC.

update.rambler.ru

The certificates below are also signed by Rambler Internet Holdings LLC.

2A6BCD1DA7268B595F047BDD4CFA256D  (Jan 20, 2015 to Jan 13, 2017)

1F16C544CA274B10D7E261A60524E806  (Oct 18, 2012 to Nov 18, 2014)

The following publishers (by Authenticode signature organization name) are related.

OOO Media Mir

* Note, the details and description above are based on the code signing digital signature issued to Rambler Internet Holdings LLC by Thawte, Inc. on October 21, 2010 with the serial number '76ab89c836a9184d21803cf346dd5182'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.