» Gemius S.A.
Digital Signature
Analysis
Files (28)

Gemius S.A.

Publisher Information

Gemius S.A. is a software developer located in Warszawa, Mazowieckie in Poland*. The publisher primarily developes software that can be classified as adware. Thre are 9 additional code signing certificates issued to this publisher.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

1/19/2010 1:00:00 AM

Valid to:

3/21/2011 12:59:59 AM

Subject:

CN=Gemius S.A., O=Gemius S.A., L=Warszawa, S=mazowieckie, C=PL

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

51273a3f6d425725238476ddb778ffbc

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.GemiusSA, PUP.GemiusSA.Installer (M), PUP.GemiusSA (M), PUP (M)

100.00%

Fortinet FortiGate

Misc/PUP, Riskware/PUP

7.14%

ESET NOD32

Win32/Trackware.Gemius (variant)

3.57%

1 / 68 (PUP)

npinstall.exe (68e74b185adc5c15f377dab942ae223f)

1 / 68 (PUP)

npinstall.exe (3d7da75ea445af53e8b83efc543b8952)

1 / 68 (PUP)

npinstall.exe (254cab62e8ec0eda1f6d3d3938665c81)

1 / 68 (PUP)

remove.exe (NetPanel by Gemius SA) (d3d4c9d98feb64b7d337e59bdc0850d9)

1 / 68 (PUP)

nsinstall.exe (169db0cd41c2bfb8c99a05c06f3c5ca1)

1 / 68 (PUP)

nsinstall.exe (92467a1747ce96b86c8868132e744120)

1 / 68 (PUP)

npinstall.exe (b25fd275120f4453a23be030d2734584)

1 / 68 (PUP)

npinstall.exe (a3397c35babe993e415febd545860788)

1 / 68 (PUP)

npinstall.exe (e42b873cc276f987668ef7433a6e5b40)

1 / 68 (PUP)

npgemiusplugin.dll (Internet Research by Gemius) (e4652f5a03f9a1ec845a004c24f757ef)

1 / 68 (PUP)

nsinstall.exe (66f8b10c4f7e284bc555a86be4340b41)

1 / 68 (PUP)

npinstall.exe (6e60a722d178abb871a1ce7d220126a7)

1 / 68 (PUP)

npinstall.exe (2c6b559abbe4b94ce33e9801d7cb046a)

1 / 68 (PUP)

gemiusHeatMap.exe (gemiusHeatMap by Gemius SA) (2453e6926b8f103a4a2dd114cd4d0b6e)

1 / 68 (PUP)

npinstall.exe (cd4e72735aa5a9bf07628349a72b38d5)

1 / 68 (PUP)

npinstall.exe (d71e9bb1c53240dada20d214a822d7ed)

1 / 68 (PUP)

rmnetsoftware.exe (NetSoftware by Gemius SA) (96bff3e6bc03a013da28f42b830ce3cb)

1 / 68 (PUP)

tfrc.tmp.exe (b729c809acf993d8cec7690976f2be94)

1 / 68 (PUP)

npinstall.exe (19480220a0d2f7fbadfbb74f69a6fe13)

1 / 68 (PUP)

tfr4eae.tmp.exe (71ba5a8667c9e9b4f7b04fbc683786b1)

1 / 68 (PUP)

tfr5c.tmp.exe (8e4bc1c1ebf81278f2581a4cd9ff5315)

1 / 68 (PUP)

tfr38bd.tmp.exe (dbdcbad11e52dd440586926feef82ffb)

1 / 68 (PUP)

remove.exe (NetPanel by Gemius SA) (e0e1b70a090966fe461013deca539359)

1 / 68 (PUP)

npinstall.exe (5b606d7b6ebe39390bb26205d9559afb)

1 / 68 (PUP)

remove.exe (NetPanel by Gemius SA) (75b4e657dda74c492875d1f7201edcbf)

1 / 68 (PUP)

remove.exe (NetPanel by Gemius SA) (0577f0baa9bf7cc6bc36ecd7eb479355)

3 / 68 (PUP)

rmnetsoftware.exe (NetPanel by Gemius SA) (720ba2219fc6806c83c8f6e4730588f5)

2 / 68 (PUP)

remove.exe (NetPanel by Gemius SA) (8539d240546d293ca46403d33d762a44)

The certificates below are also signed by Gemius S.A..

051EC14F4A0037DD6936254DC8119676 (May 20, 2016 to Jul 20, 2019)

411290C3B6985D1DD4202A51727A340B (Apr 03, 2014 to Jun 02, 2016)

6A007947EE0CB7B042D84EAB4DB205D1 (Feb 08, 2016 to Jun 02, 2016)

4214D27FBFEDDBBD183D1ED8DF3A9C0E (Mar 11, 2013 to May 11, 2014)

5F45B89031A4F7A7971DC1690565EE4E (Mar 18, 2011 to Apr 17, 2013)

7125A406F95E708C6C6B6DF1A2AD9F4D (Jan 27, 2009 to Jan 28, 2010)

20BB82 (Dec 15, 2004 to Jan 12, 2006)

215F41 (Jun 17, 2005 to Jan 12, 2006)

1F7430 (Jan 13, 2004 to Jan 12, 2005)

* Note, the details and description above are based on the code signing digital signature issued to Gemius S.A. by Thawte Consulting (Pty) Ltd. on January 19, 2010 with the serial number '51273a3f6d425725238476ddb778ffbc'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.