home

Didier Stevens

Publisher Information

Didier Stevens is a software publisher located in Belgium*. There is one additional code signing certificate issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
10/4/2012 10:20:18 AM

Valid to:
11/24/2013 11:46:08 AM

Subject:
CN=Didier Stevens, C=BE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121c09c7f085493bffef26d4560ba359f37

Status:
No known positive detections

Scan engine
Details
Detections

Rising Antivirus
PE:Trojan.Antavmu!6.A17
50.00%

0 / 68
relcrt64.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (337e18d2435ebc6970c727964ad28aa9)

0 / 68
relcrt32.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (6234d44d30a4cf989ee79df214d9b29c)

0 / 68
ListModules.exe (ListModules by Didier Stevens (https://DidierStevens.com))  (1437071e9735bccc803813175e3a84c9)

0 / 68
AnalyzePESig.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (5eb543d307711e72f7bda23b450a077b)

0 / 68
suspender.dll (Suspender by Didier Stevens (https://DidierStevens.com))  (652f90f5f5fceecb4a06d66245217445)

0 / 68
AnalyzePESig.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (df61fbf086b30b6e8f695d6062fa5231)

0 / 68
AnalyzePESig.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (f0e8bab82d3d3077c81247ecd86f134b)

0 / 68
AnalyzePESig.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (ce700a857296ae352c05ccf91ea0a5d9)

0 / 68
AnalyzePESig.exe (AnalyzePESig by Didier Stevens (https://DidierStevens.com))  (5e86425acf2ecb1e0a625b47cbc4778f)

0 / 68
xorsearch.exe  (caf12aa25ae9d82ca37a8da3cd9d9294)

1 / 68
xorstrings.exe  (879e40f0cac89a6632b300aa5370b417)

0 / 68
xorsearch.exe  (ca29b61900c6b8b0df0326cafdfe7909)

The following certificate is also signed by Didier Stevens.

112192293FEEEB24FAF6553F2DBF6EBCC8CD  (Oct 24, 2011 to Oct 24, 2012)

* Note, the details and description above are based on the code signing digital signature issued to Didier Stevens by GlobalSign nv-sa on October 04, 2012 with the serial number '1121c09c7f085493bffef26d4560ba359f37'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.