home

vestcert.exe

VestCert

yettiesoft co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VestCert Client’.
Publisher:
Yettiesoft  (signed by yettiesoft co., Ltd.)

Product:
VestCert

Version:
2.3.0.3355

MD5:
8de263b8561f01d43ebfb3a182fc3103

SHA-1:
197d71dd8377e88ff7e5634c9b3ea036ee7eb7bf

SHA-256:
28d5a6a129ad04aea0aaf97a88e357d6930d388408aac2378e42605105bfaad8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:18:03 AM UTC  (today)

File size:
2 MB (2,084,000 bytes)

Product version:
2.3.0.3355

Copyright:
Copyright (C) 2014

Original file name:
TokenManager.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vestcert\vestcert.exe

Digital Signature
Signed by:
yettiesoft co., Ltd.

Authority:
COMODO CA Limited

Valid from:
9/11/2015 9:00:00 AM

Valid to:
9/25/2017 8:59:59 AM

Subject:
CN="yettiesoft co., Ltd.", O="yettiesoft co., Ltd.", STREET="4, Hakdong-ro 4-gil", L=Gangnam-gu, S=Seoul, PostalCode=06110, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DFC7FBEF66AF49C99100BC6A92C6176C

File PE Metadata
Compilation timestamp:
2/15/2017 11:36:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4FD000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, B0, 1B, 00, 2D, 20, 3A, F4, 04, 05, 17, 3A, F4, 04, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, EE, 24, 1C, 1D, 68, 02, 8E, 08, 3A, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 2A, DA, 9C, 44, C6, 72, 47, B7, 64, 9E, FB, 34, 81, 7E, 76, D4...
 
[+]

Entropy:
7.3950

Code size:
397 KB (406,528 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VestCert Client

Command:
C:\Program Files\vestcert\vestcert.exe


Scan vestcert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.