home

vestcert.exe

VestCert

yettiesoft co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VestCert Client’.
Publisher:
Yettiesoft  (signed by yettiesoft co., Ltd.)

Product:
VestCert

Version:
2.3.0.3355

MD5:
e277190d3b28d93080daef7ecf2091d1

SHA-1:
19ce192c661c5531197d4d488583a7a838803dcb

SHA-256:
f4cfa40d27e5cb9b9fe03cf019962be53ac8f92472f5644d3203c994443b3b92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:12:06 AM UTC  (today)

File size:
2 MB (2,093,216 bytes)

Product version:
2.3.0.3355

Copyright:
Copyright (C) 2014

Original file name:
TokenManager.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vestcert\vestcert.exe

Digital Signature
Signed by:
yettiesoft co., Ltd.

Authority:
COMODO CA Limited

Valid from:
9/11/2015 9:00:00 AM

Valid to:
9/25/2017 8:59:59 AM

Subject:
CN="yettiesoft co., Ltd.", O="yettiesoft co., Ltd.", STREET="4, Hakdong-ro 4-gil", L=Gangnam-gu, S=Seoul, PostalCode=06110, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DFC7FBEF66AF49C99100BC6A92C6176C

File PE Metadata
Compilation timestamp:
2/15/2017 11:28:24 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4FF000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, E0, 1B, 00, 2D, 20, 3A, E2, 04, 05, 17, 3A, E2, 04, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 4D, C9, 3D, 63, 68, 55, FE, 49, 76, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, F7, 1A, 57, 72, BF, 00, 63, EC, 61, 92, 7B, 99, FB, 59, E1, F8...
 
[+]

Entropy:
7.3987

Code size:
397 KB (406,528 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VestCert Client

Command:
C:\Program Files\vestcert\vestcert.exe


Scan vestcert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.