home

vestcert.exe

VestCert

yettiesoft co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VestCert Client’.
Publisher:
Yettiesoft  (signed by yettiesoft co., Ltd.)

Product:
VestCert

Version:
2.1.10.2759

MD5:
c4b4fba51b42f2448cfff2276ce531d6

SHA-1:
9b4360c8cf3b2671a50b7033541073c0432d5bb6

SHA-256:
91790f3ab3fbab59d656241cb16193dfbc18ae66e3e4a77608bff599fa81fddc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:30:38 AM UTC  (today)

File size:
2 MB (2,086,048 bytes)

Product version:
2.1.10.2759

Copyright:
Copyright (C) 2014

Original file name:
TokenManager.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vestcert\vestcert.exe

Digital Signature
Signed by:
yettiesoft co., Ltd.

Authority:
COMODO CA Limited

Valid from:
9/11/2015 9:00:00 AM

Valid to:
9/25/2017 8:59:59 AM

Subject:
CN="yettiesoft co., Ltd.", O="yettiesoft co., Ltd.", STREET="4, Hakdong-ro 4-gil", L=Gangnam-gu, S=Seoul, PostalCode=06110, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DFC7FBEF66AF49C99100BC6A92C6176C

File PE Metadata
Compilation timestamp:
6/23/2016 11:26:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4FC000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, C0, 1B, 00, 2D, 20, 3A, E2, 04, 05, 17, 3A, E2, 04, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, BD, 02, 86, 34, 68, AA, 3A, D2, 66, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 23, 65, 05, 00, 45, 7E, C4, 59, 95, 53, BA, D1, 9C, CA, 22, FC...
 
[+]

Entropy:
7.3949

Code size:
393.5 KB (402,944 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VestCert Client

Command:
C:\Program Files\vestcert\vestcert.exe


Scan vestcert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.