home

vestcert.exe

VestCert

yettiesoft co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VestCert Client’.
Publisher:
Yettiesoft  (signed by yettiesoft co., Ltd.)

Product:
VestCert

Version:
2.0.0.1422

MD5:
e32582c54e6b48891b2e9ec5ce04d3b4

SHA-1:
b84690041ddada4d13238af56fb4ea3026990008

SHA-256:
51d662f429b92843510e5e18d27a13a8ecb90b0a94d242c9c1efb7b67f7cf11e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/27/2025 12:41:04 AM UTC  (today)

File size:
2 MB (2,088,000 bytes)

Product version:
2.0.0.1422

Copyright:
Copyright (C) 2014

Original file name:
TokenManager.rc

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vestcert\vestcert.exe

Digital Signature
Signed by:
yettiesoft co., Ltd.

Authority:
COMODO CA Limited

Valid from:
9/11/2015 9:00:00 AM

Valid to:
9/25/2017 8:59:59 AM

Subject:
CN="yettiesoft co., Ltd.", O="yettiesoft co., Ltd.", STREET="4, Hakdong-ro 4-gil", L=Gangnam-gu, S=Seoul, PostalCode=06110, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DFC7FBEF66AF49C99100BC6A92C6176C

File PE Metadata
Compilation timestamp:
9/18/2015 3:32:49 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x4FC000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, D0, 1C, 00, 2D, 20, 3A, 4F, 05, 05, 17, 3A, 4F, 05, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 8E, A9, 01, 5E, 68, EA, E3, 1C, 21, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 51, 6B, 67, 1A, 45, 12, 3A, 87, AC, 17, 5A, 6B, 72, 68, 34, 70...
 
[+]

Entropy:
7.3861

Code size:
270 KB (276,480 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VestCert Client

Command:
C:\Program Files\vestcert\vestcert.exe


Scan vestcert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.