home

vnptca_p11_v6_certd.exe

certreg Application

MINH THONG CARD SOLUTIONS CO LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘VNPT-CA_ePass1000Auto’.
Publisher:
VNPT Certification Authority  (signed by MINH THONG CARD SOLUTIONS CO LTD)

Product:
certreg Application

Description:
vnptca_p11_v6_certd.exe

Version:
1, 4, 15, 523

MD5:
da17cea89972b4fbf461aec9a46797af

SHA-1:
e6258b606f32f8edfc669f228dc866fc061c17e9

SHA-256:
c6b15e3c5c3e7854996f0c625e888ffb42a67a5ef46e5fad50b8f3e45b524670

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:45:52 AM UTC  (today)

File size:
123 KB (125,984 bytes)

Product version:
1, 4, 15, 523

Copyright:
Copyright (C) 2014 VNPT Certification Authority

Original file name:
vnptca_p11_v6_certd.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\vnpt certification authority\pki token manager v6\vnptca_p11_v6_certd.exe

Digital Signature
Signed by:
MINH THONG CARD SOLUTIONS CO LTD

Authority:
Thawte, Inc.

Subject:
CN=MINH THONG CARD SOLUTIONS CO LTD, OU=IT Department, O=MINH THONG CARD SOLUTIONS CO LTD, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3AC28E8920E4349154311A868D4FACA7

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x100DA

Entry point:
55, 8B, EC, 6A, FF, 68, 88, 2C, 41, 00, 68, 68, 03, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, 7C, 23, 41, 00, 59, 83, 0D, 00, AB, 41, 00, FF, 83, 0D, 04, AB, 41, 00, FF, FF, 15, 80, 23, 41, 00, 8B, 0D, F4, AA, 41, 00, 89, 08, FF, 15, 84, 23, 41, 00, 8B, 0D, F0, AA, 41, 00, 89, 08, A1, 88, 23, 41, 00, 8B, 00, A3, FC, AA, 41, 00, E8, 1C, 02, 00, 00, 39, 1D, D0, A0, 41, 00, 75, 0C, 68, 64, 03, 41, 00, FF, 15...
 
[+]

Entropy:
5.9160

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
VNPT-CA_ePass1000Auto

Command:
C:\Program Files\vnpt certification authority\pki token manager v6\vnptca_p11_v6_certd.exe


Scan vnptca_p11_v6_certd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.