home

iYogiSupportDock.exe

iYogiSupportDock Module

iYogi Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘iYogi SupportDock’.
Publisher:
iYogi Inc.  (signed and verified)

Product:
iYogiSupportDock Module

Version:
4, 0, 0, 512

MD5:
444b643512b0d2faa248fd7e0b1ec992

SHA-1:
6441d2ee0eecfbe8170c38b00b67efc2a957dcee

SHA-256:
4754085afc1935b8a6ed67c6527b7266f7b29981dd559a5c1bf7791b8ed08a79

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 1:05:03 AM UTC  (today)

File size:
1 MB (1,066,224 bytes)

Product version:
4, 0, 0, 512

Copyright:
Copyright 2008

Original file name:
iYogiSupportDock.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\iyogi supportdock\iyogisupportdock.exe

Digital Signature
Signed by:
iYogi Inc.

Authority:
VeriSign, Inc.

Valid from:
5/4/2009 5:00:00 PM

Valid to:
4/13/2012 4:59:59 PM

Subject:
CN=iYogi Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=iYogi Inc., L=New York, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5300351A9D31BA6C9A5ABF370077E8F8

File PE Metadata
Compilation timestamp:
6/28/2010 5:29:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:JhpRSKab2OCPbXf0uZ5cjpam7AZBrkRAxwMJU9RbLXWHJUH7LmrV:/pRSKSyPbsi5GQm7UBrxwMe3oaAV

Entry address:
0x6C421

Entry point:
6A, 60, 68, C8, A0, 48, 00, E8, D3, C3, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 27, E2, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 4C, 02, 48, 00, 8B, 4E, 10, 89, 0D, 24, B9, 49, 00, 8B, 46, 04, A3, 30, B9, 49, 00, 8B, 56, 08, 89, 15, 34, B9, 49, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 28, B9, 49, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 28, B9, 49, 00, C1, E0, 08, 03, C2, A3, 2C, B9, 49, 00, 33, F6, 56, 8B, 3D, EC, 02, 48, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.4124

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
508 KB (520,192 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
iYogi SupportDock

Command:
C:\Program Files\iyogi supportdock\iyogisupportdock.exe


Scan iYogiSupportDock.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.