home

iYogiSupportDock.exe

iYogiSupportDock Module

iYogi Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘iYogi SupportDock’.
Publisher:
iYogi Inc.  (signed and verified)

Product:
iYogiSupportDock Module

Version:
4, 0, 0, 505

MD5:
3c5e5bc6cb999f967d57d730ec618f45

SHA-1:
1d2954d27eaa98690e97b44a17e9d9aef9968f51

SHA-256:
c87ffd248a245a4644298487fc05c944bf6758c5c7f953a35557bd49c215b14f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:02:57 PM UTC  (today)

File size:
1 MB (1,066,224 bytes)

Product version:
4, 0, 0, 505

Copyright:
Copyright 2008

Original file name:
iYogiSupportDock.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\iyogi supportdock\iyogisupportdock.exe

Digital Signature
Signed by:
iYogi Inc.

Authority:
VeriSign, Inc.

Valid from:
5/4/2009 7:00:00 PM

Valid to:
4/13/2012 6:59:59 PM

Subject:
CN=iYogi Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=iYogi Inc., L=New York, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5300351A9D31BA6C9A5ABF370077E8F8

File PE Metadata
Compilation timestamp:
6/11/2010 10:31:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:GhpRSKab2OCPbXf0uZ5cjpam7AZBrkRAxwMJU9RbLXWHJUH7LmrU:IpRSKSyPbsi5GQm7UBrxwMe3oaAU

Entry address:
0x6C421

Entry point:
6A, 60, 68, C8, A0, 48, 00, E8, D3, C3, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 27, E2, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 4C, 02, 48, 00, 8B, 4E, 10, 89, 0D, 24, B9, 49, 00, 8B, 46, 04, A3, 30, B9, 49, 00, 8B, 56, 08, 89, 15, 34, B9, 49, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 28, B9, 49, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 28, B9, 49, 00, C1, E0, 08, 03, C2, A3, 2C, B9, 49, 00, 33, F6, 56, 8B, 3D, EC, 02, 48, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.4124

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
508 KB (520,192 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
iYogi SupportDock

Command:
"C:\Program Files\iyogi supportdock\iyogisupportdock.exe"


Scan iYogiSupportDock.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.