home

YSIAgent.exe

Yousendit

YOUSENDIT,INC.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Yousendit Sync Agent’. This is installed with YouSendIt Desktop App.
Publisher:
YouSendit Inc.  (signed by YOUSENDIT,INC.)

Product:
Yousendit

Description:
Yousendit Agent

Version:
1.6.1006.0

MD5:
d0668c9020add933554781f07dcf22dc

SHA-1:
592a7f8c9f1944e10941a74333ec4872d88ae4c4

SHA-256:
4f0bec876e0034ec775ff313638ae1bcf8776f719b66d23d6923aefb55c0e640

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:46:57 PM UTC  (today)

File size:
3 MB (3,149,904 bytes)

Product version:
1.6.1006.0

Copyright:
Yousendit Inc. (c). All rights reserved.

Original file name:
YSIAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\yousendit desktop app\ysiagent.exe

Digital Signature
Signed by:
YOUSENDIT,INC.

Authority:
VeriSign, Inc.

Valid from:
2/17/2011 7:00:00 PM

Valid to:
2/17/2013 6:59:59 PM

Subject:
CN="YOUSENDIT,INC.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=OPS, O="YOUSENDIT,INC.", L=Campbell, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
68E448066E3376E6E36ED0CE1604C36E

File PE Metadata
Compilation timestamp:
11/22/2011 5:43:29 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:gq/FBNb67nVQfdrDcEi7zvUk0Fhr3psY64/m5gLmoI0v3mtILKXUWXfPfL827iAW:gqdBNQVID+Uk0mJvtoMSkXfI2Q

Entry address:
0x117046

Entry point:
E8, 52, CA, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 83, 65, FC, 00, 56, 8B, 75, 08, 85, F6, 75, 16, E8, 69, 16, 00, 00, 6A, 16, 5E, 89, 30, E8, 46, 63, 00, 00, 8B, C6, E9, 0C, 02, 00, 00, 6A, 24, 68, FF, 00, 00, 00, 56, E8, 99, BD, FF, FF, 8B, 45, 0C, 83, C4, 0C, 85, C0, 74, D3, 8B, 08, 8B, 40, 04, 89, 4D, F0, 89, 45, F4, 83, F8, FF, 7F, 16, 7C, 08, 81, F9, 40, 57, FF, FF, 73, 0C, E8, 22, 16, 00, 00, 6A, 16, 5E, 89, 30, EB, BC, 83, F8, 07, 7C, 0A, 7F, ED, 81, F9, CF, 26, 41, 93, 77, E5...
 
[+]

Entropy:
6.3517

Code size:
2 MB (2,143,232 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Yousendit Sync Agent

Command:
"C:\Program Files\yousendit desktop app\ysiagent.exe"


The file YSIAgent.exe has been discovered within the following program.

YouSendIt Desktop App  by YouSendIt
Publisher's description - “Drag and drop files and folders to Hightail from your Finder. All changes are instantly updated so you can share the latest version with anyone. Easily manage and share files and folders right from your desktop.”
kb.yousendit.com/article.aspx?article=313326&p=12705
23% remove it
 
Powered by Should I Remove It?

Scan YSIAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.